On Mon, Jun 10, 2024 at 02:42:06PM -0600, Brian Campbell wrote: > On Fri, Jun 7, 2024 at 3:08 PM Orie Steele <[email protected]> > wrote: > > > > enc or encapsulated key is an ephemeral public key for DHKems, but for PQ > > KEMs like ML-KEM, it is KEM ciphertext. > > > > I suggest reading RFC9180 (from memory this is the HPKE RFC, possible my > > memory is wrong) to get a feel for the HPKE Kem interface. > > > > Your memory is correct and it's a fair point. Reading it has been on my > todo list of things I probably won't get to anytime soon for a while now.
Reading RFC9180, regardless of the KEM type (e.g., DHKem, PQ or Hybrid), it calls enc: - "encapsulated key" (Sections 5 and 8.2). - "KEM encapsulated key" (Section 9.1.1). - "encapsulated KEM shared secret" (Sections 5.1.1 and 5.1.3). - "encapsulated value" (Section 5.1.3). -Ilari _______________________________________________ jose mailing list -- [email protected] To unsubscribe send an email to [email protected]
