LAMPS PQ PKI: ML-KEM and Composite KEM certificates — draft-ietf-lamps-kyber-certificates, draft-ietf-lamps-pq-composite-kem#
IETF 123 (Madrid) digest Program Adjacent pick Madrid · 19–25 July 2025
- Tier: Adjacent
- Why: The X.509/PKI plumbing for PQ. Composite KEM (classical + PQ in one cert) is the hedging strategy most enterprises will actually deploy first, mirroring the hybrid approach in TLS.
- What: Algorithm identifiers for ML-KEM in X.509 PKI, and a composite ML-KEM construction combining PQ and traditional KEMs in a single certificate. (from abstract only)
- How: Composite binds two algorithms so a certificate remains secure if either survives, easing migration where you can't yet trust PQ alone.
- Where applicable: General PKI; especially conservative environments that want PQ without abandoning classical assurance.