%% You should probably cite draft-ietf-openpgp-pqc-17 instead of this revision. @techreport{ietf-openpgp-pqc-16, number = {draft-ietf-openpgp-pqc-16}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-ietf-openpgp-pqc/16/}, author = {Stavros Kousidis and Johannes Roth and Falko Strenzke and Aron Wussler}, title = {{Post-Quantum Cryptography in OpenPGP}}, pagetotal = 271, year = 2026, month = jan, day = 6, abstract = {This document defines a post-quantum public key algorithm extension for the OpenPGP protocol, extending {[}RFC9580{]}. Given the generally assumed threat of a cryptographically relevant quantum computer, this extension provides a basis for long-term secure OpenPGP signatures and ciphertexts. Specifically, it defines composite public key encryption based on ML-KEM (formerly CRYSTALS-Kyber), composite public key signatures based on ML-DSA (formerly CRYSTALS-Dilithium), both in combination with elliptic curve cryptography, and SLH-DSA (formerly SPHINCS+) as a standalone public key signature scheme.}, }