LAMPS M. Ounsworth Internet-Draft J. Gray Intended status: Standards Track Entrust Expires: 6 June 2026 M. Pala OpenCA Labs J. Klaussner Bundesdruckerei GmbH S. Fluhrer Cisco Systems 3 December 2025 Composite ML-KEM for use in X.509 Public Key Infrastructure draft-ietf-lamps-pq-composite-kem-11 Abstract This document defines combinations of ML-KEM [FIPS.203] in hybrid with traditional algorithms RSA-OAEP, ECDH, X25519, and X448. These combinations are tailored to meet security best practices and regulatory guidelines. Composite ML-KEM is applicable in any application that uses X.509 or PKIX data structures that accept ML- KEM, but where the operator wants extra protection against breaks or catastrophic bugs in ML-KEM. About This Document This note is to be removed before publishing as an RFC. The latest revision of this draft can be found at https://lamps- wg.github.io/draft-composite-kem/draft-ietf-lamps-pq-composite- kem.html. Status information for this document may be found at https://datatracker.ietf.org/doc/draft-ietf-lamps-pq-composite-kem/. Discussion of this document takes place on the LAMPS Working Group mailing list (mailto:spams@ietf.org), which is archived at https://datatracker.ietf.org/wg/lamps/about/. Subscribe at https://www.ietf.org/mailman/listinfo/spams/. Source for this draft and an issue tracker can be found at https://github.com/lamps-wg/draft-composite-kem. Status of This Memo This Internet-Draft is submitted in full conformance with the provisions of BCP 78 and BCP 79. Ounsworth, et al. Expires 6 June 2026 [Page 1] Internet-Draft Composite ML-KEM December 2025 Internet-Drafts are working documents of the Internet Engineering Task Force (IETF). Note that other groups may also distribute working documents as Internet-Drafts. The list of current Internet- Drafts is at https://datatracker.ietf.org/drafts/current/. Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress." This Internet-Draft will expire on 6 June 2026. Copyright Notice Copyright (c) 2025 IETF Trust and the persons identified as the document authors. All rights reserved. This document is subject to BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents (https://trustee.ietf.org/ license-info) in effect on the date of publication of this document. Please review these documents carefully, as they describe your rights and restrictions with respect to this document. Code Components extracted from this document must include Revised BSD License text as described in Section 4.e of the Trust Legal Provisions and are provided without warranty as described in the Revised BSD License. Table of Contents 1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . 3 1.1. Conventions and Terminology . . . . . . . . . . . . . . . 5 1.2. Composite Design Philosophy . . . . . . . . . . . . . . . 6 2. Overview of the Composite ML-KEM Scheme . . . . . . . . . . . 7 2.1. Promotion of RSA-OAEP into a KEM . . . . . . . . . . . . 8 2.2. Promotion of ECDH into a KEM . . . . . . . . . . . . . . 9 3. Composite ML-KEM Functions . . . . . . . . . . . . . . . . . 11 3.1. Key Generation . . . . . . . . . . . . . . . . . . . . . 11 3.2. Encapsulation . . . . . . . . . . . . . . . . . . . . . . 13 3.3. Decapsulation . . . . . . . . . . . . . . . . . . . . . . 15 3.4. KEM Combiner Function . . . . . . . . . . . . . . . . . . 17 3.5. Error Handling and Explicit Rejection . . . . . . . . . . 18 4. Serialization . . . . . . . . . . . . . . . . . . . . . . . . 18 4.1. SerializePublicKey and DeserializePublicKey . . . . . . . 20 4.2. SerializePrivateKey and DeserializePrivateKey . . . . . . 22 4.3. SerializeCiphertext and DeserializeCiphertext . . . . . . 23 5. Use within X.509 and PKIX . . . . . . . . . . . . . . . . . . 25 5.1. Encoding to DER . . . . . . . . . . . . . . . . . . . . . 26 5.2. Key Usage Bits . . . . . . . . . . . . . . . . . . . . . 26 5.3. ASN.1 Definitions . . . . . . . . . . . . . . . . . . . . 26 Ounsworth, et al. Expires 6 June 2026 [Page 2] Internet-Draft Composite ML-KEM December 2025 6. Algorithm Identifiers and Parameters . . . . . . . . . . . . 28 6.1. RSA-OAEP Parameters . . . . . . . . . . . . . . . . . . . 33 6.2. Rationale for choices . . . . . . . . . . . . . . . . . . 34 7. ASN.1 Module . . . . . . . . . . . . . . . . . . . . . . . . 34 8. IANA Considerations . . . . . . . . . . . . . . . . . . . . . 39 8.1. Object Identifier Allocations . . . . . . . . . . . . . . 39 8.1.1. Module Registration . . . . . . . . . . . . . . . . . 39 8.1.2. Object Identifier Registrations . . . . . . . . . . . 40 9. Security Considerations . . . . . . . . . . . . . . . . . . . 42 9.1. Why Hybrids? . . . . . . . . . . . . . . . . . . . . . . 42 9.2. KEM Combiner . . . . . . . . . . . . . . . . . . . . . . 43 9.2.1. IND-CCA2 Security of the hybrid scheme . . . . . . . 44 9.2.2. Second pre-image resistance of component KEMs . . . . 44 9.2.3. Generifying this construction . . . . . . . . . . . . 45 9.3. Key Reuse . . . . . . . . . . . . . . . . . . . . . . . . 45 9.4. Policy for Deprecated and Acceptable Algorithms . . . . . 46 10. Implementation Considerations . . . . . . . . . . . . . . . . 47 10.1. FIPS Certification . . . . . . . . . . . . . . . . . . . 47 10.1.1. Combiner Function . . . . . . . . . . . . . . . . . 47 10.1.2. Order of KDF inputs with Non-Approved Algorithms . . 48 10.2. Backwards Compatibility . . . . . . . . . . . . . . . . 49 10.3. Profiling down the number of options . . . . . . . . . . 49 10.4. Decapsulation Requires the Public Key . . . . . . . . . 50 10.4.1. Extracting RSAPublicKey from RSAPrivateKey . . . . . 51 10.4.2. Deriving the public ECPoint from ECPrivateKey . . . 51 11. References . . . . . . . . . . . . . . . . . . . . . . . . . 52 11.1. Normative References . . . . . . . . . . . . . . . . . . 52 11.2. Informative References . . . . . . . . . . . . . . . . . 54 Appendix A. Maximum Key and Ciphertext Sizes . . . . . . . . . . 57 Appendix B. Component Algorithm Reference . . . . . . . . . . . 60 Appendix C. Fixed Component Algorithm Identifiers . . . . . . . 61 Appendix D. Comparison with other Hybrid KEMs . . . . . . . . . 64 D.1. X-Wing . . . . . . . . . . . . . . . . . . . . . . . . . 64 D.2. ETSI CatKDF . . . . . . . . . . . . . . . . . . . . . . . 65 Appendix E. Examples of KEM Combiner Intermediate Values . . . . 65 Appendix F. Test Vectors . . . . . . . . . . . . . . . . . . . . 69 Appendix G. Contributors and Acknowledgments . . . . . . . . . . 128 Authors' Addresses . . . . . . . . . . . . . . . . . . . . . . . 129 1. Introduction The advent of quantum computing poses a significant threat to current cryptographic systems. Traditional cryptographic key establishment algorithms such as RSA-OAEP, Diffie-Hellman and its elliptic curve variants are vulnerable to quantum attacks. During the transition to post-quantum cryptography (PQC), there is considerable uncertainty regarding the robustness of both existing and new cryptographic algorithms. While we can no longer fully trust traditional Ounsworth, et al. Expires 6 June 2026 [Page 3] Internet-Draft Composite ML-KEM December 2025 cryptography, we also cannot immediately place complete trust in post-quantum replacements until they have undergone extensive scrutiny and real-world testing to uncover and rectify both algorithmic weaknesses as well as implementation flaws across all the new implementations. Unlike previous migrations between cryptographic algorithms, the decision of when to migrate and which algorithms to adopt is far from straightforward. For instance, the aggressive migration timelines may require deploying PQC algorithms before their implementations have been fully hardened or certified, and dual-algorithm data protection may be desirable over a longer time period to hedge against security vulnerabilities and other implementation flaws in the new implementations. Cautious implementers may opt to combine cryptographic algorithms in such a way that an attacker would need to break all of them simultaneously to compromise the protected data. These mechanisms are referred to as Post-Quantum/Traditional (PQ/T) Hybrids [RFC9794]. Certain jurisdictions are already recommending or mandating that PQC lattice schemes be used exclusively within a PQ/T hybrid framework. The use of a composite scheme provides a straightforward implementation of hybrid solutions compatible with (and advocated by) some governments and cybersecurity agencies [BSI2021], [ANSSI2024]. This specification defines a specific instantiation of the PQ/T Hybrid paradigm called "composite" where multiple cryptographic algorithms are combined to form a single key encapsulation mechanism (KEM) presenting a single public key and ciphertext such that it can be treated as a single atomic algorithm at the protocol level; a property referred to as "protocol backwards compatibility" since it can be applied to protocols that are not explicitly hybrid-aware. Composite algorithms retain some security even if one of their component algorithms is broken. Concrete instantiations of composite ML-KEM algorithms are provided based on ML-KEM, RSA-OAEP and ECDH. Backwards compatibility in the sense of upgraded systems continuing to inter-operate with legacy systems is not directly covered in this specification, but is the subject of Section 10.2. The idea of a composite was first presented in [Bindel2017]. Composite ML-KEM is applicable in any PKIX-related application that would otherwise use ML-KEM. Ounsworth, et al. Expires 6 June 2026 [Page 4] Internet-Draft Composite ML-KEM December 2025 1.1. Conventions and Terminology The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in BCP 14 [RFC2119] [RFC8174] when, and only when, they appear in all capitals, as shown here. These words may also appear in this document in lower case as plain English words, absent their normative meanings. This specification is consistent with all terminology from [RFC9794]. In addition, the following terms are used in this specification: *ALGORITHM*: The usage of the term "algorithm" within this specification generally refers to any function which has a registered Object Identifier (OID) for use within an ASN.1 AlgorithmIdentifier. This loosely, but not precisely, aligns with the definitions of "cryptographic algorithm" and "cryptographic scheme" given in [RFC9794]. *COMBINER*: A combiner specifies how multiple shared secret keys are combined into a single shared secret key. *COMPONENT / PRIMITIVE*: The words "component" or "primitive" are used interchangeably to refer to a cryptographic algorithm that is used internally within a composite algorithm. For example this could be an asymmetric algorithm such as "ML-KEM-768" or "RSA-OAEP". *DER:* Distinguished Encoding Rules as defined in [X.690]. *KEM:* A key encapsulation mechanism as defined in Section 2. *PKI:* Public Key Infrastructure, as defined in [RFC5280]. *SHARED SECRET KEY:* A value established between two communicating parties for use as cryptographic key material suitable for direct use by symmetric cryptographic algorithms. This specification is concerned with shared secrets established via public key cryptographic operations. Notation: The algorithm descriptions use python-like syntax. The following symbols deserve special mention: * || represents concatenation of two byte arrays. * [:] represents byte array slicing. Ounsworth, et al. Expires 6 June 2026 [Page 5] Internet-Draft Composite ML-KEM December 2025 * (a, b) represents a pair of values a and b. Typically this indicates that a function returns multiple values; the exact conveyance mechanism -- tuple, struct, output parameters, etc -- is left to the implementer. * (a, _): represents a pair of values where one -- the second one in this case -- is ignored. * Func(): represents a function that is parametrized by meaning that the function's implementation will have minor differences depending on the underlying TYPE. Typically this means that a function will need to look up different constants or use different underlying cryptographic primitives depending on which composite algorithm it is implementing. 1.2. Composite Design Philosophy [RFC9794] defines composites as: _Composite Cryptographic Element_: A cryptographic element that incorporates multiple component cryptographic elements of the same type in a multi-algorithm scheme. Composite algorithms, as defined in this specification, follow this definition and should be regarded as a single key that performs a single cryptographic operation typical of a key establishment mechanism such as key generation, encapsulating, or decapsulating -- using its internal concatenation of component keys as if they form a single key. This generally means that the complexity of combining algorithms can and should be handled by the cryptographic library or cryptographic module, and the single composite public key, private key, and ciphertext can be carried in existing fields in protocols such as PKCS#10 [RFC2986], CMP [RFC4210], X.509 [RFC5280], CMS [RFC5652], and the Trust Anchor Format [RFC5914]. In this way, composites achieve "protocol backwards-compatibility" in that they will drop cleanly into any protocol that accepts an analogous single- algorithm cryptographic scheme without requiring any modification of the protocol to handle multiple algorithms. Discussion of the specific choices of algorithm pairings can be found in Section 6.2. Ounsworth, et al. Expires 6 June 2026 [Page 6] Internet-Draft Composite ML-KEM December 2025 2. Overview of the Composite ML-KEM Scheme Composite ML-KEM is a PQ/T hybrid Key Encapsulation Mechanism (KEM) which combines ML-KEM as specified in [FIPS.203] and [I-D.ietf-lamps-kyber-certificates] with one of RSA-OAEP defined in [RFC8017], the Elliptic Curve Diffie-Hellman key agreement schemes ECDH defined in section 5.7.1.2 of [SP.800-56Ar3], and X25519 / X448 defined in [RFC8410]. A KEM combiner function is used to combine the two component shared secret keys into a single shared secret key. Composite Key Encapsulation Mechanisms are defined as cryptographic primitives that consist of three algorithms. These definitions are borrowed from [RFC9180]. * KeyGen() -> (pk, sk): A probabilistic key generation algorithm, which generates a public key pk and a secret key sk. Some cryptographic modules may also expose a KeyGen(seed) -> (pk, sk), which generates pk and sk deterministically from a seed. This specification assumes a seed-based keygen for ML-KEM. * Encap(pk) -> (ss, ct): A probabilistic encapsulation algorithm, which takes as input a public key pk and outputs a ciphertext ct and shared secret key ss. Note: this specification uses Encap() to conform to [RFC9180], but [FIPS.203] uses Encaps(). * Decap(sk, ct) -> ss: A decapsulation algorithm, which takes as input a secret key sk and ciphertext ct and outputs a shared secret ss, or in some cases a distinguished error value. Note: this specification uses Decap() to conform to [RFC9180], but [FIPS.203] uses Decaps(). The KEM interface was chosen as the interface for a composite key establishment because it allows for arbitrary combinations of component algorithm types since both key transport and key agreement mechanisms can be promoted into KEMs as described in Section 2.1 and Section 2.2 below. The following algorithms are defined for serializing and deserializing component values. These algorithms are inspired by similar algorithms in [RFC9180]. * SerializePublicKey(mlkemPK, tradPK) -> bytes: Produce a byte string encoding of the component public keys. * DeserializePublicKey(bytes) -> (mlkemPK, tradPK): Parse a byte string to recover the component public keys. Ounsworth, et al. Expires 6 June 2026 [Page 7] Internet-Draft Composite ML-KEM December 2025 * SerializeCiphertext(mlkemCT, tradCT) -> bytes: Produce a byte string encoding of the component ciphertexts. * DeserializeCiphertext(bytes) -> (mlkemCT, tradCT): Parse a byte string to recover the component ciphertexts. * SerializePrivateKey(mlkemSeed, tradSK) -> bytes: Produce a byte string encoding of the component private keys. * DeserializePrivateKey(bytes) -> (mlkemSeed, tradSK): Parse a byte string to recover the component private keys. Full definitions of serialization and deserialization algorithms can be found in Section 4. 2.1. Promotion of RSA-OAEP into a KEM The RSA Optimal Asymmetric Encryption Padding (OAEP), as defined in section 7.1 of [RFC8017] is a public key encryption algorithm used to transport key material from a sender to a receiver. A "key transport" type algorithm has the following API: * Encrypt(pk, ss) -> ct: Take an existing shared secret key ss and encrypt it for pk. * Decrypt(sk, ct) -> ss: Decrypt the ciphertext ct to recover ss. Note the difference between the API of RSA.Encrypt(pk, ss) -> ct and KEM.Encap(pk) -> (ss, ct) presented above. For this reason, RSA-OAEP cannot be directly combined with ML-KEM. Fortunately, a key transport mechanism such as RSA-OAEP can be easily promoted into a KEM by having the sender generate a random 256 bit shared secret key and encrypt it. RSAOAEPKEM.Encap(pkR): shared_secret = SecureRandom(ss_len) enc = RSAES-OAEP-ENCRYPT(pkR, shared_secret) return shared_secret, enc Note that the OAEP label L is left to its default value, which is the empty string as per [RFC8017]. The shared secret key output by the overall Composite ML-KEM already binds a composite KEM Combiner Label, so there is no need to also use the component Label. The value of ss_len as well as concrete values for all the RSA-OAEP parameters used within this specification can be found in Section 6.1. Ounsworth, et al. Expires 6 June 2026 [Page 8] Internet-Draft Composite ML-KEM December 2025 Decap(sk, ct) -> ss is accomplished by direct use of OAEP Decrypt. RSAOAEPKEM.Decap(skR, enc): shared_secret = RSAES-OAEP-DECRYPT(skR, enc) return shared_secret The encodings for the public key (pkR), private key (skR), and ciphertext (enc) are described in Section 4. A quick note on the choice of RSA-OAEP as the supported RSA encryption primitive. RSA-KEM [RFC5990] is cryptographically robust and is more straightforward to work with, but it has fairly limited adoption and therefore is of limited value as a PQ migration mechanism. Also, while RSA-PKCS#1v1.5 [RFC8017] is still widely used, it is hard to make secure and no longer FIPS-approved as of the end of 2023 [SP800-131Ar2], so it is of limited forwards value. This leaves RSA-OAEP [RFC8017] as the remaining choice. See Section 6.2 for further discussion of algorithm choices. Note that, at least at the time of writing, the algorithm RSAOAEPKEM is not defined as a standalone algorithm within PKIX standards and it does not have an assigned algorithm OID, so it cannot be used directly with CMS KEMRecipientInfo [RFC9629]; it is merely a building block for the composite algorithm. 2.2. Promotion of ECDH into a KEM The elliptic curve Diffie-Hellman algorithm identified by the OID id- ecDH as defined in [RFC5480] and [SEC1] is a key agreement algorithm requiring both parties to contribute an asymmetric keypair to the derivation of the shared secret key. A "key agreement" type algorithm has the following API: * DH(skX, pkY) -> ss: Each party combines their secret key skX with the other party's public key pkY. Note the difference between the API of DH(skX, pkY) -> ss and KEM.Encap(pk) -> (ss, ct) presented above. For this reason, a Diffie-Hellman key exchange cannot be directly combined with ML-KEM. Fortunately, a Diffie-Hellman key agreement can be easily promoted into a KEM Encap(pk) -> (ss, ct) by having the sender generate an ephemeral keypair for themself and sending their public key as the ciphertext ct. Composite ML-KEM uses a simplified version of the DHKEM definition from [RFC9180]: Ounsworth, et al. Expires 6 June 2026 [Page 9] Internet-Draft Composite ML-KEM December 2025 DHKEM.Encap(pkR): (skE, pkE) = GenerateKeyPair() ss = DH(skE, pkR) ct = SerializePublicKey(pkE) return ss, ct Decap(sk, ct) -> ss is accomplished in the analogous way. DHKEM.Decap(skR, ct): pkE = DeserializePublicKey(ct) ss = DH(skR, pkE) return ss This construction applies for all variants of elliptic curve Diffie- Hellman used in this specification: ECDH, X25519, and X448. For ECDH, DH() yields the value Z as described in section 5.7.1.2 of [SP.800-56Ar3]. For X25519 and X448, DH() yields the value K as described in section 6 of [RFC7748]. The encodings for the public key (pkR), private key (skR), and ciphertext (pkE) are described in Section 4. The promotion of DH to a KEM is similar to the DHKEM functions in [RFC9180], but it is simplified in the following ways: 1. Notation has been aligned to the notation used in this specification. 2. Since a KEM Combiner Label is included explicitly in the Composite ML-KEM combiner, there is no need to perform the labeled steps of ExtractAndExpand(). 3. Since the ciphertext and receiver's public key are included explicitly in the Composite ML-KEM combiner, there is no need to construct the kem_context object. Note that here, SerializePublicKey() and DeserializePublicKey() refer to the underlying encoding of the DH primitive, and not to the composite serialization functions defined in Section 4. Ounsworth, et al. Expires 6 June 2026 [Page 10] Internet-Draft Composite ML-KEM December 2025 Note that, at least at the time of writing, the algorithm DHKEM is not defined as a standalone algorithm within PKIX standards and it does not have an assigned algorithm OID, so it cannot be used directly with CMS KEMRecipientInfo [RFC9629]; it is merely a building block for the composite algorithm. 3. Composite ML-KEM Functions This section describes the composite ML-KEM functions needed to instantiate the public API of a Key Encapsulation Mechanism as defined in Section 2. 3.1. Key Generation In order to maintain security properties of the composite, applications that use composite keys MUST always perform fresh key generations of both component keys and MUST NOT reuse existing key material. See Section 9.3 for a discussion. To generate a new keypair for composite schemes, the KeyGen() -> (pk, sk) function is used. The KeyGen() function calls the two key generation functions of the component algorithms independently. Multi-threaded, multi-process, or multi-module applications might choose to execute the key generation functions in parallel for better key generation performance or architectural modularity. The following describes how to instantiate a KeyGen() function for a given composite algorithm represented by . Ounsworth, et al. Expires 6 June 2026 [Page 11] Internet-Draft Composite ML-KEM December 2025 Composite-ML-KEM.KeyGen() -> (pk, sk) Explicit Inputs: None Implicit Inputs mapped from : ML-KEM The underlying ML-KEM algorithm and parameter set, for example "ML-KEM-768". Trad The underlying traditional algorithm and parameter, for example "RSA-OAEP" or "X25519". Output: (pk, sk) The composite keypair. Key Generation Process: 1. Generate component keys mlkemSeed = Random(64) (mlkemPK, mlkemSK) = ML-KEM.KeyGen(mlkemSeed) (tradPK, tradSK) = Trad.KeyGen() 2. Check for component key gen failure if NOT (mlkemPK, mlkemSK) or NOT (tradPK, tradSK): output "Key generation error" 3. Output the composite public and private keys pk = SerializePublicKey(mlkemPK, tradPK) sk = SerializePrivateKey(mlkemSeed, tradSK) return (pk, sk) In order to ensure fresh keys, the key generation functions MUST be executed for both component algorithms. Compliant parties MUST NOT use, import or export component keys that are used in other contexts, combinations, or by themselves as keys for standalone algorithm use. For more details on the security considerations around key reuse, see Section 9.3. Note that this keygen routine outputs a serialized composite key, which contains only the ML-KEM seed. Implementations should feel free to modify this routine to additionally output the expanded mlkemSK or to make free use of ML-KEM.KeyGen(mldsaSeed) as needed to expand the ML-KEM seed into an expanded key prior to performing a decapsulation operation. Ounsworth, et al. Expires 6 June 2026 [Page 12] Internet-Draft Composite ML-KEM December 2025 Variations in the keygen process above and decapsulation processes below to accommodate particular private key storage mechanisms or alternate interfaces to the underlying cryptographic modules are considered to be conformant to this specification so long as they produce the same output and error handling. For example, component private keys stored in separate software or hardware modules where it is not possible to do a joint simultaneous keygen would be considered compliant so long as both keys are freshly generated. It is also possible that the underlying cryptographic module does not expose a ML-KEM.KeyGen(seed) that accepts an externally-generated seed, and instead an alternate keygen interface must be used. Note however that cryptographic modules that do not support seed-based ML-KEM key generation will be incapable of importing or exporting composite keys in the standard format since the private key serialization routines defined in Section 4.2 only support ML-KEM keys as seeds. Errors produced by the component KeyGen() routines MUST be forwarded on to the calling application. Further discussion can be found below in Section 3.5. 3.2. Encapsulation The Encap(pk) of a Composite ML-KEM algorithm is designed to behave exactly the same as ML-KEM.Encaps(ek) defined in Algorithm 20 in Section 7.2 of [FIPS.203]. Specifically, Composite-ML-KEM.Encap(pk) produces a 256-bit shared secret key that can be used directly with any symmetric-key cryptographic algorithm. In this way, Composite ML-KEM can be used as a direct drop-in replacement anywhere that ML- KEM is used. The following describes how to instantiate a Encap(pk) function for a given composite algorithm represented by . Composite-ML-KEM.Encap(pk) -> (ss, ct) Explicit Inputs: pk Composite public key consisting of encryption public keys for each component. Implicit inputs mapped from : ML-KEM The underlying ML-KEM algorithm and parameter set, for example "ML-KEM-768". Trad The underlying ML-KEM algorithm and Ounsworth, et al. Expires 6 June 2026 [Page 13] Internet-Draft Composite ML-KEM December 2025 parameter set, for example "RSA-OAEP" or "X25519". Label KEM Combiner Label value for binding the ciphertext to the Composite OID. See section on KEM Combiner Labels below. Output: ss The shared secret key, a 256-bit key suitable for use with symmetric cryptographic algorithms. ct The ciphertext, a byte string. Encap Process: 1. Separate the public keys. (mlkemPK, tradPK) = DeserializePublicKey(pk) 2. Perform the respective component Encap operations according to their algorithm specifications. (mlkemCT, mlkemSS) = ML-KEM.Encaps(mlkemPK) (tradCT, tradSS) = TradKEM.Encap(tradPK) 3. If either ML-KEM.Encaps() or TradKEM.Encap() return an error, then this process must return an error. if NOT (mlkemCT, mlkemSS) or NOT (tradCT, tradSS): output "Encapsulation error" 4. Encode the ciphertext ct = SerializeCiphertext(mlkemCT, tradCT) 5. Combine the KEM secrets and additional context to yield the composite shared secret key. ss = KemCombiner(mlkemSS, tradSS, tradCT, tradPK, Label) 6. Output composite shared secret key and ciphertext. return (ss, ct) The specific values for Label are defined per Composite ML-KEM algorithm in Section 6. Ounsworth, et al. Expires 6 June 2026 [Page 14] Internet-Draft Composite ML-KEM December 2025 Errors produced by the component Encaps() routines MUST be forwarded on to the calling application. Further discussion can be found below in Section 3.5. 3.3. Decapsulation The Decap(sk, ct) -> ss of a Composite ML-KEM algorithm is designed to behave exactly the same as ML-KEM.Decaps(dk, c) defined in Algorithm 21 in Section 7.3 of [FIPS.203]. Specifically, Composite- ML-KEM.Decap(sk, ct) produces a 256-bit shared secret key that can be used directly with any symmetric-key cryptographic algorithm. In this way, Composite ML-KEM can be used as a direct drop-in replacement anywhere that ML-KEM is used. The following describes how to instantiate a Decap(sk, ct) function for a given composite algorithm represented by . Composite-ML-KEM.Decap(sk, ct) -> ss Explicit inputs sk Composite private key consisting of decryption private keys for each component. ct The ciphertext, a byte string. Implicit inputs mapped from : ML-KEM The underlying ML-KEM algorithm and parameter set, for example "ML-KEM-768". Trad The underlying traditional algorithm and parameter set, for example "RSA-OAEP" or "X25519". Label KEM Combiner Label value for binding the ciphertext to the Composite ML-KEM OID. See section on KEM Combiner Labels below. Implicit inputs looked up from SK: tradPK The traditional public key is required for the KEM combiner. For discussion of where to get this value, see the Decapsulation Requires the Public Key section. Output: Ounsworth, et al. Expires 6 June 2026 [Page 15] Internet-Draft Composite ML-KEM December 2025 ss The shared secret key, a 256-bit key suitable for use with symmetric cryptographic algorithms. Decap Process: 1. Separate the private keys and ciphertexts (mlkemSeed, tradSK) = DeserializePrivateKey(sk) (_, mlkemSK) = ML-KEM.KeyGen(mlkemSeed) (mlkemCT, tradCT) = DeserializeCiphertext(ct) 2. Perform the respective component Decap operations according to their algorithm specifications. mlkemSS = ML-KEM.Decaps(mlkemSK, mlkemCT) tradSS = TradKEM.Decap(tradSK, tradCT) 3. If either ML-KEM.Decaps() or TradKEM.Decap() return an error, then this process must return an error. if NOT mlkemSS or NOT tradSS: output "Decapsulation error" 4. Combine the KEM secrets and additional context to yield the composite shared secret key. ss = KemCombiner(mlkemSS, tradSS, tradCT, tradPK, Label) 5. Output composite shared secret key. return ss Steps 2, 3, and 4 SHOULD be performed in a timing-invariant way to prevent side-channel attackers from learning which component algorithm failed and from learning any of the inputs or output of the KEM combiner. Step 4 requires the Decaps() process to have access to tradPK, which is not carried in the private key format and therefore the implementation is required to acquire it from some out-of-band means. The Implementation Considerations Section 10.4 provides further discussion on this. It is possible to use component private keys stored in separate software or hardware keystores. Variations in the process to accommodate particular private key storage mechanisms are considered to be conformant to this specification so long as it produces the same output and error handling as the process sketched above. Ounsworth, et al. Expires 6 June 2026 [Page 16] Internet-Draft Composite ML-KEM December 2025 In order to properly achieve its security properties, the KEM combiner requires that all inputs are fixed-length or length-encoded. Since each Composite ML-KEM algorithm fully specifies its component algorithms, including key sizes, all inputs should be fixed-length in non-error scenarios except for minor variations introduced by encoding. In the cases where there are minor variations introduced by encoding, those encodings already have a fixed-length prefix followed by length-encoded data, so the requirements for the KEM combiner security properties hold (namely that the input is injective). However some implementations may choose to perform additional checking to handle certain error conditions. In particular, the KEM combiner step should not be performed if either of the component decapsulations returned an error condition indicating malformed inputs. RSA-based composites MUST ensure that the modulus size (i.e. the size of tradCT and tradPK) matches that specified for the given Composite ML-KEM algorithm in Section 6; depending on the cryptographic library used, this check may be done by the library or may require an explicit check as part of the Composite-ML-KEM.Decap() routine. Implementers should keep in mind that some instances of tradCT and tradPK will be DER-encoded which could introduce minor length variations such as dropping leading zeroes; since the underlying KEMs are assumed to be IND-CCA secure, decapsulation against tampered ciphertexts or public keys is assumed to fail, these length differences are considered benign to the KEM combiner. Errors produced by the component Decaps() routines MUST be forwarded on to the calling application. Further discussion can be found below in Section 3.5. 3.4. KEM Combiner Function This specification provides a combiner construction with SHA3-256 for all combinations of algorithms. Ounsworth, et al. Expires 6 June 2026 [Page 17] Internet-Draft Composite ML-KEM December 2025 KemCombiner(mlkemSS, tradSS, tradCT, tradPK, Label) -> ss Explicit inputs: The list of input values to be combined. Output: ss The shared secret key, a 256-bit key suitable for use with symmetric cryptographic algorithms. Process: ss = SHA3-256(mlkemSS || tradSS || tradCT || tradPK || Label) return ss 3.5. Error Handling and Explicit Rejection ML-KEM, particularly its Decaps() defined in Algorithms 18 and 21 of [FIPS.203], is designed to be implicitly rejecting, meaning that a failure within the underlying PKE scheme due to a mangled ciphertext will not cause ML-KEM.Decaps() to return an error, but instead any errors encountered during decapsulation are handled by producing a pseudo-random shared secret. ML-KEM.Decaps() can, however return errors for example if the provided ciphertext or decapsulation private key is the wrong size. In Composite ML-KEM, not all component algorithms will be implicitly rejecting, for example RSA-OAEP's Decrypt() can return an error if the padding is incorrect. In general, in the case that one of the component primitives generates an error during Composite ML-KEM KeyGen, Encaps, or Decaps, Composite ML-KEM MUST clear all buffers containing key material and forward the error to its caller; i.e. Composite ML-KEM MUST be explicitly rejecting whenever one of its components is. The same applies to Composite ML-KEM KeyGen() and Encaps(): Composite KEM MUST forward any errors produced by component algorithms. 4. Serialization This section presents routines for serializing and deserializing composite public keys, private keys, and ciphertext values to bytes. The functions defined in this section are considered internal implementation details and are referenced from within the public API definitions in Section 3. Ounsworth, et al. Expires 6 June 2026 [Page 18] Internet-Draft Composite ML-KEM December 2025 Deserialization is possible because ML-KEM has fixed-length public keys, private keys (seeds), and ciphertext values as shown in the following table. +=============+============+=============+============+ | Algorithm | Public Key | Private Key | Ciphertext | +=============+============+=============+============+ | ML-KEM-768 | 1184 | 64 | 1088 | +-------------+------------+-------------+------------+ | ML-KEM-1024 | 1568 | 64 | 1568 | +-------------+------------+-------------+------------+ Table 1: ML-KEM Sizes For all serialization routines below, when these values are required to be carried in an ASN.1 structure, they are wrapped as described in Section 5.1. While ML-KEM has a single fixed-size representation for each of public key, private key, and ciphertext, the traditional component might allow multiple valid encodings; for example an elliptic curve public key, and therefore also ciphertext, might be validly encoded as either compressed or uncompressed [SEC1], or an RSA private key could be encoded in Chinese Remainder Theorem form [RFC8017]. In order to obtain interoperability, composite algorithms MUST use the following encodings of the underlying components: * *ML-KEM*: MUST be encoded as specified in sections 7.1 and 7.2 of [FIPS.203], using a 64-byte seed as the private key. * *RSA*: the public key MUST be encoded as RSAPublicKey with the (n,e) public key representation as specified in A.1.1 of [RFC8017] and the private key representation as RSAPrivateKey specified in A.1.2 of [RFC8017] with version 0 and 'otherPrimeInfos' absent. An RSA-OAEP ciphertext MUST be encoded as specified in section 7.1.1 of [RFC8017] * *ECDH*: public key MUST be encoded as an uncompressed X9.62 [X9.62_2005], including the leading byte 0x04 indicating uncompressed. This is consistent with the encoding of ECPoint as specified in section 2.2 of [RFC5480] when no ASN.1 OCTET STRING wrapping is present. The private key MUST be encoded as ECPrivateKey specified in [RFC5915] with 'NamedCurve' parameter set to the OID of the curve, but without the 'publicKey' field. The ciphertext MUST be encoded in the same manner as the public key. Ounsworth, et al. Expires 6 June 2026 [Page 19] Internet-Draft Composite ML-KEM December 2025 * *X25519 and X448*: the public key MUST be encoded as per section 5 of [RFC7748] and the private key is a 32 or 56 byte raw value for X25519 and X448 respectively. The ciphertext MUST be encoded in the same manner as the public key. All ASN.1 objects SHALL be encoded using DER on serialization. Even with fixed encodings for the traditional component, there may be slight differences in size of the encoded value due to, for example, encoding rules that drop leading zeroes. See Appendix A for further discussion of encoded size of each composite algorithm. The deserialization routines described below do not check for well- formedness of the cryptographic material they are recovering. It is assumed that underlying cryptographic primitives will catch malformed values and raise an appropriate error. 4.1. SerializePublicKey and DeserializePublicKey The serialization routine for keys simply concatenates the public keys of the component algorithms, as defined below: Composite-ML-KEM.SerializePublicKey(mlkemPK, tradPK) -> bytes Explicit inputs: mlkemPK The ML-KEM public key, which is bytes. tradPK The traditional public key in the appropriate encoding for the underlying component algorithm. Implicit inputs: None Output: bytes The encoded composite public key. Serialization Process: 1. Combine and output the encoded public key output mlkemPK || tradPK Ounsworth, et al. Expires 6 June 2026 [Page 20] Internet-Draft Composite ML-KEM December 2025 Deserialization reverses this process. Each component key is deserialized according to their respective specification as shown in Appendix B. The following describes how to instantiate a DeserializePublicKey(bytes) function for a given composite algorithm represented by . Composite-ML-KEM.DeserializePublicKey(bytes) -> (mlkemPK, tradPK) Explicit inputs: bytes An encoded composite public key. Implicit inputs mapped from : ML-KEM The underlying ML-KEM algorithm and parameter, for example, could be "ML-KEM-768". Output: mlkemPK The ML-KEM public key, which is bytes. tradPK The traditional public key in the appropriate encoding for the underlying component algorithm. Deserialization Process: 1. Parse each constituent encoded public key. The length of the mlkemPK is known based on the size of the ML-KEM component key length specified by the Object ID. switch ML-KEM do case ML-KEM-768: mlkemPK = bytes[:1184] tradPK = bytes[1184:] case ML-KEM-1024: mlkemPK = bytes[:1568] tradPK = bytes[1568:] Note that while ML-KEM has fixed-length keys, RSA may not, depending on encoding, so rigorous length-checking of the overall composite key is not always possible. 2. Output the component public keys output (mlkemPK, tradPK) Ounsworth, et al. Expires 6 June 2026 [Page 21] Internet-Draft Composite ML-KEM December 2025 4.2. SerializePrivateKey and DeserializePrivateKey The serialization routine for keys simply concatenates the private keys of the component algorithms, as defined below: Composite-ML-KEM.SerializePrivateKey(mlkemSeed, tradSK) -> bytes Explicit inputs: mlkemSeed The ML-KEM private key, which is the bytes of the seed. tradSK The traditional private key in the appropriate encoding for the underlying component algorithm. Implicit inputs: None Output: bytes The encoded composite private key. Serialization Process: 1. Combine and output the encoded private key. output mlkemSeed || tradSK Deserialization reverses this process. Each component key is deserialized according to their respective specification as shown in Appendix B. The following describes how to instantiate a DeserializePrivateKey(bytes) function. Since ML-KEM private keys are 64 bytes for all parameter sets, this function does not need to be parametrized. Ounsworth, et al. Expires 6 June 2026 [Page 22] Internet-Draft Composite ML-KEM December 2025 Composite-ML-KEM.DeserializePrivateKey(bytes) -> (mlkemSeed, tradSK) Explicit inputs: bytes An encoded composite private key. Implicit inputs: That an ML-KEM private key is 64 bytes for all parameter sets. Output: mlkemSeed The ML-KEM private key, which is the bytes of the seed. tradSK The traditional private key in the appropriate encoding for the underlying component algorithm. Deserialization Process: 1. Parse the ML-KEM seed, which is always a 64 byte seed for all parameter sets. mlkemSeed = bytes[:64] tradSK = bytes[64:] 2. Output the component private keys output (mlkemSeed,tradSK) The function BytesToInteger(x) is not defined in [FIPS.204], but is the obvious inverse of the defined IntegerToBytes() which is the usual little-endian encoding of an integer. 4.3. SerializeCiphertext and DeserializeCiphertext The serialization routine for the composite ciphertext value simply concatenates the fixed-length ML-KEM ciphertext with the ciphertext from the traditional algorithm, as defined below: Ounsworth, et al. Expires 6 June 2026 [Page 23] Internet-Draft Composite ML-KEM December 2025 Composite-ML-KEM.SerializeCiphertext(mlkemCT, tradCT) -> bytes Explicit inputs: mlkemCT The ML-KEM ciphertext, which is bytes. tradCT The traditional ciphertext in the appropriate encoding for the underlying component algorithm. Implicit inputs: None Output: bytes The encoded composite ciphertext value. Serialization Process: 1. Combine and output the encoded composite ciphertext output mlkemCT || tradCT Deserialization reverses this process. Each component ciphertext is deserialized according to their respective specification as shown in Appendix B. The following describes how to instantiate a DeserializeCiphertext(bytes) function for a given composite algorithm represented by . Ounsworth, et al. Expires 6 June 2026 [Page 24] Internet-Draft Composite ML-KEM December 2025 Composite-ML-KEM.DeserializeCiphertext(bytes) -> (mldkemCT, tradCT) Explicit inputs: bytes An encoded composite ciphertext value. Implicit inputs mapped from : ML-KEM The underlying ML-KEM algorithm and parameter, for example, could be "ML-KEM-768". Output: mlkemCT The ML-KEM ciphertext, which is bytes. tradCT The traditional ciphertext in the appropriate encoding for the underlying component algorithm. Deserialization Process: 1. Parse each constituent encoded ciphertext. The length of the mlkemCT is known based on the size of the ML-KEM component ciphertext length specified by the Object ID. switch ML-KEM do case ML-KEM-768: mlkemCT = bytes[:1088] tradCT = bytes[1088:] case ML-KEM-1024: mlkemCT= bytes[:1568] tradCT = bytes[1568:] 2. Output the component ciphertext values output (mlkemCT, tradCT) 5. Use within X.509 and PKIX The following sections provide processing logic and the necessary ASN.1 modules necessary to use composite ML-KEM within X.509 and PKIX protocols. Use within the Cryptographic Message Syntax (CMS) will be covered in a separate specification. Ounsworth, et al. Expires 6 June 2026 [Page 25] Internet-Draft Composite ML-KEM December 2025 While composite ML-KEM keys and ciphertext values MAY be used raw, the following sections provide conventions for using them within X.509 and other PKIX protocols such that Composite ML-KEM can be used as a drop-in replacement for KEM algorithms in PKCS#10 [RFC2986], CMP [RFC4210], X.509 [RFC5280], and related protocols. 5.1. Encoding to DER The serialization routines presented in Section 4 produce raw binary values. When these values are required to be carried within a DER- encoded message format such as an X.509's subjectPublicKey or a OneAsymmetricKey.privateKey OCTET STRING [RFC5958], then the BIT STRING or OCTET STRING contains this raw byte string output of the appropriate serialization routine from Section 4 without further encoding. When a Composite ML-KEM public key appears outside of a SubjectPublicKeyInfo type in an environment that uses ASN.1 encoding, it could be encoded as an OCTET STRING by using the Composite-ML-KEM- PublicKey type defined below. Composite-ML-KEM-PublicKey ::= OCTET STRING Size constraints MAY be enforced, as appropriate as per Appendix A. 5.2. Key Usage Bits When any Composite ML-KEM Object Identifier appears within the SubjectPublicKeyInfo.AlgorithmIdentifier field of an X.509 certificate [RFC5280], the key usage certificate extension MUST only contain: keyEncipherment Composite ML-KEM keys MUST NOT be used in a "dual usage" mode because even if the traditional component key supports both signing and encryption, the post-quantum algorithms do not and therefore the overall composite algorithm does not. Implementations MUST NOT use one component of the composite for the purposes of digital signature and the other component for the purposes of encryption or key establishment. 5.3. ASN.1 Definitions Composite ML-KEM uses a substantially non-ASN.1 based encoding, as specified in Section 4. However, as composite algorithms will be used within ASN.1-based X.509 and PKIX protocols, some conventions for ASN.1 wrapping are necessary. Ounsworth, et al. Expires 6 June 2026 [Page 26] Internet-Draft Composite ML-KEM December 2025 The following ASN.1 Information Object Classes are defined to allow for compact definitions of each composite algorithm, leading to a smaller overall ASN.1 module. pk-CompositeKEM {OBJECT IDENTIFIER:id} PUBLIC-KEY ::= { IDENTIFIER id -- KEY no ASN.1 wrapping -- PARAMS ARE absent CERT-KEY-USAGE { keyEncipherment } -- PRIVATE-KEY no ASN.1 wrapping -- } kema-CompositeKEM { OBJECT IDENTIFIER:id, PUBLIC-KEY:publicKeyType } KEM-ALGORITHM ::= { IDENTIFIER id -- VALUE no ASN.1 wrapping -- PARAMS ARE absent PUBLIC-KEYS { publicKeyType } SMIME-CAPS { IDENTIFIED BY id } } Figure 1: ASN.1 Object Information Classes for Composite ML-KEM As an example, the public key and KEM algorithm types associated with id-MLKEM768-ECDH-P256-SHA3-256 are defined as: pk-MLKEM768-ECDH-P256-SHA3-256 PUBLIC-KEY ::= pk-CompositeKEM { id-MLKEM768-ECDH-P256-SHA3-256 } kema-MLKEM768-ECDH-P256-SHA3-256 KEM-ALGORITHM ::= kema-CompositeKEM{ id-MLKEM768-ECDH-P256-SHA3-256, pk-MLKEM768-ECDH-P256-SHA3-256 } The full set of key types defined by this specification can be found in the ASN.1 Module in Section 7. Use cases that require an interoperable encoding for composite private keys will often need to place a composite private key inside a OneAsymmetricKey structure defined in [RFC5958], such as when private keys are carried in PKCS #12 [RFC7292], CMP [RFC4210] or CRMF [RFC4211]. The definition of OneAsymmetricKey is copied here for convenience: Ounsworth, et al. Expires 6 June 2026 [Page 27] Internet-Draft Composite ML-KEM December 2025 OneAsymmetricKey ::= SEQUENCE { version Version, privateKeyAlgorithm PrivateKeyAlgorithmIdentifier, privateKey PrivateKey, attributes [0] Attributes OPTIONAL, ..., [[2: publicKey [1] PublicKey OPTIONAL ]], ... } ... PrivateKey ::= OCTET STRING -- Content varies based on type of key. The -- algorithm identifier dictates the format of -- the key. Figure 2: OneAsymmetricKey as defined in [RFC5958] When a composite private key is conveyed inside a OneAsymmetricKey structure (version 1 of which is also known as PrivateKeyInfo) [RFC5958], the privateKeyAlgorithm field SHALL be set to the corresponding composite algorithm identifier defined according to Section 6 and its parameters field MUST be absent. The privateKey field SHALL contain the OCTET STRING representation of the serialized composite private key as per Section 4.2. The publicKey field remains OPTIONAL. If the publicKey field is present, it MUST be a composite public key as per Section 4.1. Some applications might need to reconstruct the SubjectPublicKeyInfo or OneAsymmetricKey objects corresponding to each component key individually, for example if this is required for invoking the underlying primitive. Section 6 provides the necessary mapping between composite and their component algorithms for doing this reconstruction. Component keys of a composite private key MUST NOT be used in any other type of key or as a standalone key. For more details on the security considerations around key reuse, see Section 9.3. 6. Algorithm Identifiers and Parameters This section lists the algorithm identifiers and parameters for all Composite ML-KEM algorithms. Full specifications for the referenced algorithms can be found in Appendix B. Ounsworth, et al. Expires 6 June 2026 [Page 28] Internet-Draft Composite ML-KEM December 2025 As the number of algorithms can be daunting to implementers, see Section 10.3 for a discussion of choosing a subset to support. Each Composite ML-KEM algorithm has a unique Label which is used in constructing the KEM combiner in (Section 3.4). This helps protect against a different algorithm arriving at the same shared secret key even if all inputs are the same. Label values are provided in two forms: where the label value is alphanumeric ASCII, they are represented below as strings. For example, "MLKEM768-RSAOAEP2048" below is equivalent to the hexadecimal value 4D4C4B454D3736382D5253414F41455032303438. Some of the label values contain problematic characters, such as backslashes, that can cause issues displaying correctly in rendered documents or even in source code when the compiler interprets it as an escape character. Below, these are represented directly in hexadecimal. For example, the label for id-MLKEM768-X25519-SHA3-256 is "\.//^\", but to avoid transcription errors it is provided only in hexadecimal as 5c2e2f2f5e5c. Composite KEM algorithm list: * id-MLKEM768-RSA2048-SHA3-256 - OID: 1.3.6.1.5.5.7.6.55 - Label: "MLKEM768-RSAOAEP2048" - ML-KEM variant: ML-KEM-768 - Traditional Algorithm: RSA o Traditional KEM Algorithm: id-RSAES-OAEP o RSA size: 2048 o RSAES-OAEP parameters: See Table 2 * id-MLKEM768-RSA3072-SHA3-256 - OID: 1.3.6.1.5.5.7.6.56 - Label: "MLKEM768-RSAOAEP3072" - ML-KEM variant: ML-KEM-768 - Traditional Algorithm: RSA Ounsworth, et al. Expires 6 June 2026 [Page 29] Internet-Draft Composite ML-KEM December 2025 o Traditional KEM Algorithm: id-RSAES-OAEP o RSA size: 3072 o RSAES-OAEP parameters: See Table 2 * id-MLKEM768-RSA4096-SHA3-256 - OID: 1.3.6.1.5.5.7.6.57 - Label: "MLKEM768-RSAOAEP4096" - ML-KEM variant: ML-KEM-768 - Traditional Algorithm: RSA o Traditional KEM Algorithm: id-RSAES-OAEP o RSA size: 4096 o RSAES-OAEP parameters: See Table 2 * id-MLKEM768-X25519-SHA3-256 - OID: 1.3.6.1.5.5.7.6.58 - Label: "5c2e2f2f5e5c" (hex) - ML-KEM variant: ML-KEM-768 - Traditional Algorithm: X25519 o Traditional KEM Algorithm: id-X25519 * id-MLKEM768-ECDH-P256-SHA3-256 - OID: 1.3.6.1.5.5.7.6.59 - Label: "MLKEM768-P256" - ML-KEM variant: ML-KEM-768 - Traditional Algorithm: ECDH o Traditional KEM Algorithm: id-ecDH o ECDH curve: secp256r1 Ounsworth, et al. Expires 6 June 2026 [Page 30] Internet-Draft Composite ML-KEM December 2025 * id-MLKEM768-ECDH-P384-SHA3-256 - OID: 1.3.6.1.5.5.7.6.60 - Label: "MLKEM768-P384" - ML-KEM variant: ML-KEM-768 - Traditional Algorithm: ECDH o Traditional KEM Algorithm: id-ecDH o ECDH curve: secp384r1 * id-MLKEM768-ECDH-brainpoolP256r1-SHA3-256 - OID: 1.3.6.1.5.5.7.6.61 - Label: "MLKEM768-BP256" - ML-KEM variant: ML-KEM-768 - Traditional Algorithm: ECDH o Traditional KEM Algorithm: id-ecDH o ECDH curve: brainpoolP256r1 * id-MLKEM1024-RSA3072-SHA3-256 - OID: 1.3.6.1.5.5.7.6.62 - Label: "MLKEM1024-RSAOAEP3072" - ML-KEM variant: ML-KEM-1024 - Traditional Algorithm: RSA o Traditional KEM Algorithm: id-RSAES-OAEP o RSA size: 3072 o RSAES-OAEP parameters: See Table 2 * id-MLKEM1024-ECDH-P384-SHA3-256 - OID: 1.3.6.1.5.5.7.6.63 Ounsworth, et al. Expires 6 June 2026 [Page 31] Internet-Draft Composite ML-KEM December 2025 - Label: "MLKEM1024-P384" - ML-KEM variant: ML-KEM-1024 - Traditional Algorithm: ECDH o Traditional KEM Algorithm: id-ecDH o ECDH curve: secp384r1 * id-MLKEM1024-ECDH-brainpoolP384r1-SHA3-256 - OID: 1.3.6.1.5.5.7.6.64 - Label: "MLKEM1024-BP384" - ML-KEM variant: ML-KEM-1024 - Traditional Algorithm: ECDH o Traditional KEM Algorithm: id-ecDH o ECDH curve: brainpoolP384r1 * id-MLKEM1024-X448-SHA3-256 - OID: 1.3.6.1.5.5.7.6.65 - Label: "MLKEM1024-X448" - ML-KEM variant: ML-KEM-1024 - Traditional Algorithm: X448 o Traditional KEM Algorithm: id-X448 * id-MLKEM1024-ECDH-P521-SHA3-256 - OID: 1.3.6.1.5.5.7.6.66 - Label: "MLKEM1024-P521" - ML-KEM variant: ML-KEM-1024 - Traditional Algorithm: ECDH o Traditional KEM Algorithm: id-ecDH Ounsworth, et al. Expires 6 June 2026 [Page 32] Internet-Draft Composite ML-KEM December 2025 o ECDH curve: secp521r1 In alignment with ML-KEM [FIPS.203], Composite KEM algorithms output a 256-bit shared secret key at all security levels. For all RSA key types and sizes, the exponent is RECOMMENDED to be 65537. Implementations MAY support only 65537 and reject other exponent values. Legacy RSA implementations that use other values for the exponent MAY be used within a composite, but need to be careful when interoperating with other implementations. SHA3-256 is used as the KDF for all Composite ML-KEM algorithms. 6.1. RSA-OAEP Parameters Use of RSA-OAEP [RFC8017] requires additional parameters to be specified. The RSA component keys MUST be generated at the specified 2048-bit, 3072-bit, 4096-bit key sizes respectively (up to small differences such as dropping leading zeros); intermediate sizes are not acceptable. As with the other Composite ML-KEM algorithms, AlgorithmIdentifier parameters MUST be absent. The RSA-OAEP primitive SHALL be instantiated with the following hard-coded parameters which are the same for the 2048, 3072 and 4096 bit key sizes since the objective is to carry and output a 256-bit shared secret key at all security levels. +=============================+=================+ | RSAES-OAEP-params | Value | +=============================+=================+ | hashAlgorithm | id-sha256 | +-----------------------------+-----------------+ | MaskGenAlgorithm.algorithm | id-mgf1 | +-----------------------------+-----------------+ | maskGenAlgorithm.parameters | id-sha256 | +-----------------------------+-----------------+ | pSourceAlgorithm | pSpecifiedEmpty | +-----------------------------+-----------------+ | ss_len | 256 bits | +-----------------------------+-----------------+ Table 2: RSA-OAEP Parameters Full specifications for the referenced algorithms can be found in Appendix B. Ounsworth, et al. Expires 6 June 2026 [Page 33] Internet-Draft Composite ML-KEM December 2025 Note: The mask length, according to [RFC8017], is k - hLen - 1, where k is the size of the RSA modulus. Since the choice of hash function and the RSA key size is fixed for each composite algorithm, implementations could choose to pre-compute and hard-code the mask length. 6.2. Rationale for choices In generating the list of composite algorithms, the idea was to provide composite algorithms at various security levels with varying performance characteristics. The main design consideration in choosing pairings is to prioritize providing pairings of each ML-KEM security level with commonly- deployed traditional algorithms. This supports the design goal of using composites as a stepping stone to efficiently deploy post- quantum on top of existing hardened and certified traditional algorithm implementations. This was prioritized rather than attempting to exactly match the security level of the post-quantum and traditional components -- which in general is difficult to do since there is no academic consensus on how to compare the "bits of security" against classical attackers and "qubits of security" against quantum attackers. While it may seem odd to use 256-bit outputs at all security levels, this aligns with ML-KEM [FIPS.203] which produces a 256-bit shared secret key at all security levels. SHA3-256 has 256 bits of (2nd) pre-image resistance, which is the required property for a KDF to provide 128 bits of security, as allowed in Table 3 of [SP.800-57pt1r5]. 7. ASN.1 Module Composite-MLKEM-2025 { iso(1) identified-organization(3) dod(6) internet(1) security(5) mechanisms(5) pkix(7) id-mod(0) id-mod-composite-mlkem-2025(TBDMOD) } DEFINITIONS IMPLICIT TAGS ::= BEGIN EXPORTS ALL; IMPORTS PUBLIC-KEY, AlgorithmIdentifier{}, SMIME-CAPS FROM AlgorithmInformation-2009 -- RFC 5912 [X509ASN1] Ounsworth, et al. Expires 6 June 2026 [Page 34] Internet-Draft Composite ML-KEM December 2025 { iso(1) identified-organization(3) dod(6) internet(1) security(5) mechanisms(5) pkix(7) id-mod(0) id-mod-algorithmInformation-02(58) } KEM-ALGORITHM FROM KEMAlgorithmInformation-2023 { iso(1) identified-organization(3) dod(6) internet(1) security(5) mechanisms(5) pkix(7) id-mod(0) id-mod-kemAlgorithmInformation-2023(109) } ; -- -- Object Identifiers -- -- -- Information Object Classes -- pk-CompositeKEM {OBJECT IDENTIFIER:id} PUBLIC-KEY ::= { IDENTIFIER id -- KEY no ASN.1 wrapping -- PARAMS ARE absent CERT-KEY-USAGE { keyEncipherment } -- PRIVATE-KEY no ASN.1 wrapping -- } kema-CompositeKEM { OBJECT IDENTIFIER:id, PUBLIC-KEY:publicKeyType } KEM-ALGORITHM ::= { IDENTIFIER id -- VALUE no ASN.1 wrapping -- PARAMS ARE absent PUBLIC-KEYS { publicKeyType } SMIME-CAPS { IDENTIFIED BY id } } -- -- Composite KEM Algorithms -- -- Composite ML-KEM Ounsworth, et al. Expires 6 June 2026 [Page 35] Internet-Draft Composite ML-KEM December 2025 id-MLKEM768-RSA2048-SHA3-256 OBJECT IDENTIFIER ::= { iso(1) org(3) dod(6) internet(1) security(5) mechanisms(5) pkix(7) alg(6) 55 } pk-MLKEM768-RSA2048-SHA3-256 PUBLIC-KEY ::= pk-CompositeKEM { id-MLKEM768-RSA2048-SHA3-256 } kema-MLKEM768-RSA2048-SHA3-256 KEM-ALGORITHM ::= kema-CompositeKEM{ id-MLKEM768-RSA2048-SHA3-256, pk-MLKEM768-RSA2048-SHA3-256 } id-MLKEM768-RSA3072-SHA3-256 OBJECT IDENTIFIER ::= { iso(1) org(3) dod(6) internet(1) security(5) mechanisms(5) pkix(7) alg(6) 56 } pk-MLKEM768-RSA3072-SHA3-256 PUBLIC-KEY ::= pk-CompositeKEM { id-MLKEM768-RSA3072-SHA3-256 } kema-MLKEM768-RSA3072-SHA3-256 KEM-ALGORITHM ::= kema-CompositeKEM{ id-MLKEM768-RSA3072-SHA3-256, pk-MLKEM768-RSA3072-SHA3-256 } id-MLKEM768-RSA4096-SHA3-256 OBJECT IDENTIFIER ::= { iso(1) org(3) dod(6) internet(1) security(5) mechanisms(5) pkix(7) alg(6) 57 } pk-MLKEM768-RSA4096-SHA3-256 PUBLIC-KEY ::= pk-CompositeKEM { id-MLKEM768-RSA4096-SHA3-256 } kema-MLKEM768-RSA4096-SHA3-256 KEM-ALGORITHM ::= kema-CompositeKEM{ id-MLKEM768-RSA4096-SHA3-256, pk-MLKEM768-RSA4096-SHA3-256 } id-MLKEM768-X25519-SHA3-256 OBJECT IDENTIFIER ::= { iso(1) org(3) dod(6) internet(1) security(5) mechanisms(5) pkix(7) alg(6) 58 } Ounsworth, et al. Expires 6 June 2026 [Page 36] Internet-Draft Composite ML-KEM December 2025 pk-MLKEM768-X25519-SHA3-256 PUBLIC-KEY ::= pk-CompositeKEM { id-MLKEM768-X25519-SHA3-256 } kema-MLKEM768-X25519-SHA3-256 KEM-ALGORITHM ::= kema-CompositeKEM{ id-MLKEM768-X25519-SHA3-256, pk-MLKEM768-X25519-SHA3-256 } id-MLKEM768-ECDH-P256-SHA3-256 OBJECT IDENTIFIER ::= { iso(1) org(3) dod(6) internet(1) security(5) mechanisms(5) pkix(7) alg(6) 59 } pk-MLKEM768-ECDH-P256-SHA3-256 PUBLIC-KEY ::= pk-CompositeKEM { id-MLKEM768-ECDH-P256-SHA3-256 } kema-MLKEM768-ECDH-P256-SHA3-256 KEM-ALGORITHM ::= kema-CompositeKEM{ id-MLKEM768-ECDH-P256-SHA3-256, pk-MLKEM768-ECDH-P256-SHA3-256 } id-MLKEM768-ECDH-P384-SHA3-256 OBJECT IDENTIFIER ::= { iso(1) org(3) dod(6) internet(1) security(5) mechanisms(5) pkix(7) alg(6) 60 } pk-MLKEM768-ECDH-P384-SHA3-256 PUBLIC-KEY ::= pk-CompositeKEM { id-MLKEM768-ECDH-P384-SHA3-256 } kema-MLKEM768-ECDH-P384-SHA3-256 KEM-ALGORITHM ::= kema-CompositeKEM{ id-MLKEM768-ECDH-P384-SHA3-256, pk-MLKEM768-ECDH-P384-SHA3-256 } id-MLKEM768-ECDH-brainpoolP256r1-SHA3-256 OBJECT IDENTIFIER ::= { iso(1) org(3) dod(6) internet(1) security(5) mechanisms(5) pkix(7) alg(6) 61 } pk-MLKEM768-ECDH-brainpoolP256r1-SHA3-256 PUBLIC-KEY ::= pk-CompositeKEM { id-MLKEM768-ECDH-brainpoolP256r1-SHA3-256 } Ounsworth, et al. Expires 6 June 2026 [Page 37] Internet-Draft Composite ML-KEM December 2025 kema-MLKEM768-ECDH-brainpoolP256r1-SHA3-256 KEM-ALGORITHM ::= kema-CompositeKEM{ id-MLKEM768-ECDH-brainpoolP256r1-SHA3-256, pk-MLKEM768-ECDH-brainpoolP256r1-SHA3-256 } id-MLKEM1024-RSA3072-SHA3-256 OBJECT IDENTIFIER ::= { iso(1) org(3) dod(6) internet(1) security(5) mechanisms(5) pkix(7) alg(6) 62 } pk-MLKEM1024-RSA3072-SHA3-256 PUBLIC-KEY ::= pk-CompositeKEM { id-MLKEM1024-RSA3072-SHA3-256 } kema-MLKEM1024-RSA3072-SHA3-256 KEM-ALGORITHM ::= kema-CompositeKEM{ id-MLKEM1024-RSA3072-SHA3-256, pk-MLKEM1024-RSA3072-SHA3-256 } id-MLKEM1024-ECDH-P384-SHA3-256 OBJECT IDENTIFIER ::= { iso(1) org(3) dod(6) internet(1) security(5) mechanisms(5) pkix(7) alg(6) 63 } pk-MLKEM1024-ECDH-P384-SHA3-256 PUBLIC-KEY ::= pk-CompositeKEM { id-MLKEM1024-ECDH-P384-SHA3-256 } kema-MLKEM1024-ECDH-P384-SHA3-256 KEM-ALGORITHM ::= kema-CompositeKEM{ id-MLKEM1024-ECDH-P384-SHA3-256, pk-MLKEM1024-ECDH-P384-SHA3-256 } id-MLKEM1024-ECDH-brainpoolP384r1-SHA3-256 OBJECT IDENTIFIER ::= { iso(1) org(3) dod(6) internet(1) security(5) mechanisms(5) pkix(7) alg(6) 64 } pk-MLKEM1024-ECDH-brainpoolP384r1-SHA3-256 PUBLIC-KEY ::= pk-CompositeKEM{ id-MLKEM1024-ECDH-brainpoolP384r1-SHA3-256 } kema-MLKEM1024-ECDH-brainpoolP384r1-SHA3-256 KEM-ALGORITHM ::= kema-CompositeKEM{ id-MLKEM1024-ECDH-brainpoolP384r1-SHA3-256, Ounsworth, et al. Expires 6 June 2026 [Page 38] Internet-Draft Composite ML-KEM December 2025 pk-MLKEM1024-ECDH-brainpoolP384r1-SHA3-256 } id-MLKEM1024-X448-SHA3-256 OBJECT IDENTIFIER ::= { iso(1) org(3) dod(6) internet(1) security(5) mechanisms(5) pkix(7) alg(6) 65 } pk-MLKEM1024-X448-SHA3-256 PUBLIC-KEY ::= pk-CompositeKEM { id-MLKEM1024-X448-SHA3-256 } kema-MLKEM1024-X448 KEM-ALGORITHM ::= kema-CompositeKEM{ id-MLKEM1024-X448-SHA3-256, pk-MLKEM1024-X448-SHA3-256 } id-MLKEM1024-ECDH-P521-SHA3-256 OBJECT IDENTIFIER ::= { iso(1) org(3) dod(6) internet(1) security(5) mechanisms(5) pkix(7) alg(6) 66 } pk-MLKEM1024-ECDH-P521-SHA3-256 PUBLIC-KEY ::= pk-CompositeKEM { id-MLKEM1024-ECDH-P521-SHA3-256 } kema-MLKEM1024-ECDH-P521-SHA3-256 KEM-ALGORITHM ::= kema-CompositeKEM{ id-MLKEM1024-ECDH-P521-SHA3-256, pk-MLKEM1024-ECDH-P521-SHA3-256 } END 8. IANA Considerations 8.1. Object Identifier Allocations IANA has registered the Object Identifiers in the "SMI Security for PKIX Algorithms" registry. 8.1.1. Module Registration The following is to be registered in "SMI Security for PKIX Module Identifier": Ounsworth, et al. Expires 6 June 2026 [Page 39] Internet-Draft Composite ML-KEM December 2025 * Decimal: IANA Assigned - *Replace TBDMOD* * Description: Composite-MLKEM-2025 - id-mod-composite-mlkem-2025 * References: This Document 8.1.2. Object Identifier Registrations The following are registered in the "SMI Security for PKIX Algorithms": * id-MLKEM768-RSA2048-SHA3-256 - Decimal: 1.3.6.1.5.5.7.6.55 - Description: id-MLKEM768-RSA2048-SHA3-256 - References: This Document * id-MLKEM768-RSA3072-SHA3-256 - Decimal: 1.3.6.1.5.5.7.6.56 - Description: id-MLKEM768-RSA3072-SHA3-256 - References: This Document * id-MLKEM768-RSA4096-SHA3-256 - Decimal: 1.3.6.1.5.5.7.6.57 - Description: id-MLKEM768-RSA4096-SHA3-256 - References: This Document * id-MLKEM768-X25519-SHA3-256 - Decimal: 1.3.6.1.5.5.7.6.58 - Description: id-MLKEM768-ECDH-P256-SHA3-256 - References: This Document * id-MLKEM768-ECDH-P256-SHA3-256 - Decimal: 1.3.6.1.5.5.7.6.59 - Description: id-MLKEM768-ECDH-P256-SHA3-256 Ounsworth, et al. Expires 6 June 2026 [Page 40] Internet-Draft Composite ML-KEM December 2025 - References: This Document * id-MLKEM768-ECDH-P384-SHA3-256 - Decimal: 1.3.6.1.5.5.7.6.60 - Description: id-MLKEM768-ECDH-P384-SHA3-256 - References: This Document * id-MLKEM768-ECDH-brainpoolP256r1-SHA3-256 - Decimal: 1.3.6.1.5.5.7.6.61 - Description: id-MLKEM768-ECDH-brainpoolP256r1-SHA3-256 - References: This Document * id-MLKEM1024-RSA3072-SHA3-256 - Decimal: 1.3.6.1.5.5.7.6.62 - Description: id-MLKEM1024-RSA3072-SHA3-256 - References: This Document * id-MLKEM1024-ECDH-P384-SHA3-256 - Decimal: 1.3.6.1.5.5.7.6.63 - Description: id-MLKEM1024-ECDH-P384-SHA3-256 - References: This Document * id-MLKEM1024-ECDH-brainpoolP384r1-SHA3-256 - Decimal: 1.3.6.1.5.5.7.6.64 - Description: id-MLKEM1024-ECDH-brainpoolP384r1-SHA3-256 - References: This Document * id-MLKEM1024-X448-SHA3-256 - Decimal: 1.3.6.1.5.5.7.6.65 - Description: id-MLKEM1024-X448-SHA3-256 Ounsworth, et al. Expires 6 June 2026 [Page 41] Internet-Draft Composite ML-KEM December 2025 - References: This Document * id-MLKEM1024-ECDH-P521-SHA3-256 - Decimal: 1.3.6.1.5.5.7.6.66 - Description: id-MLKEM1024-ECDH-P521-SHA3-256 - References: This Document 9. Security Considerations As this specification uses ML-KEM as a component of all composite algorithms, all security considerations from [I-D.ietf-lamps-kyber-certificates] and [I-D.sfluhrer-cfrg-ml-kem-security-considerations] apply. Note in particular the "Encapsulation key check" in section 7.2 of [FIPS.203] and the "Decapsulation input check" in section 7.3 of [FIPS.203] which are required for correct and secure functioning of ML-KEM, but which are considered to be external to the Encaps() and Decaps() algorithms. 9.1. Why Hybrids? In broad terms, a PQ/T Hybrid can be used either to provide dual- algorithm security or to provide migration flexibility. Let's quickly explore both. Dual-algorithm security. The general idea is that the data is protected by two algorithms such that an attacker would need to break both in order to compromise the data. As with most of cryptography, this property is easy to state in general terms, but becomes more complicated when expressed in formalisms. The following sections go into more detail here. Ounsworth, et al. Expires 6 June 2026 [Page 42] Internet-Draft Composite ML-KEM December 2025 Migration flexibility. Some PQ/T hybrids exist to provide a sort of "OR" mode where the application can choose to use one algorithm or the other or both. The intention is that the PQ/T hybrid mechanism builds in backwards compatibility to allow legacy and upgraded applications to co-exist and communicate. The composite algorithms presented in this specification do not provide this since they operate in a strict "AND" mode. They do, however, provide codebase migration flexibility. Consider that an organization has today a mature, validated, certified, hardened implementation of RSA or ECC; composites allow them to add an ML-KEM implementation which immediately starts providing benefits against harvest-now-decrypt- later attacks even if that ML-KEM implementation is still an experimental, non-validated, non-certified, non-hardened implementation. More details of obtaining FIPS certification of a composite algorithm can be found in Section 10.1. 9.2. KEM Combiner The KEM combiner from Section 3.4 is reproduced here for reference. SHA3-256(mlkemSS || tradSS || tradCT || tradPK || Label) Figure 3: KEM combiner construction The primary security property of the KEM combiner is that it preserves indistinguishable (adaptive) chosen-ciphertext (IND-CCA2) security of the overall Composite ML-KEM so long as at least one component is IND-CCA2 [X-Wing] [GHP18]. Additionally, we also need to consider the case where one of the component algorithms is completely broken; that the private key is known to an attacker. In this case, we rely on the construction of the KEM combiner to ensure that the value of the other shared secret key cannot be leaked or the combined shared secret key predicted via manipulation of the broken algorithm. Each registered Composite ML-KEM algorithm specifies a Label -- see Section 6. Given that each Composite ML-KEM algorithm fully specifies the component algorithms, including for example the size of the RSA modulus, all inputs to the KEM combiner are fixed-size and thus do not require length-prefixing. * mlkemSS is always 32 bytes. * tradSS in the case of DH this is derived by the decapsulator and therefore the length is not controlled by the attacker, however in the case of RSA-OAEP this value is directly chosen by the sender and both the length and content could be freely chosen by an attacker. Ounsworth, et al. Expires 6 June 2026 [Page 43] Internet-Draft Composite ML-KEM December 2025 * tradCT is either an elliptic curve public key or an RSA-OAEP ciphertext which is required to have its length checked by step 1b of RSAES-OAEP-DECRYPT in [RFC8017]. * tradPK is the public key of the traditional component (elliptic curve or RSA) and therefore fixed-length. * Label is a fixed value specified in this document. 9.2.1. IND-CCA2 Security of the hybrid scheme Informally, a Composite ML-KEM algorithm is secure if the combiner (SHA3) is secure, and either ML-KEM is secure or the traditional component (RSA-OAEP, ECDH, X25519 or X448) is secure. The security of ML-KEM and DH hybrids is covered in [X-Wing] and requires that the first KEM component (ML-KEM in this construction) is IND-CCA2 and second ciphertext preimage resistant (C2PRI) and that the DH component is nominal group; i.e. a well-behaved elliptic curve DH group, but does not require the traditional component to be IND- CCA. This design choice improves performance by not including the large ML-KEM public key and ciphertext, but means that an implementation error in the ML-KEM component that affects the ciphertext check step of the FO transform could result in the overall composite no longer achieving IND-CCA2 security. This solution remains IND-CCA2 due to binding the tradPK and tradCT in the KEM combiner. The QSF framework presented in [X-Wing] is extended to cover RSA-OAEP as the traditional algorithm in place of DH by noting that RSA-OAEP is also IND-CCA2 secure [RFC8017]. The composite combiner cannot be assumed to be secure when used with different KEMs and a more cautious approach would bind the public key and ciphertext of the first KEM as well. 9.2.2. Second pre-image resistance of component KEMs The notion of a "ciphertext second pre-image resistant KEM" is defined in [X-Wing] as being the property that it is computationally difficult to find two different ciphertexts c != c' that will decapsulate to the same shared secret key under the same public key. For the purposes of a hybrid KEM combiner, this property means that given two composite ciphertexts (c1, c2) and (c1', c2'), we must obtain a unique overall shared secret key so long as either c1 != c1' or c2 != c2' -- i.e. the overall Composite ML-KEM is ciphertext second pre-image resistant, and therefore secure so long as one of the component KEMs is secure. Ounsworth, et al. Expires 6 June 2026 [Page 44] Internet-Draft Composite ML-KEM December 2025 In [X-Wing] it is proven that ML-KEM is a second pre-image resistant KEM and therefore the ML-KEM ciphertext can safely be omitted from the KEM combiner. Note that this makes a fundamental assumption on ML-KEM remaining ciphertext second pre-image resistant, and therefore this formulation of KEM combiner does not fully protect against implementation errors in the ML-KEM component -- particularly around the ciphertext check step of the Fujisaki-Okamoto transform -- which could trivially lead to second ciphertext pre-image attacks that break the IND-CCA2 security of the ML-KEM component and of the overall Composite ML-KEM. This could be more fully mitigated by binding the ML-KEM ciphertext in the combiner, but a design decision was made to settle for protection against algorithmic attacks and not implementation attacks against ML-KEM in order to increase performance. However, since neither RSA-OAEP nor DH guarantee second pre-image resistance at all, even in a correct implementation, these ciphertexts are bound to the key derivation in order to guarantee that c != c' will yield a unique ciphertext, and thus restoring second pre-image resistance to the overall Composite ML-KEM. 9.2.3. Generifying this construction It should be clear that the security analysis of the presented KEM combiner construction relies heavily on the specific choices of component algorithms and combiner KDF, and this combiner construction SHOULD NOT by applied to any other combination of ciphers without performing the appropriate security analysis. 9.3. Key Reuse While conformance with this specification requires that both components of a composite key MUST be freshly generated, the designers are aware that some implementers may be forced to break this rule due to operational constraints. This section documents the implications of doing so. When using single-algorithm cryptography, the best practice is to always generate fresh keying material for each purpose, for example when renewing a certificate, or obtaining both a TLS and S/MIME certificate for the same device. However, in practice key reuse in such scenarios is not always catastrophic to security and therefore often tolerated. However this reasoning does not hold in the PQ/T hybrid setting. Within the broader context of PQ/T hybrids, we need to consider new attack surfaces that arise due to the hybrid constructions and did not exist in single-algorithm contexts. One of these is key reuse Ounsworth, et al. Expires 6 June 2026 [Page 45] Internet-Draft Composite ML-KEM December 2025 where the component keys within a hybrid are also used by themselves within a single-algorithm context. For example, it might be tempting for an operator to take already-deployed RSA keys and add an ML-KEM key to them to form a hybrid. Within a hybrid signature context this leads to a class of attacks referred to as "stripping attacks" where one component signature can be extracted and presented as a single- algorithm signature. Hybrid KEMs using a concatenation-style KEM combiner, as is done in this specification, do not have the analogous attack surface because even if an attacker is able to extract and decrypt one of the component ciphertexts, this will yield a different shared secret key than the overall shared secret key derived from the composite, so any subsequent symmetric cryptographic operations will fail. In addition, there is a further implication to key reuse regarding certificate revocation. Upon receiving a new certificate enrolment request, many certification authorities will check if the requested public key has been previously revoked due to key compromise. Often a CA will perform this check by using the public key hash. Therefore, if one, or even both, components of a composite have been previously revoked, the CA may only check the hash of the combined composite key and not find the revocations. Therefore, because the possibility of key reuse exists even though forbidden in this specification, CAs performing revocation checks on a composite key SHOULD also check both component keys independently to verify that the component keys have not been revoked. 9.4. Policy for Deprecated and Acceptable Algorithms Traditionally, a public key or certificate contains a single cryptographic algorithm. If and when an algorithm becomes deprecated (for example, RSA-512, or SHA1), the path to deprecating it through policy and removing it from operational environments is, at least is principle, straightforward. In the composite model this is less obvious since a PQ/T hybrid is expected to still be considered valid after the traditional component is deprecated for individual use. As such, a single composite public key or certificate may contain a mixture of deprecated and non- deprecated algorithms. In general this should be manageable through policy by removing OIDs for the standalone component algorithms while still allowing OIDs for composite algorithms. However, complications may arise when the composite implementation needs to invoke the cryptographic module for a deprecated component algorithm. In particular, this could lead to complex Cryptographic Bills of Materials that show implementations of deprecated algorithms still present and being used. Ounsworth, et al. Expires 6 June 2026 [Page 46] Internet-Draft Composite ML-KEM December 2025 10. Implementation Considerations 10.1. FIPS Certification The following sections give guidance to implementers wishing to FIPS- certify a composite implementation. This guidance is not authoritative and has not been endorsed by NIST. Implementers seeking FIPS certification of a composite KEM algorithm where only one of the component algorithms has been FIPS-validated or FIPS-approved should credit the FIPS-validated component algorithm with full security strength, the non-FIPS-validated component algorithm with zero security, and the overall composite should be considered at least as strong and thus FIPS-approved. The composite algorithm has been designed to treat the underlying primitives as "black-box implementations" and not impose any additional requirements on them that could require an existing implementation of an underlying primitive to run in a mode different from the one under which it was certified. For example, the KeyGen defined in Section 3.1 invokes ML-KEM.KeyGen(seed) which might not be available in a cryptographic module running in FIPS-mode, but Section 3.1 is only a suggested implementation and the composite KeyGen MAY be implemented using a different available interface for ML-KEM.KeyGen. The authors wish to note that composite algorithms provide a design pattern to provide utility in future situations that require care to remain FIPS-compliant, such as future cryptographic migrations as well as bridging across jurisdictions with non-intersecting cryptographic requirements. Successful FIPS certification will need to take into account the "Encapsulation key check" in section 7.2 of [FIPS.203] and the "Decapsulation input check" in section 7.3 of [FIPS.203] which are required for correct and secure functioning of ML-KEM, but which are considered to be external to the Encaps() and Decaps() algorithms. The following sections go into further detail on specific issues that relate to FIPS certification. 10.1.1. Combiner Function For reference, the KEM combiner used in Composite ML-KEM is: ss = SHA3-256(mlkemSS || tradSS || tradCT || tradPK || Label) Ounsworth, et al. Expires 6 June 2026 [Page 47] Internet-Draft Composite ML-KEM December 2025 NIST SP 800-227 [SP800-227] allows hybrid key combiners of the following form: K <- KDM((S1,S2,...,St), OtherInput) (14) Composite ML-KEM maps cleanly into this since it places the two shared secret keys mlkemSS || tradSS at the beginning of the KDF input such that all other inputs tradCT || tradPK || Label can be considered part of OtherInput for the purposes of FIPS certification. For the detailed steps of the Key Derivation Mechanism KDM, [SP800-227] refers to [SP.800-56Cr2]. Compliance of the Composite ML-KEM variants is achieved in the following way: The Composite ML-KEM algorithms use SHA3, and so can be certified under [SP.800-56Cr2] One-Step Key Derivation Option 1: H(x) = hash(x). [SP.800-56Cr2] section 4 "One-Step Key Derivation" requires a counter which begins at the 4-byte value 0x00000001. However, the counter is allowed to be omitted when the hash function is executed only once, as specified on page 159 of the FIPS 140-3 Implementation Guidance [FIPS-140-3-IG]. 10.1.2. Order of KDF inputs with Non-Approved Algorithms [SP800-227] adds an important stipulation that was not present in earlier NIST specifications: This publication approves the use of the key combiner (14) for any t > 1, so long as at least one shared secret (i.e., S_j for some j) is a shared secret generated from the key- establishment methods of SP 800-56A or SP 800-56B, or an approved KEM. This means that although Composite ML-KEM always places the shared secret key from ML-KEM in the first slot, a Composite ML-KEM can be FIPS certified so long as either component is FIPS certified. This is important for several reasons. First, in the early stages of PQC migration, composites allow for a non-FIPS certified ML-KEM implementation to be added to a module that already has a FIPS certified traditional component, and the resulting composite can be FIPS certified. Second, when eventually RSA and Elliptic Curve are no longer FIPS-allowed, the composite can retain its FIPS certified status on the strength of the ML-KEM component. Third, while this is outside the scope of this specification, the general composite construction could be used to create FIPS certified algorithms that Ounsworth, et al. Expires 6 June 2026 [Page 48] Internet-Draft Composite ML-KEM December 2025 contain a component algorithm from a different jurisdiction. Third, a composite where both components are FIPS-certified could allow an implementer to patch one component algorithm while awaiting re- certification while continuing to use the overall composite in FIPS mode. Note that before [SP800-227] was in force, [SP.800-56Cr2] required the shared secret key from the certified algorithm to be in the first slot and therefore a Composite ML-KEM implementation using a FIPS- certified traditional component and a non-FIPS certified ML-KEM is not believed to be certifiable under [SP.800-56Cr2] alone, and requires the ammendments made by [SP800-227]. 10.2. Backwards Compatibility The term "backwards compatibility" is used here to mean that existing systems as they are deployed today can interoperate with the upgraded systems of the future. This draft explicitly does not provide backwards compatibility, only upgraded systems will understand the OIDs defined in this specification. These migration and interoperability concerns need to be thought about in the context of various types of protocols that make use of X.509 and PKIX with relation to key establishment and content encryption, from online negotiated protocols such as TLS 1.3 [RFC8446] and IKEv2 [RFC7296], to non-negotiated asynchronous protocols such as S/MIME signed email [RFC8551], as well as myriad other standardized and proprietary protocols and applications that leverage CMS [RFC5652] encrypted structures. 10.3. Profiling down the number of options One daunting aspect of this specification is the number of composite algorithm combinations. Each option has been specified because there is a community that has a direct application for it; typically because the traditional component is already deployed in a change- managed environment, or because that specific traditional component is required for regulatory reasons. However, this large number of combinations leads either to fracturing of the ecosystem into non-interoperable sub-groups when different communities choose non-overlapping subsets to support, or on the other hand it leads to spreading development resources too thin when trying to support all options. This specification does not list any particular composite algorithm as mandatory-to-implement, however organizations that operate within specific application domains are encouraged to define profiles that Ounsworth, et al. Expires 6 June 2026 [Page 49] Internet-Draft Composite ML-KEM December 2025 select a small number of composites appropriate for that application domain. For applications that do not have any regulatory requirements or legacy implementations to consider, it is RECOMMENDED to focus implementation effort on: id-MLKEM768-X25519-SHA3-256 (aka "X-Wing") id-MLKEM768-ECDH-P256-SHA3-256 In applications that only allow NIST PQC Level 5, it is RECOMMENDED to focus implementation effort on: id-MLKEM1024-ECDH-P384-SHA3-256 10.4. Decapsulation Requires the Public Key ML-KEM always requires the public key in order to perform various steps of the Fujisaki-Okamoto decapsulation [FIPS.203], and for this reason the private key encoding specified in FIPS 203 includes the public key. Moreover, the KEM combiner as specified in Section 3.4 requires the public key of the traditional component in order to achieve the public-key binding property and ciphertext collision resistance as described in Section 9.2. Since tradPK is not carried in the composite private key encoding, the implementation is required to obtain it from some out-of-band mechanism. This section discusses several options, but is a non-normative, non-exhaustive list. 1. Derive or extract from private key. Many cryptographic modules expose functionality to obtain an RSA or EC public key from the corresponding private key. For applications where such functionality does not exist, Section 10.4.1 and Section 10.4.2 provide the suggested mechanisms for extracting the public keys from private keys for RSA and ECDH respectively. It is assumed that this is not required for X25519 or X448 since those private keys are seeds from which the public key can be obtained. 2. Fetch it from an external data source, for example from the public-key certificate corresponding to this private key. 3. If the composite KEM private key is being carried within a PKCS#8 OneAsymmetricKey object, place the full composite public key within the optional OneAsymmetricKey.publicKey field, which allows extracting the tradPK (and re-encode as necessary for correctly using it in the KEM Combiner). 4. Use an alternate private key encoding that explicitly carries the tradPK. Ounsworth, et al. Expires 6 June 2026 [Page 50] Internet-Draft Composite ML-KEM December 2025 10.4.1. Extracting RSAPublicKey from RSAPrivateKey Assuming that the RSA component of the composite private key is encoded as an RSAPrivateKey, as required by this specification, then, quoting from [RFC8017] you have: RSAPrivateKey ::= SEQUENCE { version Version, modulus INTEGER, -- n publicExponent INTEGER, -- e privateExponent INTEGER, -- d prime1 INTEGER, -- p prime2 INTEGER, -- q exponent1 INTEGER, -- d mod (p-1) exponent2 INTEGER, -- d mod (q-1) coefficient INTEGER, -- (inverse of q) mod p otherPrimeInfos OtherPrimeInfos OPTIONAL } This can trivially be converted into an RSAPublicKey through simple DER decoding / re-encoding since both required values are already present. RSAPublicKey ::= SEQUENCE { modulus INTEGER, -- n publicExponent INTEGER -- e } 10.4.2. Deriving the public ECPoint from ECPrivateKey Unlike RSA, the ECPrivateKey does not contain sufficient information to simply extract the public key. Note that in the interest of having a single unique encoding to foster interoperability, this specification forbids the optional publicKey field. That said, the EC public key can be derived from the private key in the following way: g = generator for the group P256r1, P384r1, etc. s = ECPrivateKey.getS() pubKey = ec_multiply_by_scalar(g, s) where a recommended implementation of ec_multiply_by_scalar() can be found in [SEC1]. Then encode pubKey as X9.62 uncompressed point. Ounsworth, et al. Expires 6 June 2026 [Page 51] Internet-Draft Composite ML-KEM December 2025 11. References 11.1. Normative References [FIPS.202] National Institute of Standards and Technology (NIST), "SHA-3 Standard: Permutation-Based Hash and Extendable- Output Functions", August 2015, . [FIPS.203] National Institute of Standards and Technology (NIST), "Module-Lattice-based Key-Encapsulation Mechanism Standard", August 2024, . [FIPS.204] National Institute of Standards and Technology (NIST), "Module-Lattice-Based Digital Signature Standard", August 2024, . [RFC2104] Krawczyk, H., Bellare, M., and R. Canetti, "HMAC: Keyed- Hashing for Message Authentication", RFC 2104, DOI 10.17487/RFC2104, February 1997, . [RFC2119] Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC 2119, DOI 10.17487/RFC2119, March 1997, . [RFC5280] Cooper, D., Santesson, S., Farrell, S., Boeyen, S., Housley, R., and W. Polk, "Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile", RFC 5280, DOI 10.17487/RFC5280, May 2008, . [RFC5480] Turner, S., Brown, D., Yiu, K., Housley, R., and T. Polk, "Elliptic Curve Cryptography Subject Public Key Information", RFC 5480, DOI 10.17487/RFC5480, March 2009, . [RFC5652] Housley, R., "Cryptographic Message Syntax (CMS)", STD 70, RFC 5652, DOI 10.17487/RFC5652, September 2009, . Ounsworth, et al. Expires 6 June 2026 [Page 52] Internet-Draft Composite ML-KEM December 2025 [RFC5869] Krawczyk, H. and P. Eronen, "HMAC-based Extract-and-Expand Key Derivation Function (HKDF)", RFC 5869, DOI 10.17487/RFC5869, May 2010, . [RFC5915] Turner, S. and D. Brown, "Elliptic Curve Private Key Structure", RFC 5915, DOI 10.17487/RFC5915, June 2010, . [RFC5958] Turner, S., "Asymmetric Key Packages", RFC 5958, DOI 10.17487/RFC5958, August 2010, . [RFC7748] Langley, A., Hamburg, M., and S. Turner, "Elliptic Curves for Security", RFC 7748, DOI 10.17487/RFC7748, January 2016, . [RFC8017] Moriarty, K., Ed., Kaliski, B., Jonsson, J., and A. Rusch, "PKCS #1: RSA Cryptography Specifications Version 2.2", RFC 8017, DOI 10.17487/RFC8017, November 2016, . [RFC8174] Leiba, B., "Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words", BCP 14, RFC 8174, DOI 10.17487/RFC8174, May 2017, . [RFC8410] Josefsson, S. and J. Schaad, "Algorithm Identifiers for Ed25519, Ed448, X25519, and X448 for Use in the Internet X.509 Public Key Infrastructure", RFC 8410, DOI 10.17487/RFC8410, August 2018, . [RFC8411] Schaad, J. and R. Andrews, "IANA Registration for the Cryptographic Algorithm Object Identifier Range", RFC 8411, DOI 10.17487/RFC8411, August 2018, . [RFC9629] Housley, R., Gray, J., and T. Okubo, "Using Key Encapsulation Mechanism (KEM) Algorithms in the Cryptographic Message Syntax (CMS)", RFC 9629, DOI 10.17487/RFC9629, August 2024, . [SEC1] Certicom Research, "SEC 1: Elliptic Curve Cryptography", May 2009, . Ounsworth, et al. Expires 6 June 2026 [Page 53] Internet-Draft Composite ML-KEM December 2025 [SEC2] Certicom Research, "SEC 2: Recommended Elliptic Curve Domain Parameters", January 2010, . [SP.800-185] National Institute of Standards and Technology (NIST), "SHA-3 Derived Functions: cSHAKE, KMAC, TupleHash, and ParallelHash", December 2016, . [SP.800-56Ar3] National Institute of Standards and Technology (NIST), "Recommendation for Pair-Wise Key-Establishment Schemes Using Discrete Logarithm Cryptography", April 2018, . [SP.800-56Cr2] National Institute of Standards and Technology (NIST), "Recommendation for Key-Derivation Methods in Key- Establishment Schemes", August 2020, . [SP.800-57pt1r5] National Institute of Standards and Technology (NIST), "Recommendation for Key Management: Part 1 – General", May 2020, . [X.690] ITU-T, "Information technology - ASN.1 encoding Rules: Specification of Basic Encoding Rules (BER), Canonical Encoding Rules (CER) and Distinguished Encoding Rules (DER)", ISO/IEC 8825-1:2015, November 2015. [X9.62_2005] "Public Key Cryptography for the Financial Services Industry, The Elliptic Curve Digital Signature Algorithm (ECDSA)", November 2005. 11.2. Informative References [ANSSI2024] French Cybersecurity Agency (ANSSI), Federal Office for Information Security (BSI), Netherlands National Communications Security Agency (NLNCSA), and Swedish Ounsworth, et al. Expires 6 June 2026 [Page 54] Internet-Draft Composite ML-KEM December 2025 National Communications Security Authority, Swedish Armed Forces, "Position Paper on Quantum Key Distribution", n.d., . [Aviram22] Aviram, N., Dowling, B., Komargodski, I., Paterson, K. G., Ronen, E., and E. Yogev, "Practical (Post-Quantum) Key Combiners from One-Wayness and Applications to TLS", n.d., . [Bindel2017] Bindel, N., Herath, U., McKague, M., and D. Stebila, "Transitioning to a quantum-resistant public key infrastructure", 2017, . [BSI2021] Federal Office for Information Security (BSI), "Quantum- safe cryptography - fundamentals, current developments and recommendations", October 2021, . [ETSI.TS.103.744] ETSI, "ETSI TS 103 744 V1.2.1 CYBER-QSC; Quantum-safe Hybrid Key Establishment", March 2025, . [FIPS-140-3-IG] National Institute of Standards and Technology (NIST), "Implementation Guidance for FIPS 140-3 and the Cryptographic Module Validation Program", July 2024, . [GHP18] Giacon, F., Heuer, F., and B. Poettering, "KEM Combiners", 2018, . [I-D.ietf-lamps-kyber-certificates] Turner, S., Kampanakis, P., Massimo, J., and B. Westerbaan, "Internet X.509 Public Key Infrastructure - Algorithm Identifiers for the Module-Lattice-Based Key- Encapsulation Mechanism (ML-KEM)", Work in Progress, Internet-Draft, draft-ietf-lamps-kyber-certificates-11, 22 July 2025, . Ounsworth, et al. Expires 6 June 2026 [Page 55] Internet-Draft Composite ML-KEM December 2025 [I-D.sfluhrer-cfrg-ml-kem-security-considerations] Fluhrer, S., Dang, Q., Mattsson, J. P., Milner, K., and D. Shiu, "ML-KEM Security Considerations", Work in Progress, Internet-Draft, draft-sfluhrer-cfrg-ml-kem-security- considerations-04, 17 November 2025, . [RFC2986] Nystrom, M. and B. Kaliski, "PKCS #10: Certification Request Syntax Specification Version 1.7", RFC 2986, DOI 10.17487/RFC2986, November 2000, . [RFC4210] Adams, C., Farrell, S., Kause, T., and T. Mononen, "Internet X.509 Public Key Infrastructure Certificate Management Protocol (CMP)", RFC 4210, DOI 10.17487/RFC4210, September 2005, . [RFC4211] Schaad, J., "Internet X.509 Public Key Infrastructure Certificate Request Message Format (CRMF)", RFC 4211, DOI 10.17487/RFC4211, September 2005, . [RFC5639] Lochter, M. and J. Merkle, "Elliptic Curve Cryptography (ECC) Brainpool Standard Curves and Curve Generation", RFC 5639, DOI 10.17487/RFC5639, March 2010, . [RFC5914] Housley, R., Ashmore, S., and C. Wallace, "Trust Anchor Format", RFC 5914, DOI 10.17487/RFC5914, June 2010, . [RFC5990] Randall, J., Kaliski, B., Brainard, J., and S. Turner, "Use of the RSA-KEM Key Transport Algorithm in the Cryptographic Message Syntax (CMS)", RFC 5990, DOI 10.17487/RFC5990, September 2010, . [RFC6090] McGrew, D., Igoe, K., and M. Salter, "Fundamental Elliptic Curve Cryptography Algorithms", RFC 6090, DOI 10.17487/RFC6090, February 2011, . [RFC7292] Moriarty, K., Ed., Nystrom, M., Parkinson, S., Rusch, A., and M. Scott, "PKCS #12: Personal Information Exchange Syntax v1.1", RFC 7292, DOI 10.17487/RFC7292, July 2014, . Ounsworth, et al. Expires 6 June 2026 [Page 56] Internet-Draft Composite ML-KEM December 2025 [RFC7296] Kaufman, C., Hoffman, P., Nir, Y., Eronen, P., and T. Kivinen, "Internet Key Exchange Protocol Version 2 (IKEv2)", STD 79, RFC 7296, DOI 10.17487/RFC7296, October 2014, . [RFC8446] Rescorla, E., "The Transport Layer Security (TLS) Protocol Version 1.3", RFC 8446, DOI 10.17487/RFC8446, August 2018, . [RFC8551] Schaad, J., Ramsdell, B., and S. Turner, "Secure/ Multipurpose Internet Mail Extensions (S/MIME) Version 4.0 Message Specification", RFC 8551, DOI 10.17487/RFC8551, April 2019, . [RFC9180] Barnes, R., Bhargavan, K., Lipp, B., and C. Wood, "Hybrid Public Key Encryption", RFC 9180, DOI 10.17487/RFC9180, February 2022, . [RFC9794] Driscoll, F., Parsons, M., and B. Hale, "Terminology for Post-Quantum Traditional Hybrid Schemes", RFC 9794, DOI 10.17487/RFC9794, June 2025, . [SP800-131Ar2] Barker, E., Roginksy, A., and National Institute of Standards and Technology (NIST), "Transitioning the Use of Cryptographic Algorithms and Key Lengths", n.d., . [SP800-227] Alagic, G., Barker, E., Chen, L., Moody, D., Robinson, A., Silberg, H., Waller, N., and National Institute of Standards and Technology (NIST), "Recommendations for Key- Encapsulation Mechanisms", September 2025, . [X-Wing] Barbosa, M., Connolly, D., Duarte, J., Kaiser, A., Schwabe, P., Varner, K., and B. Westerbaan, "X-Wing The Hybrid KEM You’ve Been Looking For", 9 January 2024, . Appendix A. Maximum Key and Ciphertext Sizes The sizes listed below are maximum values: several factors could cause fluctuations in the size of the traditional component. For example, this could be due to: Ounsworth, et al. Expires 6 June 2026 [Page 57] Internet-Draft Composite ML-KEM December 2025 * The RSA public key (n, e) allows e to vary in size between 3 and n - 1 [RFC8017]. Note that the size table below assumes the recommended value of e = 65537, so for RSA combinations it is in fact not a true maximum. * When the underlying RSA or EC value is itself DER-encoded, integer values could occasionally be shorter than expected due to leading zeros being dropped from the encoding. By contrast, ML-KEM values are always fixed size, so composite values can always be correctly de-serialized based on the size of the ML-KEM component. Size values marked with an asterisk (*) in the table are not fixed but maximum possible values for the composite key or ciphertext. Implementations MUST NOT perform strict length checking based on such values. Non-hybrid ML-KEM is included for reference. Ounsworth, et al. Expires 6 June 2026 [Page 58] Internet-Draft Composite ML-KEM December 2025 +============================+========+=========+============+====+ | Algorithm | Public | Private | Ciphertext | SS | | | key | key | | | +============================+========+=========+============+====+ | id-alg-ml-kem-768 | 1184 | 64 | 1088 | 32 | +----------------------------+--------+---------+------------+----+ | id-alg-ml-kem-1024 | 1568 | 64 | 1568 | 32 | +----------------------------+--------+---------+------------+----+ | id- | 1454* | 1258* | 1344 | 32 | | MLKEM768-RSA2048-SHA3-256 | | | | | +----------------------------+--------+---------+------------+----+ | id- | 1582* | 1834* | 1472 | 32 | | MLKEM768-RSA3072-SHA3-256 | | | | | +----------------------------+--------+---------+------------+----+ | id- | 1710* | 2415* | 1600 | 32 | | MLKEM768-RSA4096-SHA3-256 | | | | | +----------------------------+--------+---------+------------+----+ | id- | 1216 | 96 | 1120 | 32 | | MLKEM768-X25519-SHA3-256 | | | | | +----------------------------+--------+---------+------------+----+ | id-MLKEM768-ECDH- | 1249 | 115 | 1153 | 32 | | P256-SHA3-256 | | | | | +----------------------------+--------+---------+------------+----+ | id-MLKEM768-ECDH- | 1281 | 128 | 1185 | 32 | | P384-SHA3-256 | | | | | +----------------------------+--------+---------+------------+----+ | id-MLKEM768-ECDH- | 1249 | 116 | 1153 | 32 | | brainpoolP256r1-SHA3-256 | | | | | +----------------------------+--------+---------+------------+----+ | id- | 1966* | 1834* | 1952 | 32 | | MLKEM1024-RSA3072-SHA3-256 | | | | | +----------------------------+--------+---------+------------+----+ | id-MLKEM1024-ECDH- | 1665 | 128 | 1665 | 32 | | P384-SHA3-256 | | | | | +----------------------------+--------+---------+------------+----+ | id-MLKEM1024-ECDH- | 1665 | 132 | 1665 | 32 | | brainpoolP384r1-SHA3-256 | | | | | +----------------------------+--------+---------+------------+----+ | id-MLKEM1024-X448-SHA3-256 | 1624 | 120 | 1624 | 32 | +----------------------------+--------+---------+------------+----+ | id-MLKEM1024-ECDH- | 1701 | 146 | 1701 | 32 | | P521-SHA3-256 | | | | | +----------------------------+--------+---------+------------+----+ Table 3: Maximum size values of composite ML-KEM Ounsworth, et al. Expires 6 June 2026 [Page 59] Internet-Draft Composite ML-KEM December 2025 Appendix B. Component Algorithm Reference This section provides references to the full specification of the algorithms used in the composite constructions. +================+========================+===================+ | Component KEM | OID | Specification | | Algorithm ID | | | +================+========================+===================+ | id-ML-KEM-768 | 2.16.840.1.101.3.4.4.2 | [FIPS.203] | +----------------+------------------------+-------------------+ | id-ML-KEM-1024 | 2.16.840.1.101.3.4.4.3 | [FIPS.203] | +----------------+------------------------+-------------------+ | id-X25519 | 1.3.101.110 | [RFC7748], | | | | [RFC8410] | +----------------+------------------------+-------------------+ | id-X448 | 1.3.101.111 | [RFC7748], | | | | [RFC8410] | +----------------+------------------------+-------------------+ | id-ecDH | 1.3.132.1.12 | [RFC5480], | | | | [RFC5915], [SEC1] | +----------------+------------------------+-------------------+ | id-RSAES-OAEP | 1.2.840.113549.1.1.7 | [RFC8017] | +----------------+------------------------+-------------------+ Table 4: Component Encryption Algorithms used in Composite Constructions +==================+=======================+===================+ | Elliptic CurveID | OID | Specification | +==================+=======================+===================+ | secp256r1 | 1.2.840.10045.3.1.7 | [RFC6090], [SEC2] | +------------------+-----------------------+-------------------+ | secp384r1 | 1.3.132.0.34 | [RFC6090], [SEC2] | +------------------+-----------------------+-------------------+ | secp521r1 | 1.3.132.0.35 | [RFC6090], [SEC2] | +------------------+-----------------------+-------------------+ | brainpoolP256r1 | 1.3.36.3.3.2.8.1.1.7 | [RFC5639] | +------------------+-----------------------+-------------------+ | brainpoolP384r1 | 1.3.36.3.3.2.8.1.1.11 | [RFC5639] | +------------------+-----------------------+-------------------+ Table 5: Elliptic Curves used in Composite Constructions Ounsworth, et al. Expires 6 June 2026 [Page 60] Internet-Draft Composite ML-KEM December 2025 +=============+========================+===============+ | HashID | OID | Specification | +=============+========================+===============+ | id-sha3-256 | 2.16.840.1.101.3.4.2.8 | [FIPS.202] | +-------------+------------------------+---------------+ Table 6: Hash algorithms used in Composite Constructions Appendix C. Fixed Component Algorithm Identifiers Many cryptographic libraries are X.509-focused and do not expose interfaces to instantiate a public key from raw bytes, but only from a SubjectPublicKeyInfo structure as you would find in an X.509 certificate, therefore implementing Composite ML-KEM in those libraries requires reconstructing the SPKI for each component algorithm. In order to aid implementers and reduce interoperability issues, this section lists out the full public key for each component algorithm. *ML-KEM-768* ASN.1: algorithm AlgorithmIdentifier ::= { algorithm id-alg-ml-kem-768 -- (2.16.840.1.101.3.4.4.2) } DER: 30 0B 06 07 60 86 48 01 65 03 04 04 02 *ML-KEM-1024* ASN.1: ASN.1: algorithm AlgorithmIdentifier ::= { algorithm id-alg-ml-kem-1024 -- (2.16.840.1.101.3.4.4.3) } DER: 30 0B 06 07 60 86 48 01 65 03 04 04 03 *RSA-OAEP - all sizes* Ounsworth, et al. Expires 6 June 2026 [Page 61] Internet-Draft Composite ML-KEM December 2025 ASN.1: algorithm AlgorithmIdentifier ::= { algorithm id-RSAES-OAEP, -- (1.2.840.113549.1.1.7) parameters RSAES-OAEP-params { hashFunc [0] id-sha256, -- (2.16.840.1.101.3.4.2.1) maskGenFunc [1] mgf1SHA256Identifier, pSourceFunc [2] pSpecifiedEmpty } } where mgf1SHA256Identifier AlgorithmIdentifier ::= { algorithm id-mgf1, -- (1.2.840.113549.1.1.8) parameters sha256Identifier } sha256Identifier AlgorithmIdentifier ::= { id-sha256, NULL } DER: 30 4D 06 09 2A 86 48 86 F7 0D 01 01 07 30 40 A0 0F 30 0D 06 09 60 86 48 01 65 03 04 02 01 05 00 A1 1C 30 1A 06 09 2A 86 48 86 F7 0D 01 01 08 30 0D 06 09 60 86 48 01 65 03 04 02 01 05 00 A2 0F 30 0D 06 09 2A 86 48 86 F7 0D 01 01 09 04 00 *ECDH NIST-P-256* ASN.1: algorithm AlgorithmIdentifier ::= { algorithm id-ecPublicKey -- (1.2.840.10045.2.1) parameters ANY ::= { AlgorithmIdentifier ::= { algorithm secp256r1 -- (1.2.840.10045.3.1.7) } } } DER: 30 13 06 07 2A 86 48 CE 3D 02 01 06 08 2A 86 48 CE 3D 03 01 07 *ECDH NIST-P-384* Ounsworth, et al. Expires 6 June 2026 [Page 62] Internet-Draft Composite ML-KEM December 2025 ASN.1: algorithm AlgorithmIdentifier ::= { algorithm id-ecPublicKey -- (1.2.840.10045.2.1) parameters ANY ::= { AlgorithmIdentifier ::= { algorithm secp384r1 -- (1.3.132.0.34) } } } DER: 30 10 06 07 2A 86 48 CE 3D 02 01 06 05 2B 81 04 00 22 *ECDH NIST-P-521* ASN.1: algorithm AlgorithmIdentifier ::= { algorithm id-ecPublicKey -- (1.2.840.10045.2.1) parameters ANY ::= { AlgorithmIdentifier ::= { algorithm secp521r1 -- (1.3.132.0.35) } } } DER: 30 10 06 07 2A 86 48 CE 3D 02 01 06 05 2B 81 04 00 23 *ECDH Brainpool-256* ASN.1: algorithm AlgorithmIdentifier ::= { algorithm id-ecPublicKey -- (1.2.840.10045.2.1) parameters ANY ::= { AlgorithmIdentifier ::= { algorithm brainpoolP256r1 -- (1.3.36.3.3.2.8.1.1.7) } } } DER: 30 14 06 07 2A 86 48 CE 3D 02 01 06 09 2B 24 03 03 02 08 01 01 07 *ECDH Brainpool-384* Ounsworth, et al. Expires 6 June 2026 [Page 63] Internet-Draft Composite ML-KEM December 2025 ASN.1: algorithm AlgorithmIdentifier ::= { algorithm id-ecPublicKey -- (1.2.840.10045.2.1) parameters ANY ::= { AlgorithmIdentifier ::= { algorithm brainpoolP384r1 -- (1.3.36.3.3.2.8.1.1.11) } } } DER: 30 14 06 07 2A 86 48 CE 3D 02 01 06 09 2B 24 03 03 02 08 01 01 0B *X25519* ASN.1: algorithm AlgorithmIdentifier ::= { algorithm id-X25519 -- (1.3.101.110) } DER: 30 05 06 03 2B 65 6E *X448* ASN.1: algorithm AlgorithmIdentifier ::= { algorithm id-X448 -- (1.3.101.111) } DER: 30 05 06 03 2B 65 6F Appendix D. Comparison with other Hybrid KEMs D.1. X-Wing This specification borrows extensively from the analysis and KEM combiner construction presented in [X-Wing]. In particular, X-Wing and id-MLKEM768-X25519-SHA3-256 are largely interchangeable. The one difference is that X-Wing uses a combined KeyGen function to generate the two component private keys from the same seed, which gives some additional binding properties. In order to allow for re-use of existing hardeneded certified cryptographic modules (for example, getting the RSA component from an existing smartcard), this specification keeps the key generation for both components separate and only loosely-specified so that implementers are free to use an existing certified hardware or software module for one or both Ounsworth, et al. Expires 6 June 2026 [Page 64] Internet-Draft Composite ML-KEM December 2025 components. D.2. ETSI CatKDF [ETSI.TS.103.744] section 8.2.3 defines CatKDF as: 1) Form secret = psk || k1 || k2. 2) Set context = f(info, MA, MB), where f is a context formatting function. 3) key_material = KDF(secret, label, context, length). 4) Return key_material. MA shall contain all of the public keys. MB shall contain all of the corresponding public keys and ciphertexts. The main difference between the Composite ML-KEM combiner and the ETSI CatKDF combiner is that CatKDF makes the more conservative choice to bind the public keys and ciphertexts of both components, while Composite ML-KEM follows the analysis presented in [X-Wing] that while preserving the security properties of the traditional component requires binding the public key and ciphertext of the traditional component, it is not necessary to do so for ML-KEM thanks to the rejection sampling step of the Fujisaki-Okamoto transform. Additionally, ETSI CatKDF can be instantiated with either HMAC [RFC2104], KMAC [SP.800-185] or HKDF [RFC5869] as KDF. Since this specification uses SHA3-256 as the KDF for all variants, there is no equivalent construction of CatKDF. Appendix E. Examples of KEM Combiner Intermediate Values This section provides examples of constructing the input for the KEM Combiner, showing all intermediate values. This is intended to be useful for debugging purposes. See Section 3.4 for additional information. Each input component is shown. Note that values are shown hex- encoded for display purposes only, they are actually raw binary values. * mlkemSS is the shared secret produced by the ML-KEM encapsulate or decapsulate function which is always 32 bytes. * tradSS is the shared secret produce by the traditional algorithm. * tradCT is either an elliptic curve public key or an RSA-OAEP ciphertext depending on the algorithm chosen. Ounsworth, et al. Expires 6 June 2026 [Page 65] Internet-Draft Composite ML-KEM December 2025 * tradPK is the public key of the traditional component (elliptic curve or RSA) and therefore fixed-length. * Label is the specific KEM Combiner Label for this composite algorithm. See Section 6 Next, the Combined KDF Input is given, which is simply the concatenation of the above values. Finally, the KDF Function and the ss Output are shown as outputs. The ss is the Composite ML-KEM shared-secret generated by applying the KDF to the Combined KDF Input. Examples are given for each recommended Composite ML-KEM algorithm from Section 10.3. Example 1: Ounsworth, et al. Expires 6 June 2026 [Page 66] Internet-Draft Composite ML-KEM December 2025 Example of id-MLKEM768-ECDH-P256-SHA3-256 Combiner function output. # Inputs mlkemSS: a995e85fd52a32dbb6aaf216887de6f715ba6a0bdb01524ef74987a991a6d30c tradSS: de3eb22be5f5734e12335b1a51e27f60841ceb726df844da5b516e0128ab9a18 tradCT: 04570d34d53fd74670cfc77b81912dbe97d3d06242addc327ef6f2c7a9 8e35214ef9723118d600fc3b08e48d8e7f7cd166472d25a86aedbf9f598a404c231 80f0e tradPK: 04acab079ea214fe047d490cc449e63e93daf879f9565ced0b3dfef5bd b6c4438db29b33d8c28673cfe16d99dcaea82fba5cf40a5f209b501c437cf3b5ec9 3a4fd Label: 4d4c4b454d3736382d50323536 (ascii: "MLKEM768-P256") # Combined KDF Input: # mlkemSS || tradSS || tradCT || tradPK || Label Combined KDF Input: a995e85fd52a32dbb6aaf216887de6f715ba6a0bdb01524 ef74987a991a6d30cde3eb22be5f5734e12335b1a51e27f60841ceb726df844da5b 516e0128ab9a1804570d34d53fd74670cfc77b81912dbe97d3d06242addc327ef6f 2c7a98e35214ef9723118d600fc3b08e48d8e7f7cd166472d25a86aedbf9f598a40 4c23180f0e04acab079ea214fe047d490cc449e63e93daf879f9565ced0b3dfef5b db6c4438db29b33d8c28673cfe16d99dcaea82fba5cf40a5f209b501c437cf3b5ec 93a4fd4d4c4b454d3736382d50323536 # Outputs # ss = SHA3-256(Combined KDF Input) ss: 8e6a7a064f64e23331b96d34735197805df17ca2e33776850c3ef65a62e730df Example 2: Ounsworth, et al. Expires 6 June 2026 [Page 67] Internet-Draft Composite ML-KEM December 2025 Example of id-MLKEM768-X25519-SHA3-256 Combiner function output. # Inputs mlkemSS: ab7e0ac563e93b5d24a07ef20e6ed78b59972afcd34267a5eb68b3bf73e5d794 tradSS: c837861b6b11cb40be2201bba20f4713e96fb56dba5afd1a2aecb04dea875215 tradCT: 64979ae712e5465b27651a8830fbd8d6256c19d7875cb55775b78d91c3a7b459 tradPK: 360d0ed7ecbb571c34c381d41e69a42d09a2bb5885be14ec405eb694f06e3941 Label: 5c2e2f2f5e5c (ascii: "\.//^\") # Combined KDF Input: # mlkemSS || tradSS || tradCT || tradPK || Label Combined KDF Input: ab7e0ac563e93b5d24a07ef20e6ed78b59972afcd34267a 5eb68b3bf73e5d794c837861b6b11cb40be2201bba20f4713e96fb56dba5afd1a2a ecb04dea87521564979ae712e5465b27651a8830fbd8d6256c19d7875cb55775b78 d91c3a7b459360d0ed7ecbb571c34c381d41e69a42d09a2bb5885be14ec405eb694 f06e39415c2e2f2f5e5c # Outputs # ss = SHA3-256(Combined KDF Input) ss: f312bd17964443ccc54a2846f6d9f98c5d1e6760c28bd0e87ca15ddba4da040d Example 3: Ounsworth, et al. Expires 6 June 2026 [Page 68] Internet-Draft Composite ML-KEM December 2025 Example of id-MLKEM1024-ECDH-P384-SHA3-256 Combiner function output. # Inputs mlkemSS: c44e262d0fbf83217f8140988e51e6952dee399a4098b0fe3c9003e555ea9977 tradSS: 363f4a5fbe2c2109b86c343d390c731c8e417567e71f7d9000d6a34d6f 7e780997dd643754deb5d73af8f4727f1b45b1 tradCT: 0463e6a7252ba898c04be179c0c66e301b4871a07395a636b0d1f66131 ab62bf78cf3f9898f02d8ca3c8a19dea82e95d3eb4b3469a3227669ef785a30de00 d4d2334893a8996b8067fc661c66868eb6a0476c256de177f23dc2a1a0116870d3a f3 tradPK: 041431c346f091622a10c410be842d1dd4c599681abe9c3c78b5fa7faa 9b7f9eb968cba0cf8410ddda65b89e48beac53c5aae67ad268a1985e6db92c50573 414c4e71b85671a9ce0e8daaa36fa12c8f5584a6c598f9811042c4e7d0b49399c75 9a Label: 4d4c4b454d313032342d50333834 (ascii: "MLKEM1024-P384") # Combined KDF Input: # mlkemSS || tradSS || tradCT || tradPK || Label Combined KDF Input: c44e262d0fbf83217f8140988e51e6952dee399a4098b0f e3c9003e555ea9977363f4a5fbe2c2109b86c343d390c731c8e417567e71f7d9000 d6a34d6f7e780997dd643754deb5d73af8f4727f1b45b10463e6a7252ba898c04be 179c0c66e301b4871a07395a636b0d1f66131ab62bf78cf3f9898f02d8ca3c8a19d ea82e95d3eb4b3469a3227669ef785a30de00d4d2334893a8996b8067fc661c6686 8eb6a0476c256de177f23dc2a1a0116870d3af3041431c346f091622a10c410be84 2d1dd4c599681abe9c3c78b5fa7faa9b7f9eb968cba0cf8410ddda65b89e48beac5 3c5aae67ad268a1985e6db92c50573414c4e71b85671a9ce0e8daaa36fa12c8f558 4a6c598f9811042c4e7d0b49399c759a4d4c4b454d313032342d50333834 # Outputs # ss = SHA3-256(Combined KDF Input) ss: 2c50407b7b2e5dd0990f36f0c0362d6d43c6f046105a00a584adc066ad0b28aa Appendix F. Test Vectors The following test vectors are provided in a format similar to the NIST ACVP Known-Answer-Tests (KATs). Ounsworth, et al. Expires 6 June 2026 [Page 69] Internet-Draft Composite ML-KEM December 2025 The structure is that a global cacert is provided which is used to sign each KEM certificate. Within each test case there are the following values: * tcId the name of the algorithm. * ek the encapsulation public key. * x5c the X.509 certificate of the encapsulation key, signed by the cacert. * dk the raw decapsulation private key. * dk_pkcs8 the decapsulation private key in a PKCS#8 object. * c the ciphertext. * k the derived shared secret key. Implementers should be able to perform the following tests using the test vectors below: 1. Load the public key ek or certificate x5c and perform an encapsulation for it (you should obtain valid ct and k values, but they will not match the ones in the test vector since Encap() is randomized.) 2. Load the decapsulation private key dk or dk_pkcs8 and the ciphertext c and perform a Decaps() operation to ensure that the same shared secret key k is derived. Test vectors are provided for each underlying ML-KEM algorithm in isolation for the purposes of debugging. Due to the length of the test vectors, some readers will prefer to retrieve the non-word-wrapped copy from GitHub. The reference implementation written in python that generated them is also available. https://github.com/lamps-wg/draft-composite-kem/tree/main/src { "cacert": "MIIVpzCCCKSgAwIBAgIUWbwKMXGQsN797exI+7pAKIF/tdkwCwYJYIZIA WUDBAMSMD0xDTALBgNVBAoMBElFVEYxDjAMBgNVBAsMBUxBTVBTMRwwGgYDVQQDDBNDb 21wb3NpdGUgTUwtS0VNIENBMB4XDTI1MTEyNTEyMTMxMVoXDTM1MTEyNjEyMTMxMVowP TENMAsGA1UECgwESUVURjEOMAwGA1UECwwFTEFNUFMxHDAaBgNVBAMME0NvbXBvc2l0Z SBNTC1LRU0gQ0EwggeyMAsGCWCGSAFlAwQDEgOCB6EAYZpoPElcd+oIGcIvB6Z3EztCO Ounsworth, et al. Expires 6 June 2026 [Page 70] Internet-Draft Composite ML-KEM December 2025 t/HYtnd1zsvHNgEjYsLPE8puNyTt0VLBglFON8ssK38ybHCTaqwvmjfOw7oN0iGpxdn9 JLhH+CFnKEIXD7lXMklT0YNj12cTHGijeYO4dfweLvsYmw0jwRgveHxN29/VNiO3TUBm kpmOScvpTmiAbTdmkFjZQca/ec+vC9X13htMA+KIOwHsNOQBs3ZIRX+Fw6cILkJlNuPN AE0anzal0A/sSojnZED5pIksDzzdwsFQQVhBTm2b4Wufy9b89HP91oShvAz5zqV+x7+Y zI04vdO7s4YAXo8TtCDtDnrNKlY0xcyxfoA6ona4UWBIk5zFPwbo47fG6qKT2buuPSv7 AO55FLBclGG/wX6KXgfoSZrWBx/HgV0AGExBV0C2RqhHNP60HAcB/hpc4IEVcir1imfv Vj1u/6IJqIANoC8JwpCGCzrrOlCPXrR0+bMrng1ilegVq5HrDOIqtKipt2eJ8fFp3wVM OU3YJUfCXs1vbdFeT+XBq2aOFzAkkqSnrRLw4SBfOezPlrSi8qH5ThqjQxQq7heg3/np L1nBXJ5Mf3rQS3mjVwFOmQmPKXAAjY9Pfvi2DBjkB0gSB28wiS+3tWGbHjNKpiVy/WQo eg3o8atBjt9FMGfjGqPoav6idTjk4Fmd/qfo4ZsGjOQcX9d4H2p5DSssY6BF/kOihlMb zTeknEkW9iN78HMcXRwo+fEW5iGczIpm8JzVeYyqrXfPdIMHDc0vx0fx3YDRqn+KaRWE 47iPskc+7fJlyPRkcu4Fl3y+oThczFWa1CJ0X6K1vLvcGYuGkG+PuZNbACF31ChxtmIC JGHlUZ0qMO7I/7Q3uiP35NdO1nXM3RfrYlabc9GeWYpjQjFBumN3HkZC18DQ56A8EOj3 59E/3vchK1q6a78h/c0jVl/JrnRhTPS8OYoR1JZ1gdMLh5fIR4qOCoKDwpskzKuOUEG4 I+GSU/qdAqTK8gyMn3G4NT3W900/2QI7EkMuyIv/r5rzE/nNRaeOK5+YqmHhLsRgyGQq G1j1NVjwT8jFbIT0lw3+WpX7x8JWdqKeZ29AJcXrhMCYA/2QcSPEJpSmiq/oVxF44dh2 K+01h4A1uv8C57EQ6++26YQBHy7Y5XITmria6rMc4rx5jsaVizyOk75rLPPEX1eUZLuE uzhE3aeKsiLqU3KV0qaCBxGHpb75Rnt8vTVMSJF76L4g/pXJS0lUf8h3cnvfapmsEkTf vkM6ai6DR/9RRm63xvk/Eyptd4Yx1vmcWm9XhgYxcz7ONUpHLDjEM9GM7zSD2TDJBkua BGPwqyAgeE5JpY2Wqb7CR3uT2z3Flox0s8DjMyaZ1xbnG9+GRAPGK1orQsiTCXr9ocXR thjc9Bha2BlN+EYAOvGpMeqjjJnQn4Hq7ldl9YgtGRhgWll1anQJ/N0RfYNrNT45nKsd Gy6Zn8ONhS6sNJlskAPj5GNrmOFj2ECja07reS7x36vrxD5zsISfarxTlwb1ULKVKv5l senCLcadqbRuYI+dL+UZJ9LPPR6EiYIm9PIrlt8aivr3ji/TxrE5gPPm85skaV19ibcJ GOmEtX0WovoXJth+VZn1K1Ohh5mMTBWUY3BCWGIrvm3w6gkhi2Ot4Zw3HvuzS6veVS1B l322u5HaCWLPYHnZqvR/l+AKQhzOJe0MQJO0GtamPQKwvKktAf6eleX+6DPbKiIaAX+N HQSrnXuSolbxUFwLu+pV8zO657URYmyzIf3ALS/1R/5qwBZ85Oj+4fVg++pRMj65Te3n ba11h5xJblfjQtZ48QGkop6xfMpVr4HOI6F1Lt6MpZwbTPk/46btOS/g0q7m2Rx8hKj+ H01ysEl8RShXMzMGYAkslimoAM0Qr8BsNDLw1g/MK7wWiNQMGWpftNq49HM1pBcv6Q9L AogrF3di02T/8xkbCS9MMpJIJvbS/38J+YXLQAEm+YW66hiW+sATA2fm8GrgfQjAUm2t pXE3NHH+IU+//ipbFbpErBHdAKTq0lYUzR8Gp7ugLLYmENpuCZwL9ZmEiMVXcJESvXTI 9BDNNfwCKNn08IZ0RNgBx7BCkNhFDOLiU4i5jxxrs0Vc6i6K+SoaV+g6B86JdHHXXYJF cVsmfxvchgUpOTZKSQ4t46DjhrjPhWYTH8QAEs13yDwIQGWhVeBMDKCrnh+HflIh1nn7 T/+jD44Vd2lupMgfaViTK57cRJG4XkEUO4uH65gd9UkR8eQooJHD/Fmf7YvhhCSBV5cc FgCvTuSq2VqXJSQFV3nNkKS2XhV2HflWdVg/xhPOm3LLZa0QglUZLIA41xbRBgMAP4eR s6DYHKAyneKzlIjZ2k/pcE7X1pFQ6lMB3mBJqwJPjaeTl6STJM+gHWvO5YY4bYiukvXC EN2E47Vfe7zlPK4xaP0EjhAUmDUJnFxFIdBdFSO3bT5rDZdXr/FhfpuCItPW4I4+GaOl HD7OGd+DZ92FxVk3sB9FrfypIKdeMf+eq6OOIdY1mtdTsdZwUskQ7qeqWzwUjdSL6f3M qXKQpaSAlSM9fmDkgit69gUi12q/LBAJwKJcBI+TUPbB99VHnmXvXfa7uvdsWajJjAkM A4GA1UdDwEB/wQEAwICBDASBgNVHRMBAf8ECDAGAQH/AgECMAsGCWCGSAFlAwQDEgOCD O4AnNdp4l9IMkat8r8hKZNEb9nV0G1HkwPIPL7Y0Jgx9Dst3H9Zz0Cmardg7q4DkY6DZ 4FyR0Gly0uuNp6dxVjzC40StXXIi5aqzqOipimfgzU880Qqbls+cnr2ePpdJA9ntKXZh fqtPTWAxeprta7X3Fhn26ehx9rCLdCNQT22cQOUVzoi2rhS6jdkKHBPZ1VXjwNcNIfy6 +zfF1rAS0Fq0ckLDwXaQCmYvoVJ4kOI/s/IWinuYDShHW/ssxOkFN7ifThsxWViMiOSM yoNQmr5fVBv1zIGv0RcY63QfDiBfC+Yxse0odHcNLH3jnsAJYu7a1CQdOBtl69mjoYqM +87OkDGKoAoehS5COCAIb8uoXeJE/u+HNB7xcSiyAwxnIfi2trnDuTYrl07V47eeLULE +l1E0JmBGANp18a9nLbJtcl7wGp6zHb4mmFa/Q7sAxJ8RfA+w90ctr9o0QALHHvGTB1x v+rF4QjOt3Lotq9+N67Arn1D030ypjeDGeqVi88iadfJt0TMxeB37s4FwmnitjA23Vm7 KfVBayttw2fkZo+BxmDQG4wUOLdK6pCJsQ98SUEmVUlstAU1W/r+6xuxZHO3YbXjSwMP Ounsworth, et al. Expires 6 June 2026 [Page 71] Internet-Draft Composite ML-KEM December 2025 ym8orHUz8eZcNV8UUk7GttFJE/55ghe0xoXM2Vxo+D0qq+dyRE661v7g2Fkd2YBmM/9Z iOirVsyHPTUyHAOvdwHbrY1xzdZNPvMZd/1CZuOlJDlNfy7MdE6Ja0GAlp9Vhds8yjr0 bwTGVvdtTjaSv+RD4L8phcty1j0HZ/eKOTBEXYtdzFE4qjMuPOIjZXq/WFOh5jRdoL6A WWkrsEGw8+CCAtykrFdJbY9o1XTn4CiHqK3WKsB8ACRyuyED7CbDlie/8byhYFDrn7cy cVOD/Nk3lAmcVJd1rn1J5uvlc7WOGy3Wi9PiuxO1dI6DTwHGlhlZcm1Oa4SwrxzASx9j iJ90TFez6NvpdyqRPedFeSk3RihSD/eEE87P/DGAlFzXUb/fNjfMahIJLuj4aNtpl66x q1RSUVQUmL0yvRRLLOYbLCMGmH2rW0qL3ntJp8RA/G48DowaXJWjq8uoReHKYRngcDCD bk1fSoAuAQZc6AZlf662rYGCjIW+53RsVz3Y6ROdvbO3DSeZIH0KVFZ3Q/KtfAWITUt3 nJ/2wpGpEcagxq5xdr1f6KnTy/KlfHApO+MZOQzsyJJ2+kensWr7DyCoL/jJjQG82dzS zCKYxifV/dZArSWVAcOnIaq0jQRLisdkJdqW/3vrf5zkV1gZ/Yc9RxRGiFW9UJWufOvG HjVvHtMpnxf23SAJN2iPPY663nWs4f/YhpDAvCQbj98h8RKEfXgDFOSwcHZW38dQxp6L hR58urw3GuwYCRWz0F8tzLooasfNvYZGRcQNqM35Jxl+E9iAFIh8DSrytwbo76fKQy5P CfzJp0AnKAClKCVj81BjvdNmWdpdas+Fpob3PnTZeLtkFfrl5ziKV9T4AmoU4kFshAWz 7sz3ztkvnifdVBHBuYy/6M6/TMcwclDw22F3oIOKUn9QwSYVoICUJTsNjoZdn2VwZqLr FcrtxGYOfSITMPEYl5KdyZcstFLRMbGMN0lOTtZgpGvKHHkRmbHRjM0oMeAcyaXrDIsH B/XQM7tCFmwqPqB4fRjVUDmjktPxs7xa+ONF1FI3kw9bzvyjQs0cJdxlrc21Xih8rNpt yl6F5iLDK/Nhu0j+uvACBA0d9OK5DuX4FM0DQi09FWosbQ+Nvud7g1G7PA9ouE3dFvX5 qwBCN07LOYhiDcxuTaAfCT/8iKqoNmzwPmZdf3yDTV9P/WBpUVz83XllAGr64XGlusuE KF0wVwwuQPhkcLFlMiDtAd4qn8IDL4RP2GcZMmFb9OXxJiFMBQPjsmtuZUlLGvzEC/B5 afA0tXj34Cu/LkjrX9e6kK+zibxuPmSo0T3l3ci8tkOxnp2BMqnrVhblncmmWEM0lq4Q xjzl00vnEIQP4tAlUumatYguF1/ftDyD6bfnVZt2CDdsRHcdnr2hYeRd8zjAGhEC19MZ qNBy5+BJr8VftE2+NnqZy1QqKu27NtFbRSNnnVXhtCrCX0bz6f7k3rUdTwnXqjS05Gv+ 03hlCJkGxJ/lRJuA/CJB//Yt15lUXdJ1BdnuCIgEKVqtS4RYPp68ZBEps/ZymQDGnZfo 1Y1KlDSOoOiIC2x+wg3rISjDcSPJPX9KdFa9ofc411AOSzzQz8QW1BXKnsU7HZMak/d5 FtzguthFfxJcHpKBGruNvxm2JxwEnA2iRBCod2Lgjv1a9KBR/3sHkovEwU57V7uK47fk /Ohsgp1B0Do3LRq2ysyK/0JcIqg+QLmvEy3wLQeX5v6Iu+wN2lcE4JFzuNXG9gUZAm/B YZtxLwQ+r2FS3nsrCmTcc4hziS4FX31lYoUZ8JIFV4N2l5SThS6lKa5UYdhtoZZGbblr fuvCPwa3sAIN1aJlGS34O3Bd8vwPjgXkrNc00NNh4i3VV3HuXwVGAC1rJN/7dPixIBj0 Rn3KSlSbQ/GX7p9RoYX+Og65eDxwkn4kjuayXtLpaunK/cIxq0iCRW5+oZT1uKa6b76Q WRp+xnlltA8frrQPtTwQ2via5uiT9MZh4DygtWQ11PIBqo7KkbsSIly5n3f8FYQ0mNMz XxX6DHX4nl77BoXC3IGQUOgrN/6bXsTtS5NzcVQWbvDGUwRFtn4VTqqSBeIqtgM4fHRL caoDxoidQ9JPBF7DMEApfgwVnUBrXQektz6qK3kgsUIXU/qiYYVhgzOh3A35iIZy8GIy xi2D2dlvcW2zuPQ1afhHUNrbJPgVX10uAIYWBxrEaS0o/h6f7zGemKQkBoiNnfu9qMeB pS6TLrlF0pQY/9XyhDkYEJNtWiFRDC4tyQ7jgSrpb+RgSq5q+dHHY0UuQj1csiRdiJ9k SZOgpy9RhzRjjJH1eojjDA7AoY4n6O++5YPHCfA8mb1tl9M/tfpYw12Xiy2Jbwkaoljg c5q2wdc34udAc+Bw2rGURd5kndDrNbzgERTazgG5mu9F2vY/zMeGKCnwrFoL8awNwRWd UfOnWHhkjTuJbqu9Kqe14xSfBYcFHPlA14KfzE4jiNLz2KS8ETkypfaQavHcS5NGnX8g 8JWmSoHSMCyKTGkAH+2ngfvnVOPzC6cAVO/kLhRFNs87uZhTyBQWIYsF0zbA5enbrTVq XNQmozIK6yTw1pe09xWETot8cPPguGLs+rUNL7c3PlC+BUdCBYH1iXISHZiG05B8Am1L ppCVP49zDmXBAf0KLHv0r2NSCh4v1X47Uqwzeb31P4UL6sZUnINh3yJZzP/nnWvoYJUS 062yy2FBWcw18WTTwCyu8/Nx2H8NfTYIgtZf4byCXY3eLg0yHFWq643OPgIjFo9/s3Kg vzG+thOHohx+DihOjYFUoSrB8eGGPfAuOc2J6nuT3GbC5vii81R8FBZdqa0e6nCm8Rjq yebtcGcNHw+vJrSLMQYoexhD30EV1KhCYTYJoXJMOyRmB5V2eWvuaPCt3+plVVx8VulO MHjaMfC4TabC6ILo0oMgYh1hqb34vs0qfZwvNpWc0+Ts1UKmex3h2yt0xeUX6PFwmrX8 LtYWTDhIxj4u8hux4QKP9nMiY6laDR2lU3vwIFeYlOPZcufbSZmAv0ZJfMxrgkpWTlW6 4loQyvEqnTBmCu+eRyEQQpLLzabtGeTDVr17heC0QzcD0IzEto9BS0oUMTMstS+HZzhV jgNMrEobhjgC2Hlj6ZFpvrvia3JhmfmTj1x7Mv2+zzi5pn06qFmQPrYsetLKRyfio2ZD GPcF74r1JaNHpP2hk64XlW1DZqBsV0nhWOegN5NB4/Cfa22utXgvJfBGIFUa0ORDrd8T Ounsworth, et al. Expires 6 June 2026 [Page 72] Internet-Draft Composite ML-KEM December 2025 m4f87fibVQlVL0DxE6MAWw0G0JVp53BzRF8fiDfUl7hkTHSsqnZQh33AhVdkocbZGoto Xg/FbNRuUdBr41p9aHpKukmRUdDHGOVBbY4/23622QW0vBgDdx0zIHKtudwTLq4oU/9S X9vQCGiqdlnZKUWEVPRvACHOqUIwMtLjJa9S0i7f04t7U0H/hWGyP0xvOT7ERsOJsIVc d8B/vp38Sf7WWl+/sPfpI+CFWp+ciUJnEmfzvY+/HJAiXAYtgZrlANTl/4OWvDUpDE6i AvIdFpVZvCQQ+svOsJOietvxXA4cUPdi9sJG704SDxiBAlzDzlqI7oGmjdMYvBnjnya+ 2uUarZvp1c2hVjBJP2Vcgk0ds9I91Tcp8d77nAWWUGzyzD71tMjzMTpiqF0W2Klviewt jQdzTZwb/PsXhQjSyvrBlflFQSYkCB5vFj7hfJ64PKF2aA1VjhJS1ZcsrdScIqY2t8Nm Jnb9fkYHC62wNP3+BNupqzGIIGIi5eZp6jwAAAAAAAAAAAAAAAAAAAABgwSGh8o", "tests": [ { "tcId": "id-alg-ml-kem-768", "ek": "QrckR5pyqtmHpWQRrQNRm0ZnCnhVcLWYuXomBYGmD0HFqCEsDXFZIVsFGlmrF lFEd/iEQyWdMVWaovA61uIwFomcGPZgCbcNWDKE0ixnF7Wl4DeQw6ysHCiZkrA/05soq AZ6okd5gGKfx1vI0Ulw8SkyiqwmuMNFYkzIPCNDuYgYOrYkZqmmFIG6MWQqbZWNXBdQD xIJCRDLSdcHJrQk2Hg8ksukrLAEoiOxeskHjTeJCALJT3J1WChGKLRL4Sp+q9a71/UfH bmbUUEyJ4EcH2JGNDA8kuqva2ln/HK5KCVT+kjBLdoV/3xxaJFAWYZt99qoCHYOLzFaJ PF9Gsu8Ariy2PUj1tKjuIyTiqd+OwMjstoWNgBBhHpoKqkoB7pJqjBXOmXDecyYAjs4I YUSkmQYElFSsCBymOXOMzK3Jgmu84uWKrR4LsWPfVmpfJxLDiZGyssjaPU4Otd4nPE8A Dtp5heC8RrPgzuHqgq/lNZNoIZ2UfQIFeIAzBqlRHZU17GPItWM3SUKFVEvjqyzERyvX WE0g9w1erVpgeXOgaJ5aPVyz2BT/SCWn4bDehyIo+prhyYvMkdoXut+S4QxukJAr8Qb8 TAes3q+g4EAHBCIU0eqf9wuAEkWnyOdfqBN4/oa40qzjbivr8sxXXV/fqKNBUuAJEAo2 eUxNitaslS9M6QY4vNWvSVA8JRU+MU51FMYU2Q67uG7YVOTSvixlRkXpFJTpiGQXpKyG CqOcZc4FxSvP+kMcqlXOBMOxEBVWxMoUqRlMKR/UHnKcfQguleLQsjOpxedtXRv4TbKY UE1t6Nd9FNuaTpPU+x979Urhhy5YVFNkhxNKqayQyVg7gOqx/xVd/GnGkxruXOVrKI2P mAVAbajJus//CG7Fqlt/FIVFUMWO2o22YuDKyILepMILmOuuZExcxXE7hxDZAOc7var3 tov20tvleJh6pzANUiahqoAe5s9KdMKEKiZq+wZ0KK3ffp/QnWVfIoeihwXKDWc74I43 loV9gt7hbxKWJJLS5qTuWpyjCWrG5CSy6oTDHgVIrieXTHAhCYBm2WKsNqcRFGD6yCoX daBLEYsmPBxdRenmMmw2RlDRFVyKjYnjwKcI6SjlcQ6J1WOOCFBdAEQo5lmibOFojxyc BlnsnetVZCjF0a2THmTHHZGS8hIoyoKMhcFv+G6+gphQSSC4QdcSGIEOytvPnsoc3YlN HUhZqOFK3Mo+/qwYIoVGPs8cIuKvXkQtnAQ42iqGUxAyMyQHTtRZqHAXVbKHAuVzpgHR jqixXijLBNpObCjcYmhFEgf7lOIRUus+BrPethQunnKPsBQCuDFXuW2/GjHJucVvZIfN sgleipY61ySp6DOFNiSs4tCzCq7DOulNZiOnSd9L9Ma/aQkmTZ74Ca+EpqYfmA7VgVFr eSBEhNTNIBKUHRp4/iXXOAfWTIAl3kJ3ZBeNrlrudLJ8eQYLtq6p2OARdUlOwKlfHU2k VAspSYja5nFpSETf4eEG/QK4MYHhtyEibAGcXECCFk2TjZ7xSNrxqPrw5boi6ziviou2 t52IyC4G7h6Ontx1izRYdg=", "x5c": "MIISkTCCBY6gAwIBAgIUAXdfwmVua2IJEVdsEXbNw8EDGjkwCwYJYIZIAWUD BAMSMD0xDTALBgNVBAoMBElFVEYxDjAMBgNVBAsMBUxBTVBTMRwwGgYDVQQDDBNDb21w b3NpdGUgTUwtS0VNIENBMB4XDTI1MTEyNTEyMTMxMVoXDTM1MTEyNjEyMTMxMVowOzEN MAsGA1UECgwESUVURjEOMAwGA1UECwwFTEFNUFMxGjAYBgNVBAMMEWlkLWFsZy1tbC1r ZW0tNzY4MIIEsjALBglghkgBZQMEBAIDggShAEK3JEeacqrZh6VkEa0DUZtGZwp4VXC1 mLl6JgWBpg9BxaghLA1xWSFbBRpZqxZRRHf4hEMlnTFVmqLwOtbiMBaJnBj2YAm3DVgy hNIsZxe1peA3kMOsrBwomZKwP9ObKKgGeqJHeYBin8dbyNFJcPEpMoqsJrjDRWJMyDwj Q7mIGDq2JGapphSBujFkKm2VjVwXUA8SCQkQy0nXBya0JNh4PJLLpKywBKIjsXrJB403 iQgCyU9ydVgoRii0S+EqfqvWu9f1Hx25m1FBMieBHB9iRjQwPJLqr2tpZ/xyuSglU/pI wS3aFf98cWiRQFmGbffaqAh2Di8xWiTxfRrLvAK4stj1I9bSo7iMk4qnfjsDI7LaFjYA QYR6aCqpKAe6SaowVzplw3nMmAI7OCGFEpJkGBJRUrAgcpjlzjMytyYJrvOLliq0eC7F j31ZqXycSw4mRsrLI2j1ODrXeJzxPAA7aeYXgvEaz4M7h6oKv5TWTaCGdlH0CBXiAMwa pUR2VNexjyLVjN0lChVRL46ssxEcr11hNIPcNXq1aYHlzoGieWj1cs9gU/0glp+Gw3oc Ounsworth, et al. Expires 6 June 2026 [Page 73] Internet-Draft Composite ML-KEM December 2025 iKPqa4cmLzJHaF7rfkuEMbpCQK/EG/EwHrN6voOBABwQiFNHqn/cLgBJFp8jnX6gTeP6 GuNKs424r6/LMV11f36ijQVLgCRAKNnlMTYrWrJUvTOkGOLzVr0lQPCUVPjFOdRTGFNk Ou7hu2FTk0r4sZUZF6RSU6YhkF6SshgqjnGXOBcUrz/pDHKpVzgTDsRAVVsTKFKkZTCk f1B5ynH0ILpXi0LIzqcXnbV0b+E2ymFBNbejXfRTbmk6T1Psfe/VK4YcuWFRTZIcTSqm skMlYO4Dqsf8VXfxpxpMa7lzlayiNj5gFQG2oybrP/whuxapbfxSFRVDFjtqNtmLgysi C3qTCC5jrrmRMXMVxO4cQ2QDnO72q97aL9tLb5XiYeqcwDVImoaqAHubPSnTChComavs GdCit336f0J1lXyKHoocFyg1nO+CON5aFfYLe4W8SliSS0uak7lqcowlqxuQksuqEwx4 FSK4nl0xwIQmAZtlirDanERRg+sgqF3WgSxGLJjwcXUXp5jJsNkZQ0RVcio2J48CnCOk o5XEOidVjjghQXQBEKOZZomzhaI8cnAZZ7J3rVWQoxdGtkx5kxx2RkvISKMqCjIXBb/h uvoKYUEkguEHXEhiBDsrbz57KHN2JTR1IWajhStzKPv6sGCKFRj7PHCLir15ELZwEONo qhlMQMjMkB07UWahwF1WyhwLlc6YB0Y6osV4oywTaTmwo3GJoRRIH+5TiEVLrPgaz3rY ULp5yj7AUArgxV7ltvxoxybnFb2SHzbIJXoqWOtckqegzhTYkrOLQswquwzrpTWYjp0n fS/TGv2kJJk2e+AmvhKamH5gO1YFRa3kgRITUzSASlB0aeP4l1zgH1kyAJd5Cd2QXja5 a7nSyfHkGC7auqdjgEXVJTsCpXx1NpFQLKUmI2uZxaUhE3+HhBv0CuDGB4bchImwBnFx AghZNk42e8Uja8aj68OW6Ius4r4qLtrediMguBu4ejp7cdYs0WHYoxIwEDAOBgNVHQ8B Af8EBAMCBSAwCwYJYIZIAWUDBAMSA4IM7gDCn/nqq2OsUXFzhGPuoLPpHXuFtUzlbWsa 4ecsMlxnxH6+i3w2jED3PvgfS3Q2bd9KpaJmsv9X8rbHSN6neAme/tx1ovu2n4Rh+sR2 Iji2DO3giSqEeFNegGgkhAxbfwZvnZH+wFn13P8yvr18ay1VkFCexZtsVF3zo7oRZ/Hu uzutncYlNiH6s1tK/5jjBfkJQ5sOCN5caFwoAN6vtEahoWDIUJ54YZDTGzSCjScFGzoI pZrtH7g9XpBs+lpm9sY0r78sb3WtL3A2CEH5fajD3ljMHKqbAPyNBEs58z+gnkdvuYd9 dBQ6N4IuDYu8H2NsHegHj3i2CCqiN7h8PJ0ePgr21DmhQH/LBBK4PrTkN8CVawvWLcHg Xrc7Q3VOEVvR/RrtgQe/OOTY5Nf+V75gFD6nnph3xspD2d8Q1BVZfl0HSrT3QNE2ElV5 3ws12iOVjcAcr+3omTJIAiv/83sGTEVHmoz/NpormGHocpAG4sz+dTOFUvbzuZ4D62BW D8YQKY1gt/hJLZ8kYPPB8jRTH7aDe81ZfyQsN32KqM/RPoKC7NNlr2GOlllgRcBkHLNI fwXZzPIY4Uf/xzc9SJHT/bvwx42H5PPCR/2xDnZ1CZ8u4fME2qC1BCLBVt/f12LkPa6j c3IPuukFhWZp6ENWNK5bfo2TFhpnEbEnUXLNBRa660bx8jzqtIRl6K2sOSByQ1R2jKe9 jgwrW0xOXEbBtqKZs3NX8zCcTB6+jbnXylhMLVWMaLjqyY4lAqa3jfJBxrZHsbh/ooBG 5rfSCLy4zCS5WIG7oYWjCIeZUOeW0OWxoioAJ2DOu8vYQZFlW0aJl1lzIZsMq+ym1cgz 8T6pwpDMtr7XvDOhnF+TN3eTN8ccMG7Em83YbYkddfjVms9FXMgdzmplc03rbicF14yY U6Hfcmxq1q7uhiRT+TssOihUu6Sc5UcSOGhlQ/zK9cs8RRuqW7406uZsf5g5Ct6wdXeB ojvLep4PXfrjVvgJ2705+ayDxkSH8OwFxgn4GgofJr/8sWRHy2p9o0QSz7WUhru0Zyrg VCsHgyKs2PxRwBpEirERrNgc8WlXdadrkJfT3AhF8MszqVM3q2QxGTnmjRdd0jkHZcIp lUksbyiPRTIzydlDscav0m6uB0mBvsGk1lP8s0VC/hz0pfiK6vwW5tZ7E7DWuAAN7yXt pdu0DBOlcSkJmei15jObbwLBECOW2Kz30iPTvn0Nx/34rfR9qybX72BooPa77/YqG0GH EvIT3dw8IgaEzAz1WCzsNY5f+29rtI7B3e6D2KQUL08Z2rHPkIAMB4+WvHoKFi6NnQej DCyA10AdH8zGppQxV28wJUBjF6sFZ/vSlwcNkjQEWF/AG3wB2co+XmjlsUZQcP5lj72D PUkH+C+zVvasseUAdx7tS5hTqiM+VHCF3eu4kw6zzghQgj0K4j1iNFMRy5/r+/HkZw7r sE8GRNMHxni7+XZFAXxDAulNZh3qsBYAn1NiHPXc9YOvy5dHjdO93ACo6GLSToxyoIjc Qi9MRh14rscs2a2PdgIWUE3iPdXHvW/V4GV0/eKK31bwzmqRVRMONWkcRg4c+E/K9UKg x/+lJXBfX/zg6cJDJNsBgOWjXB11OlVKTGd4QlmjMUvOWIxdjktrZgeXDKNtNR376wqg aCcs+J+xZbC4RqikdOcvAkj8skGSPhgIDMT1nJokk32ge1uxeBgcRT1YE1W+ZK0ysuAV cxRoYOx2x18pBN0n069KS5Wxs2gEz+aODKrCi1Ecugex5IPT226cg3Fu8UherBP5Onnq A9uT3bhUacMBg8P1TsqXGvtUX1/alg6DjxcnYghYdswfRNjw+TCxY3WHbH7GuvIHfLi4 g5ejujcTR2Pcekle0dLHEX+Wf57Cl5wniY2/QkEakBFE0vCiEqfbQCDfdQRw7d0bAhJ8 R27/UvmEwdsKLQx+DqU0FXVUZXmXWjgalFDXcPfoJoG7AJJcVnopPq0X14W5R9M2JcCG QQ3QBzNcgIxyPWyKjdxacbQ/9Zp4ZYZ55eUlD25gMp9yxilUJA2G+vxV5X6/fQhuAmAt TNNBTme/eXawuEyDO4eppexxJ+Ek8XP08AahnU1IPn86xuxDHXfU0O05pphkS4m80vB9 k0SLml6z4W4B6Mxx9kg9aKfT9Bo3VoNRBqrDIkJfL+ZLfIpiybrKIKu1AC8InOEjlfev Ounsworth, et al. Expires 6 June 2026 [Page 74] Internet-Draft Composite ML-KEM December 2025 UMcq70RTcpnoeDdcoqyvY9Z8awvZptMHP7QexVLt7IMqdRYEemjhmKOSWB6CQgncfmD7 LKVcn8YTlsdMU4oHvWNtJn2Bm82po7/D9naRmPRbqQy73W62i2ORZpbvq/30RBShlqM0 JC6ZxL4elgiTYwIgrFCTWUCVRbOTGP/MerFJHDOmRK6ez4q1TZrQuUmd+gXpAmg6oUMn D/YSw0iJh7+9BeIKPwhd3F8cfIPnA14Mgi22SPBq1XxqGsNCZ2sfhFLFVd+g9IPjIbl7 ubS5NIwH7zn+pfn4+++p8Z2oLt7Mc9qkoHA4e18p4K16NBpx4q54omiFXBcBr7a5WvIV bPt4Tzp/mPD1cNIhEGe8GPZoy3P/zSs+0i0SwijTYsZOAIrBK3bvmuvv1JeFAz3ewPDD PDNVQajr2qPOeIEmItI6edpq9sjNZJlm2FgwoZC7lj+IOKTUiROpnB6jGa4PODZUENzT KjlTCLFfE22WwxxYx3Uv+x4CSvel64yoMJUKceA2T9OkAwQj4JT25jMhJShq0REgngLV aXEzqHbOuo4lSWMjXSFZsLzeMROXf+iCM0dft/pW9vD8u42i72HNEBhUcZaAQ15Felfn APPY/xIkX/qV3nFCuHG4gERFWE0cvXFot+9tT6DHmAvH6fA9n/s98GfYtgZnj0fA5EWB ewmfAWsI8Gb50o+h3RmJ5ULWI1ToBtYowNj28JiYDcm30fH4fV05LyDobyN5ti9p3gYt sIeZV99iiuO6/52CNAfcU/BCS1R9m+Yk/69GufrWHh2+ez1vEIOkE4/TAYhhGkwLRc6K CxR16lhj91vpL36OSM7BFm6FNOLf+MH6Rs3yfgQVa5Gr9rPeWrjjmQtbl/dh6FfLbkll RaPPJC4317z+sZIzEZuf0x0yNEyWiCisplbLraPU3fC7kPjdfGsBILD4DPy/pMvo/sTq et9fOVvL7qAEfItPZ1A5bXCsqt1q2sa185MGXDSMDJ2nshekSU+m9d1R2te907WUeg6I pOFj0FPUqijf+BvbcVoFrqXtMpCGB0bbLX8tWXN3yngsEgLWKRZAdWqLXWWvs0GEs9jP wKCkpNBjME0Rekimf/4ayt6pzu5/RM1b35JmHmny8Mv/waG2yhMwkJbz9wmcQ70mtYR/ 2wwmdmiWYvyYq0h2mlYi+5nvVT0j8X+jjQiOxFd81YLfFWjSdXCEIK583ES1CIl7/EIP b5Pw+19iO+MPOQeQx+YBvaX7X9o3ttG14MhS3v0wdSqR0lkoljuzyRTTeHgp888Hr0EB 657ulX7uK9s4tt75u9/TNRot7PXBOLn/DUz6Dhf4sE7rbGBhtV5FKQmF4d6Z6Tke+aca G0ipBWWAMVp+OimHiNJ843BwTRR7DeSQ6/PZ/on1tiv9W69ok30isxW7rIhiAX3nc+lG i4kxLEYOBnvS3AVa2Hahsy0/0wAohVop83m6JmeK1Q1/hQgR2O41uN0R/5+7+/Ss+3T4 BHw80U5rV/pVztcM5Y8AVxdeZ5CJZhqZPAmwpfAMEdrAUDDkwk9qwXn6f4Iwj5a/XxIu baPUrTP4KiDp/ppR2JkpSO1MnilrRvwNSrNDM61Z/TCOMEvUvgbgn3MmYL4vMXWDMeHB HzAveK5omT8/2tPILT8PF1yovln3HnbaoEinYvx053aYFleBN9OTQn1IoIXTuCgS1a4H 3kLbH7XANmKlhJjgjJ5ikgF8zyua2XjWHdq/JwcLm/FQfB91qs/iveOauT7dO67Nz8V6 OMp/AZBpnlE+a4mZ9X/I1bMb5OQC6hCKsPCXyCNIy2M5+B28qRT70De6omZTpyVeyjlK 7c+eMUmiC0MuaIdlC8raAVmyJ97Grh5svXhQYnhjseYcDSmE8gPoA7yTCApXI1q+T7Rx zUTE/oIWNOoWCJq8oSXXd7K5vseJw1tx4j+So+IjNIi2XPIUlxoujZzg7bW2vKL0JHo3 BP9Qoa7/E3jLbIqwtTSCW+DiKKQ5vXHlDNHGkj/x6ZQPE4S0uXl4S6L8q5LGKRSl4ASb 7rEbawkzA8orBQqwT39+yQ+4FZqppWgGbAYUn3YMz77rAHZouNs8EvZRTwOd0n3lP7IS Njh0kLtlq1+WCCJUh/n+Dx0iLFuRlQk4PkNf+hkqM0FO0e3+HiU5r/kEJzJCewAAAAAA AAAAAAAAAAAAAAAAAAAFDBIaHyQ=", "dk": "3olp3lU1fjKUvKynYBlEMz3RN9VwdZSNsKkKIri5qPV8/7deZWgiL3a2Afk/d 6BaTw5RpTowzVLW5i1gR4iD8Q==", "dk_pkcs8": "MFQCAQAwCwYJYIZIAWUDBAQCBEKAQN6Jad5VNX4ylLysp2AZRDM90Tf VcHWUjbCpCiK4uaj1fP+3XmVoIi92tgH5P3egWk8OUaU6MM1S1uYtYEeIg/E=", "c": "InGJWr/tsYqpfZ8wukClfEcKB8yTU97T4LCWzFu1UoxpLCw2BWZBNzTF4koPm2 D8jaKNxvoxK+9G09dylSsnkzH/uz1JQhlySO1+fhN8xS106pILnCFk7RuWi2f8ULmopq c+e1teasKWXbFW69/jK9UimYSxl+izY85ehjiCbuhPL8uGlFs126HKYX1r0F+eESvgGS u2cK3R/zN863OpZQsAOs7dXIR2/ZL8hfPrshuSVwvnq9+7aHj8B7k300LGY806RB5fET PfBquPufpACoo089auKdleaALo+O96zpRnzkyAU9UvRUH3rJtudNHSoaPyr5UdKoYdA3 ZsDsZzvKDrKXOSu1dHcPRBmeMPDTMkBm5WwGtVUa/OWMSts1ytQRh/HTMc15r8qrEUS7 l5i2cYN8EtGUIO+DbnIrSdOXkCRIMglbNKl4UpnChQNH4PLTtGR3ZMhk4vY1dbCVP3Iy 34cqeMNr/UEazqudJ8bT920qFI3k80PVSQpbgJF49kcKbtB243pimmJc1scv2vWSnBQ2 OfXPh0Lqzx+JhIHUt8RyNkvbWKwTCH9ymA75gFpUpDs6jfr+OTv/3Nz/fs9PKl2qlxma sRdjjnd8VGOtBbSCjAP83XG0w26+2U7UFWIhcuKbtT5fQ2JxUhLnq0t7pVnTQa8dIXet IoUPjY0srBmEuLVDkYYrBPpnqW2f6R47aJNcyS/hw7L9R0Zw2bWTK+cqd8E+Pz9++R4D Ounsworth, et al. Expires 6 June 2026 [Page 75] Internet-Draft Composite ML-KEM December 2025 WRE1uL8EIbmTWQvvK1ZvA08XnMX2ag7MXB+Wyiy+7do8fRkKYPK+r0knOEFQxKPkPdOp 2rCHaLYpI48E0roA+l847H32VeaiCHu0xLBesv/L6Nx2QY/+5I6RmhIUnWk+mnoybrjZ 2yOkfPKxL3yYW28ltz3PkE+Usdq7UiEKd4S/Lz4XMfsAHBEJ4MEcDOHZBdPFOHc1p32s mYhZKLUei1vyPm8xIUKjNeq3vKg0wSprq5awyAl7Bb+HXxtsieeK9MVlUexbWtJSC6/e +DFl2WXT8dktfISmp1bRgxCK5y4BsFo5zbRla3IFbVYNZ902Mw98InPSMtml1QBgtOcD USSoOC9F/DU8QLXH1huRBEJ3C4xGJWCQe1VrKqpVvO00NbG0TaxtWE5FN448iOHkPld1 H50nGZcou6IgvB1wuhtjQvad9+LzggNYnhsWfMGgOsbU0ajJqs/ITLAWgaaTcyAJGWEp 8eBbVEq0krr8IZPTrnXTqTn1yGOuUmojDFgsBe4tgxCEkNmHlgb8kNoy6nCU7ypMS8XR 1RZ/3IhfvhozFYar+HGn3BsvYv38FZuGbijP39ocLaexNTd8hbqnCsDyZlbZm1TmHMSd 6HhITl8xIO5oL4cRR0K0UXjtDjfp8dIxI79O6WsogRiRKacQ8KkZpnXCv2f2iZrcDiDO +1dfmzV6X/eLwSsGEseJIWWKpTuIo=", "k": "5qlGDoFVo/MqE8J2neqfvwBNCCYeWkhQPhe4jWY+rlE=" }, { "tcId": "id-alg-ml-kem-1024", "ek": "9sVKgelxb1B4UKEuz2jJ/Utlp4NQqRKoXOU0uClOJlFKA5aH2cGHMvq3nKKJS 5yKU6t2zOtcEZJgNBy8Pzo0gqqSAkRbgjpDxYyzh1FYfsMLC7wMzEOBYiIvZvXNT7PBY PMtIBo85FkvxbUJCoJqqiFt21ltjDmikJukV1psf+Z/D0Cb4skeR3MqBKQhukuXanoP/ RuqkSx4L9ZgcjiSexFfKeki73B+ujlrcsdiE2Ox8VImFhCZK8wn1BhBh0LDAikyV1E8V EUCaPcAA8pfllsom2ermGefXKlwxnZvFjIZz8l/Rpm5zZvDi4wuZrlMWZEJ/YTIaxND5 0iGRsGMcWmE7AZXzmhvjuezOBMuBKS+dSXGwrRFxtsW/6EFWgaN/vTMvMo3+AZlbpitv sQlLjSlq0mSN0gAprZdOMST3mc/iNNqiUOvXzMMvTwA+ABbSpYctkl9ziMNDTCYs4eae sNlhCyW/EA9/OWBTqJLSzI4UgyBK8NKiys90dLACLchQCKMkyEVsCOTE+ptxLR5wcI/3 le9RXo8HWkJXnEacYGqc4NA94vN2giRMYuMFTFN5ObAjSzF+6ANHFuhjQWxIWqb0tI/c na/Hzt6KUUv/acWsgMVajUNRhGCTvYT/kXNGVHIkgkLDsafwnEjnIw3ovW4b5xI0MFaa FMnPUeaFpM8GTFfg4auJ8ajGVnMslp5p0eGWMqed6wR38orpQoK1gNXiuu31yAlrcFwc ol9LEYkaYcQf9sKJNFHmtp5YbS26jYt6xgmQfdIjdI2Q2oSMPaa50tz0jxxNvYm4utJC iyVnBA2SUoyqSk0axxJ7KZ3E2uZQ6pgJZtTylUBygGPzAhqPEAVJMm0MICUZQQFuRbEW vy8tdarfwqFDmZMU0J5pNZed9ZqWQK4aJAJchA8lLEQTsG7AudyvIcnWzs4LydUxxuts 8KfmVJKoMMTMJM4mktaNoY7HyZx6bORMbDMUHB2zBUpAetAwxQ6apF7MoQAwseh39rE7 PWBrtQry+QJBVEkoMjEI0GoRfAjGBvCP8bHEyqI8oEspifDLzi+1Mo2tjN/F4pU3owFk ktvBrU9aoWclUlkvqO9LHpVS9xda9p3F8xyUrgC2ocJB6BAXcMZ4zjLtNQs+cIEeQtST /laUqm6eoIFfKiEsJqyNKZLLNu8Gdu5v+ADCZC0DoShFtx5mwBkBpwrf9R++yqld/N9x xK3SZcurIWuWSg6sKx45pyIUutzijld8twRqnbHOJdWjCmuI4LHQHY+gOSkPvKUzrxjs LoFc5yffcx1SnDC6mZFg/rJZVJ4aYel4+FKkva0hiVl1GS3+uHBmDibPLaGhKm71jdMc SauXNGOI7MaQxDN3+BU7ClaaZKdUKjGlxHOIfko4iM+96OuYyDEwYtStGAF2LHKStV2P 7UCB9o9XKet79NngVnInOi8HmkgSAjMpCM1n+IaWJdDKUOSsBRtYnwqgaU+bzmZTxRcH qzBkAgUk4UlepdPotuz6JNxvgecDINGMmWy5lgDeQMehkNQY5qrwykcGxwDLaGL3ZBNb livFjsQeUuG4+LKjJvBNMgLJllbi0Sl6zEVzkC7+KkDonszpKiIonsCGXcuy+UDJZQYD bMe6Nhkdsg8I6A7kPyj1xG7ckg82qa7T2qa/TiCRRZjnIODP1RX5yAMB9RYS5MJMGahc Gh7v0MScxlsR2xNC2DDkbEieAu43gKFfhKZxYoI7Hdiv1TAKTQ8MQVnQIJ7g/GBp5koV zZAlWy3nRFUWLKwNBZOcuo9a/uz81RMLqSZloNgQXkdglx9n3l4djPPFxsbIBFWFoIV4 uI4SVxG2gtMoFAlladHoYaD6HBRWRYmxZt9wiJYo4hNF3a1npS/tki2vmRPgFgsmnagQ vrKkJfEGNNFdIwbcwWqSDG+HnLAt7InDfxC9OuNiVm6quNS0pqY51Ko3pQrLtcwhMzEu BtxF0oPyrA2USIlEFgClwyRWeQm1eCKOpo7ddwz8EsU4muAa8ytQfOex5iqw2GNLUEKa 3mi2zIS/4dz1BMiB+KNrTyxuFoxROV8TFTUXRoxrAz9jBVOIAKfG2BC2FE=", "x5c": "MIIUEjCCBw+gAwIBAgIUIQj9grF2UOP3CnqaIvT/g4PV4QUwCwYJYIZIAWUD BAMSMD0xDTALBgNVBAoMBElFVEYxDjAMBgNVBAsMBUxBTVBTMRwwGgYDVQQDDBNDb21w Ounsworth, et al. Expires 6 June 2026 [Page 76] Internet-Draft Composite ML-KEM December 2025 b3NpdGUgTUwtS0VNIENBMB4XDTI1MTEyNTEyMTMxMVoXDTM1MTEyNjEyMTMxMVowPDEN MAsGA1UECgwESUVURjEOMAwGA1UECwwFTEFNUFMxGzAZBgNVBAMMEmlkLWFsZy1tbC1r ZW0tMTAyNDCCBjIwCwYJYIZIAWUDBAQDA4IGIQD2xUqB6XFvUHhQoS7PaMn9S2Wng1Cp Eqhc5TS4KU4mUUoDlofZwYcy+recoolLnIpTq3bM61wRkmA0HLw/OjSCqpICRFuCOkPF jLOHUVh+wwsLvAzMQ4FiIi9m9c1Ps8Fg8y0gGjzkWS/FtQkKgmqqIW3bWW2MOaKQm6RX Wmx/5n8PQJviyR5HcyoEpCG6S5dqeg/9G6qRLHgv1mByOJJ7EV8p6SLvcH66OWtyx2IT Y7HxUiYWEJkrzCfUGEGHQsMCKTJXUTxURQJo9wADyl+WWyibZ6uYZ59cqXDGdm8WMhnP yX9GmbnNm8OLjC5muUxZkQn9hMhrE0PnSIZGwYxxaYTsBlfOaG+O57M4Ey4EpL51JcbC tEXG2xb/oQVaBo3+9My8yjf4BmVumK2+xCUuNKWrSZI3SACmtl04xJPeZz+I02qJQ69f Mwy9PAD4AFtKlhy2SX3OIw0NMJizh5p6w2WELJb8QD385YFOoktLMjhSDIErw0qLKz3R 0sAItyFAIoyTIRWwI5MT6m3EtHnBwj/eV71FejwdaQlecRpxgapzg0D3i83aCJExi4wV MU3k5sCNLMX7oA0cW6GNBbEhapvS0j9ydr8fO3opRS/9pxayAxVqNQ1GEYJO9hP+Rc0Z UciSCQsOxp/CcSOcjDei9bhvnEjQwVpoUyc9R5oWkzwZMV+Dhq4nxqMZWcyyWnmnR4ZY yp53rBHfyiulCgrWA1eK67fXICWtwXByiX0sRiRphxB/2wok0Uea2nlhtLbqNi3rGCZB 90iN0jZDahIw9prnS3PSPHE29ibi60kKLJWcEDZJSjKpKTRrHEnspncTa5lDqmAlm1PK VQHKAY/MCGo8QBUkybQwgJRlBAW5FsRa/Ly11qt/CoUOZkxTQnmk1l531mpZArhokAly EDyUsRBOwbsC53K8hydbOzgvJ1THG62zwp+ZUkqgwxMwkziaS1o2hjsfJnHps5ExsMxQ cHbMFSkB60DDFDpqkXsyhADCx6Hf2sTs9YGu1CvL5AkFUSSgyMQjQahF8CMYG8I/xscT KojygSymJ8MvOL7Uyja2M38XilTejAWSS28GtT1qhZyVSWS+o70selVL3F1r2ncXzHJS uALahwkHoEBdwxnjOMu01Cz5wgR5C1JP+VpSqbp6ggV8qISwmrI0pkss27wZ27m/4AMJ kLQOhKEW3HmbAGQGnCt/1H77KqV3833HErdJly6sha5ZKDqwrHjmnIhS63OKOV3y3BGq dsc4l1aMKa4jgsdAdj6A5KQ+8pTOvGOwugVznJ99zHVKcMLqZkWD+sllUnhph6Xj4UqS 9rSGJWXUZLf64cGYOJs8toaEqbvWN0xxJq5c0Y4jsxpDEM3f4FTsKVppkp1QqMaXEc4h +SjiIz73o65jIMTBi1K0YAXYscpK1XY/tQIH2j1cp63v02eBWcic6LweaSBICMykIzWf 4hpYl0MpQ5KwFG1ifCqBpT5vOZlPFFwerMGQCBSThSV6l0+i27Pok3G+B5wMg0YyZbLm WAN5Ax6GQ1BjmqvDKRwbHAMtoYvdkE1uWK8WOxB5S4bj4sqMm8E0yAsmWVuLRKXrMRXO QLv4qQOiezOkqIiiewIZdy7L5QMllBgNsx7o2GR2yDwjoDuQ/KPXEbtySDzaprtPapr9 OIJFFmOcg4M/VFfnIAwH1FhLkwkwZqFwaHu/QxJzGWxHbE0LYMORsSJ4C7jeAoV+EpnF igjsd2K/VMApNDwxBWdAgnuD8YGnmShXNkCVbLedEVRYsrA0Fk5y6j1r+7PzVEwupJmW g2BBeR2CXH2feXh2M88XGxsgEVYWghXi4jhJXEbaC0ygUCWVp0ehhoPocFFZFibFm33C IlijiE0XdrWelL+2SLa+ZE+AWCyadqBC+sqQl8QY00V0jBtzBapIMb4ecsC3sicN/EL0 642JWbqq41LSmpjnUqjelCsu1zCEzMS4G3EXSg/KsDZRIiUQWAKXDJFZ5CbV4Io6mjt1 3DPwSxTia4BrzK1B857HmKrDYY0tQQpreaLbMhL/h3PUEyIH4o2tPLG4WjFE5XxMVNRd GjGsDP2MFU4gAp8bYELYUaMSMBAwDgYDVR0PAQH/BAQDAgUgMAsGCWCGSAFlAwQDEgOC DO4Anj/qYQQirAoDblsE/Lxq6upnF7C/cMkRsyEDi+gIwfkALiYR1MX7Lw/NlC56SM5f Hrv1UR/crC9jXnAJFA46KU1VxsGTNGqCZnKKVgenfKb1D5e95kzCjDzB1rHj+2SuTC/K s9yp/I2Q+O3cEzvD1cyc2t/auY4RoT8gS5jx46l7Eq2oDing0/wh3Mmb98sVJWRkhjS5 8Ha0NEYEpJ6kQESArIh7ElvHzPitNK+eIshR46CgHgWyG+O/q0hpXu/AlEFKdDlvZ0PO DGD6azYedseThHAyr81HHtCtzQYul4rmrV4BKwYrfvcUj1w5yQjpn7ohR3UU4j1ZIn+g o9dLnzKsN8nt8AGJoT0VhfAc4D8Te3M4n/2RCYyRCMXVbLdHPIXSJR7oLX7Rml1wvhd2 btwkjUZSJWi9Wkb06kkHOcRGKshP5PZktrvin3ilRzCZxDJhqDohNOfiELshXQY0Hlub qRtvuOPwPc4YYY9ARMI1trjM55sIM+kzC/jr7okajFrkV1JSRce3ax+5u/isGgK5q/3N Iq4dxdoabj27Ud0YlkuX+EyigdvzPU3+/NEjV646lItra6iRP3pD+yAbP3rd5m8hjrYi q7BsrVh1eU8/J6zbDoMTMfs1q2nEKV1IDxWwXyyuiTU9apFjPzOXzYNkgPBC/wiVgsAX u/7oYOhe00f1x0YmvYv5k9/274I/2e4qpGMP110FwP5WkQSYqQ9uuGz3TFgfTHaIuxq6 /LXgaiQGZH1TQV0Ik7wRZIZNIzCF1lwwTtSkTpl77XUCURuivJPICf7g/5TPjgnFndVK 30MttjZNoqsoerPSbUnT3BEKsTk6Ys17x/YvVjzQE202UyCgbwbTIElZuTzxdmr4SZrQ Af2u3cTBtU0b9Cm9bncGWC9YELehcwt/B6XqpqTN5/CQcVr5mxi3skDvgnTg9C+/fWbd Ounsworth, et al. Expires 6 June 2026 [Page 77] Internet-Draft Composite ML-KEM December 2025 ry0zTfFAIkweN3qn0n1mijZPiEM3vQd8NDTAoq2Y4+CnQdWUGiyxlunYP88ASnLkDL3a JN7DbxtsMxw4nRbIA3Jpv7v4hGJDP8j1qddNBWj+yFhfZIIL1wUnNKMRKOwNIwZjS1K6 ef4z06z0rZ59v7wz/a3LjH5pNJj4kXrSsS/duhM7rrKQLiBYnjFz/eaf6fG0c5XGikJN mXoFLK2g3w7+V1EaBmoqrC/oQ46NJPD8LttqonI/wqkhiWxTex7Eqp3n3bnA8vg6TDQw RKlLJLhxH7jfl7Ozb30HFz6SCS4d5O+BnN/rqqtS+4TjHMFWUaEvn9q5FqdGKYmN5R3L SBTNZ28cRxCaGEmjByMnvpsy/uElg80piJmTy2b1nj3XQ4urRN5wXIirTyIU997kbDND Xt8bUa6HdsCPQNk13z6Hwp57IqpArfFfSqK5QtFxAQWTQMFt8E9+wb0eAciGT/GB+pHi oRa6y5lH3w/U940IPPBEcqOFxuqf7hKKbElXoutPpSwmGduzH5vHImWVyMiNfb/dt7+J 9Lm32Rv2xC4Tl3Q59Lxd0FnV8+4UHuI9sYmHnvnL9trBDffhr0i7DU7tv9I6uU550kAY tcZhDpOYlnbbQPL3k0ntVf9EwUgTg0/MUP02ETWHVcDm2psf0xnnRjCgL7oPdRZYPoRV tAMjuxFdJ0zzHLw6Y99mqyqhT7Hf7VAFx5oV+X7AV32r/T3ygQLQ8Ysf0xxNAY/xj2Fk UCwIofjnuetmKuoqFnsBjflUEtMErfL18kKtPkTK4wydeGdIPCUXMLJPXXCtAekLAWus H03s07uB3Ei6LDRDmeoXNFpzTxTJS3CQbz9f779RmHlUVMCmMS49LuXfgeL/EGFFt+w0 uFpg1WLP7H1u2UWGl6lxEkS4bhwZ8Mb/aYH/Y8XA1LggYrKU8zm9isdYMV6qotMqA5ju 0RDC8G5pyFjcb4/uuWLqgQQwEfEiyB+++6t0izVWMJdGY2LdWvspqEZwZZuvxF0284MV Tr5AuBjL9qypxJImqyCwP4pU4aWBUJ1KksVZ1MZ1hPevDgZxcdShaeeL3TrNvtsANlgK ULlqZKp8NJll1Np/OxTZUYknwNCDfZGIIKy9wt8NKSs9lAngMIa+80jM3qTCPHhzl2M4 yEXZL15Gtb6haFZH0T4lKrBLjBY8y6Ula7MSMGPUK5N9iyDAwrms3sRDLi5kUraNh4M0 Vxz47eccOi9XOgXiS79NJc/hqoz7celMMKxsP+lM0ZTB14A91NSpe4ErlCoTYBE1M2qb l1Fa0mbYImnYif/bIFG60gfdzO5IYyNI5HBZOAIFFRkGjiOjTwesB8ETsBLNqgYg+KCy 9WNFP9w1EGjPOtZc0uc29dKipE3GaQEfzZwdG+DtmZmS86UeNnEZcEVm+6sTZ8GiTDXL LV/CbH1HfouZ7nGkEgb3ECdPfsqUxkETgDSxh/1XfE+MALGJ41LFJiTsL8UbG/3oLNy6 9eEjIqyhTPbKJRXWyb/cpbzfjcmAuQ7oK8YxRLXUJ3kwcQgkrR+mmsKBHDS8MV2C0rGV vN1AZrh4AskniUzzoFfW/znFTTKy+s13Rn9qe5zTPsY9HJNE1Wt57gbdaVVc7xDPaJyc crQluGCz7rlPrSCLQZ9i5CeoybkvmcLvJCS7eGgNuI+suNAqnSpq6UB8x5Uw4bnfukta dTyiYk2aoK7WDuLxq9TduMhnsOfONr7G6zfSIjCZ7fuQZ7JgWaiHmpOoCiaGXMQCCBty epCnczuzpXxzYwsVI8zOK0fHUDCfpZT9/LqrhwrjhaYPXKcTQpyhr9g9IfGXmnnnHHXL y2T1VxrO3sVLc1OWqGpjtlsZJ0EhKggSGYGGo1FsDEb3nQkxENySNC/cu35hMPdWVFmg QhrxsgKRBtMuC05PJFyn4iDxYreb00i60rsx84KhCKiAWVlH8TyJYwKw0uXGoDmy7Vrw yd3NBT/p06AfiFBUJBujGNG/jFMVcnPMH3D7vFxIHWCFwzp2RKTRs3rRtzzTW3seYrZ1 6Gau2u25KFt+fF/ok05uQSCqdunGc6df4NbsUqxEwT9OKKBFXCGuI2hROef70Tc/V6RQ Fl7IHmJM6b6kI8rxXp0SOxAkxS3ojr1dOdZhWSXeEaqoOg2YmVNg6EIMEbFuRg9J3Jb3 42gCmHDwEC5wKiF6JaKFk4FjpQ+xZUiJcrsCy3vNC0m43/ucW9tuzlHdHkLzHz6XrQNh MSrU9D4ctDoJ7Tgofarak+7cQm7swTCMogK+8SCo0s6un9WB0OCCBK2UJpXLZG0A8d2c NITfXmZNJdmkJyLoqYA0+E8fxdxd8xh9BAv/VjznKr2/GXR6+dTrxArzHqa7gAWj+pa8 73X0mQoR+1KEO6CJ3kcVtACvbuHbcgFQfMoPDJA3M4Vf2t3jnQDcGkW9UzN4bHeaJIRm Zi9Szj7ufQm76NVe29VurjyaIC/VRwLCI2RLrEOMmWEi06EqN6m6rgSK/ZO+BN0fVOv2 PpFyY+7c11g9dX6hTKKU3KE1Ek/D4aSZWmZe4mdGZr7ae1hoio13ImTZG93qxeJrvUjY HBp8D8f3YLLqUbsztbsFfRYpIBaMGqp3MWhJEgcaxl0pMhzfz5lVUzIrc3liFLFjzxZP 23shbX5cODzWzbsQ+KrWper1D8JuWg1TiehK0dUJYQfBBLIN0CHhnTvhFPdVNVFdkhg+ hjWzGxBOl9f7eiI/EUF36RfzWJwzNjyeknh8LLuibQAgtQQeItZt+KFKNwlQSP97xwts GS5eV+j0t0gMzGIfZbnJsft2P/6K5oC5xfvxt1xKBHE/OyxqPEMwN74GJ6Gh8GyS/Gcy X3P3I0BHQvXWcY5vl+TphNqjrq+W6EGe+nlaiYuXK5lOqLC/wNtGcID12LVagH9kV8QI rSApMf8oJrnM4gMIz54f9PsrVyAP9+RAPD31CGja1UZR7cUwNT+BPrViBxg/1RzwFgNs Ws2FIYW2z5XgJ+hsGrsEjdSWyNkmsOb6zYW6TnhafkSAP1U4KftUjZrBD5GF0PfnJ9vo dzNBBzz7zpIUDt/AAo1dKk2xs/6a4SiBnHhBJ0ilfzTTpVaxJfYPSLYjSfdoRESaNDPO 8G9mBCQPwXwlkA5S0DvudOr5aG3vfqEM+4ztLLB8y6C/FjlzGtyZzgRextrGQrbhfOql Jghs294k16X3ssd4EpJud6HhiTDsY4U6KpriLey1TWVJggS4cv+bnP21FSQI4cDrqgYG Ounsworth, et al. Expires 6 June 2026 [Page 78] Internet-Draft Composite ML-KEM December 2025 ghnMvC15ve56GcxZ4RBLgiRq40NHwFjA09pz5DBNraZ5RvJd3kHyC8R58+yyCYC66N3G wDM3xYftnfYpi/X2gmKBFS0xd+ROOGWq0oCLk9MSnqAubsW+1NlmgA5FYXiBxMff+hM4 er0nfoiYsuD1/h44b4mKk9LjHT5Nco7Y3OAAAAAAAAAAAAAAAAAAAAAAAgsPFx8n", "dk": "EnKClQ6HbMYECdTlXoa+XpWRnAzysGLKmVKbuvPLSdTrS0lcZoHsZir0vY/zY 1q1VN76oK7TEkpbt/9h4JTqlA==", "dk_pkcs8": "MFQCAQAwCwYJYIZIAWUDBAQDBEKAQBJygpUOh2zGBAnU5V6Gvl6VkZw M8rBiyplSm7rzy0nU60tJXGaB7GYq9L2P82NatVTe+qCu0xJKW7f/YeCU6pQ=", "c": "1o7zbO+0CnojFlUlYkc4zRD5mxBabkiaMPKU4X4x3s/WfUejwiTTVdLGZ7LrW/ u5yZUQ8V8MmJav3uP96RZl8Fb6O50P5nZr1jJ3sIFWf2iytecTJ8sqhMk+UgOtexWhjc 8LBtVCZ8L74PBIbXyLZQ38hi4n6LonLKEJv7DrlG93N+y0x0foirt/gmNzGBpqBpgJDl ypD5G3ZTapwcAt28EbGNinwveEsEKj0OX4n1uk37BX6x5NBgD5nd26DEqDP6HP4ujN3/ ZVeThlKSyU5CCQV2vkHV6dxePO5MJhqK5Z4ShLjJY/nI59t81xjTpq8kgR2BNy3u48fJ yTy1em9AlCSGPNRc5VYRC+fy0onPyw5wr23kdOS5VMdvl4Zz0JG+9rKgnSSYude0h+PW gESUsOUmW5KKkcZlUAs0XiKR503je5MImxRTV8tCqg5MGjjcZ8tO7NFSKTaTAuEb+Wxj Kr8LsYiz6QvQI6VlaSJs7Jlv5ILcOGdCmM4asxXuc8l7oXi8Dr0JJ+LuosYDG36ay9PG FR5YV4dG7ZPjI+6xtk5dSFhBx6Ncl0yxV1UZTJG9cu2XuXy+k9vMOF9mJzKY2jY5p3KP OzYDTf0D0EMr4kHQfKGfXI2jD8IIsXhCY36WFUjPD3tDIW2URIvT5oEEiKoWwGqLTUzp 6raunTnByyDqmi6yokfrLmbUEZKBE39ZnlsUvpzon+6DPtQmG8Vgv5oeYcsAtWhsOVwm 4tuRU/eaMJhWH2tMDPag+XwZDiisgFmVu3X3SSjROKZW7W5zO/el7AhjWEGZMSVGLi8G UeZ/eVwWq19hXd86xq7fyMdnNH6JUPIQSpRbmJRdZinGpTl+gBDn8WtKEd7qUg6CnMw/ 5JPxOB+E5xWDPHICb4LNizdoTeRLw684FFEJZUOLZsxXfOdKcDhcX3FqolbaKq541Xsb MqcTUiMs8eP8F2bbxCH2JcYShlsbypqUhY0PU3q99IjczyllhIdVhc7P6zIyYU0nO8A7 Q+hjC6WuDk4GWwB354d0oMOlHZAWkNh0eLouhYE+g60Za5PssRZINCXvxSEJhCPU4O2c 3sRyMfnjeN0JyXFJIo7tswYZJaIYEscOO/2WsVsFYwR89OR5AELUtAeW9gTmMOlDzd2J r0tfbDEUSAq0CfJh2umSeTztL/2BgPTxxYFE62cx3eJKEzxPQnGmDvrHEHYVB/j4qMj8 bYHNRK/krA/hszLnctgp07SC9kNrBfTeud84pEakWZzz6oOWpiQEnP98T6gi6m+pSKYH bHUUNm3ZTqqUXp9RVGyZeA4vEbRPgwU9gJtmlNi7AhocqGkll8PktH92ldcbQzifetCC 8eJQDpT1j0D/942yuRuWU2TFk/rvOJEYhOWpy+UCMmCOlV/wP4TVlTHqsbtvYLecO/p7 J5WuDcs1mNc4V78oIr8dL1B5mXKx9hz9jOpmCOc4/blZonUR2XyssgBj26oaD9+bsRcZ Vzd/3gqnwJCYIbEqxiSahKXqkYf/zcHKhKPhnoU5zqCWOkClOiVo9BqLAbrlFQ/eVyeJ 0FJqnA2r4/Q2Rf6/U6YMJ8W2YYz2LHJ4EQlUWaxnMCkstY8469y7LvAFhqlwr8qKmy8k 5e1kaJI83zcOIdLpQ2vCJyuTVK9CUDOf2Zusl92LbEFSn7y3e7iJQ3GBU07t4OfVk+74 F9GMBPLfS6ot4eZU/tZLMjtuusJ203SwnJp3lIexDYj5JZDKbS/CZfuc4OxGCrT6Gf+/ XEjcUtlbd0WuOc4g4fWOA9b9ufIBdl7Fcyj5wvWLadRvi0YkM8pPExTlf77IRqWWvZtD tmVCyhPQBEAcKW6Zj4PekbUufgaNKoqyxTdt5AS5Z39z9kQHcmOw4xm9a9Kvh9w4buf5 +9eSisx4kVhLaAX7ijGzkjIcILplhbQnAGTIQF7aauy6ihjnyQ5A+GOJd1EIrHVU2kxT xSQWhq7Pozn81irpjDkyWTArLpIFpq7XybYgBhfqrBIafMllsibF671gYukgllNInFHI ErAk6+/Pl764efWAAZxLFqI0/uBrnDywQX+QjcYpzUCI17ZPb9y2p0GLQ=", "k": "4hSsPUChUNxeOoQWtHf+9U/2OIZg2TFni41EVGZYKjk=" }, { "tcId": "id-MLKEM768-RSA2048-SHA3-256", "ek": "NGB0SXtrCmZkeQWPx6SBRRtEc2EFfLM5x3d7ShGfClw3NFhpHzaCjcktVoUfq MUkrlkESFmHFZpr5KY6v8K3jBOP2DgO+bOz0bmMG8rDRKEX83w10VIF8kBYaLwMvyuBX 2FJt6qiAUQJ6YtPbaDOT9RDZtulJ7EqjMRMtNLIvrZbIkx5zvO1dmAZW7U0uZkWn5GgZ ZepG3l7FTZ0HwhKgOhnAII0uENGIaxG15dPe5aPjRxJPpd6hCdYJePAUGdTvUkvkwbBm 5FopOB77pe7fhCXOGgNkWF1oBwmPnl/X1o0WeAJJbI2jHtGHLCV8LxvdiGW2sNtICacb NRl1gnM98UG3ip1kfBwxvGfBxB3/lGDp+sg1plbTOYO3uGIOZG9TSNkv/KxzPa1iSOF9 Ounsworth, et al. Expires 6 June 2026 [Page 79] Internet-Draft Composite ML-KEM December 2025 8sYbkk99YgTu5SFAuIaqEQR7EoDt+V+oIhdB5Svdox78MGtiMIELPWIHOcx6iEuQ8O0m 3EZhyY47wIEXtyz4NYyNmvJmxaUaZXB+hWqRTxEEwjHSRXAYcfKh0UDC7quXcizKImWn +k8EkJM50qELJJtXwh+cpBuxbuULrJwvFuO4AcfsrCJPLMRQsR/lkilB2FzNyM3PUR83 rtZ5+PPx9gFBMUlZAx8GrIRlVDAhokdD9mwdqWhg0CJ41wV5JitpZo9goZ4fNm5q8ZYi TU3BjIzOocBMsI/SEqK24RDM6Fgb4lkjUto69G74BFJuKmfodetSOChmeiiegyajJC+y wxhpOcWlhJHJNJDh8EptcSN22mw88k6bwKMnuI7r5K9wWC2ScQWB3odayoZ2pdkA4FI3 hHCxLCLPpei4AcEx1lYM+lEpHW3iyOVSdwFTlyvhbZeSsKaOhIWJRk6UsZlmWF83RA0x snHzRyJ7GYrNXm8m/jKuFQscBhka7YAFiRHbfDMvyV65/Oukwuh1lZs9JeaCuN959GtK jdPkzura2Ec+bgl7AcseWYm+HuNlIh+/xSPkAifPme8zrk2kbhkYNRsmNinL9y0Kggeq HmTNkPDA0HLNlxjRParD7hCJWxO9/o60mGbVto+6mu9L3BrpdXBYGOnl7O5A6WeIRSCt 6CQcxeBiHZdNtfKoDGDBReOxVw9GEHFkBcYEIw8lLBAuTFHWJc4MJEwb0SUX4F3Pla+5 tKnVNtIAaFkvmtKLVmyrSODzabCYuN1nsGOt+FIfTCTuuRhuLWExrGshORkqdWZhjZ7o zIdnUWX2gxwlBOC3Nwgw3R3ouvOgbRQaAZbR5KiW2uCGsCGSfMkECHKLWh5UOSAl+Fmp hJ3LykdTuYcHlmFaeVnkKxBMtxHPkody7VdQ6eyappWKVSJiwiroYg6nvMoJrNZqxA7M 1SE3sQKUHOg4vrIobiIIKS5rdwCEdBvluAM5lB2yjNdJwIiublb/tPMMDEa9xgfQpWoX 6DLpPXNQNiO2QGqxgwq2ZFJPWJLVbW0h3eMMQEaz1ejQRREKZQUOxg2QzooBLd1l+wJM nRCG1urvnRf4RByqKuyYBJJ6Dy5bgRj0saObCIh9hUvw3tfqGdo/29SYSKmIWO/mpj7h YxR8h4VUm2F11AEjeWBbz8wggEKAoIBAQCyKmdKdIM8lr3duX4q3Xtt4vIPs5Z28h/to 3OUXFRWc8pp5mEVeJwqJefOoKUHPUxG8YNNdOpccXR/hkY+UriCQrYG4c2aCY+1hV/Q+ likJZwejbL0xkltkFn4Na118nDyChvaKoJvyS37CQP0SJUzMPBpznS3bBmR1ErKvj8VQ Y02J/BE5CRNtRVqhkQ1mH3CB7VoMzMKpjrN/8EAoz/EpYuKid6pN8EJDbjyHI8kP2GHO o/Q2Zd5f5YYoOm+d76z/w5oD5qRmu/EedH4mzpJHpSwOwxB2Fb92u/rujdMghQ1Y6zHD JrvQxjl2xhHZFy+US00Juv1v1i3FPLvCt3FAgMBAAE=", "x5c": "MIITqTCCBqagAwIBAgIUB8yQ2yPspG1vIhtrUgL2ZWS/mtswCwYJYIZIAWUD BAMSMD0xDTALBgNVBAoMBElFVEYxDjAMBgNVBAsMBUxBTVBTMRwwGgYDVQQDDBNDb21w b3NpdGUgTUwtS0VNIENBMB4XDTI1MTEyNTEyMTMxMVoXDTM1MTEyNjEyMTMxMVowRjEN MAsGA1UECgwESUVURjEOMAwGA1UECwwFTEFNUFMxJTAjBgNVBAMMHGlkLU1MS0VNNzY4 LVJTQTIwNDgtU0hBMy0yNTYwggW/MAoGCCsGAQUFBwY3A4IFrwA0YHRJe2sKZmR5BY/H pIFFG0RzYQV8sznHd3tKEZ8KXDc0WGkfNoKNyS1WhR+oxSSuWQRIWYcVmmvkpjq/wreM E4/YOA75s7PRuYwbysNEoRfzfDXRUgXyQFhovAy/K4FfYUm3qqIBRAnpi09toM5P1ENm 26UnsSqMxEy00si+tlsiTHnO87V2YBlbtTS5mRafkaBll6kbeXsVNnQfCEqA6GcAgjS4 Q0YhrEbXl097lo+NHEk+l3qEJ1gl48BQZ1O9SS+TBsGbkWik4Hvul7t+EJc4aA2RYXWg HCY+eX9fWjRZ4AklsjaMe0YcsJXwvG92IZbaw20gJpxs1GXWCcz3xQbeKnWR8HDG8Z8H EHf+UYOn6yDWmVtM5g7e4Yg5kb1NI2S/8rHM9rWJI4X3yxhuST31iBO7lIUC4hqoRBHs SgO35X6giF0HlK92jHvwwa2IwgQs9Ygc5zHqIS5Dw7SbcRmHJjjvAgRe3LPg1jI2a8mb FpRplcH6FapFPEQTCMdJFcBhx8qHRQMLuq5dyLMoiZaf6TwSQkznSoQskm1fCH5ykG7F u5QusnC8W47gBx+ysIk8sxFCxH+WSKUHYXM3Izc9RHzeu1nn48/H2AUExSVkDHwashGV UMCGiR0P2bB2paGDQInjXBXkmK2lmj2Chnh82bmrxliJNTcGMjM6hwEywj9ISorbhEMz oWBviWSNS2jr0bvgEUm4qZ+h161I4KGZ6KJ6DJqMkL7LDGGk5xaWEkck0kOHwSm1xI3b abDzyTpvAoye4juvkr3BYLZJxBYHeh1rKhnal2QDgUjeEcLEsIs+l6LgBwTHWVgz6USk dbeLI5VJ3AVOXK+Ftl5Kwpo6EhYlGTpSxmWZYXzdEDTGycfNHInsZis1ebyb+Mq4VCxw GGRrtgAWJEdt8My/JXrn866TC6HWVmz0l5oK433n0a0qN0+TO6trYRz5uCXsByx5Zib4 e42UiH7/FI+QCJ8+Z7zOuTaRuGRg1GyY2Kcv3LQqCB6oeZM2Q8MDQcs2XGNE9qsPuEIl bE73+jrSYZtW2j7qa70vcGul1cFgY6eXs7kDpZ4hFIK3oJBzF4GIdl0218qgMYMFF47F XD0YQcWQFxgQjDyUsEC5MUdYlzgwkTBvRJRfgXc+Vr7m0qdU20gBoWS+a0otWbKtI4PN psJi43WewY634Uh9MJO65GG4tYTGsayE5GSp1ZmGNnujMh2dRZfaDHCUE4Lc3CDDdHei 686BtFBoBltHkqJba4IawIZJ8yQQIcotaHlQ5ICX4WamEncvKR1O5hweWYVp5WeQrEEy 3Ec+Sh3LtV1Dp7JqmlYpVImLCKuhiDqe8ygms1mrEDszVITexApQc6Di+sihuIggpLmt Ounsworth, et al. Expires 6 June 2026 [Page 80] Internet-Draft Composite ML-KEM December 2025 3AIR0G+W4AzmUHbKM10nAiK5uVv+08wwMRr3GB9ClahfoMuk9c1A2I7ZAarGDCrZkUk9 YktVtbSHd4wxARrPV6NBFEQplBQ7GDZDOigEt3WX7AkydEIbW6u+dF/hEHKoq7JgEkno PLluBGPSxo5sIiH2FS/De1+oZ2j/b1JhIqYhY7+amPuFjFHyHhVSbYXXUASN5YFvPzCC AQoCggEBALIqZ0p0gzyWvd25firde23i8g+zlnbyH+2jc5RcVFZzymnmYRV4nCol586g pQc9TEbxg0106lxxdH+GRj5SuIJCtgbhzZoJj7WFX9D6WKQlnB6NsvTGSW2QWfg1rXXy cPIKG9oqgm/JLfsJA/RIlTMw8GnOdLdsGZHUSsq+PxVBjTYn8ETkJE21FWqGRDWYfcIH tWgzMwqmOs3/wQCjP8Sli4qJ3qk3wQkNuPIcjyQ/YYc6j9DZl3l/lhig6b53vrP/DmgP mpGa78R50fibOkkelLA7DEHYVv3a7+u6N0yCFDVjrMcMmu9DGOXbGEdkXL5RLTQm6/W/ WLcU8u8K3cUCAwEAAaMSMBAwDgYDVR0PAQH/BAQDAgUgMAsGCWCGSAFlAwQDEgOCDO4A pRCLk1gt3p9NjUT4AM2EikJCieFWn2SnN+8/kHoerhHqaBCt7hLOO9uWM15Dp/L4NTWV RC0hDfnAtN0CHDOUKQy/vvW7HWK0AplV6NCsN27VD+XwO0bRbunXKdTy6G4owCEAtc9z lgM85SKw8jx54dXcoNMoWvcO1iBGvvzStvTcA8xxT+CzSJm1va6Bl6B0Et3pt7II91Le S2w5mLM4UhRJgB5FLvWizENr/XvoQwnhzHx9gRARKgpTHNTfGHo5GvpBvN0Thva5rBcG yXBu0vWguQxd0vdsxP/YWffIKJ4k3PK7KkRfKWWQAgT7GEwsvAaePAwYiCTTIyHBcu0Z erm7pTH6wJmzxMkaXArLP45DEwb8oER+TV0q4mJDqlsyFrxQKCGdRy4MXNOmUxHihKHB LelHiRwvqAbDpeUZqsj8nvdhHASurz3orY3lPW1QqjS7rS2PvdvtHylEX/G9x+Kmpm8v RpQsbVcZKqMxE5SFqlQcD3HHFcnmNbzlx59/eM0pA5SJdx5MJDZfVhJ4OZKuEZAVL0Zw J+oT/gZ3oSxaY1IOVANr+fH7KILx6r8w6GI90KpjGMqNh38jJFh3Yzh/noFhcYXdaxlh xgB4ujzRuhpR3CxfC7xMKnFa0EEVIrR7No/v8XBnOw5fTxnYa1tBwHflL4nBEij7MktU crYRUToUX5tkAFKr8J9XykQFcBxzE9xn0ARCEH0HtsYHOFQbbDVTBnJmGxxGV1szR9mx /Og/lsnuNYyz0vBeTx2w0jJiVDtim07rA5vyJ+Nyv1qH5jEU570vhIKTtIUxDnI7OwRA ak++1lH4dCeuo9jMH7656KRgmEiUNhvR8N89ZDGoZ0oqf43+EWKQizIvfq0eUOq265ea k+zipvHSmyV09ut26K0zwqVMTbKsymgd8C6/3mfme9HuZwU7PLbHag+IVB9U+ayMbRqx vPTGpVycW5ydrwwKctYjkf8zuFj0oLIIgkN2RkRWXIR4oW7JtvtIg7WBed03/K2oQ05A ClQMrhr8krMtgWQxbojBI/wVUiJnP2tgeEN11T8XfjS2R+EqSSKx+kci3bF/2/hSpJcl Tthvf2IUMcRcVgjdNoY0+kQUwU66aK0DfSTNMC1KE5ScSrFXVMTlCQMMN3oTmSfvnVJt rvCG+GgkCmIPQV212+pgWaSSqw5ViM/+ra0Pm4yZZbdViuiKvo022g2kk6rgC8qhVVcd ACSpbqGg9pgNz5n4GO9NpId8w86if1aC7ZcecZAAWyHfX3nA7pJBv5gYKeusJap5a0kX CzVq1MQ0N+06wcNPqzyXK0hr7O20rHV0mg10nMTkkzhTTbIxLRR6VeXZ7UeQ9PEn1qPb fXncSn4rCipgvrRofzXE+I3jphtfJ7CGCNWJr/0inzx4wf7GM6XKXNHNlVRqka0SXmWm hmpxSZxoh/2aDa9HTZvtcFJLIzjG38LalI5n62AAvpTiuaWQpP59MIgfKmGnufnOFnxo 1XSzmup7A2X8crU1TdOhVq/egUsAn5CYJX7bwCBFAIEYSsBRg+hG5yN1ez8/jutihfHO KLFvUiJFqsUywHBMYLuHtp8/suaFCQMZmiw0Qws67xwJqFxnwQpmr8d/0oMKr3IN0Nr5 iAa40qD59nHYxjd5opTKvpV8+Wsngko8F09VVm70+1seqd+26stlk1pUc67HxqeCNJkZ mKbcPBEhTXdi+bv+CD5KFx76G0S0xcFbxS9oKcj8Hzc4LJ3D4s0LDMIAFX/4u4Qmv56m nFfCpfBw16q7FeZb6d0M/Nwh0UOmci4vTc3JfrSIYxUDtvHpnkAYq6WK8UHm21R5mOW1 vIu5Trxb9rKKm/Br99qFlI69ScWLFxCoF/fk9kHA1buw5FBGomM0LZECl8wNDZo9xfDx NqNDtY6CUVds9F/Zvr2gz0MqlVZ9Dq/nPq1dURJPFk1G4tQihLbJy6jQ2+kg6XCWf10l yb2ilJuQEdOCRYXmRVohOq2z/33cZ1RE100OwbWP+0VagNtW3YH1QuMiZ3YAxarTn5/2 /hYfmXlyIQbV0vmUmLeKSP896evMRqwm79XesOpf3MPPDd6H/L6fmVc6bTt6OMwqFR/i b/oSpBYLqGYLNYECr0/cb4wYuZ8BT3Yr9JrVBF42LUp2NwTUQD3WNugBzBBaw4HFR78i k8eEZnHrjsdlOTaSUDzgSFEAukN66gSKD1nUhgPWnOB66KaTjkjfo07j+P+swtAyUm0f Pktr8awZFiljLwLBdT6rpysXvychUtpetEjrD9GXtKwzMHtDKWodkqZFAP/LtFxdGI8Y 51b4qqbCgnB0l+EiUSH2hw/CE8jVmD2dVYWQMtrbDNubIRBmaaIuoUE0zKt2jbcK+kcj Too1v4/2rE2jWGR6nwlbeHUt2vivqHP2ttbuLm0A4vnZPFCNcM+gSkqYFfNq2siqnNUR +cDuvTE79SxXG1YpXiYPWm03QifhPDC5DYVX/dhGqisQR0KVixJhHHE33UoaGhS3XkH5 zE9Gxe3fmqBZLmLhBsAx+wSJVxNYL/d2urh1J1UZ8m5ZqBe1nPngT2GsaCjaY/KeiBvy TzMx29+R0cycvrrASEEH8Zp++zd3O8a+KJDKgPFcx+vzS6xWlsEhTyawpZrdqPqHQVSY Ounsworth, et al. Expires 6 June 2026 [Page 81] Internet-Draft Composite ML-KEM December 2025 vYHBrhuKJavSk15bHnR1cK35FWO94dV71uqHsfZbgzHPmpmG1j1JvpTqKQvluoqheUe3 kC75jxXfJFCRmtAHLoTxEM2i9hP0FxlTpgJBb9HJaBPZwG5UlU8urgKf7QsiHQbXf3vo 2rns7Vk4SClm30tjPZT2Q/hjM5NxYIjVVP7XkK7VkmFKJHhmOomPg9Tha0Y+SQ376x8Z HtR1+10+whwjhKJSQuX3zp25sMRA15/mNzCFul4DnHb0HxxTh7fkzPG5UxMzrvkkHo+q oZG0ett9QWnmZHb8qscxPz4YlK8mnJKpBYSeQSu0WbqIz+i9FRyPjwTLjMiGWaZmykNP mw7tyUVB0meTRavIIZreugPl0Yb02FS6o1Cl6YdpNLo4vRXd5SvY+bpmECWz/xNveJDr MyDe+s2UistB3aTGmUnMZAumEYNnxEWxvc6KXD0ai7/QZKSO/1QZokVCCQWj2QMIJAcq hVuwPk/BaZ9g04hgoREadoptiDxgcw476sVH+LyHBLjCPA1/OEXoSJnKq2pfH94BiUH8 Xyw2V1RMwkf8Y5bI2W9QU1jvvboilaeMFNKbaqOZBOUPpd23BFg63sm9wIIW3DCVRag7 tdJl5UnLHdc7ea54TTQD84uoQTz4fXFWtbpTNXOS7bKJwfCRKw9bHQl9N5MZAF45KwHK Nm/0evu17EFDj646M7WIt02g1CRV+fmMeQGkcdoArjJDH0fkaN+UNgEc++YIY4yLd0i6 0ZMzNIKyUZl5JRL7x8xMaAY1HBiUO3msvAFHFEmnykNQ37k2RH9havZ45R61JmAL5J7f D5tou+falnstLMRijwgZwIqlkN84Niix/6Yxa4JpZSmf4S29wVJX4LASJoH1oWHxhwaA cv02YPCwxH1tcmEH+edUTrIiCl4wJdnB4yCOfp6F3tPme5dkB1rfh2jlrMQyKBoE62Jh 40vfGUctZ91EFPQD3PuyiXhQXBRBGmO305wgB2H0wG/dVu03fD8dEH19l/+E16CorzrN btggZastCr+08i1qSu2JDGvoB7p9eerRh4YHUZ2LDG/KEf/iJMBtdRFhJXglC9V+aQ7v XGT7ZGYcD+yoXlzcuZ8QbwaXoROrQALPq8lA6F8x9MSWqYa0Q6VJQR4YcODnutUkfNqD QCTkK46PjNyQRXycnVuiNKke7DbvFYyJJfSOEERjqMGDaTyTAN5Nmz1grsBph2XOMGgQ N1t/a87Qv1oScb9HH7T7lsoRdsot1lj895xZ1Fy7jJarXpMzM+YMsf9io39wxrtE+61+ EiR66FaEqCDHgVNFnzS4odTHF8ga/V+bwi5rGh245mOmo44Y0StnWYEIY1F97GWBl1+Z EGJB2bW4Zla0LNbin7dCIOUGU1vNBMmZq5fTm0DObWG43J2gWjaV81oqIpdmf4kbbSIp rW5MzCTmfWFyA14snhEKkIdGkip9wdlP2FCtLueruTLKOR2tbP7R4zFQ9HjcvFitA58d d+FNZvu0DHhPI4dJvDjvl8Nad4o2JJfNSfoVwMQTr10fEkblmVgobWh2O9kMmiPCdLPj p8Dgj2pXT/Q43CaNSlxKwiMioDqwhwWIRRyXF1ML8hYPRS4CxV8B+0JbTA2ibkMfh56X jvgpgyksk4k51uoQ038Nz+8RzRjoyvN4g3KtJ6eaUXBbRgQNHW+dn7rY3t/4CQ4wRmeP oLjgT1hcg44GFbTV+RsgeIGbrdIqQV+P1N4AAAAAAAAAAAAAAAAAChMYHSQq", "dk": "3+s6Pg1jdxYimbZRmvwLvx16iSutdB3Ci9c17pQ2Jq/mRgQtMKZbb9YNPMk0s jLl3p8hzz8Nl3AeRXkiURDwfzCCBKMCAQACggEBALIqZ0p0gzyWvd25firde23i8g+zl nbyH+2jc5RcVFZzymnmYRV4nCol586gpQc9TEbxg0106lxxdH+GRj5SuIJCtgbhzZoJj 7WFX9D6WKQlnB6NsvTGSW2QWfg1rXXycPIKG9oqgm/JLfsJA/RIlTMw8GnOdLdsGZHUS sq+PxVBjTYn8ETkJE21FWqGRDWYfcIHtWgzMwqmOs3/wQCjP8Sli4qJ3qk3wQkNuPIcj yQ/YYc6j9DZl3l/lhig6b53vrP/DmgPmpGa78R50fibOkkelLA7DEHYVv3a7+u6N0yCF DVjrMcMmu9DGOXbGEdkXL5RLTQm6/W/WLcU8u8K3cUCAwEAAQKCAQAEznAK6inAMLDek mp87Yyu4jh1g/rDKrUBzC8KCZOc4XLMeJKV6bMM0Aj44gyRrW2pXEqWhFjuNYFXD2BFv iWMHhCbDuxlA20FEJwNHzPU+c7EZD43rEG+2u4SbCBJ1kiFvxARSqRKL7s10oBwzqR3x RI3SIKNkDUAYiHCZm99O0P018xVYZxboewfT69ceVvmK4xA3JtlDN48Wo25kypmYKBkZ Nut2EyeyuaKQb5KTlExX4iagbNWF3+j+sBUMqHn5mp6SXGiolv0s1/HqpV2Tjo/RL3vd og79dPgKYU0jqZlZZ52Us4uWDMfWiDLFVIpWl9M7fdFKowUiG1LgIIBAoGBANviysJ/9 QhhAUQp/WZk7AODuX8xuOuDH2IjRZ946j7rxizw01RvAxgJvUvLGxLURP6hqS+VAY07T b/Nn84KJppwR61/TRTIQFHmCwr1dqL5csfWUhMyKLrSogpbZs8KQndUiGcecoTxyzxn8 XDNUDmlaiTfU2VgcGgNd2Xm6JL1AoGBAM9tdn4a832gf7nn8nhvRCuK1oxzvypUhTZRa w+Oi0BVidQG/4G6NXYpFbxVTLNT8cVnM0L6pDnEJ712rRToA84tqSJBYvff8Wi4TbG4q jgyLXUtdYpoO9EXz4I8JEuT70HwfgsrUHTPXioq6HmLui7ffF4m4yKCguLlMrdSln2RA oGBAIYnw8+RZD2deblN6SX88yZdyuI4wvsmABLPNF5M1pZXIY0vzbAZHwkegBjrLXR6g DHfDitSvSSfBxu76AE8njrhwEmxfqTsXJnbQeeIxb4/dXFJaL//fWwmsOiixYISX2UQ9 Tv9Dp/gKkCLpnpNOeJB8xXWD7qtcUd619sbW9C1AoGAW1/3INoyhRbc7UJWN+Ob/iptF PYwMi+Fd0YqiXHbuf10d+iVScqDnoe+wXY6EY1bJgCuPkU3bxMQBpBu8pS6iGro5OQ0+ si2CdGWuEGHCrZf/AyIiO4d26BHkzF3M6v5a+zLOZRdHvfynVTFkDWTUO62VKuAx0UC7 Ounsworth, et al. Expires 6 June 2026 [Page 82] Internet-Draft Composite ML-KEM December 2025 3zT+JnzHWECgYAGZSzCNoL+TVnfhEBnTtAj8FD1CSmUjuD+U2Ds6Uxg3Voa7vl9izt7W a7vgQK0c3y2IFS/61iHpPMyGbKF6Zj2iJ0U1N8NS8nTXFA4PEA0AXIRFm+Z++/SMyXIq dKGzIGEViLFAE/RLR4lcy1qqVAeW2+w+Ly3BXK6wKjIgxzHkw==", "dk_pkcs8": "MIIE+gIBADAKBggrBgEFBQcGNwSCBOff6zo+DWN3FiKZtlGa/Au/HXq JK610HcKL1zXulDYmr+ZGBC0wpltv1g08yTSyMuXenyHPPw2XcB5FeSJREPB/MIIEowI BAAKCAQEAsipnSnSDPJa93bl+Kt17beLyD7OWdvIf7aNzlFxUVnPKaeZhFXicKiXnzqC lBz1MRvGDTXTqXHF0f4ZGPlK4gkK2BuHNmgmPtYVf0PpYpCWcHo2y9MZJbZBZ+DWtdfJ w8gob2iqCb8kt+wkD9EiVMzDwac50t2wZkdRKyr4/FUGNNifwROQkTbUVaoZENZh9wge 1aDMzCqY6zf/BAKM/xKWLioneqTfBCQ248hyPJD9hhzqP0NmXeX+WGKDpvne+s/8OaA+ akZrvxHnR+Js6SR6UsDsMQdhW/drv67o3TIIUNWOsxwya70MY5dsYR2RcvlEtNCbr9b9 YtxTy7wrdxQIDAQABAoIBAATOcArqKcAwsN6SanztjK7iOHWD+sMqtQHMLwoJk5zhcsx 4kpXpswzQCPjiDJGtbalcSpaEWO41gVcPYEW+JYweEJsO7GUDbQUQnA0fM9T5zsRkPje sQb7a7hJsIEnWSIW/EBFKpEovuzXSgHDOpHfFEjdIgo2QNQBiIcJmb307Q/TXzFVhnFu h7B9Pr1x5W+YrjEDcm2UM3jxajbmTKmZgoGRk263YTJ7K5opBvkpOUTFfiJqBs1YXf6P 6wFQyoefmanpJcaKiW/SzX8eqlXZOOj9Eve92iDv10+AphTSOpmVlnnZSzi5YMx9aIMs VUilaX0zt90UqjBSIbUuAggECgYEA2+LKwn/1CGEBRCn9ZmTsA4O5fzG464MfYiNFn3j qPuvGLPDTVG8DGAm9S8sbEtRE/qGpL5UBjTtNv82fzgommnBHrX9NFMhAUeYLCvV2ovl yx9ZSEzIoutKiCltmzwpCd1SIZx5yhPHLPGfxcM1QOaVqJN9TZWBwaA13ZebokvUCgYE Az212fhrzfaB/uefyeG9EK4rWjHO/KlSFNlFrD46LQFWJ1Ab/gbo1dikVvFVMs1PxxWc zQvqkOcQnvXatFOgDzi2pIkFi99/xaLhNsbiqODItdS11img70RfPgjwkS5PvQfB+Cyt QdM9eKiroeYu6Lt98XibjIoKC4uUyt1KWfZECgYEAhifDz5FkPZ15uU3pJfzzJl3K4jj C+yYAEs80XkzWllchjS/NsBkfCR6AGOstdHqAMd8OK1K9JJ8HG7voATyeOuHASbF+pOx cmdtB54jFvj91cUlov/99bCaw6KLFghJfZRD1O/0On+AqQIumek054kHzFdYPuq1xR3r X2xtb0LUCgYBbX/cg2jKFFtztQlY345v+Km0U9jAyL4V3RiqJcdu5/XR36JVJyoOeh77 BdjoRjVsmAK4+RTdvExAGkG7ylLqIaujk5DT6yLYJ0Za4QYcKtl/8DIiI7h3boEeTMXc zq/lr7Ms5lF0e9/KdVMWQNZNQ7rZUq4DHRQLvfNP4mfMdYQKBgAZlLMI2gv5NWd+EQGd O0CPwUPUJKZSO4P5TYOzpTGDdWhru+X2LO3tZru+BArRzfLYgVL/rWIek8zIZsoXpmPa InRTU3w1LydNcUDg8QDQBchEWb5n779IzJcip0obMgYRWIsUAT9EtHiVzLWqpUB5bb7D 4vLcFcrrAqMiDHMeT", "c": "C77RoUk+mlyrIKd280A8yghbR9VWIy4ybs+xy3eF/r4NJKDKIfhX99oGo/9lpU Dqzzqx6l9YBevaIo13qDIxDSu0ILVxzgUL1SRgpJshxShp7IrKaiQyZfejt4M1I5DoaK Y5a1AnVP8KzUxqwHfDLGHu5xDDMLyXfaQ7kpUHPI4CaCHJW7Y6TPFc0hMHmwCc1nNPDa YY8BZYdpKlvW7zXQ2pQjiL8pR/9NE8o8q2aYpXDCRwXF6GIgmY8fs0zmbLxNjZLdexkE O4/JfxGvsgN/UacR/qxcZvk+rRMsunJXlewbNtFCxy1BIG0KvQe/qgWaKPAIc+ujAmkA deGExTmvNHcnIQaTXSuYMoxCIujEGdEtNRzzzG2xEsItn2935dWHoNIsBrKPRqLwKWwX bzh/Bg8lqw7xUxk1DwCvbsD48pKwbm7g/NQg9t8aoBcHryakDM09L/Fp9DNl1q1bmygv hWojFPs+y/AQ1KSWk1mrm1WJL0YqgnJ9MdMqFmOmMGV1iwJ10W54x5/Ro3ztGAL+2Fs/ BJBG2KKT+ALSU+XauWXL5CxL2bhO1/rQMkFj1WRbthfrNTxbZj+DSXzaRvahxjVk6aWl nscwNl1q+/X5hRF2+Oa2jkmG1QTxu+rVh5256UDukarJbqf/sgiPjW0KKbECYJJ3kbd4 BD5k7GFMeJtQ1mVQeTzwKyASsp6yYVuLx+gUphhgw+Fqjc3ogAJbEzcOMUMGx+LbzcOW 5yXQ1u9ykVqFNLlNbxYmAj8e0NM380j/qFL6l7rDEd1lBQn8LdaKIs8Yf/Egwq/3kZyT Kz9OUqXN9I/ZTAj7e5b9vdfdyFWPkAgPUUKEWMu8DY8GPKGKkIWD1Ggq8SQnqxrO6EiU ElTg3Pu3frjkA8uWHNrW5Hbhqqnw9cM9wAhuXLiZuCDk/ZqWOX5+SKDoy8r2hFPDqgEe fXy41D4ZP7TjYYwjva3frwzdaxSpnw71WtxOEZA9HSHy9RFa30JYBUSQKK0kD/wHhxDp IcqMVr/5jPtJBiIPMQHp/XRWen90mBkVYGMzjX5p473opAnqAt++NygIQKJRrWLOitrp QSb+MnvciRqjQic+GT1RH6Y7dCgME2Fpxs5stg+AmBj24gYHNYraRj1Xx3MNL6dt23/G 6D/j/6a0O4Cni8m/nn5lEsARJLSsi3j+2angv0bR/eW8gzU8P4ABQRQaK5eN7kzpP/Fc //9fV5T3qPqPZuk13fii/ln4ru707snBiE5Ezpas/LNUhMKwj/B5itRFzSeclo9BSKs2 Ounsworth, et al. Expires 6 June 2026 [Page 83] Internet-Draft Composite ML-KEM December 2025 JSYRdsei3/08aQrBMsYkhlRdeQvA8EtS0AXLrQv+rMRhUe+QQ29S8PZDOxeiSCluyIid Cq/odD4uNWEo6QH/yC4m1mMO6/1Rbt6wRTnO9Y5VT/MNFZozax2jMiK/wO1/D5XkM8Vq XYTLLT6yotzSxQ//GYuPL2fZlDgL2aS8SizEvraW7Eh9IdWrXfT6+QdxP4qmn+Yn3qlV E3dUM5HM1dzGbuFWfD8TvL6JpRyMQEH4F/ckup5pIxp//Q1veU49tPIcnQOSSb7f49PL abRNXaFd3IQszDl3JKZPuVbEhRJddu7eiMu1l6m/zp07Wlume6vbLhDUg/Znc2vWhZvj YSIqzoujMpG0BbrrgJhNOO+fQxVMz+GQ99B1l7BvmSh/odbaJuKe3iI5/WW84yCg+udV ryIZj+MGIx9lleALmHFrvn5LTN/Eq8yRwXgx3Mzu+1pYuKbt7RxqFqYEpuSG4J6J04qR gwoAlsLIuTnHHM7L3Je8MN52y51brT", "k": "cfa/ZP1D8o72wrINTAssza/LrutKmzKGbCzg4/eP2N8=" }, { "tcId": "id-MLKEM768-RSA3072-SHA3-256", "ek": "bJm30bfBqNRYZykBTtCeZSB6uiGkq4w/ynFe15UpiFa3t+x0bHIJF7Ktg8WiP LCKMxMUG5EFx1B6B4q8cXBZIDhQ7BeihOk/BqSodmRClYXHwlNHYrE1tLctranCiUsbt cOAo2zJBumMXyBrALJbEIc2r1lruiURVXkyDMQibCfKPMXF4bQwbSM13TkLNEA46qykO ta0spXGVPKqMjUgb5jBLDFPHvG6S8cUHuFQngaizlJKhCGLtWcturMzVCSBRxlhxieJh 0EAX3Nl/3YmyMON9UJ5Stg1TCGgrKVgp3XGvythAySlwfcByNsqKccVGySCleOd7kbIr RCH8JiooosWNENxRpRJInQIBppHwvJKZ6SFECJ7uEVab0UyFLF9GDtwSkmQrltS3wdC0 bbMPOCa0iOYx/oGKixa3BOY7JAvbthz+lpM9FXNEap63HBYdSgPw+s9Gpa9xqwn1lUhY DiNKpEUYUFhoqiSuEN5vqWUN+SzZ2RFXYOuADR/aYNC0BFDQskr58MN2qubAGgqkkqO6 UmUiZtWzwXC5XmHjjVhWmU60ScY2zK9EJajGFGI70M4lqasbqI5MbM7K0a74imlz+eE/ vpwb4shbPWGjhcqRTs1AbNrclC3zzyYTKBJUQE+WDDKc6eD1ximo4uMizk7QLwWQ2UNo VECfdCY6zow0XWTZ/yYR7d4m+y0x4p++qAUNTlP3Ax7yWgKqBWuqLuwkVoQrEWFj+Rn0 3NDvhdQ9ItkEDd0Z3CCr/GtFgpkECYi2mkn2WMpEsmenZg1oEB+jMeDfyqiC4lQXyiDH geSdqUYzJGIcMsQgPtW3GgXUcEYoeiLlnAJvFdyUVWkSflDb3CjOnU8lvA96mglczXOo EJw+fdeWiYSy5mWmaO8P5hRE4WslIK2etG2IMGopzO9qLvOybwIEgY62PHJFPtTdDemf RuC2hYFWeAjE0i0rXcJp0U88LViMgkO0lge4GkVYTNwDtkbESmVm1AXwJk9c4kTihdHx YgG7jwkXPJVm7FcB5E9cEdYOnpcadqj4NkfhhkTh4ix6ReIN7jBXDbBsQY6CKuJQpOQ1 sjC6aZEuDRc9DBi9JN2e9lifVI8dKY0C7W8ADMfrGNskEZNm+Z6gNYUSfMlZkxpOXiBN gF+fkolPFE3PuK6DWHBgmxYycZAtoU+pIFBA2Uwxzka5iU9aYWYExfDc6DGx/wcNWbAs jS0WduF9rJutZEok+fClSi3yeM0wSp6ZpYfrKqpKDs8VeuEIQMulBlTsEauRNKhIgZqk eFkS1EjfHaATOgdPHEW/uaaQLWLjMNzT8mxEMFMX2QhH3lEIlyZDobDw5mesaMGGhpwK stlCEKdr/GYNQdvl4UYa2BrF1F5k7pGrethh6REtPZftydtXvFFNBV1l6mfjBBBWmQTQ wfF2Vp3MWIhDhtpZVsFb0MVmbC/RXCWExiC1pID9zHHpJU0EuNymegE6btKFhZRoviqD XcepRJHQ1gSaacnIjdosqkNO4ZJQVUsO4RUBsnIV4kz5xi+xoU3xDAM8IC01aXU8qFWi FVaO4e+Zxjy+RWxzc2FKlEwggGKAoIBgQCmRx3hvY4gt+FF/H0ZuT6TkA+H15y4FOFbf wMk/Ehm7Pwz2m1Mdd1E+9hrqb43ZsaWDgemernjrdl27n4TpEG/lf/T06Pom2BS23azH 8BtVVsReije6ADbgqDWZdKUsNQ2akiQ7XyA9ClXYkgeWppB9Qe91+mA+zfXVqWe1N2G4 9+030L4tzgDfiqexlZsOK6XHR143PscXY/aWDFbeF1PKM+GpotWOKbGY2xevHURTiz+B q3DiedsPIZVftJWYLQHVTwA9rYByqOvi57CS8YjcNRQ++dALEqJY39nUEm2MZuWxIyhh s/Hl9HyKNtGuNDqb8w51hhUv4GrKKPAItUvjoL5+kgihzaUqLRdTKNaf09wZ91tapi3n 4rm1TQmRmFE+69BbDWRlSo1aLWYpPnJiw4JAgLpJhFkdmk/s/tiYUo2p/ee6w7iwZ2qI sNafbErU99VMJimas+7JiTXSCdkWvZ1IMJsBuqFrzXQf8r8ct+2hi0+EF37+z19lIXZd +MCAwEAAQ==", "x5c": "MIIUKTCCByagAwIBAgIUMkZFnlcLOBnR7hzTpEp5oa3aAHkwCwYJYIZIAWUD BAMSMD0xDTALBgNVBAoMBElFVEYxDjAMBgNVBAsMBUxBTVBTMRwwGgYDVQQDDBNDb21w b3NpdGUgTUwtS0VNIENBMB4XDTI1MTEyNTEyMTMxMVoXDTM1MTEyNjEyMTMxMVowRjEN MAsGA1UECgwESUVURjEOMAwGA1UECwwFTEFNUFMxJTAjBgNVBAMMHGlkLU1MS0VNNzY4 Ounsworth, et al. Expires 6 June 2026 [Page 84] Internet-Draft Composite ML-KEM December 2025 LVJTQTMwNzItU0hBMy0yNTYwggY/MAoGCCsGAQUFBwY4A4IGLwBsmbfRt8Go1FhnKQFO 0J5lIHq6IaSrjD/KcV7XlSmIVre37HRscgkXsq2DxaI8sIozExQbkQXHUHoHirxxcFkg OFDsF6KE6T8GpKh2ZEKVhcfCU0disTW0ty2tqcKJSxu1w4CjbMkG6YxfIGsAslsQhzav WWu6JRFVeTIMxCJsJ8o8xcXhtDBtIzXdOQs0QDjqrKQ61rSylcZU8qoyNSBvmMEsMU8e 8bpLxxQe4VCeBqLOUkqEIYu1Zy26szNUJIFHGWHGJ4mHQQBfc2X/dibIw431QnlK2DVM IaCspWCndca/K2EDJKXB9wHI2yopxxUbJIKV453uRsitEIfwmKiiixY0Q3FGlEkidAgG mkfC8kpnpIUQInu4RVpvRTIUsX0YO3BKSZCuW1LfB0LRtsw84JrSI5jH+gYqLFrcE5js kC9u2HP6Wkz0Vc0RqnrccFh1KA/D6z0alr3GrCfWVSFgOI0qkRRhQWGiqJK4Q3m+pZQ3 5LNnZEVdg64ANH9pg0LQEUNCySvnww3aq5sAaCqSSo7pSZSJm1bPBcLleYeONWFaZTrR JxjbMr0QlqMYUYjvQziWpqxuojkxszsrRrviKaXP54T++nBviyFs9YaOFypFOzUBs2ty ULfPPJhMoElRAT5YMMpzp4PXGKaji4yLOTtAvBZDZQ2hUQJ90JjrOjDRdZNn/JhHt3ib 7LTHin76oBQ1OU/cDHvJaAqoFa6ou7CRWhCsRYWP5GfTc0O+F1D0i2QQN3RncIKv8a0W CmQQJiLaaSfZYykSyZ6dmDWgQH6Mx4N/KqILiVBfKIMeB5J2pRjMkYhwyxCA+1bcaBdR wRih6IuWcAm8V3JRVaRJ+UNvcKM6dTyW8D3qaCVzNc6gQnD5915aJhLLmZaZo7w/mFET hayUgrZ60bYgwainM72ou87JvAgSBjrY8ckU+1N0N6Z9G4LaFgVZ4CMTSLStdwmnRTzw tWIyCQ7SWB7gaRVhM3AO2RsRKZWbUBfAmT1ziROKF0fFiAbuPCRc8lWbsVwHkT1wR1g6 elxp2qPg2R+GGROHiLHpF4g3uMFcNsGxBjoIq4lCk5DWyMLppkS4NFz0MGL0k3Z72WJ9 Ujx0pjQLtbwAMx+sY2yQRk2b5nqA1hRJ8yVmTGk5eIE2AX5+SiU8UTc+4roNYcGCbFjJ xkC2hT6kgUEDZTDHORrmJT1phZgTF8NzoMbH/Bw1ZsCyNLRZ24X2sm61kSiT58KVKLfJ 4zTBKnpmlh+sqqkoOzxV64QhAy6UGVOwRq5E0qEiBmqR4WRLUSN8doBM6B08cRb+5ppA tYuMw3NPybEQwUxfZCEfeUQiXJkOhsPDmZ6xowYaGnAqy2UIQp2v8Zg1B2+XhRhrYGsX UXmTukat62GHpES09l+3J21e8UU0FXWXqZ+MEEFaZBNDB8XZWncxYiEOG2llWwVvQxWZ sL9FcJYTGILWkgP3MceklTQS43KZ6ATpu0oWFlGi+KoNdx6lEkdDWBJppyciN2iyqQ07 hklBVSw7hFQGychXiTPnGL7GhTfEMAzwgLTVpdTyoVaIVVo7h75nGPL5FbHNzYUqUTCC AYoCggGBAKZHHeG9jiC34UX8fRm5PpOQD4fXnLgU4Vt/AyT8SGbs/DPabUx13UT72Gup vjdmxpYOB6Z6ueOt2XbufhOkQb+V/9PTo+ibYFLbdrMfwG1VWxF6KN7oANuCoNZl0pSw 1DZqSJDtfID0KVdiSB5amkH1B73X6YD7N9dWpZ7U3Ybj37TfQvi3OAN+Kp7GVmw4rpcd HXjc+xxdj9pYMVt4XU8oz4ami1Y4psZjbF68dRFOLP4GrcOJ52w8hlV+0lZgtAdVPAD2 tgHKo6+LnsJLxiNw1FD750AsSoljf2dQSbYxm5bEjKGGz8eX0fIo20a40OpvzDnWGFS/ gasoo8Ai1S+Ogvn6SCKHNpSotF1Mo1p/T3Bn3W1qmLefiubVNCZGYUT7r0FsNZGVKjVo tZik+cmLDgkCAukmEWR2aT+z+2JhSjan957rDuLBnaoiw1p9sStT31UwmKZqz7smJNdI J2Ra9nUgwmwG6oWvNdB/yvxy37aGLT4QXfv7PX2Uhdl34wIDAQABoxIwEDAOBgNVHQ8B Af8EBAMCBSAwCwYJYIZIAWUDBAMSA4IM7gDu2wEtNwx2mrVgtDdtFvhBNY+UYrgHxdUi +dDnV+xO6n/qjHgPFQoKEd9Wl7RybT9EkU/WYQEYh1HeAA5NnqTgt3VbIf75o8Y2KhHa O7zdM46fdVLkqysdoSQWpQRjg8uAl1LlVZepLk9unmsAKomaIxkILVwWhlaO7chKKkQq Hkt+CcQpFe2M+l4N5NNNKA4WdObd4vy8Jwxy5aA4T+tId0b16oiHsgqCguYeOcEWfyBI NCZEAFZU8OXHjxNuUb0pd5LoZggAMSILDr/CB8CscITt38DeNs/W3kosoQHv5N1WAm3f 7YC3nXPStEjSBngRvvxG4tjYN8P3aT6aJS+ARybq1nTnxHrarwGPhWTLcRhFi0AtYTsP FVij7wOYJmuK9gfT6x+yvOKYzg+5Dbb8FfyK6uTTpiBTYQRTAeMhRvzF88OsE5twHd1u vXXp1Ig1XEPP23qk18ZWPe+GEWLJiumFH5EOnLfX636yBnMSuwlqECJEg+L4F93KEY3D RdWyBYQS8j3LcukcmbcnrGFxl6Ls1OHYi9eL4yBzR643oK85ZZ5I1nByC5koajoOtsaL bRcsoTzfQHXrqIE2wlrJgH1MYaOPq6vBdWU/lPMkEsAqwm2IDpiPpGJnJ2dRBCrWjHK+ jYJTYHSl1A5Qx4cGmklTNlrG3xJoJbs/1y3xB5+ZAwZvVc5xbJcHREByoLKKKdpZs10R V7P3Gcf6fnJhDqJyZtkGTo/39GVUQCvNTVt3zs/8hQNBNAqEbP9QyH8+4A4KNnbeEXT1 wspiTwF5VDQHRD2Acg148CUaGYzhePWEAb5VevKtQYHtyrnVKdtUOqCTQiG6mO6Ge47a CEvAAa7ok8ZLac+HL1CqLrqsMIAb7LUP5wNVJSNJnwGvpgKj7gGt2/oLXS/93rohKhvD hmzNjGodocdXilklftGmP5wyunmcRoYQJxz+dPpEdxQhCdQ1SajRu0b0/KlSroUPCoJX Ful3lddRyp0agiSV5bEJNYZ9KZRrgJGdaf3JlaJ10dd5oH16jhGBPfehKH7HUcGuMqfS Ounsworth, et al. Expires 6 June 2026 [Page 85] Internet-Draft Composite ML-KEM December 2025 3K8ZCkAF5D5hdDX6IzSDKWvRm9Ai+l9Tt/43cDCbi4lTPn1rBzPTmyGMLdpzyffQlAa+ 5JrOmTh2nRGte/hr2zuFJZY6Uckr3EMeyYqdYs3f8WJ/lE0mAn46d9xo8L2cDnHJNwZx Xqfi1X5iSOcTAs+NSL2aMeUYXA3kphGSbeKfJnZbpmSiGflcVlRFVdbyu8lrV2hIdv1+ 9XKLw7bkBcni51D81Gofuqu2/SQT+sEPkTGVV9V6nqH5MkWt1H0BavVzgsYS9AwBiBw6 UHqDISAo0DLYrNUQe/iE6NllzOUf9Pqux5U78NRbFnDjSIFRW9s6bkADXqL9D9zotEc1 BGazZMXaTkfTtJ4uV5upnneAM/KB0VlPIDYCoZEWb1qbRmAOYhkq7yXBmQHAx4WV8Rh8 R0aIjmP82R3GqaPVJ+dwb2yEGuYQSI+/G3/ZXH2RTSP8dpVeLmJk9qvQY5ywKm8lj3aK Pn6w6dtDX4huwqwmnErdXNp21w8KwiEGEAWUJp/oZM4E6HmQ03n0GCrPY5pwSsCYt7TS QzFqTQfCFjlTbPlf1XSorL4/wOsMoZ0/kGZboZkXtfJEzkJidXS60L6DKFWj0/BK2CMp nxA/24VqUDZ2EzpGw7lYc/NjGUaXT3fMwYiYuEFNijsD5y8vKcuic44L6LOH5QTnvbmf 6JOPtmUc9PF2t0Nrm5KuEjy5mi1sW6fpuMaSb819BVKqzrhygr+GfQxmQVCCu8gXS9de yLG1c2Cye7n6b0kFKWzAs8SA9mjYw+IpSvS0OP8RMed0WHV6Y3DQFH0aXBimxJajgyLk J3RHlXJZkxnbTq4kOmOvY86uI0XjwtqrFjNvHefxA/ECWeiamRIlfTyAzMsDSL8wvJWX a/vGd4vYJHX4kRUqiqXWBW0cnf9z3hHqFofhlOOzUU/tQTvUw5YwQamRd8yuvWqdjdmk 1CNaeFDoBwN9eGJpRB69o7BHzxWotzytx9aetk0f/ovEil9Tz7OFr36f57kc9A08FeA3 WZ8UHNuaY26k0Z2AJPcPCIkuXY0k00UTNWmWQphkJ9Je/iOykmRUIgTCf7L6y3AD5Rqh s9wmxuhyPVLYPiBcS7BYorv3ENNg6/CNX64nnngxVChNcSm21gQ164eiAWCTXHZC/tLU d/bwnaXyAhzIGqHJHGzKMjujl1hA5fyInW/XHQ1hF0ZgEaXyoh04FcVocIVOxTjI1Xbp E/I6nRp4Dn5qc2lFq0fmRUUzKsy29hoGMfMzyWn+28nyCE7gkAMrqCfKp0GxdNXiY1vE nCD9ciK0A6LFoMe8pNVxQdPcBfypP43r+7k+HukDTskIpTfrqOiVgeiPG8KZfCrAfI8J gIoQKPq+gP2+gZDlgal6pGt8q/ooH+Jix93a/rHgyrNwQZUVqLXPhDcyilHtI9gm5sM/ 5dyxCofK2Xj7+xjUoWUWP1XLK7vr/vA03Gb67oKms0+V5f09qdXrArzOP6SBNMskX5BY V4xfMbvabj+YOWSER0rxp3uAjD3MQJp7GKvnGre13HYziBs9G6GFLnSOzOVfQ7yw2iNh 9tkAQpVuXIf2vGdCyL9OWwD0cTvBARRTHa6+rwDyWt5//36WF1hf55klHvEvOsjBLVL4 xG9keCGbIm2aKOBVhSLRU0n28p0NQv6Zg8AciLl0r8UvQfN+y0dnZM+ODnDHYJBg32BI SkXQI5G6Ip3eVBM0xTIHTi/TJttjrqftJ9j+sYbvy9VaY2sOrHY/6iqP+bbcRqZJei/D R3MrcIgxet1PUXSvR1f+Njo9SUiBfzIrO0QT2CS0GniBVvgimf0mkF7hNeb3BiHrsSiW vtKuGbTnEeGkDDwZkKwc7ws5rgFk2zvEkkRP2YCOpmimPJ+TsG3NKn8MnSXmXnqhL2da D8wmkZnaCpwyBbFM3nUzbJAeuaikrO1OaHGWGZ6b48Zoz21/ocgpiHHuxjEMisiWThwP 7Ez5G5qijNWwszVWzd8pBF32l6xIaZzc8WkusXIq6s9nXdA/ipUmxiPxX6J3IG9dJROL 8+g5mLEp56w2eESaq1dZcxSbpXsUEAkPW+RpKDovw2gunnNeCys8r7wgipYvPRQ09LhE U3JnPyf97D/p8yiNXQagRV0Vyu+LE+l6HfjJbLGC+hPbTvQGzhKdjz57Ojj/KjhRoRFn fhMuoFZC04KZWTOG5T//MCZ4iUzmCt2WfcBPZw3KlZKZdSRbRzP2ZW1Rcy6rnTXtfRgP 5HDtdad2Rq9ubUn/+1W+X6ZDe+xL/iPEzia4lbC8rz4CPELhlnpkCOidfnNXRZqAe8j+ QDp1j5FaXRTprFE9yINxqR2qL0R1ahmDOdbNDqsOsLlMeNMKv/EFu5cJuOpDVev30kfv LoiXm/rGQMa7utyH0EKnq54F9Mzwt3zB+4tHdet457ycQVvK1emISBUMvXBXuOHk6HTA TWaqEI2SEaYNE0qCYkkb0PbglbKqI6eIXt8Og/jILccHjTVrLKoyRLYo5WJC+ug8MjLe dOk5q4o6te/UvZtW40JMbHJklDpQYR3lWE6yPiJe74YAv5uHYK08zlKh7viypqdUyyD4 EaTr4Pg3dsuxomtng6yblc3DH7C+n1eTT6hEsB7qpsW9bbOvekZ3m6VfKeQKLL0KY+Ta HkKBXjStbL2EwlW3anbK70IVezoS94D2pnIAL1PXdYAjN3kgPHWtxrYBJkDfwH84JDz3 Uibf0ou5W8qAXVIQKAMckVBGCRNT9rOILdp0hOFIf59rTqMydLpKI+pCSL9Cl59e18HE 1aVc7r1xmPsq24/GHF+OM704GBS8Ypf8Tl5gVKdpi92ubcgxm4A+PCCJqhBTJrQpD/N9 tEC9YB1H2cS0rZPmZaYtxn+F/5GoC/N8Vn9/3AW/1umZKBxGeFHUB6XC0x7EV+t9Q8Xn bTxG1HaQlwt5SJxy2SqYYG77xB+0UOhgav4I5LxnMEu3hOUsoqHk5lHMgDhLuoIBznxm eLVgwk9yELisf7BUz5Vp/rLnI0fdiFHIQx5K3nxU7njKQ+FJFjLz5N6URM4i8ZMOMbHG NJZOMJfbRarJXr78hZa8wKq4JLMBBs0BTl4A5DIHe6jP6IcUfdQg741zPDydaQgHbKiO x+JvIDK5Wx1kw4IKxT2CM+a0xkDoSbJ7B+pMOw1G/UX5T33/N3nDaCc7TSBrdaLihAvg E1pIuPJXtQ9Mz3gAveenhfTkvoFmyHaxhK2fnupHIWn95ESAubD56r9p96N0Wu/g/Jmy Ounsworth, et al. Expires 6 June 2026 [Page 86] Internet-Draft Composite ML-KEM December 2025 miXrjzKY9+pd9QxoAggVIFhugYWXscU2Sr/Q4vdpx8nU19rqIzB4hYzfA02CkZWdtMPX 2eIAAAAAAAAAAAAAAAACDRMaICs=", "dk": "IakUceugA0Y1XMP5nBJyfENsASuqHFG1tp+dtuJKt6cz7F7Cs1SpmNpXZfJGm xmK8hMBrF0tdNAAMJ1wLn83djCCBuQCAQACggGBAKZHHeG9jiC34UX8fRm5PpOQD4fXn LgU4Vt/AyT8SGbs/DPabUx13UT72GupvjdmxpYOB6Z6ueOt2XbufhOkQb+V/9PTo+ibY FLbdrMfwG1VWxF6KN7oANuCoNZl0pSw1DZqSJDtfID0KVdiSB5amkH1B73X6YD7N9dWp Z7U3Ybj37TfQvi3OAN+Kp7GVmw4rpcdHXjc+xxdj9pYMVt4XU8oz4ami1Y4psZjbF68d RFOLP4GrcOJ52w8hlV+0lZgtAdVPAD2tgHKo6+LnsJLxiNw1FD750AsSoljf2dQSbYxm 5bEjKGGz8eX0fIo20a40OpvzDnWGFS/gasoo8Ai1S+Ogvn6SCKHNpSotF1Mo1p/T3Bn3 W1qmLefiubVNCZGYUT7r0FsNZGVKjVotZik+cmLDgkCAukmEWR2aT+z+2JhSjan957rD uLBnaoiw1p9sStT31UwmKZqz7smJNdIJ2Ra9nUgwmwG6oWvNdB/yvxy37aGLT4QXfv7P X2Uhdl34wIDAQABAoIBgDoCdZpb10ny3NTd0Yc36WzxxXlO744JOtYA6cftfBTseNBeU +No+1klw8tL3ODXKlEPc/vQtSmJbWTgr3uKwqVkX2w3Wee8zU4a4r57RVbfgHYIeFnL9 wCeAh7KRz04s9CII+jr8ZPLmuCxmRd95HM+WQUSXpRxEHo/8GgJO3/j4BfqDCNZSGFvk s7xwxTecYqmzbFs5u5uddFnE1EmHOeRBVWkpNffy89KwHQMq4ruCyRUkCq34dURCIyrQ haAhb4+ENX3PRITKssNyV9cDCQWxjYR1vldzFHnatvsSkx3lu2ArpZ3OWsf1azHbQxsm PSJHTkNQFZIFnk0zxvPQBw3JE/3ot4pcnLFXEN927HegN7fINJEKkCxwx4r1iwd4QCWr 5ZHi9NlqwQbK/Aw/brhN1b/HeZe7tlnor3qrf3vjskEZuM/9+sp6spvAoN2jFn5eDurl WFhDtQLs6UXluch51GP/RuM43Luvgc8nvPk7UHx54kryp8V0wKorFgogQKBwQDVf1V5O Kj6y+jpjPNegabxvrFaEXoSVbRq81po4XKtN8zCboydip/ZveAAWNfoAFfxkcoLye5xA xJnHSblTW5KcpSuT9gOLrNjNxU1crZP22q7zNBFRpXe/DnZusksiq4psNPz4qTUPc7cs d9qrjlJVPTWUpIZLAFYPMYOxiIfya+Vf25e6yrIUIqGYLTn4nZfsi4u6zNL2X1x7I5pH v7xuSLe8jNuxHduMHj9Rw2lVOv7DnRfPri1Lk1Jn9dLZq0CgcEAx2FJX7POOMuHYNw5T js2qSdcr1iicG1dJ1qBCaOeU6id3ZD7otKgaBrJftVHC09A4vz7Kz44LoZeaVwwiBYek hVL6NKI6nd/eTGtY2TF/aCjWLQio4RAawuJe6Xslp61z5tKljDdSqvAokYnNKBtPnn4U oBFN+rG3Nug+q05AcTJHI3vGToq66n6Aq91m7VjGPUmQOvPnxvMlfX2n3q24iRDJ+zTp vpxqR3PB/NXOJ5jFZZt3P1+dY1/Pu6aH3rPAoHAH+9TDrXd+N3FciHmSW2lViXLC4jvt IxjV1gdXvDSIXzmQPMeT3Zr4LsZJZQkf4yFmxnOmiLTas4l04y1w7joVXR8LvK8g6qSp LWZk4wcHyfX+E1zndkoE9mwoZPiAaqg0JWlrqZpN2IjbjmhDKkQ4po1oVVqix9c+CDnE 1CpzA10GS2dic8tcBc0EVOn28OxJzFU3SnLW34l2IOk7a54PhoOUED0Vo5GuxG/F0uoi +F/Buermo+cO2W4o9mn75xlAoHBALzg0AbGqpUpUo2S8wLGm6ixbl96gyAoqrfuSBHem 827DhppD8mW6XjV746k81GmedzPNg4oOkbw6h27xQoWkk1nuWrNkAE2xV8FjbF8NQhpl nUg6TOoxPHjkxG9BR1HKwuKnKUdk3X6sVnJRbjYRcWK/JEDjQ9E7bEqqxzu3vNq/e58E 0b90M1CUGMc3zhsJH3vN5cHDcA4MJ7bzRAVy4z+N1RqSbOEzAofABMTFsy/VzSLNnbE+ njYW/Q9S2qJBwKBwQCv3dTEWLWW3VIWDRe/aOMhlJ0k+Aykf+/RKUqgaL5WE5obY93gA 8S9jI7N/U6zEpEg55Tpv+T8xMVyCejlO4+U0+4VCOsGW2S7P15XUQp/MFiRwhdR2DdO2 tYzUTZAYJR4m194No7KwvDU//kU3J1QY+ROWRezpm2DfTsyDa7DRDUwOVJpkzUCTKca9 thyqBXKZVjB9EAzbhKvbja0jyrF5v7o0chqootSwthL3IMA/2D+FDoSXP8BW1qsKP/62 9I=", "dk_pkcs8": "MIIHOwIBADAKBggrBgEFBQcGOASCByghqRRx66ADRjVcw/mcEnJ8Q2w BK6ocUbW2n5224kq3pzPsXsKzVKmY2ldl8kabGYryEwGsXS100AAwnXAufzd2MIIG5AI BAAKCAYEApkcd4b2OILfhRfx9Gbk+k5APh9ecuBThW38DJPxIZuz8M9ptTHXdRPvYa6m +N2bGlg4Hpnq5463Zdu5+E6RBv5X/09Oj6JtgUtt2sx/AbVVbEXoo3ugA24Kg1mXSlLD UNmpIkO18gPQpV2JIHlqaQfUHvdfpgPs311alntTdhuPftN9C+Lc4A34qnsZWbDiulx0 deNz7HF2P2lgxW3hdTyjPhqaLVjimxmNsXrx1EU4s/gatw4nnbDyGVX7SVmC0B1U8APa 2Acqjr4uewkvGI3DUUPvnQCxKiWN/Z1BJtjGblsSMoYbPx5fR8ijbRrjQ6m/MOdYYVL+ BqyijwCLVL46C+fpIIoc2lKi0XUyjWn9PcGfdbWqYt5+K5tU0JkZhRPuvQWw1kZUqNWi 1mKT5yYsOCQIC6SYRZHZpP7P7YmFKNqf3nusO4sGdqiLDWn2xK1PfVTCYpmrPuyYk10g Ounsworth, et al. Expires 6 June 2026 [Page 87] Internet-Draft Composite ML-KEM December 2025 nZFr2dSDCbAbqha810H/K/HLftoYtPhBd+/s9fZSF2XfjAgMBAAECggGAOgJ1mlvXSfL c1N3RhzfpbPHFeU7vjgk61gDpx+18FOx40F5T42j7WSXDy0vc4NcqUQ9z+9C1KYltZOC ve4rCpWRfbDdZ57zNThrivntFVt+Adgh4Wcv3AJ4CHspHPTiz0Igj6Ovxk8ua4LGZF33 kcz5ZBRJelHEQej/waAk7f+PgF+oMI1lIYW+SzvHDFN5xiqbNsWzm7m510WcTUSYc55E FVaSk19/Lz0rAdAyriu4LJFSQKrfh1REIjKtCFoCFvj4Q1fc9EhMqyw3JX1wMJBbGNhH W+V3MUedq2+xKTHeW7YCulnc5ax/VrMdtDGyY9IkdOQ1AVkgWeTTPG89AHDckT/ei3il ycsVcQ33bsd6A3t8g0kQqQLHDHivWLB3hAJavlkeL02WrBBsr8DD9uuE3Vv8d5l7u2We iveqt/e+OyQRm4z/36ynqym8Cg3aMWfl4O6uVYWEO1AuzpReW5yHnUY/9G4zjcu6+Bzy e8+TtQfHniSvKnxXTAqisWCiBAoHBANV/VXk4qPrL6OmM816BpvG+sVoRehJVtGrzWmj hcq03zMJujJ2Kn9m94ABY1+gAV/GRygvJ7nEDEmcdJuVNbkpylK5P2A4us2M3FTVytk/ barvM0EVGld78Odm6ySyKrimw0/PipNQ9ztyx32quOUlU9NZSkhksAVg8xg7GIh/Jr5V /bl7rKshQioZgtOfidl+yLi7rM0vZfXHsjmke/vG5It7yM27Ed24weP1HDaVU6/sOdF8 +uLUuTUmf10tmrQKBwQDHYUlfs844y4dg3DlOOzapJ1yvWKJwbV0nWoEJo55TqJ3dkPu i0qBoGsl+1UcLT0Di/PsrPjguhl5pXDCIFh6SFUvo0ojqd395Ma1jZMX9oKNYtCKjhEB rC4l7peyWnrXPm0qWMN1Kq8CiRic0oG0+efhSgEU36sbc26D6rTkBxMkcje8ZOirrqfo Cr3WbtWMY9SZA68+fG8yV9faferbiJEMn7NOm+nGpHc8H81c4nmMVlm3c/X51jX8+7po fes8CgcAf71MOtd343cVyIeZJbaVWJcsLiO+0jGNXWB1e8NIhfOZA8x5PdmvguxkllCR /jIWbGc6aItNqziXTjLXDuOhVdHwu8ryDqpKktZmTjBwfJ9f4TXOd2SgT2bChk+IBqqD QlaWupmk3YiNuOaEMqRDimjWhVWqLH1z4IOcTUKnMDXQZLZ2Jzy1wFzQRU6fbw7EnMVT dKctbfiXYg6Ttrng+Gg5QQPRWjka7Eb8XS6iL4X8G56uaj5w7Zbij2afvnGUCgcEAvOD QBsaqlSlSjZLzAsabqLFuX3qDICiqt+5IEd6bzbsOGmkPyZbpeNXvjqTzUaZ53M82Dig 6RvDqHbvFChaSTWe5as2QATbFXwWNsXw1CGmWdSDpM6jE8eOTEb0FHUcrC4qcpR2Tdfq xWclFuNhFxYr8kQOND0TtsSqrHO7e82r97nwTRv3QzUJQYxzfOGwkfe83lwcNwDgwntv NEBXLjP43VGpJs4TMCh8AExMWzL9XNIs2dsT6eNhb9D1LaokHAoHBAK/d1MRYtZbdUhY NF79o4yGUnST4DKR/79EpSqBovlYTmhtj3eADxL2Mjs39TrMSkSDnlOm/5PzExXIJ6OU 7j5TT7hUI6wZbZLs/XldRCn8wWJHCF1HYN07a1jNRNkBglHibX3g2jsrC8NT/+RTcnVB j5E5ZF7OmbYN9OzINrsNENTA5UmmTNQJMpxr22HKoFcplWMH0QDNuEq9uNrSPKsXm/uj RyGqii1LC2EvcgwD/YP4UOhJc/wFbWqwo//rb0g==", "c": "A6BsnnD2cV7yvabxFQf+BqnWNo2a8dds0s/iMKm8avEP7DtQbk6Z6iKT4ETlzG TWZgdZZ0L2jQkZOiL6phm5LJbsDdxROpCp4uk+7rVCUqWxQmxdlvWiULQ2asyvmvctS5 Y/E7OewbHkYY1dXPXET5Mqic81C9jL2soux9VGiSxASRQCH8wMgVtTYsFzSVgudoTXtQ emtx4P+S4OgqmDIfXEZNJlA3g1qfmiOZGrMIsR032F86Qp3hbZEkogXJOSVvXtvm50su rsz254Oa3zyqcgSt2bEaSqw2gTQ0dmgr7PVzpI/RqNidc5DiZ10KbmabvfEGEJPItx+U 4Jxesx74Bla1KsI7+aNrrH2msNy6SmMVzCqPCmJoHAdrgtd+/6bAUnB2XEEXICx6yz4F 7dNqe1DgoQjIKOEr39qiC/CZOCM1aJvWnDSpbcm2h1GkJZhXpdDDhvejO4EH9bX36BQx BpCeN+srFe6OtUrifpyRevmricniV25b7deYQp735oNF0ZR9+DuAg84jpDyphjR3CJlz 6L0ZMjPdM5c8oWH66lLsKY1BLJlOJfznV35QZQqnYkLl5Pj/VuaK7lGFuDGGSDB/YmpA cMfi0V+TQPWRD3mb7vzi5b5MhfVWXCnFG4Z9KRD82bcJ5DZ1y3lLfLzr+wwdA0JvRyyx gnOMlbgVDDLA0XulBebvDBbqv8KK/1ZeF4Z30wB+j1atzomZm0kNWN+eciu+nQgPsZ7S h1dt/6Y313wuYDYvUOoErJINvysYkQNpG36cep+H2jC/kQ1mrJf5IjrpHmfzMw7zvC9R rh8F5Em+3HN36sbpByIPlogljWi9AhNSKlc8yA9u1qaOgawdzC4w05tXMUlj1FmfM2xe HJ3l/lI/3sNLc3AlB/KPIKRdqGmhfN+eeF04XvM1wzF0s1f1aCJ3FbjJa/L341X26ZnA JuyLfTZ8zaBi+j6WthA4l1Tvse/QgWIyzhugA4F6VlGKQyYaRoiogAep0z8TUljO5wuQ MUYpyYMAGWNVdCz5gU+oIFZ5qXzNkJ6qLupt8Qh9mMMsvfhHd7Wx6TzIOlNyLPPtbTqB fHTeS8jB930weP5By6k5/sL/94bHbYpmLV+p4DK1rgavMhhApmPky1tTFbwFWMDmMtsr 75iQx8jMI0nTb5N/kjxj7ibDSibdK7Jjc5H80KSMvtSqIWbgHIRmfLlagj16tuWrZE1b FP11OXU0pgm8S+njCJX58tfz7VZ/U7ojYr0CP3BN3VT548i+UeepDOM0Me0y2REoFVyt LNVzvYx6e0piF15L3T0wdXz+wqDvFrnwHzEzVa251LuzETvO5jEr5kmzRP/a6ZbhuBzo Ounsworth, et al. Expires 6 June 2026 [Page 88] Internet-Draft Composite ML-KEM December 2025 ODZ3fGAmTJ9R0FuAwrkdzjoWDWqyWweej/Caf93yH6gVl7j9+2wZ68l7cdYfjLMeaXZz V7G6RqBk0uEQNifRul9wKKR1VDFBE8UNcRLxXEBolUtUsr9Ixl4OTqXBqybBnHDatNiX lb/StGLYSJQF1V4MFVBnP7lOGKl+RVsIcvFXRFqumc/N02tkoVEL0S4xHaGAXH4eRIm2 FFKFbR96uTccAi70TcHnatmLVv2JE2/4Gq/slgXEzZaCQocAGGyMauFVKfetf+wtn/00 uDvhnNG7MgCISwkfnP1qN+HCUZZSJxvlnIwHdFdIdb4MCXK3rdh2gcSP/2RUxH4B6FNu GuSN6kJq4RpklNZdXpPrmw9Q000udkbY4NPki958AaGeM9i3sJeUzz42yzDQM+k9KLtW 0DCV7tkaAmijlu73Xl02ZgIw5Zsi5vcd/ix1RDEq/VxzmNN4DL4OWRnpxZs6zle6qcg2 e406b6vBMGwnmJiOiiW6Nu+XcYyJB11O5/Q8zF2vRPWw2sOux3wYkPpOg3+ODPaByNwN Dn+JHUScFHUKtSham8LxcDO+HfSgI3L4cJU9vchp5W/L12tWM5HbgSIomIQ51Vrz0=", "k": "KZCR3ORwXASMPn19rpn2ggzrhM2SAtNOiqYP5gk9rMQ=" }, { "tcId": "id-MLKEM768-RSA4096-SHA3-256", "ek": "a8OnHUiu4FiSXglyoiQ1RkCIlGc2+mRGzfSlSOh6iwWxYTyqR3oX9VQL9/M/n pUSainA3GsBbGa8oGStGaMvKiiYdQk8FnDJsDgQAkurVPDO2/XLs0G+oaKiUqUpXglTC JURAVkXM2wmlEsH+4UToiugLfMaABOqqNoas9ul1cIngbfKF+wTqawza9Cqlpxf1qKhL IWq0bhnicFjaxFKvKxeoLorYScz2Py4uHulXiwuDzUhUiSyenGbS/G2ZMVUWnOzRWleT JMN9xWeh5diDJu62PykWQqx05RobSEccVSY/FtaSaJGZawjbHJ6yeI2X5GcTUtTdbwfe 7I28LehLvQZBtgd/9slHmoAgBWmNqXDcuZfbDhzLPAqzedxCCIpluBUoaF2HvW/jkmoU vt90Qgq8pyXXisrn0AW7zeJv8RyX3Cj1Vdj6WuvxTJW8YdcXRB5MHA2gKJ4atoYkoTOc 3UpkHLLHPusbLSdYVgLEpid4UigcMvMtqFpeHm/fkIEcMEhMsDF7GxAuqcgqWBf+XjLx rWOM2RXBtk75MwOhhy7QDdtQjG9ayaVnLJIx0gnvTYWHwR8ROQEw+kNP/xozgOlkcZAl ZiJIwAskkQJtNel7CAC5LPKeOINK7gyvBgsoGlCDckrI2yg5VkNZkbIcssSY+pszQzDx OebMhUjc9ugSbOiQTV1RrCL99rN5cbMsqPL9odd67iUekEBVec5igm0wScqw5ewWUl4s Tth1/OCFppIx2g4phIqy2kwUPIiTlE96dlKBWzGVGWzWSZZOXx9IQafGtTHz4lU5TOK/ ttWAldavIlqTjqdwIwKGBMo2wu7d7Rhfki3bPWG2VeYxqBu6wtQNks8t3WnviB0L4Ko7 PqTjResXda/a1ev2roCXzkziZVOz6JzhiV0p+Jc5oEHn1elYFRwVxqSqlpDnCK5bAyVn qloAhAt/ScqAOmki+wHsRDObXlMRbV3+rlqyVh1kDU+TLhcmwnHyBd2c1w7A8yEfPkje FWfKWQNxZqI3PASFbuK5lgzfAwR4wBJL8N1CNLDEqwhkDk4fjOx0NhmNBOEq+SkMeCez iMI8wQ9ZFJhxfu8NpYuzsXBFjYWmHOU2PtrMTqgGHlqVBcxxHJLNSBIitovskuKLUpMn jIu8ck2CLY6E0es+PWoHhQLqad5SzKJhbV7wgCZhzw7g+R53xRiAIwDF+t0p2tua4a5d 5tyj9WqD2ZC8ruF6zCaWgaxFwrPEwN32BSi3va5oHckIFl4a+SO5bZ1dOK91rNw22MR5 iWTiuSgJ9urr3bCQtKhAplDiiBynBOwM3g1H3M3rwab26GqoAIt9vahZHSn2lGyEPCAD PcmbUdAKfoP4EgqpZZAK6RenKNxHQpgy2FwWYFmrUMWC7AK2znIGeWvEdu1klIojcYdN GcX1xVX4SiLH1cUX1F3RbW13GtbLaQ39xg+ZCY96ah0S3RXVgkiY2gRFloEz3aejwQd8 EE/TByTvjBMOsJzMygvknCqxyIo3mLC/VwkCLJnIzq9unMe/qe/MpqjEXb7vWCy4ZD3u pNjCeWa9a0N258bsaJFUp0wggIKAoICAQDON1GbuJHPwlFaNPO5iGuLZLjZxwlk3hx8O dYhlMwY9asltRhfJEgF8Vf9kf2bD4UewHs3FOH76vL7w5Pe0TNKY9gRgrBbyIYAcE5pN mi1Ch8HdBn8wLqEja+ljxEt4ToXwig2Y+ysR3IKFcAWd7ETzuwh6ecTcZ4e11bpx86Aq xv6/E8AL4lHXzClJttjHNUO8evhPRKYGhpWGRogfEHlGz9lfNZIBFtOeo5tr4PpLLW3T TlspwTayFMsDDA3Qrs5oE1rR+cNeBUKnJ0nLjzCfnHm8iLEf4JVNiAzIcLxTQ1AHYMHp iEzZ5rKF0sEDQw+YXvIbp+px8jAnBV8XFuqA+hKNOt/w+DNmPb/J8xUQTeHpiY57aQ+K P7Dlj4b/gSZAHLC4Aqj31kl+dV9G6hZHC1x9KR46hSnEJ94/q8ZX0X80Dcz1ICJsoIAK AUwKBFO6MBMSalazYiDG7TfshDS19236HLRfOYhz14bv4LeW8uJPNRQtpaYXPOHwsWD7 h8NSYKp4CB0MvGJnr+2M5z82kkdygd6r/i7ZHArMybjdnwCVvyekvKX68cE42JZdtmR4 1ui1nJM34dhsX+Q8oJqLr6UEJ9xJdmqUZnN8x07VEljiaPrHfjc8znOYumy/gwA78OYo fy2p36X5AGLy0LWUhT1oBHpdFWxjry46tyeVQIDAQAB", "x5c": "MIIUqTCCB6agAwIBAgIUdnLUi3YSKb3CjjNTnOG8yt3pMlAwCwYJYIZIAWUD Ounsworth, et al. Expires 6 June 2026 [Page 89] Internet-Draft Composite ML-KEM December 2025 BAMSMD0xDTALBgNVBAoMBElFVEYxDjAMBgNVBAsMBUxBTVBTMRwwGgYDVQQDDBNDb21w b3NpdGUgTUwtS0VNIENBMB4XDTI1MTEyNTEyMTMxMloXDTM1MTEyNjEyMTMxMlowRjEN MAsGA1UECgwESUVURjEOMAwGA1UECwwFTEFNUFMxJTAjBgNVBAMMHGlkLU1MS0VNNzY4 LVJTQTQwOTYtU0hBMy0yNTYwgga/MAoGCCsGAQUFBwY5A4IGrwBrw6cdSK7gWJJeCXKi JDVGQIiUZzb6ZEbN9KVI6HqLBbFhPKpHehf1VAv38z+elRJqKcDcawFsZrygZK0Zoy8q KJh1CTwWcMmwOBACS6tU8M7b9cuzQb6hoqJSpSleCVMIlREBWRczbCaUSwf7hROiK6At 8xoAE6qo2hqz26XVwieBt8oX7BOprDNr0KqWnF/WoqEsharRuGeJwWNrEUq8rF6guith JzPY/Li4e6VeLC4PNSFSJLJ6cZtL8bZkxVRac7NFaV5Mkw33FZ6Hl2IMm7rY/KRZCrHT lGhtIRxxVJj8W1pJokZlrCNscnrJ4jZfkZxNS1N1vB97sjbwt6Eu9BkG2B3/2yUeagCA FaY2pcNy5l9sOHMs8CrN53EIIimW4FShoXYe9b+OSahS+33RCCrynJdeKyufQBbvN4m/ xHJfcKPVV2Ppa6/FMlbxh1xdEHkwcDaAonhq2hiShM5zdSmQcssc+6xstJ1hWAsSmJ3h SKBwy8y2oWl4eb9+QgRwwSEywMXsbEC6pyCpYF/5eMvGtY4zZFcG2TvkzA6GHLtAN21C Mb1rJpWcskjHSCe9NhYfBHxE5ATD6Q0//GjOA6WRxkCVmIkjACySRAm016XsIALks8p4 4g0ruDK8GCygaUINySsjbKDlWQ1mRshyyxJj6mzNDMPE55syFSNz26BJs6JBNXVGsIv3 2s3lxsyyo8v2h13ruJR6QQFV5zmKCbTBJyrDl7BZSXixO2HX84IWmkjHaDimEirLaTBQ 8iJOUT3p2UoFbMZUZbNZJlk5fH0hBp8a1MfPiVTlM4r+21YCV1q8iWpOOp3AjAoYEyjb C7t3tGF+SLds9YbZV5jGoG7rC1A2Szy3dae+IHQvgqjs+pONF6xd1r9rV6/augJfOTOJ lU7PonOGJXSn4lzmgQefV6VgVHBXGpKqWkOcIrlsDJWeqWgCEC39JyoA6aSL7AexEM5t eUxFtXf6uWrJWHWQNT5MuFybCcfIF3ZzXDsDzIR8+SN4VZ8pZA3Fmojc8BIVu4rmWDN8 DBHjAEkvw3UI0sMSrCGQOTh+M7HQ2GY0E4Sr5KQx4J7OIwjzBD1kUmHF+7w2li7OxcEW NhaYc5TY+2sxOqAYeWpUFzHEcks1IEiK2i+yS4otSkyeMi7xyTYItjoTR6z49ageFAup p3lLMomFtXvCAJmHPDuD5HnfFGIAjAMX63Sna25rhrl3m3KP1aoPZkLyu4XrMJpaBrEX Cs8TA3fYFKLe9rmgdyQgWXhr5I7ltnV04r3Ws3DbYxHmJZOK5KAn26uvdsJC0qECmUOK IHKcE7AzeDUfczevBpvboaqgAi329qFkdKfaUbIQ8IAM9yZtR0Ap+g/gSCqllkArpF6c o3EdCmDLYXBZgWatQxYLsArbOcgZ5a8R27WSUiiNxh00ZxfXFVfhKIsfVxRfUXdFtbXc a1stpDf3GD5kJj3pqHRLdFdWCSJjaBEWWgTPdp6PBB3wQT9MHJO+MEw6wnMzKC+ScKrH IijeYsL9XCQIsmcjOr26cx7+p78ymqMRdvu9YLLhkPe6k2MJ5Zr1rQ3bnxuxokVSnTCC AgoCggIBAM43UZu4kc/CUVo087mIa4tkuNnHCWTeHHw51iGUzBj1qyW1GF8kSAXxV/2R /ZsPhR7AezcU4fvq8vvDk97RM0pj2BGCsFvIhgBwTmk2aLUKHwd0GfzAuoSNr6WPES3h OhfCKDZj7KxHcgoVwBZ3sRPO7CHp5xNxnh7XVunHzoCrG/r8TwAviUdfMKUm22Mc1Q7x 6+E9EpgaGlYZGiB8QeUbP2V81kgEW056jm2vg+kstbdNOWynBNrIUywMMDdCuzmgTWtH 5w14FQqcnScuPMJ+cebyIsR/glU2IDMhwvFNDUAdgwemITNnmsoXSwQNDD5he8hun6nH yMCcFXxcW6oD6Eo063/D4M2Y9v8nzFRBN4emJjntpD4o/sOWPhv+BJkAcsLgCqPfWSX5 1X0bqFkcLXH0pHjqFKcQn3j+rxlfRfzQNzPUgImyggAoBTAoEU7owExJqVrNiIMbtN+y ENLX3bfoctF85iHPXhu/gt5by4k81FC2lphc84fCxYPuHw1JgqngIHQy8Ymev7YznPza SR3KB3qv+LtkcCszJuN2fAJW/J6S8pfrxwTjYll22ZHjW6LWckzfh2Gxf5DygmouvpQQ n3El2apRmc3zHTtUSWOJo+sd+NzzOc5i6bL+DADvw5ih/LanfpfkAYvLQtZSFPWgEel0 VbGOvLjq3J5VAgMBAAGjEjAQMA4GA1UdDwEB/wQEAwIFIDALBglghkgBZQMEAxIDggzu AAYcxQq3mdw8HmfOvHomqNWRtm45esDIRphHrvZ3J2AU7/nbqFgzrVonXB2f5hHe+DBA 5ZhmESWC/RDdAsp0t0X1aRLiA7dwoWICgWF2XiGz3CQPIoIf0RoIq7ewNCpUq2sS3OpN mvsTIMRq4jMoAuf7rQVUe1IzmaX5Qqe9+ICP9Y6IHM0D8jEjeK0dOXJtG2UNKn2r+Ggc JyrLu3G8hJgx/0mXoVwED4VKB67UvELQIraohW+REMlbLjUrCjy1KAxAdHvAfZpI3q+W lNJr6Tycr//8evqFKGAaIW/aR4Nq38EDxzj/wx8p/bAN2ji13A+RbD3F4HUmXx88njR7 oJVbXVR26Z0gAzYGRb2it8nCVMEMbEiEGfQpAlYKKydKaODPeoSvEFkTWUZwXKc6v2re zkIYsX/nPQVDL/f99NbYhYW3NfiyjtM+6aKCfmCJnN6vYcUY4DHG23Uwl5D1A6qFoGlU Z7zw7xRo1meIstiDl74AkTU6646vBhrb3TLG0BqNRXKg/8mmc4XGk3C/lW28e+DPZV9o uIjDWUqBVSeIGxtUgApKrfpPgXZFwS3As8D/Jq/m2NjkTX02g/z2XHktH1sDqq8Pvbzi 5dVX/CBdFbWowsAlXqQ9nq3QkOLTcog0APHi+WoRcpcRkb/mLyzbbidCDCwDtOujl8oF Ounsworth, et al. Expires 6 June 2026 [Page 90] Internet-Draft Composite ML-KEM December 2025 i9TkYIcaUt5JKmqPfgePVCYZT1h7mk23zn7lm3b5t6hpdvaSGaqvnAOv6l6QtlyvWi3f RYwSzX+HfitoQ0f2QJygLY/Ko3slbJr28L5ce6oRrk6FlUFXprsBlbZN+Ju4/roGVtNk l5MB6DCE3UYiflyAfk8DetipGu7QbaJSW087AvGN5YNSfyHZ2teDKesa+k8T5X68wsG1 QrVp/Pf0oykd52x6snvBsShE8H0qqHZXc8NuyjdhGdcSCbH3SoRRwJZgZZkeUrhlt/+f 6RolR4In0Vjrg79iH04umEedg4ejET3MsstlKKZAoVKsP87KI7WxT+HeJ/QbL4RePy9w 4ZuSmUqCFSXjL5lg97eQ5XVEEZnG6Qt/oQF/k7k0xUgNvS8L2fdFZ6e1Xt3Ez5+1f9b4 U0AkXNzTOMMzh0BeYBbkJAlaD+kvhf6os99ynBoKGkPh/vrBwOuuYBfSy0YPKN22XF5n q8LXkrgh9Kq/Dqm4TeNzRYdUw98rXzgOy4LmmquB2qyW8URsteL/WRSV5rGaEYFHP3vK bVxrapqfPimSJaPne20s4t2zxHx7VTgGnDLuGI1tcV3PO8APU1enAQRt4nGIMA1FKKaC k6F/fLmMbG6FIKHKnoyQ9FoQfOuDEl3JSQjl1qSn8w4ThZ2SqY9XI+D7KACD1S0ShdPX O3GXTbqaO2SKEA2JGK1wD41sll9l6ppW1gMLTyYdbzxfe3kp5l538FUJT28QQUy+o+y0 nCOI3+W7oVSwlvCrrh8dMyt3vlxrBMepS/AO7Mgl945PgoCfaKmeLSRuiM6hRcHKuymH X45VyqQW0EK0e6Ob6mTlsRTAZN712we+51cXujZ8EZDoyOtvBRqrEgrY4xavBQkhYIOJ NEMhauJQy+qe6NSqUpx7fLMdNoUcEkFwFCyYCUQL4CdA4TcYird3amUpAgOABNDjrxpr BRh7ub07v+TxfqT9nSohADtYmO9w6msB0IaCYWsxvbRxdSjzTNzNsMgaWPcVlcIqvsfA 8JdP8s1SpckMGeRLb5RFc+TQJXU5XBrdQIc7WZa5Ul0ne8IZmRaxyRkVE587Htitzkns n2dSIp2q/hlLp4N3OfSOT4xZ9ppnSem1oGsbcTyPbwXM9ELuw1efPTarc+Q6WxPjm0Rm hlgC7IawcvJr/l0AKrcJ5tD6tP2pqmtu/E3cVrJG9Vbubsej+/b8ofq39HU/p2d7gUFW DbFxD/nqCN9rSpZIeTHnYcaVQx5zzXYnr7Gz9xBjSyvwdEHU1OCoaZXK+DvlTyrGlhYE DJu1ot6OIidopTqzi1fmOYU4ysHO0kJFEs+gYK/y7D+7ALuvVM2OUgxSjTfAjYnLJni0 Uofcu0VaXZWIHNZmY1z5QzIrVCJgFFQrGx89hJDC7L6YPg6NmJySUonb2rzyVSR/3CIV tGlwcbhaxUf17C67rWKwxXRYo+4aE2/rAZj++kmTvDtRTiMh42BBHC7wNmGgy1tjftO8 JUiCB/oHl/8YY7L+lbglIv37VTTq/5R5p6/lU5NV+DriCS9pL2/i8DW2QGt/PQT8XyAT Cj5wg85+BGvd8heRjh3X+tTE0tqV66l+GnD7ihwoy6g4aUBqISj/TzbJ4ZdPmcQHuXo1 5o9WhUamqMRaWICd/wWRnekBeLprt8U78pZn5pdjXEb25ZLo+6FfnhvF4pyqAkesXZX5 n44UHQh8ykbcRZz9CS8QT4WB08q+Ye3C480KaZcxt0Vj8a3X1Kfj82JCgIE/WnuZynDT UGr8L9lxK6MI8Ia5zxMHi4Qlm6K6P65aTKNRpEVx5NWXT0UlXqxQaEF13/D+j6YnSLxP B1EEVNBWXcckFEoUOdVIBoR+NpbLmGgLUvc8cXfY444kZ1gsj5jRz1GeoU827ggvUuip iuj6nLbZ5Wy2Lb6JmxMgi43j1cmw2gRqP6isj++MbsYJ0CEZZggprdF0yJrq5ao+NZ4X mp8mKpaoDi6Vk30T+Ohhra9A3aKnA54FYtKaDrVQZdwuL4EzoZiXIxT/a/CPsFDLm281 IlporUI7wJKvMos843tBMNpb1ax6K7GTfNDad3S+tBfMi3pmu+MNaDORpk2P1pRASaUP 3bVa3lsAUumD26NQcB9UoJv1NC3ckjOyFRmoCq1Y3mAaVnYpLfr/SE886/xQcYbAaZoO HN2nJyWyPY+bYlfYseDyX0Pbbp7Dlrp9gJrCM2UgDMUEfyA8ZUbCsnf50FBzR6NCnD+u ccr6twOCwe/0sFgMVXGtWxPFh9C3bu3zqB3KrxkRq13ffSOKYb+gwz8isyGdmdm2GgqU d8sqPBVXlKnZ2iVpIMESBhS15qEu1X1063ralPD6kUOVEIQWhY5GFhZ8lZpQ33ABFH1H OaKRiGQ4SxDrOM+nvtORtgcO5z7MRsG7xWswbsfHeeSKiVS0dg30aHOMGhIeHayyi3O/ gz4I0LRx4nhAgrNnhhwCrERd7NkKExX2IUuEwsojp3q0EnDxMEyT5vIZibPXfjqk/9os Q0PdaaKUryOes4LfWcVJcyXhk6Q2IT/daJizmuah7E1PiLoHQP44xKtg23hqIPgk6PjT k+YQ9GcoGki5Si8Ybci8KUp8gpsd1XWkK1ng/MyPevXPNNAMeFxzhspu7E9jXBU4HuZu Cj80hP0DIC9XQ42522fdM0h146FFquVXC+DO1b3E53Zzocibfj7x01L0RYSD0EhQSe3w Ji8WeJS6/Gg6/WVOOE9r46AB+j9m0gXn8gsPnFhh7GACU/kiRYTYkexuFc4pFEPk3mKz T+6aw5jL6aRvf+7zZ3HP+dh0KFdEDwBc6lYXJMCoYPegSrDp+Ajn7XKN6CtqZGROS5T9 i4IPHWu5VZs5QkRCEqA3CXQG09xb1l3mje9TZKnN6k9AtuFSPChuQ3X98SdPFWfq9xR5 p2Wdi6SD11MhpZuFHblcFV1DbMCjdfnmUzNu6rS9RD0eTFIlD4e4MrfjvHpEodpiu1de IOCOmlAj2SqcAW8TILNP6nPedtzm6wIDVWiAcF+FnImhHgQdIE/TwtS03NPjTYtEhfmT ly8jNC7cJTu2un2C2WgEVos+3iAy8o9wkee8Qy7xkrJHwL3mAMJsMEi2XQbYhlgLaCQh O/Cthcuv+1y6JsRF8s5frtZfnJwH/weGnXm5phO2adflg7ez4Xi4wJOgnob+gQsT84re 3Q2KQN5gUD80opSBOsx/lLRaGQtyro+Oc2qqATI5B/xKJTQaI9qFNwbwXPQCBp+EQmE1 Ounsworth, et al. Expires 6 June 2026 [Page 91] Internet-Draft Composite ML-KEM December 2025 Lsp3i0WYcUzrcwGDXi5QeNtOJJmXg0TwWoHo98veFlgEHHAzcl/k5MPGSZ5ntIFsdP1q j38wbwajcXJce3fYbf3ZOXiiEjxmgnz2t/NpawePGDHols+144WK/R4w2yJ7xiyV786S Yy9/rivwj0ocZiuo+iLKRSZf0cXIjUwT+4zBdifOkj/hNiOETnIHrOECEGIZfFAlMGLA MTeF/B7Y//pevxtBmKU0Ps1MhkDvbzprxuSG8EeS2yDbb5LbxL+jfVOdyZ8eP+/2PutD qw8mgflhtrM/MAnNYmM66QH5NUp6eyUwVnAEJx4WysiteKIiyhz/PbcsOF7EcPfG/sxD BR/h+6gtC99mDFx0u4CGIOXTGaguqncSbXZpqBo3hdl4EMLdCBOQyNfp6ycuY6fq7xMw fss/QkR3jaC/2eNTviOLyeD9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcNERocIQ==", "dk": "1kqxCIuslrTJjWf/kVdYVCjypFR6e6NpkX2dniNF/EyaTnY+VvknQWEpM66Hk kcmojUgyXdbCfmE0bmACmVQqjCCCSgCAQACggIBAM43UZu4kc/CUVo087mIa4tkuNnHC WTeHHw51iGUzBj1qyW1GF8kSAXxV/2R/ZsPhR7AezcU4fvq8vvDk97RM0pj2BGCsFvIh gBwTmk2aLUKHwd0GfzAuoSNr6WPES3hOhfCKDZj7KxHcgoVwBZ3sRPO7CHp5xNxnh7XV unHzoCrG/r8TwAviUdfMKUm22Mc1Q7x6+E9EpgaGlYZGiB8QeUbP2V81kgEW056jm2vg +kstbdNOWynBNrIUywMMDdCuzmgTWtH5w14FQqcnScuPMJ+cebyIsR/glU2IDMhwvFND UAdgwemITNnmsoXSwQNDD5he8hun6nHyMCcFXxcW6oD6Eo063/D4M2Y9v8nzFRBN4emJ jntpD4o/sOWPhv+BJkAcsLgCqPfWSX51X0bqFkcLXH0pHjqFKcQn3j+rxlfRfzQNzPUg ImyggAoBTAoEU7owExJqVrNiIMbtN+yENLX3bfoctF85iHPXhu/gt5by4k81FC2lphc8 4fCxYPuHw1JgqngIHQy8Ymev7YznPzaSR3KB3qv+LtkcCszJuN2fAJW/J6S8pfrxwTjY ll22ZHjW6LWckzfh2Gxf5DygmouvpQQn3El2apRmc3zHTtUSWOJo+sd+NzzOc5i6bL+D ADvw5ih/LanfpfkAYvLQtZSFPWgEel0VbGOvLjq3J5VAgMBAAECggIAAuSKbobI9Nh4T 62ievMg9GmgoN1xPPWorKLFut7de2l8JyFCiu3Ksi/6g1dtmU6UbXlXFnoNLtLS6cPf6 nuWHpsGnZLvFQ/btrHcnQ6Nqsx44Z/ipXBcAslXXMPZrS0VpYkBthGcxlCSQaCgezAz+ bUottO90WtXQ9N9fUtiPYfTnVJgwVM+t75Bbm+nGt19V6JTzsBj5wz8BZfV4qgbkd0vU dB4fmDL7xk6WkDgttVRD0CJZ67IG1GSvnFv/mEfQzsDxazSiZZ/pRB2sTqte4T5Ort20 A7XLd7T1iPJGkgcbCPTLLj135oPynnygXIKvpfw0T+hWb5bCz36nINR0yruQDdsgP/3j oZa1gb04ZFuv7gIiOQmx9vS/c4Wv20To5NwMaAtOqRP/6sJuM+1X7mSTkBd9LAmiNso4 aYYUezre9EGACcPeUC5m2WoKAwuARvMQsz5URiyhIUX3Js+9+otvCNo7uf5DqsX44wc7 StYpwrqYmokxBa+gTsZoKwLqQv4suQEgbq0Fte7iP/mTKDC4/OQ+3ceNHm5VV0xjOUED T/rtLQh+stACm6L5whEpViL0VOAlpk9WCFi6iofQXjNHVwBhhi6o+XuLU1jKsTtWZHM9 fWU497fIBnu4UQwPHF9B5PIaperTMr+/FpinlfQy23ct4bghufvTSO2+gECggEBAPW2T xjRwEfmST61iRwhiHQHfpgMgnKqgYLkJKuEWEL4a7Zpr68lJZe/Gw6Z+Z9XnSGYHtBxT vy+bNvRKXpUajIQ4t8ycl2uZ9DXLtquLnfpd4V5sGxFK5ze46aKo5xSyCeuhJMiIts8K 2vsMC0fuKH1ajXekOAq6prtxPhbBZkv5d7iVcJSRvHt73zVLuO+N2rEbDzukxwgCQElE iiYf8lz6tJu4W2zIn9+Q9za9uSZGP46Ik01mF/fS5u+oaJYwdYczbWfpNU1x/1USlzqj vS7xmDwonnPkYPLa1QdsyqOSo6RvG54OatgCyqX4qtHlIGPHik8gzaqlGMk8M95UxUCg gEBANbZqtFFoIlgHJp651hFGpylmOUwSw9lCPb+Ipt9Alc/O3gjgtgbeQYT1Dy2otUAI 02+B5ViNWhDMn6UKk1pty9p/WWnDOkYN7tfCq9MItMKtUjnlEfqwUlGVjzPKxGXSmpLg /RMI4TmTZkgPr0jfIfDQ1j8zfwl/5Oh5IB6Jp097uX2mPnF5LPKjQBlODNKe3DEK5OFN 78xXHSceiu3k8j8Uo89jaqItvu9Dec/eSwNhzqSx3R4FRSOpKPZkIhjUdI/5Zo+JSq/7 U8Nem0KWG/bQm5anSSTE88hciva40+jaE0bSVFoWg90vpRYk8QA/q1OLH2pYwMtH6QER MLN7kECggEBAMNTk/lE9LezZ1KEeWR1e8XRF1/DwgdpZ98ngccfRBKo7OdriI+Q1huVf erTmE6FFZJZHVXSXVop/tuXoINwi6MVLWUE80lplXm9Na/9e08ztyHSJN9M9WiU/x+rY niojhiNcTKNlmv1nwcCESIt71ZAg5gjP8QUGb/jeAt+QCsQmoneHxKE2YUFAraXudito 9wqHWkqtqNLDB1u3MqMwDji/y8dmfLcznXPaB8vqcj7s5SVniMGkgTUu4QpvNAUArM03 oqdSCl9wWevFBZdGBuREhiJ8n8m9KRylvWdTopr5vUDAWpIBIApr3bCmxxRoMqFfRKG2 kAgxikyeoRUDCkCggEAMuR0lgXMNT5TCDS8wCf+WcTQJtn9rbPdH8SrJfHCsDAGQjsHL 3GyhUIFMCyC/bl+o1e0LCqLRBtGxr0KGDRGdDDDGWUspbpa2UN2IHgEd8E9l/tjIHX3O wgyPU1FgnE3613f7+ppL33uO6trsRnK0c3rEhUwJd5KYAolOlm08+JLyKVVLzU1K3F7X PCdE2k9PET7nYIc5mkm4Wh/eAOQOjeqxstp109zKMZrmK9sYIcD1VgXbvtS4v+2+Cj9F Ounsworth, et al. Expires 6 June 2026 [Page 92] Internet-Draft Composite ML-KEM December 2025 5GPPCJunM7DtxCngeZLbbDZqgViAwnr11IPiyz9Am5jEeY/OqSQBXyWeLrKuhERT4h8y 0iNOWb6UTJLIGrybsKhAQKCAQAwN5X6OcgnKsQ/uqMjTzBfVyhqyJDt0iIzSS0WXwOud nARnttRzHplg/gVeZ3AnH93hH9waqYGLpmjX/qmbdKOrEtQVJY3WSiQGHMhZ9Ad9//QT WkuAzGeAboRMgMA3L6x97id3elxYdQbDEh+Al4uKxFMHJ/VjV1GJh6iA8Kx4Q+tOv//F wmzCE3wWvvEmDCSM5HMlVoZ2BktDbtoXM/jDmEdTXbWgMG+0V7pNinrd1sXiMPI4XFn6 sWTgKpoh5E0ym0LKxfhwG/RMxZmd+q+slhtio7W57hE3S4djuLFB1q55RFrTOFYI11rt qksOWANR6yUzyV9mkq7vfH4zWd6", "dk_pkcs8": "MIIJfwIBADAKBggrBgEFBQcGOQSCCWzWSrEIi6yWtMmNZ/+RV1hUKPK kVHp7o2mRfZ2eI0X8TJpOdj5W+SdBYSkzroeSRyaiNSDJd1sJ+YTRuYAKZVCqMIIJKAI BAAKCAgEAzjdRm7iRz8JRWjTzuYhri2S42ccJZN4cfDnWIZTMGPWrJbUYXyRIBfFX/ZH 9mw+FHsB7NxTh++ry+8OT3tEzSmPYEYKwW8iGAHBOaTZotQofB3QZ/MC6hI2vpY8RLeE 6F8IoNmPsrEdyChXAFnexE87sIennE3GeHtdW6cfOgKsb+vxPAC+JR18wpSbbYxzVDvH r4T0SmBoaVhkaIHxB5Rs/ZXzWSARbTnqOba+D6Sy1t005bKcE2shTLAwwN0K7OaBNa0f nDXgVCpydJy48wn5x5vIixH+CVTYgMyHC8U0NQB2DB6YhM2eayhdLBA0MPmF7yG6fqcf IwJwVfFxbqgPoSjTrf8PgzZj2/yfMVEE3h6YmOe2kPij+w5Y+G/4EmQBywuAKo99ZJfn VfRuoWRwtcfSkeOoUpxCfeP6vGV9F/NA3M9SAibKCACgFMCgRTujATEmpWs2Igxu037I Q0tfdt+hy0XzmIc9eG7+C3lvLiTzUULaWmFzzh8LFg+4fDUmCqeAgdDLxiZ6/tjOc/Np JHcoHeq/4u2RwKzMm43Z8Alb8npLyl+vHBONiWXbZkeNbotZyTN+HYbF/kPKCai6+lBC fcSXZqlGZzfMdO1RJY4mj6x343PM5zmLpsv4MAO/DmKH8tqd+l+QBi8tC1lIU9aAR6XR VsY68uOrcnlUCAwEAAQKCAgAC5Ipuhsj02HhPraJ68yD0aaCg3XE89aisosW63t17aXw nIUKK7cqyL/qDV22ZTpRteVcWeg0u0tLpw9/qe5Yemwadku8VD9u2sdydDo2qzHjhn+K lcFwCyVdcw9mtLRWliQG2EZzGUJJBoKB7MDP5tSi2073Ra1dD0319S2I9h9OdUmDBUz6 3vkFub6ca3X1XolPOwGPnDPwFl9XiqBuR3S9R0Hh+YMvvGTpaQOC21VEPQIlnrsgbUZK +cW/+YR9DOwPFrNKJln+lEHaxOq17hPk6u3bQDtct3tPWI8kaSBxsI9MsuPXfmg/KefK Bcgq+l/DRP6FZvlsLPfqcg1HTKu5AN2yA//eOhlrWBvThkW6/uAiI5CbH29L9zha/bRO jk3AxoC06pE//qwm4z7VfuZJOQF30sCaI2yjhphhR7Ot70QYAJw95QLmbZagoDC4BG8x CzPlRGLKEhRfcmz736i28I2ju5/kOqxfjjBztK1inCupiaiTEFr6BOxmgrAupC/iy5AS BurQW17uI/+ZMoMLj85D7dx40eblVXTGM5QQNP+u0tCH6y0AKbovnCESlWIvRU4CWmT1 YIWLqKh9BeM0dXAGGGLqj5e4tTWMqxO1Zkcz19ZTj3t8gGe7hRDA8cX0Hk8hql6tMyv7 8WmKeV9DLbdy3huCG5+9NI7b6AQKCAQEA9bZPGNHAR+ZJPrWJHCGIdAd+mAyCcqqBguQ kq4RYQvhrtmmvryUll78bDpn5n1edIZge0HFO/L5s29EpelRqMhDi3zJyXa5n0Ncu2q4 ud+l3hXmwbEUrnN7jpoqjnFLIJ66EkyIi2zwra+wwLR+4ofVqNd6Q4Crqmu3E+FsFmS/ l3uJVwlJG8e3vfNUu4743asRsPO6THCAJASUSKJh/yXPq0m7hbbMif35D3Nr25JkY/jo iTTWYX99Lm76holjB1hzNtZ+k1TXH/VRKXOqO9LvGYPCiec+Rg8trVB2zKo5KjpG8bng 5q2ALKpfiq0eUgY8eKTyDNqqUYyTwz3lTFQKCAQEA1tmq0UWgiWAcmnrnWEUanKWY5TB LD2UI9v4im30CVz87eCOC2Bt5BhPUPLai1QAjTb4HlWI1aEMyfpQqTWm3L2n9ZacM6Rg 3u18Kr0wi0wq1SOeUR+rBSUZWPM8rEZdKakuD9EwjhOZNmSA+vSN8h8NDWPzN/CX/k6H kgHomnT3u5faY+cXks8qNAGU4M0p7cMQrk4U3vzFcdJx6K7eTyPxSjz2Nqoi2+70N5z9 5LA2HOpLHdHgVFI6ko9mQiGNR0j/lmj4lKr/tTw16bQpYb9tCblqdJJMTzyFyK9rjT6N oTRtJUWhaD3S+lFiTxAD+rU4sfaljAy0fpAREws3uQQKCAQEAw1OT+UT0t7NnUoR5ZHV 7xdEXX8PCB2ln3yeBxx9EEqjs52uIj5DWG5V96tOYToUVklkdVdJdWin+25egg3CLoxU tZQTzSWmVeb01r/17TzO3IdIk30z1aJT/H6tieKiOGI1xMo2Wa/WfBwIRIi3vVkCDmCM /xBQZv+N4C35AKxCaid4fEoTZhQUCtpe52K2j3CodaSq2o0sMHW7cyozAOOL/Lx2Z8tz Odc9oHy+pyPuzlJWeIwaSBNS7hCm80BQCszTeip1IKX3BZ68UFl0YG5ESGInyfyb0pHK W9Z1Oimvm9QMBakgEgCmvdsKbHFGgyoV9EobaQCDGKTJ6hFQMKQKCAQAy5HSWBcw1PlM INLzAJ/5ZxNAm2f2ts90fxKsl8cKwMAZCOwcvcbKFQgUwLIL9uX6jV7QsKotEG0bGvQo YNEZ0MMMZZSylulrZQ3YgeAR3wT2X+2Mgdfc7CDI9TUWCcTfrXd/v6mkvfe47q2uxGcr RzesSFTAl3kpgCiU6WbTz4kvIpVUvNTUrcXtc8J0TaT08RPudghzmaSbhaH94A5A6N6r Ounsworth, et al. Expires 6 June 2026 [Page 93] Internet-Draft Composite ML-KEM December 2025 Gy2nXT3MoxmuYr2xghwPVWBdu+1Li/7b4KP0XkY88Im6czsO3EKeB5kttsNmqBWIDCev XUg+LLP0CbmMR5j86pJAFfJZ4usq6ERFPiHzLSI05ZvpRMksgavJuwqEBAoIBADA3lfo 5yCcqxD+6oyNPMF9XKGrIkO3SIjNJLRZfA652cBGe21HMemWD+BV5ncCcf3eEf3BqpgY umaNf+qZt0o6sS1BUljdZKJAYcyFn0B33/9BNaS4DMZ4BuhEyAwDcvrH3uJ3d6XFh1Bs MSH4CXi4rEUwcn9WNXUYmHqIDwrHhD606//8XCbMITfBa+8SYMJIzkcyVWhnYGS0Nu2h cz+MOYR1NdtaAwb7RXuk2Ket3WxeIw8jhcWfqxZOAqmiHkTTKbQsrF+HAb9EzFmZ36r6 yWG2KjtbnuETdLh2O4sUHWrnlEWtM4VgjXWu2qSw5YA1HrJTPJX2aSru98fjNZ3o=", "c": "YgRSmgE8Xzm55GagxeDRhWADPmhOHg2emV1/YPj8xudoWmJ3rajRQ8APjHefMn OcwWYFMaytCBPxARmc1fHs4zC5LdkH5JOGhddlgDvaPURWBkUIlUn+riw+bJpIXPAtlo j449ytiCD2wTCpISMfssQGgjNDkFjF1QNkPjUL9yXWwH4GSl1f18reR28ntqOdSmtrnF UnSrAC77vsIxsPQb2nvEhvy5k0vmHtNaKmjskNOnRgOVGXfKis8zebg1hKEE2yJsIQRr c8f3S2KTbfPEXRzfCbZ6vKxUsHsYH6PFvBZcFmnVv8uIDTfcORCY9vLqrF2rkz6ThkVT nYyR5t5uhor/7w6Z3uCZC4i9sDD87HZXQLI2mlm8qwSm0zmzvfX+FioW75r8Q9cN9PoQ gEV8WXvqduXPAEdO5jb2sWxozI0mJV+LakbKMifLYk8f85Nd0m5wO6+Ey0gxKZyE15iL xQ0xQ9vJ22KCq9wUl43jujmNgbbUd9S4Yy66Z+mLfICjm2kxIDNy7Z+9g+BkWY4ptnJZ TUrDABafUNUpuXhjQGk0Eruae97miT4vN4exIllzYHFYG1opdbENajlHI4Z+t9nH034s NO6K3JbuCZAyjrzPoXoV4dHoOihNaLDrcvchUOO+OfsbhsVr7dBVtSg2DIcXf7adOwRv Ppjcv/UAQzIN7/pkopa8jVTWUw/0gqOr1WEQy75uNq2effdQIRdyTJMVxjnuvd0YvLyb T+aDYtfIJKOLV1vYjrppdNvXuEpGDqywJejWwC9JZn/UxgFS5b6kMZGuSC9liuzTg+qS nXrT2LjrDhNqxyTn6Ng8aALd/eUQl4lllMoBs4PuA5HCNK/ExEoFhf40B+xYUNYEb9UR MdYip4t0Mivj2xmwAYFwqrK4h8ngJlPSKZywOxn1rxH4Em6uRYbUgKu+eSMSRj743zwr Zr3Y8fL0U2XEDzB3MeMq71mVQJuDKCZg3cMNC3eUNTzm3sykLuGDtELwo2BA6wabZoRk 8QSSa28+lgFvt4C6TH3OHvS+ZtocfV961lfFGCzJlgW+TfuxxEoYMVSAD0sQFBWtboeh 7cvHxNmYnSrMd4Bo/rAVAXXiMYjjMGfGhmsW8ZjKL1/AuZDIFWUvoNVhBV6/SQKaDfG2 vJ5qXoGD5Khz6JqGSiOFxKQNmdvMt2PKIwUn3KLKQQlmGEe+VldJdSHr3VRAnmiv/SCN vXBQT2c81X8wSgJx/WtQyo5Yp39YJZONcxcfFEWRRjoZqSWxhSbBXe4qrHegPBlLCMb7 aTz37am9Y5mXkd1AmhzbHmRzpLHpFcgGtCbbJOLPePavQRqbosfacvw783cRGgtjXCj5 +KsA99XKiv3GMVuNK7iSUUFsl469Y6WjkBgbK+oQ0qKO5mAdCBFq4gdTAkuPJbKh1CXu CGUqqz3xkSwruuyQpxvDAkQmOxhAtL8JqyPYKBeSrFR5ya+hwMaw+dAQurUAFGv/9CpV ULxzNL+REPt++L+r78BcE9o6Yv8MMH0dUePHiS0Qb8Ncn6jX5M7ptpClzr3sUh7fqw8w QuMPONS+Wit0OubfQyXlQIcbL/Vc6izpnxfMFSGGP0jWGLM3FjvRtReIh+9FaDQTFhdr rDmsFwqFMOppHPVZWulOc4ilcJO+dM1HaiU08gz6Tgv1Kb7vwBds8QsB8EXWiSSLVxb0 ZvuEv03riqO6Z+ogw6Wi4AcALRFSesdxrV3yJC4VYprN0KXe1vkEPjl30Rr67Otzrp0e ZTOGYS47vnbqxDx/J7RCGMiF+TGwCsEnpg3OTS+71jdZcyxHGnvRyJOmA97oOvXRW1Fv yGvQbu1stsPvCKsekv39jQU9bJ8IFaL+utg2f7GKPmshI50nVPAJuPlKcsJ6R1KG/84o 6d6GnXIH/+YqkUFj51SgmO8s1V6bprX+DJR7PNQy3v7l2kmSXXfVoOHWdJMnKoYqa2+r 9q32ez6ERl8dJXJ+v79qqDUFXEH71lB1In+KSGCm/LldrpJffTJUugWTHQ7yBIeYJDpY +GGZhXjNELgJNnSgfCv1u8wUwuTuFGPMrz3KJ7lRf3Cmw2CkQghrYiuhDxDah0mda3Td 0W184eyX4hhcXXWftqP6dLneo1SMOvzg==", "k": "fcBn1NrLUK2/sBs12gLKvfGjInKT7w5+wmzI6YITzGw=" }, { "tcId": "id-MLKEM768-X25519-SHA3-256", "ek": "aJS5VzfEw2Aq1eMEVQm+8gQ32HE/InwtycaS4BNNW4hZVRCGZ5kIOcGFO1kHN YhVs7KqWbrPVsfN+8oM4kByb3dBasy75/OlVwpUx2h0QrG1roE6RVsZXAS7Q5cL6rZQH hK/+5hev8wwfyq0IMNGAPhEs1savdkaIam7IASWEMwmfrl7evGXLtih+5vMMxRtO3Fe4 BNkHnJGtGBs+HbIVtp4usl1GAljj7BdcXOSUEGN3hUMQ5E4J0RmemQpDdGJeDEKgXOCP xKQtWOLLgoEPJyhkoBO07oCHyKeksh+7kFi/9NNhoq1GmkhUpAMSqmDHbu0bqukVKBSf Ounsworth, et al. Expires 6 June 2026 [Page 94] Internet-Draft Composite ML-KEM December 2025 DSHm+Yfk4yPKPtTwdIQ4lWU1pqMYrzAT6usDtNWVJtwtObJlOtckyQ1DAWNVaAYoMuwA /VBmIYM1Xth4+lDuOPBLdirIqlXiwxjZPKzRdqpieY1Fwo0bJYyKmieA7vJr/OluaAtr VF88wJJAXQsa4uDF/W4kTJeieNqrSUGreVOuZZ5MGNZ0qVYsZC52kMDJFUx06Z8xRSaP EYlD6p97gKhnahqF1yh9lah3eM7vpSQMGQoh0bMfRyHqiuvnttIJQGYV3i87AzEJpuhD AN/I+druZJOSeknHvcz8SNb42yWmGUw5BQqV/nDeOms7WSEVwIZD+K5zFaGorV6o/MkI +ua8jNIeLmXl3mMw0xIlCdX37WLkouBoaxAzvsxaoteB6nMOrdQ/9F/Z7C8htN/K9MYv yNbmIYwVpmqZsFOZ2ay5JllEvohonwrInYIV2BUTrNtgqiz6NSzleCld3TAH0hQBEu+y qRyRkADnoq/fFmgrJhSwTmpHia+SWvHI4ZFwixTBbnAMgEHTTN4uTCm2Ym9CDZQ1RtMU DEKK4YQ/CiYwdNumQBNVZxK0+kfzbE9fkGQmAEBQmTFlsRgYpWMoiCp41GnQNzDu2hZW NrGuNFC1RasiSltU6J3bpgqf2MG3XquOeESlTIHTitr4hNLebYiZXWprqVY1cJ7tsogD gRpEmpW4QtX2SxTgfIZBNxqTOtR8RLDk0Uac9XOLBqehGyJm3RAo5Q5yjEUjZKzZJEsF rlwKqo6qogoildKBDVEFkooAGnMnjx/ryQmejNz/6vNbkChdLh0+NCLRfCMGFaM0bPLa ILJx6lofkx16SBTZIAdxHgg25c1i/e9KEKfaXM+uAYCDQAbHVVmhMo3mVGabkCfT9OsL TfCPJw9WAFOiqUSgWE93IoFvkVF/EpmMdm0f8o8f+E0Z4eJ3eRI91u6DpJJ9YGRz7gss JRvsuss5mNLXjZY/qySGkccZPmgvRaGoOTKU3I+Dzs9QQsi89iW73J0iCu523AdLxkqf SZR3rifs8tJfyPKEtJfBVfGHDNvagibDwZqa9uGmQDG+jangAwVJaSwbFBUEaaBzwmgE uRXzPoXJJh7f3mAagRgewN00GvH1RlKXHqKVwWWohrCXUIVEimj36BgX7kVcqtZiwtjc dyoztU/JoUT7mSDM1rDZ2xKH6mmLrXKJ2VjjcB6c1ST8Hs3iP9hE9+ctX5A/ReVpHAUM ZFX+HbCWNQY+Weh76U+O7rrJWeOKu6eChmRF0oWRpMqQB+TFkDZ9CC/JSaEAsv7aA==" , "x5c": "MIISujCCBbegAwIBAgIUX7bLVzs/KDTyrtmjxQKfEyurL+YwCwYJYIZIAWUD BAMSMD0xDTALBgNVBAoMBElFVEYxDjAMBgNVBAsMBUxBTVBTMRwwGgYDVQQDDBNDb21w b3NpdGUgTUwtS0VNIENBMB4XDTI1MTEyNTEyMTMxMloXDTM1MTEyNjEyMTMxMlowRTEN MAsGA1UECgwESUVURjEOMAwGA1UECwwFTEFNUFMxJDAiBgNVBAMMG2lkLU1MS0VNNzY4 LVgyNTUxOS1TSEEzLTI1NjCCBNEwCgYIKwYBBQUHBjoDggTBAGiUuVc3xMNgKtXjBFUJ vvIEN9hxPyJ8LcnGkuATTVuIWVUQhmeZCDnBhTtZBzWIVbOyqlm6z1bHzfvKDOJAcm93 QWrMu+fzpVcKVMdodEKxta6BOkVbGVwEu0OXC+q2UB4Sv/uYXr/MMH8qtCDDRgD4RLNb Gr3ZGiGpuyAElhDMJn65e3rxly7YofubzDMUbTtxXuATZB5yRrRgbPh2yFbaeLrJdRgJ Y4+wXXFzklBBjd4VDEOROCdEZnpkKQ3RiXgxCoFzgj8SkLVjiy4KBDycoZKATtO6Ah8i npLIfu5BYv/TTYaKtRppIVKQDEqpgx27tG6rpFSgUnw0h5vmH5OMjyj7U8HSEOJVlNaa jGK8wE+rrA7TVlSbcLTmyZTrXJMkNQwFjVWgGKDLsAP1QZiGDNV7YePpQ7jjwS3YqyKp V4sMY2Tys0XaqYnmNRcKNGyWMipongO7ya/zpbmgLa1RfPMCSQF0LGuLgxf1uJEyXonj aq0lBq3lTrmWeTBjWdKlWLGQudpDAyRVMdOmfMUUmjxGJQ+qfe4CoZ2oahdcofZWod3j O76UkDBkKIdGzH0ch6orr57bSCUBmFd4vOwMxCaboQwDfyPna7mSTknpJx73M/EjW+Ns lphlMOQUKlf5w3jprO1khFcCGQ/iucxWhqK1eqPzJCPrmvIzSHi5l5d5jMNMSJQnV9+1 i5KLgaGsQM77MWqLXgepzDq3UP/Rf2ewvIbTfyvTGL8jW5iGMFaZqmbBTmdmsuSZZRL6 IaJ8KyJ2CFdgVE6zbYKos+jUs5XgpXd0wB9IUARLvsqkckZAA56Kv3xZoKyYUsE5qR4m vklrxyOGRcIsUwW5wDIBB00zeLkwptmJvQg2UNUbTFAxCiuGEPwomMHTbpkATVWcStPp H82xPX5BkJgBAUJkxZbEYGKVjKIgqeNRp0Dcw7toWVjaxrjRQtUWrIkpbVOid26YKn9j Bt16rjnhEpUyB04ra+ITS3m2ImV1qa6lWNXCe7bKIA4EaRJqVuELV9ksU4HyGQTcakzr UfESw5NFGnPVziwanoRsiZt0QKOUOcoxFI2Ss2SRLBa5cCqqOqqIKIpXSgQ1RBZKKABp zJ48f68kJnozc/+rzW5AoXS4dPjQi0XwjBhWjNGzy2iCycepaH5MdekgU2SAHcR4INuX NYv3vShCn2lzPrgGAg0AGx1VZoTKN5lRmm5An0/TrC03wjycPVgBToqlEoFhPdyKBb5F RfxKZjHZtH/KPH/hNGeHid3kSPdbug6SSfWBkc+4LLCUb7LrLOZjS142WP6skhpHHGT5 oL0WhqDkylNyPg87PUELIvPYlu9ydIgrudtwHS8ZKn0mUd64n7PLSX8jyhLSXwVXxhwz b2oImw8GamvbhpkAxvo2p4AMFSWksGxQVBGmgc8JoBLkV8z6FySYe395gGoEYHsDdNBr x9UZSlx6ilcFlqIawl1CFRIpo9+gYF+5FXKrWYsLY3HcqM7VPyaFE+5kgzNaw2dsSh+p pi61yidlY43AenNUk/B7N4j/YRPfnLV+QP0XlaRwFDGRV/h2wljUGPlnoe+lPju66yVn Ounsworth, et al. Expires 6 June 2026 [Page 95] Internet-Draft Composite ML-KEM December 2025 jirungoZkRdKFkaTKkAfkxZA2fQgvyUmhALL+2ijEjAQMA4GA1UdDwEB/wQEAwIFIDAL BglghkgBZQMEAxIDggzuAEPQv/YcLk3ILtguUjZWwHDZHy4WiZ9oldFr62hxED8Ht226 KL9Fy03HlHct2JxJJCL2KFBFewqrYLKKDeE1KOMU4FLjk2Bf8l8C8XhSSBMzhhCzSXBa g572uf2Bof43Eg2jHPFhzpj9OeTapq1mWj/BjzQzI7ONLA6JlOKQNfgnU8vEJldy4wCd B9eOqVHHLJ4yceR8o6E3HDQ+24y/Rohe/FYFjC7DeX6ppyzBnhPzhoRxP6wscPcf1a6A 1z7ozXgt/l6L2RnPPHtjtiySsRWsBsNYwKC1f9X85+vg64h3FVaodUcS7Sr+87EPV3cu LIK9Tns1wWmpTYA9nzfpTK0PxPDGSl59uItJP/0/s9lfH3GECTpvVtuWeHWsmoW5zL/v 9weF+bHYv/m8xffqZmJrU+L8hdvyu6xs2ZTb9y+tt3ADaBpcnkX4O3kWkpLiSY7MXbeS G23QNG1Xk0kETLp8u6qkJBJvcNZ2PvGZ28JmEiAqh/EzePkoRPmfA0Ey+gOAXDLoRonL O8Vg3PBFOHwAYxMEibShQjrI3IP269SIWWX6pWrvaGuzh3qOOxwxp1mVxGL1VpLiNltY 5X+lX2+rqaduyW4o0NOKQx9oGuz0IXmftZnajSZE6xbdr1TsOwzHpuOYqebHODux0uQf /j8BNfvGcLco6w2mlIWiWag+OKinnH+yzCQP9nj8P4pRFQAVQRWquqvRvalb+i6Kc1Ce pBKQBekcV5uPMiceJE9KJKOXLZAuKzT8mZREReIkud6ESnHzqmFhfthCteC81FpX9LHS 8VJS95sMYguFlWvxK+SoxZ0rvGrDBj/F/fUHZ1SYHwpVI9pkK0FFHMmwcbcTjIJd80NU pfWvXcYCa1onA3vfA7Zqx7wLG3WP/74HK6uiRVy89w0zbEwAgaAFHi99i9LhWt9yjg+f PmGHcd0Thpj+3ziJf2YHjzIm4JykIt8KwC5squlk2CAtpc7CpUBxr/Ro0vlkRXc6wGId wLY3jYJbQFJ0cFxQIlImPum59UpZKyEJv8awpeziOGuB11J+IzLCU+cGolk4hvdMMU1G b1O84bKEKZg37TVBd7tAXnRh8B64HkIfT+AZx6RozjePHtH9w2DIflLEWEhYSwJPOoz4 rcQ6C8NvA11zBLCSQ0trGBRmrMq5FhG/vXn1ZbiGRyNoTtlNrPFWu5IJUNYyGRYpI2Q3 anDenC7hjiESfek4wOFFmCx0ewUYG0xdxHnSVxM19APkns/fz4CM0U18aAF8H9ZSR0Jm GdWPN3kmba4+mKpV4+AKWtLB1kx2DL7vG12TtO615Buju1GWnA2hXJihU9CJAEgE4Hh1 dCPcwlph/SbJ2054gOCAiDK1f9rgwFV7t0NR5vcPS9aiiH/Ftk/i4zGJd9RQSDSsZpy3 gY2uAXzI2h+WfR6B2cA61TMXxQOr2KI/Os4lrvwc/dW8UAXEmrn2VSGZRACE0R5kprmV sCLLkYCzqADAGDDiGUBybESaNAOwcOWhUVbp1Fi4VyfpUDhbGP5YTTtwciVD3sZHUzC8 28+8p8MKvEx3GLxcofgsrq+Is2KggRoJSqtT0LX/62yKhK8pDjKg6GSXuVzNvlQrGTYU DCdpirS3UBmh4npFb02URkOuH39Vi7cD/XbpxdFrjHE57yLbfjrtgdZ9DvU52cLCyIEh iqmcAF1Jnl9SB5HWoIcvMOspnqXZhDeik406Shv/mBBo21nQ46bS3VHs9YyNPV7ZKbN8 +PJNm/RasI06uNsG9qZGUvUuGPg8eNWOmwiQTU5tjg5gcCkNwgljWgUq9twJFuq5WGpc 4tkd6Z70TaOZ7HaOzCrhVrMB+ISgHsTVJR80ZRi/vBYv1XnrYTR5g9/mDZXGydarFIgD V2efufAm5tBUMiUsw6mHSFx8Ue+ONqAA/HoOpnjTrwjeEudEsDGPyxJNbcN5ym0GVzPN 8d+Hl0xOdR7WXmCBGZTlMaTUadfe0r4IlWrHpBywgjwiwFeosmCRfjaus9WU120hcNsj 2iELIgF0ybzKBfQZ3Rx1h1naT6TrtHvKfOvA9qmq3iMGgeqI/xDUOudyRoTNF02hGmRD bijDqTGnCMWPxtjMJ5dmBFM4QlxwkAVk9DqF+YH/4PMA/N8my1Y3XJQcmJiDqZVp9KFi wJ2zc3krZqEZcFAgjl6p58zLYxrP2NjKhJtaOvvbaNnieL8oEKzkcsedM8s+eBjClGrY mCUeyBwkYlqXUPWZ9n4DYFqXypJqvGjPRrk5nTx8TRKoiT5K802wf4Hvm33Y0BEAfE0H niqzJ5tDCYp2zpbkJQMJyD0AQuW/JCNKjIKZKkoD6a/PAqw6dEZAdcnoRKnJevFv503c 3TuneRJyhE5srelkJ5x96pn3wVkpgFhy8tRZg5u+piNT+Xo6Jg/kt8e5OEV+P89mC12Z X3J0y/3BBM9ULRZaDPjKJJsb0CVT4FtbC6zifOeNgE/DH9FmLo7u+EvnqHYq9Fr79Zs1 yunRwoG5f3oZqoYtQvsm25iY0m9qIWrroYobLxcfmTUIt3FIDKNE4mNPIthfxs/FVwtt 0vxBGcatyy3lvLMKx+EJzDHf/jDKBB8ydlDiGySgdqpI58iYWvaF8zbxNQdML+IrTpd8 0nYRcC5U3J3Hyw+rtjBKyuqUfOqUZyHtdjobO/MiRZ/R7/7ujeITEMEHJpt8FNsJnIpD JGmgPu/9CbHj9cEFS3uU0u7lOdMI7EhR7TCG/aKksf4S4cNjL/rLEzYtgdeBILjY7nLk KtIa1bHJNBhxUuSj1WWp2Jh2DFF4eJ/YpUQeW3O6Z3fwYadJKbWL9Q9c6DIVGzCAh9Oj C6yTObEA3YZaJjRIDf9lqXvtrMLx2UqVnqb81viwCWxIvpHmfkN5rEw3EVyyAhT8EZw5 teDk33rwS/vX0WPPfokDgeAHJusYYmzZVxhLQSWKujkkwiRAtpWzmN1yH3WGyHcuMRSM 4eav7/f1C4QNErSqPcm29TI/MNLu5ObtVBE6R3XOBUGliryvULrUTN34N0gcL2lcpprF W5rbBSThsbsOwzPzRyHAJGaoYXeVfc5p1BFo9G5EjRv1def6PfN9SmFiJe4cFldwiewB mgctIb/MeDt+Xhh7tptXwhWmEhvYEwDmhu5LuR8nql0ARl/rvwJhcTeVvmRNnTdFjilE Ounsworth, et al. Expires 6 June 2026 [Page 96] Internet-Draft Composite ML-KEM December 2025 n+E9hYZSovkydXmBCCUQfq9OcQDVGvodywQkrHRT5l7WzTc2S1U1f8G22Z8ayfgKCRU1 MCr7jbyoSn5v6lUS6kjxPUbStapfNaQq47sPNakLkfbLdgG03HYODKKezTzXj6cIs3nD Tww1KQEIEcGNfNId2d9zzBWUc3NE//rpZFwoYffYzQoVQ00MdpmjnR8EioENtbu6tuVC EExEvgU++399nLAkHCub1GZGp5bN6VE4dCf2ZbWCEoKhMDHI1a6lFKwUNYtYgBHLoAB8 v6Rt2cA9tjgLxru3Unk5I/aVfk4x1BE57ZCX/BgtInhuCkl5PhgmJsF6W9zRyKZC2fsN Q1r58TPJurKOPrZlkSZJ0d7qSONmxQ8IjOlX5VkHEQQPmkZcQhae7RYbpj629z+aibvP oOeTKfTfMieWJhCUtfaWTCpIUelJGGfnVDm4LCpzNLJ+NTuPVPIxnXPkPRcof/fi3cYd rfHi0dw0IGFZVD9W5a7HVzZIBgjd1pxksUTlEz/FCGnMQmXrv2KejbvLcsBLqrirzbeG WHaKyoiA360McALxvhI5NbIR/tuQTZCOC2U78/ti2HQrpXXOfrDr387YMBiQ+i/rqSvJ aoJ6DIQDJNa9gOn0xX/MzdtWavHYRor8LQPfzVvRTFOrJ5ttrHt98mV4hH38dvO/TQIX gj8x7BsEIdnPYRyQFd145HdiKB+QXRTT8iaV5iFjxZ6NemRKUZNAlP2exPIeq9V7N8II amb3WfzZ6QHHceom9eNjbM5iNInZqxTyGfDBLllN8+aSYrUG0Mhe3FVKs6rT46DU//BM E/s9r/GvZc1afMN1bbxNr/armIPz0fcuQhwjVzsnGzQqYlvBaVo9l4TcSDMvYETQ5K5l gE4Vtfo3VA67KgGb5QmOSNov68vXizuSN72Z/WbeObABMvaqbi1NPKpGTz1I0U4IzX6f UL7DCrHZi+maq8qv8LZwHCRAABGcvdUK+7tQZc6xeSlQvM/8ZxShKsNVC+cYSFg8r9T9 IgQnJ+G0DMKT7F1uW0wCIHSZEgm9ShQIYr8jT6O9Q5hja90DMJRh8vwTyF7puop3ca5G vx5tLqxzryzqnbk61zmnJE0T2qbHufjpKCSlnQyuVcK/pwXr3bBYfRdDWnhmI5yYs7X0 AoeZqbwRLC5FTlU9RV5/zPAfJjRATWd8f4OYvvRKUGnFX3ePlaQAAAAAAAAAAAAAAAAA AAAAAAULER0hJg==", "dk": "X9Ryk0H+/ckPog5VY2WzkOJFQLc+55+9x7QbC6as2CgoT41EY3BXQBAgdg6R8 rVUt0Lu+0Xz8mLvP8DsAhqSGTBaw1f7iBXTrS69sSRnGH4spklsthM8m6qeCrSZq4pO" , "dk_pkcs8": "MHECAQAwCgYIKwYBBQUHBjoEYF/UcpNB/v3JD6IOVWNls5DiRUC3Pue fvce0GwumrNgoKE+NRGNwV0AQIHYOkfK1VLdC7vtF8/Ji7z/A7AIakhkwWsNX+4gV060 uvbEkZxh+LKZJbLYTPJuqngq0mauKTg==", "c": "oCkBAGhl+AAiFyBRoj9oU6bWkET5oqH/WzQQ/lQ6CGFo0QNF8DLU68DOWCiV9z i/k/8beY/N98Rh+nBBuDdrPuWh9tQlisYg88ja2xQKpnh/T7G1D79gCV9AwrzdX6gPfe iQRgqlbvocYOLfNqPgsEoRpp3vAz+VDedtJzohLwUqev5RB2rHGsXAonVoRjWQe+IRTS Vzpby+MGE5Ua5VuMj0pQr10pOhh/d3TE0uodFfu48oMTJWit+TsssukIDtgRP4ONWYEp WUcSk5oxqorOIkz3RujTOXf2EwSUMUBQ9vHY3CHReAgOfUm1ah89GyYrTNYBlez5LAAg XJzgJnWrljZMJnQU4ldvXcP+CqOXVW7kOArRU3jsEBferlNfcoWWvXhr3I8LAeTHIMPR 18N/wpDaYhoLgGUenzrx547+IILomyE5TIoI5XLN0+t/eiS5hrO2a1HnWB/UIZ6zzRpr Phmy3aOFyI712ny/SGIuCNfAlmUuVnS7fHkAHl6lvGKfyMvDr61xLlifAWBgnZSaF1Tk nWnYF1G288DoC7LbqIaB2IfpWU7uvUljD3ous1acrggPa8vJ04uzUjwrFHNSq7dX9/JX 2u9eL7fO+sDSmBrsM6MO5HZcEe+HQ09pOQXaZVtJi/pN0KJ/rlkp8K8FpJvrJPFRRH8o K+9ieZahwnuy4JoBgHZO9r1PPts8KiNEcZkCoQQ0n2Ux65aALPWHmTp4cW3Q/FH4D40c k/Sq9sGsuXL8j5Ek5VQr3IAEw2Yxbb1zsnduZuGO76qtVxK/ydoT4jSXS9XgnelXypou 41roYcxKDYPK8tKZp3KoVSeb93tvADhYieQTyww7GyBU4XAjz6sr4FdUZB3VXg/J4NSh nUgIVAbJbWDZ8KgL1Uv82lPwctbD0QolWEwYvfp73hzFGDUHVDUtvpQqwlU0feinZ2Jk mVbkbeKgh0IcIIcXB8axfPM7azJLofz2k4bKIiH1MjDBfTNZABzo6Ywk9VpDAmpCmQa9 xGMEqLCqZRN9t51jJbLCNfwFpxr0oFRZ30uwAW2pyq4yb8OfU1sKIXiokli1PjL0ud7u M9kCedQWIrRykpjqUBnOEJZJn8HkuUFTB2dcUPkXcihl2V1Lnfw4tcVdE4aLowsiqm3h yCiFF2kv/oLKh7nG7iopnRMm5gt0Z4MVd/0EjP9BppOrLfMOR++EEshB73r93Uz4PWs7 86wCPZXjeAJ6pg1VDwGM0wyVSTz92dlvji+kR5gOtIOjKcvg2VoUbKluKwl86iWkJ4I5 OlryvErK31e16ghTisYUONq7hD0DcGxYGjoyY7M7kpQnlI+e86UUsybXq0zQiSoh4Nff dVImw3YGm+S5lCFsCdlmEOaOfabtGqcJfBuYXxFZKN9GOxKxM4kYRdarAcLUYxutFyXK sGBm8UPldA72KDArOHpIL1XbRdzn3KFwBsW1jligyjE32qIsstTenvYexMhdD+oqCAbn zfaw==", Ounsworth, et al. Expires 6 June 2026 [Page 97] Internet-Draft Composite ML-KEM December 2025 "k": "3f4R3hmX2tJlVGBXvl1CGm0hJA7gY1zTTZJaYZncgiQ=" }, { "tcId": "id-MLKEM768-ECDH-P256-SHA3-256", "ek": "ZFdyKWoQzrwr2gKDaGOZTImrdnYbRooicDsWRXaqgpOwasGqo0a+SlahnPOZI CFLsMqgrpR9bzg9w9PIYquy3cKwouWzN1IzxrcI4IwPo6EGx4yYQSwjB8FPuDtnwIyai mrGysqaeRk3agSPHdJIufVpnxdx6iS4fgbLGrwSLEN+d+PAmzy+DhMMU0DG82kUgPKVo YmOW9RxGkHF12Ef2uaSkMlSJgwxkNNmwWI+bFqVhcu+M0x5DoU4Ftld6pfD8Kw02WRTA QdLgjxQZOIo29abMTM5aNSvqkleF0BBLncx6Rm7G2BqKBk33GjIl4qDPtyQwEomm3xak CuiOvKbhVp+wBLO4DGbD6ZkzlFxfFlJe6WZ6issZ1YAjvcwTvpmouudFagVruye8eEnL iphquggpyw14+EYP8J52LF9QZtyh+TJpXrLpVAgEsOorGguqVS/FumCv4eDNcM9IZKKh CYG7sp6UZVY94WumqKaGTCtLLxEoul2cEE+4/gGT/PFtjlb/GfB9NGKWVaGjXwhWcwc5 AovsLOsNKE9RzNTwbEl5ulL/XiyNsiaqBxw0Jk1MOwCdJtDaXZq4dOBDrbFPzQVOsx3z BmepDWoZBhs7aY6YgywcyhN+FU12iI35fE+nyRY8fZOirof61pylFoJFQNof4Qvg+pOs 9MkaSy8NQIHDqaBRMEs5axOYgY/pJYBz5eQ0IC7eurHLQrH5gmMq8QJGVlPH9t7HLI8P DsPZCgwKWZKBICITqxmKLCFl6gh80FduaGuVxNMj+cBaGuFRslD1sAuMhxPHUgbPAVdC YontPyMySCBWdMafLuq1EDI93MkXklK1+OOHJUUVfNnkoowwAUL5wNlbjcWACedn3bBY pyf0rKLrvYRPOE/6eQkbLmlzJgCaEutBCqlJJBpELCZI8eE8CDKxtjFYNOG0msv1mi5D ozADdeZYGlmLPtPVBsfp+iiwWrDSFE6ABAWohvB+JbCdbUCONlypAO07gFBAftrrYieK hg2/Zk6pTcM+jVG7SsK3KeaHnaSVyBtJ6AvIYEciCpqy9FVOSieIgY71mEsxwtAZJmEp dDLVJIivlYib4wxA4Cg8pRdAfbJF+haynK3eMW8m3JD7xq1Cpx2VTsUKzd5QvmRopCMz iF7GyQwT8l96+s7SFa3TWl/gXAXSZB9GrctiLlw7ypPYUovWdlchzdkm0efWZen3jlHg IhQGQu3bffHnvigI0W9RoKUVbcnrYVU7Twnp7oSxpYNCGWS02ambAw4oOsEtaWJbnkG2 VSExKI4QDu+M1F2EuIuZWkFGClSjUAKugY0yclVmMUPyqSgjJrBlFM7PGVn0II4x+UkA bOTzDs9n1yVuKRhjkRlsVqbvmooRHO8/UqI0xRn6YuGdtBKuUywUgZW65unJ5QQ9capj ktz1trIhHlqt3OtTxiF5DhGNECmV3BPILLJrQo+DscdJCxAnOoXVWUMOVhZsEKLI7UKa 4KIppg4kulYzbNg7Eaehak10GeQ4ranZCYvG1ArsKRDlLA0WZQO+6vEBTuUryaW0dOi/ owo5k0VoI6qV530ajcdLE0E8z5GBIstooWMeW6JNCNv5kBkTc9kDRNSvLVjuA7cip8hX ar8BjTjlwGHAzRuBwHBIQXfG9KtdLEfxn7O5skMJg==", "x5c": "MIIS3jCCBdugAwIBAgIUMQmvKaf023gfd5h6q8QbZo8d/IEwCwYJYIZIAWUD BAMSMD0xDTALBgNVBAoMBElFVEYxDjAMBgNVBAsMBUxBTVBTMRwwGgYDVQQDDBNDb21w b3NpdGUgTUwtS0VNIENBMB4XDTI1MTEyNTEyMTMxMloXDTM1MTEyNjEyMTMxMlowSDEN MAsGA1UECgwESUVURjEOMAwGA1UECwwFTEFNUFMxJzAlBgNVBAMMHmlkLU1MS0VNNzY4 LUVDREgtUDI1Ni1TSEEzLTI1NjCCBPIwCgYIKwYBBQUHBjsDggTiAGRXcilqEM68K9oC g2hjmUyJq3Z2G0aKInA7FkV2qoKTsGrBqqNGvkpWoZzzmSAhS7DKoK6UfW84PcPTyGKr st3CsKLlszdSM8a3COCMD6OhBseMmEEsIwfBT7g7Z8CMmopqxsrKmnkZN2oEjx3SSLn1 aZ8XceokuH4Gyxq8EixDfnfjwJs8vg4TDFNAxvNpFIDylaGJjlvUcRpBxddhH9rmkpDJ UiYMMZDTZsFiPmxalYXLvjNMeQ6FOBbZXeqXw/CsNNlkUwEHS4I8UGTiKNvWmzEzOWjU r6pJXhdAQS53MekZuxtgaigZN9xoyJeKgz7ckMBKJpt8WpArojrym4VafsASzuAxmw+m ZM5RcXxZSXulmeorLGdWAI73ME76ZqLrnRWoFa7snvHhJy4qYaroIKcsNePhGD/Cedix fUGbcofkyaV6y6VQIBLDqKxoLqlUvxbpgr+HgzXDPSGSioQmBu7KelGVWPeFrpqimhkw rSy8RKLpdnBBPuP4Bk/zxbY5W/xnwfTRillWho18IVnMHOQKL7CzrDShPUczU8GxJebp S/14sjbImqgccNCZNTDsAnSbQ2l2auHTgQ62xT80FTrMd8wZnqQ1qGQYbO2mOmIMsHMo TfhVNdoiN+XxPp8kWPH2Toq6H+tacpRaCRUDaH+EL4PqTrPTJGksvDUCBw6mgUTBLOWs TmIGP6SWAc+XkNCAu3rqxy0Kx+YJjKvECRlZTx/bexyyPDw7D2QoMClmSgSAiE6sZiiw hZeoIfNBXbmhrlcTTI/nAWhrhUbJQ9bALjIcTx1IGzwFXQmKJ7T8jMkggVnTGny7qtRA yPdzJF5JStfjjhyVFFXzZ5KKMMAFC+cDZW43FgAnnZ92wWKcn9Kyi672ETzhP+nkJGy5 pcyYAmhLrQQqpSSQaRCwmSPHhPAgysbYxWDThtJrL9ZouQ6MwA3XmWBpZiz7T1QbH6fo Ounsworth, et al. Expires 6 June 2026 [Page 98] Internet-Draft Composite ML-KEM December 2025 osFqw0hROgAQFqIbwfiWwnW1AjjZcqQDtO4BQQH7a62InioYNv2ZOqU3DPo1Ru0rCtyn mh52klcgbSegLyGBHIgqasvRVTkoniIGO9ZhLMcLQGSZhKXQy1SSIr5WIm+MMQOAoPKU XQH2yRfoWspyt3jFvJtyQ+8atQqcdlU7FCs3eUL5kaKQjM4hexskME/JfevrO0hWt01p f4FwF0mQfRq3LYi5cO8qT2FKL1nZXIc3ZJtHn1mXp945R4CIUBkLt233x574oCNFvUaC lFW3J62FVO08J6e6EsaWDQhlktNmpmwMOKDrBLWliW55BtlUhMSiOEA7vjNRdhLiLmVp BRgpUo1ACroGNMnJVZjFD8qkoIyawZRTOzxlZ9CCOMflJAGzk8w7PZ9clbikYY5EZbFa m75qKERzvP1KiNMUZ+mLhnbQSrlMsFIGVuubpyeUEPXGqY5Lc9bayIR5ardzrU8YheQ4 RjRApldwTyCyya0KPg7HHSQsQJzqF1VlDDlYWbBCiyO1CmuCiKaYOJLpWM2zYOxGnoWp NdBnkOK2p2QmLxtQK7CkQ5SwNFmUDvurxAU7lK8mltHTov6MKOZNFaCOqled9Go3HSxN BPM+RgSLLaKFjHluiTQjb+ZAZE3PZA0TUry1Y7gO3IqfIV2q/AY045cBhwM0bgcBwSEF 3xvSrXSxH8Z+zubJDCajEjAQMA4GA1UdDwEB/wQEAwIFIDALBglghkgBZQMEAxIDggzu AHEtP3oodFZvZrL/My7DHs4cVTOii4UIf9Svv/noodKmrPe1O+7mIvcGZxZWMNTLLm2w 17UvC8c5JW1iflnoenaAl6MvApsO6kPiHIhmPezcAqAZcTQs6HZBCEUJZzZrURHMZ7EX BPDEo0gw8V4VSBLMKZpdi+hNHqt7J14tncw9XmWAoUBPhWEpBPPp78DICVAQMC6CCUkS NctpE1boeNMqQlqi7IAykoh9S4JRCj/nOp5FnQJmsLgiqSJkrwSTxUKBGZrupcN57xXl yxjPOY1/7QmZ6cUra4hbHLs11x7DGl89O9uJYgzO5SxJy/nL+pIk5mDAh95ES+hgoLDP NAE0K79suVUG2KvkCset5dR560LrTK8v4xuu6GxRn6xNeX5bmwK86zu1s2WCb1PxrIFI CSODyjTwnTt7HJJvZOuMrZZFFdnIrgvMPDYrXmgdsz3FJ4eIk1Xf5WLciPf+ezc9mqmm OSBsiSHmlCyTwJqTpiy0C+JeqFs46sH3uLel+llk8rMRVo4Zs5Hs67YZFl5dYjJhYwV+ bMd4LPtceQNP+fsJwxQGvGtBgnf5zEDYEYsdqU9c3alpKu0F7vGX1KfIqPGL0U1lLB8t IR1mjVOwixPPC0Ay7oaQvUrAGv1R0R/Ci2inB+cSp6E3ZIbADF1qbETHaahthagbu8CA VsLmDfrYXFovWSpvLZTQCKaZtwpRjTcLeGPF71eTbdWVvYGfDVBn02Uh9bujW3DZMHUa 1dZyl+f9zWnQv+oGEP/w1nhguoVJFBY/IYUhKvCjupSSC05Ty/INEJI3hfUawNOqsEYh l7Mo+It9HEgMftPonmCEv71py7ryO3TAfZtWBhtcpAkX11zq0gZD3H8PnekapNrbik4j K95J6Z277PiSee5k6GIPJdySy6bKnMnzAMALX3xZNDhzzk5+SH7WuduqmYWkT9In4FBL 4kLqcuk/CBa8wLStDRXm5NZApkyI4PYN6Q70i8Wxp5h+KxRnLg/lMyHTm/v3aIfgjYaP HBoLPhYDckgzhcLr3jN+2t2miP0rA684/5pN57ICoqrn924wSjWRbvYrFCoubAbXo/cl /kvyjyYF8Dm5d+CQGS4WbBSlIsNxqHGp1OKU0zrNCSU1mrDcDU8n4yMM3mbTqSoS9i1a x+rqtVQPSz1D+ClfOSks4RM7vF3SgdPifWa6z1vZzsnaG+Zs9x+NC2qRVaMcnl2m7m8p LsELFkO91jjRYptfeHOfCoGp5YVnyQuAllXZEVs0qgBY8Um7mh/qwr3nBXdaLYtSe29e ECtLNQBsD6yDsXa7B3QH1hhwC6ZblADBvkKMAToYlpry5JFMuxqRt3DYcnTHVvyBXMX/ Pr84GmKHbiQ1ZCjIKxWZZU+vQrWlEilwgmsiCoBcROVvdSjyQqP67brUCOPjmqUq9+H0 NUr80WQ8o+bRGYQ5oQFUfOcFZgNO8EcAq5Isim1LHIWh2Uqm4loAJN0Mohaxfi0xC+gR J0wJjUJOMS6TdNd497HN/5sgwY53qYg+r0K8XskbboWfCVoh5N59O+nFEKm3vgFuIwrX tFZiwvox2r0CqnOBuXItuhn1F1pVCnU6uPMTcVVdCDLtEQoH04K0Voyu13kN9+icUCnQ oNbsMRLFvr+my3qlLB+gbeanF7gI88455r1e5z1WWkeQYqlmfnuFPIRe5IpSxOGpVeQZ LcgwIz2FwL7vKJGXYAlkTgCrEvwT8KCM3RyK0FO4APGUFTQIRkTFLNtn7d4+4O9vT9DA Q9GfDoiEezWsMenrQX84c+p9bgc7eJBSoNnr4WR/ME9WImH2JCGVus9tK9ANTy2W15DT fUpTWBEugzQTy4wlv5GSY2NfSZT3G1t0rxG33Dcxgv6x7TvtckzbxjpkBRqzvDKt00JC Z90AbGo5V1ewqX9SMBg0sa/T0SAUtINrXfh9Ydd+b9NsOVztTmvO3AIcx54L9Bw+DMen 4xnH7TN8OtO6mmi6ouwkWPCSKKc2RovAJ9ajIL/MtSk3zURCLW2+4w081mqNk9hOdAIr rU6PkypYe4RriPw2PkKMaE6AcMXslJnAYuRtC3eeJEcWtqNyuZkccMPhrRu/zQsCEmq5 H6Sg0DyWBjzwI5HpOmJlqgdueuT9j4SVHi7lOeOVXyOySO8Wh+aHGHCqLTD+pOBka/kT lp0EmkC59ywDRV7yRNDMldrD4xnHpwGwKxW6SDz0+1hYthKGvTLiYNfw1IYP9djESEL2 zhU/z7ZOlcPQrr41oKLPgsoNvSYBq9J16nfXSo8R+lqqt3kk2Lm1nqSiDt/7LOYTj12i ExeqTNCbFAngshQKa+nhsrJ7Z6zwvWd3jXIVodlPpj6YIWd8qVFe2nvA9H03VRSu/8+W caXFvFVp8Q7D5m30UK0KxMKtgVlAFDq8B5N6gi4BF1NT5oXz5ATEx0xGaRUBP89tJ7Wd 7P+WS7Zi+73VRUJZ6mraKqx6WV/nDVYjZpkEO/RU/3faHu3J+i3E5KeNyBdmig4jS7CE Ounsworth, et al. Expires 6 June 2026 [Page 99] Internet-Draft Composite ML-KEM December 2025 L/J/xJUKhfoaTFuDM9xsQFkdOT3KtCb5sUP7UhtmIE4WOrIKSi1TLP198zkcA+Sv2P4f b70fGot/SzylKkhz3ZvTFmvzluchBchr/jrB4EkbqXQZj9lMaUxiuVY3+Cx2x9W4CeMI q+On7lwg9SE3ajHMGHcFL/cZvXfCzSPJWUvMAtkjlcXfJ8wc2r+EXNbrUK+iS/QbDK63 QrAg6BiU7977nV6xOd0Az4AJe2rQU+K/5+1pNbJoF2F5q2Zz3LA1JppVsdD43ELPpkpL ObKUwDrZ0Q/8vXEmbnJsxJlJqr6u4EkDvKoUARbRxenNu4HyiHfm2GjoQAs8tgjKSFWK E6qTbXMu8VmgCBUBEflL8xP45bBPy0u7gil583MYYrn2IGlsRkQu31MyGYGrD7jBSgOo /YwASdgttAZkX6R0X6pRrQ9ztQCjZucJ9By3LnrGQi+tRO0Wmh+j9k8QM/siQFUczgkG c6WivqSrAtOEpHm72n5SIRAz3zcTEWoLZYWpK5NQy3SNBizy9gUJ2sfLObNIScxqscHD eWQ+fBGR4J6rMApyLpKR9biKxvv5GfvNuQyqROaQlPAEx8EThJvOOAg+teHmVd8fdNTA jiycL94qFD4HMHVketeeNXJUwD+P9yqDRlWZZKScqMc3xl0y10/2hOU3REkhp4Tzv6cb RAY/13Y+nXlHxxaiLUl4cvpGhtT8JpZ9z2g0JM5T3QmSpDwXi3UWfwbDImYoqFUE+rLV jHTyuIMumdHpS0TAsqYngHuwFSLWlz1T1W+M0gKn7QH0WrcUxkOO0dQ+6iJLmhZdcjuz 3rqc90n0nWgg5poz36kLOCFk+7t6CFN2bQlE+Es6zKq/2wHV4+GW5DLdvCWadBYJAW5O IP95CPWZ/OCBL7mjY1H8p5jjNFiGUY/nKdb9GCQrtWqef9N39ymbFDMkP9UUuosFV//Z dFRvO8H9bCQwgNawV+QMbRXOMZG2VDwzi3OcCCHXqgSuykOuUf0l4witgLoMYLZQOioO SBadEIRrrKBCDTkp6bljVprb/jVAAbj99ofznxq8gVvy5jsR5u6+WxWcjM0D2Ptr+/AN vvX7bYT9VWAvp1Hk3gfbI9Ft8xV03iG9dAcsC3ewnbkxIaQOIBgiTJJQCIlI6eUdqPkC Z5xYFV3SZKeeZMDWZGC3WCt7dQifqyDOOpVu5s25RwKkYCA3zSx8ZPRAZlVL0UwTv8Fa Zc7PCp2Z9mYCgFdgBIOYWXeyGjABS3x1VWOlHOhl5kiptk7u61axcsMh2r2GkYaQkLaI OQ/EAEYVpNJdNE3hWVm7lPGfi2Wwbg8BIZTeBCuuqAf62G157u1eIN7L0UCsq9B1TwkL yak/ttGONwtQrdLUHg8YlSt2WlSENK249qknFfdA5T3xOgPoUuf7zHDHnIn8sH4ov3vm 4X/cwXx7WtjtqOO8CZJKNUac9CJOiph486CX6IqWyKdkVjQXiWNIcBpags/QelWoQdxM n52ty3gfxZ+EjxaXx0tzYf2bbi0fLRXWmUMOw/Pmlh/6fdWrscnLpKZRanjyG4WlSyDw ynzDMpDboE9zQVAY+5r7bas1FiI8Yd+IgOv9vASfF/RLxnAlG45aGf5snWiAUe37KJVX urJe3vIsNGPPSkixVxAwMLLVays1aH04CC0T/iJ3Zr072KMBsSdwvww27y6UvipT0UEN lvho87SCnY8wSJ3cL1f5NSGHAncSb5+ntVFpo51LmT0dVki1a/nCQvHBIAQzmEDFbY+7 +c90VXGgYTln9cgpo8c1ecL91xSLwW+p4m84h9mNcDpnei0iLT2Qnufv8f4kJjRYdXqH vb7G0vsuPUhQZHN2hY2v1wEJRVqPme8WX6211fMAAAAAAAAAAAAAAAgUHyMmLA==", "dk": "EUSMlpMt8QV59/yL8nvDTdEWl5b0YkqL0Ha2F4uUt+UPfPmCGj8fgblibHXGe jCjF1m6cEI2hz85QwsjU6h3LzAxAgEBBCBm2OraXRKKRnHPbw0cqeLHpIHU3qZBLz2/3 PExMSPQ/KAKBggqhkjOPQMBBw==", "dk_pkcs8": "MIGEAgEAMAoGCCsGAQUFBwY7BHMRRIyWky3xBXn3/Ivye8NN0RaXlvR iSovQdrYXi5S35Q98+YIaPx+BuWJsdcZ6MKMXWbpwQjaHPzlDCyNTqHcvMDECAQEEIGb Y6tpdEopGcc9vDRyp4sekgdTepkEvPb/c8TExI9D8oAoGCCqGSM49AwEH", "c": "LX1jE8nAc0D/D5K9/xZshP2awMT//FPG8hPayL0xJVSavOB+zGSGdqG3fNjcUT xtkbNOgfaPhH3E5L5/p00owm8AAAnw+OQJ8IXQq9O1M4cGPJzG1ZY/ZEQfP3qXanyBMI y0dNi4gHYuB9Su/iG8/KHpqQvP1d2py+ArkxNRAefsjPJvYWrcQFhG2kLrlgOfgBp9yb pbZTEqOwJVoL+DgWNFHDocj77aNh2Ow9HrYpADY1h67dz9PHeyLzPoEZ/XsPVdCZFREk G3navW9cXc3eQ6wU+mLsGCjxcEBqeY3xOYnrzzvAiPb8UGY+qhxgpm/bbmM4TuJ/25Nj ik2ank0NdskUNG8vsVeb5um4RG+FUqt+xe1OvVWq2oaro0DjL7t+Nslo3vziBG4CJpEk yOZKnd0LQyDsyaQKXHEFylfmt9muCFPoFSRrUJNwPmJSaDGbTycgiOTkq/jOjcZ4eaOa agv+iyOknyyxkzDDvu86IiFxGI8Nu4gqaaKPvcqC1UIw+Akrc3mRCXZXML6lfwqu57k1 fYHtkVAVTYYo9sC5mJ2a/sfOxN+ugZqcQ7o6Y2Kg3YyqUqfDn2L5vtqiERGPADOk9azF dqIBHD6HgbdFN4PelNUkgg2pjuk+Rn12MFQdJSQWzjqS05w43UN3NkUvA+/QA3KnE0c2 jR+U4oTmE0lP9yPd1cmCwSZLZW4Ptw68snF7IykZMWn/NWk/JkxbIR/hD/xEY/7IKv8I zjxWQ0XczZ0b8XJNo8LH6TZprrHCFRusSiOejfondk2Qx+TWmMr2MAqWf2Q3F1BvtFWv 7cn+Rpeo47yoHlUjva31zBiTtslrje83FnVpLfVbe8av/MSghBgO7wwU7H8DDkgmNYRK CeTqwXQkhMzP3fMXjKiyIbsgFoMd3mZ9Ng7uakseMASbcGxGi/wQIHY06YVwSSg6Zwrv Ounsworth, et al. Expires 6 June 2026 [Page 100] Internet-Draft Composite ML-KEM December 2025 yq5S9H2H1+xFVB83j8ZsPZVe3BR2OmY7RJl2cyCzYnZmOja1AfbAP/EZiHgsiCCi+Upq 1wXUV6HKkijqEv5sH+IrfPqx2Fb1BKH3Bl1nVlg8efqWdcAhC1HkVhjccvpFVxnzMw+S cOh4BTgzogn1jgMtrY72d2knOsdlSA9azj8wRdt6IpXAQAtIQCRScnVpH5F+zQ9b/7KP jE2smfTQ+ayBKKvrOYsZeGw29sarwJEKYZ93nGUIVPi8ZSgOaD4z2QBlImD3fVV2ZKkY 1Ytb33dweysw1Gn9amS9mwcJHLP623yLrE1C48rJDGwVlOP1wYT6qmMsAoc6xmFPlQ4J cs0/aO9GN/SKX7MdMF9c3eblztweruYrzza+sCu054VEltjbdSXZnf/akpHeuGDK0MfZ /3ozWOxLq6oTn77/0yDiW435UaBlbfZTB5C24qokNCpNIznTAIgG0dIDx4j+CGrlyvIk quzQEf/kEkHfO7iI5O+TctYf8FvykEWGrpH2K8Wu9OUyH1tN2/BqexNwe5P0xMzJJSvg X+bAbtA+WslKV608pDL9VD2MfFUpKSr6oVyHAsoLzY4O2d0w==", "k": "03CONTT7q2Gev0bbhZLEz5Qh9ClkdU1QcRjfHuOVYuQ=" }, { "tcId": "id-MLKEM768-ECDH-P384-SHA3-256", "ek": "EHBkt+xmOiuEihs5K+F3zrw0b/DA1qeo1NU04hxHMBo/E1EMfoy75vLKa/QAs YNwzceVMaafy0WmPuVH8tUROSgUq6S+BxKjlHdH1YEnf1dsKoZUiFzDR9dc9ZYWUtEKT HnORfg92UNXqEJteRXJFGIKk4gXQ+omGGJ/BZYUhCVjEjJ+eBAm5/koU9gmxeu63nQ8l KWj/QXISZuhVZVPZCuDQbVjFrG7ASqnorW85kjGMdZXBeFEx7Sei4pIZvQE7FGAZHZ0i BZxijWI8EpYKMJ3N/g0GwIRetp2xKxhwNsdobdelmtgduQAtUsQBTWiXmIkJVmxExqsP BAB14GG8UMHujh30zV4QUdfEAAfzBvBZ/gNGJcTqtkWHHdsYrjL7apDI2B2JRwDWNg09 tJtSJUA7AGY/cCz0SgbK5Y9kxlWe4x6WWxwVUR+dXUKbTu+wQVaEdKA3BJLPEiP8AQEm ihwNDuk81YbBadV8HxAT0hnaaUFi5pKAzKapsUp9NyCZJVVo1ClhxXFhDwU7wJW+VtSr VgfNWYBQqQS8VsylcEB4Vg7AqGtE5USBNRs2/uErvCrFjwmZiMk0dEQ4PcKGiVY4HdAZ FJtVGx1UbM/jRFO4ow1++U9jiRt06CgiMRKVpNpdVuJlrYqZAR+u0ghE+Kj/lhP6hwDT 6ZMVZEaRyK2mmZOkPuzfnYkDSGBIvN0itoPo9NIqDh+LkOfkax02GwXwbiYOmqcMncAW 6F9wjukeFEFT2ZcQRLHp5KVDrpFahQdUDhptwuHbCNWQgSgujelXUdnPwI9rYqr0nHFr vV0cUtGt2mcHkahzwiPYjMUikxcKROP1qp3bxUTISkHG6xgycO8GhLDtdqBsSnEKEB86 aWqzlHGmjyCX1nBEmtQ6gaGybleTWZxATo1mRZk1xE/fCmO/LVr5VDGOqRgtrtyVOE6v hWtTief0Yx0tBedhMalgLq+UqQkAktkyUlXJ2sLiysyGcbMSaSe2cE1AEcJXhwpfKILr rWbaEOM6nl+MTkPOMB3FIOz/gw0eazJ0vQLWFCsxoCVKYIKRjDJTWw9hOhlWyir+VszN bSwJDgwJiGGjSNqz0oa3KnIgTZwZnI5CVAvbyGqrXabw9O1R8E2ukZFlHm5TmyLqQlq1 caLALGXHDjLt1I1GFYjoTMcg4RQePip7WO61gJcFxmKi7DDXFuNrvtVn7K0AHdEOCyBE QMJQfFX11Rc6UuccexDt8Y1gCOJBoZJHzRzJwtYtEQtxIzGlgnFRkcb89ud9YRvfhBHv LCHikUuFKIWYWGGcPoczNylOAob05NMHQEmDKi7o0eOWLJTgGGiQnN0rqjGrTxPxnxDX pKOGSePB3oidJE2tqBMeIAHA1RGfLpODhxA3kijHMO/F7qSXqVcMXEetLkViEKKF9tQS HacDau4X/lJvBMSoibN06yEZ/O+22i8UGtml3lyD6Z9eutrPNFlmIJMzihGusIoKjVF/ jW3eOmBkTUtKXxzlhm7mAtxmGePhZMkEqU3F8xfzogsOhQM7t7oPVd0q+kbWTEMCbGSE bpwYaNv1kw91H7D0TWiYrMElztBWXNI5EsUnOt9/Q2HEBhfculMUNAWUJTJqM2CBW8KO 65wihA5euxkorf774hHEl0zxxmr6YVPD8N4bNvjh8fAcxJ3GSKimcphhlyLjWdx8C+qu KqTUqThmq79M1c3", "x5c": "MIIS/jCCBfugAwIBAgIUFYEw5Cd0iHMQPmyqLzK6RBtXas8wCwYJYIZIAWUD BAMSMD0xDTALBgNVBAoMBElFVEYxDjAMBgNVBAsMBUxBTVBTMRwwGgYDVQQDDBNDb21w b3NpdGUgTUwtS0VNIENBMB4XDTI1MTEyNTEyMTMxMloXDTM1MTEyNjEyMTMxMlowSDEN MAsGA1UECgwESUVURjEOMAwGA1UECwwFTEFNUFMxJzAlBgNVBAMMHmlkLU1MS0VNNzY4 LUVDREgtUDM4NC1TSEEzLTI1NjCCBRIwCgYIKwYBBQUHBjwDggUCABBwZLfsZjorhIob OSvhd868NG/wwNanqNTVNOIcRzAaPxNRDH6Mu+byymv0ALGDcM3HlTGmn8tFpj7lR/LV ETkoFKukvgcSo5R3R9WBJ39XbCqGVIhcw0fXXPWWFlLRCkx5zkX4PdlDV6hCbXkVyRRi CpOIF0PqJhhifwWWFIQlYxIyfngQJuf5KFPYJsXrut50PJSlo/0FyEmboVWVT2Qrg0G1 YxaxuwEqp6K1vOZIxjHWVwXhRMe0nouKSGb0BOxRgGR2dIgWcYo1iPBKWCjCdzf4NBsC Ounsworth, et al. Expires 6 June 2026 [Page 101] Internet-Draft Composite ML-KEM December 2025 EXradsSsYcDbHaG3XpZrYHbkALVLEAU1ol5iJCVZsRMarDwQAdeBhvFDB7o4d9M1eEFH XxAAH8wbwWf4DRiXE6rZFhx3bGK4y+2qQyNgdiUcA1jYNPbSbUiVAOwBmP3As9EoGyuW PZMZVnuMellscFVEfnV1Cm07vsEFWhHSgNwSSzxIj/AEBJoocDQ7pPNWGwWnVfB8QE9I Z2mlBYuaSgMymqbFKfTcgmSVVaNQpYcVxYQ8FO8CVvlbUq1YHzVmAUKkEvFbMpXBAeFY OwKhrROVEgTUbNv7hK7wqxY8JmYjJNHREOD3CholWOB3QGRSbVRsdVGzP40RTuKMNfvl PY4kbdOgoIjESlaTaXVbiZa2KmQEfrtIIRPio/5YT+ocA0+mTFWRGkcitppmTpD7s352 JA0hgSLzdIraD6PTSKg4fi5Dn5GsdNhsF8G4mDpqnDJ3AFuhfcI7pHhRBU9mXEESx6eS lQ66RWoUHVA4abcLh2wjVkIEoLo3pV1HZz8CPa2Kq9Jxxa71dHFLRrdpnB5Goc8Ij2Iz FIpMXCkTj9aqd28VEyEpBxusYMnDvBoSw7XagbEpxChAfOmlqs5Rxpo8gl9ZwRJrUOoG hsm5Xk1mcQE6NZkWZNcRP3wpjvy1a+VQxjqkYLa7clThOr4VrU4nn9GMdLQXnYTGpYC6 vlKkJAJLZMlJVydrC4srMhnGzEmkntnBNQBHCV4cKXyiC661m2hDjOp5fjE5DzjAdxSD s/4MNHmsydL0C1hQrMaAlSmCCkYwyU1sPYToZVsoq/lbMzW0sCQ4MCYhho0jas9KGtyp yIE2cGZyOQlQL28hqq12m8PTtUfBNrpGRZR5uU5si6kJatXGiwCxlxw4y7dSNRhWI6Ez HIOEUHj4qe1jutYCXBcZiouww1xbja77VZ+ytAB3RDgsgREDCUHxV9dUXOlLnHHsQ7fG NYAjiQaGSR80cycLWLRELcSMxpYJxUZHG/PbnfWEb34QR7ywh4pFLhSiFmFhhnD6HMzc pTgKG9OTTB0BJgyou6NHjliyU4BhokJzdK6oxq08T8Z8Q16Sjhknjwd6InSRNragTHiA BwNURny6Tg4cQN5IoxzDvxe6kl6lXDFxHrS5FYhCihfbUEh2nA2ruF/5SbwTEqImzdOs hGfzvttovFBrZpd5cg+mfXrrazzRZZiCTM4oRrrCKCo1Rf41t3jpgZE1LSl8c5YZu5gL cZhnj4WTJBKlNxfMX86ILDoUDO7e6D1XdKvpG1kxDAmxkhG6cGGjb9ZMPdR+w9E1omKz BJc7QVlzSORLFJzrff0NhxAYX3LpTFDQFlCUyajNggVvCjuucIoQOXrsZKK3+++IRxJd M8cZq+mFTw/DeGzb44fHwHMSdxkiopnKYYZci41ncfAvqriqk1Kk4Zqu/TNXN6MSMBAw DgYDVR0PAQH/BAQDAgUgMAsGCWCGSAFlAwQDEgOCDO4AzJMd5lpYKsz0LClYL9evihID Hjbt40X5K9rXi9u3PJ6JBCeSIGAAFdel8sdlBoTTd/lzgS5AYYDjWHSQRGd0VE/s/ARq jq7abQDPVFXY2TuB+4nexlkmPVNWUfrUy8zcFxmZ2i+Z0d1e0SR1J9WBHLtgC55dBjhM ZK66X5bhGgfkGvIHtZQBqbizZCbBkM7+gTEKJobsBgBLe/0ahcXnqIKTNP56pAEyJUUG UlLtg5P3W/Z8WBlOGclEueMTon8MoQy6lf9tJhYlreSKf83VfANSeg4b5qYKvIj8kSS1 ByXaqtPEGnED4c9UflV9RXBfn7GNIe7agPnCOZIGWoC85yxtoc9y0q74tB1AsermHaNz jjgUFTBdgcVoGd9+T0scawN2U9QlwnRv6e2s5J9+IM7DcbUHx8+POiltHfdfqgWUtn/h MA5yD68Og7M52MpOiaPZDjOVozsTZ57JaJsyW9sh1PbCb06No+XFw+c3quMVTKWF2Fng v8hPbbxOJFV8XCXX0Yl3PME30TyiIdrUpwqi8MCj89Bv0g65ebz+zrfWQKBlDS18ZQPp w4XoU35FPNWcredlumNiy4Prby4BiGBLCII7UCg+OCR8zsNIRU0c7WP0K2swrPPMZXQt 1FH27Ha4QKwSyn+FqxWpFM2PSTBz/rMGrGnUBdNBAeYNPcB9Z1I4fnVPsVdBGf6DnEf1 3svrQ3f/j6b3ixMD9GiKTvYb4x9zCyY2lKLyPZmka2TwEO6C6tNaRquDmRiXC3uq+P00 f7oCEfFwr5+WIxFLc/NIOSYyj13NJyHPwQnsYCC2UQOeUIS/wSK1CYWuCHQXQez1lbfv 98FvalzWHksEJQd4Zq+Ik+Q4qd5BCs8TaGYNQBFzftDfXIcvxCaiZ9yvb+JoOstCNey/ 86pr0AqSCFPhiL9xu/r5FocS7Vzpjd17LCfzfV+iNeSzKfFIGKmgs/3c26TjIWOkydce frox+N5/h2p5rmjiextj03qV9CWxRpplmWO2iv/KD38/6F9DblW3Ho+W92Tq0YtSy6c5 gr3t4mpX5ZVQXcursuEdm+Ka7uHx3sPoWqhSzneJqAxeW8W+5+WtUD21nPSjzc1HoC86 D99W6myxOrUSpK+6d2rSBafy+V+qzZ5ETtKKbmf8Fp40CZpxJn0bgKoMaOzhpVvKb/YJ cICLbKwNX36r7G4taP882YGEhIVWy1DpCFRfHjbiN7r+jbbo4fRXJ72EnkDPkwKr3lMa 92sCVp5PoTEdKDxtT9yjaRsveB8Kb7LWp+4JoLe9IFVdWDC75ya4C0ciXGSaPkM0B+3K xzhgPXE5LK0+Ybd+fQKXYnehBofp6Af9waQiJdScqO/nvfFYqRItGobZKIVNO7/ZF9GD w1krE3fV01iCG5KTDCB98jxjxl0/wVw1ZbKZ5Puvi2Y+m0JRRbbRVwe63TPHmlDyPkLA hTCb5YD7SfesY+3UnFbHfeLmebTukb5o+OFYd9yc2YTrDxzO84tTfhE3pJqYz1Jp5j4B lB0X7RzCmP6xE3f8ncfGhEEvXBXrkW4lQw7GzrhVAoj088yilvlDY6hcynm+SYBwGUGV 5++h2Sau3D5B1lQOU/K5Av0XhZX2h6nbaaP+0RorBM8E6DQh3kiIDSiouSgBTHKVW4Uy a8K7VDsBXrQv3R5JTfPtHQg8CPA+/4FwRmmtJwg9Eu6YoXDS1FAunQqKGmt54HovfBG6 wj5jAhXAy3iMRCteAZO9vpgfvCWWFf0rDAL9ZThBqX2OEITNWy+sKr3VdpkyALMs2Bgp Ounsworth, et al. Expires 6 June 2026 [Page 102] Internet-Draft Composite ML-KEM December 2025 v/kC6fV0+RvoGmy8vvPLJRj2NNCwDSlblSnf/1zfD6ev8El+XZAelTZaqUQ4LEvrGgVm IUzYdcFbt7pIrhuiXSDSz/Nrh5rXB/60WeboB/97Xb7ZcLT953z4uoGXC9jMJpwyZfb3 6UM+RKsqtOS0bCFnIJC3xm63FbDZpUdBW/iykSflAq11ROFVSnOaQCN71qPlQMjHH/hF ANRBo9vFVDeFD4idyGwSixZ/vL6WnIMu2yLD143xWgJuFBjp4/1fn9Z0AVQHJqunKyzW TsNE7fCTJiOvi/uF516cAfCqQiPpWzrgqd7g15IX1YUUS+AtIsUQT0Y5+D+T68QA86me EsDziNlMLfKT4ZmFIHm5WVVOa0Sxyx5qMRAG9gh03lBx+v6GavuL6WKA1U6kmRw2yq5v eAKsOhxQ6+KtyCChPcY2HZyFwSBujmSeVn0sz0ffLlK8AD+eAWO3Z+LugMffkUv6s4IA kCZW66f+qOih3D/8yjtyaUfCPCmCRI/3O9dbKLA2ja6NeVpjK2N7wSfl12jshTppxvtZ KL4K1GkcunsBwO9M0YHnGLAb7vs7QiSUkEqo4J8eXXf1AxRgd914YHGOWum3Zj2s4Frc lkcWbmQYd+F3VGF9LxMbJqCaeTZp+49XDaygJFtsFAVXIsk8M67mKqeSv2Q13nDAi5Xs 05k03tCZ5cIvVYBL4QApuzazLRa6WyoRmoNnxu9hHH/wvvmgyHJLHc8gkUfiB29et6R5 eWQRPeC/UQaQ8n9sT0mva48idkLMrrtJREb16PrnLhsU+FdBLVFuPJQ4T5j/OxapWEsa JSipFeMBT9NKFJmp8aen9k9fycTKltMhqOquuRvVtKtc86tzMdCX12J/man4dw9wIZJN lmGKQcKrX+3o1q10+qNiESTH57VjQz8+IXoewy39A1ntfuKG3WoGZ1onzViev2GOAC7u iEJyXc8s9IXRNUuD0qczzcOS6zY4Mnh0LiDnFuV31BigsJJk7s3G3B2CzMFwzuwQB8pz xijAaerUCifHbtGZhButKMhCfQoqlJ5xWAxXJgrLaiTdAHE2TIc1jZxnMQw7K89odf0Y ZZOmXBgfZ1gyo4us0MulnMbpxfiZZRzjzawN65zwZVd8HlvU3Qgr/8NDY2LMwmDXwrtT GSTjURH9wL25gI+bKb3cnoLLRwzpX3zq5LB+E/Xf/GrTg4Td77W+q666A+agv3beagZa kCxkGBgIb7ucNsJksGFynnMrN9/iHreZUV7KbnhwbgHlqN/AR2hZDiCAYLEmsVZm1DEu JQ9y42RRlvOFK3dJmmYnhMTjTw+YQ/2HfJhZQL6SwKbo4CB9QDfp4zNDPa78Eo1QAW6l sWMrWQL3BiTvreKEAcxdT01PYsh1Ek00HtoOccg2VKmkLhEADGebf/UApwA0m3Vyt07L mxHe7LZ4rLTQgEFR888XjRd1KkCvtZ/9PSZcx+o3KiYosI0dU0HI1wUiJdP0djqXJBlt SSg/eP9D9Ux0kl7mmeZVA1tvt6n8RAfpMzH/WrL07HWU4wHtXDR9nqEaoVdHvz0t92fl b+NcaJf6smsqANZcoRsfoL2f/MWmYi7xH2EG3eyU92HcYC9r/HVQfassQIZgt7na2w4I ndwVQi9CGWAPNWQEIccBf0TLPiAkKQrVm3InjhWaBloD6oiDhh1CVyMbaVdM6RL31l8j Pfcs9a46qHo+01NDDRqAcTZhURxcFUAwGatvUzjj8IOmwtCITkbQIGvgfRvYYIDlWTku QVwkfDiYXZS/PLZEnioddcWg8cgRMmJoa8n0eu8rhaGTXcqIsgk1Q+kn4d9Anx5NSYj6 RAhN605gtmVwRxt+2oOn5ekvp3TNk5BQ3qt+mUEjfY9HsLkNL/fhgv0zWjUbXmHrRRmV BewpO+2WPqMUUlg3uwx/7P4L7SaKpMc0dGOWZCmXG4bcmk3RrBNy1TNV85kknh3tvXno VU5oKoYvENRGiBMOQVdgqTVtKgKZRO3Vd60+1DAgWrUo34dZWPE2878n8glh/YdLxCQI YibZwpQEDwZIx/GgJVHcTHkL+066pIkekGkaVJZwhSM553zmSufT67CL4uelrB3F2GPl HbPcW2KoX6wixjr3UcriYsLirLCIWwLgqgQzZupKM7UOVn1sMicEFk1mZi6ua8bdoIeA rXcINvZCdBdNrf/Y0+TGrZxI+SZ40mUeR+O0k7UkLM68vIqnMlk7Olx1KcZUd0U3vOeL tR4IH//WSUmT1g67KB4fPId35cHkEUE7K3Z0jQGsYvqCAd/MzX+iGLeDsRJWV3ivHPNd G6yENS9mhlOd+jnAMHpI/NFLfW8Vz9LHiBLq7ft39TQ+TsoMeMlXoDt4aEy2vfOgIySc P/XTNZFjDEUimFGddfWYlJeT/DfxvM2f1fX3Z+hl+Yjknc30mUOBnlZBXgy/n1zGevd5 pWRqXH9OgE+drdGDA2CeQB1O9kAciK+lKU3DbMYfZ5FAvFxiupsj/LzyuBGz9mQyRWuX gai1Kv5vLCoF9FFUvKmbrP0QNWZnmeMvPF53j6AUj5S33PL0SFluvNLz9gJUjfI1apLz AAAAAAAAAAAAAAAAAAAAAAAAAAAABgwTGh4i", "dk": "SYebUVlz+7fI4iSpm2vF9FQ1Ov5U+zwv2TYEXyCYtU0K+/mnsBKFi1DsXjx1H 7DdBGhu0K4s73R1rtYjr8eUlzA+AgEBBDAaUGm5a9TDc42F5GzH+VJfgOf2BGG7Grbcc ZaoW0fVYyilwS6jBkzolphMWAG/38qgBwYFK4EEACI=", "dk_pkcs8": "MIGSAgEAMAoGCCsGAQUFBwY8BIGASYebUVlz+7fI4iSpm2vF9FQ1Ov5 U+zwv2TYEXyCYtU0K+/mnsBKFi1DsXjx1H7DdBGhu0K4s73R1rtYjr8eUlzA+AgEBBDA aUGm5a9TDc42F5GzH+VJfgOf2BGG7GrbccZaoW0fVYyilwS6jBkzolphMWAG/38qgBwY FK4EEACI=", "c": "2oOBOX4ZUtRDeNpI8TTRR/OKV9bpd/J2N+kgQ1GxJGLoKAy2P1oFY421hUdAuZ XlC2X8m/q64NZrFCPcj+q59cI4Hk+YDoTS4bz6+NE5f0rwL9YwA9cYShCdPyuvT5TMWg Ounsworth, et al. Expires 6 June 2026 [Page 103] Internet-Draft Composite ML-KEM December 2025 akhKL7hNc41HUJWUtZc0ZBPSsDggU0OZXqBHuZ2enkb49aO0KWvhIpw3ENBwdqv68hDb N91PtWhhOZHJxzkyA2ieHj8ShCsvrtoER3YgYlVUOq6p/A86Vh4/ZgGOoqT7oY84SYy8 ijAZ77Pt7zssQoaEJFBZKin3K79IGsIodh5Z7huj1HLkPVAzCCNxifiQvjZkKUqM/BbM jfzRZRjzbwoGT3waB+RIkgy/+rLSN9Mzy/FtKeXkPxvlA0GBy6atOQYoVpgAezok14ba 78lJ+mEo+5VobdKMZE/Q0tDIMw+toMeDKQ92kfKcIUn+LBp38ublv3EemP3VZ/+mY345 iy265kr8BL+VjZq3ntbCSnStJGx3fd/7IFX2eOjGLQLl5+L/EPbbFoHhbqmDeQcVeBQH nWWliqCS8XUlSXwUYW6S2Yst2C+p9aQ5yQ8Kub2wpMgudXjZoSfK31eavcfyzSIbMvsa Se9KWgolvYD0cFghXIcXBd1i3Q3Co6RG6n62LCOhhGfOk29WyvoOg0phEUK3ypelsbKZ FEsuBUIe+0p/H5oCQSpKescOHV93lWuaxK7wm/8vEg6I/FheL55UCdvKgcT59296eRPt nWbQAQ73tviWLAYPfYNm656XML493b6UEeE1HUbyyPJYjl7RyWBn74ByxDUw8fTPLNuO Vy76wwDfpeD6wuOwcqGFNxNnhjUPzcvOGbN26fCT34YJCUYhiV0ld0bIOKtCjQ8f4vPL TBq76scMUxgo/QEr1IOYaAelB8uB+Fbb6pmwNTuvLodBbSBenfBk1SsdK1t7cGOBsHAK aAys14WIAeSujAxBm/1RASDpoPjpghd7XQ2sufK16tGjJfkhEnj5SwGN/phvGIlRwpE4 fA+J6DOO6EfZKVMB6A21B7lZbRcE8VSY1E7ihWkCs5vYu8mLmQiWCh9mJG0S26GSu47b QmeiDE6Qye+zQ7lN2mrSBPuh+bHgUgNJ6HY9SKrqd1BA4SwDxtUTvXlgf4B0kpMqI+GP 0FrVSh2d12FZngskTlqDsLjMAc3ZBqqmnSgunNctKpO319RP2rjCvodjx24s+9Tttapw +vvNBFiHdYYr/+W+bG6OY4DDaVkwkt0XsieTz0pS1X1xpJycDxHPqii5RsAyY5MP2uQl 1awTRQlU8zrbLwEVgZezhDxwJWkpHiVO7namfl+DDe6AN6dd/P0TPaF24q4CBzFJIz/T SOlTGlF1M3IhROLNI+by5tR9VcepJym35oDP5YEfk8K9uize1lwJgfDGh/xGyYxTnWQP P/UyfwnYFZbMlGBDQQABfv+dD9tsEEK0DT6iGcKTVq3lRMGLuYLAKtz6kvcJNq2Kr+lN KUPNqeFSueKeDXTYfTgB4jDU/gUCAvDLWBnjOTRo9e8CyttyxSFqJywg8eVqitiu1dAt u+0Osbz6+ia/jNuIBzoy8u", "k": "yy7kpYNDNoSu9MdF1xzLo8nsg9+bYumcPsKwyr1KkR0=" }, { "tcId": "id-MLKEM768-ECDH-brainpoolP256r1-SHA3-256", "ek": "FnZiwVlTxWqteUgXBgKahAoNyfNZuEya1vIKeeF3hIJcHQNJIHsrtCIxT1lsz KuaT9EHyFQkbnNgSVoe8NlgXRYl8os1etd9usLPmKqgTTJDSeFqhoYnvnGmfQQMQqSET ll398pCoRRaAUG6nxYRWOND6ecLKlxwWRiDSORjXkLG8BplUiOEt3WTeKlksTZ51yaXT ayYTfCFKIPJ1vAl5/MIzRtBJPgriqGZg0wnIceNEJKPVsgJbWNzGpYQnXReY5p4i3QkB 9JRL8xnJNq5OaWgUplDZxJ2x1w4LcbK59igpvTFl5wfugBKVRBBSuWap+WXPUgzcGSo2 Ht7afIvzZiPMEWLnsGmFbB5pGEgsuMMMrwETfjKZXADYIgGB+VGHWa5M/U5gKZKV0tcC TcWL8pOibPJCyapFfGSs9QskQN6HqpDF+apWQF0cGHEUkuozrtt1YI1rcFhK2CZ2OFy4 Te0esS2FgrCk7dYwUy/YndRX3gEB8A1IQUTRcRn9ER6VdKE/EZ0IWtb6NfOz9IbCWGqu 7m0b1suwNdW78mxT3UW4owSSTdcjjY5WGRk9AwaA0KIIWsgpSSIAIqaTBizBBgwgBEf/ QqjMOSqiBWnVHMOcjqjixVmw9djX9DACskhSmqloRtIFsik/Cu/QsHN7KSWB1U6EcOvm 8IUUVEgrKSSYiTCQmTIBuMFgRyDDDO/6RSD+Do+6WumDyHGUoyOtMUIbWWE/iMPKaCN9 dFBT4YMM/EEPpQmKqzAIfW23iAascNc4Gd2oPIGSHG2NdRkvFsPjQFxcKggm6dquocLn Yp8WHlrezdyttUBO7ErFLUr0UtuA6ZcSSRKO1GjT+FW7FgvRDydbWQK+PF+W2GiwpI0W /YYxWF2p/V5hFU9TkJrohaonhEJt7QzERUu98RlJ+kEazKXjWWz0IymXVZLGoLIOgU55 XpmvbQs8zI/qnadcdmG2nCc3hFGVjpGGBY+PUOMXhPMWfScX+a/0eIuHnqQv0di7PQqa CvOnoxbFbaeWHlb/XCJy/asYKB3DQh3s/TKZ0qOn5s3d7XBWGKHPKRofXWPOnkOIlglx peyE8ACYeIj+iuLfwFELKp/5FiOsvEY7RfEhNq895IlhIzKDIKvYbx/sBtP84DM1ZUoW igCpkEaAyzLFIy3jNRKdKNS03Ab+AtMP7Y2l2OBzxEz6SFtnlyuAuu6FvJMzSrDhJerl Qw/qhJ2l1Yl+dCS3TUtMRuxwRhHN6NcFCyrLzivUUJr45ERXWiaQCFbpvVjq8NutHQWe 1Aze4ey9ig2BtYIS3lWlXWNwvEoAKGG/zW/U1vEmvYXWwIYl7ovhlDDOYduOiutUhSAv JWhRuOAAfhxh+Of8KaePHBtiImqIfmU/FibxRlaULsM5nAPgPkGQ+tp1uLB5PmbYbgdR 1qIbugMklEn6/V2Dkd0EDemzRYw5ydS4Yxe+hSeDvO7zDRgITx6PSEVgdIZZjqebnTIk Ounsworth, et al. Expires 6 June 2026 [Page 104] Internet-Draft Composite ML-KEM December 2025 wUqAhI6VPeEdBWk3iRllSMouqZ9ImgBmOa6B8kx/sFgd2ZJBfH7QNksqtD2NxhNYxWqE EVlANlhD+tksgTRDwy/4AEEokNQI68k880TEiXeQVikhmEBDXCNPNt0HgU9qqbDdYoqn enxL7dONC51FICDAtlJfTFoyJTIJvS/lCgZpd3F8Q==", "x5c": "MIIS6TCCBeagAwIBAgIUIThdFCmyrKhU5VCBMlKxdWUujcAwCwYJYIZIAWUD BAMSMD0xDTALBgNVBAoMBElFVEYxDjAMBgNVBAsMBUxBTVBTMRwwGgYDVQQDDBNDb21w b3NpdGUgTUwtS0VNIENBMB4XDTI1MTEyNTEyMTMxMloXDTM1MTEyNjEyMTMxMlowUzEN MAsGA1UECgwESUVURjEOMAwGA1UECwwFTEFNUFMxMjAwBgNVBAMMKWlkLU1MS0VNNzY4 LUVDREgtYnJhaW5wb29sUDI1NnIxLVNIQTMtMjU2MIIE8jAKBggrBgEFBQcGPQOCBOIA FnZiwVlTxWqteUgXBgKahAoNyfNZuEya1vIKeeF3hIJcHQNJIHsrtCIxT1lszKuaT9EH yFQkbnNgSVoe8NlgXRYl8os1etd9usLPmKqgTTJDSeFqhoYnvnGmfQQMQqSETll398pC oRRaAUG6nxYRWOND6ecLKlxwWRiDSORjXkLG8BplUiOEt3WTeKlksTZ51yaXTayYTfCF KIPJ1vAl5/MIzRtBJPgriqGZg0wnIceNEJKPVsgJbWNzGpYQnXReY5p4i3QkB9JRL8xn JNq5OaWgUplDZxJ2x1w4LcbK59igpvTFl5wfugBKVRBBSuWap+WXPUgzcGSo2Ht7afIv zZiPMEWLnsGmFbB5pGEgsuMMMrwETfjKZXADYIgGB+VGHWa5M/U5gKZKV0tcCTcWL8pO ibPJCyapFfGSs9QskQN6HqpDF+apWQF0cGHEUkuozrtt1YI1rcFhK2CZ2OFy4Te0esS2 FgrCk7dYwUy/YndRX3gEB8A1IQUTRcRn9ER6VdKE/EZ0IWtb6NfOz9IbCWGqu7m0b1su wNdW78mxT3UW4owSSTdcjjY5WGRk9AwaA0KIIWsgpSSIAIqaTBizBBgwgBEf/QqjMOSq iBWnVHMOcjqjixVmw9djX9DACskhSmqloRtIFsik/Cu/QsHN7KSWB1U6EcOvm8IUUVEg rKSSYiTCQmTIBuMFgRyDDDO/6RSD+Do+6WumDyHGUoyOtMUIbWWE/iMPKaCN9dFBT4YM M/EEPpQmKqzAIfW23iAascNc4Gd2oPIGSHG2NdRkvFsPjQFxcKggm6dquocLnYp8WHlr ezdyttUBO7ErFLUr0UtuA6ZcSSRKO1GjT+FW7FgvRDydbWQK+PF+W2GiwpI0W/YYxWF2 p/V5hFU9TkJrohaonhEJt7QzERUu98RlJ+kEazKXjWWz0IymXVZLGoLIOgU55XpmvbQs 8zI/qnadcdmG2nCc3hFGVjpGGBY+PUOMXhPMWfScX+a/0eIuHnqQv0di7PQqaCvOnoxb FbaeWHlb/XCJy/asYKB3DQh3s/TKZ0qOn5s3d7XBWGKHPKRofXWPOnkOIlglxpeyE8AC YeIj+iuLfwFELKp/5FiOsvEY7RfEhNq895IlhIzKDIKvYbx/sBtP84DM1ZUoWigCpkEa AyzLFIy3jNRKdKNS03Ab+AtMP7Y2l2OBzxEz6SFtnlyuAuu6FvJMzSrDhJerlQw/qhJ2 l1Yl+dCS3TUtMRuxwRhHN6NcFCyrLzivUUJr45ERXWiaQCFbpvVjq8NutHQWe1Aze4ey 9ig2BtYIS3lWlXWNwvEoAKGG/zW/U1vEmvYXWwIYl7ovhlDDOYduOiutUhSAvJWhRuOA Afhxh+Of8KaePHBtiImqIfmU/FibxRlaULsM5nAPgPkGQ+tp1uLB5PmbYbgdR1qIbugM klEn6/V2Dkd0EDemzRYw5ydS4Yxe+hSeDvO7zDRgITx6PSEVgdIZZjqebnTIkwUqAhI6 VPeEdBWk3iRllSMouqZ9ImgBmOa6B8kx/sFgd2ZJBfH7QNksqtD2NxhNYxWqEEVlANlh D+tksgTRDwy/4AEEokNQI68k880TEiXeQVikhmEBDXCNPNt0HgU9qqbDdYoqnenxL7dO NC51FICDAtlJfTFoyJTIJvS/lCgZpd3F8aMSMBAwDgYDVR0PAQH/BAQDAgUgMAsGCWCG SAFlAwQDEgOCDO4A+7F9Z1m5XeBstRU7Jd69X1yGxk5JaFYFSz1waojTcoJeu/htzTFF 9lORQ7GZcLB8n0PqkYsKza7yktN/LCZR24+Ci4N1aixiJAJzoCeGmXM+SYBg+jgNz2qx DK5NF27E/8QbrWKd0/vccjbWv2JGQFhoiHodQ54QCaAKPb7X6lZaZ/HQ3Gs0rqeELHT8 0/rvltA8EVPZdDTKHxhvZob6Xt0wH19kJfl+NoVX7zjFoLDRj4P9K45QFW8eDp+mSIUp LcutNUEwf5OZ8P+jzNYbv62KaDSHEzU3szq9TaBggPY2DjbVmV2inkNxkixrcZt/OEVP 7ctrbK8+tgw57p8IAEPPEKlGn08nhhpn/3vgiJr3mcx3Z5AnCl4addfqX/yCnJAFTbYe oFKCw8l17eKgEnX4RjaJcwWGszPW7zkE9XTAvYxzTX7DsGIE7wH3BtEv4O8X9SMkMmhw YWHGOwtvSPMoEoVVM4fBChi5FHTYUovKV6qpCRvBypBTVslH880niNtWXG4Ha48//xac Ry1yXuJVky1aC25IQSVfe2NnOD05419hXjtfMg6dZjXaiTF7OhWEnFJV/DXNWDUIiZva bdQtT5agNguBsG3hWkQoblunfxBptbN4EGLE3NyO/Y2EtHPzHsq6yGFyqpJl9XBeYwd4 FZkqD7Vb5Eh7p//lvZhDfvuG41sJiOa944N0ukvbLfXyVvyOHEM2g4avJT4mITh74v0q tFQXFxfNqFvMpjvTncg+jWv591UYHI//OlDz7MEESK2GhWZTJjtsAO3961ciEcXvKgbi ClPE62mQX8H8W+2mCO8xWVQvX5GzKEhZ6ubBwRHJGTuab/cmc/rQ6yIY+Kyi+nVFy9Gb y+uRzEFQfRKdQY8s7K4o/WQPot5l9tUK4ym9ZELV2s6sgYM6AB4rGygC8knzzhoNIO3F evo50TXhJVyb2dnJJjWhOYLtX6K05xMkM77vrDSZgXyxddspmyinaqFl0ywlemSLDO8/ Ounsworth, et al. Expires 6 June 2026 [Page 105] Internet-Draft Composite ML-KEM December 2025 cuToKFG4uLIoU02OdGi7lWcFRYIWzsXFBaUVlvS1yU3oGwKyooAMIjm8j+gKjnFOlGt7 7p8m9+Rnq7f4hVwwfJOar4O88GiFtdeuI1Y0pmfOaSXpSQiP+uUNO6+Q3AiVnGztoQa0 ZmBMM2PxeRbxzok2n6E8XvwDwGf5uF35fObEO4bZ5+d0gBY1dY3nPFHpvPZAlzph7UUi l/fCyMKhKBn2HhcH8warTzYM6MsFq1AD9Cx09uUtnWr72Zm9O88EgLDmYlrtm96PlGsW B0pP6x7f9TEc0RcPHXQUH9ck+cizNJlxiRW8uBZh6MP0E7t2M9Ro2H5fWLK6J0NIng9S tqpSeb7XfOW70qeGevxy3zu0CS/aFcyUhx0z0/m+INPHDJd1UPUWMXGzyDJaegVJa7oG QPwJ2IPFxN5XA5qWi44FN+gDtvUG9EECFoUhDXbXwlHwwy8fHZI67SQ83gMKwkMnr8Dq Bo8h967eEB8iLagba3vYbgz4jVSLC/2Z5vPprxsEhTTn62jszzvKBtY7egkL0SUek9B+ zUuc1cTp0ihfoQcF/dfWpc1EoEsgj3r5sYgk8KkUWSfVR6Z1kC9fIwTry/WLBN/hrefk MM8xG9uD52kl4nc15QyopJfaBgwUwxvu35jqbFI2673o7bKVSU76ftsus3tIAq9k4MjF b9DqmBBiv+eKcROPGo0kg8PqS2Hjdp5vNRtnHgJB+/VjjGlbttr3teyyFZ9bkL3+0o7r hZhKfgVEnBrGNmJ12lJKOZIjj9US+2hkjs3+jCCPNkwo+wlUHNlgcM4OlLms/yj3wp0U rf3cXaUHc7T1C3Ppv+12OgG6LsYRZ928FrI1psQSHn/V6R9EaH7D11L84KqyR679jVMr 0n1Uoqa0g6J3PtDc3zsxbf7SbP8CAZIpaUTMp1+RiQF84etjya2Fa0qQZWu5phrZUEWQ QNVQF/Z43tamV5RWw5O539VrO69MjDDVSyPjFpxj4OyzFUt6X95lwH5nRma5VsIRYuJ3 PN7dOBahafphWRMRX1CZ2W5ihNoNNhVBChO5L2EaJCzguMoEfw7k71mVo6XWPmC3f47f qsQV3TOLT3BHj5H7+ANgwUNtrQtDy4Vfa1YIlk9zPULCDHQqVc90Fk3m3GBiuoHy/RcR 5snQVUMCLCRZ21OFPi+BoUnhoVEAERMZHmyThA/0vLAGk8hQgIAvfoP3+scWiIeRISta TBAhUTtZ/f/ha4x3CckIPGqAe/d8P384Yb38MTA52lY5xKCA27+P8h0cZ4qJYuJbN9ZP R9lQO1HDtNO6WSjaPdtRJ2KxS7RKZEo7uLe4s/ZMquP3OSyPMURCXTgSn89JIEyQXxLZ UD7zY9GJgy2ZR21e8S26Bul1FRhEvwkt21UvP6w8o0rJdMAGFTTIdp62+Q3tB8ycZugY M0gcLmR3xo7q//tt+B9lNhKgtwNk1JLQch2nLXDaCp9z6vxxUXoepVEFhucYXqsAyZfi NTM3sT/2ObOxyyiIraPz4dk0iUe9l/d4TCVCOX+2SsVjzR+krbG+at6Pm6rt0hhL4LRV em8omR34hWJomxPAprmO2ukTswedoshTuuwRy5Q6n/EA644hAVFyelHR99jScAg0v8JV 0ZDBw5q9phcYx7aLLU8xoNXvustSpIzhAQNjctxSuv4RZMI9P+T6UnDZxMbH6PGVRf48 NUdyVHvVQnK7ah7NGV9IMZx1AXsDO6e5G4o4lKpDP8v7QDKF4nLUkZxQ+t8lP9Radci5 Wbl1J/g67dKIFsYebE35z0OGqI3vM+q5cP4MXMTavRUTDyeTmLPm6ZZArBlM1Ap7bIKa WI7NP90SIRPkEeuXLMkfevyncuGEiR/RAT5xRYl5Znu2TBA8dHj7rUnuKg0/CHAolio3 zXJTLDwaRFEgXRWNZEO0Fcag9RQY7wr8nunujgSFwjwlGy+UY5t9fsQ1TgYb/BbC8wK/ jVDjBSnHzFPrJhGyAfeaM65HJlMYjNB65mB8OzukVxRD+xyzwa6tYxVf44sz/8t3OSh2 RoWuehOwlYl0U7XnMOz6nfZy4AYVOTHhDAcHcCWQSVEJxKQvfnsK1AnmQbrw5ukXqXSc mpc9jc/e8oeNllu5++ZaEDfrS7jG4a1l319eaCUb+VtAZgTM1GIX7YI46eEKeGaJzjq6 PNK14EF4DRG6Rv+pWNMiszZOpye2/PdCBajpi2O07mlwnFWBXMxdimph6gM7/vyx4r1I kE9aTcO4rI77+Y6jvBcRCRAC9lgNr7ZgPixQU8dKs1gPAPoaXymj83tneu+G16h9KCDe wx1f5D5P4EJ8euwL4kzkMxQca+gIwl00R1Xi7gICP3hUYwFWYuoukBqnQLSbkMkBwXoC YSzcCHyMSP+zN07z01txODrf9ScMjFQL8l+YmaaTsEsxP4MWpJJT/M2M1JAMZHUKCiQj 5csCC+4zZYJmGeV2vyV/X3FD3t8ZuhcD1LskaYs4Wu/Yq75pZuzvQPG9LnCp7LvZxi92 W6lz+JOk1nh4Uan2mCQd6MyoJFrdBVPiBigtObq9v2aK0ekiVn/9MvNhm+roBBS6nKTq nJAuLl19seqN/6ChueNQpwQ76CnPiLdeiKqETXC8hpFANqa8/EejCRwXF2YT4pDJdRF2 AFwWlS2Yes7SDX3MqnZTxdTChPcNMaWufrFs6+sAbcefv29xyzpWV4yWQfLnWP7nz6F3 1GvD+TxJC2OnlX4Q6DhjCpHnbLcfvq/JPR3TpWfWwKpZNg4MKGQGVnS5GLznaHv3Qafn iUHUEwQ3xBMBbijRQv5aPCUoGqKV9v3gejo6z1PRtVzAIBLTcNziA8vTmIPsMxb4hqu5 OH8JmK6Z90yfW/ouS0/bwxqSZIc3kee9WUgcwX1sP8P8IgHEnBptoTyCa/bAExnrVUXd lLqk3tGmQsPDMDhxQLklrTKlx3Vui8jzqzAVeSChktw3HG1jDRoKg9ipkYMcnOUX9uZ4 yUKgGLXPwjfXyGQwh/nuVUDdChYXFbKkefpAY24JFMyeEHLkSDbl7DhI9eHZbJkWIcFb XdDzb1tXZWyhGbBqWmMFsdTzzvEONmiU/FansKqXA2DWYGzdoLtDD2SnzsqFdy795gl7 44O8fQU86QdXdn7FuYs1An2nn/B2F8gu2dVrf/sNyqsqJb/PDLRHB54wQLsA1RfFYdU2 jLvQohNmdhisKuRo7Abkwwmw2EhvOz/6fo5wmtfguIt1BxZhvfhisgih5ixR6yk2RKLs Ounsworth, et al. Expires 6 June 2026 [Page 106] Internet-Draft Composite ML-KEM December 2025 PXN/1HetQRs5wr9UQYkESCEJjhs/BBPTiSPFSgYB2Pl7RCB/fTHf4jDcCndE0N0CBg0i K/H+OVRYX5Kus7nU4Q0UNDU+iI6rtrnb8AMMRVh0yOkmV4ujpKr2AXfNAAAAAAAAAAAA BxEdJCsu", "dk": "9oMYETjTxxvwUSiivWYfC3U/F8IskSnjOhOBYGInZHl5zuhnMdmiiU4LJ0zGc uqGHKX+/zpXDJiO8o2PC3gyAzAyAgEBBCCEGtN1XDSNeDZc+1+WdlM3I5Ahs3nsGJwqV m/MimnXy6ALBgkrJAMDAggBAQc=", "dk_pkcs8": "MIGFAgEAMAoGCCsGAQUFBwY9BHT2gxgRONPHG/BRKKK9Zh8LdT8Xwiy RKeM6E4FgYidkeXnO6Gcx2aKJTgsnTMZy6oYcpf7/OlcMmI7yjY8LeDIDMDICAQEEIIQ a03VcNI14Nlz7X5Z2UzcjkCGzeewYnCpWb8yKadfLoAsGCSskAwMCCAEBBw==", "c": "gnSPJGwsWkHlYRq6CtLpAMh56LVB75Hk3Ysh1T6VIOB4tAThCaAnpc+SrYDjUx 5QfWvnltIxn9PEdZ2xTNVOMJZeqaEiIhvY9GYXTmM/i+vTzjy3XdFsUDDBBu5FVP8McE pXlKu4XdaEVMcFjDIQjBVmmHbbzfpslBH1ekgCkY0XuZwB5ci6M9pMQGr7VIoFkvnLGQ tlsvBHyY0zh8igdbI/ieZHH5QvdjytLwiKH3t20jk0CUFVj31oLefdG1OhjQkGaFzPuo wd6d6CB50hgIHCYzsanuN4Y4BYydvS7+wikvRyoeZjsJdkSrytp63rtcEWWOCve73RMw y7cb71xNq6VluzrmoxHTPFJk5vFEdXoas714UniaB4kft09KSHoXMxm4MHRlk7yARhHp Iy955O6tKuNENF2FBD5kagnO9iFo8IjrAM9g1H+NJtKfj55tx6xVBR4RHPMoajLMF3rQ 97RaCw/mdpKpDouIyGSRhTwGD92we5yfcj12tVAfA1q0JeoW6UmyJ633+mj0HUDKU9a3 QE0s3vXkmyO2hYFkw3WdUeG+P5CmxSURag9uQ3kltgCRoZ5YEdZyQ3bjktpF96iMg8Zo r/zVRl60bw1UFT3RVkMfUCq6CaWaP1/C7gtDf6B8XcERbhFWuTGp4514db+4/ck7FU5+ 9oul2JAPgRd/MySS6gUjzGvESkUrBVMZepyMAvIHEdQNqD+HntjqtzSoDUhTHOOIUC2L RsZJBIwy8HL2oXnGIkQUfiB68efMXgTDBfqvsqGF/XEu0TMFD7WlBIXtf1+QBcFv792b cj8DqWg5eHvoSjB3PdW1lTaPZH5XO3QC8baiNknOH3HShQC82iq0AhBaqlgsxDtpZazR dOeJsuQ6JUgN7O2ATo2K/LR4aTCWo+Sjj3vyjjihRyYv+jodjUAi6tCid4FpJ7kRIOJZ ttYAzmMb7sFjLzsP8Ooek+Z2Nz1mis/OJw9EwN6JVj79hKb6lSUtcMKXMUISgYlnNxvx F1zV+NKNX+azW7DIsq7amzkc2hZJiGmBpFiyO758/LYXYm+jv1xswH4lbWbXO0OJRSOz JPhm+4bpLZgcgJefLMfKFJFz2sMvHnhpI4NIxA/5OcZKB4OZG4jE05cqWxNZVqrTwKtI WCoU98rRb/erzEdqLV41QJPLfEfPuFwyUVnnvr7G4WeQVUonuwxSOubw9BavBqWRGwKU GoGPIE23U+9Lmq6zSndLg2qjmgRjsyxGJEdS8GWBRyGc92aGkzmICBTFdfdFYAUms3zt fXXcviI8yrgH7I87kpRWRR4URvR5JBdt/h2A+E6Ewm1e7zUPLrq9Y0ovk4sYuD7YWQb0 s37b5aXHvA7F+9DakKwra99AJ0YYGKpCkKjRECeDFdIfJqDTXDveGZ8zWIOr5s27Y1p3 q86/G/SZC7NfqJBecDdVASa7LEGPkEDtD/AG4U+tcKuIKd27oqtMYjKPTRaDFfB6v11K cHvg0F4goIumy2mmgl+N2bcBUfA+QnH5lvQAudgjIEZm67tA==", "k": "tIOepl7kab3C+Th8fqnVKJWOWyHOTQyH17QoXyVXE8s=" }, { "tcId": "id-MLKEM1024-RSA3072-SHA3-256", "ek": "kgS/MrKoA+y04OlaPAKLNCHCjEub/Mt7ngEbZUqUHSJN+mKyM7RjIzth5eYQW ovBRDNL+vVuBfcqWadcPlysMVldZly0OpM8tLhsgfSeohCnxTcWXxfNaAm1qpwkeAGwY lMKQSYugyK9H8moZ4RNiLWUQmzHwfkSZWd52qSrz6u79geuU+ZAc3mVYxOWvddytnOs0 xES94nFNeE3nhdIh8I1WsHD5Np2uKHIWscFqRAUBZOGaMSkc1F4Xyi+TKypn1gu8IAZC yQzNUMiVSFCo1tXgelBEsgdu7YzzcEhdXcmweiGb0J2bBltFnPA4tIoRkKHzbcuZQATo vBqfbNVElAP2zNMQMwN5+gU+4jA16eDKrUEEHKG4AiDeJAp4eQBwZxEDKSI4pIHwxoqz YQn4RfFMYynwqMjd4kn2jxxBtLI3dcEwCqHBbOMZrNXPbClmzh9oOamrszPVjhg6GcTL GQpRfyRL/JWb2tPjSN0+BKJGSVk2SzHp/qOgVVUCJxbETeHG0xcEGtLKVVzSLsg4PxSJ BZ7BVXFZJQaP8YnYcK0lVdzCbQVvZRLAFuZtiNtOjxKhsC3u2Ct7OenF0gVkOU6hQyLS 1BxeCiyvPiE4TlG6pV+drij0KOYDqt5JpIHeHmyw0GRAzHBo0Gj9WMawituhvHHYnK1A XNyl3ddU5OqBeFrPMVtGZLMFlRnxHYd/1PLguxpOtWRCKGdpGgwyUWzKmd9QRBT5aRbX KklMaGJamihO/coJ+W9EuawMRt3vyLOZ1eS1Zlbz3OSvmJrrka8uAW3gOOSR2SWbQsXu Ounsworth, et al. Expires 6 June 2026 [Page 107] Internet-Draft Composite ML-KEM December 2025 lx6w2CVZVsVEqq+CvSINRlkhBSNsPyTQthNnUnERPJ/6iosUmNCOvWr9cKOf5Jju1ckJ yQYfodLxsda1ySNR/QISuMmKIRn8WASbOSLMMm3zasLc1Cys8mnl9Z8KRFjSHVEJ8kun bFsiFFb9BBsoXMrDCcT7qk99hxZDSW0e3Ysn0ktSVwHwaSKBXO1Ywocs1FLcLa+IJdw9 ThGxsgR40WxHzKRN2bMDNjEdDOlfDZLtVOdMXmxEBWs9QE9U0FsTnONtmVSY6g0I7W4U hobLBhWcuNxXXMFjzOezrGGyLg6BugxXdVlbqlgFRBXUsI0qCuqe7B8vbLAf/cpaMm19 cYIvqzO66BmM4OU7yOB6SB0VoEM4hGZ+zgqUZF0BGCg6cRplbE7g5VCByE3IwxcfuKqU aHLsXkzSEwgeaFqQcFIGDVUG1oJhJFPKVUAw5su+vCr+ZR5d6Y5xcNnSJKQ7lFT+wwfW BOnjVOV+qwdUhGnF0IqICi/4+l3E/xoIAzANvaM7lahWlEWg0B3m5uqkmgPIxXCK+ABV gEl3gsEtee4zGGwTVUdV2VvMBF3aOWJobSvlUoQTeZFuFJuCWrKAEl8ENOXbzhk57m6G FoPG0F3LBe9eRmJogRIusYoF4xXIAuEdcW/fJKjgola+ao8vrsM7mI3nQkvHnG6KXgRF qhNOFhzraBN38SUOOsKvyC9/7u24sOIscyU/5A9mma4/cBlBBae0LTGkPxUHCae9fRK0 Ct3tKhnYDZP6Nw7+Zm6VCwoKENDDVV7YdxDfOp56IdhkMGf80mTVqQg8voMNOCNlfx9a XJfCwijskFmcnRmmnuQ/9CrhIOHUKIDTQiYroezcNRF6IRFKwxC+bgdYIt2MyVIrlcLT /lewYReWXamohhPlUyeAJwcHkN9b8OI3ViE2hcUOekEXttzC/kPhiIw6PhpjPG6OBhxR khp7/aGFWoxEsBFFQuf2WCqc/FR4yxsD+EzwqdivCyGf1SfrcdewYpnitkufkUPt5E5D fOmTyR4XtZfpOJQQhDDhulZELKb1pk9muE+lHCmXQUOtoCiktpoHcUr5uK+tqyWRoUCd iWCTWt8wyvInmyz9EuwjhsI9yheuLGIjfFKU1O2k9I1H5UgpZAu9KZQwMO2HYtmaWufC OknnAyB+DcuMums9Tl/OpKG0hPJuWSEAJxtfeMAjXpMpxdmqKu0P0qNx2hAr4a5IRJZE /E/EzCRFLZfm1ws+wlIUywdJvr/4Q+WZiif/jrURaI7TJ21YmdrUMmRMSwwggGKAoIBg QD0cJFQ8T89PrcMq8eTJhYG3BAsVu+6B4Hgjy7vCo5sO7vpg+Z0i8JKzGjnZsFFkSWEV 1gp0JycfqjLafV5ktoq1pyYHvuEIO9z6gXudl/3xvagnfhKpZAvraQcBjVVgbUTpBrjL OYIBB5ylq2WzMpQY/A2p+nsCFOqkJLWcZsqsmFkpkd2N86CBfUB1McAIa7t6BWIQUAH/ 1/kTXjTx598AZYA65aZUCIDtO3HcPuK4RUw5wziKRPxBdJgaDosCIpFexe9b5rqJy0lP tnkgR52WfnZxzjao9Fu5n7CFZbJIttq0xg+PwIvVERF/hCCJ1QuqB9DLQ8CrJrt3XbL1 YmJkKbqyEpZqNzp6Sr1i6HJnzmRayklOEcgSkQhLbS+ovkEwaFDibadBwJKwKuYe+/1K 8RiWNyfmVohpgJRUoKg55Q9wdkWbJL8ElQ7/VrClqNyZz/MeMWrHK059cM2gBJBqcnEq uyYFig+5TEyDvYToYbZo6BjfhoZE7k/Gpp+WU0CAwEAAQ==", "x5c": "MIIVqjCCCKegAwIBAgIUIxDDmIdweT1Ei5su9kut+v4NSPcwCwYJYIZIAWUD BAMSMD0xDTALBgNVBAoMBElFVEYxDjAMBgNVBAsMBUxBTVBTMRwwGgYDVQQDDBNDb21w b3NpdGUgTUwtS0VNIENBMB4XDTI1MTEyNTEyMTMxMloXDTM1MTEyNjEyMTMxMlowRzEN MAsGA1UECgwESUVURjEOMAwGA1UECwwFTEFNUFMxJjAkBgNVBAMMHWlkLU1MS0VNMTAy NC1SU0EzMDcyLVNIQTMtMjU2MIIHvzAKBggrBgEFBQcGPgOCB68AkgS/MrKoA+y04Ola PAKLNCHCjEub/Mt7ngEbZUqUHSJN+mKyM7RjIzth5eYQWovBRDNL+vVuBfcqWadcPlys MVldZly0OpM8tLhsgfSeohCnxTcWXxfNaAm1qpwkeAGwYlMKQSYugyK9H8moZ4RNiLWU QmzHwfkSZWd52qSrz6u79geuU+ZAc3mVYxOWvddytnOs0xES94nFNeE3nhdIh8I1WsHD 5Np2uKHIWscFqRAUBZOGaMSkc1F4Xyi+TKypn1gu8IAZCyQzNUMiVSFCo1tXgelBEsgd u7YzzcEhdXcmweiGb0J2bBltFnPA4tIoRkKHzbcuZQATovBqfbNVElAP2zNMQMwN5+gU +4jA16eDKrUEEHKG4AiDeJAp4eQBwZxEDKSI4pIHwxoqzYQn4RfFMYynwqMjd4kn2jxx BtLI3dcEwCqHBbOMZrNXPbClmzh9oOamrszPVjhg6GcTLGQpRfyRL/JWb2tPjSN0+BKJ GSVk2SzHp/qOgVVUCJxbETeHG0xcEGtLKVVzSLsg4PxSJBZ7BVXFZJQaP8YnYcK0lVdz CbQVvZRLAFuZtiNtOjxKhsC3u2Ct7OenF0gVkOU6hQyLS1BxeCiyvPiE4TlG6pV+drij 0KOYDqt5JpIHeHmyw0GRAzHBo0Gj9WMawituhvHHYnK1AXNyl3ddU5OqBeFrPMVtGZLM FlRnxHYd/1PLguxpOtWRCKGdpGgwyUWzKmd9QRBT5aRbXKklMaGJamihO/coJ+W9Euaw MRt3vyLOZ1eS1Zlbz3OSvmJrrka8uAW3gOOSR2SWbQsXulx6w2CVZVsVEqq+CvSINRlk hBSNsPyTQthNnUnERPJ/6iosUmNCOvWr9cKOf5Jju1ckJyQYfodLxsda1ySNR/QISuMm KIRn8WASbOSLMMm3zasLc1Cys8mnl9Z8KRFjSHVEJ8kunbFsiFFb9BBsoXMrDCcT7qk9 9hxZDSW0e3Ysn0ktSVwHwaSKBXO1Ywocs1FLcLa+IJdw9ThGxsgR40WxHzKRN2bMDNjE dDOlfDZLtVOdMXmxEBWs9QE9U0FsTnONtmVSY6g0I7W4UhobLBhWcuNxXXMFjzOezrGG Ounsworth, et al. Expires 6 June 2026 [Page 108] Internet-Draft Composite ML-KEM December 2025 yLg6BugxXdVlbqlgFRBXUsI0qCuqe7B8vbLAf/cpaMm19cYIvqzO66BmM4OU7yOB6SB0 VoEM4hGZ+zgqUZF0BGCg6cRplbE7g5VCByE3IwxcfuKqUaHLsXkzSEwgeaFqQcFIGDVU G1oJhJFPKVUAw5su+vCr+ZR5d6Y5xcNnSJKQ7lFT+wwfWBOnjVOV+qwdUhGnF0IqICi/ 4+l3E/xoIAzANvaM7lahWlEWg0B3m5uqkmgPIxXCK+ABVgEl3gsEtee4zGGwTVUdV2Vv MBF3aOWJobSvlUoQTeZFuFJuCWrKAEl8ENOXbzhk57m6GFoPG0F3LBe9eRmJogRIusYo F4xXIAuEdcW/fJKjgola+ao8vrsM7mI3nQkvHnG6KXgRFqhNOFhzraBN38SUOOsKvyC9 /7u24sOIscyU/5A9mma4/cBlBBae0LTGkPxUHCae9fRK0Ct3tKhnYDZP6Nw7+Zm6VCwo KENDDVV7YdxDfOp56IdhkMGf80mTVqQg8voMNOCNlfx9aXJfCwijskFmcnRmmnuQ/9Cr hIOHUKIDTQiYroezcNRF6IRFKwxC+bgdYIt2MyVIrlcLT/lewYReWXamohhPlUyeAJwc HkN9b8OI3ViE2hcUOekEXttzC/kPhiIw6PhpjPG6OBhxRkhp7/aGFWoxEsBFFQuf2WCq c/FR4yxsD+EzwqdivCyGf1SfrcdewYpnitkufkUPt5E5DfOmTyR4XtZfpOJQQhDDhulZ ELKb1pk9muE+lHCmXQUOtoCiktpoHcUr5uK+tqyWRoUCdiWCTWt8wyvInmyz9EuwjhsI 9yheuLGIjfFKU1O2k9I1H5UgpZAu9KZQwMO2HYtmaWufCOknnAyB+DcuMums9Tl/OpKG 0hPJuWSEAJxtfeMAjXpMpxdmqKu0P0qNx2hAr4a5IRJZE/E/EzCRFLZfm1ws+wlIUywd Jvr/4Q+WZiif/jrURaI7TJ21YmdrUMmRMSwwggGKAoIBgQD0cJFQ8T89PrcMq8eTJhYG 3BAsVu+6B4Hgjy7vCo5sO7vpg+Z0i8JKzGjnZsFFkSWEV1gp0JycfqjLafV5ktoq1pyY HvuEIO9z6gXudl/3xvagnfhKpZAvraQcBjVVgbUTpBrjLOYIBB5ylq2WzMpQY/A2p+ns CFOqkJLWcZsqsmFkpkd2N86CBfUB1McAIa7t6BWIQUAH/1/kTXjTx598AZYA65aZUCID tO3HcPuK4RUw5wziKRPxBdJgaDosCIpFexe9b5rqJy0lPtnkgR52WfnZxzjao9Fu5n7C FZbJIttq0xg+PwIvVERF/hCCJ1QuqB9DLQ8CrJrt3XbL1YmJkKbqyEpZqNzp6Sr1i6HJ nzmRayklOEcgSkQhLbS+ovkEwaFDibadBwJKwKuYe+/1K8RiWNyfmVohpgJRUoKg55Q9 wdkWbJL8ElQ7/VrClqNyZz/MeMWrHK059cM2gBJBqcnEquyYFig+5TEyDvYToYbZo6Bj fhoZE7k/Gpp+WU0CAwEAAaMSMBAwDgYDVR0PAQH/BAQDAgUgMAsGCWCGSAFlAwQDEgOC DO4AJnKdZCvoZMmsODucljmNcGljnMHtgfN8ZtrwuAES2RHFYYix8DU3QVm3XC6GGR5N cgqODD3YUf3ADczYsHBX0ZNjNQOm/H5kh3JZ2Z99em4CGRIVuTa005Rid3OL5FnMgx1R Kav+H/5XHhvm9U0eVSfvjxMdUkPYLJbk74mmXGDP2FQKow67Lh3ZAc75Wc6fc5SV2oFj mAvE0YKHRr3wVMzTRhxPilX6J6IoRSZg0RA163opfRYOOPUDPvu5ZSZphudUvQJnOfDg ictB/7oJzSV//P79s3RYGeky+AcQKxo0QFyh2hmKtIQeW9hJMx3yc7QhMQnYhvbEbFlD LnkRGex8tdqAiHKyGetuvUjh74tQtnI0yvyc8keS3ATcHkWo2GmrXeg5TtrxPSKoJAXk e0dGU7HoIlKT8Bc0A46CYyl4N/J8bqudzhESSLBCQK3WRoVlk0WIM4DFmfcasG7C036O TqBNmBfSsX+UsxzQSVFulva4nocQXMgLFjJ/kKgTXWGEdfSfPBYXl2rX0z0NFhypMgfE n6M5oFFjuhEyTbvxyTHSdybKM82wh/vPazzwS6VRO5bnQhlhLQ39OrztZDqfLRsW4XQe T8M2SLuNCFMt/NgRvHP3ryMbONk7h3/feofglCSSJKfFhZ0xUXIoUXB3O2KIgPncYUuC +wh1/E65Aq2lloGrA91GLK1wQVNdgx1ngQKrlvCv2lFc8+oszrog4JdqcDysfAhNYU4n xa06ZcamRR+0OQz4MsFG4cW60WxmRPEia241Si/3sSjxfRNxsLVYlGAQPL/kNAeJMPeo mTS+71qoVbWwr2Fb0cOz85l33v+K0MtEimIhd4i3Daq422RjoQAZbzjvh6Gv1vuVg92X X8or9/4CC5/23dcT6a9myKSOqE7JQzz6x3vZ0FO+rtv3NBLmWWk1jBU7xo8/zS6LV8ku 8jkFCj6je9u+LuXyL3vNcEluZnogYZAOQ63rP14TSALuVwlrLO2e8mVsYJXAsdj+ybVR 3vtLPWsCY1c8YKn5wdbsJoMgp/7Rt2m2oB6RznwZsT1ygU0C/5+A9PRhfqSHkIO+UQnQ vlQHxYDU5rgNivmTFWmkmAK6umiVl4hcewQS3dx6Y94eY0HzDvTbPPTU7AJwoZer9OV2 2p0pjaVO4c6Os4ug6HKvCrVlUNEkjxV00m9LvE/aAjoWxudavN7G0icq1ue1J1L+JzFZ MzXtjuGLjThbWlQp1urKAb0NtuxhtmFhTsFJTMmY0Ky6UHO74eCamGJ50GMRRtmk+WRi 0qLIQ1FaCYfWOCMVSKwxtW/tjz2rdSkQE/E5qZVctJbfuqfMxbvuxQ3/UuOjpKKt+RIi 07jILAv/bkLqb6KPM3hPppU8WttVa1e6gAiDuN3xKRn7qoAP/JRoY1jLOqd2k3DUcPg8 8xP720QUu6d3HCvk6AKXTBe7kPLbq+qsySHYn1mi+VX5n0ePD6y1FSL95W9XF8wX0MFp S89wizqG95uMSwJYFFnFKDTxUsfYhxdx+WA+/1uRfOYTmU3b067oYxB/cyvRtBx4zXQB UtkscKZGKFL5g/sz+ei02TukSHWmCubF8jpMvRQ+LKrVHBE/7n/E1hlOUfMll4RZlbPC uL1h/FVPSdIRFeFngFubOsC+Cp9gAK71N6CIxh2OEAu1fQzC+ojfnDGiAaGE2X5HCt1E Ounsworth, et al. Expires 6 June 2026 [Page 109] Internet-Draft Composite ML-KEM December 2025 QY3dMC0aAkH0FrSKSdJ0PQD+IsJqikbZl8wc71ypqLguiA1BfFv4iZT79WYNNxBuZkHH SGj5NoWGb3PVzx0QqBF3JFD9KDnSukpAbTqm0qdpTzO4C7+++nEkyddPpe4VV47AkyUW yXatDoTbZ3LtjPvlxFIkGvd0xWV0Ib176nU4DsANU5QTYLrHHD8Tp/fBRY3pBwvVY/IK 5+1/4klIyamj/zqv554nLPEekUsqBLBNIrtwLg3XrX6U/r7mMffdKnXj8CPIXFLduYWh N4fAdZyJXN9DE8cbovT0W0sz46fqDhtKHSLlDitLmXhaL6hyyf001j2FufUbWhinMuVk iEHYjNKJiV3XiPr7zXsnqqd51cUEcacf/6ZrivxZf25XbVNL06arkllhBTZRuvbl55ic LTtGpy/z6fEgp79zkB5uoFp2aME5staGGKPo2lwOBZhFlUXe6PsIfy1m0QcOOsmIm1q7 7lA0+cYMV10HbJl5w68bs7jYi2b8v2ovHuu/1QG254W2kDjAzzAIqAbHvGY/Gmaw65v9 /0+DT37eSpitM1HgnUinAC0X9qeqvpU7iCKv/rfeeHhAeX9Hzcd7om02BY6tHZBy81gV 3JhCrO2sISIdekbsfq2o8YQz0ileR9NDImHzlw53PNzkJ71xz5OV4TGm5t9PGm6LyjEB +V/TL774FoKbXMOUWmZjjDAzOxukiLALztxznG32s8uJtgrFqv60HP4hjt80TNi8O7Gl ogYIco/MFtDWyCsS1fqTkYhsSgS9W/TmOPhQPpdJYWwF887oEnPaxTDZEq5YWLrQ7bBr d2y4/AK1ey4Hyg+YB2h4riFpoMAsbtORiYKwySZYal3//KhMkKroRc6tbZf9enj1Bc3D P4w3u22INiYVAj5X55Cd+rkqp3y/UrSq/YsZ68cL0Rbj/5tt51RXbO81QxuS8DjBbMjI 4TKYLtwL+pZiUW+GhyH+3NMzd1y+jfrDLJ3h+E6O8FLCR21UWCz+ZvBvrUZaBsEpGubW al9Wsdb2WbQ5gJGNSbQZA0CXMPoCQXxp0wWHF3AllcZdYKNdrNUnoyOzWSsknpLOXaW4 PwR/2KwQOEHc+pLe9DZQE0Ur1Yl6bZ9Fg7OJ16mKLcSpFyzeQI67DlX7IQhBEDIcKSCH NjjQqDDZ7r4EJ2cbe3DdMsEXnhG9zW1C51OGvXco/mpMpDVl7NE/OAncG7x+QCD+gm4x L9DiKbzaJoY6H2YSuF34JgLxMW9i7q+vYA7O8WrhD8EoYkthGZsLa9PT85WQeGT3EMt/ hKsrRa5abpv7Z8Y47WSNjzKLXkmY3zWxQVK6DOlvdqClTniiXlcOr8ORLogtGv/e0qXZ c0sodxtsLo4FCfNXC56A6mNGqhi4LdA0C0H7khwLI6/p9sGfhI7gPo6ea4MvJ8umLODm IxZb7Vb3BGsXQp30LFOBaY63mg0TpZo+CDcqk0+CBywoFhrzzuyreBroUOPzDoc5eHaP /2m6RjzlYCHv9J/iImBCQzMqFAlyhWdqtMcaVqxaYlciEh1EoSSwbIbyJk+Bse5XIhsU UZ9QBEcALCJa8z9+T7+xxcdwJCYIrvrokYLtsL8oaoImPwNxF2s+JNp+MGpa7B94oY/M ZCBlR6stVEM/5KxrPxP9jcWIG/IieqqlJ3mBvRPFCI+0zAFmpxNcp5U7WfGJVSbTAZr8 9qIDjZPeCfeIfepwzAZK8YqEi/2CbHmdyVLVh9Ag1DAQoyNUcDNGK2OLx4lFmwoF56Ru Ubbcvdb7p+/RntnZ0KRzcJ2/9lV1brFg6MFxczMjAo+aC8b8hu4y3rcvlCkReyVzlTli 9YhCldJ5sVc/WtHgfXDiMbxkpt5i7BFWFjshTh5gTg9ApkiZTE3mVh0NE9IqwlTXjuKN PhXM0YAjfuBQJSGBwBlNXu1OABcWU/nDbCV/m81ebJCqJElJ+ox1akMjaRRdhI0n/0M3 kisoLY+ndKWesk05csCTeNZkTnXG+a0mjFZdmq8lqjQbFN8wcli66QUmCSyx8D7hlKOs x3UnRgvnt8mK/DDPJxHXXoFPr1Xnj4lBFFqsR7l6OwOYjON+Exepi9XB6/bVsUtPw2DN B/M/pRdAGBg2uLm82KfTQBELe4MJqnNamTxtFq/o3W8NC7E76KNB1lkp74t5/AFnkCA7 cY+FZIMZ5rCE9wR7xgvCuGUOQmkmX6JZYm5W/5JjhlSpnG/8UMFVHKW0Axzz/AubbsAi OwVx4GwC8J61vWXvuvKeOqckXuB9QEaUYJINaDoicxxJP4PTqbj73aFKcqloW6k3PZhi ZUuRYDo/PUXJWZgmQxaKWCcCq/n2IyTBhG+xc8QQ+bTlbSMcL69OPvAk4lNIdCOvgfRH 471O5osjAhwzNm88Kb9de5Ucqo7YW/3+EVmbeKxg40t0gd7pKHOxgDenV9b7x67hvI2W imm2pRRgW6zTJNylIKGHJg/9nj8ZPIU5hAwXLAQGwwX/shBXK1u7CIjb0Y1FDDgGBicn uFbna2+JHhfIv8jFYGUA+Nb6SLWdWAQLKRtjI+AxP3/nhjc0xDIFPb8uttGeYwSut3lN Giw0IwUjBkx44n25uLYQ3YM9N/9rQfFWl3ZLfbrRIYEX0yoITREFCCiKn6mt4itrgp2k vMXjBhkqZXqX3eD7KzFUb6WtskWu1Zaw/QAAAAAAAAAAAAAAAAAAAAAACBAZICMm", "dk": "Zq0Pub8pWY+oJ0KBonmKUQ1ghNmpZOQUFSlbTXNkIWRD2MQIvduZrNJmKHv4N AJgouQrVpSM+S1CS+E+dYu2sTCCBuMCAQACggGBAPRwkVDxPz0+twyrx5MmFgbcECxW7 7oHgeCPLu8Kjmw7u+mD5nSLwkrMaOdmwUWRJYRXWCnQnJx+qMtp9XmS2irWnJge+4Qg7 3PqBe52X/fG9qCd+EqlkC+tpBwGNVWBtROkGuMs5ggEHnKWrZbMylBj8Dan6ewIU6qQk tZxmyqyYWSmR3Y3zoIF9QHUxwAhru3oFYhBQAf/X+RNeNPHn3wBlgDrlplQIgO07cdw+ 4rhFTDnDOIpE/EF0mBoOiwIikV7F71vmuonLSU+2eSBHnZZ+dnHONqj0W7mfsIVlski2 2rTGD4/Ai9UREX+EIInVC6oH0MtDwKsmu3ddsvViYmQpurISlmo3OnpKvWLocmfOZFrK SU4RyBKRCEttL6i+QTBoUOJtp0HAkrAq5h77/UrxGJY3J+ZWiGmAlFSgqDnlD3B2RZsk Ounsworth, et al. Expires 6 June 2026 [Page 110] Internet-Draft Composite ML-KEM December 2025 vwSVDv9WsKWo3JnP8x4xascrTn1wzaAEkGpycSq7JgWKD7lMTIO9hOhhtmjoGN+GhkTu T8amn5ZTQIDAQABAoIBgBuBYTCw/NM47+Man0n1Eqxx7dX3cGFH//rTUc4vK2iNbi8wG uoJYfMFvlYvj1bzJrwWEgMeiMjpTbgZ87fa6PbCEHvjnJy5EgjCkClNo63fcxgOvoYzz B45VUqb/jthbY1IvYfLoRTM1dpCD0V1RNy36itUSLO5GiUKwKMlxHaQ/PmU5lysme2ym ue6WCwxHhyCLY4X/YsI1vL7Lrnx8AXFrenrmJYm2LT/EnSLR5rQihBnJ2F5itdnts0HX WhgC2rJGNm+idz0Ykju1nm6IZZGGFVGXGC7ZUxk9a9lMK4cgLDb3cSFNoCesfRaOgJy6 T4++g+L/jIOuy98T/zpod7Jf1y9WyqgLUAbfTY1S3YCN+iL4W9wXJvYWcufhKLoG8EDD i+3kyYsTvL6pLoWjMCNJB5ZuZwkk6KLf8WXP9WtUQ/PXyifVLZbZ6gtklO9tjm6UEIMS 5uEfnBx+uP10p3F/MyulaizMWwHKJ5OL/BnYnPEzmAfJq+oRJPO/i+RtwKBwQD+Muctu KZPM/hivFdEhUM/BFvXBJLlVb+GK+Bjl1otEDsVpaQcq5KVncYrPw/Hpjt2LsCBTNqk2 Vy+LFopNgXbwbfsejDMUX7D9A24TGO5vHYS2agxmcPhRvyBk5u3E3Yvt/5Audqk5g5CZ xN+TILVGQr0D7vqux0OJrjFdxz+6ozm8voFtqDCG/5zvF16PEokImqu6ecCEoqcN9zNF L8h2xAGWdY5eSHfAkWG8he4pFjTf1jC5X/zOsv0OYL6VKMCgcEA9iv2WeTlYiGyjZngS BnfipcVo/domP2IK51D1udZSl3S/E6i02IAicE765Atm6D1IhEuoA/yD4Mu+VRWyoXeO 9idGCRpSpLsn3deRPzzI2OS2cCp4s6kbP5COe4ziVTJULJBEp1+Wo/3D2TMuJOd9vU2G 3ITFfUSJdbKdFZf7MHv0Nkl2QeMNlAszJpBvt2shI+A1YqlhvbNB8d4MjvMXD3KigqJR /etRdkS8uQjFh9BvID/GC+HZDaLA450cYlPAoHAIhULH/s4+Tebnwlnnf1MJd/cvHiVh YA4vLGXVWMOqSoa8e0SkvGCJuNPla7P29Hy+QaNswht7Fpkb+8ca5gdsvhHQ8KiVlK67 2UCjepYGKgnIKHkRjo6pDLTWkBDSYmneABwa5c/tIpP8SFG4NE7XX0NFeoiJPfPjn0sm vU8gwVJvRFo6mkxJrWAKV5hHimFO1EOAsPDwGhiA04OIcUdV1m6zU8wROZz3yW70rsU6 SHH8xuI+CCzRhZlECrB3/SHAoHBAN/h3Zul6+QSh4P2pR6NwVsWywyjTxKMydH4piEFq JRUvjTPA5DBeYHPJsK3DnOSsD46aDAUMG5hPVBunrxzgUjmWQEC5Gt5MhBZjHeroSjXP 1Agw6DNlIa3ut1awK4uWSS16S6X47lTYzsxzmozfp+CJaJSXf9DMi0NqnShtX3qZ0OGq cA2+BLRWdz+kbqXenXY2S/cd2xGevOPOsZc0iA15kUjDfVQ0NpMcMpMJ4jQBoX8v4Nsf nLqlAU5ArfbSwKBwCGCm84GlXfAWJe+iSFyg6wL4gqaYHwPV0tyKFZ4v+nZE2L5uL7QQ Hrl3rd5PvfZP81bCbaiHtQJVtXvaFmNYc5FubZTjY4yuPh5RiddkT5GdZQTwGjgrmO+u 72oUHFxopeLh6LuHj15W3pwYjXdpM4iRy7mlxKpG03v2kofGMJgug3SQmQ4xBZsD/gE9 aRjBhVJPJ5PgDyH09fV3QLbSU3yvpUNRRe2UORyyKSRh/rJ8heNb5G7PyN4bL6a6lnTI A==", "dk_pkcs8": "MIIHOgIBADAKBggrBgEFBQcGPgSCBydmrQ+5vylZj6gnQoGieYpRDWC E2alk5BQVKVtNc2QhZEPYxAi925ms0mYoe/g0AmCi5CtWlIz5LUJL4T51i7axMIIG4wI BAAKCAYEA9HCRUPE/PT63DKvHkyYWBtwQLFbvugeB4I8u7wqObDu76YPmdIvCSsxo52b BRZElhFdYKdCcnH6oy2n1eZLaKtacmB77hCDvc+oF7nZf98b2oJ34SqWQL62kHAY1VYG 1E6Qa4yzmCAQecpatlszKUGPwNqfp7AhTqpCS1nGbKrJhZKZHdjfOggX1AdTHACGu7eg ViEFAB/9f5E1408effAGWAOuWmVAiA7Ttx3D7iuEVMOcM4ikT8QXSYGg6LAiKRXsXvW+ a6ictJT7Z5IEedln52cc42qPRbuZ+whWWySLbatMYPj8CL1RERf4QgidULqgfQy0PAqy a7d12y9WJiZCm6shKWajc6ekq9YuhyZ85kWspJThHIEpEIS20vqL5BMGhQ4m2nQcCSsC rmHvv9SvEYljcn5laIaYCUVKCoOeUPcHZFmyS/BJUO/1awpajcmc/zHjFqxytOfXDNoA SQanJxKrsmBYoPuUxMg72E6GG2aOgY34aGRO5PxqafllNAgMBAAECggGAG4FhMLD80zj v4xqfSfUSrHHt1fdwYUf/+tNRzi8raI1uLzAa6glh8wW+Vi+PVvMmvBYSAx6IyOlNuBn zt9ro9sIQe+OcnLkSCMKQKU2jrd9zGA6+hjPMHjlVSpv+O2FtjUi9h8uhFMzV2kIPRXV E3LfqK1RIs7kaJQrAoyXEdpD8+ZTmXKyZ7bKa57pYLDEeHIItjhf9iwjW8vsuufHwBcW t6euYlibYtP8SdItHmtCKEGcnYXmK12e2zQddaGALaskY2b6J3PRiSO7WebohlkYYVUZ cYLtlTGT1r2UwrhyAsNvdxIU2gJ6x9Fo6AnLpPj76D4v+Mg67L3xP/Omh3sl/XL1bKqA tQBt9NjVLdgI36Ivhb3Bcm9hZy5+EougbwQMOL7eTJixO8vqkuhaMwI0kHlm5nCSToot /xZc/1a1RD89fKJ9UtltnqC2SU722ObpQQgxLm4R+cHH64/XSncX8zK6VqLMxbAconk4 v8Gdic8TOYB8mr6hEk87+L5G3AoHBAP4y5y24pk8z+GK8V0SFQz8EW9cEkuVVv4Yr4GO XWi0QOxWlpByrkpWdxis/D8emO3YuwIFM2qTZXL4sWik2BdvBt+x6MMxRfsP0DbhMY7m Ounsworth, et al. Expires 6 June 2026 [Page 111] Internet-Draft Composite ML-KEM December 2025 8dhLZqDGZw+FG/IGTm7cTdi+3/kC52qTmDkJnE35MgtUZCvQPu+q7HQ4muMV3HP7qjOb y+gW2oMIb/nO8XXo8SiQiaq7p5wISipw33M0UvyHbEAZZ1jl5Id8CRYbyF7ikWNN/WML lf/M6y/Q5gvpUowKBwQD2K/ZZ5OViIbKNmeBIGd+KlxWj92iY/YgrnUPW51lKXdL8TqL TYgCJwTvrkC2boPUiES6gD/IPgy75VFbKhd472J0YJGlKkuyfd15E/PMjY5LZwKnizqR s/kI57jOJVMlQskESnX5aj/cPZMy4k5329TYbchMV9RIl1sp0Vl/swe/Q2SXZB4w2UCz MmkG+3ayEj4DViqWG9s0Hx3gyO8xcPcqKColH961F2RLy5CMWH0G8gP8YL4dkNosDjnR xiU8CgcAiFQsf+zj5N5ufCWed/Uwl39y8eJWFgDi8sZdVYw6pKhrx7RKS8YIm40+Vrs/ b0fL5Bo2zCG3sWmRv7xxrmB2y+EdDwqJWUrrvZQKN6lgYqCcgoeRGOjqkMtNaQENJiad 4AHBrlz+0ik/xIUbg0TtdfQ0V6iIk98+OfSya9TyDBUm9EWjqaTEmtYApXmEeKYU7UQ4 Cw8PAaGIDTg4hxR1XWbrNTzBE5nPfJbvSuxTpIcfzG4j4ILNGFmUQKsHf9IcCgcEA3+H dm6Xr5BKHg/alHo3BWxbLDKNPEozJ0fimIQWolFS+NM8DkMF5gc8mwrcOc5KwPjpoMBQ wbmE9UG6evHOBSOZZAQLka3kyEFmMd6uhKNc/UCDDoM2Uhre63VrAri5ZJLXpLpfjuVN jOzHOajN+n4IlolJd/0MyLQ2qdKG1fepnQ4apwDb4EtFZ3P6Rupd6ddjZL9x3bEZ6848 6xlzSIDXmRSMN9VDQ2kxwykwniNAGhfy/g2x+cuqUBTkCt9tLAoHAIYKbzgaVd8BYl76 JIXKDrAviCppgfA9XS3IoVni/6dkTYvm4vtBAeuXet3k+99k/zVsJtqIe1AlW1e9oWY1 hzkW5tlONjjK4+HlGJ12RPkZ1lBPAaOCuY767vahQcXGil4uHou4ePXlbenBiNd2kziJ HLuaXEqkbTe/aSh8YwmC6DdJCZDjEFmwP+AT1pGMGFUk8nk+APIfT19XdAttJTfK+lQ1 FF7ZQ5HLIpJGH+snyF41vkbs/I3hsvprqWdMg", "c": "1e5BhCncOO1BFNG65g3YBFdZnpBcc6IN4viNXTt/Z/7RbUEhc68Qh2exVStm/H 9z8ozsXr7bDNPIeMVac/OgnRllO/PtDRZQz8N/JCN4CVViV/eyNMM04oRoF6yOkpagOF tbpMcIu4sMgzPkW0Y0Vqq1tRLlsBAZk48yM7pAavqHtDXoVlyxz29SzCzSQ5RMa0Sfdn kX/YU8wZbl6NTUcat8hFqKxoDMxqcIG8rSiT5tfX5Y+c1HO5K3HW2HUKau1tTNjSXwlB VHM0m/Ow5rdMsKz4E4fh+nMj9EFGM03wjhiAPNWgxQE7MNz2rCTASQtGwPW3yTjKgEF2 BxRy6Zbt7tas66P/0iIAKbsvXIlz/Rzwsa4pPxpJTyClrvHd4ElfEUdJxCP+IGGL6Jks 4RzMblrKAw6oWHWG7lSOSOKgQYXt2PP/xTjmKHUpcOYLOw7bHlIAGdaF5VqJb8ghjlYv akBCBVfIt+DJF078HZJYs6MXdZMI5z1gUnjCS4Z0Sv95xXYyGpNE44ijtN6krOpAQNEk 2v7dYuBEbRFs8fXycg8bk4N+1bMyrUjCXBalgs93OnuUoJtzUEQ5MXuqOsCjQFwQ/CkN /Dv3RCn2guD6mXa6lpuM9ZiC/UjKTIUWrtpp9tVUkFDkWf8QjI/kD69qb1WjIAuIA6uZ cjiDg7xEx6Ypm1LNxYUYndDXm0ZiuxyLTfvvqUbwThjC5MSA+4vvefgQf0syhCUeDxZG z80b17O4QqyAj0pz61b/Mb5xCQUGu5QlUJGI1b7g5ZvSO42tbgbUYxr5/BkSw9xjDNrK nSDE4eEInMc3FFXiiTHTNf7mzhdXWgMDj/FFnBaK2adbOhJ4ljYodyVfArFO9FZCyOcH wS+uftkOnVJHpMfGWVX0Lar79SWSCLSH/HvJdEKPqHxAa/PJiX6kpVGA0a03rrt7mxsU unce99ChIxmQjUA4i/30X+L8o+y0skxOaaAXcg+HCxj8TgJ6OHILR6p9VnXZecY3bqVv Un5/eNRzY4kve9sdjZ0KW0cmSUa/FYY3X69+R7SUXQrctwnq8ho0IYCRFASnTnYfPRu2 UaAXpCk30hnBme4c6WDthg6DN/+w2LB6Yagr65gfbWyu1hXMLVXGqObwGXZJomWaV+2U MUA/R44AHEV6NGortXFS79L0ciPpQ5lO7Tc2RycnaLbjCwUv7zAk/yb5+o87MnrFEZle NVHYuP4z4aSP2RQK0ghCdNez6g0pzCNmPNOpjNq2xqF7NFMOhTrv1Fwp3RJDZz3MOlgP cqb4OzMYjgIIx7eMGLTJjvKFNyZVeiXyLFkXoveD82auMk/wg0MjWUEw+c7ZWUrOO7Pf PUUDWToimkHDtMA2OunVY2jABaAyyMC/TAmr5Tyhf6XF7lGE71YU7NQSD0YoyMX0r503 /+jWknoPvOOlmWDBPTuLP26cz6w+taVA8ONWBXsgX6tWjlht3ELU1elvTzfPwB0LzHqJ zq9yuUVO/jvgqYyH2hMGpteoOdwosnz1K8eS2cIZLzUEiCCAxqgbyhtfEKTplcnvVWph jSG1nBpwuKEzPBzrjwRIYuEcDC5jGxLqrE95cJcJjythzBAy543wXfs1cv/5oFZll5ON HiP5kxpETW9h9oa37b9jFAPTxY07va0KxH6HKLxbt7tOcnfjNvV3F8gEo42j/pcHL3ns +LipHFWnMJlJDPeJ7fSG+T1wFwT5ZWq7FygDQWM0WeRqkF2zqe3BqcRkPgeNamajyupG 7TVL12xDNpiL98uw5zzvVGA+k/BT5b1Y8XKzoaFVBrD1HLGsUGHmAmGoxMW9zIYtPk/C P31OE4dYVro8ZIW2K2JlgkRgPq6DQgK5y11I9H9dI49SV1mNG2aK/crafM4fbPEuuPBc RX7pyv7fKnxTYmmbdGeT7AAWaRrjpoB/hzjX3KV9M6uyT0YsSEgXrFyMFDdlLVCrU6YX vZ4jHuZZX1ZGpyZGCOPUGTTNUTo7RtN2oZxq2RKHjb//QHwBxpGSVp3faSpWOabB0QAy Ounsworth, et al. Expires 6 June 2026 [Page 112] Internet-Draft Composite ML-KEM December 2025 xawcXeSxmapazxLPIx449S9O7vtrLNsQIoMecS3AeuzygCYiSBnrT+zw59g57FH+CKOx eHb1Yxi8mCd0bPrpA5PlBC+qsKLg+ca+rtdg0Swj4SrIV2N169AL7bKduxzpeFpYR3VX aypFh77Yv/hDSO6Eryl6dyPyOfvK/J5gtHwy9r2pJ+xaF5KlL/YoXl3PdAMSetWAGoLh McBdtWtauVv1MekWAOUQeV66E9u7X39p4p3y19ZwGuhTpf3tpeVhcnnerojeXORWz6VP MrlTzYBYjbJKRV0rJ+a5MPFDgUX83YkJLcWgChcKS5CBR3/NMAHPh2Bid7lDtOJQkT0y 57LDnN6H8jUObT/HCgKXprxwzAt7DdkVQ4F+bmgexCXop/UiWNZlyHuFzonPFf8JA2YX gz0j6JNRQrBUPE6rf8pCujMI3uF9D6hRMUF8y+YjwwjGaRfiYHhK6xrqRJfsV9I9y9Am +1w3Km7+lqBgFruw3n3QLjA47783bYVF33tJ+XK5JgjyTFwaE4KIQsOdYE6Y0ARncrEv 9cbQgvSvOQs1IsiYr0WPJkRiI=", "k": "2Xim5hJ3j0ycl/ptWFMSpwzOlJtVsAF/brkpJMPp1o0=" }, { "tcId": "id-MLKEM1024-ECDH-P384-SHA3-256", "ek": "ixo5NYRou/iPqUe97tCt1SpP6/IkzXdsPogWwIk2wiSk41G46nR9K+Axv8BnT vHGpwNRcqpg/0tFXhVCx1Jot3Af4qs8HOdcvORWYFGAVhQt00x+u9Q93mmMZeUEO7jJi LmEaXKNIKqc77xnGglU5Rli8QIv2kOH1UOCxnCX9qdWb0wTk+sfUKkMmNGe3rtG57R3S qWUyQmyTHSDvGmEMCMIk7RnMyRbM/cA/5y/fRYRDVVqZYkd6gMgf2VAv0hjNMOZAcVnq wEexMBHw7gm3ElDWsOAYpvI0Ah7feZb75mCslJ+SLdw+Jtdr8aOSOIZpMxyjMGEpxOCG CRpVwUPFpx3qOsuxhg6xIHEIUSdqlKfgxuf2Wl4U6RY7/m28KcEWVBevfmZuECM3SKwB keEiFuSacxRq6qI0pGkUuSP2TcumdKjbKSnSUZEn3qdtpx8zioaeppa6hejsdAnHDpvu 4Vu1GfB/jp5qFmO+4aa9nAFVlaTuIPNDBOaX+PNextnudJtG7TBOcmQOLusEZhg2iUdr DsV0MY5kkI/qEAE+ICu+CISQ0CG8cYZx3uy1dGsXzI+TlrIIplIKAB4xruJEcUDP3eq4 HjEojm51ip2qOMtpacVfSRQ3auredoijvYvdem0wPyQUtF7xxpHH/A1lbVjLmZvTaVot wUGjMQoATNeVhENqBykuVTOqpKXt3mlDUOhkfKQaIlzL1xVG/OSqKtTM1MWezyByzcDe qwWXCYhTymJ7bABO3qYUiCfKYmGj4s6Viw/WmUHGDMWu2VxyMIgxWE4nNt2ctCO/Mu8l xdPOiRKb1GNrJEyTpSzCWF8O3Ef04SJZjaoN8BTBICa5cofBCF8jfsV9OsZj5nPUTxc6 PANerbN0FyM2WmRzGvItjeV6mI9WfpbKhW2CcixB8gP0iBb8cBqDusc7Qypc8oIMukxD iwSczAWM8Yw5JuM2AUelPuKLBRu4uGGhCNIDKNTs3xU10yfELrPFEhd3nNfrvI3hQGvu aKIXNFdjbyQ+qat6zRQjKGyRLpLf5jHEtYWcxchDAuJT7SbyMtcmoisTUtkXRFSfQanL LuvwfkmZpGuorA06XsK2xgYclIERhzMGmZusGq14nzEjHK4uqJlfpydGcySuMeaVDCmk kZZoek6TxPFkwAHt+kCNjUu/Jg0XLS9MMnMzrlKqfGSfVQsT2eeoplsaWwfeJMVZMh2V Fwy0VYDgwlNIikdX2BmMEm2ushao5EM78poV8czuGjOq9QdwHRp70oRv3GSocolfbiqf 9bB6ELNgnIyVWGpHfpTMXbLQpp5qrE6TZZtEyZ+hXLAarMJceQiCXqRaLifidulq+dhN 0Y0Nto/WUoWakHG29skZ4E/GsGnoVgnniYVBTs5+NiVUDO7C2wFl+udRxGOQpwVgqQMc CSmutZSfvya/FU1fno7J1CS73dxxgcjARjGFIqqzjUyJeWIhYwluvpmKGAUPdF8noiFm kaA5AaBQ9GNgkynTdGWM9tdNFS6/fJXHVMrhzpdU1iTQFOgUHhzzgQAN7phFdhBsGGQY XorhaEbwVlGM1akJIdjrchubecu5bsPmrdKr2SRjWgrqAwg8VBTM2EvXFwYPzEvISqxS gRUYscGMrQZOlGexAR94qKOusYdSyRMWjy7sCccNIp3NjsEcjWUYZIhPZwcPnNCylBGx fCWSxIrcaTNg7G6rFyQ8cPPguk8vjp37zU+dtyzahKlwjxRwrkO6uMjcMiJraUt28Mqv dkVvZprnepMVUFPT0Ymihiq2gJwatqCLecHp0AppNLF3cmApYCZ85HGBePA3EMql7UI5 1cz7UoCLlQI66XEPxM8yfRaoTmAuHkB1mnNKDNzqGXOeJgox7yJT7CVQeaBodYOGCdVE 8zK9SpYAsbPGtISeya747y2beimGCC2FYFKRvpDVfQyAxc8S6wYZGosMgZUcuVZcDWen oJNaICyk4ITDaHFz+EFXRulJkAMEXs/cClMZKeNApdZQlFCbuwIkXB3plUOebl3DIsw3 OGmD2Gi/JaonTvMaJSL/QKO7WRJLJer+CsbI1xpO0xXAOEjjBWcRGWvWPoEbG1x68Qp1 iDxv2DQp4I4x5N+E89ECT3EiYrsiNqjhHwvf8n0lEMFk/V7mYJROFxJw3ijApOSl0evh Chv3UCr/0+gvero0zM9ZF5SmsNApDUZTLf8xwjHOPJSJ8ySRwSc", "x5c": "MIIUfzCCB3ygAwIBAgIURxXJfPJiK5l55pz4cHMyxlPxi8kwCwYJYIZIAWUD BAMSMD0xDTALBgNVBAoMBElFVEYxDjAMBgNVBAsMBUxBTVBTMRwwGgYDVQQDDBNDb21w Ounsworth, et al. Expires 6 June 2026 [Page 113] Internet-Draft Composite ML-KEM December 2025 b3NpdGUgTUwtS0VNIENBMB4XDTI1MTEyNTEyMTMxMloXDTM1MTEyNjEyMTMxMlowSTEN MAsGA1UECgwESUVURjEOMAwGA1UECwwFTEFNUFMxKDAmBgNVBAMMH2lkLU1MS0VNMTAy NC1FQ0RILVAzODQtU0hBMy0yNTYwggaSMAoGCCsGAQUFBwY/A4IGggCLGjk1hGi7+I+p R73u0K3VKk/r8iTNd2w+iBbAiTbCJKTjUbjqdH0r4DG/wGdO8canA1FyqmD/S0VeFULH Umi3cB/iqzwc51y85FZgUYBWFC3TTH671D3eaYxl5QQ7uMmIuYRpco0gqpzvvGcaCVTl GWLxAi/aQ4fVQ4LGcJf2p1ZvTBOT6x9QqQyY0Z7eu0bntHdKpZTJCbJMdIO8aYQwIwiT tGczJFsz9wD/nL99FhENVWpliR3qAyB/ZUC/SGM0w5kBxWerAR7EwEfDuCbcSUNaw4Bi m8jQCHt95lvvmYKyUn5It3D4m12vxo5I4hmkzHKMwYSnE4IYJGlXBQ8WnHeo6y7GGDrE gcQhRJ2qUp+DG5/ZaXhTpFjv+bbwpwRZUF69+Zm4QIzdIrAGR4SIW5JpzFGrqojSkaRS 5I/ZNy6Z0qNspKdJRkSfep22nHzOKhp6mlrqF6Ox0CccOm+7hW7UZ8H+OnmoWY77hpr2 cAVWVpO4g80ME5pf4817G2e50m0btME5yZA4u6wRmGDaJR2sOxXQxjmSQj+oQAT4gK74 IhJDQIbxxhnHe7LV0axfMj5OWsgimUgoAHjGu4kRxQM/d6rgeMSiObnWKnao4y2lpxV9 JFDdq6t52iKO9i916bTA/JBS0XvHGkcf8DWVtWMuZm9NpWi3BQaMxCgBM15WEQ2oHKS5 VM6qkpe3eaUNQ6GR8pBoiXMvXFUb85Koq1MzUxZ7PIHLNwN6rBZcJiFPKYntsAE7ephS IJ8piYaPizpWLD9aZQcYMxa7ZXHIwiDFYTic23Zy0I78y7yXF086JEpvUY2skTJOlLMJ YXw7cR/ThIlmNqg3wFMEgJrlyh8EIXyN+xX06xmPmc9RPFzo8A16ts3QXIzZaZHMa8i2 N5XqYj1Z+lsqFbYJyLEHyA/SIFvxwGoO6xztDKlzyggy6TEOLBJzMBYzxjDkm4zYBR6U +4osFG7i4YaEI0gMo1OzfFTXTJ8Qus8USF3ec1+u8jeFAa+5oohc0V2NvJD6pq3rNFCM obJEukt/mMcS1hZzFyEMC4lPtJvIy1yaiKxNS2RdEVJ9Bqcsu6/B+SZmka6isDTpewrb GBhyUgRGHMwaZm6warXifMSMcri6omV+nJ0ZzJK4x5pUMKaSRlmh6TpPE8WTAAe36QI2 NS78mDRctL0wyczOuUqp8ZJ9VCxPZ56imWxpbB94kxVkyHZUXDLRVgODCU0iKR1fYGYw Sba6yFqjkQzvymhXxzO4aM6r1B3AdGnvShG/cZKhyiV9uKp/1sHoQs2CcjJVYakd+lMx dstCmnmqsTpNlm0TJn6FcsBqswlx5CIJepFouJ+J26Wr52E3RjQ22j9ZShZqQcbb2yRn gT8awaehWCeeJhUFOzn42JVQM7sLbAWX651HEY5CnBWCpAxwJKa61lJ+/Jr8VTV+ejsn UJLvd3HGByMBGMYUiqrONTIl5YiFjCW6+mYoYBQ90XyeiIWaRoDkBoFD0Y2CTKdN0ZYz 2100VLr98lcdUyuHOl1TWJNAU6BQeHPOBAA3umEV2EGwYZBheiuFoRvBWUYzVqQkh2Ot yG5t5y7luw+at0qvZJGNaCuoDCDxUFMzYS9cXBg/MS8hKrFKBFRixwYytBk6UZ7EBH3i oo66xh1LJExaPLuwJxw0inc2OwRyNZRhkiE9nBw+c0LKUEbF8JZLEitxpM2DsbqsXJDx w8+C6Ty+OnfvNT523LNqEqXCPFHCuQ7q4yNwyImtpS3bwyq92RW9mmud6kxVQU9PRiaK GKraAnBq2oIt5wenQCmk0sXdyYClgJnzkcYF48DcQyqXtQjnVzPtSgIuVAjrpcQ/EzzJ 9FqhOYC4eQHWac0oM3OoZc54mCjHvIlPsJVB5oGh1g4YJ1UTzMr1KlgCxs8a0hJ7Jrvj vLZt6KYYILYVgUpG+kNV9DIDFzxLrBhkaiwyBlRy5VlwNZ6egk1ogLKTghMNocXP4QVd G6UmQAwRez9wKUxkp40Cl1lCUUJu7AiRcHemVQ55uXcMizDc4aYPYaL8lqidO8xolIv9 Ao7tZEksl6v4KxsjXGk7TFcA4SOMFZxEZa9Y+gRsbXHrxCnWIPG/YNCngjjHk34Tz0QJ PcSJiuyI2qOEfC9/yfSUQwWT9XuZglE4XEnDeKMCk5KXR6+EKG/dQKv/T6C96ujTMz1k XlKaw0CkNRlMt/zHCMc48lInzJJHBJyjEjAQMA4GA1UdDwEB/wQEAwIFIDALBglghkgB ZQMEAxIDggzuAGOvmt1Kbp/arH34/IVsuB90BAa3sl7grad//QL0YB3Rq7aBTu5ZBOz3 50BBHX8FolkFInxIo7w8M43Mf9fOfDJyuWBRfbYH7wwiIVQSDlyEFI/raSN1DS6OGSUa lKIF2rELyB1nE9mVwr7FMF6n3CwqUgftTHs5Snk9TgEsFUT03WpPJZ2siR8qzJ0bniXT oJbvSZL4fvY2z+Eds869PExw6HQxRfppN6oARQMTA519WCnr1ldGIZtriz3x49a5YVrm 1iq4N5KouBK6L27snOPakzkwy5P6y8vE4TbB9PIARCGtXe3hkD2YCvnWR9F7FQqMAn/G ZWZOFFvmY/dDiQMsJPpYQXMT65bEGw4igJdxj2TccFe+ho+Nqr+///n/VVJmPl1YMUqB nbW+n9BEkrc/gQUac7hCA165juX4WqgpJQBlmwaryVbenHLtgqbwiG9eCk7X0UW7WcCh P3PUfnoJicYkMiYUWaJ4gfis+2vtd8dtyb05SAicVQClw69zUXedFM4mogktMmnducK5 EZ+0W/nX6PN/Xr4/8hI0FIuuQSK6I4kFhixzOpZkcbhCxvi6qYiDPm0hHV7wha7EPnlz r2np3rPE5yEkad7vEQx+57tQiPiyBpTVEoDoW75P0Tls3tWzo/GNgOZrKDmBD+bS2ZpP gBX56iK7/9RFjfyDmZwuFY8A7SDSA0e45aT7Bd9vYu2/C8ZlvZEXU5D3o3nyBfKjINqX hwrGrmK8kkB0TBQEHYhCBPditHKDg38NhDGWQ6r1QBq4/XETR1BbrArFt4pCTjyVg+kH Ounsworth, et al. Expires 6 June 2026 [Page 114] Internet-Draft Composite ML-KEM December 2025 F7gmEfx4unIe3cKPgdufE5yl5f2f6C5u+FsU4ylPhaxeJCcygBydWrtnbIL066iUDUOi 5LlVw48pTUet5/2RBrULtyz0QfveSiHc64wb4pve0iBObiDG+38yJGULKmyOfDlv3mJ0 ZlbnXp0/e2N99hufaqnRFq1Ep4upETOZW2Ptwn+12pR0VGr1Gzfz88qgzAx9Brqr2ORa 6nZe+d+fZHdXESU938Apm3mkffQWYE7KklMcu2b7RjTaj/tf6AXufwZaL273de9nNAZ9 s+9+lAPPYWHDGqlgSI5Ul8MfxycsreStLg5tQGol17VJXjAaFovy/ZKk/Dat/QQssHtQ UaJac5OuuGmk4GgQgq8Fjb+xmAyBCDcPSbeMQ7E84goOg3A7+rdF15z9f8Hn1YeBn+7I V7xAG4YMMwMAj9VV8pePaU9jfS4Xgse4VWuZwXUFQpAfkQxnoBY6vHXjLmtikcfWMI+W rLybJX4MgkrAGgCbLUO0ZZcBrnOtP/Jg97sAqL90ZujfzuW4PKI586dLU/7LO7290HGz jHMBJaNL0H/i5REdmg6T9lWM8kLXfWzdKiCiMoWgKiUWLj8y/dDi1cpEllDv8JDx8FZm AQodkMbIzCrKIhpPrZyNFkghyS9BQ00BOjX+rxHE2qE/l0zdfyYTkbqQuIpU2q3qF2i0 avhTPMWNBJY0PMg0Os7U+7w9cZp+zEQRYZetEBNYWSLh1n8oS/pwnJmC8e6r1987Ohw2 KVsCQ1hpOrlXX4c0C8YaHRDtsxbJDjtNaEtvKRgmhGmWHA6XvapKdmbS5Is1btBnt3Rt 4tqBONT8ZSG13UuLtvXez38hJKPswg8rq281sC8+As6nPXIGb7GpCfiuehpMgZyyNyxG 0EVb78F9O1KlElAXeB8JZq3euWRZ5jIvoGrctXOuH3dBFzbPBOKIkKRbjq8DbJ4BsA5F 5p8vS9I8oHv6y8OhPw39fZEM6YJkFRyFUPMCBdewg2Hj1NkwbedFwmfx4N6FZ8etEVRK YAlclSpKGi8LKIzLmKiIyqdurAdZjQn41iTeMIiZmWU1EPS8hjN98Kr3lFPTdU3xHUBU 2nSNveDV8PV/8iizv3aMwYr9XZ6d43qPiDbELYGvYZRg0itnktnplHAoOSfOIu+t/dw3 BHTS84WdJLk4YzDzY1clngihbnVDibwj/KMjzRml8i+9dWQ79SJQTathH2+sh7S9L9tr ouFKBw8DLojRxKkrf2+WB5lr5Bn6yDkqrT//NSc3MCOtu3Jf2o/xTsUzNAqi4Rpp92KE h6c+vPEjY4MAseFptityKltVGdfb3lhp67J9YY7mK5nU3+9xl0ufjwQQR3HMjShESCNi Rmyg0q79MT/xCwj257c/dDAe/5eIMCj8yqfWCo61EO4Fi/2FQ5krQIOmnUQCkjLlADLG KOLoq24rHuaKqPHft1Seawv0uIkC0dXdylVfxaoFmtoL4c5KMTPPJlqiN6SYBFNQGSMK VIQRtJP4GOk2gzzR4uBugA2/hTafZhxBZp3o2JbcE59jI4uejbYYHeC3eaElwvMXCf5U riQvWiELL8hF+6Cx1M34dW3nhe1pt0xT+taMQ0/YURNWQ6vz8xE+988UCs985j95gaGE 7XgsFHGIwTbp5OqdS3cS5PCO1COaFuUD2IYmzOgA1rFdkN3CP9vByjlEGRA+fIULvtIN 7CgrK2lE54RWNdodo33bg9k5vnx8Z+2BM6VMbyv+d14SU7ugEbRpAft308CHF92pZC0i L7B2ejEjY7x6KxSj3xZNTXt/dQFhvCnwwL329Jjbw5VnQSy62xVnI9gfqqqXJwm5cyE2 2RBOtMxr9GxSmbmlcqri1O8FV4PY3ZJDm5OUkDgrAzdoIm63EyLrPHyaub9Et7GidV9D IYYIl8zql/CdfNh5RzkxwCOchApbJPOrph+xMiVSlOptQzjCBLe7N5gXayzX2d8cI9QB 9VNFMLT1V/Akbp6JxQ0GJ3N+5aKA7j4xyaey17xUceY5It5MuAitgrTwFeop8P8xFnXz AgaQd6/EwJpR2LhC8hDQpKa4z3z1XZnehw0NEhRL9zNHtsOi9aaYHflORmYs60HWLi9Z ztMrGgtRb8AOD5W+l8lRhT41SR4AnLl0R78/td9+P54qlZB/effP5pgUx/7rdnG1RMvi 3V+ICrdarMw7idAWXvuusYEBYNm21UfnaeNHhMGFdfwPwB7BcVmPE/9UA4yhlDoESSQO oT2G/6KREO+SmYtvfBMnZe09ByRk1wQdiGrR3vk51uB0RiLpdYrnIlWd4T8U7sDbkMyJ sWrJjo9vX3uE2x/X6SOPWjZ9MI+sFaFkz031pbD1pdz75MDRZQJxuRgeD2AXb5qMPVAe iclqQokLbm0n6KAq3oG5lXmdSq07FwLXWkXSiEocWQQT22uCx+kegHOvwf7W+CbJGu8f Vqc0fR8S/DVoZJOM5V5PRFBEpWUyLgDrIeRDAXRg12aqI+1TKrYBUTtM3FGmXjzcc5sA b/bHiq6ToRRbYulmedCDX3d39z+Q2/mx+dYb0CZEmG1fPHZsDwhFw5sd+bIrj68B1ar2 lEWTxPL+oX4ksjA717EljrY7S/m8o+XE9kmTcjhg3T+Ql4wPQUhAfHetSJ9w/yVMDhp0 6hA+wl0FMX38fKmXYHD+DnVlKjMBJwvqgNTSHqQS44ebRDGl3PGvxgeOWcmhVVOlQKqM LceaFMdXATU5SNI4aav/10tlO35xEII/ha84AOLsWasJJC7h2UFHSyXasS8Lhjak1Gir mNY6EV52BOZ7qfXxQlevp5VZ5rmNW6y/1xx17dx1M8rw3TjEex16wi3X0yGlPD6RUAOB 7tz5qhXu9hSFlkH5f2FEkfFHeiIQnD3p7EC+m8kIaC8imHYGsFD/CPqeTq3oh3i3M9p0 r1HXuJkMCRYyZC6WbtP6Oc/ZWOafQnFdWLsBTphIdFLADs+fbMAX+If6lZ4NkhYfOT1X S0valtePld8Swr6QUomqxI8a6NHdPGb82xHXC3v/Js2tz403HKCMKWtP5QLW+AoazFGv 3Lq31mtWhnNFnzdHcn9JA73vKifEGhAi/g4nSVBJnnbwvqvGnPETHSaQuEsAqICcRH9e RoweqJwxptiuf4SxCnw1b5p+1yj+SAxNZ7eJOEazicSnvz/zXmA5PxHVCEXrcDEFbvNv LuVYzDJQ6NnlZtceRyF2FGHXbT6oahWNVQcZF/nND8IHWxaacFbYipWXk1uxleRKpW+z Ounsworth, et al. Expires 6 June 2026 [Page 115] Internet-Draft Composite ML-KEM December 2025 Sc2XnX8ZUcH5Cv+awcxVOiw73PquoBweZuBg5VylqKye4yTBsykjUVlQGu4W2sJWagzG tio2H7JiXfYR4OcutieIK+87uNUOnkCsbLwSMMoOz/ZpZqyUyDXqtU4M/rGKYerFQ8qE m66JWzg0xsq9G4WGlmbmjRU//DNjOYqhHkkqhdK2FYsICAVgqAJWk2aAewF/1auGgjAX QOSx1diXGheeUHD5E+kOB9CZVKelKmXqn9Yarcp1doHZHyfDe+OXSWdDCGaxAUxdZG6A q8DPEcXW3xobpLH3IluVsdfg5ev0BxEfIlFolWyNwsnUAAAAAAAAAAAAAAAAAAAAAAkN EhsiJw==", "dk": "Q9ISvWWakiTYKXjHBCx0aol+WaeVqxS5b+0ITh9vx6qu+PMj5jKaN/Q8SUYnx 0YUyBJvGhBOT5Nu4UOCrMs9fjA+AgEBBDDQ5jo0YydNR/k3kMn+PzbwcV/iLMVjdl60p mj1kwq2ZswEeGAevCGL9EVNivsr3yigBwYFK4EEACI=", "dk_pkcs8": "MIGSAgEAMAoGCCsGAQUFBwY/BIGAQ9ISvWWakiTYKXjHBCx0aol+Wae VqxS5b+0ITh9vx6qu+PMj5jKaN/Q8SUYnx0YUyBJvGhBOT5Nu4UOCrMs9fjA+AgEBBDD Q5jo0YydNR/k3kMn+PzbwcV/iLMVjdl60pmj1kwq2ZswEeGAevCGL9EVNivsr3yigBwY FK4EEACI=", "c": "EljjNqxwBaXMI/FdoTKBBuptgrihNlxWzjuIpsRqUkHTu01pVqj5tya9eqm+zS XDoT4tvcSUytcijagxkABD5xfaXo00HmLRThQ2yUhwecH/m3Sxbz8jl4MlxiJlprxCQz GxTfUn+SDMAaheQPD5vTuLu43Pdp4aiG+aFSYjkTA/Augp6zMHhTwMv0+nAW6/Wll3jm 37cF3mUitLJralBuq6uFCMqdS2iISku1xtywBNsp665Zpkunnqd5JlprxhOFRVhg1VUJ sSWbqa4kqENcTDTYu49Kp4wYlTHCl2cEtmiZgmO7hUtk+5B3X0gUsOyXFtPAw0YQU7sm iQZ5GY8BW9JzMm0keFwXAMeStOcn2yVWGzBSY8FEDxkCt+zZDybIVxhat/HIYCYWd7gI yoEP6vVu+U30TvSoKmf5dfoygBVh/4rXqLzp9LGeC46Wv0wSY8HvNckk0KzFDI5bGlZq SSTOkU8S/NrhuYMgR2LM3y88Wiqd+Y+jmANH8Ibjr7MSlv5oWNLIHEE9fqHZf/yD9Pos zHIhxh1Bgaa7NdkFBrhn1dGZYaMkb2IlKGKKG23XHbQzk14TnfxyBm8NhFilhPaesm+h yd2m8lSIYWlPFzSnbcQlr42rMQzXX6meul+ijSM3B7flyP9qN7ySzNNDH81xk1mre8I8 nDohwrcFMJiR5ms9DrqXq47nT7S141nzcyaIbKnxAfxdIP2ylhJAnZkHBJTeoh8goJhl Xquqt7afd4mZ6u0uGpv9jo/DFwrWyW7QCKA7PL/MmSLzX2JDsK32dGTD709wyzKo42F+ NjA717kwsKc/EuPakxUMiXL93vLBt0eDONeNbDSckj//3Xt45a8YG6OtcZeIm8O1MDpu QTkxb+J+iqHj16rm8dI0VAr9i4fpxAXM/lCpTRN6KB5dTaI4ikscX/AAvjNLf8ClB3oL FAVObe5PSLS9OabzkaScwTJBOhFoO/AOjhEe5lbWJJCqMORYPai2fqVUyCcieg3lCB2r 0KeQidV91/64RH78WEp5vDShyVYYhUNnKipZePmPf3E9MBAAflZ+8JBjaZNvxAyL5gNj uyrfEN1Op43r28wzT5HDc4hh/laYV12YSOZG7QFxoTOI0N27WYJsaELiGfdnJTI2SSxC J6KbGDxwm+M6X0M4EywfUTKC+jbIluVMF0g/Hqe1eQ4hKbUj8Wqo/op0DpurqBhKOWyq ajsbXsk+DrtrguAP7syEeSJn5YLs6liiYzhiVC1pTSscmE4s2uanLcZLKj5HmA1aPMb1 PeRiRfElFWeDuWAA6YArWD6F3PNSJR7cHyF+l7TcMijXB2kqAqFO2GKuLjY9SZBym/gc 9sjKFkhAFWI/oFkYQinpsY6E4cb9H6FspjX7YLRBM5bbx4Yr0UtE24QwMLFQybhfKZf4 lTHzvl6UwfvTX6QenskqLS8aNFy/U8GPTsWDWNDXyB2VCJIPTj+/C/hwVnVxC+YJh2/J vWxYwVVEg6fAJFjXf3r0jqv02JaWK8n6fbh3LyN7MKWQZpFHLXTGs0YhhhHHKo4ASAzU r802vGI/17I5utHsgkFY4aGBQ3rhxLIF4Rgdv7f1HiuFkiZRJTiRG+wElPy4cMns/IxJ RbssFQ6E70oUPFfuc+OF7ihupnlUHS2sNMZjsaMhKb9xEBLpBzP9Rl7m2nhK5H+mUkfD Ei6ZyEOx5VV899cYxle1kmfcOWD7iXqaTQ6AJCQlNRViVRQ2LWLZJwQkQfg4EHqSDcn6 5cudtR1T3V45Vd4ncHy4RBPr8EONOKvo/PUy0k0cBUr0LO3wUkHvAM3dCn4WUWcPAExa dzscDFMX3U6GNvuzoPWN0bsTO9QieQnwD3Yma+d1o8pKJ8Om7bW/T/B4IopihLY05XMP DmuY8RTHbYiNI8zd+Kc3iD68uJRF96BZZz4CPiOzFOt6PXDmCw3ckqTi9jU2cZhB7pLn Pn3LHXwN6aAlFt3degMjJPhJFYxqEMxzGqyZm24dB8SOjmIVU3l1ae4sFkwAqedJxfj6 7bVdyfR1BkiBydVeor4cNGSwfazDBwGleLowB6523YQS3ZveWQW3JUHEwE1HMWxFEyth hNYEO6TDyuhWb3+pnLlV5Akw2jsSBds0V1G2FPJArqXIjuog/xpEUPuxMTwP1Rrl7OMW 2JqhNxfsUT4hHAjP7bcLMRlLilF6RbpKmY4UTQ9DCA2tgn1muj", "k": "wFGAu9tvZv+TIBS5PfgrfpmMvPm6NYJRbKsDydrMt2Y=" }, Ounsworth, et al. Expires 6 June 2026 [Page 116] Internet-Draft Composite ML-KEM December 2025 { "tcId": "id-MLKEM1024-ECDH-brainpoolP384r1-SHA3-256", "ek": "IdB5XdmgPgxNBZhA8PBzE7RoL7I7chgC8ycw06ejhoOLeseP9+ydagxezvptQ aN71niDOqBVO5yFEYZ/qskzs2WWndKObbmffUxbLKd+sGs3TJZWnkLOEKY924pdwAiUl qS4ikdxrrcXqktljNooelpanCPPMhaDJOBPlwJpraNsQ7eyc2xnzKGBBXVn5ZqbHSF9f BOlMiKssngq8STDWsQQoQl5Vdp67ZjEJ6abljcll4tEBCclJaUCeOoWFDVy75e1zfQOD raqQBWuEGwrtQxL1MOqVLsmPuVw2qYIpUGqcjQtRMShd6pXotlVbNUE61pk65yCIBqG0 ggNqJVpslGpiMu6aCg+u8NHT9WsLIDAbCwjeyvFTLYsodKKHQAa1lbBg8RKSjhWVmBk/ ugPT5Fhg8Q6OmK5CZgRixVtoYxvAUIRDgwGYBsWGnBea3aqgqKQYvl/87xicEsSo2Olm 4SdlClZTrF/AteevhF9ZgMTiXd1pZJAxPbANUZvH5puFcUgcRjKZLTNpax/B5sI2vBcP bDEopYCaYCLLWcwTMStuEl8BhSpzheI8mWSVWm5jvnKmdcHpYNjYykcCyhKloCyAPpaS wIXZ5xGqdW++Bgehot6LncylfScKss2prLD+OWFwUFIYUV0xHgZsyt+d/Z/izYcTLdFs xi9PmoOS+FIavtRmvTHdIwBR+IR0jUiNAO53unJmwhM40VxgMKTntJfK2MD5EaL0TuXk YNoZ7eVLGdaS1ymhYeepksUtCczXMktusaRmYvNmFWn2zuLc7mVOTWhtTMvJZdSXQBPM uJ2SqkNtUmoxIrLYBBKgIlh/6cbLQcqohZXhcsCpUIBlBSGgZXHVJFYJuuqr4EtwHlYE 0oX5+WzJfOCZ8GV7bJ8HimzLlzJona+Jmc2P5c0jUy0Wky8Z2MNQ0KrfbE/BFpA01GQn 3emUNZG7nhASUZjX+F3o2iC/jOGegOEWdCVxsHAOgIZ4kmNtBAKY1JUzyMLIRy/VkAMm TpwWdeLX/kAXmw3QLewgHYQYELPPYFDb2afb7C2j0mftgxY5nCCTAJCNjJQrkhxd8NiH YCjJscHW6MjpyYyz9dUNSRGBEi1wbOw1MVoFPE3yNXDSoaFYGYqIuaESpki+vN2dWAOQ 1bAzkIEnfyb9aCMnriEoXU2ibhMrXZfDQrOovhGqlgT0gtWINg0Fsi/Q0KSjNtshRZte wkv3mAaWTu0yWmy6CYtwsAzcrcx8HcWKlB8KDZWzddJpMdeE7BibMeEE1caTOJepGEtT GuE2qobwCuVHdIDu0ciysOMO8E9CDRmAthfJ2wPnmxGp4VPxoy4GvM2BbcvJ9w5Paq7/ 3SdNahznWcu3IuFYspOhGfM8cYum6t8G6OsYQg1dxWUaFyxQwHPBMckUdYvJrMjq7oOR lxxikuHjSqs8vN+YlO2QwVtG+RxkwbLPkZ+WvgyoGGoFgQLKGMR0ZCNkwVPoomfIQVdT DgbBPi5/9CUfnB9khQxp/eMwJsxFTW2xfcSw9m2mGKMusMOiXJundyl5pGSeeAsDPywV Yif3uhXJKdr2satGpipj8qsbhYpPxdhpLdSXwfLqfsFkYRrsAKSsgVAjzw1PGwOHzEcd NiUikKa+RYij/bKaBcI0iGWKnmefqg6FEIjHug+OLybf+WV7igmWEhK1nx5eoQNKffN2 zWnApY/0+R9wAsHV0y7BFXBUyDK9ddqoAqnVurDYFglSkZmuXIALXW5E+A5bstr6naGG HY88kaZYbSen5BNISlRYSuiV/KOLOZrvhTMLQXLCzOMn8chJqRtLYcqcdF1S1BMnpScI +gxcnM/zgBl4joqnJs5ExtcqdWe8FO1lHTNccYrI4nEXihKRQSKFerJNRCf2mpsBQSwF FG3erCt2stJ6PKzUYOEsDg6RODJA2iiD6dhXgkN9nV7a0Ny+2sPiJAkUBU/lXdO2SlM7 csqs9JZvteqJQMXwgDQFYQtg4Q44Gg2VgUjBXBJSmwVJre7X0KKlVY8grIYXOdutQAiH hRwM/mWIjCONSzIkZ8bOemd+N0qdzepDAKynq9/sUH80N5sDD3n/OJUi04EPJQ458DBT sMW3CHMWC9a5P5PPP6lB38AQtHRm58ShVgthE6kYJWDj+jOWCuhqkdXeyxAhzVN1pNi9 JO0pZVZjfwMVun+Ui4w4aKDuxfJvab8IsyYelgFXHNrOnoh1ajM", "x5c": "MIIUijCCB4egAwIBAgIUaXstvo+MXOddkRZSHAkhqed2dVwwCwYJYIZIAWUD BAMSMD0xDTALBgNVBAoMBElFVEYxDjAMBgNVBAsMBUxBTVBTMRwwGgYDVQQDDBNDb21w b3NpdGUgTUwtS0VNIENBMB4XDTI1MTEyNTEyMTMxMloXDTM1MTEyNjEyMTMxMlowVDEN MAsGA1UECgwESUVURjEOMAwGA1UECwwFTEFNUFMxMzAxBgNVBAMMKmlkLU1MS0VNMTAy NC1FQ0RILWJyYWlucG9vbFAzODRyMS1TSEEzLTI1NjCCBpIwCgYIKwYBBQUHBkADggaC ACHQeV3ZoD4MTQWYQPDwcxO0aC+yO3IYAvMnMNOno4aDi3rHj/fsnWoMXs76bUGje9Z4 gzqgVTuchRGGf6rJM7Nllp3Sjm25n31MWyynfrBrN0yWVp5CzhCmPduKXcAIlJakuIpH ca63F6pLZYzaKHpaWpwjzzIWgyTgT5cCaa2jbEO3snNsZ8yhgQV1Z+Wamx0hfXwTpTIi rLJ4KvEkw1rEEKEJeVXaeu2YxCemm5Y3JZeLRAQnJSWlAnjqFhQ1cu+Xtc30Dg62qkAV rhBsK7UMS9TDqlS7Jj7lcNqmCKVBqnI0LUTEoXeqV6LZVWzVBOtaZOucgiAahtIIDaiV abJRqYjLumgoPrvDR0/VrCyAwGwsI3srxUy2LKHSih0AGtZWwYPESko4VlZgZP7oD0+R YYPEOjpiuQmYEYsVbaGMbwFCEQ4MBmAbFhpwXmt2qoKikGL5f/O8YnBLEqNjpZuEnZQp WU6xfwLXnr4RfWYDE4l3daWSQMT2wDVGbx+abhXFIHEYymS0zaWsfwebCNrwXD2wxKKW Ounsworth, et al. Expires 6 June 2026 [Page 117] Internet-Draft Composite ML-KEM December 2025 AmmAiy1nMEzErbhJfAYUqc4XiPJlklVpuY75ypnXB6WDY2MpHAsoSpaAsgD6WksCF2ec RqnVvvgYHoaLei53MpX0nCrLNqayw/jlhcFBSGFFdMR4GbMrfnf2f4s2HEy3RbMYvT5q DkvhSGr7UZr0x3SMAUfiEdI1IjQDud7pyZsITONFcYDCk57SXytjA+RGi9E7l5GDaGe3 lSxnWktcpoWHnqZLFLQnM1zJLbrGkZmLzZhVp9s7i3O5lTk1obUzLyWXUl0ATzLidkqp DbVJqMSKy2AQSoCJYf+nGy0HKqIWV4XLAqVCAZQUhoGVx1SRWCbrqq+BLcB5WBNKF+fl syXzgmfBle2yfB4psy5cyaJ2viZnNj+XNI1MtFpMvGdjDUNCq32xPwRaQNNRkJ93plDW Ru54QElGY1/hd6Nogv4zhnoDhFnQlcbBwDoCGeJJjbQQCmNSVM8jCyEcv1ZADJk6cFnX i1/5AF5sN0C3sIB2EGBCzz2BQ29mn2+wto9Jn7YMWOZwgkwCQjYyUK5IcXfDYh2AoybH B1ujI6cmMs/XVDUkRgRItcGzsNTFaBTxN8jVw0qGhWBmKiLmhEqZIvrzdnVgDkNWwM5C BJ38m/WgjJ64hKF1Nom4TK12Xw0KzqL4RqpYE9ILViDYNBbIv0NCkozbbIUWbXsJL95g Glk7tMlpsugmLcLAM3K3MfB3FipQfCg2Vs3XSaTHXhOwYmzHhBNXGkziXqRhLUxrhNqq G8ArlR3SA7tHIsrDjDvBPQg0ZgLYXydsD55sRqeFT8aMuBrzNgW3LyfcOT2qu/90nTWo c51nLtyLhWLKToRnzPHGLpurfBujrGEINXcVlGhcsUMBzwTHJFHWLyazI6u6DkZccYpL h40qrPLzfmJTtkMFbRvkcZMGyz5Gflr4MqBhqBYECyhjEdGQjZMFT6KJnyEFXUw4GwT4 uf/QlH5wfZIUMaf3jMCbMRU1tsX3EsPZtphijLrDDolybp3cpeaRknngLAz8sFWIn97o VySna9rGrRqYqY/KrG4WKT8XYaS3Ul8Hy6n7BZGEa7ACkrIFQI88NTxsDh8xHHTYlIpC mvkWIo/2ymgXCNIhlip5nn6oOhRCIx7oPji8m3/lle4oJlhIStZ8eXqEDSn3zds1pwKW P9PkfcALB1dMuwRVwVMgyvXXaqAKp1bqw2BYJUpGZrlyAC11uRPgOW7La+p2hhh2PPJG mWG0np+QTSEpUWErolfyjizma74UzC0FywszjJ/HISakbS2HKnHRdUtQTJ6UnCPoMXJz P84AZeI6KpybORMbXKnVnvBTtZR0zXHGKyOJxF4oSkUEihXqyTUQn9pqbAUEsBRRt3qw rdrLSejys1GDhLA4OkTgyQNoog+nYV4JDfZ1e2tDcvtrD4iQJFAVP5V3TtkpTO3LKrPS Wb7XqiUDF8IA0BWELYOEOOBoNlYFIwVwSUpsFSa3u19CipVWPIKyGFznbrUAIh4UcDP5 liIwjjUsyJGfGznpnfjdKnc3qQwCsp6vf7FB/NDebAw95/ziVItOBDyUOOfAwU7DFtwh zFgvWuT+Tzz+pQd/AELR0ZufEoVYLYROpGCVg4/ozlgroapHV3ssQIc1TdaTYvSTtKWV WY38DFbp/lIuMOGig7sXyb2m/CLMmHpYBVxzazp6IdWozKMSMBAwDgYDVR0PAQH/BAQD AgUgMAsGCWCGSAFlAwQDEgOCDO4A0yyAlZqXdhdoyjOma+WgTtpuBnOjyvzqbNQSLucD +imckyqlLkh8SAsV5M7znsJYcl/tZB0Eu0R+yEPZo7q8tV4SNbHEQTanIBg+fQPk3IXP zYdCzr4SQ2k2x06TXVGT5QmVByg868WcyA1D/hankBQzBtIUN0qKo5K19EGoY3f3DVTm +zRGY7h5qn8pPTLTBUL8h7BzMafwZS6HGBtyZiepVPgDGeHa22AR7kBlT8Fygh2fjU4U ub8xV8rKMfPoQgtfVXmDy/xd0e3HMHxvPcmrzg8lHYlyZy9gSiClvcQ9nCNZtPxRxDwt +gqUjcxLcJnfaPz2iJqD+908xTV10opO9E+0pjCwarswxKfcemcM9EcuL1FhJnK95vJy 2rkB9s/6dTDtW3Z77kZU6jU0ivqzz3kVxbLnF0fFKbCc4ifAiVG7X15uxht73S7c2vX1 fbCyrXWqCyaivmwi/PclYqwlai1gbyX64T72YjKXu4RkzG/7YoI2D6pF5Uljt51YNdRb HLJKUiLahyyIfsuvufiwcpnI60tO3myt4wLegjk8vpGu2nWvp3Sv7NwVEAmI+E3BKyxJ QxkTxS7ZaseLvoeyXYGTTNsm6nQLRQbQAA3pW1DhJb3sYo8rotywqZIxsYEXg3NWkSyA bhomeFQXMkDPR9bgyt2jqFkOReltQcl4zVtc/wMLHsIu7BqdGjqtFExlI+HVqUHq1iHI iT4G2Aaqeyoxq6NfH7NBDSwy2Dlwn4qZRFOwu8k8uEyI8k4A25TLkFVk1XSa7VBpy5K3 9TRCuZJ9OKcRJ1YJGpAiJUqNsBLfDSoE6e7lwwJHHehXiPgrH8CAU5liY+1e/9gIlzJE AqlMvLNaOqMJd+3CGZkSfiqe1C7jFL1q6fiCfQLcpIDlksEAGPsVr6ZxQxx6MtJRdIbJ akudA6vkhBYxYHvLWfMOsDOhAVZ3Nle6i/V29RKKNBiiT1kQpag3qpyGoOVZQK3DVldd 61xD1xKvnnb4bh81OCqHn8TaAmKTS9HpTXWN8BFlM7N/J2LBALgUi68MqyLpQklxtCJQ eKNsaz6AUlBdXBUWZwEnuGkVF/KWBQRNuq+++dr8uijDlni4yuFgqieZv5JeDb3r4C3O 8Wf7jr9FaJlb097dN/zdKbLnE/K3NHLOuvS+lc7C+4cg7J65a5gfyMxwR2toBzhP3F1N vUPXPlqEuLLCWhS4Dzjh9bR1FZ+24OnZpsV8xqwFd251mhOWY+R9wc7udD4vTh0ZeIZq YxWFSBN9TgCghcJgIpvzQ1BbMh5WuNmXnNrUf9rAzqX8y5ksG7yMPUpEORNzLk+z7CUO ymw2wp5hCnPj12lM9GQtdZm8wKzNNpgfCeUin8FKy7/JIK43mn1oGBwPTwahAv98kP+Q 0HLBtCUTCm0jYRif0KKTOtjxyS+DTn7nS8wk3Ng9x+mOzIDbE3EH5MqUDPOV1/T1pImk LpFon4h47SzZdbHW8fub5WtyTVXZa50SmklEN9wkRK0nv7SorwLqJHiuzUdc5SrfuEx0 Ounsworth, et al. Expires 6 June 2026 [Page 118] Internet-Draft Composite ML-KEM December 2025 KptxzaAWjf8VRDtC/ZrtQJmSwByqYXedm9l6384g5O9erwPKiW8w0lOHOD+4Sna9uttk rWyApdHsORQNYPAWS4Pwyyd+6cbnBRP7e+738jM71d4jENKbT/+LydgfSKcA2slpnh35 vbnczn/annba8T2vDwVyZYXOs4PARY8aIBAD50dAmhaDiA9sA5jy0G/dGitS6AF5cEU1 18hbK/LvR8hlTTAYCmNbhhrOVGrr0vaFWs3xzL6oz4QMlIhEYLcl1Zt+3pfOKlcvYTSD U+epPPukAfsoGdWOr3qx8EtfCZxjke3oxQiqDC4VETqawicxDadTXPO0Xitjr8d2Ex+b xtVn4ZxiqI4IYUaX3CJn+N68XijbvGSS3dEw7DQOIyM7/7V8UhGEYGf9xsA/4NpWB1OY N/c97TgIcYGU/oAQ8bAsQzju/RKuRoI4K4JHWpzGgzaG/ZBrU8Uqxa+0jCbhCmhF30YV ZKe5BpKCC2j7JJdfhXhHZlLUIYEiW/Z+i0uoW5oYM+hwdHNuOhikw0iCIa3mmF108mra SdWg5dUnGF2qsiwGGIFuygGIvFkJCCsrIjvWQdfu80CBSoYIWQeE93fg/KpiQiQtiAjJ 2b7cyQ/f+tePHzP8HhQr4eIrdjsc2sgW1RQWEndN/yY0EFktPwsiomjTHlpmZQuwyMwn R9u2mnTqP+IFd8H7JDHv9un9bqGC+0Mvm8erKfhyTz+WhmLGdRafx5ZqCWhi6LF9pDVu QTJndqtoUtbCluwJg384Cc3oD1t2Xp8I8g/6ZWNpl7BMYKXEpfAFZLn7KylK5VO1NNob p8SnJXhJhJvhvcw0vbBknwtWWo88/KlO+SuJX93l2DrPJxZuTIX/Wxi+GzxuQu816j+t uDDgqmyJyVcGnbe0FquoSP2jUuXOfH19xbLvksV1Ja0aO5XfKC52VC6R3bEbZMX2HBe/ Vm/uYbT2xaz3Uia2Ovuh+FcOAwME/L/7/lSXW5mOl3pNHtjZfFe6v6uoQ8ZPa7RPsci8 sS6AmBART03non4wVLbz8T4jW2cocxteNppbr3H3HMupkGgkMpQs6/17qIUZehq+zvpH WSCorxdJoyRYurKyqwOvbCYyZuNBCeoNwa1E7oOVqHqEqNfgNNC4XLKINd5wNnFiTuqA uQxt1QfHS6SjzvuGQdmRssOtdwnQ/EjsVBKIlp0pVBJC3GeehL7RGrX0AN0X5oKgey1E n8vo/KVfx13r3QETGbs7JBv4tSlJH3MlvLl9eEblz9GQ0+mRrCEQiiSCNLMENFdHI9D8 qLCELB2/HSOqCR21m2VkvzQYLAroWkGVsiveJPDFvS4ZKHpZpkRcqNs52sAr5ThR13Uj 4jyyJIDsBqgI3JsQXgtLMGPywzkAQH13DstjLSqPYP88A5FManfzBa/3lyGhxfiFHKwW NS4tSmEnF0wPRvyQV/4Cf1LGZ8IwA4vqO5NO1ESa6EoXk6+PEWrod/D3GHHTDZakcNIy YkfZfHPX8BaEclS79z7wHuy81zbFA19Yo8HEn1dbjJbFEKU46k1lYzyIkm8FiY0DmHQE xkHb8KAqezY/yvJ+/BUY/IJB2g4STpU4fwNQciN/Ihaa0g0d2iSiqbO1JmP6YgrjBiyS vUfOqAF31nqMiwOu1l0YbZw3LNIew30J0cRfAQiS2X9OrH+4IJ5ie3O4cyDY/lkTuYw6 +PIjv+X2USszxCFXhkoT0KiDABY0Vi0rfM0owKmiDhsfhidk8DqbfB41nlamoV+Ubzzj 1AbupFfs6Vh+CYCVNw4NqfeO1tRAb59DRZIsnkJWvW077DgjbHIu0s58R1ruL+P/Zib5 0fak8MkWKtLL99/oUZluo/t6ZiaFFAXaUgEPKRyzUzzRFSxwaDWspz3FlHif8dq75cJ3 tqfwgJUoGMqnZbjAgYPBbu9Vx2ln5iBi0ugQH4bow2BlWoDOfWL3KYHmeQguBVsO/goI Xj2qAOpIPRehxI7ZKwSyvZsNRvcseroh4REfg2oU+23nsY9vqaE/BCOEXxqTvG1LMwVJ xDYFtauyEEwen/eDOeNvpP6OK59GSh515WEVl9Ii92b/4AfCU8Anh69RC23gKvj3kRkw DIZHjStf13tDU+Zcj+byXALp5k6AjwEVsFcjWFhUaIefFyIaglsrITOg2ZCF3kukCtjr M2x8iDPsJFVQNdB3336+8TcS4LzDbhYZ1DTR4NJNEfoyk57bGsTFZyBjqxtzn7wo5eOj BPW7z7xFqktO5KFAX36hmR8EJuvFn18vO95BokGxnJFApeo6V5zadAE/u/TPUWbGuKm7 HDdGGjGs/LppKl0tLpND+/I9fiWNC8Uo6Qk5K36x7yAlI+sw2s9aMvcWA/BUj62EOqo8 mjnXhZWek4kJ173OPu4HA9xdjXbcZRLnYsNxTCOF14kErRXuWCz+QH8moLgtptzZTvss 1h8sMxPSRB4G+ory05uaQlfeM3jTyN8WeZ+/WexRwuhEVeeO/6qqZ+xN41wCq1z0N42M 73ipshinGMDy1x7F5jLbPBXcYSD86bB1z4bULMMb3ubsiGpFbSNzecja+Hl2R99Dk1AP Qs2oWcKMynEmrSwzBjs9QLAyt+m09bu6JAJiTBH9xURziTBjkuvD4itWL9IFUi/OzUGE w/QaI7MIBKcpxXfHb1YQBqxwopT2IhOgI+TJKuCYGJK2mmyz735V08YnJ6zmgtPqBfna ZTH9hheRBK118fNy6/ciCVlGcjHLntD57e3Tm/1p8hpTOjPvLXfgfMH2H7Qb+sVl9TMc AhEooFpmaXGEjtnqMT9ilrHoR5DtVW95hIqTlEdYiJrc4gAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAABw0QFxod", "dk": "Qj2oNBDhGObBSxT6lajNIOW4tkW0L9IAlsRxyCuxfc9FU78B3F670WEhqaPbE d2M8gSZ650ZqERcXdr0WYqY7zBCAgEBBDAdb62fVAYi6Q6XyOy9uwrmYiu6/AmFE+3Mz VpcBDG/4ktpxjnUxkBV7IwNLXg9vB2gCwYJKyQDAwIIAQEL", "dk_pkcs8": "MIGWAgEAMAoGCCsGAQUFBwZABIGEQj2oNBDhGObBSxT6lajNIOW4tkW 0L9IAlsRxyCuxfc9FU78B3F670WEhqaPbEd2M8gSZ650ZqERcXdr0WYqY7zBCAgEBBDA Ounsworth, et al. Expires 6 June 2026 [Page 119] Internet-Draft Composite ML-KEM December 2025 db62fVAYi6Q6XyOy9uwrmYiu6/AmFE+3MzVpcBDG/4ktpxjnUxkBV7IwNLXg9vB2gCwY JKyQDAwIIAQEL", "c": "CWP7kplxJOFX5lXYCaD3KTSCkHCgmnEJtACsppnrCau0UB2lGS+dHdexNxIexl pFd/kKKKgJ8+e/D0X/z++f23zDveXbgSYq8hhCO5r0tjcMFscY3PhOK3wKnyPQRRwj3I 7Cb9KtI6VPinKuOZQIwRxbCPwhWIIPg7ecSov+SIptmzaYb3IvnJWK0SBDkgrh8kW9jW GJZy76siCj18eJ3c7qaqar0k8Y1l/PyPeCof5mztJ3Phw1x0vCUnVx459GS3PBwQqKR4 PPVbydZvCGStAnosuGAPQcjcMgHw1KuMSkDyy0iKdvE2rwrv3YqnIHK60bY1eLwHz+53 Dm2QHRH2ymvEqs5mFbDQy/5+HVUnpwwr57cwKW/uZPZ5fjJMeP+cyiKpuuETYmx5GFOu hMOO9oc8Ew0yppDuG4M1nccnwFCTy9jmbM6SvwwXpNq1Cag1r1o1EI8l1vZRyAL3xXxH lTBcTFoz+PlxVO8IEp47pu9osHj+jr+7qPrZlrgm0Kl4wuRlLjmaTfx0hmBj6ltUSHRX nOHYugHhVUc7Zu3C1GB9GNcn9qJLwyWBPLuQ4ccAtmRIzeBQnplvUha9aalZcHX/YRjt wv5sp6GM8PEDBsaBUy6Xvpg4KEzzJ5k81u3xRRA9e3p5tGZjXqSWrM5VfSD2KL5KNeoq Dg447NX5JVzceGtc1gRYvtJ9tKnH6XhbqM5Do/L13VneohWoUfKtP3+x6AMKByLIxuYG uyd0++qV6rDumP98giWxx55w7niZQqPE81IYlEmDJsGh9kTWXc521dZ6Y8zfllmH93G3 E8DejxF3DoD+2aVpTy30SuNAei7B+12ylHF088zH7GZdafyz5r3SNrMZAgJB6iJDzA8u hOqhh9gDUDtkhneo+luVs6gm7SrmWjodVY4WC3qo913hBEhtM5wMI7r6z/rD9zIN6GRI QzFOqxay+h9ZDGxrk7jC4TFMcSFEnAJr3YH5bB7VAdJx8+b+vDFxbafm7ZKv6U7ZxAEN bKOCkNh/oUfkwjfZC6Q2Zy/UzZH6XLBTQFjb8rS97lusYjIIf++tCZiUz57EcnPdliIc A/stG9Vy6QCSA/ftm8ZqHvyFmM1tsjM9PQvse6MFaYtl4cP31R0GCUrL3DYNbTJk8N+o iFk22MMUukd9/Pde7D0cn6877O0uPJ85C4sLamarsUloaAuHBKa17DxqJbeXSSYamy2y 8xVT+ldp7DJ9jqoZ6GDCG2MUR0xtXWzcDcZMGBXxco2DhyvCTP3jIZRULriK1pE39CXk R+/wQ7Axx/mPENjCyaxbD2dufJB4fI5PmzP9O5y95OpeoxVj8uKE/BCGtmDtPNO/YHQg uASoCZxtoKYw8An7g/uZBJJU4Bn1Ujf5x2+3TxJsq5GgBmyPH7lGGfka1EH89zFLq+wu GvvPnFI3fmIJeDIjMGjw/Q6fBUC0NfNTtr48EkEKejC/Iz00Z4yv3LNQjAd6bOgn9tdt bDqE85mr6WB+runjfIjrZpDdhM5thDFfgUk5Gsmrhyy3/b58d6bN01w6AIY6Y42Uq8WA mb6Lx/vXV1rnPc/Ozmt1mPcpc8y9Ycc3/DG4U4IvAhzjZ6BBjltU2pPyu9UOChdp+RJx tu8/LtpvW+c58+i3m6XxWEs+w8MvnC8eGDar16PnRfBWuauzvIauGquNeDXxzk0CmlVV tC0l++5mSQSNxZ3zLB2o7L6/qO4nK0FvhwkLGU3lUw1EeVFolLIAQNWwFyCnPM+PmnUw q1iGJfJslP2X4OHF4Mmaukr3dwYa1hZlunJdO8GJAkSjmLALVmjgmNq6PzM39kOFyr1i Xx8R19isZ53KTfZlgj7E/B44EX3RupIBJIbg2NmwTFvlZK+gbOn9QNixCUQKbG4FsALH lqeypCbe3RdBEJsRy7oXavkj45O5QAUMQOeWfrgRVjzt2Op43kazBLcbi7+bNUyD6f+Q HsA2ShQrmYWLn8y4M0JcIqTrwx791RBFqY0shJkEixu3PbTClpbX0/DmFULmPo9tkLOP cO1qjVzkI9rDv9AGHx7p2nTRjexBIf0byF4myDXZ+eCRBQc/2122vP3dQESZlqOH7Y7L xwJGGIR57gzJnOemWQpBWgRyesu8SdW3oJzknyI+Ja7nnDDsK9j+Y6huiDZfizKzjQt9 y89dNl61yegf7gjgeyEYnFoVDH0dKtVaLhr1shwTztd4zHjcfN", "k": "WRZ9eMUVdBZS7nXjdEHSr6YP1Dt2GRarFlOyK39/uJM=" }, { "tcId": "id-MLKEM1024-X448-SHA3-256", "ek": "zSEapNpSW2khQAtUTAIGxQUtAoCx4/oTIBlojfGxhaCX+TOp2RZ4KRMj2VcsU AoGWEg5d4ay1xEEDKahoMQbGJme28kL12NDwomW91bEb4y/Miak3PUn7TNoace54XUiS uYbWCY0jFC+kSaehvA8mFJL/5XLm4HIoQwcNbGiqYfB8wc/GlV9b/lw68JLqUJ78lkX3 qkSS3TJUymo/xi2tjkFncbHiydDfAAlmBlLACp/sTrLmKkSRQAro7U6ZeIv2cy/dwHA9 AlnlqOXMJukMchOOWgBKebCzcWHFQClmFFh4rBQrPkJ3gl3q7k5k6Y1C6vD+fa5z8YHz gsD+kkC01YENDaUhueF6vM31Nd+CexbK/EsKkdu7EFZT2S8KIBCavhDcJRjpIADJ4qyR ghAC4dfjSkadFBQMdGZY+lVkTuHLkCKP1NFRUiKJMVkpkxFrMrHICsNBtvKQzKiYulg3 zGLxKMFK+IEkfKWnbJt2wCGrHEuDVBvmpVXhKVqtSOvQFmguBcX4rlbtNafwfh6KKC/3 gS4c7ps7ngotFJjJaN+nbpdWma7tsPL1hGkYRU+4krNX0tbqrld4RC5mpBUpWq8UWcYQ Ounsworth, et al. Expires 6 June 2026 [Page 120] Internet-Draft Composite ML-KEM December 2025 sJy+OzMpWN3pPA9O1IyvgjIJmpCj+eloMxpIsPJ0uKGJ1NSfdq/5gkAYbownrGICnVWI TsxtpJ6e2a70DGkl6pLU0DE+VMmzPtolVK2+zM5QXBc3+YWRvG0JHVzroO/l1ZU7AOJV xdpxrRsjMqdLYYFTPw3xBxJNsevyHKBigs/rCFJOtUTp6AXDDc4yHgXsNETPwWjhCVpt JiDqHpw8IadE9sL71rC/mx62cC/X2U1qgrMc/wOumkez9bFXCq+l2qnoYMs5THBJ4ayP aOSIYZ2H8l4JcYO2nqGWOPJY5t+a8MDRSmTEaqtNiGZMdC85cel9AQLtBWJkEehHoc+E 1KJk7R4iRRMiXMj4GizQ5eB7xbIoZiDutotvQJS1hJUzPuD5+oqUrCs0ogXEIpBi1EqH XKAfAOfF6F2LipequhwXBSXyJvKGPwjQskuGZxi7ceMmUggoWNO4dpAZuEfbSE/1DuL8 1kd7MAEioNzjrOIw4IxS6W52TGO4VF57IQeeLsZ11bG70tShci+z4enuLOpl1VGqvdSe OOZ4Eyd0JS+bdcU7jOnJtB96XAtbqZmkIU6GMZLCLw73iTJ+IM19oW77KA4Tuhau1haJ UdBO0STgmuO9fdf2xcl6Jl/tsgG4SNltXJEYbO5GfqLkLIwvjxwP2I1gnkquRdcm/Vu3 wwOrBAjRQg65yK/Q+CK2GhpgAAEJDRi6hTFDQqEKDdixUYOn9tgVfmD5bANLkkpFwKHe JVSoIEUORW7sOx0jnUKNtm/9siAkvmMEChfePqB6mjCjzsDFyaiebaLC7kWuQZAAFjIP byGMyhlA7ovzrd01TlZEbQA14zFGPUoXzyO3tKrGHYMRwKY1PFWDre9XoBCEqec7HKRZ UyFy/aKbQgNvSWERfm/49hFJsoIY4pyqWaHLCE2Exu4q5S/WHIvWXUILUoY1WQHBXW88 xRhFuZ76IilCps8GBKUJAkWeTlbPjWyktgHiIB2SHh7PbzPRzdZ96CmPFIBnJU7BytnB bufF4FvBRhqsoR+l7pdjHhROaZOMIKrPEClUKaL8pk75GiBpaXPC7I5tjFKhbiOkkKBg Tqi8DXH0RiNBdVYGYNrPrBpN+qpvya6pPkD77mz1Ut03OurBkYAMsMb6kehxVKbgarHJ wECyklYz3lcRGWbb3RnKPKqWLpnusOLJPU+Q0luZnR/HBA6V0ZJUDxf8NBIFvxj/NVk6 Sx899dbEsCNDEERZRF5tCJSpxlj4VZXAEU88EybIuZ8p4BXeGl05+mt0zxeuCWcVFC/+ QamlnY/LIs9JiZIcDAmfiOHCFcCOtqDGCtyAHFkxwe9PIzJlauy+yLKwDZI2noOKunDF kyMF0AulVu1D8zLh4ZJu+SYvYVbb0dRWhENZBmOjSeB8zFjvjywtcILzJeEIeicshGfm /Me+mgYkpsESds7lvgV12yeMJn21iSiJErgQilSa2wmLedroAqtxHIxyAjetrO9tHt1q eHIYcf20rvaAe7wkd7VYQ7eydwukKd4cYAEvF9XgiQwRLK1hww1yfdZNnQa/SM43w==" , "x5c": "MIIUUTCCB06gAwIBAgIUNSYBSPybpP+YfYB9a4KjODgV5rkwCwYJYIZIAWUD BAMSMD0xDTALBgNVBAoMBElFVEYxDjAMBgNVBAsMBUxBTVBTMRwwGgYDVQQDDBNDb21w b3NpdGUgTUwtS0VNIENBMB4XDTI1MTEyNTEyMTMxM1oXDTM1MTEyNjEyMTMxM1owRDEN MAsGA1UECgwESUVURjEOMAwGA1UECwwFTEFNUFMxIzAhBgNVBAMMGmlkLU1MS0VNMTAy NC1YNDQ4LVNIQTMtMjU2MIIGaTAKBggrBgEFBQcGQQOCBlkAzSEapNpSW2khQAtUTAIG xQUtAoCx4/oTIBlojfGxhaCX+TOp2RZ4KRMj2VcsUAoGWEg5d4ay1xEEDKahoMQbGJme 28kL12NDwomW91bEb4y/Miak3PUn7TNoace54XUiSuYbWCY0jFC+kSaehvA8mFJL/5XL m4HIoQwcNbGiqYfB8wc/GlV9b/lw68JLqUJ78lkX3qkSS3TJUymo/xi2tjkFncbHiydD fAAlmBlLACp/sTrLmKkSRQAro7U6ZeIv2cy/dwHA9AlnlqOXMJukMchOOWgBKebCzcWH FQClmFFh4rBQrPkJ3gl3q7k5k6Y1C6vD+fa5z8YHzgsD+kkC01YENDaUhueF6vM31Nd+ CexbK/EsKkdu7EFZT2S8KIBCavhDcJRjpIADJ4qyRghAC4dfjSkadFBQMdGZY+lVkTuH LkCKP1NFRUiKJMVkpkxFrMrHICsNBtvKQzKiYulg3zGLxKMFK+IEkfKWnbJt2wCGrHEu DVBvmpVXhKVqtSOvQFmguBcX4rlbtNafwfh6KKC/3gS4c7ps7ngotFJjJaN+nbpdWma7 tsPL1hGkYRU+4krNX0tbqrld4RC5mpBUpWq8UWcYQsJy+OzMpWN3pPA9O1IyvgjIJmpC j+eloMxpIsPJ0uKGJ1NSfdq/5gkAYbownrGICnVWITsxtpJ6e2a70DGkl6pLU0DE+VMm zPtolVK2+zM5QXBc3+YWRvG0JHVzroO/l1ZU7AOJVxdpxrRsjMqdLYYFTPw3xBxJNsev yHKBigs/rCFJOtUTp6AXDDc4yHgXsNETPwWjhCVptJiDqHpw8IadE9sL71rC/mx62cC/ X2U1qgrMc/wOumkez9bFXCq+l2qnoYMs5THBJ4ayPaOSIYZ2H8l4JcYO2nqGWOPJY5t+ a8MDRSmTEaqtNiGZMdC85cel9AQLtBWJkEehHoc+E1KJk7R4iRRMiXMj4GizQ5eB7xbI oZiDutotvQJS1hJUzPuD5+oqUrCs0ogXEIpBi1EqHXKAfAOfF6F2LipequhwXBSXyJvK GPwjQskuGZxi7ceMmUggoWNO4dpAZuEfbSE/1DuL81kd7MAEioNzjrOIw4IxS6W52TGO 4VF57IQeeLsZ11bG70tShci+z4enuLOpl1VGqvdSeOOZ4Eyd0JS+bdcU7jOnJtB96XAt bqZmkIU6GMZLCLw73iTJ+IM19oW77KA4Tuhau1haJUdBO0STgmuO9fdf2xcl6Jl/tsgG 4SNltXJEYbO5GfqLkLIwvjxwP2I1gnkquRdcm/Vu3wwOrBAjRQg65yK/Q+CK2GhpgAAE Ounsworth, et al. Expires 6 June 2026 [Page 121] Internet-Draft Composite ML-KEM December 2025 JDRi6hTFDQqEKDdixUYOn9tgVfmD5bANLkkpFwKHeJVSoIEUORW7sOx0jnUKNtm/9siA kvmMEChfePqB6mjCjzsDFyaiebaLC7kWuQZAAFjIPbyGMyhlA7ovzrd01TlZEbQA14zF GPUoXzyO3tKrGHYMRwKY1PFWDre9XoBCEqec7HKRZUyFy/aKbQgNvSWERfm/49hFJsoI Y4pyqWaHLCE2Exu4q5S/WHIvWXUILUoY1WQHBXW88xRhFuZ76IilCps8GBKUJAkWeTlb PjWyktgHiIB2SHh7PbzPRzdZ96CmPFIBnJU7BytnBbufF4FvBRhqsoR+l7pdjHhROaZO MIKrPEClUKaL8pk75GiBpaXPC7I5tjFKhbiOkkKBgTqi8DXH0RiNBdVYGYNrPrBpN+qp vya6pPkD77mz1Ut03OurBkYAMsMb6kehxVKbgarHJwECyklYz3lcRGWbb3RnKPKqWLpn usOLJPU+Q0luZnR/HBA6V0ZJUDxf8NBIFvxj/NVk6Sx899dbEsCNDEERZRF5tCJSpxlj 4VZXAEU88EybIuZ8p4BXeGl05+mt0zxeuCWcVFC/+QamlnY/LIs9JiZIcDAmfiOHCFcC OtqDGCtyAHFkxwe9PIzJlauy+yLKwDZI2noOKunDFkyMF0AulVu1D8zLh4ZJu+SYvYVb b0dRWhENZBmOjSeB8zFjvjywtcILzJeEIeicshGfm/Me+mgYkpsESds7lvgV12yeMJn2 1iSiJErgQilSa2wmLedroAqtxHIxyAjetrO9tHt1qeHIYcf20rvaAe7wkd7VYQ7eydwu kKd4cYAEvF9XgiQwRLK1hww1yfdZNnQa/SM436MSMBAwDgYDVR0PAQH/BAQDAgUgMAsG CWCGSAFlAwQDEgOCDO4Ag7RpOCM75SOkGe9LkERvvj0mQpHgGgV4MnfTAWmg1pMW5JIy MrLTzBo++aQjpMYQUgAGhjlOOM/nIQAUAMD9+M+NX6UdS03Ik9uBUHsXKpEGaQg1uY+B NSy8In7E6Th9llVMiWgoAwQrQMb8PzMraN+ay5xQ9kgRoXrBEus5tbS70MQMajM1bqnm YhDR8PN7Ef8hlKPMTkhxW8/N/vy8vieEncuLEB6BeLBBObqcaFnv3SsMxqqr2aFuTVeO DSj+sI2r8cNPdWOAA6hgP7NmOxqCOrCC4Op0Pu5C9boNJ0RjWmT+wy9Qa7zBPSBomihC tJiBrpy+Cvq0phZozjS41jqXmWohPfo539LqqZNo1EUkGdc7X0Yk4LJ4QGXAaXvWkjNj AiOOsAP/unfWRzOwZgwb84vdENYmg6qjkHodyyKFEDHN/UAw+eX2pJ3xj5ZSzvhadU81 ZWSdxcOVHYp69rBl6VBZR/yF2rShEnQPRThhPOfFnG3KlCJf3HdjMWPqX+LjGI+ayeu7 oRSGbfid0cazdXShcVuAnYm4IW3vCY6IjFI4eK8MVrT4cbzBjeNWq+alo24bkDGvIrG9 tS/u78RAoJT0k1wMbVw//PRhr7j6rEU/Pu9yn8y51ScbshbkW3HSjiBvIPMuVuI/2iyh 1qjPbsJDm9/nXNPOiBDm/i0AaBokUWYalAPmu/A/QZgrqs1pn8twITvq+dhCmmeeDIWv m/0Pq/e8UNIxE5Wv4d+x5qYsNH0vJRZyhNB1Cm8QtR7dxKCdm58agezEFaYCoXR4oOhZ LZvA/brKpxWD9ouEC8fa7kQ8GoapCLH7iy8KPwSw7/u6yqxMPNCCJopTRegaUbSlEMhG X321NjXbl577UNsIRJHxzBit2AhwPAUXdqOWxN83oAiF0XqnYnD/ROb/wRLfD3jjXNae w4bFkk3/1svYmQyApTowELLpSolrS1+YPhVTNvCsRxke8OyMjBhmRz/C1dQIwi8ILLIK QV6XS5uznU9HRJc+9BkfMFbBweigDVmClQ6NoObpgM6NJ+8QecOOcPKPsawHRgweWHG1 PyHAonhBbb0J7VD9Da1FoT+BRFDPSCxKYo4LeHajxrNulste6al4E62xhm3RKWEfJaTV of/lVquSFxZV9ailj/VyaohixW9jumFb1EKC1SRb/Y3D86KdV+kxRG2xI3FLEG/6N4hH S7NXMSndqgU99HYXLAA8JboQYX+U/N/GROVYvj+3j2ntAJ6W/1aS06f2JxUg8qXEvrUs S8pQAsxbFEAzSCgsOATbz5SGhBnVDX3oBCQWjpT8VI1mugjuhOHYf56+WcX5TUQKlNVw VHpObe7Q9j4DE9d07iIXO/iUyfHBWwBdSnmbyL+2TaUR6OxzptlJnokw1lY95bE9ch/P onWiPrkbKE0oUFDHQpuWTF0/5XLe0DwANgnepYNhXT9hMrAZlSqdZW1Avp2QZdOKcPQk 4SAoVfpROhSgBvLLYM1cy2LUNR7Z6EJCipShLz76p/YAy+j/SecPHaFrFTtlaELPWfTU HzgiGIZrmKAjyWy83Qxl82w8pW/BTX2hu7ifhLrhFhOxLINya6l9YgqxVXpAYVnHIJ+A UA9CqEDlk3fqMcYYQ0TpMSdpX4cADS5/iphRZcdVJNliIFuuQCHudVk0l8QZ3THZudzz BoSe/ZO4QjYhig/nugoUVL2tluONaABapqmisHfeEFotfOoWGEQEJXXmDthwAVUFBOOi 4PqM3Hoc0i/7sgZmoDu3uPkYN1yhjKwqH3vJj9erfvl6mTFYaG29HB61opKBCPGhVW1I hLU6wzEu4Y9qUUWPO0M9d/PjoGl++ZwZrAmD8ArhxM3qszfTFywIYSVvTqEi2nDahP6T TcRdIKOrNEk0Bh2v9vFWYpnbPCbmAgcb2vLfpPOAr2T4YnCMTO9MgDHjOCTqPD5FZJs5 h9vpCdWX+PRIM5kdBs0D0LrYSZ504dyF/avQmel2GbTVkLsX8LuMKiehRk/+u5mjEfOH 0dEJL2Ao5tJeN4PqNMi5YbIIHtvy1HDCaFYOPRD4/HHb71fDAf1DNbESS0QwS1IJBPCQ O6oZuPy4WPXBbVHsrm6/JUkl9XkRU8Hr5ofon7Nyzw+Polrz9NXQLHOamdJSsC9JOEqS ATitMma1MN1AgtijDeR0fK518ouP4m1SohAtNgaVPpJmkJW+9LeI4nGP3BMKfQ+c8UPA Tbt5X3pSokLP6FzwzMb3oB4B8OPPNMHd2iS16r9OpX5l7WjR3Vfw4wXnb92cVR2MdUQK kANsZBnWjHaLEb7oMPrY3qw/iImAkbBP280Oz77cs5+MZPam1kyNSrOFr6wdRO7D0Ldo Ounsworth, et al. Expires 6 June 2026 [Page 122] Internet-Draft Composite ML-KEM December 2025 SSE926rgPyxB/2DfEy8fhQhQcBD+3oUzT8tB2Dfl7Yd4ieUyGX6cUtWBXSLOQAYTkeur sr5wiybMEqw0M+n0v/Fb0JhJR2tC5a7L0LNHsesup8yUpJSpEDIqADp5r5omrexG7tsT xPZkIulTIuPllvxNIPn6cb2GYV+UQ2aHntkvvOiNijxWpAiPTJaEYjf+YUTrSqpldNCi LhDivG9aUaiqeNO/nPV+sk4SlHuDaa4suLd2KfMXm+1yrqPqeTzPWCf32EWvBM0i/Bt8 xceAARFg1i3i2ZkZPJlybJIjctVzQA2zg6hEmxbHPoeXSYBiKUOA1a/8N09lewyHnkUN tpbL+ocXmx0FZ6YC5vDWs2G7B4cSDru7dWW8z7/UKagsGAcVYP97OD3TUk5Yyfj8w8Lh dzSQZRQmCtV7w5icYzC9wU4Lf1wddeheKrTm6/CFmDQbW0aAgQdNKazQsE74l/pv5lXW dG4PSeklU1mbEdOurYggFLVshca8DVcUJxKsoGcxC7MgNyMbyuJsxcEom/SpIzowNQVp 3cE2hV0WOqkNDan1P+d3dfcaKAIaDOqrjIC3Ac4lP8RTltdnfgP3IjjhnMPpKShm22d/ gwOrMWjf3BT70UT6h4uF0XUy8y4jkbQaog6t/Z3RQIR+NxPKE+eRTkZv4puV0j6cZRUy kzci5Ou8W44q8LAfa9gnpGQdeN9aOc6Ft3O2jGOdVII07YAQeHkpTyqYW7qalNLMAFW1 SixE41pYn7VblPbjgYW/rJV8Yr71hMjtJY1W/BWrxmNbiF3tD0id7p4xwllk4/plWoA0 awc5d0Smk7c1C+cVo4YCbPiZeUU3/kbShtwidB54ADj2Bw6zq7n9ZuyDnxXe5/PvNk+M JWpwQm/IZZ5yHVYtfz7tYChBIvjVZb+Z9yV471yKARHnPWPO86dpqk/dZmf0S5/joLQ8 8jPG7XnDQA7ALLeajyzTQ5LomEojJlPceJW/JjS2IN8fsQxccwa6MFig44NAxuBdSOx5 T7ffC8Ag+f32pFeelPC9IFSYqR7OTL9kJoqLZ/tEFZGJHtsznQ3DWxXwYiOlujcQX3Wz V37oUbxYmwV2ojybJvbXfcz3+534RLBk7kCVdl1zS8R7Y8g+HByd2WsRwGWOEv1i/stZ xtCyDYmfnGngl83Ctqvsr46mXATeVBufZnD3zI3Q9PN1SMaQ9baHK0utaUIFbDLyPEHB BmCG7V+iZK5t29aOPu9X9e4ZxKwehfkjfk4Orz7h+F9FUDfrz4+R74mvBem+UyfxsVL8 FOSPW6Jh7eYgtcHjb16usqfdXDndNQpTEB0PGu/RTyVM3FagCE8IvrsHPGIubwJPSbx2 Ir6SYTtIt9iKE29kDq1jyUtAVYwqdODaRQWP4Vb2O529S+ZM0RMEnYilLcczBALUec8a iLNa0PZZjQYJ5ySgQTIN0oItT9b+NH5QRIm5KtYvCZPWrHCNJ4WdEFmXoyJ2GQmiWfni qtnsuuLkG68IwO1xhfHBkE61Qz5x/oj1bbd5dif9pNctD3Y/z5J4JHbkXztyucvHXoJR g5ZkidYL9JjSHeLNfWtqw1eDcq6YYyb+Fb70t8yxZR+WB1/eNZnAn0LQAThag9FOzFRo JV4ko7l/MrpOgr2STC7XUVBz9mL9ZsqCEOmTcZC5Mbbh/xWKJ7w3/w2o7gOzQNqlO4mV epzhqAU2Sk2spc8xXlNeEKedTVeEv2ZhIcwdDU5IKrIx9vdH1imwUJ5KiWo5nfkdXrJ6 Lf9mNGREH7BPzOsVOWVFkD1NOPmn4GF9qVbhj46mOYxX8tnfoEMfyQUce7PT/3Ql5k1e 7mtRBU8bqd96F4j+srIeO4C2J30rhK6UyQTtGv7YDG/FYNHg8kb7FVdOXcdJyCKDf+yt Vr/BPdQPNveTCFSZeZdJOHTXldsE8h/evLsLyZbVEk4tYQU3ffi6MUiANY8uBJDVvq40 YG2tvB5KZZq1ztn+N2pvdZahusTTGJadpMKEmObvj6jU9gAAAAAAAAAAAAAAAAAAAAAA AAAABQ0WGx8j", "dk": "L8zLGkO7PiO7RdLn+HiYYLl1ZOJU2E4ZSTgZ2wtmx97RiD+DhMSKzF7lMoCLw oK/fTR/bsSn8mnMkG8xdNC7uNSlc3qtPeEIAIsmxkRSF20C0ZOt9QMrHjkDvnFTNafNr GkP7R9f1vJ/EHuPgLAlvcTvmujZjGKJ", "dk_pkcs8": "MIGJAgEAMAoGCCsGAQUFBwZBBHgvzMsaQ7s+I7tF0uf4eJhguXVk4lT YThlJOBnbC2bH3tGIP4OExIrMXuUygIvCgr99NH9uxKfyacyQbzF00Lu41KVzeq094Qg AiybGRFIXbQLRk631AyseOQO+cVM1p82saQ/tH1/W8n8Qe4+AsCW9xO+a6NmMYok=", "c": "HNcW7EKf4dODsX9U1kdaV4fzv2Zkm5VaNk5WMAHin/rQE46F2e6FnMQX8WXBJ4 GiPjsdZao0NgziTmSF6cyGa0YjfLezz5hOvgiqFGiMryLjgrqorHdcA5SJWKBu3v9FuS LEzO/WI92kAgzCX1Zt6xVmbCbWwwtd+fxlE1brZgd0upw4zNMhKlC236j30gUCjj4HP9 9MaJvYarpgxIiKOR7MfBWpoEk98QGcTrqWgY4/fQQzMtETGn/rnXqx0nZqOEKjZpfB6o Z4kc/3UVL3NtDpohDVR5IwWrr266kGD3Ho55GOrZlmdGZUYZSgnYTC6ChcMN9KXdsqpp q2o2cDf+FfkUz+W0hdbu2v7VSiOdNLplSZBjSzkJLipXpheg4tRvEwFuyccNaUAS1JVk 2JWdvRg4QYrGr8e2yIiEupKwQrIA1AVR0SWhISRdsogGhsOT+7WYxfgxaUyvI+qQCbsC y+Gf2HynjuUDyxGFNPgjcNToFBmO3WZX28q3zsBnkuG4bZoF467mLfwybRuWeTzTrOg9 XGROtr23JUnMuEaKQ1flzwRXyZLq1IZNXXIIiL2D1bS4kXDq9/EArOlz3fEyBTYIKJsE NORYU1Z3qXv+5dMnPKianCeKV5n+TYJOwd9rfEdpwx8Ct3DJGTVHeqZwkSypLblbcr3j APg3BwW/0Z8gsoBzmnLv1TQSAQXuNFZ5V+8w2ASxzxo0/cDwml74iSqVKCOlF22telzy Ounsworth, et al. Expires 6 June 2026 [Page 123] Internet-Draft Composite ML-KEM December 2025 Jb72ZSKOgHj3RmRIl1Jed0rqgIAHiHdQIXamHnWnmOZrhLm/iuqFFDUpFYqJjyojBj8C s78BuTXWlHbexjR4GjrQZBaSQyepTMWO721cBKLf78V9Ycy/eL6GoPPM1g3MH1F1v3bU FRhwC3vTupki+QFjVtFKGTKYTkQJquVlNjDMYZU5QwD7OQJig3fVPNrLAfJOrLcmPG7m HITVhhfXo6j6mcHQS8CtJ1fq3f6igJ4WU96gJzFictxbFYMC5EmlUTaUtCcF1lOWH6tp DdseAqm93WAEh6ZLDaaBiCETeHlSBg/PcIn2vOnyj0wMK/CEuPYuadDNKkJv/hvgJ6nj /EwPn9CnsYXDxBojzlhfV/NfPMGzjySa2QGiyBZMIKO5o42QcJdrsJTAQt9WGB3Ns2bw BAJ4WmmQwlmI7CdO5OZtyiJW/QR4mYV3f6Kg43CU8ymZmcfyN7cFf9MOHpurks2W22n7 b4CpKiqi5Tm9GIHSI419NkXeCKSNFxkNkAKMsKIIDVTTUM1UCZLIzybRRYXEXYKfrZcz ZLxIoTZ4hb0vEZXGIQ9KkcnuqRFvPpoFfzymkFqhoZEPNFJxSSIJtntCE5ybXY2/CsOu 1YVKEEocHYPNA+N5fEZMm2MtJ2JANXBRyqq+Q+9DsqMBeKlFbrjtnp6h2lSbH4ozz3w8 ULCsuQh/MllfgzDlPkMjpZRcybcQGGSHN0ft6iJGCOSfSuMuK17dACg0JyfjYPTee0j0 QR2dzT28/Jj2DlRqSDeHTDWrF/Cogp6CWZoJSlBHE8d60KnfOw2YShSXL73DHOfOma2R sR1mF13TSjZef+ierTLEdsgw3zb1CLxb8Nn8oFmxUrNC0bFtxJMMiZQb3OX3IT8ANUWU dbc91uYTusDGvU2/sFVbjr2h+/kMpqrSagg3LZ5dPjhMJocu/62szUwQ31JrDNiTdPVu beQFGItCe+TJJ0oR/8auXhOp0ErL728dkRHCHp3Al+vpc0RepNWvHYXLM0AGSf6iovdV SoG23bODyLisHshk+/DnUONSRR/4OB4oEsUbyWKqbaz1c8kMFW3gVtuHuP0a3fCmdHbi W0qA2Kb1zizXB9svSTktnwI2rdpaBbJyT0fg06OZvLHZivY5EGoogFCYb2nAlZBhvGaD J+Ln4U8auGCkeVv1vONhm+gcMJ8pnQyP6EaS/gs9CLUtUOFRATKNTc76sS2S6Y4TbcbW sA2BVQMO4SndC6hzMNPy8MxuxHJskrSnXb150jsLXdRtFah9j9+Q1eguxcCiPELbsdIL hzJYEUARXAB5kX5v7CjD0jJHA5aCdPnuVg5lIILxCjmj9z16QER6QL8AV67vypeTgLzv 9i3zlcvatp2wg3dOnSRITVuvRebJ3nk0yGpVi8rdwuH5zp00qXDMJw5W/jTb8bFA==", "k": "dbm/dJDHYNgR+EQDa0q2guhKuOfCRzHyvEA33jHwX4E=" }, { "tcId": "id-MLKEM1024-ECDH-P521-SHA3-256", "ek": "fSfL9EUHY5tJbolRxnlbn3M9inCwnuA71SSazHNi1QZar0t/rOAG1xCDrTpe6 oILKeu/0+wQF8ogNDuyMNa3Z7NdOHGvT7lz8Fsyymq7PQUWuKBoDvnDcChwvJcVNCa9s HtmY0x0M8Z0MJbM35SZBtl8bzeITArBfzpSsggAdsF/BGBzDxms8qErikERqww+W6wvd qVHEIXJ1SRXEMNKzxB4O4RGsHIsn2PK6WoGZSU7o/WmdjvFtpo8PVdmKeTDoHsbNhJHK rMhlxC6Z/NHzoCPcEkWzDWFOaUz5EVgVlFWeFkJ8id86bZkSDSpaYCXr+kDPJu4/6cCg gxy3VuaGmMHAoeT3lKNq/rJPxQjb/UF7MPG4vdc4yUd61gmj8pJoBhG7xFoeEhwdCpnI IaZ2SoDstCFZ8M2jjRD2ts5ZKZpSNUD76Ys5ykSFTZayzdbRwp3aWc5ROe9kJK0tnCYb Ig1owyHfswIYjRHpwlKiEwCEnFayKBmTYKjgtGK+5AID2duGWMxtdQNGmtw2Mi1LOEXg GsNd2tYXyQme3lUlmSHnNSo19WcffdFv/WD2yORp/h3FjVZK9FYrrnM9JPMaVlsskiaT farThKnLaSdRVQHoogrIINNuAUWwGZuQaBJJrcfhJI2tYCIKicW+WWxyaqj29uxjVI+t UCiSUCEekJfWJudzjQbLEmPPsSsG1lcheJ2RXA8mehgluasdvE5+8m3BhY5QZx0dPCm8 4zO2Qsw3HxN24igEaRhnnQU6qV1OqauE0fHNPxPcIytWIGNC1mgQMHHO/Fcy2B3K/GZ+ lqdwNNDwMDLPQQQOuWREOM/kRMOpHEg4gsP00c0jRwfEPEI58Zy/HkJESas9+pt+0m0W aR0YFCUVTFlA9iGzQexuQzHReK6mMSkSEGdr/CIiBhTHIivVjvOZ5llu7k6IpN2MPCLc MVzGTKrwGwTqpDGirZ/DmNJszNwFRFHrdyAzWlOZmNgG2OEhsEJjza8FeJCN/Edb1Uin QQUznmU9BZf7HqtWPwwlwYeF7x1GMCpEec2lxKoBurI7WefXopicXQ78zQ4RnlbmEaT9 7eUqinB8xjMdjAiStCIiLmZ6uFSAai5oaGaHuM09GN1GfyTf1cdpjw4GptmescGNzZgK lpxCJuTN7IWcvIgJSm4m4VwejiYV4CemEGyZwLF1shPwIKtABA9TCCN9MqgeiJKZqefW +l/rPVgGrKwkiVo3CKrtHYF/qa7nbG65wLMvKxT4wTCGKFrNkmwlAolw1MAz5UBLBNL5 ZdZwljNwTc1/EafA2QX45xyh0hsGBW2qnFvwpWgz4sym1EgIGNO2IhoBNd+BvCjThc29 qJ8+4SzUakEOwkrHgmxe9cN7LAvcycaeLJTUYySaAqPsKB70AwhhfAqoci0PQIqqaDI/ umMtHuM24ZrLTRAUAtyWOs0WCtrfPcKBFK6FgeWyJkSKKtMltezistUffRaiZkBv3ckk Ka00QA06KUgdGl/VTZkVosMTaS/K1mYvTQeMYxWjOOfarw3e+Uosay+wzEg86t2bPwBS Ounsworth, et al. Expires 6 June 2026 [Page 124] Internet-Draft Composite ML-KEM December 2025 niTOKAs2xYXnGTHGUVnzDwC30KguxCpNPZ0FKEZy/tT/3mQkmhySdPDLJwaZBcTxLwP6 SfM+7qUIcPGVzWg6ZgDN/cUivoGmRwY0dGJtCKVxFsP1uM7zhdRdvNmFopxPNAOhtgT/ HAMMjMfCfAc9NJuN2wiYpml3Ow+vcwaSIUD1XYYrmkTzdR73nivBfsWEPqvREi2+HYGm DN9sickO/Qg6gvIOQg0PvEZ35ljoWKoWHobw5kezuowC+c0dDAuCwRZIRATpXeCt7yAJ tQGD8J8NVCvszJ949B+YLkOB/usYeeqRplwSYNudMMzNvvCGqF9h3dltGwbpxqD33oMC NlJ3xc3UWOol7FFonY91KY+sfAx4Esb5hwH6+g9zaAznFZhz9KrHsmhVGIIyxAr0fKNu 8e+vTUr75I7hQMGM0xk37G+d5aU+5LBFoxNaXs2/5IB+uRmf9qHJiCeORO4qvhqAPUxz XGXrGZk1HiqrLO0sSh4dDTZBkRPssymyLQcvNiy5zArCvSNeI2OyfipigUEAa9pzl9Q+ jDyS0D+7c2tZ6xJTdWaW0rfHylyqUTwNPrYshN1tsXsKTvIu3BSD1QTCFzloreFYXxFu P7STR2TGBVgAIPcEdK/RQJPZq5nZcYUtWpQiAE7FotZpW+yxTqjqUPRVUmfZqAV6s7Aq O3SLvoJqgmAsPIIMPzUHPirvn4MDB+b", "x5c": "MIIUozCCB6CgAwIBAgIUJsH7T6FLJ+JUNaBJWYgWVhjPp3kwCwYJYIZIAWUD BAMSMD0xDTALBgNVBAoMBElFVEYxDjAMBgNVBAsMBUxBTVBTMRwwGgYDVQQDDBNDb21w b3NpdGUgTUwtS0VNIENBMB4XDTI1MTEyNTEyMTMxM1oXDTM1MTEyNjEyMTMxM1owSTEN MAsGA1UECgwESUVURjEOMAwGA1UECwwFTEFNUFMxKDAmBgNVBAMMH2lkLU1MS0VNMTAy NC1FQ0RILVA1MjEtU0hBMy0yNTYwgga2MAoGCCsGAQUFBwZCA4IGpgB9J8v0RQdjm0lu iVHGeVufcz2KcLCe4DvVJJrMc2LVBlqvS3+s4AbXEIOtOl7qggsp67/T7BAXyiA0O7Iw 1rdns104ca9PuXPwWzLKars9BRa4oGgO+cNwKHC8lxU0Jr2we2ZjTHQzxnQwlszflJkG 2XxvN4hMCsF/OlKyCAB2wX8EYHMPGazyoSuKQRGrDD5brC92pUcQhcnVJFcQw0rPEHg7 hEawciyfY8rpagZlJTuj9aZ2O8W2mjw9V2Yp5MOgexs2EkcqsyGXELpn80fOgI9wSRbM NYU5pTPkRWBWUVZ4WQnyJ3zptmRINKlpgJev6QM8m7j/pwKCDHLdW5oaYwcCh5PeUo2r +sk/FCNv9QXsw8bi91zjJR3rWCaPykmgGEbvEWh4SHB0KmcghpnZKgOy0IVnwzaONEPa 2zlkpmlI1QPvpiznKRIVNlrLN1tHCndpZzlE572QkrS2cJhsiDWjDId+zAhiNEenCUqI TAIScVrIoGZNgqOC0Yr7kAgPZ24ZYzG11A0aa3DYyLUs4ReAaw13a1hfJCZ7eVSWZIec 1KjX1Zx990W/9YPbI5Gn+HcWNVkr0Viuucz0k8xpWWyySJpN9qtOEqctpJ1FVAeiiCsg g024BRbAZm5BoEkmtx+Ekja1gIgqJxb5ZbHJqqPb27GNUj61QKJJQIR6Ql9Ym53ONBss SY8+xKwbWVyF4nZFcDyZ6GCW5qx28Tn7ybcGFjlBnHR08KbzjM7ZCzDcfE3biKARpGGe dBTqpXU6pq4TR8c0/E9wjK1YgY0LWaBAwcc78VzLYHcr8Zn6Wp3A00PAwMs9BBA65ZEQ 4z+REw6kcSDiCw/TRzSNHB8Q8QjnxnL8eQkRJqz36m37SbRZpHRgUJRVMWUD2IbNB7G5 DMdF4rqYxKRIQZ2v8IiIGFMciK9WO85nmWW7uToik3Yw8ItwxXMZMqvAbBOqkMaKtn8O Y0mzM3AVEUet3IDNaU5mY2AbY4SGwQmPNrwV4kI38R1vVSKdBBTOeZT0Fl/seq1Y/DCX Bh4XvHUYwKkR5zaXEqgG6sjtZ59eimJxdDvzNDhGeVuYRpP3t5SqKcHzGMx2MCJK0IiI uZnq4VIBqLmhoZoe4zT0Y3UZ/JN/Vx2mPDgam2Z6xwY3NmAqWnEIm5M3shZy8iAlKbib hXB6OJhXgJ6YQbJnAsXWyE/Agq0AED1MII30yqB6Ikpmp59b6X+s9WAasrCSJWjcIqu0 dgX+prudsbrnAsy8rFPjBMIYoWs2SbCUCiXDUwDPlQEsE0vll1nCWM3BNzX8Rp8DZBfj nHKHSGwYFbaqcW/ClaDPizKbUSAgY07YiGgE134G8KNOFzb2onz7hLNRqQQ7CSseCbF7 1w3ssC9zJxp4slNRjJJoCo+woHvQDCGF8CqhyLQ9AiqpoMj+6Yy0e4zbhmstNEBQC3JY 6zRYK2t89woEUroWB5bImRIoq0yW17OKy1R99FqJmQG/dySQprTRADTopSB0aX9VNmRW iwxNpL8rWZi9NB4xjFaM459qvDd75SixrL7DMSDzq3Zs/AFKeJM4oCzbFhecZMcZRWfM PALfQqC7EKk09nQUoRnL+1P/eZCSaHJJ08MsnBpkFxPEvA/pJ8z7upQhw8ZXNaDpmAM3 9xSK+gaZHBjR0Ym0IpXEWw/W4zvOF1F282YWinE80A6G2BP8cAwyMx8J8Bz00m43bCJi maXc7D69zBpIhQPVdhiuaRPN1HveeK8F+xYQ+q9ESLb4dgaYM32yJyQ79CDqC8g5CDQ+ 8RnfmWOhYqhYehvDmR7O6jAL5zR0MC4LBFkhEBOld4K3vIAm1AYPwnw1UK+zMn3j0H5g uQ4H+6xh56pGmXBJg250wzM2+8IaoX2Hd2W0bBunGoPfegwI2UnfFzdRY6iXsUWidj3U pj6x8DHgSxvmHAfr6D3NoDOcVmHP0qseyaFUYgjLECvR8o27x769NSvvkjuFAwYzTGTf sb53lpT7ksEWjE1pezb/kgH65GZ/2ocmIJ45E7iq+GoA9THNcZesZmTUeKqss7SxKHh0 NNkGRE+yzKbItBy82LLnMCsK9I14jY7J+KmKBQQBr2nOX1D6MPJLQP7tza1nrElN1Zpb St8fKXKpRPA0+tiyE3W2xewpO8i7cFIPVBMIXOWit4VhfEW4/tJNHZMYFWAAg9wR0r9F Ounsworth, et al. Expires 6 June 2026 [Page 125] Internet-Draft Composite ML-KEM December 2025 Ak9mrmdlxhS1alCIATsWi1mlb7LFOqOpQ9FVSZ9moBXqzsCo7dIu+gmqCYCw8ggw/NQc +Ku+fgwMH5ujEjAQMA4GA1UdDwEB/wQEAwIFIDALBglghkgBZQMEAxIDggzuAAFzlRaE itRS3pBGxmmaeY75bJFFn+rK1t0vI5/Bt9njimMlVM0tqsDue/MKddNEqOuWxM2aYBlH WLVJzFl8YbvYV1j9L6ahLTEtfGHWhtyrgf0q8t73AKzykg2E7BnYrhEZXzZIZY9HvRtE 4l1jXe6W0Ti5ATMrQyod0X623NmldzW8Wm5c+8HBs7+mfAuqEjubWWMdwPaWppEGNwHR GdiqNXZWb1JpPlN9KgbIC6dJkEXlOWzpi+XVXmjq2c32PmQb9vOyq/R3N/ICGIPd6E3R 4p/UWoNSyZZg/aa8Gvc2RJwkcLQaMWZYTaThlgMn3RoD1WkxgIkbL1LcAz4phk+BDyes AfCygjFzfAoBt7WC+NcFYfFAJRrGPCzxNEgUiv0cttm9iBBs2YsAjxBecaLqbxX4Z/4C g8BcK1hznM0zWoIsP7XTXk1o0NCf6Sm6xdC8p1jbCddYVccPpvD1mlcv09kY15wA10XY dPEB4gn/JqJ6PEcu7/ueZVa5ISFWd5VzqHP23AEy43zijlixBuww24CxKwvnQ9Ez1mm2 P76dtsENABKiKj2Le6uULpoJjE19JPB4kw9E42DZD7A06OXrFAbYf7tDAFjyJobhF/9d h2dUvGjy84ld5/9SCafA+MvGP6tM5Tx9SSF64/LHthkw78kgQfxoU2shl6IISyjJhfha xqViMMRrCxEWCFCw1XFperLdixHYAqzhRU4fCLK5/QNhP3TgFKr6jbM7o7/oFa7irHK9 1alNbWXBCIBbThUiQLfhYaQ+ogTn2q+BggxLOE19H3hvYszWY7BFQQlRywPLIVs/EhZP BDegmfuMSJ7y1r7LB1zfvm8wIkBsBSQ7cT8j8n3EBDy64MYgaBw0MOqtRFHbyrVYaiMv hcubfiz5YhBXE+Gutwi6sm4pgYAhCkz31tNxLjmAnr8M2C3DwCd8qMEFtBGr8Ea4WE7w u4hdtm3GOp8FULWHegVn4PwBShQK4GOvj6YvwLne+jnAIuSFMOjg2GSaZ9aMEOA7wM5F 0XYXBzvEtayONnNxjMkb0f+14ASVRguECloxKDZNt4UfP4lLbCnaUOnYJmuRKR5rUaj8 qrTMd1GFCZQEa3COoGoJFRrd5Ib2XcIv/jSBRRAA9dgfncC0aRYpe/6c/qqWMWfEGKJ0 P8JeZZLMOJGeg20lUw+QgdgGO4rCbfm8pcp0RSutUk32p9NCGJfJMEvyZxUpKqAHrL1F K1moIib4wcZqCQsfyDwCJw60mrmCB+UbD2iYtT/tTyhz/gYXMOf1gHgOZrK7ZitA00UK JtQCUD9/5GxMnXXUM7e52GR6kmBmocm7TooXbYpi5Zz8EcDUzCbMCkGr2rTxs01kcU6T bcTsdYEzascNx28ExebRSkQAlTY+2da+nEayNxiMJwo5H5MaOXwn5+xdztB8+gpAgBje Cov/J8RtnpRc2kvManHBKo6yyAp/Y2Hsb4Mrvnev2d0C1Wj38KhXrdfbxHkTH6ZUNZQt f1cfC/e/9i9+7erq0D2RWx6/lMkWdxZh3E2tcq8QE9YcvJBN70N+GtVECX3aU/bxi+UB ifKEktrEjynA/2P/ohLtxMtJbu0YdjVr4GLmY+0njschjiaX4HEDjDMmkWLiPht7H8rk mgc+TcFAi0s6U/dIhWP7qUo7K1kCdLii7mUatc8UTquX2hnSEbfvR0lb5jQPpVfm6h1i vN9+9XQp9mR22DBcodsKWlfk5mzvSe92aARG5DKTzwyqZHOCABTDualNifTTu82DcsRg qDeeBEfMI0O2nsZOzb4muLtvs3iS3bczTxjOZJY45gz1APry71AgOOkpr86BBV5bum5T JbbW+dtxogrn6gfiomG6qhDtqrLCA2U37M8eHReB2D1lCg6Y896nwOadqFgXWVvALfpu jKSsSZAxbnYbD93UKv128RW175iauhMYcIcPvDA9ocZZwITIpNINM9CLkMm28YzKF3SB c8IHDgmUtb8c2k/pZyYe2qGA+GXgtjy/mxh9MCIdc5yQNM19cjxs/rjNGx89pVnAV8Q4 CcHpUFROHZqeXinoD46rjj78tuhJIVNSwOzgc0ZmqESpvE+3BYFzQ3CkyQfiqAFcQxP8 48goyGRmfWmdygoikzuue8p98V7AjjIkrvoFdnp0jPLt5YXtIHx0bQ5eXi1cp1Qwz3Vl sRva1H+ngurCYLk6BzLeY4pw2MaZV0eT0yDp/4ZNJshxtRHRrgUpIRyyukExAbpsSYm+ PpBOtcuZ6Dm3HJzsQc9UWGsFh4bvZzcuF6mWFEDLdXOZtIoScem6lPiV5FOEfied0QUA mPUc5hJTE7X4gD54lsqt0MGrlc7s+AIU32EaspKBQZhLKPFXOfPLvWyzlrm9tJ3mIq9Y GhjYxVhMMEAc0R4Gi27m+QMYO01mSXSKTfMj9RHY9Fnx3ruiViknxoTB3JHEUnHGUbmL 80/k/w40f7niaug9eBA7oqEaDVFP38p2Qtyv9LOrjxtj/RgTq8L6Uwuz5tn3rYeotaQD 3Rt+d2d4T3bBItar4WixHWB5+KXWQfZNaN6iISKcKhAoLzttAnIEaQYhw8YvOLo4zZzC UkZMVSjEQKowLVLk5bMNFwOewAkW2DzS7UxDDZ526+jR8BNIT2dG/ZD8JE/sexJFG5PI qOlVoAvwF/edEV0nAddAFz4g4MMF4ocdU5MIDmkuoUUHIUlW419tgKONxLjxBg7q0xgw +Q90uTlQtqY0nE7nRb8VFPo6mn5FnfIUL7FappGR40MfLSXNAWNMU7QS2E08RWWC2FEV pj0vIYjstwpC1+e+SL1ktyeREoRyMPm9KStTCVJ8d/xfcNdAarUjbvYF4pYiG0CRpTui goLKqMjty1VT2PXKY7U7dTkUNGkBwI6LBNUd8lUl8Fj250KtauQufaw4YPVV40L0itTP S9bd8ypm8GrtZcuDGCDTrdKx67S0XaUVTIP7xJr76TBWTWZf9fKLE+TnHCb3sj0neGZf JI+cYU0zs75uOpZNYvW9hstpKmk4qf7gPX7YiODJQC938W3ZStufoix3Dw+yextGnXkc VuhL9XeVvjbkRbfcBLem/EfldLlQK5Gy/hj87xXt0dbBGc4l9uonfy5lS51e/oNSUJLG Ounsworth, et al. Expires 6 June 2026 [Page 126] Internet-Draft Composite ML-KEM December 2025 SUiKltoEJuYTggD4hI1a7YN921ZmLvI7V7K3cvOFRlTGweAYQMovajQ5GsLYPhZoRId1 zH7CM75w0cJjUEIX2B9nRLMNv4ZMNyt4UEOCE4vPj5bY411KTdkGyNFYP/QQlwVjegSo R37DWOR0GMPmsr1AQ4XjgG6oKFDQW+Lq/4BoHHKeEl6fbJSJ3icT64hLRBU2ba1pc4hO hQye3FpAjfNBO2Ra/Wc+DRU26QeKuwzSuW9dwJ7o5wcfIuTkU0hXFwoGKAdJaZXVFCGR gc9ESfQj4G7b+nM2Qh2DWoNdCpymS74Dby6Zbdao43NV0+967iJ3sb+j72J12CgWwyoR 1XtwhGYrovc2fQjT7WJONZXcrd4+QGwV0fh0vvTnNkKX49hGYaz4tuXoH6plXi0D0X3/ IxgLw6IDuu9IBBO2RIVoLir+4YxH9JuDzzI9CiZk8ieMeFKDWmpbbNmPGWm4XHD5QtGC h6m195i3x3fR44plbtxXJSE4f6VG3+Wd3+/3IGVOw9XaIWaYG42jBZADpgGGcpT6fF+a V2eGXiZMRMlgHHI4aDZOOt93PPnq7A2pYLl44gsOehx+ZzLuAw5q57lzjnlx+O2S1pWK rXBcrN+yH8zjluKuJxjPAAzYWZDd824TRzbkAOcs0hoefrdkoaqaWHcGiVM3LFj4FO/U cNQz+aJ/x6zrm0cGwDwej47AtnJlX9cPO9tQUkuP3HHHSR6ldDXfUctkI0BC7Gbxq69T RZH4PsWLTCwD45pyR9frdMYeXS5ByhA+Vt1QnRu21dhCV8xNw99MBEMezbt3EZNXNjnF ssIfBKfNRthhhU3f05cfre2q2rBlLbuzP9DyKhQkmxiULxr78qtpqzUNQHTd3vg9WAkz eF1hRDRccqFFnPH+07qUgxGlbtUzi9whXBKghoioSC3sWOUG0RuW4d9SqOgPEuCj36DI nZ0Kj8pUm5Nq1T4H40DBz5efZf9AcFWq/X/sW7eV4aMU8451JIMd6YXzb4xCkeFtR47z Q6TaL8VzlUjRy268/mC0q73Sb0N/KzQu8Sj5aEGDdF7vAnDXB+D9u6RDN5zso3HiKRj+ vFU3CQZKwcCrmBjP7h5KIW7/HPLWQyKxV80TzQXTV+IuQlMlp3y7r8F1rfLX/pSGz9SZ Td2K5OwNorkppiRJwJCg+zATIKGYBsEv8uBkqBDCMYmUtcgkKzZKTWBtmrDxABcwO01Q b09QpAml1g4aJS5re4C0xtLW2fAAAAAAAAAAAAAAAAAAAAUPFhkcKQ==", "dk": "3pjWahC1fX6wZRWferDF1otbBRNqhu1iB7pL7KkJaYu0IfqRu4Gfr90qn0Amm 2vpIhLyWljzMSvRxCS31mONMzBQAgEBBEIBMG8rFpi3W5ov00lHPOLuBRXFpsH8QxnJi piCaL7awgBCoE5PDIc/WtcxaBnAxgYvSWOylvIb0tb5gd8pV/59KwqgBwYFK4EEACM=" , "dk_pkcs8": "MIGkAgEAMAoGCCsGAQUFBwZCBIGS3pjWahC1fX6wZRWferDF1otbBRN qhu1iB7pL7KkJaYu0IfqRu4Gfr90qn0Amm2vpIhLyWljzMSvRxCS31mONMzBQAgEBBEI BMG8rFpi3W5ov00lHPOLuBRXFpsH8QxnJipiCaL7awgBCoE5PDIc/WtcxaBnAxgYvSWO ylvIb0tb5gd8pV/59KwqgBwYFK4EEACM=", "c": "/OYj/aOB3kTcBVfd/g5P9GEVwaG3gcxhk0HH3YvvKZj3kMNJHTvA2G7FggNMnl Oi2asZIDeXcOUomiWLvPVmAemyRA7JMZ75/JAUKPcdk4JFtdKlXJ/1JiqU13tqZgymrK 1F67q94Cc683O0mxWGxWSTlutZBkqfScQY9hbJkbVaNhSMXi7LSawrxa22ygE4AuGZ5r muKqtJjX45k5NBJeFij/6DSmG29OnfuaBbFYVd+ltZu9i881m3UVG60fRVmw8UyxDPf4 yihKHEwq+75Ob6h7Mhovm3hsWzX6SQgQtNlpZssmV0t6DnZPhyqXaaO7x9fZ7EbdqrOP ede0G4de7RCJ8lSKeTSGlmJUiCNIkgYMxt4qc/OsGNtgb98z4tBlPFqq/W5kMKQBPAPa iGZpcdQW2gPE5uY/JuYTqJZ2mTBpCmZNFe6eW9bM3EvVFhquRcfXxPGPVTApRKPUafub ranvuZeXvaDPX3Iaub+MTRGrqIy6B4t39KYXhJcUHrIKCadpRKAkZn7QU65gbAeNevE1 dGwgPPtXpOONDSNIzrj4UZ8GCF5sb/iiyRdgdTIpIEO/HFtJ0PrJpfwsoh63dFeiyze7 83poPMQqyWBLiRAlSfananekXIcgD2LOk7NiwPTHNF+7LJswdGcDnzW6rfGrER6xbHoT rDJE7wbUfwIhcxXpdGq1vna5qtNuMzwFNqNt5iQ2RwxOsZ/1BBle/0WIrEh5fBmsdPLs QiLC7YiJA84nzm6GQngVmA4rVN4edoRGRWUN2zQ6egI/6YW/OUzTsIl+TdYYXo4DPaD7 dSkIhbeRhaVYyR3MhBXq4zpodODaEPllPyEsfXS6zqEz2tJpQivId6uRJsrIR4cpxRsw Jy4DQI01UzZEsDHpM3lZ56HsGozwmU3N5enc74ZWi2D4weciDVVkiMP+Pl2I4c5K3pqX vLViikOh1nC7Fq9Ovm/e0n1BPYffSvr0O9+DYReMVCahr1EsnHIZHemHCjz3IKKQa1G/ AOsaf6CoHN2gC7nE003m1R8eNt1nE9BwHwPSRv729g+kBsqF/TA+KuDaNU4iylivjxXK iM9InV8W7NGWdTlWv4ekSqAUZrRkHFmvK1oygXuEWaaJhQRD1aanB+PrVh9ONoTBNjiN hS9GFrTx30DcoZ+LIpO4SzlP62bcxpKO6/8CrwHDth6wzD/KykkcfGHbGFD/XG2lA6Es eSHrdidAavn6uvGxVTf+0xwzne3fRfs83uikanSx9qawqLcLfy+QtLM1b670EVhRAouD IqT0/jqcHDZ59ePjC7kyvlvdoyi9HbZ3XBVh8nZIeHDArpEkXERmFWN0eNtA721a/BXF K19xNuE6iv3ppkpiPdswPkpKv1+jmavR8BFiJ2rZBfl1SmPDzY8AJfM13i5HTGiUIv7x Ounsworth, et al. Expires 6 June 2026 [Page 127] Internet-Draft Composite ML-KEM December 2025 YQ5dGzbi8zIGd6g672u7mYtG4ILXrsCglL1/yvoSDXUG3Jvqai+7YKUtdjVaFgsKEKdb b4wScox1VnJAp0kpNKUaIMVEc97SFB/zWqyNVB0vDILs9S7E4icBWU989zyCd01P46a9 cH542InjkSbhOIJLKkYsffBsI3vwhHVM4g09cx/hOa7wNHxzq8wEgNgiO0q07OdinBf1 5s3kOHKV1XRp60GkVVg5bXcoK8XsBpbTXaCvhA+Oh13jR0BTrvbH4V8GF6sF3nva3GEI PcYJObjHW5VoerY32eviQkgnqb7Sg8HoRJXT0aU45eWtVI3M2EhSfCUQrHunmtDMQB2k 4G80WX+9kdCwD+/IxBRyB7mJYnLJS/TvsmWW0Zn//tOfdyE+ZWNwnIGkg79QLtK9fF3O IZ0z8x7vYyPBC8DUgfmxbBlq+CIPD52ZwvzcnrJc9vnVy1e4KDIMzSIYxvireiVnTB8A GOkdmEIrjbSIfNfTst6CB7x0lNlLCpxRVzsHd7aTWuVIkOB7gcuqtl+YCYEbQrw2PX4J fCZr72C6czA7YK5HhBsZdRRTDdCnr1HMqcV6fAVoLv5xiZRnvAvosLohvypUi7FEDYAi RVm9lrl78OdGXqzHfcQxYtMJVqfzp7yaHYeRchg0DlDtPWWx9ABk3zmigEAbjDbg8Fk/ PWYqZycgwxhRidtQi8TJ7BhfoqhpT6RZUCoCK1uOC+7TAcTOeuoGtuvsZJpEQuqk7/M8 qy5U3BP4rRACuu/ubc0kDUGhbKWJ3nMK+65IxDMkzREQziZqNqQMRbC8Lo8fi8O4ZxGx fF/rJ9XLxWJNuZ4ViDzdMndt25GgPF", "k": "QAIDrF011eJrV6DkAs23A5mAtewNDDUCIhPuQFD9eig=" } ] } Appendix G. Contributors and Acknowledgments This document represents the results of a many-year effort by the LAMPS working group. Over that time the following working group members provided valuable review and commentary on the document: Serge Mister (Entrust), Felipe Ventura (Entrust), Richard Kettlewell (Entrust), Ali Noman (Entrust), Peter C. (UK NCSC), Tim Hollebeek (Digicert), Sophie Schmieg (Google), Deirdre Connolly (SandboxAQ), Chris A. Wood (Apple), Bas Westerbaan (Cloudflare), Falko Strenzke (MTG AG), Piotr Popis (Enigma), Jean-Pierre Fiset (Crypto4A), Carl Wallace, Daniel Van Geest (CryptoNext Security), 陳志華 (Abel C. H. Chen, Chunghwa Telecom), 林邦曄 (Austin Lin, Chunghwa Telecom) and Douglas Stebila (University of Waterloo). We wish to acknowledge a few people who have made notable contributions to specific sections of this document. We wish to acknowledge particular effort from Carl Wallace and Daniel Van Geest (CryptoNext Security), who have implemented each successive version of the draft over multiple years to provide valuable implementation experience and hackathon testing. Thanks to Stepan Yakimovich for contributing to the reference implementation to be able to provide and verify hackathon artifacts. Thanks to Giacomo Pope (github.com/GiacomoPope) whose ML-DSA and ML- KEM implementations were used to generate the test vectors. Ounsworth, et al. Expires 6 June 2026 [Page 128] Internet-Draft Composite ML-KEM December 2025 We are grateful to all who have given feedback over the years, formally or informally, on mailing lists or in person, including any contributors who may have been inadvertently omitted from this list. Finally, we wish to thank the authors of all the referenced documents upon which this specification was built. "Copying always makes things easier and less error prone" - [RFC8411]. Authors' Addresses Mike Ounsworth Entrust Limited 2500 Solandt Road – Suite 100 Ottawa, Ontario K2K 3G5 Canada Email: mike.ounsworth@entrust.com John Gray Entrust Limited 2500 Solandt Road – Suite 100 Ottawa, Ontario K2K 3G5 Canada Email: john.gray@entrust.com Massimiliano Pala OpenCA Labs New York City, New York, United States of America Email: director@openca.org Jan Klaussner Bundesdruckerei GmbH Kommandantenstr. 18 10969 Berlin Germany Email: jan.klaussner@bdr.de Scott Fluhrer Cisco Systems Email: sfluhrer@cisco.com Ounsworth, et al. Expires 6 June 2026 [Page 129]