Document:
Add KEM APIs to PKCS #11

Draft (A preliminary unapproved sketch, outline, or version.)

Details

Submitted By Mr. Robert Relyea on 2023-01-31 5:12 pm UTC

Publication Type

None at this time.

Group / Folder

OASIS PKCS 11 TC / Working Drafts

Modified by

Not modified.

Copy

This document is not a copy.

Technical Contact

None at this time.

Download Count

71

Download Agreement

None at this time.

Description

All the new Post Quantum Key Exchange algorithms are cast in terms of KEMs. KEMs are generic Key Exchange APIs which can support traditional wrapping mechanisms as well as KEA style mechanisms, so protocols that move to KEM based APIs can build generic protocols that can accept any Key Exchange API.

This just defines the new APIs. The mechanisms that use it will be defined in a separate proposal. I plan on creating proposals for Kyber as well as existing KEA algorithms (CKM_RSA_PKCS, CKM_RSA_X509, CKM_ECDH_DERIVE, CKM_DH_DERIVE, etc) as well.