[openpgp] Re: I-D Action: draft-ietf-openpgp-nist-bp-comp- 04.txt

This updated version of draft-ietf-openpgp-nist-bp-comp-04 fixes a
number of internal and external reference inconsistencies of the draft
and adds some clarifications, but makes no actual changes to the spec.
For convenience, I post here the list of changes:
Added the requirement to perform full public key validation on received
EC points in the ECDH-KEM operations, and a corresponding security
consideration regarding invalid-curve attacks.

Fixed errors in the IANA table: ECDH secret key length for P-521 (66
instead of 64 octets), ML-KEM-1024 public key labels, and a wrong table
reference for the ECDH secret key format.

Corrected the description of the placement of the symmetric algorithm
identifier in v3 PKESK packets to match the wire format and [RFC9980].

Fixed the mislabeled reference to FIPS 186-5 (previously labeled as SP
800-186) and cite FIPS 186-5 Appendix A for EC key generation.

Decryption procedure: clarified that ecdhPublicKey is taken from the
public key part of the own secret key packet.

Removed a stale editor's note above the IANA table.

Update reference I-D.draft-ietf-openpgp-pqc to RFC 9980

Change email address of one author.
Best regards,
Falko
On Tue, 2026-08-11 at 23:00 -0700, [email protected] wrote:
> 
> 

Internet-Draft draft-ietf-openpgp-nist-bp-comp-04.txt is now available.
It is a work item of the Open Specification for Pretty Good Privacy
(OPENPGP) WG of the IETF.
> 

Title: PQ/T Composite Schemes for OpenPGP using NIST and Brainpool
Elliptic Curve Domain Parameters Authors: Quynh Dang Stephan Ehlen
Stavros Kousidis Johannes Roth Falko Strenzke Name: draft-ietf-openpgp-
nist-bp-comp-04.txt Pages: 93 Dates: 2026-08-11
> 

Abstract:
> 

This document defines PQ/T ("post-quantum/traditional") composite
schemes based on ML-KEM and ML-DSA combined with ECDH and ECDSA
algorithms using the NIST and Brainpool domain parameters for the
OpenPGP protocol [RFC9580], and as such extends [RFC9980].
> 

The IETF datatracker status page for this Internet-Draft
is:https://datatracker.ietf.org/doc/draft-ietf-openpgp-nist-bp-comp/
> 

There is also an HTML version available
at:https://www.ietf.org/archive/id/draft-ietf-openpgp-nist-bp-comp-04.html
> 

A diff from the previous version is available
at:https://author-tools.ietf.org/iddiff?url2=draft-ietf-openpgp-nist-bp-comp-04
> 

Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts
> 

> 



openpgp mailing list -- [email protected] unsubscribe send an email to
[email protected]



--
MTG AG  
Dr. Falko Strenzke

Phone: +49 6151 8000 24  
E-Mail: [[email protected]](mailto:[email protected])  
Web: mtg.de

MTG AG - Dolivostr. 11 - 64293 Darmstadt, Germany  
Commercial register: HRB 8901  
Register Court: Amtsgericht Darmstadt  
Management Board: Jürgen Ruf (CEO), Tamer Kemeröz  
Chairman of the Supervisory Board: Dr. Thomas Milde

This email may contain confidential and/or privileged information. If you are not the correct recipient or have received this email in error,  
please inform the sender immediately and delete this email.Unauthorised copying or distribution of this email is not permitted.

Data protection information: Privacy policy

_______________________________________________
openpgp mailing list -- [email protected]
To unsubscribe send an email to [email protected]