The IESG has approved the following document: - 'Use of Hybrid Public Key Encryption (HPKE) with JSON Web Encryption (JWE)' (draft-ietf-jose-hpke-encrypt-22.txt) as Proposed Standard
This document is the product of the Javascript Object Signing and Encryption Working Group. The IESG contact persons are Christopher Inacio and Deb Cooley. A URL of this Internet-Draft is: https://datatracker.ietf.org/doc/draft-ietf-jose-hpke-encrypt/ Technical Summary This specification defines how to use Hybrid Public Key Encryption (HPKE) with JSON Web Encryption (JWE). HPKE enables public key encryption of arbitrary-sized plaintexts to a recipient's public key, and provides security against adaptive chosen ciphertext attacks. This specification chooses a specific subset of the HPKE features to use with JWE. This specification updates RFC 7516 (JWE) to enable use of Integrated Encryption as a Key Management Mode. Working Group Summary The document has received reviews on mailing lists and GitHub from a range of individuals. Thorough review was prompted by a first WGLC in June 2025, which did not pass but led to a number of issues being raised and rectified. Broad agreement was reached during the second WGLC in February 2026. There has been suggestion to include PQC algorithms in this draft, but broad agreement to do that in a separate draft. During IETF Last Call, it became apparent that there was a disconnect with respect to algorithms that are currently specified in the IANA JOSE registries. This second run through the process is to remove HPKE-4-KE and HPKE-6-KE as options in the Key Encryption mode. This is the only change! Document Quality There is mailing list discussion which highlights multiple interoperable implementations. No external reviews, or other specialized reviews were required. The original RFC9180 (HPKE) published by CFRG is being reworked, the draft-ietf-hpke-hpke is in AD review. COSE has a parallel draft which has been submitted to the IESG for publication. Personnel The Document Shepherd for this document is Michael P. The Responsible Area Director is Deb Cooley. _______________________________________________ IETF-Announce mailing list -- [email protected] To unsubscribe send an email to [email protected]
