I-D Action: draft-li-sidrops-pqrpki-00.txt

Internet-Draft draft-li-sidrops-pqrpki-00.txt is now available.

   Title:   Post-Quantum Authentication for the Resource Public Key Infrastructure
   Authors: Weitong Li
            Taejoong Chung
   Name:    draft-li-sidrops-pqrpki-00.txt
   Pages:   44
   Dates:   2026-07-20

Abstract:

   The Resource Public Key Infrastructure (RPKI) authenticates Internet
   number resource holdings and routing authorizations with classical
   (RSA) signatures.  Because every relying party repeatedly fetches and
   validates the complete global repository, replacing each per-object
   signature with a larger post-quantum signature would multiply
   repository size and validation cost.

   This document specifies pqRPKI, an additive post-quantum
   authentication layer for the RPKI.  Instead of re-signing every
   object, each Certification Authority (CA) authenticates its complete
   published state with a single post-quantum signature over a Merkle
   Tree Ladder whose leaf order and leaf commitments are taken directly
   from the CA's existing Manifest.  A new signed object, the pqRPKI
   Ladder Object (PQLO), carries the ladder root, the Manifest binding,
   an optional aggregate binding the CA's children, and -- for a Trust
   Anchor or a CA holding its own post-quantum key -- the post-quantum
   signature; a CA operated by its parent is authenticated through the
   parent's aggregate instead.  Existing RPKI objects are unchanged and
   legacy relying parties are unaffected by the PQLO, which no Manifest
   lists, while upgraded relying parties validate the same repository
   contents with post-quantum authentication.  This document updates RFC
   9286 to permit index-preserving placeholder Manifest entries and the
   pqRPKI file-name extension.

The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-li-sidrops-pqrpki/

There is also an HTML version available at:
https://www.ietf.org/archive/id/draft-li-sidrops-pqrpki-00.html

Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts


_______________________________________________
I-D-Announce mailing list -- [email protected]
To unsubscribe send an email to [email protected]