In the example above, e'X-WING' would be a "raw kem". As you noted, it wouldn't be helpful to LAKE otherwise. In that style of EDN, the COSE Algorithm is still TBD under the hood.
AKP algorithms are not attached to the KTY, except that they must be unique and present in https://www.iana.org/assignments/cose/cose.xhtml#algorithms If people wanted to, they could start testing this right now using AKP and algorithm identifiers in the private use range (assuming the private algorithm tells you enough about how to use pub and priv parameters). However, I can imagine not wanting to use the private use range, because at some point you would have to update the code points to match any registered kems. The discussion here seems to boil down to: 1. How to identify the algorithms that LAKE needs in COSE? 2. How can COSE Keys that support the algorithms be represented? Unless I missed something, private-use algorithms and AKP can answer both of these, but it seems like LAKE might prefer that KEM algorithms be properly registered before relying on them. OS On Sun, Mar 8, 2026 at 1:39 AM Ilari Liusvaara <[email protected]> wrote: > On Sat, Mar 07, 2026 at 12:04:07PM -0600, Orie wrote: > > I meant in the sense that if you see an AKP inside a CWT / COSE Sign1, > the > > algorithm on the key would be signed over. > > The AKP thumbprint for a COSE Key also includes the algorithm. > > > > Hypothetical Hybrid: > > > > { /CCS/ > > 2 : "42-50-31-FF-EF-37-32-39", /sub/ > > 8 : { /cnf/ > > 1 : { /COSE_Key/ > > 1 : 1, /kty AKP/ > > 2 : h'00', /kid/ > > *3 : e'X-WING', /alg X-WING/* > > -1 : h'b1a3e89...980d2db83a' /public key/ > > } > > } > > } > > What is that "X-Wing"? > > - If it is COSE Direct Key Agreement, it is not what LAKE uses (as LAKE > would use raw X-Wing). > > - If it is something else, it makes no sense in COSE, except as reserved > codepoint (which COSE does not currently have, but JOSE does). > > And using reserved codepoints in AKP seems rather dubious. > > > > -Ilari > > _______________________________________________ > jose mailing list -- [email protected] > To unsubscribe send an email to [email protected] >
_______________________________________________ jose mailing list -- [email protected] To unsubscribe send an email to [email protected]
