Document: draft-ietf-lamps-pq-composite-kem Title: Composite ML-KEM for use in X.509 Public Key Infrastructure Reviewer: Behcet Sarikaya Review result: Almost Ready
I am the assigned Gen-ART reviewer for this draft. The General Area Review Team (Gen-ART) reviews all IETF documents being processed by the IESG for the IETF Chair. Please treat these comments just like any other last call comments. For more information, please see the FAQ at <https://wiki.ietf.org/en/group/gen/GenArtFAQ>. Document: draft-ietf-lamps-pq-composite-kem-18 Reviewer: Behcet Sarikaya Review Date: 2026-07-27 IETF LC End Date: 2026-07-27 IESG Telechat date: Not scheduled for a telechat Summary: This document defines combinations of US NIST Module-Lattice-based Key Encapsulation Mechanism i.e. ML-KEM in hybrid with traditional algorithms RSA-OAEP, ECDH, X25519, and X448 Major issues: None Minor issues: Nits/editorial comments: Section 1 RSA vs RSA-OAEP is not explained at all expand at first use: PQC post quantum cryptography (PQC) in in this specification; this is discussed further PKIX-related Public Key Infrastructure X.509 Post-Quantum / Traditional (PQ/T) Hybrids combined idea seems to be central to this document this gives stronger algorithms since an attacker would need to break all of them simultaneously to compromise the protected data 1.1 pramater sets 2.2 KEM Encaps(pk) -> (ss, ct) "." missing? Added complete test vectors in Version -07 of this document contributing almost 60 pages 9. Security Considerations dual algorithm security In Section 10 there is 10. Operational Considerations calling for an Ops area review? _______________________________________________ Gen-art mailing list -- [email protected] To unsubscribe send an email to [email protected]
