I-D Action: draft-pq-sectunnel-00.txt

Internet-Draft draft-pq-sectunnel-00.txt is now available.

   Title:   PQ-SecTunnel Protocol Specification
   Authors: Kai Fan
            Ruidan Su
            Yi Wang
            Jiaqing Cheng
   Name:    draft-pq-sectunnel-00.txt
   Pages:   25
   Dates:   2026-08-13

Abstract:

   This document specifies the PQ-SecTunnel protocol, a UDP-based
   quantum-resistant IP tunnel derived from the WireGuard architecture.
   Session keys are established by a three-message Noise_IKpsk1kem
   handshake that replaces Diffie-Hellman with dual Key Encapsulation
   Mechanism (KEM) operations (static and ephemeral).  Authentication is
   implicit: peers prove possession of long-term KEM private keys
   through interlocking encapsulations rather than signing the
   transcript.  The protocol is organized as a multi-suite framework.
   Implementations MAY select ML-KEM-512 or ML-KEM-768 independently for
   the static and ephemeral KEM roles.  This document RECOMMENDS the
   profile static=ML-KEM-512, ephemeral=ML-KEM-768, AEAD=SM4-GCM,
   Hash=SM3 (denoted mlkem512-mlkem768-sm4gcm-sm3).  Other ML-KEM
   combinations with the same AEAD/Hash, and additional KEM families
   such as Aigis-enc (integration ongoing), are optional profiles.

The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-pq-sectunnel/

There is also an HTML version available at:
https://www.ietf.org/archive/id/draft-pq-sectunnel-00.html

Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts


_______________________________________________
I-D-Announce mailing list -- [email protected]
To unsubscribe send an email to [email protected]