On Fri, Mar 06, 2026 at 06:01:25PM +0000, John Mattsson wrote:
> 
> Ilari Liusvaara wrote:
> >From quick read, it seems to me that what is needed
> >is a key format for PQ keys
> 
> EDHOC would need on-the-wire formats for ek, and c, and these are
> already defined in FIPS 203

Would that be sufficient? Section 3.7. of rfc9528 seems to use
(modified) COSE_Key structure. And that requires codepoints for the
keys.

(The construction only being defined for EC2 and OKP is unlikely to
become a problem, as any modern KEM design should be using OKP. This
holds for ML-KEM and the CFRG hybrids.)

FIPS 203 does not register the codepoints, and I am not aware of any
draft seeking to do so. Furthermore, there seems to be opposition for
it. AKP keys are not suitable for EDHOC, because EDHOC does not use
COSE algorithms.




-Ilari

_______________________________________________
jose mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to