Document changes urn:uuid:f7725ae3-52f4-500c-a3d8-64d36c4c99af 2026-03-14T09:16:34.439464+00:00 urn:datatracker-ietf-org:event:1128360 2026-03-09T18:23:33+00:00 2026-03-09T18:23:33+00:00 (System) IANA Action state changed to <b>RFC-Ed-Ack</b> from Waiting on RFC Editor changed_state irtf cfrg Stanislav V. Smyshlyaev active rfcedack ok-act idexists edit rfc-edit urn:datatracker-ietf-org:event:1128339 2026-03-09T17:04:31+00:00 2026-03-09T17:04:31+00:00 (System) IANA Action state changed to <b>Waiting on RFC Editor</b> from Waiting on Authors changed_state irtf cfrg Stanislav V. Smyshlyaev active rfcedack ok-act idexists edit rfc-edit urn:datatracker-ietf-org:event:1128200 2026-03-07T03:13:44+00:00 2026-03-07T03:13:44+00:00 (System) IANA Action state changed to <b>Waiting on Authors</b> from In Progress changed_state irtf cfrg Stanislav V. Smyshlyaev active rfcedack ok-act idexists edit rfc-edit urn:datatracker-ietf-org:event:1127821 2026-03-04T22:52:03.445831+00:00 2026-03-04T22:52:03.445831+00:00 Colin Perkins [Ballot comment]<br>RFC 5743 Section 2.1 statements will be added, so this should be ready for publication. added_comment irtf cfrg Stanislav V. Smyshlyaev active idexists irsgpoll urn:datatracker-ietf-org:event:1127820 2026-03-04T22:52:03.445704+00:00 2026-03-04T22:52:03.445704+00:00 Colin Perkins [Ballot Position Update] Position for Colin Perkins has been changed to No Objection from Not Ready changed_ballot_position irtf cfrg Stanislav V. Smyshlyaev active idexists irsgpoll urn:datatracker-ietf-org:event:1127686 2026-03-04T13:34:52.017015+00:00 2026-03-04T13:34:52.017015+00:00 (System) RFC Editor state changed to <b>EDIT</b> from AUTH changed_state irtf cfrg Stanislav V. Smyshlyaev active rfcedack ok-act idexists edit rfc-edit urn:datatracker-ietf-org:event:1127553 2026-03-03T22:04:52.337623+00:00 2026-03-03T22:04:52.337623+00:00 (System) RFC Editor state changed to <b>AUTH</b> from EDIT changed_state irtf cfrg Stanislav V. Smyshlyaev active rfcedack ok-act idexists edit rfc-edit urn:datatracker-ietf-org:event:1127552 2026-03-03T22:00:57.024481+00:00 2026-03-03T22:00:57.024481+00:00 (System) RFC Editor state changed to <b>EDIT</b> changed_state irtf cfrg Stanislav V. Smyshlyaev active rfcedack ok-act idexists edit rfc-edit urn:datatracker-ietf-org:event:1127513 2026-03-03T16:10:00+00:00 2026-03-03T16:10:00+00:00 (System) IANA Action state changed to <b>In Progress</b> changed_state irtf cfrg Stanislav V. Smyshlyaev active rfcedack ok-act idexists edit rfc-edit urn:datatracker-ietf-org:event:1127452 2026-03-03T08:32:14.507175+00:00 2026-03-03T08:32:14.507175+00:00 Colin Perkins [Ballot comment]<br>The draft looks to be missing the text required by RFC 5743 Section 2.1. These guidelines are especially important for CFRG drafts, since there's frequent confusion about their status as IRTF documents. Once those statements are added, I believe the draft will be ready for publication. added_comment irtf cfrg Stanislav V. Smyshlyaev active idexists irsgpoll urn:datatracker-ietf-org:event:1127451 2026-03-03T08:32:14.507079+00:00 2026-03-03T08:32:14.507079+00:00 Colin Perkins [Ballot Position Update] New position, Not Ready, has been recorded for Colin Perkins changed_ballot_position irtf cfrg Stanislav V. Smyshlyaev active idexists irsgpoll urn:datatracker-ietf-org:event:1127443 2026-03-03T06:45:17.118407+00:00 2026-03-03T06:45:17.118407+00:00 Dirk KUTSCHER IRTF state changed to <b>Sent to the RFC Editor</b> from Waiting for IRTF Chair changed_state irtf cfrg Stanislav V. Smyshlyaev active rfcedack ok-act idexists edit rfc-edit urn:datatracker-ietf-org:event:1127442 2026-03-03T06:45:17.073270+00:00 2026-03-03T06:45:17.073270+00:00 Dirk KUTSCHER Sent request for publication to the RFC Editor requested_publication irtf cfrg Stanislav V. Smyshlyaev active rfcedack ok-act idexists edit rfc-edit urn:datatracker-ietf-org:event:1127321 2026-03-02T23:48:09.481711+00:00 2026-03-02T23:48:09.481711+00:00 Michele Orrù New version available: <b>draft-irtf-cfrg-fiat-shamir-02.txt</b> new_revision irtf cfrg active idexists active This document describes how to construct a non-interactive proof via the Fiat–Shamir transformation, using a generic procedure that compiles an interactive proof into a non-interactive one by relying on a stateful duplex sponge object. The duplex sponge interface requires two methods: absorb and squeeze, which respectively read and write elements of a specified base type. The absorb operation incrementally updates the duplex sponge's internal state, while the squeeze operation produces variable-length, unpredictable outputs. This interface can be instantiated with different constructions based on permutation or compression functions. This specification also defines codecs to securely map prover messages into the duplex sponge domain, from the duplex sponge domain into verifier messages. It also establishes how the non-interactive argument string should be serialized. 02 urn:datatracker-ietf-org:event:1127320 2026-03-02T23:48:09.478115+00:00 2026-03-02T23:48:09.478115+00:00 (System) New version approved new_submission irtf cfrg active idexists active urn:datatracker-ietf-org:event:1127295 2026-03-02T23:42:33.150176+00:00 2026-03-02T23:42:33.150176+00:00 Richard Barnes New version available: <b>draft-irtf-cfrg-concrete-hybrid-kems-03.txt</b> new_revision irtf cfrg active idexists active PQ/T Hybrid Key Encapsulation Mechanisms (KEMs) combine "post- quantum" cryptographic algorithms, which are safe from attack by a quantum computer, with "traditional" algorithms, which are not. CFRG has developed a general framework for creating hybrid KEMs. In this document, we define concrete instantiations of this framework to illustrate certain properties of the framework and simplify implementors' choices. 03 urn:datatracker-ietf-org:event:1127294 2026-03-02T23:42:33.146323+00:00 2026-03-02T23:42:33.146323+00:00 (System) New version approved new_submission irtf cfrg active idexists active urn:datatracker-ietf-org:event:1127291 2026-03-02T23:41:10.748736+00:00 2026-03-02T23:41:10.748736+00:00 (System) Request for posting confirmation emailed to previous authors: Deirdre Connolly <durumcrustulum@gmail.com>, Richard Barnes <rlb@ipv.sx> new_submission irtf cfrg active idexists active urn:datatracker-ietf-org:event:1127290 2026-03-02T23:41:10.526642+00:00 2026-03-02T23:41:10.526642+00:00 Richard Barnes Uploaded new revision new_submission irtf cfrg active idexists active urn:datatracker-ietf-org:event:1127277 2026-03-02T23:35:05.945993+00:00 2026-03-02T23:35:05.945993+00:00 Deirdre Connolly New version available: <b>draft-irtf-cfrg-hybrid-kems-10.txt</b> new_revision irtf cfrg active idexists active This document defines generic constructions for hybrid Key Encapsulation Mechanisms (KEMs) based on combining a post-quantum (PQ) KEM with a traditional cryptographic component. Hybrid KEMs built using these constructions provide strong security properties as long as either of the underlying algorithms are secure. 10 urn:datatracker-ietf-org:event:1127276 2026-03-02T23:35:05.942237+00:00 2026-03-02T23:35:05.942237+00:00 Deirdre Connolly New version approved new_submission irtf cfrg active idexists active urn:datatracker-ietf-org:event:1127274 2026-03-02T23:34:21.897460+00:00 2026-03-02T23:34:21.897460+00:00 (System) Request for posting confirmation emailed to previous authors: Deirdre Connolly <durumcrustulum@gmail.com>, Paul Grubbs <paulgrubbs12@gmail.com>, Richard Barnes <rlb@ipv.sx> new_submission irtf cfrg active idexists active urn:datatracker-ietf-org:event:1127273 2026-03-02T23:34:21.611671+00:00 2026-03-02T23:34:21.611671+00:00 Deirdre Connolly Uploaded new revision new_submission irtf cfrg active idexists active urn:datatracker-ietf-org:event:1127128 2026-03-02T22:20:58.507276+00:00 2026-03-02T22:20:58.507276+00:00 Michele Orrù New version available: <b>draft-irtf-cfrg-sigma-protocols-02.txt</b> new_revision irtf cfrg active idexists active A Sigma Protocol is an interactive zero-knowledge proof of knowledge that allows a prover to convince a verifier of the validity of a statement. It satisfies the properties of completeness, soundness, and zero-knowledge, as described in Section 3. This document describes Sigma Protocols for proving knowledge of pre- images of linear maps in prime-order elliptic curve groups. Examples include zero-knowledge proofs for discrete logarithm relations, ElGamal encryptions, Pedersen commitments, and range proofs. 02 urn:datatracker-ietf-org:event:1127127 2026-03-02T22:20:58.503780+00:00 2026-03-02T22:20:58.503780+00:00 Cathie Yun New version approved new_submission irtf cfrg active idexists active urn:datatracker-ietf-org:event:1127118 2026-03-02T22:15:26.690679+00:00 2026-03-02T22:15:26.690679+00:00 (System) Request for posting confirmation emailed to previous authors: Cathie Yun <cathieyun@gmail.com>, Michele Orru <m@orru.net> new_submission irtf cfrg active idexists active urn:datatracker-ietf-org:event:1127117 2026-03-02T22:15:26.466945+00:00 2026-03-02T22:15:26.466945+00:00 Michele Orrù Uploaded new revision new_submission irtf cfrg active idexists active urn:datatracker-ietf-org:event:1127116 2026-03-02T22:15:20.797516+00:00 2026-03-02T22:15:20.797516+00:00 (System) Request for posting confirmation emailed to previous authors: Michele Orru <m@orru.net> new_submission irtf cfrg active idexists active urn:datatracker-ietf-org:event:1127115 2026-03-02T22:15:20.586295+00:00 2026-03-02T22:15:20.586295+00:00 Michele Orrù Uploaded new revision new_submission irtf cfrg active idexists active urn:datatracker-ietf-org:event:1126924 2026-03-02T20:28:00.952508+00:00 2026-03-02T20:28:00.952508+00:00 Deirdre Connolly New version available: <b>draft-connolly-cfrg-xwing-kem-10.txt</b> new_revision ise none active idexists receive This memo defines X-Wing, a general-purpose post-quantum/traditional hybrid key encapsulation mechanism (PQ/T KEM) built on X25519 and ML- KEM-768. 10 urn:datatracker-ietf-org:event:1126923 2026-03-02T20:28:00.948982+00:00 2026-03-02T20:28:00.948982+00:00 Deirdre Connolly New version approved new_submission ise none active idexists receive urn:datatracker-ietf-org:event:1126922 2026-03-02T20:27:31.969937+00:00 2026-03-02T20:27:31.969937+00:00 (System) Request for posting confirmation emailed to previous authors: Bas Westerbaan <bas@cloudflare.com>, Deirdre Connolly <durumcrustulum@gmail.com>, Peter Schwabe <peter@cryptojedi.org> new_submission ise none active idexists receive urn:datatracker-ietf-org:event:1126921 2026-03-02T20:27:31.731915+00:00 2026-03-02T20:27:31.731915+00:00 Deirdre Connolly Uploaded new revision new_submission ise none active idexists receive urn:datatracker-ietf-org:event:1126911 2026-03-02T20:20:39.202273+00:00 2026-03-02T20:20:39.202273+00:00 Deirdre Connolly New version available: <b>draft-irtf-cfrg-hybrid-kems-09.txt</b> new_revision irtf cfrg active idexists active This document defines generic constructions for hybrid Key Encapsulation Mechanisms (KEMs) based on combining a post-quantum (PQ) KEM with a traditional cryptographic component. Hybrid KEMs built using these constructions provide strong security properties as long as either of the underlying algorithms are secure. 10 urn:datatracker-ietf-org:event:1126910 2026-03-02T20:20:39.189131+00:00 2026-03-02T20:20:39.189131+00:00 Deirdre Connolly New version approved new_submission irtf cfrg active idexists active urn:datatracker-ietf-org:event:1126909 2026-03-02T20:20:29.983477+00:00 2026-03-02T20:20:29.983477+00:00 (System) Request for posting confirmation emailed to previous authors: Deirdre Connolly <durumcrustulum@gmail.com>, Paul Grubbs <paulgrubbs12@gmail.com>, Richard Barnes <rlb@ipv.sx> new_submission irtf cfrg active idexists active urn:datatracker-ietf-org:event:1126908 2026-03-02T20:20:29.716358+00:00 2026-03-02T20:20:29.716358+00:00 Deirdre Connolly Uploaded new revision new_submission irtf cfrg active idexists active urn:datatracker-ietf-org:event:1126654 2026-03-02T17:14:14.464917+00:00 2026-03-02T17:14:14.464917+00:00 Michio Honda New version available: <b>draft-ma-cfrg-looma-00.txt</b> new_revision none active idexists Post-quantum (PQ) authentication in TLS 1.3 can add tens to hundreds of microseconds of handshake processing time. In datacenters, where mutual authentication is mandatory, this authentication cost becomes a dominant contributor to end-to-end request latency, particularly when connections are short-lived and handshake rates are high. This document specifies Looma, an online/offline authentication architecture integrated into the TLS 1.3 handshake. Looma replaces the on-path, per-handshake PQ signature with a fast, one-time signature over the TLS transcript and moves expensive work (including the multi-use PQ signature) to an asynchronous background plane. Looma includes a fallback strategy to preserve correct authentication when the verifier does not have the peer's one-time verification key cached. 00 urn:datatracker-ietf-org:event:1126653 2026-03-02T17:14:14.461628+00:00 2026-03-02T17:14:14.461628+00:00 (System) New version approved new_submission none active idexists urn:datatracker-ietf-org:event:1126652 2026-03-02T17:01:54.505841+00:00 2026-03-02T17:01:54.505841+00:00 Michio Honda Request for posting confirmation emailed to submitter and authors: Colin Perkins <csp@csperkins.org>, Michio Honda <michio.honda@ed.ac.uk>, Xinshu Ma <x.ma@ed.ac.uk> new_submission none active idexists urn:datatracker-ietf-org:event:1126651 2026-03-02T17:01:53.120547+00:00 2026-03-02T17:01:53.120547+00:00 Michio Honda Uploaded new revision new_submission none active idexists urn:datatracker-ietf-org:event:1126492 2026-03-02T15:53:38.427408+00:00 2026-03-02T15:53:38.427408+00:00 Alicja Kario New version available: <b>draft-irtf-cfrg-rsa-guidance-07.txt</b> new_revision irtf cfrg Stanislav V. Smyshlyaev active idexists irsgpoll This document specifies additions and amendments to RFC 8017. Specifically, it provides guidance to implementers of the standard to protect against side-channel attacks. It also deprecates the RSAES- PKCS-v1_5 encryption scheme, and provides an alternative depadding algorithm that protects against side-channel attacks raising from users of vulnerable APIs. The purpose of this specification is to increase security of RSA implementations. 07 urn:datatracker-ietf-org:event:1126491 2026-03-02T15:53:38.424105+00:00 2026-03-02T15:53:38.424105+00:00 Alicja Kario New version accepted (logged-in submitter: Alicja Kario) new_submission irtf cfrg Stanislav V. Smyshlyaev active idexists irsgpoll urn:datatracker-ietf-org:event:1126490 2026-03-02T15:53:38.373840+00:00 2026-03-02T15:53:38.373840+00:00 Alicja Kario Uploaded new revision new_submission irtf cfrg Stanislav V. Smyshlyaev active idexists irsgpoll urn:datatracker-ietf-org:event:1126364 2026-03-02T14:22:42.607271+00:00 2026-03-02T14:22:42.607271+00:00 Dirk KUTSCHER Created IRSG Ballot created_ballot irtf cfrg Stanislav V. Smyshlyaev active idexists irsgpoll urn:datatracker-ietf-org:event:1126363 2026-03-02T14:22:26.348211+00:00 2026-03-02T14:22:26.348211+00:00 Dirk KUTSCHER IRTF state changed to <b>In IRSG Poll</b> from Awaiting IRSG Reviews changed_state irtf cfrg Stanislav V. Smyshlyaev active idexists irsgpoll urn:datatracker-ietf-org:event:1125782 2026-03-01T22:28:47.572738+00:00 2026-03-01T22:28:47.572738+00:00 Lucas Prabel New version available: <b>draft-prabel-cfrg-suf-hybrid-sigs-01.txt</b> new_revision none active idexists This document proposes a generic hybrid signature construction that achieves strong unforgeability under chosen-message attacks (SUF- CMA), provided that the second component (typically the post-quantum one) is SUF-CMA secure. The proposed hybrid construction differs from the current composite hybrid approach by binding the second (post-quantum) signature to the concatenation of the message and the first (traditional) signature. This approach ensures that hybrid signatures maintain SUF-CMA security even when the first component only provides EUF-CMA security. In addition to this general hybrid construction, this document also proposes a non-black-box variant specifically tailored for schemes built from the Fiat-Shamir paradigm. This variant is SUF-CMA secure as long as only one component is SUF-CMA secure. 01 urn:datatracker-ietf-org:event:1125781 2026-03-01T22:28:47.569177+00:00 2026-03-01T22:28:47.569177+00:00 (System) New version approved new_submission none active idexists urn:datatracker-ietf-org:event:1125780 2026-03-01T22:25:53.762389+00:00 2026-03-01T22:25:53.762389+00:00 (System) Request for posting confirmation emailed to previous authors: "Tirumaleswar Reddy.K" <kondtir@gmail.com>, Guilin WANG <Wang.Guilin@huawei.com>, John Mattsson <john.mattsson@ericsson.com>, Jonas Janneck <jonas.janneck@rub.de>, Lucas Prabel <lucas.prabel@huawei.com> new_submission none active idexists urn:datatracker-ietf-org:event:1125779 2026-03-01T22:25:53.446988+00:00 2026-03-01T22:25:53.446988+00:00 Lucas Prabel Uploaded new revision new_submission none active idexists