Sep 7, 2025 · Design considerations from draft-stebila-tls-hybrid-design-00 and draft-stebila-tls-hybrid-design-01 are moved to the appendix.¶ A single construction is given in the main body.¶

This is an older version of an Internet-Draft whose latest revision state is "Replaced".

Nov 17, 2025 · This draft defines three hybrid key agreements for TLS 1.3: X25519MLKEM768, SecP256r1MLKEM768, and SecP384r1MLKEM1024 which combine a post-quantum KEM …

This document specifies how to form a hybrid key exchange with CurveSM2 and MLKEM in Transport Layer Security (TLS) protocol version 1.3. Related IETF drafts include [hybrid] and …

Apr 5, 2024 · This document provides a construction for hybrid key exchange in the Transport Layer Security (TLS) protocol version 1.3. ¶ Discussion of this work is encouraged to happen …

Considering other IETF standards, there is work on post-quantum preshared keys in IKEv2 [IKE-PSK] and a framework for hybrid key exchange in IKEv2 [IKE-HYBRID]. The XMSS hash …

Abstract Hybrid key exchange refers to using multiple key exchange algorithms simultaneously and combining the result with the goal of providing security even if all but one of the …

This draft defines three hybrid key agreements for TLS 1.3: X25519MLKEM768, SecP256r1MLKEM768, and SecP384r1MLKEM1024 which combine a post-quantum KEM …

Nov 5, 2025 · Like other modern websites, the IETF Datatracker relies on Javascript. Please enable Javascript for full functionality. Hybrid key exchange in TLS 1.3 draft-ietf-tls-hybrid …

multiple types of keying material in TLS is the use of pre-shared keys, especially the recent TLS working group document on including an external pre-shared key [EXTERN-PSK]. Considering …