Skip to content

ml-kem: PKCS#8 support #54

@tarcieri

Description

@tarcieri

This draft appears to have the relevant information to implement PKCS#8 support: https://www.ietf.org/archive/id/draft-ietf-lamps-kyber-certificates-03.html

It should work in conjunction with the OIDs from here: https://csrc.nist.gov/projects/computer-security-objects-register/algorithm-registration

kems OBJECT IDENTIFIER ::= { nistAlgorithms 4 }

[...]

id-alg-ml-kem-512 OBJECT IDENTIFIER ::= { kems 1 }

id-alg-ml-kem-768 OBJECT IDENTIFIER ::= { kems 2}

id-alg-ml-kem-1024 OBJECT IDENTIFIER ::= { kems 3}

Note: the nistAlgorithms OID is 2.16.840.1.101.3.4.

The pkcs8 crate should be sufficient for decoding/encoding PKCS#8 documents, although it would be nice to have some test vectors.

Metadata

Metadata

Labels

No labels
No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions