Hi all,

Daniel Huigens (Web Crypto API editor) here. Filip pointed me to this
issue of the key type for ML-KEM in JWKs.

When writing the modern algorithms for Web Crypto draft [1], I also
noticed that Web Crypto can't know the correct algorithm to indicate
when exporting an ML-KEM key, so I understand the issue with AKP.
However, reusing `crv` also looks a bit strange, IMHO.

How about we define a new key type, e.g. `KEM`, as follows:

  {
    kty: "KEM",
    kem: "ML-KEM-512",
    pub: ...,
    priv: ...,
    alg: "ML-KEM-512+AES128KW" // optional
  }

I'll also try to join the meeting in ~2h. I might have to leave early,
though.

Best,
Daniel

[1]: https://twiss.github.io/webcrypto-modern-algos/

_______________________________________________
jose mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to