LAMPS M. Ounsworth Internet-Draft J. Gray Intended status: Standards Track Entrust Expires: 7 May 2026 M. Pala OpenCA Labs J. Klaussner Bundesdruckerei GmbH S. Fluhrer Cisco Systems 3 November 2025 Composite ML-KEM for use in X.509 Public Key Infrastructure draft-ietf-lamps-pq-composite-kem-09 Abstract This document defines combinations of ML-KEM [FIPS.203] in hybrid with traditional algorithms RSA-OAEP, ECDH, X25519, and X448. These combinations are tailored to meet security best practices and regulatory guidelines. Composite ML-KEM is applicable in any application that uses X.509 or PKIX data structures that accept ML- KEM, but where the operator wants extra protection against breaks or catastrophic bugs in ML-KEM. About This Document This note is to be removed before publishing as an RFC. The latest revision of this draft can be found at https://lamps- wg.github.io/draft-composite-kem/draft-ietf-lamps-pq-composite- kem.html. Status information for this document may be found at https://datatracker.ietf.org/doc/draft-ietf-lamps-pq-composite-kem/. Discussion of this document takes place on the LAMPS Working Group mailing list (mailto:spams@ietf.org), which is archived at https://datatracker.ietf.org/wg/lamps/about/. Subscribe at https://www.ietf.org/mailman/listinfo/spams/. Source for this draft and an issue tracker can be found at https://github.com/lamps-wg/draft-composite-kem. Status of This Memo This Internet-Draft is submitted in full conformance with the provisions of BCP 78 and BCP 79. Ounsworth, et al. Expires 7 May 2026 [Page 1] Internet-Draft Composite ML-KEM November 2025 Internet-Drafts are working documents of the Internet Engineering Task Force (IETF). Note that other groups may also distribute working documents as Internet-Drafts. The list of current Internet- Drafts is at https://datatracker.ietf.org/drafts/current/. Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress." This Internet-Draft will expire on 7 May 2026. Copyright Notice Copyright (c) 2025 IETF Trust and the persons identified as the document authors. All rights reserved. This document is subject to BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents (https://trustee.ietf.org/ license-info) in effect on the date of publication of this document. Please review these documents carefully, as they describe your rights and restrictions with respect to this document. Code Components extracted from this document must include Revised BSD License text as described in Section 4.e of the Trust Legal Provisions and are provided without warranty as described in the Revised BSD License. Table of Contents 1. Changes in version -08 . . . . . . . . . . . . . . . . . . . 3 2. Introduction . . . . . . . . . . . . . . . . . . . . . . . . 5 2.1. Conventions and Terminology . . . . . . . . . . . . . . . 6 2.2. Composite Design Philosophy . . . . . . . . . . . . . . . 7 3. Overview of the Composite ML-KEM Scheme . . . . . . . . . . . 8 3.1. Promotion of RSA-OAEP into a KEM . . . . . . . . . . . . 10 3.2. Promotion of ECDH into a KEM . . . . . . . . . . . . . . 11 4. Composite ML-KEM Functions . . . . . . . . . . . . . . . . . 12 4.1. Key Generation . . . . . . . . . . . . . . . . . . . . . 12 4.2. Encapsulation . . . . . . . . . . . . . . . . . . . . . . 14 4.3. Decapsulation . . . . . . . . . . . . . . . . . . . . . . 16 4.4. KEM Combiner Function . . . . . . . . . . . . . . . . . . 18 4.5. Error Handling and Explicit Rejection . . . . . . . . . . 19 5. Serialization . . . . . . . . . . . . . . . . . . . . . . . . 19 5.1. SerializePublicKey and DeserializePublicKey . . . . . . . 21 5.2. SerializePrivateKey and DeserializePrivateKey . . . . . . 23 5.3. SerializeCiphertext and DeserializeCiphertext . . . . . . 25 6. Use within X.509 and PKIX . . . . . . . . . . . . . . . . . . 26 6.1. Encoding to DER . . . . . . . . . . . . . . . . . . . . . 27 6.2. Key Usage Bits . . . . . . . . . . . . . . . . . . . . . 27 Ounsworth, et al. Expires 7 May 2026 [Page 2] Internet-Draft Composite ML-KEM November 2025 6.3. ASN.1 Definitions . . . . . . . . . . . . . . . . . . . . 27 7. Algorithm Identifiers and Parameters . . . . . . . . . . . . 29 7.1. RSA-OAEP Parameters . . . . . . . . . . . . . . . . . . . 34 7.2. Rationale for choices . . . . . . . . . . . . . . . . . . 35 8. ASN.1 Module . . . . . . . . . . . . . . . . . . . . . . . . 36 9. IANA Considerations . . . . . . . . . . . . . . . . . . . . . 41 9.1. Object Identifier Allocations . . . . . . . . . . . . . . 41 9.1.1. Module Registration . . . . . . . . . . . . . . . . . 41 9.1.2. Object Identifier Registrations . . . . . . . . . . . 41 10. Security Considerations . . . . . . . . . . . . . . . . . . . 43 10.1. Why Hybrids? . . . . . . . . . . . . . . . . . . . . . . 44 10.2. KEM Combiner . . . . . . . . . . . . . . . . . . . . . . 44 10.2.1. IND-CCA2 Security of the hybrid scheme . . . . . . . 45 10.2.2. Second pre-image resistance of component KEMs . . . 46 10.2.3. Generifying this construction . . . . . . . . . . . 46 10.3. Key Reuse . . . . . . . . . . . . . . . . . . . . . . . 47 10.4. Decapsulation failure . . . . . . . . . . . . . . . . . 48 10.5. Policy for Deprecated and Acceptable Algorithms . . . . 48 11. Implementation Considerations . . . . . . . . . . . . . . . . 49 11.1. FIPS Certification . . . . . . . . . . . . . . . . . . . 49 11.1.1. Combiner Function . . . . . . . . . . . . . . . . . 50 11.1.2. Order of KDF inputs with Non-Approved Algorithms . . 50 11.2. Backwards Compatibility . . . . . . . . . . . . . . . . 51 11.3. Profiling down the number of options . . . . . . . . . . 51 11.4. Decapsulation Requires the Public Key . . . . . . . . . 52 12. References . . . . . . . . . . . . . . . . . . . . . . . . . 53 12.1. Normative References . . . . . . . . . . . . . . . . . . 53 12.2. Informative References . . . . . . . . . . . . . . . . . 55 Appendix A. Maximum Key and Ciphertext Sizes . . . . . . . . . . 58 Appendix B. Component Algorithm Reference . . . . . . . . . . . 61 Appendix C. Fixed Component Algorithm Identifiers . . . . . . . 62 Appendix D. Comparison with other Hybrid KEMs . . . . . . . . . 65 D.1. X-Wing . . . . . . . . . . . . . . . . . . . . . . . . . 65 D.2. ETSI CatKDF . . . . . . . . . . . . . . . . . . . . . . . 66 Appendix E. Examples of KEM Combiner Intermediate Values . . . . 66 Appendix F. Test Vectors . . . . . . . . . . . . . . . . . . . . 70 Appendix G. Contributors and Acknowledgments . . . . . . . . . . 131 Authors' Addresses . . . . . . . . . . . . . . . . . . . . . . . 132 1. Changes in version -08 Interop-affecting changes: * Changed the private key serialization to carry the TradPK. Ounsworth, et al. Expires 7 May 2026 [Page 3] Internet-Draft Composite ML-KEM November 2025 * Fixed the ASN.1 module for the pk-CompositeKEM and kema- CompositeKEM to indicate no ASN.1 wrapping is used. This simply clarifies the intended encoding but could be an interop-affecting change for implementations that built encoders / decoders from the ASN.1 and ended up with a non-intended encoding. * Changed the domain separator strings to match draft-irtf-cfrg- concrete-hybrid-kems-00, but no reference to it because I don't want this to get stuck in MISREF. * Added a normative section saying that the composite MUST forward any errors produced by the component primitives. * Fully removed SHA2; changed all HMACSHA2 to SHA3. Editorial changes: * Clarified that the ECDSA public key is raw X9.62 with no OCTET STRING wrapping. Test vectors were already correct. A full review was performed of the encoding of each component: * ML-KEM: - pub key, priv key, ct value: Raw, according to FIPS 203. Test vectors appear to match. * RSA: - pub key: ASN.1 RSAPublicKey. Test vectors appear to match (manually inspected "id-MLKEM768-RSA2048-HMAC-SHA256") - priv key: RSAPrivateKey (CRT). Test vectors appear to match (manually inspected "id-MLKEM768-RSA2048-HMAC-SHA256") - ct value: length of ct for "id-MLKEM768-RSA2048-HMAC-SHA256" verified to be 256 bytes, format hard to manually inspect. * ECDH: Inspected test vector for "id-MLKEM768-ECDH-P256-HMAC- SHA256". - pub key: The wording of the pub key format in Section 2.2 of RFC5480 is extremely confusing in how it would apply outside of a SubjectPublicKeyInfo. The Composite author's interpretation was for it to be raw X9.62, which is what is already in the test vectors: verified to be raw X9.62 with a leading byte of 0x04 (uncompressed). Normative text in Section 5 is incorrect and has been changed. Ounsworth, et al. Expires 7 May 2026 [Page 4] Internet-Draft Composite ML-KEM November 2025 * priv key: This is the ASN.1 structure ECPrivateKey [RFC5915] as intended, however, as Dan Van Geest points out, the parameters field, while marked OPTIONAL is actually required by Section 3 of RFC5915. That means the private keys here are invalid. This has been corrected in the test vectors. - ct value: A raw X9.62 public key, as intended. * XDH: - pub key: 32 byte raw. - priv key: Had been wrapped in OCTET STRING to match CurvePrivateKey (RFC8410). This has been changed to 32/57 byte raw. - ct value: 32 byte raw. 2. Introduction The advent of quantum computing poses a significant threat to current cryptographic systems. Traditional cryptographic key establishment algorithms such as RSA-OAEP, Diffie-Hellman and its elliptic curve variants are vulnerable to quantum attacks. During the transition to post-quantum cryptography (PQC), there is considerable uncertainty regarding the robustness of both existing and new cryptographic algorithms. While we can no longer fully trust traditional cryptography, we also cannot immediately place complete trust in post-quantum replacements until they have undergone extensive scrutiny and real-world testing to uncover and rectify both algorithmic weaknesses as well as implementation flaws across all the new implementations. Unlike previous migrations between cryptographic algorithms, the decision of when to migrate and which algorithms to adopt is far from straightforward. For instance, the aggressive migration timelines may require deploying PQC algorithms before their implementations have been fully hardened or certified, and dual-algorithm data protection may be desirable over a longer time period to hedge against CVEs and other implementation flaws in the new implementations. Cautious implementers may opt to combine cryptographic algorithms in such a way that an attacker would need to break all of them simultaneously to compromise the protected data. These mechanisms are referred to as Post-Quantum/Traditional (PQ/T) Hybrids [I-D.ietf-pquip-pqt-hybrid-terminology]. Ounsworth, et al. Expires 7 May 2026 [Page 5] Internet-Draft Composite ML-KEM November 2025 Certain jurisdictions are already recommending or mandating that PQC lattice schemes be used exclusively within a PQ/T hybrid framework. The use of a composite scheme provides a straightforward implementation of hybrid solutions compatible with (and advocated by) some governments and cybersecurity agencies [BSI2021], [ANSSI2024]. This specification defines a specific instantiation of the PQ/T Hybrid paradigm called "composite" where multiple cryptographic algorithms are combined to form a single key encapsulation mechanism (KEM) presenting a single public key and ciphertext such that it can be treated as a single atomic algorithm at the protocol level; a property referred to as "protocol backwards compatibility" since it can be applied to protocols that are not explicitly hybrid-aware. Composite algorithms retain some security even if one of their component algorithms is broken. Concrete instantiations of composite ML-KEM algorithms are provided based on ML-KEM, RSA-OAEP and ECDH. Backwards compatibility in the sense of upgraded systems continuing to inter-operate with legacy systems is not directly covered in this specification, but is the subject of Section 11.2. The idea of a composite was first presented in [Bindel2017]. Composite ML-KEM is applicable in any PKIX-related application that would otherwise use ML-KEM. 2.1. Conventions and Terminology The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in BCP 14 [RFC2119] [RFC8174] when, and only when, they appear in all capitals, as shown here. These words may also appear in this document in lower case as plain English words, absent their normative meanings. This specification is consistent with all terminology from [I-D.ietf-pquip-pqt-hybrid-terminology]. In addition, the following terms are used in this specification: *ALGORITHM*: The usage of the term "algorithm" within this specification generally refers to any function which has a registered Object Identifier (OID) for use within an ASN.1 AlgorithmIdentifier. This loosely, but not precisely, aligns with the definitions of "cryptographic algorithm" and "cryptographic scheme" given in [I-D.ietf-pquip-pqt-hybrid-terminology]. *COMBINER*: A combiner specifies how multiple shared secret keys are combined into a single shared secret key. Ounsworth, et al. Expires 7 May 2026 [Page 6] Internet-Draft Composite ML-KEM November 2025 *COMPONENT / PRIMITIVE*: The words "component" or "primitive" are used interchangeably to refer to a cryptographic algorithm that is used internally within a composite algorithm. For example this could be an asymmetric algorithm such as "ML-KEM-768" or "RSA-OAEP". *DER:* Distinguished Encoding Rules as defined in [X.690]. *KEM:* A key encapsulation mechanism as defined in Section 3. *PKI:* Public Key Infrastructure, as defined in [RFC5280]. *SHARED SECRET KEY:* A value established between two communicating parties for use as cryptographic key material suitable for direct use by symmetric cryptographic algorithms. This specification is concerned with shared secrets established via public key cryptographic operations. Notation: The algorithm descriptions use python-like syntax. The following symbols deserve special mention: * || represents concatenation of two byte arrays. * [:] represents byte array slicing. * (a, b) represents a pair of values a and b. Typically this indicates that a function returns multiple values; the exact conveyance mechanism -- tuple, struct, output parameters, etc -- is left to the implementer. * (a, _): represents a pair of values where one -- the second one in this case -- is ignored. * Func(): represents a function that is parametrized by meaning that the function's implementation will have minor differences depending on the underlying TYPE. Typically this means that a function will need to look up different constants or use different underlying cryptographic primitives depending on which composite algorithm it is implementing. 2.2. Composite Design Philosophy [I-D.ietf-pquip-pqt-hybrid-terminology] defines composites as: _Composite Cryptographic Element_: A cryptographic element that incorporates multiple component cryptographic elements of the same type in a multi-algorithm scheme. Ounsworth, et al. Expires 7 May 2026 [Page 7] Internet-Draft Composite ML-KEM November 2025 Composite algorithms, as defined in this specification, follow this definition and should be regarded as a single key that performs a single cryptographic operation typical of a key establishment mechanism such as key generation, encapsulating, or decapsulating -- using its internal concatenation of component keys as if they form a single key. This generally means that the complexity of combining algorithms can and should be handled by the cryptographic library or cryptographic module, and the single composite public key, private key, and ciphertext can be carried in existing fields in protocols such as PKCS#10 [RFC2986], CMP [RFC4210], X.509 [RFC5280], CMS [RFC5652], and the Trust Anchor Format [RFC5914]. In this way, composites achieve "protocol backwards-compatibility" in that they will drop cleanly into any protocol that accepts an analogous single- algorithm cryptographic scheme without requiring any modification of the protocol to handle multiple algorithms. Discussion of the specific choices of algorithm pairings can be found in Section 7.2. 3. Overview of the Composite ML-KEM Scheme Composite ML-KEM is a PQ/T hybrid Key Encapsulation Mechanism (KEM) which combines ML-KEM as specified in [FIPS.203] and [I-D.ietf-lamps-kyber-certificates] with one of RSA-OAEP defined in [RFC8017], the Elliptic Curve Diffie-Hellman key agreement schemes ECDH defined in section 5.7.1.2 of [SP.800-56Ar3], and X25519 / X448 defined in [RFC8410]. A KEM combiner function is used to combine the two component shared secret keys into a single shared secret key. Composite Key Encapsulation Mechanisms are defined as cryptographic primitives that consist of three algorithms. These definitions are borrowed from [RFC9180]. * KeyGen() -> (pk, sk): A probabilistic key generation algorithm, which generates a public key pk and a secret key sk. Some cryptographic modules may also expose a KeyGen(seed) -> (pk, sk), which generates pk and sk deterministically from a seed. This specification assumes a seed-based keygen for ML-KEM. * Encap(pk) -> (ss, ct): A probabilistic encapsulation algorithm, which takes as input a public key pk and outputs a ciphertext ct and shared secret key ss. Note: this specification uses Encap() to conform to [RFC9180], but [FIPS.203] uses Encaps(). Ounsworth, et al. Expires 7 May 2026 [Page 8] Internet-Draft Composite ML-KEM November 2025 * Decap(sk, ct) -> ss: A decapsulation algorithm, which takes as input a secret key sk and ciphertext ct and outputs a shared secret ss, or in some cases a distinguished error value. Note: this specification uses Decap() to conform to [RFC9180], but [FIPS.203] uses Decaps(). The KEM interface defined above differs from both traditional key transport mechanism (for example for use with KeyTransRecipientInfo defined in [RFC5652]), and key agreement (for example for use with KeyAgreeRecipientInfo defined in [RFC5652]) and thus Composite ML-KEM MUST be used with KEMRecipientInfo defined in [RFC9629], however full conventions for use of Composite ML-KEM within the Cryptographic Message Syntax will be included in a separate specification. The KEM interface was chosen as the interface for a composite key establishment because it allows for arbitrary combinations of component algorithm types since both key transport and key agreement mechanisms can be promoted into KEMs as described in Section 3.1 and Section 3.2 below. The following algorithms are defined for serializing and deserializing component values. These algorithms are inspired by similar algorithms in [RFC9180]. * SerializePublicKey(mlkemPK, tradPK) -> bytes: Produce a byte string encoding of the component public keys. * DeserializePublicKey(bytes) -> (mlkemPK, tradPK): Parse a byte string to recover the component public keys. * SerializeCiphertext(mlkemCT, tradCT) -> bytes: Produce a byte string encoding of the component ciphertexts. * DeserializeCiphertext(bytes) -> (mlkemCT, tradCT): Parse a byte string to recover the component ciphertexts. * SerializePrivateKey(mlkemSeed, tradPK, tradSK) -> bytes: Produce a byte string encoding of the component private keys. * DeserializePrivateKey(bytes) -> (mlkemSeed, tradPK, tradSK): Parse a byte string to recover the component private keys. Full definitions of serialization and deserialization algorithms can be found in Section 5. Ounsworth, et al. Expires 7 May 2026 [Page 9] Internet-Draft Composite ML-KEM November 2025 3.1. Promotion of RSA-OAEP into a KEM The RSA Optimal Asymmetric Encryption Padding (OAEP), as defined in section 7.1 of [RFC8017] is a public key encryption algorithm used to transport key material from a sender to a receiver. A "key transport" type algorithm has the following API: * Encrypt(pk, ss) -> ct: Take an existing shared secret key ss and encrypt it for pk. * Decrypt(sk, ct) -> ss: Decrypt the ciphertext ct to recover ss. Note the difference between the API of RSA.Encrypt(pk, ss) -> ct and KEM.Encap(pk) -> (ss, ct) presented above. For this reason, RSA-OAEP cannot be directly combined with ML-KEM. Fortunately, a key transport mechanism such as RSA-OAEP can be easily promoted into a KEM by having the sender generate a random 256 bit shared secret key and encrypt it. RSAOAEPKEM.Encap(pkR): shared_secret = SecureRandom(ss_len) enc = RSAES-OAEP-ENCRYPT(pkR, shared_secret) return shared_secret, enc Note that the OAEP label L is left to its default value, which is the empty string as per [RFC8017]. The shared secret key output by the overall Composite ML-KEM already binds a composite KEM Combiner Label, so there is no need to also use the component Label. The value of ss_len as well as concrete values for all the RSA-OAEP parameters used within this specification can be found in Section 7.1. Decap(sk, ct) -> ss is accomplished by direct use of OAEP Decrypt. RSAOAEPKEM.Decap(skR, enc): shared_secret = RSAES-OAEP-DECRYPT(skR, enc) return shared_secret The encodings for the public key (pkR), private key (skR), and ciphertext (enc) are described in Section 5. A quick note on the choice of RSA-OAEP as the supported RSA encryption primitive. RSA-KEM [RFC5990] is cryptographically robust and is more straightforward to work with, but it has fairly limited adoption and therefore is of limited value as a PQ migration Ounsworth, et al. Expires 7 May 2026 [Page 10] Internet-Draft Composite ML-KEM November 2025 mechanism. Also, while RSA-PKCS#1v1.5 [RFC8017] is still widely used, it is hard to make secure and no longer FIPS-approved as of the end of 2023 [SP800-131Ar2], so it is of limited forwards value. This leaves RSA-OAEP [RFC8017] as the remaining choice. See Section 7.2 for further discussion of algorithm choices. Note that, at least at the time of writing, the algorithm RSAOAEPKEM is not defined as a standalone algorithm within PKIX standards and it does not have an assigned algorithm OID, so it cannot be used directly with CMS KEMRecipientInfo [RFC9629]; it is merely a building block for the composite algorithm. 3.2. Promotion of ECDH into a KEM The elliptic curve Diffie-Hellman algorithm identified by the OID id- ecDH as defined in [RFC5480] and [SEC1] is a key agreement algorithm requiring both parties to contribute an asymmetric keypair to the derivation of the shared secret key. A "key agreement" type algorithm has the following API: * DH(skX, pkY) -> ss: Each party combines their secret key skX with the other party's public key pkY. Note the difference between the API of DH(skX, pkY) -> ss and KEM.Encap(pk) -> (ss, ct) presented above. For this reason, a Diffie-Hellman key exchange cannot be directly combined with ML-KEM. Fortunately, a Diffie-Hellman key agreement can be easily promoted into a KEM Encap(pk) -> (ss, ct) by having the sender generate an ephemeral keypair for themself and sending their public key as the ciphertext ct. Composite ML-KEM uses a simplified version of the DHKEM definition from [RFC9180]: DHKEM.Encap(pkR): (skE, pkE) = GenerateKeyPair() ss = DH(skE, pkR) ct = SerializePublicKey(pkE) return ss, ct Decap(sk, ct) -> ss is accomplished in the analogous way. DHKEM.Decap(skR, ct): pkE = DeserializePublicKey(ct) ss = DH(skR, pkE) return ss Ounsworth, et al. Expires 7 May 2026 [Page 11] Internet-Draft Composite ML-KEM November 2025 This construction applies for all variants of elliptic curve Diffie- Hellman used in this specification: ECDH, X25519, and X448. For ECDH, DH() yields the value Z as described in section 5.7.1.2 of [SP.800-56Ar3]. For X25519 and X448, DH() yields the value K as described in section 6 of [RFC7748]. The encodings for the public key (pkR), private key (skR), and ciphertext (pkE) are described in Section 5. The promotion of DH to a KEM is similar to the DHKEM functions in [RFC9180], but it is simplified in the following ways: 1. Notation has been aligned to the notation used in this specification. 2. Since a KEM Combiner Label is included explicitly in the Composite ML-KEM combiner, there is no need to perform the labeled steps of ExtractAndExpand(). 3. Since the ciphertext and receiver's public key are included explicitly in the Composite ML-KEM combiner, there is no need to construct the kem_context object. Note that here, SerializePublicKey() and DeserializePublicKey() refer to the underlying encoding of the DH primitive, and not to the composite serialization functions defined in Section 5. Note that, at least at the time of writing, the algorithm DHKEM is not defined as a standalone algorithm within PKIX standards and it does not have an assigned algorithm OID, so it cannot be used directly with CMS KEMRecipientInfo [RFC9629]; it is merely a building block for the composite algorithm. 4. Composite ML-KEM Functions This section describes the composite ML-KEM functions needed to instantiate the public API of a Key Encapsulation Mechanism as defined in Section 3. 4.1. Key Generation In order to maintain security properties of the composite, applications that use composite keys MUST always perform fresh key generations of both component keys and MUST NOT reuse existing key material. See Section 10.3 for a discussion. Ounsworth, et al. Expires 7 May 2026 [Page 12] Internet-Draft Composite ML-KEM November 2025 To generate a new keypair for composite schemes, the KeyGen() -> (pk, sk) function is used. The KeyGen() function calls the two key generation functions of the component algorithms independently. Multi-threaded, multi-process, or multi-module applications might choose to execute the key generation functions in parallel for better key generation performance or architectural modularity. The following describes how to instantiate a KeyGen() function for a given composite algorithm represented by . Composite-ML-KEM.KeyGen() -> (pk, sk) Explicit Inputs: None Implicit Inputs mapped from : ML-KEM The underlying ML-KEM algorithm and parameter set, for example "ML-KEM-768". Trad The underlying traditional algorithm and parameter, for example "RSA-OAEP" or "X25519". Output: (pk, sk) The composite keypair. Key Generation Process: 1. Generate component keys mlkemSeed = Random(64) (mlkemPK, mlkemSK) = ML-KEM.KeyGen(mlkemSeed) (tradPK, tradSK) = Trad.KeyGen() 2. Check for component key gen failure if NOT (mlkemPK, mlkemSK) or NOT (tradPK, tradSK): output "Key generation error" 3. Output the composite public and private keys pk = SerializePublicKey(mlkemPK, tradPK) sk = SerializePrivateKey(mlkemSeed, tradPK, tradSK) return (pk, sk) In order to ensure fresh keys, the key generation functions MUST be executed for both component algorithms. Compliant parties MUST NOT use, import or export component keys that are used in other contexts, Ounsworth, et al. Expires 7 May 2026 [Page 13] Internet-Draft Composite ML-KEM November 2025 combinations, or by themselves as keys for standalone algorithm use. For more details on the security considerations around key reuse, see Section 10.3. Note that this keygen routine outputs a serialized composite key, which contains only the ML-KEM seed. Implementations should feel free to modify this routine to additionally output the expanded mlkemSK or to make free use of ML-KEM.KeyGen(mldsaSeed) as needed to expand the ML-KEM seed into an expanded key prior to performing a decapsulation operation. Variations in the keygen process above and decapsulation processes below to accommodate particular private key storage mechanisms or alternate interfaces to the underlying cryptographic modules are considered to be conformant to this specification so long as they produce the same output and error handling. For example, component private keys stored in separate software or hardware modules where it is not possible to do a joint simultaneous keygen would be considered compliant so long as both keys are freshly generated. It is also possible that the underlying cryptographic module does not expose a ML-KEM.KeyGen(seed) that accepts an externally-generated seed, and instead an alternate keygen interface must be used. Note however that cryptographic modules that do not support seed-based ML-KEM key generation will be incapable of importing or exporting composite keys in the standard format since the private key serialization routines defined in Section 5.2 only support ML-KEM keys as seeds. Errors produced by the component KeyGen() routines MUST be forwarded on to the calling application. Further discussion can be found below in Section 4.5. 4.2. Encapsulation The Encap(pk) of a Composite ML-KEM algorithm is designed to behave exactly the same as ML-KEM.Encaps(ek) defined in Algorithm 20 in Section 7.2 of [FIPS.203]. Specifically, Composite-ML-KEM.Encap(pk) produces a 256-bit shared secret key that can be used directly with any symmetric-key cryptographic algorithm. In this way, Composite ML-KEM can be used as a direct drop-in replacement anywhere that ML- KEM is used. The following describes how to instantiate a Encap(pk) function for a given composite algorithm represented by . Ounsworth, et al. Expires 7 May 2026 [Page 14] Internet-Draft Composite ML-KEM November 2025 Composite-ML-KEM.Encap(pk) -> (ss, ct) Explicit Inputs: pk Composite public key consisting of encryption public keys for each component. Implicit inputs mapped from : ML-KEM The underlying ML-KEM algorithm and parameter set, for example "ML-KEM-768". Trad The underlying ML-KEM algorithm and parameter set, for example "RSA-OAEP" or "X25519". Label KEM Combiner Label value for binding the ciphertext to the Composite OID. See section on KEM Combiner Labels below. Output: ss The shared secret key, a 256-bit key suitable for use with symmetric cryptographic algorithms. ct The ciphertext, a byte string. Encap Process: 1. Separate the public keys. (mlkemPK, tradPK) = DeserializePublicKey(pk) 2. Perform the respective component Encap operations according to their algorithm specifications. (mlkemCT, mlkemSS) = ML-KEM.Encaps(mlkemPK) (tradCT, tradSS) = TradKEM.Encap(tradPK) 3. If either ML-KEM.Encaps() or TradKEM.Encap() return an error, then this process must return an error. if NOT (mlkemCT, mlkemSS) or NOT (tradCT, tradSS): output "Encapsulation error" 4. Encode the ciphertext ct = SerializeCiphertext(mlkemCT, tradCT) Ounsworth, et al. Expires 7 May 2026 [Page 15] Internet-Draft Composite ML-KEM November 2025 5. Combine the KEM secrets and additional context to yield the composite shared secret key. ss = KemCombiner(mlkemSS, tradSS, tradCT, tradPK, Label) 6. Output composite shared secret key and ciphertext. return (ss, ct) Depending on the security needs of the application, it MAY be advantageous to perform steps 2, 3, and 5 in a timing-invariant way to prevent side-channel attackers from learning which component algorithm failed and from learning any of the inputs or output of the KEM combiner. The specific values for Label are defined per Composite ML-KEM algorithm in Section 7. Errors produced by the component Encaps() routines MUST be forwarded on to the calling application. Further discussion can be found below in Section 4.5. 4.3. Decapsulation The Decap(sk, ct) -> ss of a Composite ML-KEM algorithm is designed to behave exactly the same as ML-KEM.Decaps(dk, c) defined in Algorithm 21 in Section 7.3 of [FIPS.203]. Specifically, Composite- ML-KEM.Decap(sk, ct) produces a 256-bit shared secret key that can be used directly with any symmetric-key cryptographic algorithm. In this way, Composite ML-KEM can be used as a direct drop-in replacement anywhere that ML-KEM is used. The following describes how to instantiate a Decap(sk, ct) function for a given composite algorithm represented by . Composite-ML-KEM.Decap(sk, ct) -> ss Explicit inputs sk Composite private key consisting of decryption private keys for each component. ct The ciphertext, a byte string. Implicit inputs mapped from : ML-KEM The underlying ML-KEM algorithm and parameter set, for example "ML-KEM-768". Ounsworth, et al. Expires 7 May 2026 [Page 16] Internet-Draft Composite ML-KEM November 2025 Trad The underlying traditional algorithm and parameter set, for example "RSA-OAEP" or "X25519". tradPK The traditional public key is required for the KEM combiner. The suggested algorithm below extracts the tradPK from sk, however implementations that use a non-standard private key encoding will need to obtain the traditional public key some other way. Label KEM Combiner Label value for binding the ciphertext to the Composite ML-KEM OID. See section on KEM Combiner Labels below. Output: ss The shared secret key, a 256-bit key suitable for use with symmetric cryptographic algorithms. Decap Process: 1. Separate the private keys and ciphertexts (mlkemSeed, tradPK, tradSK) = DeserializePrivateKey(sk) (_, mlkemSK) = ML-KEM.KeyGen(mlkemSeed) (mlkemCT, tradCT) = DeserializeCiphertext(ct) 2. Perform the respective component Decap operations according to their algorithm specifications. mlkemSS = ML-KEM.Decaps(mlkemSK, mlkemCT) tradSS = TradKEM.Decap(tradSK, tradCT) 3. If either ML-KEM.Decaps() or TradKEM.Decap() return an error, then this process must return an error. if NOT mlkemSS or NOT tradSS: output "Decapsulation error" 4. Combine the KEM secrets and additional context to yield the composite shared secret key. ss = KemCombiner(mlkemSS, tradSS, tradCT, tradPK, Label) 5. Output composite shared secret key. return ss Ounsworth, et al. Expires 7 May 2026 [Page 17] Internet-Draft Composite ML-KEM November 2025 Steps 2, 3, and 4 SHOULD be performed in a timing-invariant way to prevent side-channel attackers from learning which component algorithm failed and from learning any of the inputs or output of the KEM combiner. It is possible to use component private keys stored in separate software or hardware keystores. Variations in the process to accommodate particular private key storage mechanisms are considered to be conformant to this specification so long as it produces the same output and error handling as the process sketched above. In order to properly achieve its security properties, the KEM combiner requires that all inputs are fixed-length or length-encoded. Since each Composite ML-KEM algorithm fully specifies its component algorithms, including key sizes, all inputs should be fixed-length in non-error scenarios except for minor variations introduced by encoding. In the cases where there are minor variations introduced by encoding, those encodings already have a fixed-length prefix followed by length-encoded data, so the requirements for the KEM combiner security properties hold (namely that the input is injective). However some implementations may choose to perform additional checking to handle certain error conditions. In particular, the KEM combiner step should not be performed if either of the component decapsulations returned an error condition indicating malformed inputs. For timing-invariance reasons, it is RECOMMENDED to perform both decapsulation operations and check for errors afterwards to prevent an attacker from using a timing channel to tell which component failed decapsulation. Also, RSA-based composites MUST ensure that the modulus size (i.e. the size of tradCT and tradPK) matches that specified for the given Composite ML-KEM algorithm in Section 7; depending on the cryptographic library used, this check may be done by the library or may require an explicit check as part of the Composite-ML-KEM.Decap() routine. Implementers should keep in mind that some instances of tradCT and tradPK will be DER-encoded which could introduce minor length variations such as dropping leading zeroes; since these variations are not attacker- controlled they are considered benign. Errors produced by the component Decaps() routines MUST be forwarded on to the calling application. Further discussion can be found below in Section 4.5. 4.4. KEM Combiner Function This specification provides a combiner construction with SHA3-256 for all combinations of algorithms. Ounsworth, et al. Expires 7 May 2026 [Page 18] Internet-Draft Composite ML-KEM November 2025 KemCombiner(mlkemSS, tradSS, tradCT, tradPK, Label) -> ss Explicit inputs: The list of input values to be combined. Output: ss The shared secret key, a 256-bit key suitable for use with symmetric cryptographic algorithms. Process: ss = SHA3-256(mlkemSS || tradSS || tradCT || tradPK || Label) return ss 4.5. Error Handling and Explicit Rejection ML-KEM, particularly its Decaps() defined in Algorithms 18 and 21 of [FIPS.203], is designed to be implicitly rejecting, meaning that a failure within the underlying PKE scheme due to a mangled ciphertext will not cause ML-KEM.Decaps() to return an error, but instead any errors encountered during decapsulation are handled by producing a pseudo-random shared secret. ML-KEM.Decaps() can, however return errors for example if the provided ciphertext or decapsulation private key is the wrong size. In Composite ML-KEM, not all component algorithms will be implicitly rejecting, for example RSA-OAEP's Decrypt() can return an error if the padding is incorrect. In general, in the case that one of the component primitives generates an error during Composite ML-KEM KeyGen, Encaps, or Decaps, Composite ML-KEM MUST clear all buffers containing key material and forward the error to its caller; i.e. Composite ML-KEM MUST be explicitly rejecting whenever one of its components is. The same applies to Composite ML-KEM KeyGen() and Encaps(): Composite KEM MUST forward any errors produced by component algorithms. 5. Serialization This section presents routines for serializing and deserializing composite public keys, private keys, and ciphertext values to bytes. The functions defined in this section are considered internal implementation details and are referenced from within the public API definitions in Section 4. Ounsworth, et al. Expires 7 May 2026 [Page 19] Internet-Draft Composite ML-KEM November 2025 Deserialization is possible because ML-KEM has fixed-length public keys, private keys (seeds), and ciphertext values as shown in the following table. +=============+============+=============+============+ | Algorithm | Public Key | Private Key | Ciphertext | +=============+============+=============+============+ | ML-KEM-768 | 1184 | 64 | 1088 | +-------------+------------+-------------+------------+ | ML-KEM-1024 | 1568 | 64 | 1568 | +-------------+------------+-------------+------------+ Table 1: ML-KEM Sizes For all serialization routines below, when these values are required to be carried in an ASN.1 structure, they are wrapped as described in Section 6.1. While ML-KEM has a single fixed-size representation for each of public key, private key, and ciphertext, the traditional component might allow multiple valid encodings; for example an elliptic curve public key, and therefore also ciphertext, might be validly encoded as either compressed or uncompressed [SEC1], or an RSA private key could be encoded in Chinese Remainder Theorem form [RFC8017]. In order to obtain interoperability, composite algorithms MUST use the following encodings of the underlying components: * *ML-KEM*: MUST be encoded as specified in sections 7.1 and 7.2 of [FIPS.203], using a 64-byte seed as the private key. * *RSA*: the public key MUST be encoded as RSAPublicKey with the (n,e) public key representation as specified in A.1.1 of [RFC8017] and the private key representation as RSAPrivateKey specified in A.1.2 of [RFC8017] with version 0 and 'otherPrimeInfos' absent. An RSA-OAEP ciphertext MUST be encoded as specified in section 7.1.1 of [RFC8017] * *ECDH*: public key MUST be encoded as an uncompressed X9.62 [X9.62_2005], including the leading byte 0x04 indicating uncompressed. This is consistent with the encoding of ECPoint as specified in section 2.2 of [RFC5480] when no ASN.1 OCTET STRING wrapping is present. The private key MUST be encoded as ECPrivateKey specified in [RFC5915] with 'NamedCurve' parameter set to the OID of the curve, but without the 'publicKey' field. The ciphertext MUST be encoded in the same manner as the public key. Ounsworth, et al. Expires 7 May 2026 [Page 20] Internet-Draft Composite ML-KEM November 2025 * *X25519 and X448*: the public key MUST be encoded as per section 5 of [RFC7748] and the private key is a 32 or 57 byte raw value for Ed25519 and Ed448 respectively. The ciphertext MUST be encoded in the same manner as the public key. All ASN.1 objects SHALL be encoded using DER on serialization. Even with fixed encodings for the traditional component, there may be slight differences in size of the encoded value due to, for example, encoding rules that drop leading zeroes. See Appendix A for further discussion of encoded size of each composite algorithm. The deserialization routines described below do not check for well- formedness of the cryptographic material they are recovering. It is assumed that underlying cryptographic primitives will catch malformed values and raise an appropriate error. 5.1. SerializePublicKey and DeserializePublicKey The serialization routine for keys simply concatenates the public keys of the component algorithms, as defined below: Composite-ML-KEM.SerializePublicKey(mlkemPK, tradPK) -> bytes Explicit inputs: mlkemPK The ML-KEM public key, which is bytes. tradPK The traditional public key in the appropriate encoding for the underlying component algorithm. Implicit inputs: None Output: bytes The encoded composite public key. Serialization Process: 1. Combine and output the encoded public key output mlkemPK || tradPK Ounsworth, et al. Expires 7 May 2026 [Page 21] Internet-Draft Composite ML-KEM November 2025 Deserialization reverses this process. Each component key is deserialized according to their respective specification as shown in Appendix B. The following describes how to instantiate a DeserializePublicKey(bytes) function for a given composite algorithm represented by . Composite-ML-KEM.DeserializePublicKey(bytes) -> (mlkemPK, tradPK) Explicit inputs: bytes An encoded composite public key. Implicit inputs mapped from : ML-KEM The underlying ML-KEM algorithm and parameter, for example, could be "ML-KEM-768". Output: mlkemPK The ML-KEM public key, which is bytes. tradPK The traditional public key in the appropriate encoding for the underlying component algorithm. Deserialization Process: 1. Parse each constituent encoded public key. The length of the mlkemPK is known based on the size of the ML-KEM component key length specified by the Object ID. switch ML-KEM do case ML-KEM-768: mlkemPK = bytes[:1184] tradPK = bytes[1184:] case ML-KEM-1024: mlkemPK = bytes[:1568] tradPK = bytes[1568:] Note that while ML-KEM has fixed-length keys, RSA may not, depending on encoding, so rigorous length-checking of the overall composite key is not always possible. 2. Output the component public keys output (mlkemPK, tradPK) Ounsworth, et al. Expires 7 May 2026 [Page 22] Internet-Draft Composite ML-KEM November 2025 5.2. SerializePrivateKey and DeserializePrivateKey The serialization routine for keys simply concatenates the private keys of the component algorithms, including a length encoding for the public key, as defined below: Composite-ML-KEM.SerializePrivateKey(mlkemSeed, tradPK, tradSK) -> bytes Explicit inputs: mlkemSeed The ML-KEM private key, which is the bytes of the seed. tradPK The traditional public key in the appropriate encoding for the underlying component algorithm. This is required by the decapsulater for inclusion in the KEM combiner. tradSK The traditional private key in the appropriate encoding for the underlying component algorithm. Implicit inputs: None Output: bytes The encoded composite private key. Serialization Process: 1. Compute the length of tradPK lenTradPK = IntegerToBytes( len(tradPK), 2 ) 2. Combine and output the encoded private key. output mlkemSeed || lenTradPK || tradPK || tradSK The function IntegerToBytes(x, a) is defined in Algorithm 11 of [FIPS.204], which is the usual little-endian encoding of an integer. Encoding to 2 bytes allows for traditional public keys up to 65 kb. Deserialization reverses this process. Each component key is deserialized according to their respective specification as shown in Appendix B. Ounsworth, et al. Expires 7 May 2026 [Page 23] Internet-Draft Composite ML-KEM November 2025 The following describes how to instantiate a DeserializePrivateKey(bytes) function. Since ML-KEM private keys are 64 bytes for all parameter sets, this function does not need to be parametrized. Composite-ML-KEM.DeserializePrivateKey(bytes) -> (mlkemSeed, tradPK, tradSK) Explicit inputs: bytes An encoded composite private key. Implicit inputs: That an ML-KEM private key is 64 bytes for all parameter sets. Output: mlkemSeed The ML-KEM private key, which is the bytes of the seed. tradSK The traditional private key in the appropriate encoding for the underlying component algorithm. Deserialization Process: 1. Parse the ML-KEM seed, which is always a 64 byte seed for all parameter sets. mlkemSeed = bytes[:64] 2. Parse the traditional public and private key lenTradPK = BytesToInteger( bytes[64:66] ) tradPK = bytes[66: 66+lenTradPK] tradSK = bytes[66+lenTradPK:] Note that while ML-KEM has fixed-length keys, RSA may not, depending on encoding, so rigorous length-checking of the overall composite key is not always possible. 2. Output the component private keys output (mlkemSeed, tradPK, tradSK) Ounsworth, et al. Expires 7 May 2026 [Page 24] Internet-Draft Composite ML-KEM November 2025 The function BytesToInteger(x) is not defined in [FIPS.204], but is the obvious inverse of the defined IntegerToBytes() which is the usual little-endian encoding of an integer. 5.3. SerializeCiphertext and DeserializeCiphertext The serialization routine for the composite ciphertext value simply concatenates the fixed-length ML-KEM ciphertext with the ciphertext from the traditional algorithm, as defined below: Composite-ML-KEM.SerializeCiphertext(mlkemCT, tradCT) -> bytes Explicit inputs: mlkemCT The ML-KEM ciphertext, which is bytes. tradCT The traditional ciphertext in the appropriate encoding for the underlying component algorithm. Implicit inputs: None Output: bytes The encoded composite ciphertext value. Serialization Process: 1. Combine and output the encoded composite ciphertext output mlkemCT || tradCT Deserialization reverses this process. Each component ciphertext is deserialized according to their respective specification as shown in Appendix B. The following describes how to instantiate a DeserializeCiphertext(bytes) function for a given composite algorithm represented by . Ounsworth, et al. Expires 7 May 2026 [Page 25] Internet-Draft Composite ML-KEM November 2025 Composite-ML-KEM.DeserializeCiphertext(bytes) -> (mldkemCT, tradCT) Explicit inputs: bytes An encoded composite ciphertext value. Implicit inputs mapped from : ML-KEM The underlying ML-KEM algorithm and parameter, for example, could be "ML-KEM-768". Output: mlkemCT The ML-KEM ciphertext, which is bytes. tradCT The traditional ciphertext in the appropriate encoding for the underlying component algorithm. Deserialization Process: 1. Parse each constituent encoded ciphertext. The length of the mlkemCT is known based on the size of the ML-KEM component ciphertext length specified by the Object ID. switch ML-KEM do case ML-KEM-768: mlkemCT = bytes[:1088] tradCT = bytes[1088:] case ML-KEM-1024: mlkemCT= bytes[:1568] tradCT = bytes[1568:] 2. Output the component ciphertext values output (mlkemCT, tradCT) 6. Use within X.509 and PKIX The following sections provide processing logic and the necessary ASN.1 modules necessary to use composite ML-KEM within X.509 and PKIX protocols. Use within the Cryptographic Message Syntax (CMS) will be covered in a separate specification. Ounsworth, et al. Expires 7 May 2026 [Page 26] Internet-Draft Composite ML-KEM November 2025 While composite ML-KEM keys and ciphertext values MAY be used raw, the following sections provide conventions for using them within X.509 and other PKIX protocols such that Composite ML-KEM can be used as a drop-in replacement for KEM algorithms in PKCS#10 [RFC2986], CMP [RFC4210], X.509 [RFC5280], and related protocols. 6.1. Encoding to DER The serialization routines presented in Section 5 produce raw binary values. When these values are required to be carried within a DER- encoded message format such as an X.509's subjectPublicKey or a OneAsymmetricKey.privateKey OCTET STRING [RFC5958], then the BIT STRING or OCTET STRING contains this raw byte string output of the appropriate serialization routine from Section 5 without further encoding. When a Composite ML-KEM public key appears outside of a SubjectPublicKeyInfo type in an environment that uses ASN.1 encoding, it could be encoded as an OCTET STRING by using the Composite-ML-KEM- PublicKey type defined below. Composite-ML-KEM-PublicKey ::= OCTET STRING Size constraints MAY be enforced, as appropriate as per Appendix A. 6.2. Key Usage Bits When any Composite ML-KEM Object Identifier appears within the SubjectPublicKeyInfo.AlgorithmIdentifier field of an X.509 certificate [RFC5280], the key usage certificate extension MUST only contain: keyEncipherment Composite ML-KEM keys MUST NOT be used in a "dual usage" mode because even if the traditional component key supports both signing and encryption, the post-quantum algorithms do not and therefore the overall composite algorithm does not. Implementations MUST NOT use one component of the composite for the purposes of digital signature and the other component for the purposes of encryption or key establishment. 6.3. ASN.1 Definitions Composite ML-KEM uses a substantially non-ASN.1 based encoding, as specified in Section 5. However, as composite algorithms will be used within ASN.1-based X.509 and PKIX protocols, some conventions for ASN.1 wrapping are necessary. Ounsworth, et al. Expires 7 May 2026 [Page 27] Internet-Draft Composite ML-KEM November 2025 The following ASN.1 Information Object Classes are defined to allow for compact definitions of each composite algorithm, leading to a smaller overall ASN.1 module. pk-CompositeKEM {OBJECT IDENTIFIER:id} PUBLIC-KEY ::= { IDENTIFIER id -- KEY no ASN.1 wrapping -- PARAMS ARE absent CERT-KEY-USAGE { keyEncipherment } -- PRIVATE-KEY no ASN.1 wrapping -- } kema-CompositeKEM { OBJECT IDENTIFIER:id, PUBLIC-KEY:publicKeyType } KEM-ALGORITHM ::= { IDENTIFIER id -- VALUE no ASN.1 wrapping -- PARAMS ARE absent PUBLIC-KEYS { publicKeyType } SMIME-CAPS { IDENTIFIED BY id } } Figure 1: ASN.1 Object Information Classes for Composite ML-KEM As an example, the public key and KEM algorithm types associated with id-MLKEM768-ECDH-P256-SHA3-256 are defined as: pk-MLKEM768-ECDH-P256-SHA3-256 PUBLIC-KEY ::= pk-CompositeKEM { id-MLKEM768-ECDH-P256-SHA3-256 } kema-MLKEM768-ECDH-P256-SHA3-256 KEM-ALGORITHM ::= kema-CompositeKEM{ id-MLKEM768-ECDH-P256-SHA3-256, pk-MLKEM768-ECDH-P256-SHA3-256 } The full set of key types defined by this specification can be found in the ASN.1 Module in Section 8. Use cases that require an interoperable encoding for composite private keys will often need to place a composite private key inside a OneAsymmetricKey structure defined in [RFC5958], such as when private keys are carried in PKCS #12 [RFC7292], CMP [RFC4210] or CRMF [RFC4211]. The definition of OneAsymmetricKey is copied here for convenience: Ounsworth, et al. Expires 7 May 2026 [Page 28] Internet-Draft Composite ML-KEM November 2025 OneAsymmetricKey ::= SEQUENCE { version Version, privateKeyAlgorithm PrivateKeyAlgorithmIdentifier, privateKey PrivateKey, attributes [0] Attributes OPTIONAL, ..., [[2: publicKey [1] PublicKey OPTIONAL ]], ... } ... PrivateKey ::= OCTET STRING -- Content varies based on type of key. The -- algorithm identifier dictates the format of -- the key. Figure 2: OneAsymmetricKey as defined in [RFC5958] When a composite private key is conveyed inside a OneAsymmetricKey structure (version 1 of which is also known as PrivateKeyInfo) [RFC5958], the privateKeyAlgorithm field SHALL be set to the corresponding composite algorithm identifier defined according to Section 7 and its parameters field MUST be absent. The privateKey field SHALL contain the OCTET STRING representation of the serialized composite private key as per Section 5.2. The publicKey field remains OPTIONAL. If the publicKey field is present, it MUST be a composite public key as per Section 5.1. Some applications might need to reconstruct the SubjectPublicKeyInfo or OneAsymmetricKey objects corresponding to each component key individually, for example if this is required for invoking the underlying primitive. Section 7 provides the necessary mapping between composite and their component algorithms for doing this reconstruction. Component keys of a composite private key MUST NOT be used in any other type of key or as a standalone key. For more details on the security considerations around key reuse, see Section 10.3. 7. Algorithm Identifiers and Parameters This section lists the algorithm identifiers and parameters for all Composite ML-KEM algorithms. Full specifications for the referenced algorithms can be found in Appendix B. Ounsworth, et al. Expires 7 May 2026 [Page 29] Internet-Draft Composite ML-KEM November 2025 As the number of algorithms can be daunting to implementers, see Section 11.3 for a discussion of choosing a subset to support. Each Composite ML-KEM algorithm has a unique Label which is used in constructing the KEM combiner in (Section 4.4). This helps protect against a different algorithm arriving at the same shared secret key even if all inputs are the same. Label values are provided in two forms: where the label value is alphanumeric ASCII, they are represented below as strings. For example, "MLKEM768-RSAOAEP2048" below is equivalent to the hexadecimal value 4D4C4B454D3736382D5253414F41455032303438. Some of the label values contain problematic characters such as backslashes that can cause issues displaying correctly in rendered documents or even in source code when the compiler interprets it as an escape character, so they are represented below directly in hexadecimal, for example the label for id-MLKEM768-X25519-SHA3-256 is "\.//^\", but to avoid transcription errors it is provided only in hexadecimal as "5c2e2f2f5e5c" EDNOTE: the OIDs listed below are prototyping OIDs defined in Entrust's 2.16.840.1.114027.80.9.1 arc but will be replaced by IANA. Composite KEM algorithm list: * id-MLKEM768-RSA2048-SHA3-256 - OID: 2.16.840.1.114027.80.5.2.74 - Label: "MLKEM768-RSAOAEP2048" - Key Derivation Function (KDF): SHA3-256 - ML-KEM variant: ML-KEM-768 - Traditional Algorithm: RSA o Traditional KEM Algorithm: id-RSAES-OAEP o RSA size: 2048 o RSAES-OAEP parameters: See Table 2 * id-MLKEM768-RSA3072-SHA3-256 - OID: 2.16.840.1.114027.80.5.2.75 Ounsworth, et al. Expires 7 May 2026 [Page 30] Internet-Draft Composite ML-KEM November 2025 - Label: "MLKEM768-RSAOAEP3072" - Key Derivation Function (KDF): SHA3-256 - ML-KEM variant: ML-KEM-768 - Traditional Algorithm: RSA o Traditional KEM Algorithm: id-RSAES-OAEP o RSA size: 3072 o RSAES-OAEP parameters: See Table 2 * id-MLKEM768-RSA4096-SHA3-256 - OID: 2.16.840.1.114027.80.5.2.76 - Label: "MLKEM768-RSAOAEP4096" - Key Derivation Function (KDF): SHA3-256 - ML-KEM variant: ML-KEM-768 - Traditional Algorithm: RSA o Traditional KEM Algorithm: id-RSAES-OAEP o RSA size: 4096 o RSAES-OAEP parameters: See Table 2 * id-MLKEM768-X25519-SHA3-256 - OID: 2.16.840.1.114027.80.5.2.77 - Label: "5c2e2f2f5e5c" (hex) - Key Derivation Function (KDF): SHA3-256 - ML-KEM variant: ML-KEM-768 - Traditional Algorithm: X25519 o Traditional KEM Algorithm: id-X25519 * id-MLKEM768-ECDH-P256-SHA3-256 Ounsworth, et al. Expires 7 May 2026 [Page 31] Internet-Draft Composite ML-KEM November 2025 - OID: 2.16.840.1.114027.80.5.2.78 - Label: "MLKEM768-P256" - Key Derivation Function (KDF): SHA3-256 - ML-KEM variant: ML-KEM-768 - Traditional Algorithm: ECDH o Traditional KEM Algorithm: id-ecDH o ECDH curve: secp256r1 * id-MLKEM768-ECDH-P384-SHA3-256 - OID: 2.16.840.1.114027.80.5.2.79 - Label: "MLKEM768-P384" - Key Derivation Function (KDF): SHA3-256 - ML-KEM variant: ML-KEM-768 - Traditional Algorithm: ECDH o Traditional KEM Algorithm: id-ecDH o ECDH curve: secp384r1 * id-MLKEM768-ECDH-brainpoolP256r1-SHA3-256 - OID: 2.16.840.1.114027.80.5.2.80 - Label: "MLKEM768-BP256" - Key Derivation Function (KDF): SHA3-256 - ML-KEM variant: ML-KEM-768 - Traditional Algorithm: ECDH o Traditional KEM Algorithm: id-ecDH o ECDH curve: brainpoolP256r1 * id-MLKEM1024-RSA3072-SHA3-256 Ounsworth, et al. Expires 7 May 2026 [Page 32] Internet-Draft Composite ML-KEM November 2025 - OID: 2.16.840.1.114027.80.5.2.81 - Label: "MLKEM1024-RSAOAEP3072" - Key Derivation Function (KDF): SHA3-256 - ML-KEM variant: ML-KEM-1024 - Traditional Algorithm: RSA o Traditional KEM Algorithm: id-RSAES-OAEP o RSA size: 3072 o RSAES-OAEP parameters: See Table 2 * id-MLKEM1024-ECDH-P384-SHA3-256 - OID: 2.16.840.1.114027.80.5.2.82 - Label: "MLKEM1024-P384" - Key Derivation Function (KDF): SHA3-256 - ML-KEM variant: ML-KEM-1024 - Traditional Algorithm: ECDH o Traditional KEM Algorithm: id-ecDH o ECDH curve: secp384r1 * id-MLKEM1024-ECDH-brainpoolP384r1-SHA3-256 - OID: 2.16.840.1.114027.80.5.2.83 - Label: "MLKEM1024-BP384" - Key Derivation Function (KDF): SHA3-256 - ML-KEM variant: ML-KEM-1024 - Traditional Algorithm: ECDH o Traditional KEM Algorithm: id-ecDH o ECDH curve: brainpoolP384r1 Ounsworth, et al. Expires 7 May 2026 [Page 33] Internet-Draft Composite ML-KEM November 2025 * id-MLKEM1024-X448-SHA3-256 - OID: 2.16.840.1.114027.80.5.2.84 - Label: "MLKEM1024-X448" - Key Derivation Function (KDF): SHA3-256 - ML-KEM variant: ML-KEM-1024 - Traditional Algorithm: X448 o Traditional KEM Algorithm: id-X448 * id-MLKEM1024-ECDH-P521-SHA3-256 - OID: 2.16.840.1.114027.80.5.2.85 - Label: "MLKEM1024-P521" - Key Derivation Function (KDF): SHA3-256 - ML-KEM variant: ML-KEM-1024 - Traditional Algorithm: ECDH o Traditional KEM Algorithm: id-ecDH o ECDH curve: secp521r1 In alignment with ML-KEM [FIPS.203], Composite KEM algorithms output a 256-bit shared secret key at all security levels. For all RSA key types and sizes, the exponent is RECOMMENDED to be 65537. Implementations MAY support only 65537 and reject other exponent values. Legacy RSA implementations that use other values for the exponent MAY be used within a composite, but need to be careful when interoperating with other implementations. SHA3-256 is used as the KDF for all Composite ML-KEM algorithms. 7.1. RSA-OAEP Parameters Use of RSA-OAEP [RFC8017] requires additional parameters to be specified. Ounsworth, et al. Expires 7 May 2026 [Page 34] Internet-Draft Composite ML-KEM November 2025 The RSA component keys MUST be generated at the specified 2048-bit, 3072-bit, 4096-bit key sizes respectively (up to small differences such as dropping leading zeros); intermediate sizes are not acceptable. As with the other Composite ML-KEM algorithms, AlgorithmIdentifier parameters MUST be absent. The RSA-OAEP primitive SHALL be instantiated with the following hard-coded parameters which are the same for the 2048, 3072 and 4096 bit key sizes since the objective is to carry and output a 256-bit shared secret key at all security levels. +=============================+=================+ | RSAES-OAEP-params | Value | +=============================+=================+ | hashAlgorithm | id-sha256 | +-----------------------------+-----------------+ | MaskGenAlgorithm.algorithm | id-mgf1 | +-----------------------------+-----------------+ | maskGenAlgorithm.parameters | id-sha256 | +-----------------------------+-----------------+ | pSourceAlgorithm | pSpecifiedEmpty | +-----------------------------+-----------------+ | ss_len | 256 bits | +-----------------------------+-----------------+ Table 2: RSA-OAEP Parameters Full specifications for the referenced algorithms can be found in Appendix B. Note: The mask length, according to [RFC8017], is k - hLen - 1, where k is the size of the RSA modulus. Since the choice of hash function and the RSA key size is fixed for each composite algorithm, implementations could choose to pre-compute and hard-code the mask length. 7.2. Rationale for choices In generating the list of composite algorithms, the idea was to provide composite algorithms at various security levels with varying performance characteristics. The main design consideration in choosing pairings is to prioritize providing pairings of each ML-KEM security level with commonly- deployed traditional algorithms. This supports the design goal of using composites as a stepping stone to efficiently deploy post- quantum on top of existing hardened and certified traditional Ounsworth, et al. Expires 7 May 2026 [Page 35] Internet-Draft Composite ML-KEM November 2025 algorithm implementations. This was prioritized rather than attempting to exactly match the security level of the post-quantum and traditional components -- which in general is difficult to do since there is no academic consensus on how to compare the "bits of security" against classical attackers and "qubits of security" against quantum attackers. While it may seem odd to use 256-bit outputs at all security levels, this aligns with ML-KEM [FIPS.203] which produces a 256-bit shared secret key at all security levels. SHA3-256 has 256 bits of (2nd) pre-image resistance, which is the required property for a KDF to provide 128 bits of security, as allowed in Table 3 of [SP.800-57pt1r5]. 8. ASN.1 Module Composite-MLKEM-2025 { iso(1) identified-organization(3) dod(6) internet(1) security(5) mechanisms(5) pkix(7) id-mod(0) id-mod-composite-mlkem-2025(TBDMOD) } DEFINITIONS IMPLICIT TAGS ::= BEGIN EXPORTS ALL; IMPORTS PUBLIC-KEY, AlgorithmIdentifier{}, SMIME-CAPS FROM AlgorithmInformation-2009 -- RFC 5912 [X509ASN1] { iso(1) identified-organization(3) dod(6) internet(1) security(5) mechanisms(5) pkix(7) id-mod(0) id-mod-algorithmInformation-02(58) } KEM-ALGORITHM FROM KEMAlgorithmInformation-2023 { iso(1) identified-organization(3) dod(6) internet(1) security(5) mechanisms(5) pkix(7) id-mod(0) id-mod-kemAlgorithmInformation-2023(109) } ; -- -- Object Identifiers -- -- Ounsworth, et al. Expires 7 May 2026 [Page 36] Internet-Draft Composite ML-KEM November 2025 -- Information Object Classes -- pk-CompositeKEM {OBJECT IDENTIFIER:id} PUBLIC-KEY ::= { IDENTIFIER id -- KEY no ASN.1 wrapping -- PARAMS ARE absent CERT-KEY-USAGE { keyEncipherment } -- PRIVATE-KEY no ASN.1 wrapping -- } kema-CompositeKEM { OBJECT IDENTIFIER:id, PUBLIC-KEY:publicKeyType } KEM-ALGORITHM ::= { IDENTIFIER id -- VALUE no ASN.1 wrapping -- PARAMS ARE absent PUBLIC-KEYS { publicKeyType } SMIME-CAPS { IDENTIFIED BY id } } -- -- Composite KEM Algorithms -- -- TODO: OID to be replaced by IANA id-MLKEM768-RSA2048-SHA3-256 OBJECT IDENTIFIER ::= { joint-iso-itu-t(2) country(16) us(840) organization(1) entrust(114027) algorithm(80) explicitcomposite(5) kem(2) 62 } pk-MLKEM768-RSA2048-SHA3-256 PUBLIC-KEY ::= pk-CompositeKEM { id-MLKEM768-RSA2048-SHA3-256 } kema-MLKEM768-RSA2048-SHA3-256 KEM-ALGORITHM ::= kema-CompositeKEM{ id-MLKEM768-RSA2048-SHA3-256, pk-MLKEM768-RSA2048-SHA3-256 } -- TODO: OID to be replaced by IANA id-MLKEM768-RSA3072-SHA3-256 OBJECT IDENTIFIER ::= { Ounsworth, et al. Expires 7 May 2026 [Page 37] Internet-Draft Composite ML-KEM November 2025 joint-iso-itu-t(2) country(16) us(840) organization(1) entrust(114027) algorithm(80) explicitcomposite(5) kem(2) 63 } pk-MLKEM768-RSA3072-SHA3-256 PUBLIC-KEY ::= pk-CompositeKEM { id-MLKEM768-RSA3072-SHA3-256 } kema-MLKEM768-RSA3072-SHA3-256 KEM-ALGORITHM ::= kema-CompositeKEM{ id-MLKEM768-RSA3072-SHA3-256, pk-MLKEM768-RSA3072-SHA3-256 } -- TODO: OID to be replaced by IANA id-MLKEM768-RSA4096-SHA3-256 OBJECT IDENTIFIER ::= { joint-iso-itu-t(2) country(16) us(840) organization(1) entrust(114027) algorithm(80) explicitcomposite(5) kem(2) 64 } pk-MLKEM768-RSA4096-SHA3-256 PUBLIC-KEY ::= pk-CompositeKEM { id-MLKEM768-RSA4096-SHA3-256 } kema-MLKEM768-RSA4096-SHA3-256 KEM-ALGORITHM ::= kema-CompositeKEM{ id-MLKEM768-RSA4096-SHA3-256, pk-MLKEM768-RSA4096-SHA3-256 } -- TODO: OID to be replaced by IANA id-MLKEM768-X25519-SHA3-256 OBJECT IDENTIFIER ::= { joint-iso-itu-t(2) country(16) us(840) organization(1) entrust(114027) algorithm(80) explicitcomposite(5) kem(2) 65 } pk-MLKEM768-X25519-SHA3-256 PUBLIC-KEY ::= pk-CompositeKEM { id-MLKEM768-X25519-SHA3-256 } kema-MLKEM768-X25519-SHA3-256 KEM-ALGORITHM ::= kema-CompositeKEM{ id-MLKEM768-X25519-SHA3-256, pk-MLKEM768-X25519-SHA3-256 } -- TODO: OID to be replaced by IANA id-MLKEM768-ECDH-P256-SHA3-256 OBJECT IDENTIFIER ::= { joint-iso-itu-t(2) country(16) us(840) organization(1) Ounsworth, et al. Expires 7 May 2026 [Page 38] Internet-Draft Composite ML-KEM November 2025 entrust(114027) algorithm(80) explicitcomposite(5) kem(2) 66 } pk-MLKEM768-ECDH-P256-SHA3-256 PUBLIC-KEY ::= pk-CompositeKEM { id-MLKEM768-ECDH-P256-SHA3-256 } kema-MLKEM768-ECDH-P256-SHA3-256 KEM-ALGORITHM ::= kema-CompositeKEM{ id-MLKEM768-ECDH-P256-SHA3-256, pk-MLKEM768-ECDH-P256-SHA3-256 } -- TODO: OID to be replaced by IANA id-MLKEM768-ECDH-P384-SHA3-256 OBJECT IDENTIFIER ::= { joint-iso-itu-t(2) country(16) us(840) organization(1) entrust(114027) algorithm(80) explicitcomposite(5) kem(2) 67 } pk-MLKEM768-ECDH-P384-SHA3-256 PUBLIC-KEY ::= pk-CompositeKEM { id-MLKEM768-ECDH-P384-SHA3-256 } kema-MLKEM768-ECDH-P384-SHA3-256 KEM-ALGORITHM ::= kema-CompositeKEM{ id-MLKEM768-ECDH-P384-SHA3-256, pk-MLKEM768-ECDH-P384-SHA3-256 } -- TODO: OID to be replaced by IANA id-MLKEM768-ECDH-brainpoolP256r1-SHA3-256 OBJECT IDENTIFIER ::= { joint-iso-itu-t(2) country(16) us(840) organization(1) entrust(114027) algorithm(80) explicitcomposite(5) kem(2) 68 } pk-MLKEM768-ECDH-brainpoolP256r1-SHA3-256 PUBLIC-KEY ::= pk-CompositeKEM { id-MLKEM768-ECDH-brainpoolP256r1-SHA3-256 } kema-MLKEM768-ECDH-brainpoolP256r1-SHA3-256 KEM-ALGORITHM ::= kema-CompositeKEM{ id-MLKEM768-ECDH-brainpoolP256r1-SHA3-256, pk-MLKEM768-ECDH-brainpoolP256r1-SHA3-256 } -- TODO: OID to be replaced by IANA id-MLKEM1024-RSA3072-SHA3-256 OBJECT IDENTIFIER ::= { joint-iso-itu-t(2) country(16) us(840) organization(1) entrust(114027) algorithm(80) explicitcomposite(5) kem(2) 69 } Ounsworth, et al. Expires 7 May 2026 [Page 39] Internet-Draft Composite ML-KEM November 2025 pk-MLKEM1024-RSA3072-SHA3-256 PUBLIC-KEY ::= pk-CompositeKEM { id-MLKEM1024-RSA3072-SHA3-256 } kema-MLKEM1024-RSA3072-SHA3-256 KEM-ALGORITHM ::= kema-CompositeKEM{ id-MLKEM1024-RSA3072-SHA3-256, pk-MLKEM1024-RSA3072-SHA3-256 } -- TODO: OID to be replaced by IANA id-MLKEM1024-ECDH-P384-SHA3-256 OBJECT IDENTIFIER ::= { joint-iso-itu-t(2) country(16) us(840) organization(1) entrust(114027) algorithm(80) explicitcomposite(5) kem(2) 70 } pk-MLKEM1024-ECDH-P384-SHA3-256 PUBLIC-KEY ::= pk-CompositeKEM { id-MLKEM1024-ECDH-P384-SHA3-256 } kema-MLKEM1024-ECDH-P384-SHA3-256 KEM-ALGORITHM ::= kema-CompositeKEM{ id-MLKEM1024-ECDH-P384-SHA3-256, pk-MLKEM1024-ECDH-P384-SHA3-256 } -- TODO: OID to be replaced by IANA id-MLKEM1024-ECDH-brainpoolP384r1-SHA3-256 OBJECT IDENTIFIER ::= { joint-iso-itu-t(2) country(16) us(840) organization(1) entrust(114027) algorithm(80) explicitcomposite(5) kem(2) 71 } pk-MLKEM1024-ECDH-brainpoolP384r1-SHA3-256 PUBLIC-KEY ::= pk-CompositeKEM{ id-MLKEM1024-ECDH-brainpoolP384r1-SHA3-256 } kema-MLKEM1024-ECDH-brainpoolP384r1-SHA3-256 KEM-ALGORITHM ::= kema-CompositeKEM{ id-MLKEM1024-ECDH-brainpoolP384r1-SHA3-256, pk-MLKEM1024-ECDH-brainpoolP384r1-SHA3-256 } -- TODO: OID to be replaced by IANA id-MLKEM1024-X448-SHA3-256 OBJECT IDENTIFIER ::= { joint-iso-itu-t(2) country(16) us(840) organization(1) entrust(114027) algorithm(80) explicitcomposite(5) kem(2) 72 } pk-MLKEM1024-X448-SHA3-256 PUBLIC-KEY ::= pk-CompositeKEM { id-MLKEM1024-X448-SHA3-256 } Ounsworth, et al. Expires 7 May 2026 [Page 40] Internet-Draft Composite ML-KEM November 2025 kema-MLKEM1024-X448 KEM-ALGORITHM ::= kema-CompositeKEM{ id-MLKEM1024-X448-SHA3-256, pk-MLKEM1024-X448-SHA3-256 } -- TODO: OID to be replaced by IANA id-MLKEM1024-ECDH-P521-SHA3-256 OBJECT IDENTIFIER ::= { joint-iso-itu-t(2) country(16) us(840) organization(1) entrust(114027) algorithm(80) explicitcomposite(5) kem(2) 73 } pk-MLKEM1024-ECDH-P521-SHA3-256 PUBLIC-KEY ::= pk-CompositeKEM { id-MLKEM1024-ECDH-P521-SHA3-256 } kema-MLKEM1024-ECDH-P521-SHA3-256 KEM-ALGORITHM ::= kema-CompositeKEM{ id-MLKEM1024-ECDH-P521-SHA3-256, pk-MLKEM1024-ECDH-P521-SHA3-256 } END 9. IANA Considerations 9.1. Object Identifier Allocations EDNOTE to IANA: OIDs will need to be replaced in both the ASN.1 module and in Section 7. 9.1.1. Module Registration The following is to be registered in "SMI Security for PKIX Module Identifier": * Decimal: IANA Assigned - *Replace TBDMOD* * Description: Composite-KEM-2023 - id-mod-composite-kems * References: This Document 9.1.2. Object Identifier Registrations The following is to be registered in "SMI Security for PKIX Algorithms": * id-MLKEM768-RSA2048-SHA3-256 Ounsworth, et al. Expires 7 May 2026 [Page 41] Internet-Draft Composite ML-KEM November 2025 - Decimal: IANA Assigned - Description: id-MLKEM768-RSA2048-SHA3-256 - References: This Document * id-MLKEM768-RSA3072-SHA3-256 - Decimal: IANA Assigned - Description: id-MLKEM768-RSA3072-SHA3-256 - References: This Document * id-MLKEM768-RSA4096-SHA3-256 - Decimal: IANA Assigned - Description: id-MLKEM768-RSA4096-SHA3-256 - References: This Document * id-MLKEM768-ECDH-P256-SHA3-256 - Decimal: IANA Assigned - Description: id-MLKEM768-ECDH-P256-SHA3-256 - References: This Document * id-MLKEM768-ECDH-P384-SHA3-256 - Decimal: IANA Assigned - Description: id-MLKEM768-ECDH-P384-SHA3-256 - References: This Document * id-MLKEM768-ECDH-brainpoolP256r1-SHA3-256 - Decimal: IANA Assigned - Description: id-MLKEM768-ECDH-brainpoolP256r1-SHA3-256 - References: This Document * id-MLKEM768-X25519-SHA3-256 Ounsworth, et al. Expires 7 May 2026 [Page 42] Internet-Draft Composite ML-KEM November 2025 - Decimal: IANA Assigned - Description: id-MLKEM768-X25519-SHA3-256 - References: This Document * id-MLKEM1024-RSA3072-SHA3-256 - Decimal: IANA Assigned - Description: id-MLKEM1024-RSA3072-SHA3-256 - References: This Document * id-MLKEM1024-ECDH-P384-SHA3-256 - Decimal: IANA Assigned - Description: id-MLKEM1024-ECDH-P384-SHA3-256 - References: This Document * id-MLKEM1024-ECDH-brainpoolP384r1-SHA3-256 - Decimal: IANA Assigned - Description: id-MLKEM1024-ECDH-brainpoolP384r1-SHA3-256 - References: This Document * id-MLKEM1024-X448-SHA3-256 - Decimal: IANA Assigned - Description: id-MLKEM1024-X448-SHA3-256 - References: This Document * id-MLKEM1024-ECDH-P521-SHA3-256 - Decimal: IANA Assigned - Description: id-MLKEM1024-ECDH-P521-SHA3-256 - References: This Document 10. Security Considerations Ounsworth, et al. Expires 7 May 2026 [Page 43] Internet-Draft Composite ML-KEM November 2025 10.1. Why Hybrids? In broad terms, a PQ/T Hybrid can be used either to provide dual- algorithm security or to provide migration flexibility. Let's quickly explore both. Dual-algorithm security. The general idea is that the data is protected by two algorithms such that an attacker would need to break both in order to compromise the data. As with most of cryptography, this property is easy to state in general terms, but becomes more complicated when expressed in formalisms. The following sections go into more detail here. Migration flexibility. Some PQ/T hybrids exist to provide a sort of "OR" mode where the application can choose to use one algorithm or the other or both. The intention is that the PQ/T hybrid mechanism builds in backwards compatibility to allow legacy and upgraded applications to co-exist and communicate. The composite algorithms presented in this specification do not provide this since they operate in a strict "AND" mode. They do, however, provide codebase migration flexibility. Consider that an organization has today a mature, validated, certified, hardened implementation of RSA or ECC; composites allow them to add an ML-KEM implementation which immediately starts providing benefits against harvest-now-decrypt- later attacks even if that ML-KEM implementation is still an experimental, non-validated, non-certified, non-hardened implementation. More details of obtaining FIPS certification of a composite algorithm can be found in Section 11.1. 10.2. KEM Combiner The KEM combiner from Section 4.4 is reproduced here for reference. SHA3-256(mlkemSS || tradSS || tradCT || tradPK || Label) Figure 3: KEM combiner construction The primary security property of the KEM combiner is that it preserves indistinguishable (adaptive) chosen-ciphertext (IND-CCA2) security of the overall Composite ML-KEM so long as at least one component is IND-CCA2 [X-Wing] [GHP18]. Additionally, we also need to consider the case where one of the component algorithms is completely broken; that the private key is known to an attacker, or worse that the public key, private key, and ciphertext are manipulated by the attacker. In this case, we rely on the construction of the KEM combiner to ensure that the value of the other shared secret key cannot be leaked or the combined shared secret key predicted via manipulation of the broken algorithm. Ounsworth, et al. Expires 7 May 2026 [Page 44] Internet-Draft Composite ML-KEM November 2025 Each registered Composite ML-KEM algorithm specifies a Label -- see Section 7. Given that each Composite ML-KEM algorithm fully specifies the component algorithms, including for example the size of the RSA modulus, all inputs to the KEM combiner are fixed-size and thus do not require length-prefixing. * mlkemSS is always 32 bytes. * tradSS in the case of DH this is derived by the decapsulator and therefore the length is not controlled by the attacker, however in the case of RSA-OAEP this value is directly chosen by the sender and both the length and content could be freely chosen by an attacker. * tradCT is either an elliptic curve public key or an RSA-OAEP ciphertext which is required to have its length checked by step 1b of RSAES-OAEP-DECRYPT in [RFC8017]. * tradPK is the public key of the traditional component (elliptic curve or RSA) and therefore fixed-length. * Label is a fixed value specified in this document. 10.2.1. IND-CCA2 Security of the hybrid scheme Informally, a Composite ML-KEM algorithm is secure if the combiner (SHA3) is secure, and either ML-KEM is secure or the traditional component (RSA-OAEP, ECDH, X25519 or X448) is secure. The security of ML-KEM and DH hybrids is covered in [X-Wing] and requires that the first KEM component (ML-KEM in this construction) is IND-CCA2 and second ciphertext preimage resistant (C2PRI) and that the second traditional component is IND-CCA2. This design choice improves performance by not including the large ML-KEM public key and ciphertext, but means that an implementation error in the ML-KEM component that affects the ciphertext check step of the FO transform could result in the overall composite no longer achieving IND-CCA2 security. This solution remains IND-CCA2 due to binding the tradPK and tradCT in the KEM combiner. The QSF framework presented in [X-Wing] is extended to cover RSA-OAEP as the traditional algorithm in place of DH by noting that RSA-OAEP is also IND-CCA2 secure [RFC8017]. The composite combiner cannot be assumed to be secure when used with different KEMs and a more cautious approach would bind the public key and ciphertext of the first KEM as well. Ounsworth, et al. Expires 7 May 2026 [Page 45] Internet-Draft Composite ML-KEM November 2025 10.2.2. Second pre-image resistance of component KEMs The notion of a "ciphertext second pre-image resistant KEM" is defined in [X-Wing] as being the property that it is computationally difficult to find two different ciphertexts c != c' that will decapsulate to the same shared secret key under the same public key. For the purposes of a hybrid KEM combiner, this property means that given two composite ciphertexts (c1, c2) and (c1', c2'), we must obtain a unique overall shared secret key so long as either c1 != c1' or c2 != c2' -- i.e. the overall Composite ML-KEM is ciphertext second pre-image resistant, and therefore secure so long as one of the component KEMs is secure. In [X-Wing] it is proven that ML-KEM is a second pre-image resistant KEM and therefore the ML-KEM ciphertext can safely be omitted from the KEM combiner. Note that this makes a fundamental assumption on ML-KEM remaining ciphertext second pre-image resistant, and therefore this formulation of KEM combiner does not fully protect against implementation errors in the ML-KEM component -- particularly around the ciphertext check step of the Fujisaki-Okamoto transform -- which could trivially lead to second ciphertext pre-image attacks that break the IND-CCA2 security of the ML-KEM component and of the overall Composite ML-KEM. This could be more fully mitigated by binding the ML-KEM ciphertext in the combiner, but a design decision was made to settle for protection against algorithmic attacks and not implementation attacks against ML-KEM in order to increase performance. However, since neither RSA-OAEP nor DH guarantee second pre-image resistance at all, even in a correct implementation, these ciphertexts are bound to the key derivation in order to guarantee that c != c' will yield a unique ciphertext, and thus restoring second pre-image resistance to the overall Composite ML-KEM. 10.2.3. Generifying this construction It should be clear that the security analysis of the presented KEM combiner construction relies heavily on the specific choices of component algorithms and combiner KDF, and this combiner construction SHOULD NOT by applied to any other combination of ciphers without performing the appropriate security analysis. Ounsworth, et al. Expires 7 May 2026 [Page 46] Internet-Draft Composite ML-KEM November 2025 10.3. Key Reuse While conformance with this specification requires that both components of a composite key MUST be freshly generated, the designers are aware that some implementers may be forced to break this rule due to operational constraints. This section documents the implications of doing so. When using single-algorithm cryptography, the best practice is to always generate fresh keying material for each purpose, for example when renewing a certificate, or obtaining both a TLS and S/MIME certificate for the same device. However, in practice key reuse in such scenarios is not always catastrophic to security and therefore often tolerated. However this reasoning does not hold in the PQ/T hybrid setting. Within the broader context of PQ/T hybrids, we need to consider new attack surfaces that arise due to the hybrid constructions and did not exist in single-algorithm contexts. One of these is key reuse where the component keys within a hybrid are also used by themselves within a single-algorithm context. For example, it might be tempting for an operator to take already-deployed RSA keys and add an ML-KEM key to them to form a hybrid. Within a hybrid signature context this leads to a class of attacks referred to as "stripping attacks" where one component signature can be extracted and presented as a single- algorithm signature. Hybrid KEMs using a concatenation-style KEM combiner, as is done in this specification, do not have the analogous attack surface because even if an attacker is able to extract and decrypt one of the component ciphertexts, this will yield a different shared secret key than the overall shared secret key derived from the composite, so any subsequent symmetric cryptographic operations will fail. In addition, there is a further implication to key reuse regarding certificate revocation. Upon receiving a new certificate enrolment request, many certification authorities will check if the requested public key has been previously revoked due to key compromise. Often a CA will perform this check by using the public key hash. Therefore, if one, or even both, components of a composite have been previously revoked, the CA may only check the hash of the combined composite key and not find the revocations. Therefore, because the possibility of key reuse exists even though forbidden in this specification, CAs performing revocation checks on a composite key SHOULD also check both component keys independently to verify that the component keys have not been revoked. Ounsworth, et al. Expires 7 May 2026 [Page 47] Internet-Draft Composite ML-KEM November 2025 10.4. Decapsulation failure Provided all inputs are well-formed, the key establishment procedure of ML-KEM will never explicitly fail. Specifically, the ML- KEM.Encaps() and ML-KEM.Decaps() algorithms from [FIPS.203] will always output a value with the same data type as a shared secret key, and will never output an error or failure symbol. However, it is possible (though extremely unlikely) that the process will fail in the sense that ML-KEM.Encaps() and ML-KEM.Decaps() will produce different outputs, even though both of them are behaving honestly and no adversarial interference is present. This is due to the lattice arithmetic for decapsulation with the secret key having hit an unrecoverable degenerate case that could not have been predicted by the encapsulator without knowledge of the secret key. In this case, the sender and recipient clearly did not succeed in producing a shared secret key. This event is called a decapsulation failure. Estimates for the decapsulation failure probability (or rate) for each of the ML-KEM parameter sets are provided in Table 1 of [FIPS.203] and reproduced here in Table 3. +===============+============================+ | Parameter set | Decapsulation failure rate | +===============+============================+ | ML-KEM-512 | 2^(-139) | +---------------+----------------------------+ | ML-KEM-768 | 2^(-164) | +---------------+----------------------------+ | ML-KEM-1024 | 2^(-174) | +---------------+----------------------------+ Table 3: ML-KEM decapsulation failure rates In the case of ML-KEM decapsulation failure, Composite ML-KEM MUST preserve the same behavior and return a well-formed output shared secret key. 10.5. Policy for Deprecated and Acceptable Algorithms Traditionally, a public key or certificate contains a single cryptographic algorithm. If and when an algorithm becomes deprecated (for example, RSA-512, or SHA1), the path to deprecating it through policy and removing it from operational environments is, at least is principle, straightforward. In the composite model this is less obvious since a PQ/T hybrid is expected to still be considered valid after the traditional component is deprecated for individual use. As such, a single composite public key or certificate may contain a mixture of deprecated and non- Ounsworth, et al. Expires 7 May 2026 [Page 48] Internet-Draft Composite ML-KEM November 2025 deprecated algorithms. In general this should be manageable through policy by removing OIDs for the standalone component algorithms while still allowing OIDs for composite algorithms. However, complications may arise when the composite implementation needs to invoke the cryptographic module for a deprecated component algorithm. In particular, this could lead to complex Cryptographic Bills of Materials that show implementations of deprecated algorithms still present and being used. 11. Implementation Considerations 11.1. FIPS Certification The following sections give guidance to implementers wishing to FIPS- certify a composite implementation. This guidance is not authoritative and has not been endorsed by NIST. Implementers seeking FIPS certification of a composite KEM algorithm where only one of the component algorithms has been FIPS-validated or FIPS-approved should credit the FIPS-validated component algorithm with full security strength, the non-FIPS-validated component algorithm with zero security, and the overall composite should be considered at least as strong and thus FIPS-approved. The composite algorithm has been designed to treat the underlying primitives as "black-box implementations" and not impose any additional requirements on them that could require an existing implementation of an underlying primitive to run in a mode different from the one under which it was certified. For example, the KeyGen defined in Section 4.1 invokes ML-KEM.KeyGen(seed) which might not be available in a cryptographic module running in FIPS-mode, but Section 4.1 is only a suggested implementation and the composite KeyGen MAY be implemented using a different available interface for ML-KEM.KeyGen. The authors wish to note that composite algorithms provide a design pattern to provide utility in future situations that require care to remain FIPS-compliant, such as future cryptographic migrations as well as bridging across jurisdictions with non-intersecting cryptographic requirements. The following sections go into further detail on specific issues that relate to FIPS certification. Ounsworth, et al. Expires 7 May 2026 [Page 49] Internet-Draft Composite ML-KEM November 2025 11.1.1. Combiner Function For reference, the KEM combiner used in Composite ML-KEM is: ss = SHA3-256(mlkemSS || tradSS || tradCT || tradPK || Label) NIST SP 800-227 [SP800-227] allows hybrid key combiners of the following form: K <- KDM((S1,S2,...,St), OtherInput) (14) Composite ML-KEM maps cleanly into this since it places the two shared secret keys mlkemSS || tradSS at the beginning of the KDF input such that all other inputs tradCT || tradPK || Label can be considered part of OtherInput for the purposes of FIPS certification. For the detailed steps of the Key Derivation Mechanism KDM, [SP800-227] refers to [SP.800-56Cr2]. Compliance of the Composite ML-KEM variants is achieved in the following way: The Composite ML-KEM algorithms use SHA3, and so can be certified under [SP.800-56Cr2] One-Step Key Derivation Option 1: H(x) = hash(x). [SP.800-56Cr2] section 4 "One-Step Key Derivation" requires a counter which begins at the 4-byte value 0x00000001. However, the counter is allowed to be omitted when the hash function is executed only once, as specified on page 159 of the FIPS 140-3 Implementation Guidance [FIPS-140-3-IG]. 11.1.2. Order of KDF inputs with Non-Approved Algorithms [SP800-227] adds an important stipulation that was not present in earlier NIST specifications: This publication approves the use of the key combiner (14) for any t > 1, so long as at least one shared secret (i.e., S_j for some j) is a shared secret generated from the key- establishment methods of SP 800-56A or SP 800-56B, or an approved KEM. This means that although Composite ML-KEM always places the shared secret key from ML-KEM in the first slot, a Composite ML-KEM can be FIPS certified so long as either component is FIPS certified. This is important for several reasons. First, in the early stages of PQC migration, composites allow for a non-FIPS certified ML-KEM implementation to be added to a module that already has a FIPS Ounsworth, et al. Expires 7 May 2026 [Page 50] Internet-Draft Composite ML-KEM November 2025 certified traditional component, and the resulting composite can be FIPS certified. Second, when eventually RSA and Elliptic Curve are no longer FIPS-allowed, the composite can retain its FIPS certified status on the strength of the ML-KEM component. Third, while this is outside the scope of this specification, the general composite construction could be used to create FIPS certified algorithms that contain a component algorithm from a different jurisdiction. Third, a composite where both components are FIPS-certified could allow an implementer to patch one component algorithm while awaiting re- certification while continuing to use the overall composite in FIPS mode. Note that before [SP800-227] was in force, [SP.800-56Cr2] required the shared secret key from the certified algorithm to be in the first slot and therefore a Composite ML-KEM implementation using a FIPS- certified traditional component and a non-FIPS certified ML-KEM is not believed to be certifiable under [SP.800-56Cr2] alone, and requires the ammendments made by [SP800-227]. 11.2. Backwards Compatibility The term "backwards compatibility" is used here to mean that existing systems as they are deployed today can interoperate with the upgraded systems of the future. This draft explicitly does not provide backwards compatibility, only upgraded systems will understand the OIDs defined in this specification. These migration and interoperability concerns need to be thought about in the context of various types of protocols that make use of X.509 and PKIX with relation to key establishment and content encryption, from online negotiated protocols such as TLS 1.3 [RFC8446] and IKEv2 [RFC7296], to non-negotiated asynchronous protocols such as S/MIME signed email [RFC8551], as well as myriad other standardized and proprietary protocols and applications that leverage CMS [RFC5652] encrypted structures. 11.3. Profiling down the number of options One daunting aspect of this specification is the number of composite algorithm combinations. Each option has been specified because there is a community that has a direct application for it; typically because the traditional component is already deployed in a change- managed environment, or because that specific traditional component is required for regulatory reasons. Ounsworth, et al. Expires 7 May 2026 [Page 51] Internet-Draft Composite ML-KEM November 2025 However, this large number of combinations leads either to fracturing of the ecosystem into non-interoperable sub-groups when different communities choose non-overlapping subsets to support, or on the other hand it leads to spreading development resources too thin when trying to support all options. This specification does not list any particular composite algorithm as mandatory-to-implement, however organizations that operate within specific application domains are encouraged to define profiles that select a small number of composites appropriate for that application domain. For applications that do not have any regulatory requirements or legacy implementations to consider, it is RECOMMENDED to focus implementation effort on: id-MLKEM768-X25519-SHA3-256 (aka "X-Wing") id-MLKEM768-ECDH-P256-SHA3-256 In applications that only allow NIST PQC Level 5, it is RECOMMENDED to focus implementation effort on: id-MLKEM1024-ECDH-P384-SHA3-256 11.4. Decapsulation Requires the Public Key ML-KEM always requires the public key in order to perform various steps of the Fujisaki-Okamoto decapsulation [FIPS.203], and for this reason the private key encoding specified in FIPS 203 includes the public key. Moreover, the KEM combiner as specified in Section 4.4 requires the public key of the traditional component in order to achieve the public-key binding property and ciphertext collision resistance as described in Section 10.2. For this reason, the private key serialization defined in Section 5.2 carries the traditional public key so that it is easily available to the decapsulater. Implementers who choose to use a different private key encoding than the one specified in this document MUST consider how to provide the component public keys to the decapsulate routine. This includes, for example, implementations that use a hardware security module to hold the private key. While some implementations might contain routines to computationally derive the public key from the private key, it is not guaranteed that all implementations will support this, or that they will then encode the public key in the correct format. In some implementations, the application might be required to cache the public key or certificate associated with the private key so that the public key can be retrieved for the purposes of decapsulation. Ounsworth, et al. Expires 7 May 2026 [Page 52] Internet-Draft Composite ML-KEM November 2025 12. References 12.1. Normative References [FIPS.202] National Institute of Standards and Technology (NIST), "SHA-3 Standard: Permutation-Based Hash and Extendable- Output Functions", August 2015, . [FIPS.203] National Institute of Standards and Technology (NIST), "Module-Lattice-based Key-Encapsulation Mechanism Standard", August 2024, . [FIPS.204] National Institute of Standards and Technology (NIST), "Module-Lattice-Based Digital Signature Standard", August 2024, . [RFC2104] Krawczyk, H., Bellare, M., and R. Canetti, "HMAC: Keyed- Hashing for Message Authentication", RFC 2104, DOI 10.17487/RFC2104, February 1997, . [RFC2119] Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC 2119, DOI 10.17487/RFC2119, March 1997, . [RFC5280] Cooper, D., Santesson, S., Farrell, S., Boeyen, S., Housley, R., and W. Polk, "Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile", RFC 5280, DOI 10.17487/RFC5280, May 2008, . [RFC5480] Turner, S., Brown, D., Yiu, K., Housley, R., and T. Polk, "Elliptic Curve Cryptography Subject Public Key Information", RFC 5480, DOI 10.17487/RFC5480, March 2009, . [RFC5652] Housley, R., "Cryptographic Message Syntax (CMS)", STD 70, RFC 5652, DOI 10.17487/RFC5652, September 2009, . Ounsworth, et al. Expires 7 May 2026 [Page 53] Internet-Draft Composite ML-KEM November 2025 [RFC5869] Krawczyk, H. and P. Eronen, "HMAC-based Extract-and-Expand Key Derivation Function (HKDF)", RFC 5869, DOI 10.17487/RFC5869, May 2010, . [RFC5915] Turner, S. and D. Brown, "Elliptic Curve Private Key Structure", RFC 5915, DOI 10.17487/RFC5915, June 2010, . [RFC5958] Turner, S., "Asymmetric Key Packages", RFC 5958, DOI 10.17487/RFC5958, August 2010, . [RFC7748] Langley, A., Hamburg, M., and S. Turner, "Elliptic Curves for Security", RFC 7748, DOI 10.17487/RFC7748, January 2016, . [RFC8017] Moriarty, K., Ed., Kaliski, B., Jonsson, J., and A. Rusch, "PKCS #1: RSA Cryptography Specifications Version 2.2", RFC 8017, DOI 10.17487/RFC8017, November 2016, . [RFC8174] Leiba, B., "Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words", BCP 14, RFC 8174, DOI 10.17487/RFC8174, May 2017, . [RFC8410] Josefsson, S. and J. Schaad, "Algorithm Identifiers for Ed25519, Ed448, X25519, and X448 for Use in the Internet X.509 Public Key Infrastructure", RFC 8410, DOI 10.17487/RFC8410, August 2018, . [RFC8411] Schaad, J. and R. Andrews, "IANA Registration for the Cryptographic Algorithm Object Identifier Range", RFC 8411, DOI 10.17487/RFC8411, August 2018, . [RFC9629] Housley, R., Gray, J., and T. Okubo, "Using Key Encapsulation Mechanism (KEM) Algorithms in the Cryptographic Message Syntax (CMS)", RFC 9629, DOI 10.17487/RFC9629, August 2024, . [SEC1] Certicom Research, "SEC 1: Elliptic Curve Cryptography", May 2009, . Ounsworth, et al. Expires 7 May 2026 [Page 54] Internet-Draft Composite ML-KEM November 2025 [SEC2] Certicom Research, "SEC 2: Recommended Elliptic Curve Domain Parameters", January 2010, . [SP.800-185] National Institute of Standards and Technology (NIST), "SHA-3 Derived Functions: cSHAKE, KMAC, TupleHash, and ParallelHash", December 2016, . [SP.800-56Ar3] National Institute of Standards and Technology (NIST), "Recommendation for Pair-Wise Key-Establishment Schemes Using Discrete Logarithm Cryptography", April 2018, . [SP.800-56Cr2] National Institute of Standards and Technology (NIST), "Recommendation for Key-Derivation Methods in Key- Establishment Schemes", August 2020, . [SP.800-57pt1r5] National Institute of Standards and Technology (NIST), "Recommendation for Key Management: Part 1 – General", May 2020, . [X.690] ITU-T, "Information technology - ASN.1 encoding Rules: Specification of Basic Encoding Rules (BER), Canonical Encoding Rules (CER) and Distinguished Encoding Rules (DER)", ISO/IEC 8825-1:2015, November 2015. [X9.62_2005] "Public Key Cryptography for the Financial Services Industry, The Elliptic Curve Digital Signature Algorithm (ECDSA)", November 2005. 12.2. Informative References [ANSSI2024] French Cybersecurity Agency (ANSSI), Federal Office for Information Security (BSI), Netherlands National Communications Security Agency (NLNCSA), and Swedish Ounsworth, et al. Expires 7 May 2026 [Page 55] Internet-Draft Composite ML-KEM November 2025 National Communications Security Authority, Swedish Armed Forces, "Position Paper on Quantum Key Distribution", n.d., . [Aviram22] Aviram, N., Dowling, B., Komargodski, I., Paterson, K. G., Ronen, E., and E. Yogev, "Practical (Post-Quantum) Key Combiners from One-Wayness and Applications to TLS", n.d., . [Bindel2017] Bindel, N., Herath, U., McKague, M., and D. Stebila, "Transitioning to a quantum-resistant public key infrastructure", 2017, . [BSI2021] Federal Office for Information Security (BSI), "Quantum- safe cryptography - fundamentals, current developments and recommendations", October 2021, . [ETSI.TS.103.744] ETSI, "ETSI TS 103 744 V1.2.1 CYBER-QSC; Quantum-safe Hybrid Key Establishment", March 2025, . [FIPS-140-3-IG] National Institute of Standards and Technology (NIST), "Implementation Guidance for FIPS 140-3 and the Cryptographic Module Validation Program", July 2024, . [GHP18] Giacon, F., Heuer, F., and B. Poettering, "KEM Combiners", 2018, . [I-D.ietf-lamps-kyber-certificates] Turner, S., Kampanakis, P., Massimo, J., and B. Westerbaan, "Internet X.509 Public Key Infrastructure - Algorithm Identifiers for the Module-Lattice-Based Key- Encapsulation Mechanism (ML-KEM)", Work in Progress, Internet-Draft, draft-ietf-lamps-kyber-certificates-10, 16 April 2025, . Ounsworth, et al. Expires 7 May 2026 [Page 56] Internet-Draft Composite ML-KEM November 2025 [I-D.ietf-pquip-pqt-hybrid-terminology] D, F., P, M., and B. Hale, "Terminology for Post-Quantum Traditional Hybrid Schemes", Work in Progress, Internet- Draft, draft-ietf-pquip-pqt-hybrid-terminology-06, 10 January 2025, . [RFC2986] Nystrom, M. and B. Kaliski, "PKCS #10: Certification Request Syntax Specification Version 1.7", RFC 2986, DOI 10.17487/RFC2986, November 2000, . [RFC4210] Adams, C., Farrell, S., Kause, T., and T. Mononen, "Internet X.509 Public Key Infrastructure Certificate Management Protocol (CMP)", RFC 4210, DOI 10.17487/RFC4210, September 2005, . [RFC4211] Schaad, J., "Internet X.509 Public Key Infrastructure Certificate Request Message Format (CRMF)", RFC 4211, DOI 10.17487/RFC4211, September 2005, . [RFC5639] Lochter, M. and J. Merkle, "Elliptic Curve Cryptography (ECC) Brainpool Standard Curves and Curve Generation", RFC 5639, DOI 10.17487/RFC5639, March 2010, . [RFC5914] Housley, R., Ashmore, S., and C. Wallace, "Trust Anchor Format", RFC 5914, DOI 10.17487/RFC5914, June 2010, . [RFC5990] Randall, J., Kaliski, B., Brainard, J., and S. Turner, "Use of the RSA-KEM Key Transport Algorithm in the Cryptographic Message Syntax (CMS)", RFC 5990, DOI 10.17487/RFC5990, September 2010, . [RFC6090] McGrew, D., Igoe, K., and M. Salter, "Fundamental Elliptic Curve Cryptography Algorithms", RFC 6090, DOI 10.17487/RFC6090, February 2011, . [RFC7292] Moriarty, K., Ed., Nystrom, M., Parkinson, S., Rusch, A., and M. Scott, "PKCS #12: Personal Information Exchange Syntax v1.1", RFC 7292, DOI 10.17487/RFC7292, July 2014, . Ounsworth, et al. Expires 7 May 2026 [Page 57] Internet-Draft Composite ML-KEM November 2025 [RFC7296] Kaufman, C., Hoffman, P., Nir, Y., Eronen, P., and T. Kivinen, "Internet Key Exchange Protocol Version 2 (IKEv2)", STD 79, RFC 7296, DOI 10.17487/RFC7296, October 2014, . [RFC8446] Rescorla, E., "The Transport Layer Security (TLS) Protocol Version 1.3", RFC 8446, DOI 10.17487/RFC8446, August 2018, . [RFC8551] Schaad, J., Ramsdell, B., and S. Turner, "Secure/ Multipurpose Internet Mail Extensions (S/MIME) Version 4.0 Message Specification", RFC 8551, DOI 10.17487/RFC8551, April 2019, . [RFC9180] Barnes, R., Bhargavan, K., Lipp, B., and C. Wood, "Hybrid Public Key Encryption", RFC 9180, DOI 10.17487/RFC9180, February 2022, . [SP800-131Ar2] Barker, E., Roginksy, A., and National Institute of Standards and Technology (NIST), "Transitioning the Use of Cryptographic Algorithms and Key Lengths", n.d., . [SP800-227] Alagic, G., Barker, E., Chen, L., Moody, D., Robinson, A., Silberg, H., Waller, N., and National Institute of Standards and Technology (NIST), "Recommendations for Key- Encapsulation Mechanisms", September 2025, . [X-Wing] Barbosa, M., Connolly, D., Duarte, J., Kaiser, A., Schwabe, P., Varner, K., and B. Westerbaan, "X-Wing The Hybrid KEM You’ve Been Looking For", 9 January 2024, . Appendix A. Maximum Key and Ciphertext Sizes The sizes listed below are maximum values: several factors could cause fluctuations in the size of the traditional component. For example, this could be due to: * The RSA public key (n, e) allows e to vary in size between 3 and n - 1 [RFC8017]. Note that the size table below assumes the recommended value of e = 65537, so for RSA combinations it is in fact not a true maximum. Ounsworth, et al. Expires 7 May 2026 [Page 58] Internet-Draft Composite ML-KEM November 2025 * When the underlying RSA or EC value is itself DER-encoded, integer values could occasionally be shorter than expected due to leading zeros being dropped from the encoding. By contrast, ML-KEM values are always fixed size, so composite values can always be correctly de-serialized based on the size of the ML-KEM component. Size values marked with an asterisk (*) in the table are not fixed but maximum possible values for the composite key or ciphertext. Implementations MUST NOT perform strict length checking based on such values. Non-hybrid ML-KEM is included for reference. Ounsworth, et al. Expires 7 May 2026 [Page 59] Internet-Draft Composite ML-KEM November 2025 +============================+========+=========+============+====+ | Algorithm | Public | Private | Ciphertext | SS | | | key | key | | | +============================+========+=========+============+====+ | id-alg-ml-kem-768 | 1184 | 64 | 1088 | 32 | +----------------------------+--------+---------+------------+----+ | id-alg-ml-kem-1024 | 1568 | 64 | 1568 | 32 | +----------------------------+--------+---------+------------+----+ | id- | 1454* | 1530* | 1344 | 32 | | MLKEM768-RSA2048-SHA3-256 | | | | | +----------------------------+--------+---------+------------+----+ | id- | 1582* | 2234* | 1472 | 32 | | MLKEM768-RSA3072-SHA3-256 | | | | | +----------------------------+--------+---------+------------+----+ | id- | 1710* | 2943* | 1600 | 32 | | MLKEM768-RSA4096-SHA3-256 | | | | | +----------------------------+--------+---------+------------+----+ | id- | 1216 | 130 | 1120 | 32 | | MLKEM768-X25519-SHA3-256 | | | | | +----------------------------+--------+---------+------------+----+ | id-MLKEM768-ECDH- | 1249 | 182 | 1153 | 32 | | P256-SHA3-256 | | | | | +----------------------------+--------+---------+------------+----+ | id-MLKEM768-ECDH- | 1281 | 227 | 1185 | 32 | | P384-SHA3-256 | | | | | +----------------------------+--------+---------+------------+----+ | id-MLKEM768-ECDH- | 1249 | 183 | 1153 | 32 | | brainpoolP256r1-SHA3-256 | | | | | +----------------------------+--------+---------+------------+----+ | id- | 1966* | 2234* | 1952 | 32 | | MLKEM1024-RSA3072-SHA3-256 | | | | | +----------------------------+--------+---------+------------+----+ | id-MLKEM1024-ECDH- | 1665 | 227 | 1665 | 32 | | P384-SHA3-256 | | | | | +----------------------------+--------+---------+------------+----+ | id-MLKEM1024-ECDH- | 1665 | 231 | 1665 | 32 | | brainpoolP384r1-SHA3-256 | | | | | +----------------------------+--------+---------+------------+----+ | id-MLKEM1024-X448-SHA3-256 | 1624 | 178 | 1624 | 32 | +----------------------------+--------+---------+------------+----+ | id-MLKEM1024-ECDH- | 1701 | 281 | 1701 | 32 | | P521-SHA3-256 | | | | | +----------------------------+--------+---------+------------+----+ Table 4: Maximum size values of composite ML-KEM Ounsworth, et al. Expires 7 May 2026 [Page 60] Internet-Draft Composite ML-KEM November 2025 Appendix B. Component Algorithm Reference This section provides references to the full specification of the algorithms used in the composite constructions. +================+========================+===================+ | Component KEM | OID | Specification | | Algorithm ID | | | +================+========================+===================+ | id-ML-KEM-768 | 2.16.840.1.101.3.4.4.2 | [FIPS.203] | +----------------+------------------------+-------------------+ | id-ML-KEM-1024 | 2.16.840.1.101.3.4.4.3 | [FIPS.203] | +----------------+------------------------+-------------------+ | id-X25519 | 1.3.101.110 | [RFC7748], | | | | [RFC8410] | +----------------+------------------------+-------------------+ | id-X448 | 1.3.101.111 | [RFC7748], | | | | [RFC8410] | +----------------+------------------------+-------------------+ | id-ecDH | 1.3.132.1.12 | [RFC5480], | | | | [RFC5915], [SEC1] | +----------------+------------------------+-------------------+ | id-RSAES-OAEP | 1.2.840.113549.1.1.7 | [RFC8017] | +----------------+------------------------+-------------------+ Table 5: Component Encryption Algorithms used in Composite Constructions +==================+=======================+===================+ | Elliptic CurveID | OID | Specification | +==================+=======================+===================+ | secp256r1 | 1.2.840.10045.3.1.7 | [RFC6090], [SEC2] | +------------------+-----------------------+-------------------+ | secp384r1 | 1.3.132.0.34 | [RFC6090], [SEC2] | +------------------+-----------------------+-------------------+ | secp521r1 | 1.3.132.0.35 | [RFC6090], [SEC2] | +------------------+-----------------------+-------------------+ | brainpoolP256r1 | 1.3.36.3.3.2.8.1.1.7 | [RFC5639] | +------------------+-----------------------+-------------------+ | brainpoolP384r1 | 1.3.36.3.3.2.8.1.1.11 | [RFC5639] | +------------------+-----------------------+-------------------+ Table 6: Elliptic Curves used in Composite Constructions Ounsworth, et al. Expires 7 May 2026 [Page 61] Internet-Draft Composite ML-KEM November 2025 +=============+========================+===============+ | HashID | OID | Specification | +=============+========================+===============+ | id-sha3-256 | 2.16.840.1.101.3.4.2.8 | [FIPS.202] | +-------------+------------------------+---------------+ Table 7: Hash algorithms used in Composite Constructions Appendix C. Fixed Component Algorithm Identifiers Many cryptographic libraries are X.509-focused and do not expose interfaces to instantiate a public key from raw bytes, but only from a SubjectPublicKeyInfo structure as you would find in an X.509 certificate, therefore implementing Composite ML-KEM in those libraries requires reconstructing the SPKI for each component algorithm. In order to aid implementers and reduce interoperability issues, this section lists out the full public key for each component algorithm. *ML-KEM-768* ASN.1: algorithm AlgorithmIdentifier ::= { algorithm id-alg-ml-kem-768 -- (2.16.840.1.101.3.4.4.2) } DER: 30 0B 06 07 60 86 48 01 65 03 04 04 02 *ML-KEM-1024* ASN.1: ASN.1: algorithm AlgorithmIdentifier ::= { algorithm id-alg-ml-kem-1024 -- (2.16.840.1.101.3.4.4.3) } DER: 30 0B 06 07 60 86 48 01 65 03 04 04 03 *RSA-OAEP - all sizes* Ounsworth, et al. Expires 7 May 2026 [Page 62] Internet-Draft Composite ML-KEM November 2025 ASN.1: algorithm AlgorithmIdentifier ::= { algorithm id-RSAES-OAEP, -- (1.2.840.113549.1.1.7) parameters RSAES-OAEP-params { hashFunc [0] id-sha256, -- (2.16.840.1.101.3.4.2.1) maskGenFunc [1] mgf1SHA256Identifier, pSourceFunc [2] pSpecifiedEmpty } } where mgf1SHA256Identifier AlgorithmIdentifier ::= { algorithm id-mgf1, -- (1.2.840.113549.1.1.8) parameters sha256Identifier } sha256Identifier AlgorithmIdentifier ::= { id-sha256, NULL } DER: 30 4D 06 09 2A 86 48 86 F7 0D 01 01 07 30 40 A0 0F 30 0D 06 09 60 86 48 01 65 03 04 02 01 05 00 A1 1C 30 1A 06 09 2A 86 48 86 F7 0D 01 01 08 30 0D 06 09 60 86 48 01 65 03 04 02 01 05 00 A2 0F 30 0D 06 09 2A 86 48 86 F7 0D 01 01 09 04 00 *ECDH NIST-P-256* ASN.1: algorithm AlgorithmIdentifier ::= { algorithm id-ecPublicKey -- (1.2.840.10045.2.1) parameters ANY ::= { AlgorithmIdentifier ::= { algorithm secp256r1 -- (1.2.840.10045.3.1.7) } } } DER: 30 13 06 07 2A 86 48 CE 3D 02 01 06 08 2A 86 48 CE 3D 03 01 07 *ECDH NIST-P-384* Ounsworth, et al. Expires 7 May 2026 [Page 63] Internet-Draft Composite ML-KEM November 2025 ASN.1: algorithm AlgorithmIdentifier ::= { algorithm id-ecPublicKey -- (1.2.840.10045.2.1) parameters ANY ::= { AlgorithmIdentifier ::= { algorithm secp384r1 -- (1.3.132.0.34) } } } DER: 30 10 06 07 2A 86 48 CE 3D 02 01 06 05 2B 81 04 00 22 *ECDH NIST-P-521* ASN.1: algorithm AlgorithmIdentifier ::= { algorithm id-ecPublicKey -- (1.2.840.10045.2.1) parameters ANY ::= { AlgorithmIdentifier ::= { algorithm secp521r1 -- (1.3.132.0.35) } } } DER: 30 10 06 07 2A 86 48 CE 3D 02 01 06 05 2B 81 04 00 23 *ECDH Brainpool-256* ASN.1: algorithm AlgorithmIdentifier ::= { algorithm id-ecPublicKey -- (1.2.840.10045.2.1) parameters ANY ::= { AlgorithmIdentifier ::= { algorithm brainpoolP256r1 -- (1.3.36.3.3.2.8.1.1.7) } } } DER: 30 14 06 07 2A 86 48 CE 3D 02 01 06 09 2B 24 03 03 02 08 01 01 07 *ECDH Brainpool-384* Ounsworth, et al. Expires 7 May 2026 [Page 64] Internet-Draft Composite ML-KEM November 2025 ASN.1: algorithm AlgorithmIdentifier ::= { algorithm id-ecPublicKey -- (1.2.840.10045.2.1) parameters ANY ::= { AlgorithmIdentifier ::= { algorithm brainpoolP384r1 -- (1.3.36.3.3.2.8.1.1.11) } } } DER: 30 14 06 07 2A 86 48 CE 3D 02 01 06 09 2B 24 03 03 02 08 01 01 0B *X25519* ASN.1: algorithm AlgorithmIdentifier ::= { algorithm id-X25519 -- (1.3.101.110) } DER: 30 05 06 03 2B 65 6E *X448* ASN.1: algorithm AlgorithmIdentifier ::= { algorithm id-X448 -- (1.3.101.111) } DER: 30 05 06 03 2B 65 6F Appendix D. Comparison with other Hybrid KEMs D.1. X-Wing This specification borrows extensively from the analysis and KEM combiner construction presented in [X-Wing]. In particular, X-Wing and id-MLKEM768-X25519-SHA3-256 are largely interchangeable. The one difference is that X-Wing uses a combined KeyGen function to generate the two component private keys from the same seed, which gives some additional binding properties. However, using a derived value as the seed for ML-KEM.KeyGen_internal() is, at time of writing, explicitly disallowed by [FIPS.203] which makes it impossible to create a FIPS- compliant implementation of X-Wing's KeyGen or private key import functionality. For this reason, this specification keeps the key generation for both components separate and only loosely-specified so Ounsworth, et al. Expires 7 May 2026 [Page 65] Internet-Draft Composite ML-KEM November 2025 that implementers are free to use an existing certified hardware or software module for one or both components. Due to the difference in key generation and security properties, X-Wing and id-MLKEM768-X25519-SHA3-256 have been registered as separate algorithms with separate OIDs. D.2. ETSI CatKDF [ETSI.TS.103.744] section 8.2.3 defines CatKDF as: 1) Form secret = psk || k1 || k2. 2) Set context = f(info, MA, MB), where f is a context formatting function. 3) key_material = KDF(secret, label, context, length). 4) Return key_material. MA shall contain all of the public keys. MB shall contain all of the corresponding public keys and ciphertexts. The main difference between the Composite ML-KEM combiner and the ETSI CatKDF combiner is that CatKDF makes the more conservative choice to bind the public keys and ciphertexts of both components, while Composite ML-KEM follows the analysis presented in [X-Wing] that while preserving the security properties of the traditional component requires binding the public key and ciphertext of the traditional component, it is not necessary to do so for ML-KEM thanks to the rejection sampling step of the Fujisaki-Okamoto transform. Additionally, ETSI CatKDF can be instantiated with either HMAC [RFC2104], KMAC [SP.800-185] or HKDF [RFC5869] as KDF. Since this specification uses SHA3-256 as the KDF for all variants, there is no equivalent construction of CatKDF. Appendix E. Examples of KEM Combiner Intermediate Values This section provides examples of constructing the input for the KEM Combiner, showing all intermediate values. This is intended to be useful for debugging purposes. See Section 4.4 for additional information. Each input component is shown. Note that values are shown hex- encoded for display purposes only, they are actually raw binary values. * mlkemSS is the shared secret produced by the ML-KEM encapsulate or decapsulate function which is always 32 bytes. Ounsworth, et al. Expires 7 May 2026 [Page 66] Internet-Draft Composite ML-KEM November 2025 * tradSS is the shared secret produce by the traditional algorithm. * tradCT is either an elliptic curve public key or an RSA-OAEP ciphertext depending on the algorithm chosen. * tradPK is the public key of the traditional component (elliptic curve or RSA) and therefore fixed-length. * Label is the specific KEM Combiner Label for this composite algorithm. See Section 7 Next, the Combined KDF Input is given, which is simply the concatenation of the above values. Finally, the KDF Function and the ss Output are shown as outputs. The ss is the Composite ML-KEM shared-secret generated by applying the KDF to the Combined KDF Input. Examples are given for each recommended Composite ML-KEM algorithm from Section 11.3. Example 1: Ounsworth, et al. Expires 7 May 2026 [Page 67] Internet-Draft Composite ML-KEM November 2025 Example of id-MLKEM768-ECDH-P256-SHA3-256 Combiner function output. # Inputs mlkemSS: 60659e248bfc9110acaa0a90ce007a09aef7238dd37c456e3836861cd3881487 tradSS: 969b6515ad6516f3d567d661cbb23ab07fd8fe37fe96320e633b1c8839c65712 tradCT: 04a8d42a2ff059085c02369927b328deb3820de46b1ea6614eb5e6bc66 526975cd63e3ff55c8af6c2490f24e314424543009a7af5d2faf257a19204ffc464 9034b tradPK: 042221c7311e85bd834fe1f3447402cf4e9adc4576661e6d418630a30a fa9af99d701a7e7806951158ca3395ee7b4069b2e358c3890bc2eb0f6eb422d4e72 3e089 Label: 4d4c4b454d3736382d50323536 (ascii: "MLKEM768-P256") # Combined KDF Input: # mlkemSS || tradSS || tradCT || tradPK || Label Combined KDF Input: 60659e248bfc9110acaa0a90ce007a09aef7238dd37c456 e3836861cd3881487969b6515ad6516f3d567d661cbb23ab07fd8fe37fe96320e63 3b1c8839c6571204a8d42a2ff059085c02369927b328deb3820de46b1ea6614eb5e 6bc66526975cd63e3ff55c8af6c2490f24e314424543009a7af5d2faf257a19204f fc4649034b042221c7311e85bd834fe1f3447402cf4e9adc4576661e6d418630a30 afa9af99d701a7e7806951158ca3395ee7b4069b2e358c3890bc2eb0f6eb422d4e7 23e0894d4c4b454d3736382d50323536 # Outputs # ss = SHA3-256(Combined KDF Input) ss: 406270ff16c668143f46c5afd5417530fcb9a9f13d5232d5e778c53d068bb4c7 Example 2: Ounsworth, et al. Expires 7 May 2026 [Page 68] Internet-Draft Composite ML-KEM November 2025 Example of id-MLKEM768-X25519-SHA3-256 Combiner function output. # Inputs mlkemSS: 978608a7bbb57db50afe848212c520f342b1e09539a535ab2564b7519dae5c35 tradSS: ec318a12ad03ca54a2580c8e64818ff70337eab50f74b5dc233fd09990dce11b tradCT: 198a196d9351b7506a56591eaaff1f3f3f3dedce0aba78dd4563cfb50f5ce337 tradPK: 9c6236e5db9da4d900a8a37375f8f7b07337727bdb6f8f013d8e2549f707a523 Label: 5c2e2f2f5e5c (ascii: "\.//^\") # Combined KDF Input: # mlkemSS || tradSS || tradCT || tradPK || Label Combined KDF Input: 978608a7bbb57db50afe848212c520f342b1e09539a535a b2564b7519dae5c35ec318a12ad03ca54a2580c8e64818ff70337eab50f74b5dc23 3fd09990dce11b198a196d9351b7506a56591eaaff1f3f3f3dedce0aba78dd4563c fb50f5ce3379c6236e5db9da4d900a8a37375f8f7b07337727bdb6f8f013d8e2549 f707a5235c2e2f2f5e5c # Outputs # ss = SHA3-256(Combined KDF Input) ss: 88080cab398ea9e73eb59a92ca95af00ad7471d39fcfd3d7c7d37b6931a91fcb Example 3: Ounsworth, et al. Expires 7 May 2026 [Page 69] Internet-Draft Composite ML-KEM November 2025 Example of id-MLKEM1024-ECDH-P384-SHA3-256 Combiner function output. # Inputs mlkemSS: 9a04516f3add905b940b15af91f2adedbab21ee8a931f580a5bf6fdafd447689 tradSS: 314376f0740ad3d5bd361ecb9e447901bf34886732773b7de995996874 2f6beebede7d5e9ad7b10d9ba752e430e3224d tradCT: 04177a292da2ad2a1ecf90da0007f6b06b141f36afd5bad1b6229baf6a c48fb14c0be7da5a2910c1fb9f184b13212fa877747e17e275ad73d56f103bfd42a e6146caedf78696c444e3adb686809e75efd0b651e9072dd95ab2945c55d0e5a854 b9 tradPK: 0417413af4ccd3554e7c3e2f560f3bdc601b920d7fe9a387618bb9de28 eb9087c9f8c6c6dc6628b467be6c4685e9289a06d106e3b10acaba120932b5a2c92 bb99f32ad79d54c9e10e4423ef55137a932b282fa84bffd07822dcc0970b6ddd9d5 2b Label: 4d4c4b454d313032342d50333834 (ascii: "MLKEM1024-P384") # Combined KDF Input: # mlkemSS || tradSS || tradCT || tradPK || Label Combined KDF Input: 9a04516f3add905b940b15af91f2adedbab21ee8a931f58 0a5bf6fdafd447689314376f0740ad3d5bd361ecb9e447901bf34886732773b7de9 959968742f6beebede7d5e9ad7b10d9ba752e430e3224d04177a292da2ad2a1ecf9 0da0007f6b06b141f36afd5bad1b6229baf6ac48fb14c0be7da5a2910c1fb9f184b 13212fa877747e17e275ad73d56f103bfd42ae6146caedf78696c444e3adb686809 e75efd0b651e9072dd95ab2945c55d0e5a854b90417413af4ccd3554e7c3e2f560f 3bdc601b920d7fe9a387618bb9de28eb9087c9f8c6c6dc6628b467be6c4685e9289 a06d106e3b10acaba120932b5a2c92bb99f32ad79d54c9e10e4423ef55137a932b2 82fa84bffd07822dcc0970b6ddd9d52b4d4c4b454d313032342d50333834 # Outputs # ss = SHA3-256(Combined KDF Input) ss: 75f700cfcd7c932e5d191c0f3aad14e2165f965904f5dd2605020085bc16d81b Appendix F. Test Vectors The following test vectors are provided in a format similar to the NIST ACVP Known-Answer-Tests (KATs). Ounsworth, et al. Expires 7 May 2026 [Page 70] Internet-Draft Composite ML-KEM November 2025 The structure is that a global cacert is provided which is used to sign each KEM certificate. Within each test case there are the following values: * tcId the name of the algorithm. * ek the encapsulation public key. * x5c the X.509 certificate of the encapsulation key, signed by the cacert. * dk the raw decapsulation private key. * dk_pkcs8 the decapsulation private key in a PKCS#8 object. * c the ciphertext. * k the derived shared secret key. Implementers should be able to perform the following tests using the test vectors below: 1. Load the public key ek or certificate x5c and perform an encapsulation for it (you should obtain valid ct and k values, but they will not match the ones in the test vector since Encap() is randomized.) 2. Load the decapsulation private key dk or dk_pkcs8 and the ciphertext c and perform a Decaps() operation to ensure that the same shared secret key k is derived. Test vectors are provided for each underlying ML-KEM algorithm in isolation for the purposes of debugging. Due to the length of the test vectors, some readers will prefer to retrieve the non-word-wrapped copy from GitHub. The reference implementation written in python that generated them is also available. https://github.com/lamps-wg/draft-composite-kem/tree/main/src { "cacert": "MIIVpzCCCKSgAwIBAgIUaCFIqiz9zmTOwtlwPmhSuJsWieAwCwYJYIZIA WUDBAMSMD0xDTALBgNVBAoMBElFVEYxDjAMBgNVBAsMBUxBTVBTMRwwGgYDVQQDDBNDb 21wb3NpdGUgTUwtS0VNIENBMB4XDTI1MTAzMTE1MzAzNloXDTM1MTEwMTE1MzAzNlowP TENMAsGA1UECgwESUVURjEOMAwGA1UECwwFTEFNUFMxHDAaBgNVBAMME0NvbXBvc2l0Z SBNTC1LRU0gQ0EwggeyMAsGCWCGSAFlAwQDEgOCB6EAFWFOqPoScyCSuN4sDmSBnZXF9 Ounsworth, et al. Expires 7 May 2026 [Page 71] Internet-Draft Composite ML-KEM November 2025 x1WaSEaL4J1dN3QqOcs5diW0QpPepmUrrTiTUID+wGf2Lf0LynsbwykWFctqAhgwB25A JJAH3r3TTdtjzO5ANfnOyoFzwK+/Hc6gcXm6PMPrPHH1J3+rxKYz5BOpdoJe9ZSFZbZd fIzNx9cETFSfuWU32rBaPRlFaeHqfgzIQDvgiRunYRoUkfUgzPvWKDEWHlEHGfdKGOkH ggwGAZRZGSGRkRwwpRuqijpcPg4DT1LwNdqJH5HRcexAEmw/Y5p6i9kBiDFng9y+v2Z9 QEFTCmVYjMZW0dIB5QrPM91aal+NMGjDcIk1peAiU3CvTiYOjMjv9yQ7t8AdD/zMUSlK GJPnp2wDluOZzggS6Zd7RHXKhg4ft4vmwl2SXsUS1lHrbG/uwsG+8k1eIpfnz8ZekFVj gSV2Fj0E+B+Hdcq3Ogw/vluUs14qvKU9dnjz1BgdUCp+sKsE2WoXBVdsaZ/n+fzfDSWF DjTHrbG5WJHpmWY7ueDcf96ZvGXHsZQF0zabivlcBuTCJZpMjAQtzxTFiCmQj1DI+AF0 5R0IGOnnwFhNU+IJYRe7VMcWTfwjPPzsKDjHS09KBB8L3vmkabMpfwa7jj9GAd/yRHlS DENYDYhDFc6XJxkB//N56wG4J/jI1331SFKSuJScACrvIZQp2CNVnSfo5A1a6ATYLBoy 0+7Pdw0qYr19SGyDZz0GWTJAkDEwtcRF3zIZPS6owy4oyPK1HX5m9hFuBgTHztHrs1oM d0kuYKrsVOUH6HYd9ROgLYvQZy5hV0AthNFB+dmwDxdo5MhMpFHAxX3ZXLBoFiG4a4WJ zURe+ozEv6yE/RAyZ31seZQ5CyLQfXdL7d4vDoEPB3zVgM6ZRVUKAYpiphUdKAXbqPWE URGxJUe5dyEBOWiPUvl2eQsMhFY8xRtdlMH2bfNHMvDEHMEelL5SOk1esUOqggFPryGX fejW7uKCfCGnTHei1p+LdbVhWlSiIMBractlBHhLnFHscrbHaXdjoS+StJmfYzXBu1F9 PKw0Gz+Bba9AqAb53eQSlIyoAqwdPQ8P5l//TBP2yX1sik8J85gip3TQO59/MlQsmjjQ 4LhK9oXx4V1306TRERKNQdy3H1TdYc8lhX816FKty1ld0E3Pk9iXBIT9XGVfqMuo0QMK 3arwW60jG2fprAIdE5zxKHAMmrkmVloWXgOWr/mdAU3aoIawPKWDBFTfLrMvXBt9JvOS X+5WUweDFB1O5wwBrcdKRuRRMNGeo+fH/VP/u6NIPWWWDO7jKFdEQGjC6ts0CpGa3Eaj BT9D2naCiawW0gaXYberMzLy49Gly1peu2VsJZsKz2gF1+w1BmAELed6dT3gnWWWYNdT cTC9V3zYXhZOSYR0O6BP9atIanznzgM7BhctJPIEl0sZ1R5EywZEgtxXlRo/nQV8bjjq v1+FyULs8uIilZVkIDYAn7AI/ZIuuXaXz5h/+4zhc5XnjzY7bOO/f9ierClqHv6R82e3 ZmOkqSCKHcLT22xRwNO8uz2vHFpxShcSbVfHQWkI5uy882ybLsZ6WauadyOh0CND2CvQ bdvMXQCCslo2aeco0FjG63NCBAxx6uHq/8NAy+y/K6GsLijkhRupPxpyUbemo3N8SsGy F/mjWq0uLBmUMh2okOFCBkuOEo0Nr4ow120PoVd2Sct0PYT+FVRX9iuYU1JU089h/Jzy lU0R11dOlIlWzvP5FOzQ+O2Z362ZPIk1mW1QwY7ZzC0oZsoa/BoK+LlUqQkxbsz2MxXF mQZhUTysP+xllVdPM1sjI0L7VDLd1so72+N3Qv5NVT84vjGHe2p/sxStnNgwx6wc0Qq1 kw0/9i4AXd6FO5k9BG2Pb4GmmCBIs3naxAJZ9laC/KVjxpC+Q7LtlVPaH+C6pX3NZ5HL xGduZqeYbOcn4b7vQztymcNsY1IuwN38ulyNpIl4Ri4mczBZDxucuqVAO3KV5erPXA8j w7i+G5A3A0X4HmSSFubERsm2O/JpJgUHi/RY2NCXpMokG87GVdbWHpgYGQHQaCFThW8I DTuk3otDMuD5ihXW3li6oOetv5OetWzvdmmJ11fGeWCTRWUMGt0zMcRelIN9Oz0p4RJF kvv/eJtx1RYpougcT+qwiDepneSk0rT88Kl4AgpfNc6mA4caBViIvpKjg6SJesDLjN4k 8TJwJSr09WBD5Xt94RZdw7aD2OQlPu0AaUS4PYjKmm+QoMLTkBAM3UVdZj/wZBhfulB6 rEqYQceFbL4+TW9i4kV3zxmL6o9b0goJGfh4YKocqacfS5P56K9Seba9c0JHv8EfAMC/ 7rTKgUndvzSNiYHXn1C3GX7lNGxHzK21Ql+PKSLroEq+n41TXiUtdJTvwGW45zAsZJh3 HTdwBjZ08yaQJMIbZ7kqtaf0ABbkKwefn1nHGslfoNb6CiyDIoGvBSsMg6MyHzy4+7Ya qBgAFf40YvqQGd6sd2m4IL+arJTad4nmAfRCuqgpCfE9FU9XRZx6giraR5i5FWGp3BoB oRkq9TCunCbvmgoP1ZwaxISWW2W6CM0niFGrayCYY1jDFgLXf8E/5MVNQoAC8KjJjAkM A4GA1UdDwEB/wQEAwICBDASBgNVHRMBAf8ECDAGAQH/AgECMAsGCWCGSAFlAwQDEgOCD O4AuPWD1t7qwtQUfnZO4MYiWPQWB37RsP2lb+BUqVadMN4gv6EuTjdtXdnoz6I+6nQLj bLfU2pw8HPe26NDHAHyflG63wWhY+8VRHdy6pfc/WRVn458o2EXGZWxUu78+CILL8UU9 klVAuHgNmEGKHDZbGSFNHCIic/7QhIqydx9pMMnzpGFI7DsUyzU8WSOUJ2cKM4hha+kJ M3uN2Zsyo9FdG/N0rWGmFJ44WOAsesS71NtrBxmKuvANqDi1qnXiT9Ic3bnAbfW4bgJJ sG7F06tF1qHlE+1z0qkpyTmYONiBFvupd0lNqKKnsM4h6NDIeSvRCx0FpEP+qRz9rWoo /j7NEqx1ESDmwTm3rg07KiNwVfZgOKp5Nu7x6b+y5KmC4aq7FVw8KTWAG2pDccPfF7al jPsHmHiqO38cSDz7k0+HDOssdQU1rVtJYj2Xg44qu3AE5+7WlmizJ7mrmFZ3vU+7agv5 KiddAd9QQ91RpNjYtpk+plX1oXG12ueXGg/D0qFo8lfoDxUcMqKSEs8Zb8e7b2D2ukqm nsaOiNqHJax/A2C/pyU7nMoXBQtBdlfdwJ08Tg2n1QQo392Bw2RfgwFXwAw99qrXOjGp Ounsworth, et al. Expires 7 May 2026 [Page 72] Internet-Draft Composite ML-KEM November 2025 l3XBi0a9UHfM+3n9gEgFpWyKWadnSZGTm2nrPoEhwhf8sj7Gp7zjuULNXF8D+OPecarw F7nV2wR6/qx/mdnjXt70xnD9l/Fc6V0bxDuFLFlpMgNQRAiww6X6OpiQm/QpvLnLvU7U dk2/RPZYx1dftTpJFaz+/oLD9m18D9NLUw9MvY+3a35K/PA676fiZpwAJnCCnEddCp8f QAYPnSI9VxUU/RxDkPOTJ6UatB0EfWFhWwb6vlGYf7j5yXDZoWkSnwdF+oPQwKmYadSF ijncKYDuRQQHvqu5BN9BtjZeLTkGR5dZ68RPLR2JtJC3DXfXfbPY3djCg1gvsR/CoYN7 dVhLNfDjqeajagtF7LAUOKIFbAfKQ760w3GniGvWVDkoOUWT59Tv0uAMDSGeqdKstsPL VsOOEoEVi/74qWxBDuL2iApC994n4RWddQLzt+5GSmVk4uBNQxUCzaa0n1QMwTuiHTFi 7/KNvdYKzqjUPTPmFNiBqOEH3dCTQbuXG1McdRokwWVxYxDcJmjV0O5zsAAjlw4pEwXQ d8FFFJQBvr0LlwVHV0NB7bptnTXmUqioyDooKtlzD5XlRETKsX2L7rQFVKv5wmECOkp9 oL+sgUODdNUGwx0XLhlet6mlYUy7e8YgTLVtBRDpf69FTZ4ZfzD3blT6wUOwlgiBiNx7 YHEk4ZHD9nExPf4o5v55rLYP80UPlkugeZGrT0sM5qtFCMQdhoXrlO6ev1OiVfXMpb5e KDg7yH8+UJ98VQXJHYfYvy9Gp3o/8B+Pd650CN4IXM+1qb6f7YBgzHJSL1deSCfd0GV0 fFd5HHj4Y+mk6ojUiNDdSlrSyP0AanyGLvO0DrzLP1HNquCCWQRUHbVEy7CGpGAOSkE+ Ooq5JD9pf4uWrlR07S//11nuYhlVnTlfLaj1Vuoi2yJ1FsXMcMJ6PydlRvdFCYPrOryY v9i8tnvXoYQ19OSHma3/jO0q93FPmHLmlMryDHrUtppSIS8wYswQ9Ro6OJEsy9dbGqDC AQfdLNqf0Ovp3HmPPbBQ948IMKMyXgkvwWHHbxvdi5+QuImFjcmyiKJr5FgbTc04NFzC swdx+5iPJcqNJ9tR6CilUsnsGGhBdL1vgjV4/FokmtQ8Y7+UBJPEP6cV0kVySRM3x1+6 cvp/TddezLDkyjsEHsR+DSAou316Dupe5aDSG0CT9V6RgNCQ8nBDdvPe735zpa17soTw BbwFXWT3mOJuArUAwSALA4Td8byoJTAgKdHePTdtIKJOFFjJZC52+FRhmRLgJzZZWU1+ 0hgAcZvmwd9M0IKpmbBFLquj0iG5OXaulkQIlbhUJgnd/KIuFY9vos9mjClhCsyEWD59 da3Y8TwdViwO9mK++KEI3ZFA1cCzJ5Mef5sijFMQ9Ub8PoqI5TvK/Teq7M+Kt0NzcS1n 1Y2lGFiVz8XSSqcpdx4JSRyK/nEgPGgAWNWflZ4bLo4kNGQfSRHE9NIVw8Ga+qpt6XTf wOcCaQ3A7bafVDgHd4nIXGlUoKppaO29h9lScpbr7NkH4p98O+FHFwQ5+6Oi1UyPvet1 iTjC0XJ5fp+CGUwKOrfm2Eqo5JyA2P2J+BiJNbnEs08S4O9pmFCOdYDxqUsRVTUFDXGG CRcsSiAFEbt7OZElPDoN7BLj65bIREoKcgXrSVzIf7TSiM1aL4+CM3uDXg9MSA9Haw7r ybDlmcDEsxfeQq5Lyh1L2Kn6qbywVR6it2/cGjQMBdnumDgPyGbmFZxGpAWIyXNOBd0L 5prRlBCOSGB3SnZf3Z5Qyejc8m4HKpEe8ZCLFIeCPSkc99A0Ly/K5upKDlmsehEYxlPH pU4zNPCODidUw8UsRGFq9doWFGLMw4ZcSIUTfIOfOOzJoPaOFXmXdViAakdkf/alF1F+ oQh33QI7FrGvypwAyaLa1/X1E/oz+z4UQU/4fh3vhPPT2r2T0gTC+TSddO7bWlXZ/13p G1XYmoLG8i34HLa9xFMrvyb+YcUA7/kRKO1yd0yIc6UbrBgZ0p8cGP10kQzjNf81eLNw RqNxuX19h4M3d161XzFUC+6E3JIyFcmGu1uPdLHWSoL/ZEwsY2P08MF9cIOuCpinJEdE HOoVWJGubGSXFam5glGuaXeaW3Y+P8AEIL8ZEh4oc6YpJ7ve7ULZeL/a3XB9uKIYP9WB oHq//Q1nDjGNLSgqRGxpjPeZ6CT+625ctzoa2ZjQUbDF5PYzFQJ59BY+8xZwiAi9oGFL /CDXryHmzdjBaKdFfOO69woyWayQ6YRqCXKwLazC8hs9/ya9Aeu73gcEslRSK61yDnY0 qFHMz+Da+geeq9sL7i+upIxzEiEGoy1I6447BcsstwqkeLAdtAdyP9+w3DdjO3kp7Wl7 iDWjlzFp0S1YETzrs0jvE0Cim5ux3c1eAH4RHblcTtkPjYYcKmgVHdnAjsgN16sfSqXD BF/UVEW935195IAQVhj/OcamlcBQhee6I0FacFd6qmrZGQUqQaMayT36TifWxmyad8Dc AM/cCqVpG6Lt+rIMKlqb0ugvjXeajt9q+2otN6imHyMXR4VHAxutwgS/ihX8YwVX0rSF 2gyecSbfNxElJ4v2Zn8fhyuKhMTNZnYhJFfQYc3uHKRSqulKtRgD2K6wkUHT25XdmLTX 06Z04Fn6SF4+fWyb2M2Sh/KMO0/maHCkkMrOnnsZEWTculVPUoq1s3Esj+dzV0+FmbBM cIADVieXZUn2/vRrvo9y1U1xAA2Qc0qEXaLBQvS6AqiyCeovYMNw5mx3h/fPF4LZBZRs hpASm4KZZTHEIJKxQMrDy8dFrxXcZtCH3HxGrhUVfqGZQtJGfFBbigL8XOva2yEGelyd 2W1cGG/wGffm6kHgxDRdf13j9xAzmcjtjzV42nbJIlMRUCDK0GwauHfrsK9gR738Y+se TWdmxIihhHP0PCNNknivf7PuJ5zG9kzWSH+hwK3YZagfByYh5GWexcsSx0TNSlPR1z0M t6SDP65oIiEHUOWAT5M4A3ZvhtfhruTUmTgz+Hbf8m6vYuOYl7hCLEBUkiWq9mVr5Xrf /1ZAytgwNbxlkRnEez4llIoOIYsNAttFWvuk9r7C3jvubj7ie6KPJKvFvIRAzqVlul3U E3o/Ma1NF78Mr7ws5x4qwk9KnPmvV471msANdb53dcdAUAqEEfcMpNs2HyYd4zTI4jBe yDJy+jUG1RqqfnBft5DgmcGy6Azefcu3+igPuQtHezjXJwYimCvz3QGWEm5jytb7uqSB Ounsworth, et al. Expires 7 May 2026 [Page 73] Internet-Draft Composite ML-KEM November 2025 aFRBEeAWMrvDTJHpB4ww8C8xX4YrIJZ0HTI7ZEN9UFuB54ssppskRGQ5sBkAvzYZWDua VSEzQY9y0O7Kr6I5DFCNy4LQneSVWx58Iy8AuRQq586f/LJo4g+SlmQAYrTOYqHzyJid d7YlZvaCue3AxclvRfXTNDmRNMo6ZnQlbby5edSt1C38FcYplPvNCqEcr8bXuULP/mv5 BQRthI4uJo15JeAEyPIRhAnbkmPoTBOlUrnu91oyHAT5JyNOBIXGxcM8dpjFvL7q8q+F OwYme36lpdWGPswUJ02J3vmfsJdSzyBXRQQxzH2mNCmCXGxxslr3zgtcyBUd1bOLQbcu ERReTJ0Y50FTQwn6HBNNzHP+yDwyJLaBi4WsRUrLTeblCg/Js+xxoT79SfL8S1e1FiTS FEji8fqF5kQgsV5/xDE0tJueIsgqKgmOsW+9ZOvaH0AlGznqT4bHklowNzgCDliaqjX+ DxzgpDR5UtpvNLs+f0IWY/2/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQcOFBsg", "tests": [ { "tcId": "id-alg-ml-kem-768", "ek": "aruRG8G6rNw17DytI+RbTkAc7OFEFaPE/KYEwotntatPneOe1iZyoEQQiwgwV 3qpwlom7PcCTMiLH4YDAvmmsWKuHIcbPTsvVWiod0l97TMXFNwlXIpQx/aymMy5mlMoq YJ0EWSQJQYiTeyrwyOmADlt1kI9OrJL5RIbZTjAHSStYUaY9mk4jbZBIuRKOpNcW+MM2 xkxNUhBZDmuxVdnw7rJO1oQu4yiooxFvzzB2bxcZeLI3qwukKDFntqdrtmtE7hKYtO9g 6xQeCuwlpU8rMa2GEIsExJhSHMl8mU5SehpJqnIGVcb+3ROJMmuTiDFxxUh4EABQJxC/ 5ISTjmUvYiFYaJSMRrO74KyxVs4YbYA1eq0rBQZQbREbvsvf+x8giUVjbeJCJSGnDIYl WY3lDoIEssi1LBbKjpHv2VzhYSUuCunI4WqlUUP8jWae9mqw/oh6ekQrwGbwXOr2FIiu UV5YaxcUqfOKshbcIbNK7hUn8Y78uxXFZQFwpNmVohPnJaSe1AjKQdQMtDEdtmaoUJ7X 1RA0wSg3MmKMVfLMDEVz+VBxZW26IE4JpOaVngZn2m10VkX+rGTTWiKNksMFEJgW2WXl OQXBGaMuVWzgvzO5WqlUhMmptis3rSAeKeeWABNdud4ZrxUXdA1dEfMNhBKcKwoc6kSa JJtWQx0+XmFa3SvfMopfGe0k9NPZWY90UIMhgGbRluOcgKKBdUkTDFi0vARbAJCssa3J YQ3ZyFCQ/MLXxllwfaDQDgqz4dWtlJh6dgmA/sGrPVrB1WxUVo6XNQbmJyTr7EyGeGVB GB2K1wTwIsJqEJClFkNudYMoYDJM0Mu4zBAc/RmANmqPhIETaC2LCEqKhoCtFUPMEUJm weoDUJ7LeCP2EWM06S+HfG0QWpSbyJfflIdMDfPnoOqyzltcfCJWwVgaYImjsw2UGK8Y Ad9qvBzuHOD4xSOgGV5LuUCE5p07qeZx3ab6zKxfuq7nWO2YtOcDkIVAEq8kWeYWbjEN 5gYBmca/owIIHa6jaxE2jxfJAUwBkeqnbqrtPub58YekVgDSeaWT/RtIMYGJlvJMfkki xUldjurmSRfD3WFUfSphaV4itwwszZRBct7PNu17Fyt9/Nn3dsV9/ihCNFkAWQIm0EWy sYJUJcB7vEShwVFLsInXPNU5USDJgoPJ1IpR9oC5GvA2kcLx3dBkKu0soWJ+HBPqvCpc ExaHBXCM7E0c5K1TuaIWNagYEjCVVkrulA/QSc225Uc4XMHoFO7QwlalnFUcOpaWxIy2 gDGI4ZA6UqC3DeQHeZjzDk4Z7GuXRbPRWFmueyAXfIr2WbHdGQMsWIAewemtKsWSMiyp 8G1ndfGMVwGBjLCfklUrjxuVvBj7Keuc9SpbEGdNdMHJlyda7UoZcuN4Pw2uwBFesqwp tYovLOwVAG0GJOy4ol1c+YoBgixgSNQcJLPKas6/zsLQLASlGcq+gknAgQRwJtEHPm6p YMfZhoaNjS8dVszQ0Z4SlEgXcwYf8lkqugwORuuWOBeniN2hGl3N1aQOD2kZDHEEu8OD qoKEEhiPzTvDVJbZjuIr+E=", "x5c": "MIISkTCCBY6gAwIBAgIUJd98faWwfB82DSpxLScRY+VFojcwCwYJYIZIAWUD BAMSMD0xDTALBgNVBAoMBElFVEYxDjAMBgNVBAsMBUxBTVBTMRwwGgYDVQQDDBNDb21w b3NpdGUgTUwtS0VNIENBMB4XDTI1MTAzMTE1MzAzN1oXDTM1MTEwMTE1MzAzN1owOzEN MAsGA1UECgwESUVURjEOMAwGA1UECwwFTEFNUFMxGjAYBgNVBAMMEWlkLWFsZy1tbC1r ZW0tNzY4MIIEsjALBglghkgBZQMEBAIDggShAGq7kRvBuqzcNew8rSPkW05AHOzhRBWj xPymBMKLZ7WrT53jntYmcqBEEIsIMFd6qcJaJuz3AkzIix+GAwL5prFirhyHGz07L1Vo qHdJfe0zFxTcJVyKUMf2spjMuZpTKKmCdBFkkCUGIk3sq8MjpgA5bdZCPTqyS+USG2U4 wB0krWFGmPZpOI22QSLkSjqTXFvjDNsZMTVIQWQ5rsVXZ8O6yTtaELuMoqKMRb88wdm8 XGXiyN6sLpCgxZ7ana7ZrRO4SmLTvYOsUHgrsJaVPKzGthhCLBMSYUhzJfJlOUnoaSap yBlXG/t0TiTJrk4gxccVIeBAAUCcQv+SEk45lL2IhWGiUjEazu+CssVbOGG2ANXqtKwU GUG0RG77L3/sfIIlFY23iQiUhpwyGJVmN5Q6CBLLItSwWyo6R79lc4WElLgrpyOFqpVF D/I1mnvZqsP6IenpEK8Bm8Fzq9hSIrlFeWGsXFKnzirIW3CGzSu4VJ/GO/LsVxWUBcKT ZlaIT5yWkntQIykHUDLQxHbZmqFCe19UQNMEoNzJijFXyzAxFc/lQcWVtuiBOCaTmlZ4 Ounsworth, et al. Expires 7 May 2026 [Page 74] Internet-Draft Composite ML-KEM November 2025 GZ9ptdFZF/qxk01oijZLDBRCYFtll5TkFwRmjLlVs4L8zuVqpVITJqbYrN60gHinnlgA TXbneGa8VF3QNXRHzDYQSnCsKHOpEmiSbVkMdPl5hWt0r3zKKXxntJPTT2VmPdFCDIYB m0ZbjnICigXVJEwxYtLwEWwCQrLGtyWEN2chQkPzC18ZZcH2g0A4Ks+HVrZSYenYJgP7 Bqz1awdVsVFaOlzUG5ick6+xMhnhlQRgditcE8CLCahCQpRZDbnWDKGAyTNDLuMwQHP0 ZgDZqj4SBE2gtiwhKioaArRVDzBFCZsHqA1Cey3gj9hFjNOkvh3xtEFqUm8iX35SHTA3 z56Dqss5bXHwiVsFYGmCJo7MNlBivGAHfarwc7hzg+MUjoBleS7lAhOadO6nmcd2m+sy sX7qu51jtmLTnA5CFQBKvJFnmFm4xDeYGAZnGv6MCCB2uo2sRNo8XyQFMAZHqp26q7T7 m+fGHpFYA0nmlk/0bSDGBiZbyTH5JIsVJXY7q5kkXw91hVH0qYWleIrcMLM2UQXLezzb texcrffzZ93bFff4oQjRZAFkCJtBFsrGCVCXAe7xEocFRS7CJ1zzVOVEgyYKDydSKUfa AuRrwNpHC8d3QZCrtLKFifhwT6rwqXBMWhwVwjOxNHOStU7miFjWoGBIwlVZK7pQP0En NtuVHOFzB6BTu0MJWpZxVHDqWlsSMtoAxiOGQOlKgtw3kB3mY8w5OGexrl0Wz0VhZrns gF3yK9lmx3RkDLFiAHsHprSrFkjIsqfBtZ3XxjFcBgYywn5JVK48blbwY+ynrnPUqWxB nTXTByZcnWu1KGXLjeD8NrsARXrKsKbWKLyzsFQBtBiTsuKJdXPmKAYIsYEjUHCSzymr Ov87C0CwEpRnKvoJJwIEEcCbRBz5uqWDH2YaGjY0vHVbM0NGeEpRIF3MGH/JZKroMDkb rljgXp4jdoRpdzdWkDg9pGQxxBLvDg6qChBIYj807w1SW2Y7iK/hoxIwEDAOBgNVHQ8B Af8EBAMCBSAwCwYJYIZIAWUDBAMSA4IM7gCcZJuTyuPD6ewQIMiQHSV+iFhLp0F5SR8f rHELu3d8USMOi4aA2dESciwCcg3TGOhwmiCu5qoFPda/sUBtCDFdM9sfo40o9hygIVgQ naiXWs4atwEjQXYqUGwWRUtc9Q5Y+NmyXC6vLkuKVj0BtT0HtzSI4S/n7D+uogVzCV7E eGgEZnVvMe+Bui+nTxuKI8wY9SgYBYnKqzJjMPaPfPhVGjCCyeVlEPqNnwpCBLRX8xDf 2O7zLCIv0wWYtZg8sm9XQ9/k3OyMbZSQCzeFbOlyyNCLG9quqUehcK2dJyEhWvlNRGEm FLh5YileOVn1jteNYM7qIUvdLekUusnlef77N0dqLhYE7yIlxdEBQL0pg3y9SSlV2A+A JdEP6Wdkxk+6M8h25hHN3vyXKX0udfrWE+/kKMETuznjiNr71no0QgplJgvylFXWae9c qaI+2EMdJ83Ii+jSMhsjcARZWbilYWmwRn1REERqEPLS956C6QxY2LwfHDdKbLkY9juQ 5cH8kquJegD28XbFHcEtKXKT5BZkxhffw4la0uBZ/asSppDHgu7VAbzlXv/7mLAn9RUS IAsHwx1M08Bxtvc/0l4tOT1oBKvH1HM57dPDkBJmEdR7m7gWSqw/LZ5ns0RVoiv1bWNK /VudUTYrF7WT11Jq+7nQ7CA5vDXKZJgO4p+7mD53PiGqa+iPFn2mfEJpvzu4wFn4T54Q g6BxCzP9tGIKdAb2EVObDKARpKWWDpHihN0f4YEyfAZIujt3fZ807IkOOUVtTNuFww81 4gmAi1xaWxQULpX21NI8Qt0emtYCZXlOpT8zJKJs6LWoIwkEs1VHZjaTsfdNe4Ty6rcr bumyu5jektI63xUkXLvYYTYneGZYD366jk7DMFR31mnHCF4abgBUVioNKcjwwJ+RgM0Y kQEMC6gD5lJEo8P2PXd3IJMbpTuss8yTJDkZbS7oz4YApBTk73uny8QaLtitvYRuhE5E fLD4ytXnEWmiA/yrFwOjLd2luUYOgQwoRyreHzc6o6wynWxR0Fb8qnqllq1t5XyYHNx1 2FpDzjtQnTe0xF1wY3lyvaNhMJNXbV5TeY7WssVTPS5Bswwaa05/R9h5bhbl8SFm08L1 vAb6e3qS6ZLg3NY65BWu/Vn+pk7BpUW8HFLgz5rpZyVGoq3I9//qujbB/9WEJ+hQcKQa r/mkuaHtMA1OVluQWE+fCe/5q9JIdlEtfEQ1hl7UNPhbjdclCJ9vKcPEJoYJQq8aKdUh ymQonEThnd1yDAut4LgTvDUlH+dkCMcK0IWJDQefTdylghqo2gNrlf97jZQcgnSuDnSg oDVsCtM3v6mH8zlQzO55cnCpNcu9rERE/m6DcKhFnt2s360aaqGgEZz0RQFhb2rpeMp/ aUwONJ1NWWf2PjvKvfyzcNefu/zewtsWlOBMQtY7U1zcLnZggUKP2CNcuzBIasrMA0L4 JgRoumczM8sbbglOdJmPv+pXY+DUtGZcnPwSw7oVaiUcNAHj2hSdx/NHe6qP1OXQGnFn uDKvf9491RvUbcCzedpZubRtd6Z4xON3rFzUxI9Trio+CQjTmlWYOdqkQ/dVZzR4Rtww 4zkwbXBrbt3web15vWxMqJZaaAKzepRrco446k+5xGdgFbXp1t6h8sDNoQGc3ecYysDa eJOk1x81gWasYHJ1C+x1rg5Vxag91cGN8wUY7jwOrsXSD4Zfx7BosmplwkzJo6BSMyA8 Kam8cys+NLkihoirugZ86eLtSUY8C8w+utlrQqn7xnAjWYGMLQFTkbQXl9Bt3De5LfIO XB9KSafxy2ZfuipaeBJDe11uDckq37azY84XIWIxOO3W40OJs0Kw6zq8O9haHbBYkh2i HwxHejQlbbGKShLGYUoxTCFqCr+6Q9Ra5NJNqEJGci5Ge//3X3Na6VF7d44J7o9l4Ukn B6yLpYdPqItqoMdOlXwFqMkg9p6W/BLjEbeW0XjHVFQ+0Sh5FJDbQrboUeG32MmYW7iK UI3xSmt6v1m9UROf7Ct54VfT7cBY2f0RIcWJ0A/y8S7GF7kKweo5ebNPrWOUqHECvT09 y6WdVbIDnq1I63Iu6OgrvWIh/+4ddDyfBvbCNwSobQEr8qDHXP1IRC+yDTbvRKygYnmm MA00ZwFTgsMlPQPp8pr0AYrJs/YaqO9hJqK5Zp7B94ZbuwFP6wezIC59vZhm4wEZJAqw Ounsworth, et al. Expires 7 May 2026 [Page 75] Internet-Draft Composite ML-KEM November 2025 CB9eA12VyTlNFcMRnaItom+xBmrTR2V1hs8YPTSM7aQ36wKgs35TXz76An7DZGbQAuAN bAIDp5T+jAjnAeTqPIrkAg5VQyiaGqFCi+m1r2pVmfqbQmBCpvS2tJnmdVS/gDEa2WKq GH/7GUD8Ox/HBnDCq4JTpZBlnddtQq89HY2NFSyJq6AcDVXc1v4oGnXUA35K13mtGSud DGaj5Zi0LW69VuOJUslo45MuWRdlSrYDCntUL4JSleolIGrSELuUCPYwrz5d6LjcpMAd sFDwiT2F51ThMXb6W3D1wsqnAsopvwCQa4BWBpPVHbLATGtkFr8rgv/GrlLZtnyX/Ryd N+plV8+DZ0zLG9abJMPT5bskSE2JOIvuLLyK2nYEQ5cnvs0zZmuGG8ap7v3PcVNTFCP1 sYDcafSbHNoy14S1Ock4VbADAXSDerPf5y1u+NHSI4o/827ImsIu9FGgJe3KEDTDmfLy bTwDsb5G/iMH9Wds9mqj1TNz5ZIwxTKNnw8p9A2Xcn3nJafGL5Oes+GhHhaYF7Ar8IqL aSot9XRfr0g28qehrXmi+5hjlIMHpAmqpQW3PSCvzoImdIuDs/653uHdrhEMcDDsiOLw +T685Da9NgRPmKKjUriuyRwrfeoP0GE50DP2h1g0Cbm2DALtorYvYG78Ogtlh/CJeLEU YBxu82n8FFXSYIGd3o/mMkUPYvhLjsg8ktUyMerWSx9DqZeP1F6sBIje9NhkvSFeNSkf 5h4XDp/9gymoBN6U2P4udyzjm0LV8HD8PJhwt+31Cd0qLEyPaRbLfFU3gpEiv4ZL1+Yh HWfuXW2fArneNy9hdyXNJyHTH1+aMz3t4jTNDEKr1J9RygCrBb7aQXGsDh1iG3eKmsYX CXOxAcwHhRAXylcLJibf8ryN1fw47MCEU8CKqInVckJBC4ojQPg6cdkQpbqFkDIpOEOf YKSA3m6Jd/DXo05+O/Db/Nllaidd58PwlgnXbItohVdh3dOTij8goPhRpY45SzsJayS2 aZk8J4zRFZlHEd6P4OoTk1sETv2r0qwqEwPuer7uJxFUL4hUHR+0SQa1PfVLoy2a7uQj ygSNtlY9706R0MomuzAHi2Uu4E7PZADII4yTTbfCxul2eqL0ib5C3J3Jw/RlI/utCxwh hKtseDOsnmyd+XveOTaGPWGs0j7F5k57SVdQRZ4vn3CJkGVwIz8fCpq3uMPr8DJKTeVZ T0vzIuOeiZRfdVC1gxXw3+SYjviLZsjvHb3/dYCkpicjTxBggrcw7t9gA865TPYG/9GW xU9ArXdpovW7AT65xLTtn9bsnLAWtRcOlgDT80JbeDAxEu7AinFJDyDhO3f+MLuU2Pzh 5NEl43YKMoDFbhJVKA+C0cGcKKcgXK+LjB5CTCSr9aXFRtJW4AXApvCZoZ/rzq3bEGTg r69tT+VG9YdIb/wtTgnTc56XtxdFP4E+fvZL83DVbaP21cWD4XT3eHio+EyV14ST6nFt CW9A9MTI255qdidizvUcDJorxp69bsu/Lh+N9Tap0JtNYkT+9W+eKArTdvL7agcOT3Lo lldIA2V6DjJ8hjvIZZfu/smt3AsV92222ZxGijqnc6txoWsZdfVnxx+OS/DO5VGW719l Xb0ibfk0qgWk1OHDsWplYwKVdASVk76XotwA2gSA/JjvfErJLYz5kyrjNyPfZc5lQK1S px2+tIwbBAWpgtLWSmZJ8QEEqdb8Yem0xnZobzXw8k9A9s/zbVxuNKWbjs4sDkyC2vaB ZN0pPWvR9bkD4x255JZaeZPwd7NpMZL33X70z6Fs8akkxfzW9bO+zuGnffsgf0qxU46Z pSFVbGq1atnqsPkD9wBiHq+JXzQCBesdhjQRnrKFWgHNyoQUqFooAD1AEu93HiMPfNEW Vn9auU1GbyPZVsVfvpCXj+5pbs0Kc0P9R9EpIo3VW2as4ZrVBiE7m8ydnJj+/VZbFqVw 3Hx1krXOq5MeYcbLbB955qBlhvnhZka+9hu/MhjCdFFeN8XG4vwKxeNcH0sqk4iwEL/7 TAkJSqJISVwkFi+QeZ3O5u2MnJEWTnBDq3womHQJUokEPumFRJTPt0tXQzhFu6jVcMQ9 HqE6kbNsqh1ARyU0UVOC8PZtoNriFTKz4YW35C1CR05SgZ/DNEVGaGqEkKEAAAAAAAAA AAAAAAAAAAAAAAAAAAAHCw8SGiI=", "dk": "P97k4RspV4w840RyLNiWw3oSkVKpTP4BXdIjxIhffKCeut4MqH9KqEo/pnI9v yYZhPU4yFER+PLrHLefhBLYWg==", "dk_pkcs8": "MFQCAQAwCwYJYIZIAWUDBAQCBEKAQD/e5OEbKVeMPONEcizYlsN6EpF SqUz+AV3SI8SIX3ygnrreDKh/SqhKP6ZyPb8mGYT1OMhREfjy6xy3n4QS2Fo=", "c": "69P3XZDytVyTz/lP6kCedDjdR+8EqTeDsn6d4oio6gtND6VlKebNz0BbGZinB2 xNfRCl51ju3chrWSBpGLFZmsQbYEURj7sjaQJDjRpgNpzMuEb4lplEXzHsyoLHPwKsqZ cWp95WGLB9eYRgo70SvB/25K9WtiSnPOAHpAmnMBZD8W2331BgW4/9rJdxkZyqbLARWI YgWOWzHvArjOJkVpYFY0daRvzyabgr8hYyMmF+6TlWEoh0sNWaj462EUVMhNGVkeM22U SWxXV8KixC2MpyDpwdCIPs0Yc2Koy9fKSQhdfdeDxtDTAp9KsoL9Wsox3l9dQSKRxOUC fcp9qg16Ep9GIytAM7vG58AO45I2MKBBom8ayGLPYyVR8VIAYBlpuimDrxClHQ9yXJJn rhTAzun6pogTka5JtynBj7EoWm4XCP/xIvHI3ei9fTrtCzs9TVSkdzq7LHVOjfLnoPtv SzcGqfz7/rVA6LvZOXRS3cyIj8zwoyCajhE+ZttvGl7/wywDapsGnBnV4MhqH8WUA8D8 yLzvJLPXzTeuUgmoN5MX3vyns4EYy+b8nr8oqFDx9zEbUrgDzdAq5127sR27JDgYz3V/ CYtz43e+W3RGlaLdxr+tHW5blsRmgy7vqhB4K0k+jAui8BUN27U6GJA90XmEg2fe2hs7 i6IXovdVxIjHIqDsw9ez0oK8Dyf+2hhj0iE0cMUOfjKZMTa0aWVDfvLp9Fksy03yZL6A Ounsworth, et al. Expires 7 May 2026 [Page 76] Internet-Draft Composite ML-KEM November 2025 j+hr1/JvITmGMpnpxwDcQ41atO/q/QXZuxiYrGR1yon0VAzEkQ21vmk/bqM1a6kGNP1p BK4e+F/jQXCS/dVuQFndhSo6FPGa2yDqK7OHAnewkJcgywegZoViK+5zwmLWUbqy77// IOMidAK9+le3fPJ+QWoRaOIeZz6yeUZi5/dGdcmtfrC/RQfDvzB6W6Tcr+StcwRwL1dw MrAV0KjkBxk3dDD8+DRD9PdXttk8YDzaGhKLhLfF1AtLivsgpOHLRhFVHfW9Bv6S4YQf xoNGwmpGTn2bOTmLHfIldTDwpb83wLMu6mIpBgJf7mCugIxhe/9ocGVxdtP9IGNps8xX Ih3ZqtaFi5zsjViWLGsijIEWooiBOfgwWqou8WgnXLBiHyA83i/fIGT245DH3cXDyCu9 l4aFp5kkVJQ5x7mzd09ldbkrsp+IHprMVZPYLoL+zEAgJsuq2ZTrTmIjkHm1CTvbeJK8 y4JgrVSF0Q86bi0KPjMoX2gH+TUGP7b/aw4SD9P2PRvmSqS8u/Z6pHSItYOpTXcmjyuE 3rDIjgG9oXuWWpX8iBxnEmzK1Wuc4gxd6WQusxBs+Kd67fRwo7aVI60S4NSDQnF+Iypc tYsqJhLb39cGL7JY9yxzS+BXT8bQwrts1sHM1lZBxd3peYBseHrytQrmg7BFgQ4fd5KS JDJ8xLBiUo8UYy2BUxeoYxJTiuAaM=", "k": "TqNSorcDauKYq54Wc4Qvk+9Hu+UdZRjSvGomAednmM0=" }, { "tcId": "id-alg-ml-kem-1024", "ek": "zroT4QlLlxtR7smWOvZ3efkY2OtQKRswyTxB1lZet0K2ruyFsLWhndO5pdvA0 FCyrmUwXgqhfOilo8xixWVK5Kqa+7NKfxoVQ8M2eUee9ku7ZzeGq4WtpqYz+6HOluU2I 1sltzetp7m7QmSFFUUjF9dze+bOQeydt8nOYaeQmWeTIlRfmJMvZ3R8bmAWthtGOnoj0 KN3LSWZPsIykACLVWZhBAhGgGN6DOk2DjhV8JVvBKJ24VJY7bOgrri7cWaqKAy0+kyby XitWth/FpdrLOsQJMksWiZFQpM3FfufloeHS6aZYeslygiv14i4Q+iIJ1okJCPILNKHQ 2x0V2hb3edSAZpPHBIvEdJdA8ICsdCUahV1j8VJ0vd+RHQOA2M+HGXNR/aUIUm/OJF+6 jVxCUYPsklDYZM0TCUJIxXGneYJKrLJCFTHbyLPxRuHSOswsJmpPhEgQsKbgipkWPGnx UxRsGl8f9M/recc8+aEhJaU8RgdjNErdVCy6NwR1QFCugK6pDUoaxFWGgGu8bnE7qt8D wR9uTWWtFIzNfet0bBYkstOx+dc4mAi9YJZXHZyJnYP75ph4BVW7cehdRkDZfhfthNe2 WjGFpc4F9K8WbWRRmKjXQCPltYVmXKVEmO2gxsyCJWKPVKAlUovydg7SoKIBruf1UxoO 6aKCLoPINOiBUeuyeZYMTuEd9EnRRNX94GmesM9j9u3/ZAntJJBSWABlXKCUEgYhlMCg Oah/KCQXQJ+DPqOmHWuvtFf0KNJPgdrV/E7QKFPN+fCjsGXr/lZ6SsDCaG4S3Bpz1IBH uEqaRGtT3h0SKGqzeqiq7iziNOkiKNxpus7iwR+o3i9dEi2iiQFpDW4QkAXOjuTGEOlc CKjSdgD0NoZMyeDMoNVEiyzxSq0MaVPNJGrGXstQOi1watSWzOUdniBvqOlWitXGnrCU +I9CouvTly+r6s56BRRkYkhOkU9lOnCCQIvZNM17xSge7oRVQa9glm4K+k/8/oU3FGp+ xGhJaxl12bIA4wS/twZVeGjAfKddhl6w9QRsAeXYBdIZ2O4dSt4pQPQv4ySMNlttfJki /Ex1oI5giwnPhSHWDuAtSV24vJMDSPNzNpEL6c/XnFOv0EVvoqso3YiqBU3nJVOP9U4D 1heLwUCeAFMBHMK+nifALJwv6eybxMk6LBLZeijikG5zXa+9LwjKPdpIXNeWzNQ9xBLB iBKvKOyvmHId/SjP3MjOoFV52VCprW5UTdtOpLEouqVJCCTJbXA7WKIAQu2qKx+NJp+8 iCrhqbNyrE9h/qpGnIl9Vw1pZmIF7kIVwfE8lc0pQwWs/MB8DCb1lWOwrCvmGKKjLqSD Yyz12Nm8ZIWoRbO3KmEamF6C9tN7dOFdmtA5tmZnQegcXFlXMK4ynCibzoGc2gCr7CVF gZZImA4U0pG8nSu5UGsC3h95It2q+sguPNXmTZym6ZBp9m5gukkg/sAqRNbvJRhEzeW9 ZVLBOwdC8tmfzhzfrJR1hdMSnJIEYieW+YD0Ei7D5d4nPvOPOESomEZpVpucerKTpgsj /KMjatcoidP8aVq2QEcvJYQfmEP2zyh2vkQgyJ3LLLA8ZlLnlbCP4lCTaEsklzM1RQyd qmLRlWXqagEEiWG1lYiAcdk3oZtj8KPn8KuLqc3XkivDkKz1iEvZjqe33l+eMhANenOg xBNbcO3nJaAU3XBVEKkrEIve7YaUllNGCJFaXugSKrIMEFoyGQ7nHkVMiIMLUMXJ9W1f 8YNxhJUrwC/SMIqS6zEAdtT24RCRBnMbXdHKQowAZPGKLV96KeXdjKnbtLBg1ROvGk/d HsymehvMeXCN7pHuAZx3Juc/pCzSZo2yvErERQ/lQNLleur0AcrGPCdfQI5HkXDBoExA IoCqWEjkYUxNZKO5KldXhqGzBqORYKnRhJZKKcvIijGM1C7IkeOSPKp/OpoNHscFKw+e yGxieCCrNm0qkxIT3NuKGjGyBcA/JB2lJTGhamAJ0i93HIneIqOpSIi/2dsrja+1ehV1 Ox2ezqL/kNlBckBVSd7WKC2sePLtIEETkXtniGsZgw6GqOtaOsW6NChMPA=", "x5c": "MIIUEjCCBw+gAwIBAgIUJT58bME2XlpmXh788lxWEtzWy+4wCwYJYIZIAWUD BAMSMD0xDTALBgNVBAoMBElFVEYxDjAMBgNVBAsMBUxBTVBTMRwwGgYDVQQDDBNDb21w Ounsworth, et al. Expires 7 May 2026 [Page 77] Internet-Draft Composite ML-KEM November 2025 b3NpdGUgTUwtS0VNIENBMB4XDTI1MTAzMTE1MzAzN1oXDTM1MTEwMTE1MzAzN1owPDEN MAsGA1UECgwESUVURjEOMAwGA1UECwwFTEFNUFMxGzAZBgNVBAMMEmlkLWFsZy1tbC1r ZW0tMTAyNDCCBjIwCwYJYIZIAWUDBAQDA4IGIQDOuhPhCUuXG1HuyZY69nd5+RjY61Ap GzDJPEHWVl63Qrau7IWwtaGd07ml28DQULKuZTBeCqF86KWjzGLFZUrkqpr7s0p/GhVD wzZ5R572S7tnN4arha2mpjP7oc6W5TYjWyW3N62nubtCZIUVRSMX13N75s5B7J23yc5h p5CZZ5MiVF+Yky9ndHxuYBa2G0Y6eiPQo3ctJZk+wjKQAItVZmEECEaAY3oM6TYOOFXw lW8EonbhUljts6CuuLtxZqooDLT6TJvJeK1a2H8Wl2ss6xAkySxaJkVCkzcV+5+Wh4dL pplh6yXKCK/XiLhD6IgnWiQkI8gs0odDbHRXaFvd51IBmk8cEi8R0l0DwgKx0JRqFXWP xUnS935EdA4DYz4cZc1H9pQhSb84kX7qNXEJRg+ySUNhkzRMJQkjFcad5gkqsskIVMdv Is/FG4dI6zCwmak+ESBCwpuCKmRY8afFTFGwaXx/0z+t5xzz5oSElpTxGB2M0St1ULLo 3BHVAUK6ArqkNShrEVYaAa7xucTuq3wPBH25NZa0UjM1963RsFiSy07H51ziYCL1gllc dnImdg/vmmHgFVbtx6F1GQNl+F+2E17ZaMYWlzgX0rxZtZFGYqNdAI+W1hWZcpUSY7aD GzIIlYo9UoCVSi/J2DtKgogGu5/VTGg7pooIug8g06IFR67J5lgxO4R30SdFE1f3gaZ6 wz2P27f9kCe0kkFJYAGVcoJQSBiGUwKA5qH8oJBdAn4M+o6Yda6+0V/Qo0k+B2tX8TtA oU8358KOwZev+VnpKwMJobhLcGnPUgEe4SppEa1PeHRIoarN6qKruLOI06SIo3Gm6zuL BH6jeL10SLaKJAWkNbhCQBc6O5MYQ6VwIqNJ2APQ2hkzJ4Myg1USLLPFKrQxpU80kasZ ey1A6LXBq1JbM5R2eIG+o6VaK1caesJT4j0Ki69OXL6vqznoFFGRiSE6RT2U6cIJAi9k 0zXvFKB7uhFVBr2CWbgr6T/z+hTcUan7EaElrGXXZsgDjBL+3BlV4aMB8p12GXrD1BGw B5dgF0hnY7h1K3ilA9C/jJIw2W218mSL8THWgjmCLCc+FIdYO4C1JXbi8kwNI83M2kQv pz9ecU6/QRW+iqyjdiKoFTeclU4/1TgPWF4vBQJ4AUwEcwr6eJ8AsnC/p7JvEyTosEtl 6KOKQbnNdr70vCMo92khc15bM1D3EEsGIEq8o7K+Ych39KM/cyM6gVXnZUKmtblRN206 ksSi6pUkIJMltcDtYogBC7aorH40mn7yIKuGps3KsT2H+qkaciX1XDWlmYgXuQhXB8Ty VzSlDBaz8wHwMJvWVY7CsK+YYoqMupINjLPXY2bxkhahFs7cqYRqYXoL203t04V2a0Dm 2ZmdB6BxcWVcwrjKcKJvOgZzaAKvsJUWBlkiYDhTSkbydK7lQawLeH3ki3ar6yC481eZ NnKbpkGn2bmC6SSD+wCpE1u8lGETN5b1lUsE7B0Ly2Z/OHN+slHWF0xKckgRiJ5b5gPQ SLsPl3ic+8484RKiYRmlWm5x6spOmCyP8oyNq1yiJ0/xpWrZARy8lhB+YQ/bPKHa+RCD IncsssDxmUueVsI/iUJNoSySXMzVFDJ2qYtGVZepqAQSJYbWViIBx2Tehm2Pwo+fwq4u pzdeSK8OQrPWIS9mOp7feX54yEA16c6DEE1tw7ecloBTdcFUQqSsQi97thpSWU0YIkVp e6BIqsgwQWjIZDuceRUyIgwtQxcn1bV/xg3GElSvAL9IwipLrMQB21PbhEJEGcxtd0cp CjABk8YotX3op5d2Mqdu0sGDVE68aT90ezKZ6G8x5cI3uke4BnHcm5z+kLNJmjbK8SsR FD+VA0uV66vQBysY8J19AjkeRcMGgTEAigKpYSORhTE1ko7kqV1eGobMGo5FgqdGElko py8iKMYzULsiR45I8qn86mg0exwUrD57IbGJ4IKs2bSqTEhPc24oaMbIFwD8kHaUlMaF qYAnSL3ccid4io6lIiL/Z2yuNr7V6FXU7HZ7Oov+Q2UFyQFVJ3tYoLax48u0gQRORe2e IaxmDDoao61o6xbo0KEw8KMSMBAwDgYDVR0PAQH/BAQDAgUgMAsGCWCGSAFlAwQDEgOC DO4AxsGVui8H/2rF8Z4gu6p6wtaEVhjGsHDmDanQxtgMcAYkDeQ27dvQlI6wYVRYznPV hoWOC3jT6yPtB+VDcKxUlKjLfHP91VEpJwCsaCDfcg0BpHdbdouo3ABNlMj28xXXFusa N8/0LFOH7/8RyITfZpxZYs4LdQIICRJi8t1lxY7/4SRfze6oxHKxAeF4IhJWY/xBAqH4 MCZx2mt/g5xr9VV9jZsjBJKopOgBhcGVlIFrbJ107u23L/PZQZvuvVyNb+07nuguJsaY U1zAsAtboSmtS7esSJUE/ILuRPBYmIZ5G6t6z5zNM6NF6gUG/DWHpS0tabXQeQurhLh/ qxfpqrr2rfvKWdT4wkPh8/qgOmUyrUkjanY3Iux+Yz73gJOXEP+X1kxkUFyKLAX19Vt7 ki3lVe81uEKdkdP2EINcJod9h+UUxBHO2VNRnvqbrUUyeVQat+O2U3JYfQenoMISJ0KH yl/ILTb7X/6GLnM4oxds3/Frxbmhe+Gd4qD80KAjY/mv3Unxjk8T7/w29VjXf8qT6GwC qBwCiLH34zqvwF+tqRxdwDKdyfKdfGDDWKO4uf3RVueWcV21d9ssZBcGjZplLgDpc3LE DhMJisr1C6otr5LcYHPbZC4sHAA7QWparZNnF/3VQTgGu92MYf2SiNWXd0ryW2KFA4/x 5bwaIEkjC6474nQLtyg4Jsar0SJ1Mj6EgK/UEBR4kDAMkj/NCiJ3gTXU7UOxL2dT+nvc tmbD5x7+7KthaZHL/f937u/8hthlby3NWWCYw49SmZ7QQzr+kMZ5rnpjMiZHwbubB5vO r63mrzGhZ5xkBfj9MT3TQBc9h8+FqpHM3Jeimphbspeq4T/Fje40kT8jBrFHEwapg2Xi npC38caQeTXJa+uF7/NY90Bsj+Bpd7BYS5vtEPYH/VvAP0C16BaU0yfEBgzOmirLs2z0 Ounsworth, et al. Expires 7 May 2026 [Page 78] Internet-Draft Composite ML-KEM November 2025 sMw0QyXL5N8qQkvlsTx6zVrmY3coCiKHqTZZ5KaMK3+jKzXuqdWHzWA7POs85CCq2+M2 rglDgLGMfyrk3j0+gVJRFs7Z8yylyprJc1KiII7xaNswZWZQ0a3yUig4JtuZyR0UAUq3 eZXwtDa1SCj0Y48Amfkx7LqbVIVJE9tp+PB8p9F1OJ7xtWKPC1hYo+eUlhMle4C9h/kg 9CrVPH9zdwupJgNbHyhzZzUzRnlU7SIkCsOdXZ9nPeoDVJblNNZ+WaQ0TB40eU6xXWHr PSlXePaR07YemPfyf1piApwrlFhqVH8bd74xfrJ2wZD4/dtYt4dEfh9y32LhLgORI37n 8O9/Hp5PdFxT0yepxw0STYgdcZ56LcieEKtZlFgCUo5Yh5vswwOm4Iqn2P56IfF3JR6i iYKtWLBY93Dc2fWHaL+RdEU+vR30YcRNGn1y73ngsi19eoSz7qnCkollZkWT00pAV/ec N3O+3SIFSbcUqRr9WFq7axT2F+hVp03IzU0mwH6+sd7RlBhoOkGYO+47Jjh+RFCvALep HABtTK3RoepnjRfaFjgJI1f1oXiYvtuHopII/KXyzgs4f+h6HLeFcL5L2aRJPLi39IN+ kUmMKK5xAZBhraousnetTReAUrPsHuvTeqDck8mvNphIOFtrFMuw0nRFo4J6DHQBS1K6 wqV1WhkmR6fYEYW78y7Hnb6Kw1TaWtTwrYlXoQ+Unfa2VFYW7aAODCiSG90cUsn/hLCR QkW7f9XLuQOjHtlBFv857zTZFE+XNRB4Vn3uOhOgYd84d6dfanoZivuo3nWxcsG+nymb jvjJodB7OejaPMXAu31hEpTiS/uOQja+yBbVquQd6WFyohUSJ5f+KRhnTy7Y4gnZEg00 OCVAtMo9qKlFtEf03d1unz/a8Rx51zKC00DtKuBjQryEmTJbJWED5widyzahJmhbSne/ EyR3hZ3wSvETCVCdbJoin+x9BEL1Nw+EVnXRfu3VmqPYl7gTk+e3uiHmGXpN/q/dA4BA za2Lz1Dcr0yD1Ppl4jgkZga0ythlWrQyrjlu2tVRFQsjrz5DmdelppSuFFluxW3XsusV vH4XpmOCOFEtAD9wf70OVh71dfJuoeqr0OlMOAFP0or1BxDyeE1vWrnBOh2fTIRjQZG7 Mgg2S5OKkDzn+CYNdR3xW7/gFCL1sxoepIUBFOpam5wN+ttHIYdZiV1ONAzd7L0ZGIa3 FV7MbC6PyVTLaAEp6+I5VCeNvwMX8m8PwLmCvvGhTjOD5fsjPEPy1Ug5bNaFPnxBrAv4 CqBm2DCUM8KM8OPtgrb9yRjS223nk8E61i03OT3HJajg7mLQMtCmx0qKtnN4V0fJjo7H M8f3Pbqz8pZ7/NJlmqRov7vKP4Jx4zgtDP4+HeQHCkgVjhAyhU0DCvT6llOkvZWx9j3S gd53Cu+v6dXsp9d1PHSA3ZSDZ8/XyTOHbigEnyF291yIrCT4ftYjKtAQuSQooQAuaxE0 ulCYn16sfLk8HurpPrA3bpL7q622uOLYVs27Rr+e7eJ/FeO1EgFpO52iD13pgVFDWsb0 Te/bRSplaaxef/HOTNCw3r2Yf2y2pvJiLUlWFMkq3PCDWtbM5LDsYOxALSIy1fzQiHYH 5sM8vVgIPVzRdCM/mqGVSLC3JcVBkRpT2jMowkkboTo8cQr1flri4JsLdb3C3tE2QCl2 7XasOdJ+tKBXH/OO6mCy2QxUk2/1BM1MuO2sL4/ABwydbX2JoxCmwbtQUMlNQnjh4F1G yhhiqpALs56x7e0OVw3CWu8cHl/hxCFpbuGOGZUDp8XGJi6gzSE5dDgHcd3NnQLQIiYF aG9v98ztfA5YBPw/QHJhFKbsarppWLkWlrcH0BBl0L2lL3tQgMvwDoMUosidxrq+0puT RI3HV9MKIbKkFYACPYo1yP9QcCz255/zPBqhK+Sy3f+CtiRLs6HqfcAyuHTWZ8q7J8cW ltpmK8shY5KOTmbvCByshHcWmo4RaxbH8FauihUZ1SSjWK2vdX50XaLCxlvnVIUfu/Fr LYEu7diGw9LfmtlX8uVpJy4cOg+tPS1CY6pZEzV/i+C2AvaAnfAnybNbs5199e3ptsWR veixa9ovV4RFAor10pizi2T5VfLw3hHNgZKvIcKRfW566qGogPCzIZmEnhjo4R1EcjYM Yv2yQa6PLL9gUzQZ4RVXmc6SfpzSZlvawk5ZAkb7bMKsZJ1/LtBeKnqynHW+g5MxiJYo 3RXZ4+9W6NinUVHCZwdBPKaziJ40xORIBchSVP8RohUFgaLpAlnCz6EnkqXKpWingz8S 2a2te9MRl5tl5gJzvP3GZhjZOsI3skLBVEvevBDIq9vEwLH8rYSft4idrG1CPVzd7C5c A3gnVzfy5rgyXvWcQnNViqzhLRLAEpflDwVTAqQ61nwa0QL0GazYoHcwWnxhhZClfDfM CJ9FbfK3F9+R/mv2yeimmQWFgCErs+lQLzcdz447pjPOGbPgFiBmn0vlO36X7CwDd80M vNo5KX3sPDuqDtFgmQgtTPLu5SvdybI+7Qy5zIIOU8cBoQ0CI7WKDUCnogglKh+4r4+Q cERFjlrGkeb7krxnGl/m41HaU3u3oQI6MQM31meAW/Csxnahw46dWDyS+X7R8Wepr9+j DkirJpK47JQg2vnhQRZ2c/5ngGgMObwB9GJhKCXx5+WdLIZryBMhimYWk+YC30wzmEdK wr6ZUZFBPouNzfXzBrWH2rhEjaRk5QfJfQ1OKiYBlWnYzcme7G2LpdtULf9mj32oT3Me BonpQSBaJDpr89OqpbyB5z/1CKCBZlKA2MGQnbpz8XQTrD10Vb62e+zJh6pDWmi0qZGW 5MvoPdSEXvrWdArSKQZ/WUET/OGb773N9c3KUUf/eymaFsIBGosvdgoACC6/J9kiJt98 0zjUP656FpzPWXcAP59okaVWv4Q+U/VSWryh8oiIwQvEDhOQQ7YZeEtBzkoivKHP25dz UblRWroTPDt/oBeJZYnZCMX3Ng9Icpgc4ArDcTmKVVbKebxVHeQrHRgPNdKHZ6H4PHDz 4/V1mCzMmF4o8e5kMJVLzSSonLClNI76yzlt14dsmNXOPqe5EoTgB0xtgpjVF6Rzi75n RUx/T1t0rZQu8d1k1jbnqiKYK5cvy6iX8juXlp3vfk8bo6NRTbPuevC2qpe4OcMlRLBU 63zUu6deUQr3QsQNpYDBUWhiAI2oEBAI23WLs7aiwW47ptQu51Vao1i8IUe3bi2L4K5s Ounsworth, et al. Expires 7 May 2026 [Page 79] Internet-Draft Composite ML-KEM November 2025 V+2/Z4SPIwE8YW6Ta8dFZ5lpdD5yZSOKg5rovcqJRygJsuOu4IfBCQrSPGmoYaKNqnJK eY1jjm4NZ5pH5WIqBsFukoeEZx8TuqFZuZAwGcGTifvUVuKLR5wMESNuh6OlxAdKUFls oqOlp8zc3eIDNTY/anqC0+EoKSs2TmSagpSpX8H/AAAAAAAAAAAAAAAACBUeJSgr", "dk": "8na5SKtc4AAbW5r6ERAgvTBo9Q5Jqir9JupV+AgdK2mphpv52sN6ywmo1Pl30 THks/rC/v88g3YYq52fwa9UpA==", "dk_pkcs8": "MFQCAQAwCwYJYIZIAWUDBAQDBEKAQPJ2uUirXOAAG1ua+hEQIL0waPU OSaoq/SbqVfgIHStpqYab+drDessJqNT5d9Ex5LP6wv7/PIN2GKudn8GvVKQ=", "c": "28d6LkCbxYo87QHQWTgDP9w6HQRLqulntjU8rnx8gZ807R9sU/EDPOI/D5KvgH o+T3R3106uoa8h/VvGGJaRbkGK/El+iGuTdBhx/tu5bz0qkgkow5iBRZs6Q6JPjDAvT9 PgJ7KM8Oy9F9EFhCe/fPMLPSkXu4dimw1P786hU4+QuDgtD01S4UvTVpLjVLBRg1Y88G EZlB54Ezdpx9gzruH4NXSOnngOo58mOFHZMcEbrmG6Ea0AfhasHIj9+7RrKaQBz7zKPm 4Lbxay2g+j+31u6TUV6cmGmh45E1QyFtS6pqZ6Qvikif+aS6XXb2DK7c+Kj6e39z58fL YLEWMYWlmEJzjTqu8xq+yVf1OEQHk0JiOdWzLY7geifIU2oT1w0a8cT5oXr3PtVNK152 DNWuQtfxpD9UOv9TVZFZjd+D2cM6Q8GIVXYe/fV7ae5iX8mNUe30UQqysiFe5V03LJBq ZgOqMfLiGeWxyYJBfAvNO3cb9bUvewqC8eFfX5WkMrRIbZskzfPl6JxFwB9YiFanX/Aj O4TLf2iTXEHF6BkECbntjw0V0Q1WpkoonXTrEILCeUQzppsS8T69Boq7kwV5XBhYHKvT TRCzsOmH5n96mUdHZwHodmw1Vi6pSewGPTjH1TDNfr4EuSKQ9oslEve0+Bt2h+2+Z4Sm 4WAPreRTN9YZQVWFt/oSCrIX/lvtzcil8biQN/l8mqDWoJRk/OpdF2zGWCSCRMX9NHtg WIerH/OqzN7W0gVpK3pn86cy+QOxz1TYH2cgaVJzvzu+IpW76qGkdCBnWHRzx1Tsh9vN DI+V9ol5IWUXVVuf4He5jC6MDTez4esDArzKpNP2uVsWAJg+DDpRsedB7lgz7eMR7LSk UPovrJ+Oi8UN3FotqUPVL90+/booVd9LS7ihhj+48uVgunLfb2Bwedk9nrye/yPoEUca Gj551w2qVYta+9oBJGaAE1wfd3yzZQOsmFa9Fd7bDQg6ugsgBza5TzgHGxew4fZjmgQ6 jm90+TDt5AopddoDG/J+pMtDIoAsoP7l0Ve/BYlER0nFlaiP+10VdYx1/C+hqq7xUh4g 9xf1DlOXXymuFLJCQaHet/U4uSRtjeqIKHk31fm42XkGrsN4JLmH4+GLWFiwLRSAqy+V KFqLt0s6PcG7DgySZshMmTTYBA3A3xNFYO266V5RTGu7vL8QLDCHxhZaugIx4dEc/PLW 1VeMQvUyyNiCmvJ+eIbt+1sDTYDqbpjk8iCbELPmyrfKR0YRQrNuL5Yj7dkIgdzozqol HpQfa8InvNRoCJnTrgMcrm5ZGKyLBKAFZm+tAnfk9jr2tfLR7Etp8Qk7tb+QApyvGxlZ G/pLBBjV4fNmS2j4FluxhO9wfRhDxh/3b3H91+4VJr03suFlHlyO8Aggh+6rvDL2z4bh X149f/6bOgnKn+7o9g9uhHwsiuFk0uFYww7Qk12yMSxe8SOX/Tv5ZcLJb1ClsbAq4S2w jl09bER9ePakAan5M17uAXqZarLe8ZziJmqeZDcVqCm3OpHKuPYa6piqxpzIz7khpxdo CbHAQizKJnzgIpPk9MzKiOAJISov8HNRB1cnX8jc0voImqm/9ywvFLWj71Hl9AOmMpHs vnqLyJReebZV4ffThS+Rsm0iAz6Zt6DV7EAGRmd9e5dgp9I8V6BGTvQtxRnr2r6zir4r I+6jJiG0WM46wUDaSXiHdh4EmAJdwOzXWTh2KqceRAe2EA2YjmNWDbJOj70p2eun6HOh LOXkkVVhahTrRkiG8kt1iz3fhGMM+VhywnQetrIxzMv870DgBjYQqu08KN1MFtL44srX DXUMtT+7ACpDFvThO+Kwavv8/PGijpLPRy5B9tDE6RWK03iC/QoweJP4db5BjCc2++MH d3vJ90Gs60KKYlIJtzo4yncc1Xe+PkHM1SZMWa0+YwElAecnEiBMcx/ubkqJVTiZh9JU zjYFOhPC1n4ReYW7t0ee0la9JgpQ0UpTWWugloTHcFEq7Qd8bObjtVSpoSAVPXZqY6x/ eSjT+u9k7AKLUcbUjSWanEnITCvndFLa/HsSEMT0So6V5c7rkCw1NFZJ8=", "k": "IVOi5CJVxDG8UxbgFtZyD02TlIcKx5ysOL8sxqOaC+g=" }, { "tcId": "id-MLKEM768-RSA2048-SHA3-256", "ek": "Ufum4MF7hEVm8rwS7cJVlthL4bpbQFIBmwrDt/JreAuMC5KZ4sJhf4lVJIY1d IUeqXuqW2I9f3iaJbF5aByXMug2icEo2biWC6k095rGXCt/nYh+7hRfvwVXdyFTSOoj+ Byb0xEJLBMG1ahWKxu0OPZLWmTCzMSlHGZSinjEZBMEfZG8wZVXTgWMhpmlkoMXDOFRT 1S2gCjAO6GhIhANBstlK8aLu7gR25TCxTFqrPBM4/B/Pky4JxNz/OK8GqInFeFVdZdt6 Yl4UlyfZ8XMb0hsITk0gsgzBfl6ZapzWsNPiUQ123gLB3mYQna16yhZUwALj7ejlUG+a cxjdxEAU5p4qDAJm+FV+LZh89qVpTU77ze8cBTNapCSsnt5hnJJKgWqiMQGX7Sz3RSdI Ounsworth, et al. Expires 7 May 2026 [Page 80] Internet-Draft Composite ML-KEM November 2025 eiBV+qGqdUDGfHOGfoJVlABFLB/eJoU5irFtBuvd5K1sCRtCAU/F5mSfjtqGZpY8jMSZ OQBTutSwCBr/Mmy7WieqGWA5le6nVd/SqOokvWTBUXAYzxF62d5CPFw9kwF2cJXiTJW6 CNdp0IqXUVbmihvB6Ebs1Acc3tPf5K7gNsx3nRDlLgWgWG9NwRnOcgny0WIwvhJYAlkf Nc5NvaUg3DJimsyg8oDzxi2zBWW12KH0RW7wODFuwSVq2O1gdwtY4AnAuW0WbQFoiJdU Vmi2XDItRSmFLRw1BJ5QwULxALA3DW9DCpkfuyBLqxfHfhsviSFQ6XGxDJ54ntfj2Goi FkbKXFRutxAPCabJBqk+6N+mrpQrNFj/oELWCFQ/4pybXRxuRIPXcqcizt73CRXhfkfh ajIRMAcLSdRI8SXmtHMwcwOdiGfiRibJ+gCAWu0osA3dhaiggbP6EHHf0BynGmECIo9F fFVG1RZ1ToZZZuRuMUwSkyN7OZETkk3kOk2rhWvnBovTqBWS3SpTDRFTPCU6gWsirWwP NASkbpQ7vYi8qIlHBy/YfRch9UsRbOXMgx4avq6bkvJ08w7vtCCv5h5yjNjSByc7osh/ Kk0FbVpesAqV+qmSRGJlHXEuOeQH8K128HOcDBBBbmQc0lQSicunqSimRoyVNKfnFMar nsMoShy1biONfW8TUeKRvliGtwhx0SOVVjGr6wKjqcAXYsMUbmyaBpxGQSHozPEm9BSS 4o+QZs9i3i9oVgHEAdQXfx4tjQaxBdXnCi8wrN17oRIjYGrWbcwXDlklTOlfwl0rmRpW BYj1ecbkih34OOZP/i/7VwEQXyaUyk9tXx9W4TDelyK+EXC3jOY/okUzXFWfUCdJ2WT5 qZIn+JV4SWrMzadsLYSTTlWK4UXvQKgWybORIUPMOuCFzArQmwf/4qboHpX7/sUqPKYh YAhbum2ZcpjC/dPv2RoRqackBZWs/xWKuLKt3ICfmOZKJm22oAfLwqLb/a5/wFp/FIE1 hTLu3yCyHwtC/hW8POAQEOsdyAzbAZLNkMIUHSJhHy8C0gAxGZdIbVYi4ZKEtWA6Ro92 vh/dKTJoDZmvtsFU9XBY9uSoeEMklhzM7eBK/KePREKCpFgZzLbVqEAk0VK9z81NMSqQ kBHacY1syR5HWtQjr9vtswwggEKAoIBAQCSS/NPP2s/7YvWCcTccH5E64ZgFN2q6Rxl6 nr3c7DQM5HsKPG+u/nYVdz8L5Ftbe/7WNxqU9bqM239l8ullAPIoeZo79icLh3z0PlJ5 Wi0LnH4qQxgbrl4O0bbk6qwNSjRaW37PyJ3Jy765/xLBuKtKSzJYG+TykdhfccaqBFxr JeL/YOs45uJJ+Ed0mtHC8spG8bQu8FTd1J20MOBaB3SwMs3q6ewzAHl5xA8YVD4pWbue NF4vu9xRJB9DdG1JQZfbCfSOyFUG9BDtDKFTQ8qo0GBtsp1IuAZIN6N7+vl0wbUeluq0 nhImYx8a33eooY5M0Qb00BSMN8anwZOdOHbAgMBAAE=", "x5c": "MIITrDCCBqmgAwIBAgIUIumQh6nF8lYU2Zq2yxTU7Iz/eEMwCwYJYIZIAWUD BAMSMD0xDTALBgNVBAoMBElFVEYxDjAMBgNVBAsMBUxBTVBTMRwwGgYDVQQDDBNDb21w b3NpdGUgTUwtS0VNIENBMB4XDTI1MTAzMTE1MzAzN1oXDTM1MTEwMTE1MzAzN1owRjEN MAsGA1UECgwESUVURjEOMAwGA1UECwwFTEFNUFMxJTAjBgNVBAMMHGlkLU1MS0VNNzY4 LVJTQTIwNDgtU0hBMy0yNTYwggXCMA0GC2CGSAGG+mtQBQJKA4IFrwBR+6bgwXuERWby vBLtwlWW2EvhultAUgGbCsO38mt4C4wLkpniwmF/iVUkhjV0hR6pe6pbYj1/eJolsXlo HJcy6DaJwSjZuJYLqTT3msZcK3+diH7uFF+/BVd3IVNI6iP4HJvTEQksEwbVqFYrG7Q4 9ktaZMLMxKUcZlKKeMRkEwR9kbzBlVdOBYyGmaWSgxcM4VFPVLaAKMA7oaEiEA0Gy2Ur xou7uBHblMLFMWqs8Ezj8H8+TLgnE3P84rwaoicV4VV1l23piXhSXJ9nxcxvSGwhOTSC yDMF+XplqnNaw0+JRDXbeAsHeZhCdrXrKFlTAAuPt6OVQb5pzGN3EQBTmnioMAmb4VX4 tmHz2pWlNTvvN7xwFM1qkJKye3mGckkqBaqIxAZftLPdFJ0h6IFX6oap1QMZ8c4Z+glW UAEUsH94mhTmKsW0G693krWwJG0IBT8XmZJ+O2oZmljyMxJk5AFO61LAIGv8ybLtaJ6o ZYDmV7qdV39Ko6iS9ZMFRcBjPEXrZ3kI8XD2TAXZwleJMlboI12nQipdRVuaKG8HoRuz UBxze09/kruA2zHedEOUuBaBYb03BGc5yCfLRYjC+ElgCWR81zk29pSDcMmKazKDygPP GLbMFZbXYofRFbvA4MW7BJWrY7WB3C1jgCcC5bRZtAWiIl1RWaLZcMi1FKYUtHDUEnlD BQvEAsDcNb0MKmR+7IEurF8d+Gy+JIVDpcbEMnnie1+PYaiIWRspcVG63EA8JpskGqT7 o36aulCs0WP+gQtYIVD/inJtdHG5Eg9dypyLO3vcJFeF+R+FqMhEwBwtJ1EjxJea0czB zA52IZ+JGJsn6AIBa7SiwDd2FqKCBs/oQcd/QHKcaYQIij0V8VUbVFnVOhllm5G4xTBK TI3s5kROSTeQ6TauFa+cGi9OoFZLdKlMNEVM8JTqBayKtbA80BKRulDu9iLyoiUcHL9h 9FyH1SxFs5cyDHhq+rpuS8nTzDu+0IK/mHnKM2NIHJzuiyH8qTQVtWl6wCpX6qZJEYmU dcS455AfwrXbwc5wMEEFuZBzSVBKJy6epKKZGjJU0p+cUxquewyhKHLVuI419bxNR4pG +WIa3CHHRI5VWMavrAqOpwBdiwxRubJoGnEZBIejM8Sb0FJLij5Bmz2LeL2hWAcQB1Bd /Hi2NBrEF1ecKLzCs3XuhEiNgatZtzBcOWSVM6V/CXSuZGlYFiPV5xuSKHfg45k/+L/t XARBfJpTKT21fH1bhMN6XIr4RcLeM5j+iRTNcVZ9QJ0nZZPmpkif4lXhJaszNp2wthJN OVYrhRe9AqBbJs5EhQ8w64IXMCtCbB//ipugelfv+xSo8piFgCFu6bZlymML90+/ZGhG Ounsworth, et al. Expires 7 May 2026 [Page 81] Internet-Draft Composite ML-KEM November 2025 ppyQFlaz/FYq4sq3cgJ+Y5kombbagB8vCotv9rn/AWn8UgTWFMu7fILIfC0L+Fbw84BA Q6x3IDNsBks2QwhQdImEfLwLSADEZl0htViLhkoS1YDpGj3a+H90pMmgNma+2wVT1cFj 25Kh4QySWHMzt4Er8p49EQoKkWBnMttWoQCTRUr3PzU0xKpCQEdpxjWzJHkda1COv2+2 zDCCAQoCggEBAJJL808/az/ti9YJxNxwfkTrhmAU3arpHGXqevdzsNAzkewo8b67+dhV 3PwvkW1t7/tY3GpT1uozbf2Xy6WUA8ih5mjv2JwuHfPQ+UnlaLQucfipDGBuuXg7RtuT qrA1KNFpbfs/IncnLvrn/EsG4q0pLMlgb5PKR2F9xxqoEXGsl4v9g6zjm4kn4R3Sa0cL yykbxtC7wVN3UnbQw4FoHdLAyzerp7DMAeXnEDxhUPilZu540Xi+73FEkH0N0bUlBl9s J9I7IVQb0EO0MoVNDyqjQYG2ynUi4Bkg3o3v6+XTBtR6W6rSeEiZjHxrfd6ihjkzRBvT QFIw3xqfBk504dsCAwEAAaMSMBAwDgYDVR0PAQH/BAQDAgUgMAsGCWCGSAFlAwQDEgOC DO4ACuThFpXr/+PvForeoyI5qhhoUK30v06eoV0ulhjN/34thyCGkqY6rkYdS/LgyjUN pYt3WhL5xXq9c5EA3bHLtxhErHsWimXJT00Lgb4wp1GUgGTl9wPHow+V3qjrVc6CKhNm kda+bx0bi7IBNZTJPe+ne5/4JinP3olZJ1+M8Um2tjCX+iVeo7tniB83aBP1eQZ9mbuk f21l97zMxeSneRAkouxFpS6V9XSZZ2t4EYKGolAZFLhEUqM1LeZ/um9dvJUg84QmFGjT q4B1wNvudPw+jZy7/Id1SYd2JlrsLmJJBkIWu6p8bJbFYJUjoOe72O8WF1qaxKqNiwT3 IsF8el+cHk9yJD3zWXBlK5uXaV6yfprIP/YB4Sgy7cEtU/yxK3rDEKaRFprIpGHGdG6y IqT3rCB76m/zr/SfLz1KPstZ0ghpvFm+IiovBH0jUqvEB39+5e9jaFC6YAanpxyEa0NX 72zcIBSM11yYfJbVFdDV6g0LTCmne0m+bRVJEhgHBiND9DYhJpdhAQ7c1C9GKVRDqE3r K4CItDv00ECCpcCeaS/c6tk6MtbmnDOC5jcP4qwgRroG6nX43SR1dADLiFXnOZCfom4I ruIFh4dDkn5VL2CQu9M+aDQ0b6buCWENxijpFbmbJQBfJ3BswVeeJNC68wHdg7U/KsGT tDRn38+kirKOtBg4Hdd6bXZr0t5m8wjLcRsbd9bo732RC0MUAXDAKBmpLNwh+PZMHr9X YSp5AoP2GR4vPtQ65a51z/HMOZHPJtPNRNUy16jZvKDBJ02DkO1ghSgxkyCMmrD2x0kr y0geSeYLH3NzSB4kHuHMCzPw7pMN+8iELQ0LkpU+7Vc8Anx6QbshJZ9rJtL97I6byNJn WCFugjNM6mow9s9QPaSiRCK20M4peJwpazKUHirSMxmy6AvV++umWPuphFokGm2cneGl 0dn4x5ukdOzTXnKIyW+ZdbLeIt6ONDP41qfSZzpl5I8hStMUtTFuGE3mWNnCxfJRpcfV 2bLsYifLEGrSrLB4thZvGjP05veD7hQ3q5kobwd3OEYeaISBcrI87J3QC7L77XpnhUF5 t1ws6saM12RhU9HLAf1qbzhyD1KOXwNIg6LaTKqDzaKPlds5sgpWhNaKpkXs5bwsWg5P /T2I9kesEq4KoFlni4s3rvGP7N9LIsL4jrOps/deQicRyEvO4VmdClVyHn/5ZaXvaAxS pHFEZxRT8D9uLKuHP35JC5usFoFawJh3oIoOEvBt4N4r0yLcCg58n7s4epxNu+XLL4sb S+YUNH38r/EHzh31oIbKf4DJ6BojToLKNXY1ETqJiB+dVtbGaocME27EsmcIJssR7bPx c/ajp56PP09NscTsdhCAmh2Q3ngrS1a5ffE/Hk1QX8HK/jQ3VR4WAaP2O9xO0ZbTY4xD k+221CBediJ5Qpw21OQ3y9iySP0HBaMewnj83bxBnIfp3Oe+hKFx9VVPlw0WudRDjUlF UnDPFftPAR4Iyq+JUAvZ3VsUSIPRiKngTd47VTv8HYxSgZ96EzL+HpnXftPdN3zggycY CRraxsr+ry7klvzfS95XSKx9uuJhJFmhW736PmBR8S7AJsf2OxhZT08giO4kEWr53zNz Cu3hWTvwYLqjok/D7ddiTXTu4VKW9vVIKBVKdMQ6WD5Cm+ZSefx9d9dn0cj8EUxixdPE qIOFpLliPtgEAhZpmiRtwc/PnMZbg8h0ErqDUSuPGym6mMdLhHB14f0qyymSxII6xCCV oXu6dtYaknU2JHx2I/SXeGXY67+X8fQXnmCVEddWAQTC2r+mzsSiYm3H/3JV5Nh/8KgL ktd9XTP4EIbHMEBmsHQ/psuDenSY7nNAkUgXXtzhT4f4M9Bt0X9j4NARzXTN7oSu7boK hqAuMnAXbm6wSfeC/TTVuoFtEMJVaVGHclt8DnS2HE5GmebV8fgIh4kXvzb8d8kHa163 mq2Wr5lCYgeunS44c/fStjCxc9eA2lG9GdJVsmlZ38jBr6PSB9cf7sWZqY611fs2W3BC UKGQd77S+YsJyoOaUl0+M2RtPdZNIJOLbtP5csmFcs8C6xIpahX61n5xMZ0pligQcWwr EP5zzv6GdisEqND8kyzfaqsmBbptfMBhvRyGzp/eEayq/2Xb6/JpaB06q1Vm3wsNYOlU DDdc7rF01qJxBJXTPlU+9UwbBFta017M1c+LczlltPAki6Qpd2F5RvgFdlegXCR49pqJ NYab3rmF9m23BMxrW3ViuZ7kN0wppFJkMDeuSPUx4NlfcEfxgmbKaHvmmn91lgAkxRGS kfG1cZTlKqxCK8Ea98M9TrV2/b2X0SyNgpiRql2nahSRtNLRV/kk0JHfaCqUlVzZiyZt cxQmLF4rKPFFHsXUnVLD+Zx7TY6aEluA6XQBpOntiUh2wN5LuTccw6ghcNslzi49rEHx L+dLKB5DKQBF/Ucr8rpa80ANu7pwcTIetSpDc82tSmUvOA9dLsrqsXVznzUvdNwl/gak 0o984HpenQY7+sKczjzyPSQeXEdJoriQX4HKKjvq0EBk3GM+Bp7yzuAW3d8CFdt6Rv8O DUCBg+MH+wOpoPFimc5v4ETpUtRPUuO6hmpprZ632kO3DJBKRcqBPW5YUAHzokcAM/UF Ounsworth, et al. Expires 7 May 2026 [Page 82] Internet-Draft Composite ML-KEM November 2025 a1hMPFr15pmZ3kRu01s/UamhPj906ey8pfg0aN8Uq/9lpJPh2KM1b0wS4LdnQ59Hv5lS /6ERHGFNj41HwL55WYAzlPa1PKdW85V3FU69hrZw5RuVN5QMu1j/pU3OuIScWxpX01LI Supw/AX7IXkSEKBujVwKh92miD4a3gSnv2obIwKokd7WlATaSwvNVPyAQ+UqhBv2cVUx P4u12UIm/ToindfPLVL+hBl5Sv0eOEgbyopWMXeUMYwJQuMrQQ0hmGY2aGiF6zEj7+KT HSFhkch7mGRMwf96cUVBJl5RMKZiRvcmXO+uZmajdBnYCDKQU7SJOGjFJmhe9ODJCcTd yjT+3AzmrD+hpOjcZ6y0jRSVYiFZ0VGcRlb471CnGlR9cjnw7Pok1Ip0x42T2Ed3c9eg +VGKoJECb8k28Akwmt9pHL19aYygwaeDLLC1sVyYh0VIfXIzQDdh4lPMummZkg3t/BIf 9BqCeN/5MXi7WifmxI4hEEpzl8OFTQPu2WHiBQTzofsGXLTVc5q3p3gjRo+yV3XsDOwR viP87w8182xy0nNmhnyIrPAf6ZzPn1cPY4p3B7K2uUnaaVzEv8m/ahv2nk2wKHCrBiNR xO4soK7RxO1DBUAsNsM1fnrRWmxRWCSTpSnOm5MEF4OgPQr1mEWe0EN2Ia7hfcyNP7tB Qg2fKu/fCS5HyD1Xx7iYfQxPa6+NOkH4ngPyQyK+3idk1PlyieKLO5K8cjwRgn9PFS0g Ogg+fFbPItnn2BoqDoIkWmLtBks64ytQ0luYnJdgYY9IevdZw6bqbQU8qn0ZKt7PA/M9 1612jL0Mju0QORUIYmh04KhgSuaqPssyN3e7VdQgBBsUs71rIk0PjgH9+uq5M55ra2fD xHli9sCwnZgqP9gC3Ws8hM6ppIovHV56CHPwiKKYHGB4wejv4D26icrS7ZpP2f8YNRmK wQkSJW6n5gF6NJNZDsHIQD4BLDTFg8CqeaOefob7MRipQaAq+mENUKjohHmvWr4EFXNp vGjv1yCTP94Fm77bGU+Cs6o5KjlhPrg4ri3xFRYO2XDnIckfbRBAZPGubmDSxWC+/Hzr kE6TnftdSTc3N1+I7wo6s26xL4T3Njr1FjSuUm8rOuxpuxZqagLU0EvzEusZuJ6yTo6r 9wCbH7ZCx1L7Cp68QxTBwCL+wFKf4A3sFpdz4u5xeTOS1GFdSOnAaf0BQlr7mu1HOlbH P/8JQhkJCaHiz9rseR9oKB4HXpK5whtUTl9+WbS0THJXujOfMukB0saot4P4BM7X1J/b W/vZN1jIgQKaJratAfd7OV2JXNnJfJXf2ErM37m+4RD3mJVRNvvqzqf4NSPRE+n3swvH cNuMWJXZKxyMP53jmzXhd039POtcnpSDzY7PUd0uE6y+/By6CpnbHcMDxfoKjg4VQ6gB ViUkG5VxX6e9e0X6PSeS/6Sckj0by36PnEb76jdzftckI5Vcel7EwFBsKeK3VKX9QlRv NMc9RUfkSyUfLCPusZgAcI5Mlrs6+C+zsZR4d88cdq363bCDB9bxhqGfOe6NlWAqq7a2 r3QUgtrjOX4EttwsTiqNrKXJjp6e5RF3h6BFQCrUqEwsl/6wFnh6Vb2WYiGEZQI4xYNS DGiah9ZJFdvwXtq5dNEUNYEtqX/9uX9tKiG6piIQMC5wr8jcNc4NOl1ldJ3xAbPySV6O 4+QDgJ7t/wAbTMne6BwfP1pwxwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwoPFBog", "dk": "fKy5erdoB/+0Ije6zAUlV3z3Az9LdAmD6m1TgXsdciauG7B3aW98u+sSWtHVX 0BiKWWN9c+nm1pY5b7WxgMDFg4BMIIBCgKCAQEAkkvzTz9rP+2L1gnE3HB+ROuGYBTdq ukcZep693Ow0DOR7Cjxvrv52FXc/C+RbW3v+1jcalPW6jNt/ZfLpZQDyKHmaO/YnC4d8 9D5SeVotC5x+KkMYG65eDtG25OqsDUo0Wlt+z8idycu+uf8SwbirSksyWBvk8pHYX3HG qgRcayXi/2DrOObiSfhHdJrRwvLKRvG0LvBU3dSdtDDgWgd0sDLN6unsMwB5ecQPGFQ+ KVm7njReL7vcUSQfQ3RtSUGX2wn0jshVBvQQ7QyhU0PKqNBgbbKdSLgGSDeje/r5dMG1 HpbqtJ4SJmMfGt93qKGOTNEG9NAUjDfGp8GTnTh2wIDAQABMIIEogIBAAKCAQEAkkvzT z9rP+2L1gnE3HB+ROuGYBTdqukcZep693Ow0DOR7Cjxvrv52FXc/C+RbW3v+1jcalPW6 jNt/ZfLpZQDyKHmaO/YnC4d89D5SeVotC5x+KkMYG65eDtG25OqsDUo0Wlt+z8idycu+ uf8SwbirSksyWBvk8pHYX3HGqgRcayXi/2DrOObiSfhHdJrRwvLKRvG0LvBU3dSdtDDg Wgd0sDLN6unsMwB5ecQPGFQ+KVm7njReL7vcUSQfQ3RtSUGX2wn0jshVBvQQ7QyhU0PK qNBgbbKdSLgGSDeje/r5dMG1HpbqtJ4SJmMfGt93qKGOTNEG9NAUjDfGp8GTnTh2wIDA QABAoIBAAHP3UtTaOc5gtWW+NBet79do21KXgNYMF2RpHuu/AA4J94+Xd3c5+C4pBoMq VlPoCGVr+LpQKNVYpg5xfA6NoU2fms5Kvw4y7fj75J/l3lBjXBlAMKGt/ulhym3WRImN mgRloJHj+e4L6o0eDjrYldaI31MK57B2Ax8yXdhoGEc5HudS/GRPUwBXYRKUJGj8Hj7V KJTv35SStOtby1Ak+189KOViu8WtlHI/S3OLw3jdHCRtoUivhu7IsboWuwI1uxwt+WdH YHP7F3zzKkGDX8o9JKylKl7QXft+6EoheljVlx3wlrSmIznQ7JImmhPSf68jsOSHy/XM 3gLlDBp4wECgYEAxQcj6DTZVEbozohMoS/fwp7m+Wmlmc3p5aFP3ez8tzGe2eeLi15RW UuarhEo4KDEJHaKNWHG9QQQDjjBmXcqhhjDYVauT6LZ9B1eNKlDyvFhAha/3AHk3Vxiw D9i0oFaA8tfIpdXMDWFSj/rwxfKbEiPqiRWw/9vs2bvg0h7txsCgYEAvhWigoGrTRVu+ yyZQJkhGDLcy/qQlELwdA1g/8Pk8kca9tHTQ65SYuGz4pgX0YxX1HALXxapGdC+ZVP65 6bZwnaHsGQptL7F50W7QuTSfwr69ytvKKQbeDnlopZo/Qk/sQHzIqK5vqLFfpJeWftiJ Ounsworth, et al. Expires 7 May 2026 [Page 83] Internet-Draft Composite ML-KEM November 2025 HmFTVVe9hKQjKBupkIkbEECgYBpdpD50pAiVHJ5Wuvpu76CZpwsFSjXUylICTi/CgOb6 6uj6BUB3NKegaGiWv0Of/99pRYFzPi6XhpaAndetjLE5Kxwhf14EyunR7ENby0ijGHox FSeZ0UiWDljvoofM64DKfEaivfYjk1ymRSRsUJhA9YitKDc+PXJiefa1gmi0QKBgC716 1swq+B0XiHBp+70pd9zmWbvdU6bpwoU0BUAEYzlkjzOI9KBu6rgNe/SQXgsovpB4B1S3 N4a2x7ve3pFl2DapbUnWcJkq0Hy0Uu6emKWlOABpAm3WW3/Z8MeQ7vX0Btr7uRsrVTyo 7YcdSDn4Rw/xXYQlFBYz8teS1fZ2WPBAoGASZ5GRwRl+FdLrk7OayLAmJW/ly33rbvnG BzKpC+NgGrTpcmz2oQly04KtejJP8mjca08cBvah/DbkZvubxN3aQ0aU3zS1EsGJ0viu GDjfe+sJvcy0M/D8uZECpdj5PEdjmybEOWY0KGGwwOUugo+KXKu+YUT/UgTIHNzf9h4T /I=", "dk_pkcs8": "MIIGDAIBADANBgtghkgBhvprUAUCSgSCBfZ8rLl6t2gH/7QiN7rMBSV XfPcDP0t0CYPqbVOBex1yJq4bsHdpb3y76xJa0dVfQGIpZY31z6ebWljlvtbGAwMWDgE wggEKAoIBAQCSS/NPP2s/7YvWCcTccH5E64ZgFN2q6Rxl6nr3c7DQM5HsKPG+u/nYVdz 8L5Ftbe/7WNxqU9bqM239l8ullAPIoeZo79icLh3z0PlJ5Wi0LnH4qQxgbrl4O0bbk6q wNSjRaW37PyJ3Jy765/xLBuKtKSzJYG+TykdhfccaqBFxrJeL/YOs45uJJ+Ed0mtHC8s pG8bQu8FTd1J20MOBaB3SwMs3q6ewzAHl5xA8YVD4pWbueNF4vu9xRJB9DdG1JQZfbCf SOyFUG9BDtDKFTQ8qo0GBtsp1IuAZIN6N7+vl0wbUeluq0nhImYx8a33eooY5M0Qb00B SMN8anwZOdOHbAgMBAAEwggSiAgEAAoIBAQCSS/NPP2s/7YvWCcTccH5E64ZgFN2q6Rx l6nr3c7DQM5HsKPG+u/nYVdz8L5Ftbe/7WNxqU9bqM239l8ullAPIoeZo79icLh3z0Pl J5Wi0LnH4qQxgbrl4O0bbk6qwNSjRaW37PyJ3Jy765/xLBuKtKSzJYG+TykdhfccaqBF xrJeL/YOs45uJJ+Ed0mtHC8spG8bQu8FTd1J20MOBaB3SwMs3q6ewzAHl5xA8YVD4pWb ueNF4vu9xRJB9DdG1JQZfbCfSOyFUG9BDtDKFTQ8qo0GBtsp1IuAZIN6N7+vl0wbUelu q0nhImYx8a33eooY5M0Qb00BSMN8anwZOdOHbAgMBAAECggEAAc/dS1No5zmC1Zb40F6 3v12jbUpeA1gwXZGke678ADgn3j5d3dzn4LikGgypWU+gIZWv4ulAo1VimDnF8Do2hTZ +azkq/DjLt+Pvkn+XeUGNcGUAwoa3+6WHKbdZEiY2aBGWgkeP57gvqjR4OOtiV1ojfUw rnsHYDHzJd2GgYRzke51L8ZE9TAFdhEpQkaPwePtUolO/flJK061vLUCT7Xz0o5WK7xa 2Ucj9Lc4vDeN0cJG2hSK+G7sixuha7AjW7HC35Z0dgc/sXfPMqQYNfyj0krKUqXtBd+3 7oSiF6WNWXHfCWtKYjOdDskiaaE9J/ryOw5IfL9czeAuUMGnjAQKBgQDFByPoNNlURuj OiEyhL9/Cnub5aaWZzenloU/d7Py3MZ7Z54uLXlFZS5quESjgoMQkdoo1Ycb1BBAOOMG ZdyqGGMNhVq5Potn0HV40qUPK8WECFr/cAeTdXGLAP2LSgVoDy18il1cwNYVKP+vDF8p sSI+qJFbD/2+zZu+DSHu3GwKBgQC+FaKCgatNFW77LJlAmSEYMtzL+pCUQvB0DWD/w+T yRxr20dNDrlJi4bPimBfRjFfUcAtfFqkZ0L5lU/rnptnCdoewZCm0vsXnRbtC5NJ/Cvr 3K28opBt4OeWilmj9CT+xAfMiorm+osV+kl5Z+2IkeYVNVV72EpCMoG6mQiRsQQKBgGl 2kPnSkCJUcnla6+m7voJmnCwVKNdTKUgJOL8KA5vrq6PoFQHc0p6BoaJa/Q5//32lFgX M+LpeGloCd162MsTkrHCF/XgTK6dHsQ1vLSKMYejEVJ5nRSJYOWO+ih8zrgMp8RqK99i OTXKZFJGxQmED1iK0oNz49cmJ59rWCaLRAoGALvXrWzCr4HReIcGn7vSl33OZZu91Tpu nChTQFQARjOWSPM4j0oG7quA179JBeCyi+kHgHVLc3hrbHu97ekWXYNqltSdZwmSrQfL RS7p6YpaU4AGkCbdZbf9nwx5Du9fQG2vu5GytVPKjthx1IOfhHD/FdhCUUFjPy15LV9n ZY8ECgYBJnkZHBGX4V0uuTs5rIsCYlb+XLfetu+cYHMqkL42AatOlybPahCXLTgq16Mk /yaNxrTxwG9qH8NuRm+5vE3dpDRpTfNLUSwYnS+K4YON976wm9zLQz8Py5kQKl2Pk8R2 ObJsQ5ZjQoYbDA5S6Cj4pcq75hRP9SBMgc3N/2HhP8g==", "c": "FZBX9d/zkZwZL6M04dQlC0OKk+x7NrRTPruOM7UEzYsL0gjIbmjX4zqiBC/QjF evrD5KrnQDr6bW2iSFfoVaSSmh4hfQCAcx1qsTSdd7CAz02oNlyyNguw0mv3cQgUaVkp b9GtTdtU0CTQyUL+R9MbRPLJ3qvGhBcwh4Q2J+6e2h5iJq+8oXJSySE+Qap6i0Bo8KQW Xyw3/qYZk3Mt2InFAk+T+9oOqbc84jwuMet313aKVG6xYuVLsh8NlJOzOb1WIZRjXBPU za/9V0qDefrdtyhk7f9eHPxIdqdd3qMLY3BMZv/amzcQ+0YvF7YRDi+HNDZ+4q0x3z1L Tsy324XSoUnhnEEo724OFhEoUlkFWZAbIuPmtbJdS8UViGjnZ0bbOTVoDi62hfg1qkOf WIs4Ve9MZn+FMJJdTD3YdLCZhIwjwF4vybRbocP9egFlCQj0oh+3IYZ48Gz2YOoxMsSG DBXlYGzp+DHy9qK/BQ+lZ6RjblHJSW0u1V5WtQEtv7cnkw2NXXXC21Ia2Y/odV6MMPq1 Ounsworth, et al. Expires 7 May 2026 [Page 84] Internet-Draft Composite ML-KEM November 2025 tIPsd9QbDxG0pTTnHpwNRnCKfuHD8PLmQ+AnQ9zuLOoiwUmERiYAIco6uPBRGzxfXbz0 a/g3SMKhntebBOxTTU/5o2XB9G70LTNeMiHvR9ycmFko/04IwgRjZxKTd2An3K4VGchP ePBEh5uw7WnCsOfvi3c8DmuzxEnt4KL+ECfTa1Imzp9Hd0vgy6xX/vd8k7T3teTmNmeS Kao06ksyXPMUz8WnHQ80n8J3mhl/kAgvAqa1SWvANWVHzLAViY9uNYpLZIGUZFm/a4ZD a3T4xZ6EW3H8QJVIbqNrK007TRTNmh7hm5swh2o1ZjXxcHv5JfPustuVMW8unaN8hl8C 17JtRVIYSN/mMd33Xv92lQ50OYLiJL/ArVyhJsCtFK7HVaCLQf52aAcWVaAuEfmVgczl tjp+9jn+wtca5+/ZbU1oqofSHX8S7tKEBwlVAIoy6rt9iJ4dUw1ayqHtNzJPHVEXqwqG 39xv9KT+n6RMYUn5sgYe0mx+Ep5X7krNh5z1yTfIkyb2ZC5+UUGiFYyY5lc48SZ+nX1N oXUmnnfzaTGMb9g5noNwcRORMJUxxMEBbnBeUN53BkFNKLHeZHf9RyXB0jnxF6471C5A 6XjRLrxFW4frTIUz+vc50kf65KzSdO2RCmGtjVdaWCDG5HNTN8C7dybFsPvySda4s+vQ lptpkE9QwXzDCZyBAETjjYq1PkcgDVLFBiS+GbwCFAIIUr1HQRwTW33Pf2EFY6NP1ty/ 1hKkZHqfxjjzAEbX+ZIBX81c8NCOVJqZCBCdqU+OfBhxHTL/9YGRZuwVWGLKFRcLXOyh fmhCA7AtVFzwyOvPvmvtg2sxuuUewHnVYUhJ5JL3P5TGDYSiGgcBhzy7PXQsnR/2vBBt zMlDFeY3sLPXu5nM3oBmLajiOB9xkSdMIS7OMS627xbmBQt/oI8CmMg4hhqdcUygV1QY vG+IhlU07NG8reEx+hhrmLR4UsH4NodxxWrZvnhSpuwQzzcVxuZiu6UUFOF7qROSjuFR j814s+uIhWhIbmXxgibb4pF2lExDFgPEoZsk5dQNpHeude7XDZqxZNplCwssrci/c/un hAot42lM6GPpOrhauLlwcUI6cdYHj5cWn+UusBeijEQ3aR1rJg4moOhzjdLoqc2vqKaP /juKRP5JmKApQgDNZmhKUo1oqiFd5T6HD4MEShsARos0b5pqDlm4qmMTQab/AYI1xrcf jSYEpPV2yMgsjZURZgHS/aKYsnl8Et", "k": "+bxx1JItI5McHNMohlB+3dL6ailTqdqohk/jXawrNjQ=" }, { "tcId": "id-MLKEM768-RSA3072-SHA3-256", "ek": "N+i9XiIMqEVXe7jA6RFdk8xHOBMJ8YhwZ5ZlG5CzWBOPEzYqDwqkJrjF+ggka vnNPVFy1eKWoYVRRzqqeKZLmJFJVkUKjfbOoQjHUxdwaNOg4CBdq2ZcmIFG7vrD4ByfS GpcBUZG4MqsinCbG4OyidZrT3S00+c8KEQJWRd2tMWDvhuuYqCF31Ia9LWHHaR+ZUUJY 5WHDjREGCVtNrW9xzOFOgisTpKNStwjadwJnlFo7/io03CeDMl2SBsxGsMXDtWmu+NZ9 4kXfWqlkmKMDLcObQaEU3LBSBFIdjPNJLR/bqnFvUOjqSG9g5KMwSyLz9oHbkQX1yJ47 Pc5iHh68AdndCqP6HfLhkIvkDg7/fGAUnGQ8KuiLowwPuIWtjtiG2gEUCnL50FWk/AaK tGd5hZpKEGxoSgB2BRYO5Czf5zAWhNqy5Ml0UuUpXFxs/geOJJW5wuMfsXPhaxOABB6X jWHNCeFgHY1tZMpy1kng6crQtJ3zCIZoZIMEJBKvOIT/DFGD+NjhDLHzAkYEqnHXox1y 2ZzZ9EJvQk1B7RAfFi8AFTNozwwbowSCxOxq0c8Knl0uliTlulMALpyaAnFOVZKI3FxN lsCczkKG7c2BGO6xDBArKeVdnQnkqXKzePHQUxwVaBtZiJWB9BSJjuMktJemjwIwDN6H KeRdzox/9CjSNshtAywC3JUq/RR9nZN3XpUp2GAFbJtonE8IbMtPXRldsUBcrCbimg8w uPJXEqzuiNoH1gk4gt/HLiPONRmUCPK1qdO4htnbNGRIXkjmuGK7OA2dnKs0bShx8GyH fgm7vu0G5KUtNyhLdO+mdCWtNBhEelbh3UdaLtaVxxiQMBy6xyhLQevuNWKtTNqlRooP Kw85JJB5fEZDgOAQcMp1IAzRjZdzWsARImAWSXKyNdhYuwbZHhmlsN38VyBjgAUTiYWY imutTBo73Z9g0EAa9t063xIvUmNQ5hAfdwjazirMXQqFVZUgpnK1IxvUVAPfkO6+fFn6 fAUhWa8ijYtX/g4MqQshMwT2QaVynZhvXQ8WgCIpUpIkOWIJCWOzDRzkEEZldOlPMute ktcnBMD98S1nnRW48XMGlIi4euXNDgrCaN8Psmc8mZe+pePnrBCOHqGA0YHhpaJBwiS3 jOXWyCBZ+y3/aqLE3kV1zoCi/E27Pe4iuqgK+QapXedhvoXZUivvfO7nQFzmGIBOdfEe UrOKjW782qE+OAr5XxA2oN9nYYPI0YmJweZQOJaB3eqVquL2DCwuSaG17pEDFaIsTCVj iEmKPNyfzyrk8eAIMRaGaQhw2yFMTqZJ/Km0fXMcYO+AqyhYtl6OFsjUjdLxLe5xHRkh DtZVUCbiNc6wKkFTdqYHzihzAylH2JregaAL7rH0CDIJ/MXNiMy1lAt1Gah0EEvHWRX6 dQAUmmAG0szFzRDzsZ1xTgDAP0n91lruUCQ8ZGaDiB5ZscofRY7VBCPF1GjkxsfEswM4 UVFdRZ0pISZMrQeH6pag2aSExVPY4AtRciMIFBvJkgLCiOVcI0urcBGSN4LxSDBB+wih /dxEJKcokrxX+CK78TfT7owggGKAoIBgQCo3FKxlkgXiOM3lajdnk7TdOZu+DPx4M16O DOWZI8bdf50jXmkepN5iIHGv+6vpBH7Q6Lbm97EARvG25CwkzVOcoZ0M4LJGq0Z4Zjcj Ounsworth, et al. Expires 7 May 2026 [Page 85] Internet-Draft Composite ML-KEM November 2025 T2qYX7jfHUYPEfFPE/58wMuuFPOWjBfGojiDSofwEwfJXpt3FcewMpbuXHLqYMlDximX QS04RZ8EnQg+FCwkEm4F9/ocy43k7VLGiUVa1bsodfZVIgbvTK2M9VHASzqws7JEKbA1 druvIIdqeuj75+u8H0KIeMsZujTAILPOjU+Ufy3ZL2Fv4785fq5uJxCqFYTa0g9YCfHW Blraie4kIJQimD4EDTyGXEtXTKyCzkh/baHoz06zC1O+tm/FYbCt2MFhfNd/1gl9TeH7 SE/S19Ly3xKoIcTAamaXRkXcnrSt7ctLKlgvilcfHTSuIqZJ54pNZJz3oW+CjUBN3jGR 0QxQ/n/CW1R05qw6Ic0LtYfpP+A43llsktgHUtKvLzVSJkxGZyVJ0f0mdVqMT7Kc6nHF l0CAwEAAQ==", "x5c": "MIIULDCCBymgAwIBAgIUWCKyog5k/jFqIDxUeAgoAT4XoRkwCwYJYIZIAWUD BAMSMD0xDTALBgNVBAoMBElFVEYxDjAMBgNVBAsMBUxBTVBTMRwwGgYDVQQDDBNDb21w b3NpdGUgTUwtS0VNIENBMB4XDTI1MTAzMTE1MzAzN1oXDTM1MTEwMTE1MzAzN1owRjEN MAsGA1UECgwESUVURjEOMAwGA1UECwwFTEFNUFMxJTAjBgNVBAMMHGlkLU1MS0VNNzY4 LVJTQTMwNzItU0hBMy0yNTYwggZCMA0GC2CGSAGG+mtQBQJLA4IGLwA36L1eIgyoRVd7 uMDpEV2TzEc4EwnxiHBnlmUbkLNYE48TNioPCqQmuMX6CCRq+c09UXLV4pahhVFHOqp4 pkuYkUlWRQqN9s6hCMdTF3Bo06DgIF2rZlyYgUbu+sPgHJ9IalwFRkbgyqyKcJsbg7KJ 1mtPdLTT5zwoRAlZF3a0xYO+G65ioIXfUhr0tYcdpH5lRQljlYcONEQYJW02tb3HM4U6 CKxOko1K3CNp3AmeUWjv+KjTcJ4MyXZIGzEawxcO1aa741n3iRd9aqWSYowMtw5tBoRT csFIEUh2M80ktH9uqcW9Q6OpIb2DkozBLIvP2gduRBfXInjs9zmIeHrwB2d0Ko/od8uG Qi+QODv98YBScZDwq6IujDA+4ha2O2IbaARQKcvnQVaT8Boq0Z3mFmkoQbGhKAHYFFg7 kLN/nMBaE2rLkyXRS5SlcXGz+B44klbnC4x+xc+FrE4AEHpeNYc0J4WAdjW1kynLWSeD pytC0nfMIhmhkgwQkEq84hP8MUYP42OEMsfMCRgSqcdejHXLZnNn0Qm9CTUHtEB8WLwA VM2jPDBujBILE7GrRzwqeXS6WJOW6UwAunJoCcU5VkojcXE2WwJzOQobtzYEY7rEMECs p5V2dCeSpcrN48dBTHBVoG1mIlYH0FImO4yS0l6aPAjAM3ocp5F3OjH/0KNI2yG0DLAL clSr9FH2dk3delSnYYAVsm2icTwhsy09dGV2xQFysJuKaDzC48lcSrO6I2gfWCTiC38c uI841GZQI8rWp07iG2ds0ZEheSOa4Yrs4DZ2cqzRtKHHwbId+Cbu+7QbkpS03KEt076Z 0Ja00GER6VuHdR1ou1pXHGJAwHLrHKEtB6+41Yq1M2qVGig8rDzkkkHl8RkOA4BBwynU gDNGNl3NawBEiYBZJcrI12Fi7BtkeGaWw3fxXIGOABROJhZiKa61MGjvdn2DQQBr23Tr fEi9SY1DmEB93CNrOKsxdCoVVlSCmcrUjG9RUA9+Q7r58Wfp8BSFZryKNi1f+DgypCyE zBPZBpXKdmG9dDxaAIilSkiQ5YgkJY7MNHOQQRmV06U8y616S1ycEwP3xLWedFbjxcwa UiLh65c0OCsJo3w+yZzyZl76l4+esEI4eoYDRgeGlokHCJLeM5dbIIFn7Lf9qosTeRXX OgKL8Tbs97iK6qAr5Bqld52G+hdlSK+987udAXOYYgE518R5Ss4qNbvzaoT44CvlfEDa g32dhg8jRiYnB5lA4loHd6pWq4vYMLC5JobXukQMVoixMJWOISYo83J/PKuTx4AgxFoZ pCHDbIUxOpkn8qbR9cxxg74CrKFi2Xo4WyNSN0vEt7nEdGSEO1lVQJuI1zrAqQVN2pgf OKHMDKUfYmt6BoAvusfQIMgn8xc2IzLWUC3UZqHQQS8dZFfp1ABSaYAbSzMXNEPOxnXF OAMA/Sf3WWu5QJDxkZoOIHlmxyh9FjtUEI8XUaOTGx8SzAzhRUV1FnSkhJkytB4fqlqD ZpITFU9jgC1FyIwgUG8mSAsKI5VwjS6twEZI3gvFIMEH7CKH93EQkpyiSvFf4IrvxN9P ujCCAYoCggGBAKjcUrGWSBeI4zeVqN2eTtN05m74M/HgzXo4M5Zkjxt1/nSNeaR6k3mI gca/7q+kEftDotub3sQBG8bbkLCTNU5yhnQzgskarRnhmNyNPaphfuN8dRg8R8U8T/nz Ay64U85aMF8aiOINKh/ATB8lem3cVx7Aylu5ccupgyUPGKZdBLThFnwSdCD4ULCQSbgX 3+hzLjeTtUsaJRVrVuyh19lUiBu9MrYz1UcBLOrCzskQpsDV2u68gh2p66Pvn67wfQoh 4yxm6NMAgs86NT5R/LdkvYW/jvzl+rm4nEKoVhNrSD1gJ8dYGWtqJ7iQglCKYPgQNPIZ cS1dMrILOSH9toejPTrMLU762b8VhsK3YwWF813/WCX1N4ftIT9LX0vLfEqghxMBqZpd GRdyetK3ty0sqWC+KVx8dNK4ipknnik1knPehb4KNQE3eMZHRDFD+f8JbVHTmrDohzQu 1h+k/4DjeWWyS2AdS0q8vNVImTEZnJUnR/SZ1WoxPspzqccWXQIDAQABoxIwEDAOBgNV HQ8BAf8EBAMCBSAwCwYJYIZIAWUDBAMSA4IM7gA0pEnfSc0qwOZEsgvSQVX5d2A0qXGk fLMrIsA5vBNp2Owt1/dmK8DwEVpm6W637JW9mmgcfm27DrJ0c6/mJ7elTOlOZ+/B4Lky WTv9R97nSrMYYN2y4i/0e+6K1JZK5Tyiwrel+zf6EblwMmbUb6ZqHc/JG92gEoIZI9Mw r5Ojpf3NQsJ12PNwnK0k26VnvJppHvWXZg8NMh4B9EPWq/qaJUAuJ+OcTXx9mcG6NoJa CWO1hFwwRAuxj2dKmLPXFk67xwhD+0DHR6JfIc+DyDh+3s4H6G8s1x9QNn65yECGf8cL Ounsworth, et al. Expires 7 May 2026 [Page 86] Internet-Draft Composite ML-KEM November 2025 m0SiMWrbty65QYqXc6g79i2zkKkXT62e0qbb/TMG34X+4W+t+dRWbhmxbXt5zkyjp1U6 ROj101ZKFj9+0+/mRnmWM5KqlxXzAZAucgkq9JSk7L7kqU+qF/bC25ECzi5R7HMbGdxv UkUixXkyhigFLlFDqXKXt17/Rayq46pSEBS9zpgaeIG8h87J83BnhY26+hCqZel6U48y WbdTHntCN6Yn4iCzH6ZmVwIeiCRktmchM/YfNYD/Lg9g3T4zlseFuM21qZNwbgmeZe0p KMCRdSj3U8Qm7VDKApbnWF2+J0nGixu/B32M0eM6Lhym2vYHdX8OZegO/uSZNrATKbNV FbRzhg3vVdDTrJQSCIKDrSmEnWFGn1M83T31s4N2XtoRrTJrsOkveSFmxnvDmYR4pExl hrsK6lUhA/T72osnpDpgvhvMbt09s+4W4a7qKj19iYOB6qK4OVbaG9B685b0flVuDgOP STkkJyyBaC7K8ovQx4keRwKXaLUap7oEphV4+zifkKbv5J9inv85/a13FPMSQ6bphaQP 7lt0gwOVeA0P2dbViwl+J3Kzr4Oe6N1Hd9KkY7EBpC9/JRDEhUdq+w6rNms8wWZhvzku cpko8SUhckvHvmN0DyDlVdNrGIxG7fBq0I4BvjXlyT3rX9QqG0y6Evk+j8ky+gIK5nNJ +/QAFlxvRwrdyxh8Q6UUlhSTn8Nys4YDcP2nrsz3w83mXy4tbfHPiJEQyBu0+HOnIf09 XzQuL1cJKKWmvD81csirlIMvRYNsX4Yf0y/IvFhLigRpEiYISzMjPP/4kKgflyo2ZB0E Wv3hQa4GnI0MW5/EOiVauiQDOW9Q+xnmv+UdZufG69sI0FYf3KsSP6azdRNzP5K7TtYn zOFVexlQCz3KuJ6+otC/NH5dpv0LbFtmsHCaxNi46N59Zvi9On8zTx3Sjy2SDwGiM9/A jtstM0jlQsy26KvGKe7zScoX5bw46gKyWa9YSFuz995CN7izYwjNFKcUGtw8Ya/tzFZK TlqobI6iQGA7NZe6pQyDomf+kibaBdLOlAQnOeWGbJP9ja7iWusqQrXx0Tk1/NErJWOb 2ckM9EdqxCbaW8SgTlBJAVPWFI/TeQT9Ba0u6KatCITnXytOxwB3HMr8oSjN8TD9NBdE da16eLrCmqu70VfMaw16RodRHjJYp/dyssLCsmLq/owX+7uNCZt3v+JdJbexDKL608kG BEi3dLVU2HPhlMDsrjLAcn1dcD+eLCiBv5L7CbjwLR4E9TxZ5SYUtFpL6n2ssyT8Y4Rx qF3624WUASKVs5KL7w2FgndjnSIlqA84oxWS7EKl46sTrHRnwzylgulvE8pORfwT0XZx dIOny4PYIA/Wg2/8OJ5jbCtSuaUEPk0cEyc3p51IGRhXV3VRmtfXcCC05Rc9Kwzl2kut XF7zz/KSbm7enUSfi1hBJlbpPSQjrW6I3cQ0I0PJYeJOYrB5wmWifsqjnrYV70vpg6ZO YJl7J3VbXoQ2LM6/z1XDEGj5yb5alZHjPR9ZEb762o4R5g14D+WNZB8zCwIqjql8k2wZ 3MKNPxdSt8c3sL9+Fd/Qh+ecCBITaJguQJKW2HLEnR04ZXdMtM8XGJadNZxLB20v7pGb x1UQUkCqcKjUkAP1leGlW2iC7U4ZWEzS+XZFqO/7QY6zYNAHsQlv5MlazE2iB60R8wKz 85Ra3ArVJpYOXF32cbkHlhIgDbl7hWRRj9Taf426gkOcCGlXcLhZ8tquCo6z7u8aQEOq 153d3OAMLyhnPC5P9LNBpKj1rBpEIbpkL29mQJlbguZavXzA6YSju9ppPIvxnN81bDpD 6vJtwJiP9BeRFL6OkQaE2C5k+lIY6bG5IA/DpTLv26QekrDHNxB++tFq2+bh+VGMit6d TSQpn3s3V/5vnFy3nO/eb7VvZRmBiV5llvFTfQSsM571H3sab6xgHzCiXoQZbshs0yoO DRKuDbY8TT63bqxRAZPNolI/vKz2DXvFjvnKher/rh+I0hNv9UOBG11kcf8Uo1PRFMJ2 qqBGrlQcnhvdECImeOUVN4ulU56Sq5mhU2G1D5hHSfevoM5TfjMZ/mbk3uSgnFQbbcXR KMFSLwjugOACbsWPpRb0tOyy7qFjOfKSjSO2hTzzQEzct9gusGofmQE8K83UIAgqsrrC 62l+zo2j+Kw+UAuECmCNSRlGB3GQlPfNgES9K3RDZGxGQes2LifBD+obHTG5liYu7O5P ULmrTSS93CknPmqeskDf3FAfwNqg9x9vYqw0/OZ4lkbu+Xr9rSCmXRGXgF1+VQCe+21R /LbalFe3YXyZqfsWBLDyi/8XEWDpY4jjY03bAknahvm1WSwjyHEC90y7xzLJ1YVxeH93 ZnMNp7ihJMxQbGbV/pJoc+4R8rKbDgL075idq+EGxwoUQkvS62GT3D53HA8rZwWpvGIB ka9xFByYlWGXxKTApJCdrNwqMDDqvU0jQCPb1gGRZwxaSomeeULNhttIc4vBw6bDIl1P 2Tf1/6OPqkR+ZpXFPkVkIFeZ+7bCXxS8Ebe9dTbuvFVG0FiBopBHG5tK3Ct+K0ae/4db tPUGoLZ/7iV/s0Ez3EWglI357x+HHsFc/Corap1+W/RH8bia2EDna6nyosHUalPGHGJL YfCd8gm9+Aeh2RUNGB7GFhrXzot7xUdh3u2+3p+y3iBYh6kz9kaNjyJ64IraF5nK3iqh htYLZbw3h3yAHQ+yUj35CJeoGJkJbYhuqvF2DB1Uvf3qeoTM7j0u6CCVclzHGxym7wuB ORi0l7/51/GLEGx15S/bUXMQ9/Jq4xfpxCCctSRcugO5/w7/OwOdMLdWUU/H3aBP9o97 cDYB6AYpOupC/pFwmFxor+dbdfaf7b9SSYhB9eww2Pc8KSYh3cscVHEV3qwZfDSjAcA8 N+NZ3ahbQffyvE66hjppREqy6fKE7ERuMZxRffTQjD02GsmCH2oPWNuWu+PdE8E/isNn KqIhvF9puHxqE9HaoX++g/M8/tkAMXStdZ79bO49eux7d3gjVqRFZDj1QzGW0yqIuC1N ymrfQPSpSVt90sk/un4pm8xMJckxjLU8DS7Yn70bnKIF3tkjAmAGFOhKVxMsBJAddhvl 3CoxO0ttRUnBv7dyHNrulaGMQgygT0aVb3ACI6mhz7dh/7sE6Fb7YtV1rqMlXRh8hayo dEzy+JfpMWwRYApzGYwPi2JpekrRbJbL6G/+S481qUb1LY5juX7zH9fZNPfkt0buqdpy Ounsworth, et al. Expires 7 May 2026 [Page 87] Internet-Draft Composite ML-KEM November 2025 +n1aesmj+b2Cbg/C1ywFbFZBip+tFSedYLyN2NWNJxd0Bxyi/UF2eAt40KjF9ODa8zJH t9s9XNW5Rgo9lbh1FmzH0pk+UPnRsdS7BPn3vDfGArtfQUS0uAJH/V+m1NOrrC+F54yA AktYS1/NkSNlBtmQOspfGSHem6nnO9K4jVNWUoflLwltKs7vBHJ76G+AlH2/sxqTZkvj Iulx/c4hvtUcbYuhouDmvb+xkczDddasH+nl+Feeq/AvKg3DhONWq7eDKt1Vu4rjmbjn M9JSeyq9tmyAdlZZ4J4aL4REgf9eDG+VpPyZM6dKoGPcDjqV+Syhauwj932PLF+zSa9l TUYniUgSxzA1zZozcTJ02Nao42ntdafctGAbGAvww3RCmnn/0GRR5eAD7EP4xFQzq682 J0vJC6PeDUSr5lpdRCmq2grDA+LWzh+0K44x8HYiYaV6dVuBBOE+Y6jNRTYWMrFFfIJV axdt5MewEurauJovHvgBfxga7Est0pCT6RyTaCJYLe3Dn+kHzMSXEY49R+e/nE/BctvF +KiOT3mcFaElVCf05HChU9ThNX+CM2Bk4HhQV5oM7eTqWcWrIHuZrvlNlYlc5507w+2S qRGiH2FkgxtZWw3wYaBBXFU7Rlfr41sAFTYqiERf0wjNCCBss3Xf5OM7VEhahRVZe9XW 3YM/F1m6u2Tc6xqyFlYRc+RYFphJAPS7uOAUda60uIDVTqgg74d59RnQPJOZsIodPuBP K6gB8t8dGOd+y2ZtqiZ0wPL+DkxmjcDm6SYyT2Fij5ri8jlHV2VmgFVgl77G4vX5BzlH p+b8AAAAAAAAAAAAAAAAAAAFDBUbIyk=", "dk": "xbgIH0U64jwBmyVe8f7QKaZ+BOBWQXT2g5MrUqE9yqIJdq0OC/MOdsaf37Wij hE85wNp1viosobd7MyHEkt2no4BMIIBigKCAYEAqNxSsZZIF4jjN5Wo3Z5O03Tmbvgz8 eDNejgzlmSPG3X+dI15pHqTeYiBxr/ur6QR+0Oi25vexAEbxtuQsJM1TnKGdDOCyRqtG eGY3I09qmF+43x1GDxHxTxP+fMDLrhTzlowXxqI4g0qH8BMHyV6bdxXHsDKW7lxy6mDJ Q8Ypl0EtOEWfBJ0IPhQsJBJuBff6HMuN5O1SxolFWtW7KHX2VSIG70ytjPVRwEs6sLOy RCmwNXa7ryCHanro++frvB9CiHjLGbo0wCCzzo1PlH8t2S9hb+O/OX6ubicQqhWE2tIP WAnx1gZa2onuJCCUIpg+BA08hlxLV0ysgs5If22h6M9OswtTvrZvxWGwrdjBYXzXf9YJ fU3h+0hP0tfS8t8SqCHEwGpml0ZF3J60re3LSypYL4pXHx00riKmSeeKTWSc96Fvgo1A Td4xkdEMUP5/wltUdOasOiHNC7WH6T/gON5ZbJLYB1LSry81UiZMRmclSdH9JnVajE+y nOpxxZdAgMBAAEwggbkAgEAAoIBgQCo3FKxlkgXiOM3lajdnk7TdOZu+DPx4M16ODOWZ I8bdf50jXmkepN5iIHGv+6vpBH7Q6Lbm97EARvG25CwkzVOcoZ0M4LJGq0Z4ZjcjT2qY X7jfHUYPEfFPE/58wMuuFPOWjBfGojiDSofwEwfJXpt3FcewMpbuXHLqYMlDximXQS04 RZ8EnQg+FCwkEm4F9/ocy43k7VLGiUVa1bsodfZVIgbvTK2M9VHASzqws7JEKbA1druv IIdqeuj75+u8H0KIeMsZujTAILPOjU+Ufy3ZL2Fv4785fq5uJxCqFYTa0g9YCfHWBlra ie4kIJQimD4EDTyGXEtXTKyCzkh/baHoz06zC1O+tm/FYbCt2MFhfNd/1gl9TeH7SE/S 19Ly3xKoIcTAamaXRkXcnrSt7ctLKlgvilcfHTSuIqZJ54pNZJz3oW+CjUBN3jGR0QxQ /n/CW1R05qw6Ic0LtYfpP+A43llsktgHUtKvLzVSJkxGZyVJ0f0mdVqMT7Kc6nHFl0CA wEAAQKCAYAtMhM8DvIqwmu2Y+s3rfiBJmfKycn1cmrszIAaP74B5pn9jiRBvsEcJUo+7 P4wqqRZcSf0yYpdQcKyffADItOAtKyCC4t00hwEslocpf0cTk4NCzG4E+JNyy/IwZ9Xc OSVdZQ+0DZU8psUtn5pU7mqD/CNfaJr3H21uiAs2haJ6Jmq5BgFi1bjwDKwn13r1RAMA lAbdgBvIodMbVdtrH++Xp6zdfdNxx/NimYAS7XXIQrQ0Cxx+6iD0ggM78T4qMsPjWpwx sso9MXbXufaekss5fiayZGyqwM0XnSxSZ13uPcdSeHKRB+2/f0YmQKjTo1zorEyewcgK 5JyXXdEnSqyxIwnaaJ8aMk1nwfwVgtO2jGKgqz6fvQ1pnKNXPswa4eOm8F24Zy9Fe5dO vx5JuBD7gzA8hz+1sS+Njzy0BSjFuMaEnAswENGwGZHYJDd+50fnANwH7GBkyWZKJMt/ BgG1VLXIFOn6GXzk5gwMk/Txu64nviDql6X6+Q8sqreYg0CgcEA0qQn1cMvj4NNqFUKO yMUqTCDWXkLZcTb1UvHdnYZyBndw5MZgi/ZGZcjWRniJnNCt84ehDerHdfyGK7UfBb4F YkamBa80fMon+fxS6IAnqWTuJ4j1zqG1tsZb180mzhdfA3/oZyRPRN9uQiw6Evaryh1A wv4qYcY7pdrTSBtlTAJG9dqgkpjb+8zRujuMFK7N3R4+lXXxoRlCerQJOb1q4Im9nXtG hdsHwj6jigLtCY/pnz6aPzofxyKYxdnKrPrAoHBAM049pL/nF7TSbpYfVGy5zENoeJWe SMm7lxDt81nMAA1g4uTtpl8HF8567blkZR7BSzUuEOGl/903lJJnZRd/XNaht7PvW3oA 1cwEkGf4+Y4PZoFqUdrID4HJ525hCW+EmoOa3EO4IuZrgDjKPAMtuZkDOrekpWRnMrpG 0/dsP3d9CkkiiXdraaJVTCTYgk5lohItnWn6lTCkjdecudbZRQhgWv+UO5LmxLegl9CS 2dID7/HKyqToAQpWnqrjsr01wKBwQCTQ0S+Q7lqgge22c1PTtVQ+6O419FKEvkGA/atM SARL1RFOQAqbj0/kNSbpGbhLs/EJQxcr3aoZKLS8teG8Z/7nmDDV5ImzfLm6IdfsyDvy R6fgZ/ZBwfiCkeb/1mN8zgYVMkVOZqosonA5PyZSv7WWliECsiL7PFXTPEteLBkDrMvj Ounsworth, et al. Expires 7 May 2026 [Page 88] Internet-Draft Composite ML-KEM November 2025 cje0hb22Kpmts5fZleRC5LQoVc7aLAi4NEoG3hBsbp/sC5VgW6LvAE/hWu5RMxXHyUKZ VY+F7wATwpHZoUCgcBGEKemglx5x3tJgsKubP0fsz7MzqcnCDijCX+sQgmSWLLjqXfTK Rtqq5S9ad1tKx8WMj4C1+X3EoiA4Z9KM1i/1G1tjtFmv6q8Tq4894DQbe0iM8Kanolwg /LTl631UNJqoSevftvM7ZgJt4SXiE+9kvUSDxFOvVshr7piZxbxZaDhlxcPXILX89VA8 2CqM54gQ2r/+mc3rwJKoxVpxbtZxyKvozEwWmHEbHFoYnLp/SFbYX1sWOBt60x3yzDCP BsCgcEAkCOXOGbptqU2n05LnR3GA2Jfqph0DYrawg2vYZwAQCJ4A6JzNPR/0heelNVEV /saVVKtMZoaKNrGIVDlLVpr4oO/boKFWE6e/2c0hAnqgxuRMkoDVlOBOYE6EX7tIC5Gd PJxHm3wNTvHv2aBCEwX7NOwI6qLC/KSFiV9KgH0L4OpODNk+XEw7pV6n0JNCREbfk+Dk NedYtqaKmeieENSTweooGoxtwHt71waUsmEfx8Cteo4lHnjK33MjPGb3+44", "dk_pkcs8": "MIIIzgIBADANBgtghkgBhvprUAUCSwSCCLjFuAgfRTriPAGbJV7x/tA ppn4E4FZBdPaDkytSoT3Kogl2rQ4L8w52xp/ftaKOETznA2nW+Kiyht3szIcSS3aejgE wggGKAoIBgQCo3FKxlkgXiOM3lajdnk7TdOZu+DPx4M16ODOWZI8bdf50jXmkepN5iIH Gv+6vpBH7Q6Lbm97EARvG25CwkzVOcoZ0M4LJGq0Z4ZjcjT2qYX7jfHUYPEfFPE/58wM uuFPOWjBfGojiDSofwEwfJXpt3FcewMpbuXHLqYMlDximXQS04RZ8EnQg+FCwkEm4F9/ ocy43k7VLGiUVa1bsodfZVIgbvTK2M9VHASzqws7JEKbA1druvIIdqeuj75+u8H0KIeM sZujTAILPOjU+Ufy3ZL2Fv4785fq5uJxCqFYTa0g9YCfHWBlraie4kIJQimD4EDTyGXE tXTKyCzkh/baHoz06zC1O+tm/FYbCt2MFhfNd/1gl9TeH7SE/S19Ly3xKoIcTAamaXRk XcnrSt7ctLKlgvilcfHTSuIqZJ54pNZJz3oW+CjUBN3jGR0QxQ/n/CW1R05qw6Ic0LtY fpP+A43llsktgHUtKvLzVSJkxGZyVJ0f0mdVqMT7Kc6nHFl0CAwEAATCCBuQCAQACggG BAKjcUrGWSBeI4zeVqN2eTtN05m74M/HgzXo4M5Zkjxt1/nSNeaR6k3mIgca/7q+kEft Dotub3sQBG8bbkLCTNU5yhnQzgskarRnhmNyNPaphfuN8dRg8R8U8T/nzAy64U85aMF8 aiOINKh/ATB8lem3cVx7Aylu5ccupgyUPGKZdBLThFnwSdCD4ULCQSbgX3+hzLjeTtUs aJRVrVuyh19lUiBu9MrYz1UcBLOrCzskQpsDV2u68gh2p66Pvn67wfQoh4yxm6NMAgs8 6NT5R/LdkvYW/jvzl+rm4nEKoVhNrSD1gJ8dYGWtqJ7iQglCKYPgQNPIZcS1dMrILOSH 9toejPTrMLU762b8VhsK3YwWF813/WCX1N4ftIT9LX0vLfEqghxMBqZpdGRdyetK3ty0 sqWC+KVx8dNK4ipknnik1knPehb4KNQE3eMZHRDFD+f8JbVHTmrDohzQu1h+k/4DjeWW yS2AdS0q8vNVImTEZnJUnR/SZ1WoxPspzqccWXQIDAQABAoIBgC0yEzwO8irCa7Zj6ze t+IEmZ8rJyfVyauzMgBo/vgHmmf2OJEG+wRwlSj7s/jCqpFlxJ/TJil1BwrJ98AMi04C 0rIILi3TSHASyWhyl/RxOTg0LMbgT4k3LL8jBn1dw5JV1lD7QNlTymxS2fmlTuaoP8I1 9omvcfbW6ICzaFonomarkGAWLVuPAMrCfXevVEAwCUBt2AG8ih0xtV22sf75enrN1903 HH82KZgBLtdchCtDQLHH7qIPSCAzvxPioyw+NanDGyyj0xdte59p6Syzl+JrJkbKrAzR edLFJnXe49x1J4cpEH7b9/RiZAqNOjXOisTJ7ByArknJdd0SdKrLEjCdponxoyTWfB/B WC07aMYqCrPp+9DWmco1c+zBrh46bwXbhnL0V7l06/Hkm4EPuDMDyHP7WxL42PPLQFKM W4xoScCzAQ0bAZkdgkN37nR+cA3AfsYGTJZkoky38GAbVUtcgU6foZfOTmDAyT9PG7ri e+IOqXpfr5Dyyqt5iDQKBwQDSpCfVwy+Pg02oVQo7IxSpMINZeQtlxNvVS8d2dhnIGd3 DkxmCL9kZlyNZGeImc0K3zh6EN6sd1/IYrtR8FvgViRqYFrzR8yif5/FLogCepZO4niP XOobW2xlvXzSbOF18Df+hnJE9E325CLDoS9qvKHUDC/iphxjul2tNIG2VMAkb12qCSmN v7zNG6O4wUrs3dHj6VdfGhGUJ6tAk5vWrgib2de0aF2wfCPqOKAu0Jj+mfPpo/Oh/HIp jF2cqs+sCgcEAzTj2kv+cXtNJulh9UbLnMQ2h4lZ5IybuXEO3zWcwADWDi5O2mXwcXzn rtuWRlHsFLNS4Q4aX/3TeUkmdlF39c1qG3s+9begDVzASQZ/j5jg9mgWpR2sgPgcnnbm EJb4Sag5rcQ7gi5muAOMo8Ay25mQM6t6SlZGcyukbT92w/d30KSSKJd2tpolVMJNiCTm WiEi2dafqVMKSN15y51tlFCGBa/5Q7kubEt6CX0JLZ0gPv8crKpOgBClaequOyvTXAoH BAJNDRL5DuWqCB7bZzU9O1VD7o7jX0UoS+QYD9q0xIBEvVEU5ACpuPT+Q1JukZuEuz8Q lDFyvdqhkotLy14bxn/ueYMNXkibN8uboh1+zIO/JHp+Bn9kHB+IKR5v/WY3zOBhUyRU 5mqiyicDk/JlK/tZaWIQKyIvs8VdM8S14sGQOsy+NyN7SFvbYqma2zl9mV5ELktChVzt osCLg0SgbeEGxun+wLlWBbou8AT+Fa7lEzFcfJQplVj4XvABPCkdmhQKBwEYQp6aCXHn He0mCwq5s/R+zPszOpycIOKMJf6xCCZJYsuOpd9MpG2qrlL1p3W0rHxYyPgLX5fcSiID hn0ozWL/UbW2O0Wa/qrxOrjz3gNBt7SIzwpqeiXCD8tOXrfVQ0mqhJ69+28ztmAm3hJe Ounsworth, et al. Expires 7 May 2026 [Page 89] Internet-Draft Composite ML-KEM November 2025 IT72S9RIPEU69WyGvumJnFvFloOGXFw9cgtfz1UDzYKozniBDav/6ZzevAkqjFWnFu1n HIq+jMTBaYcRscWhicun9IVthfWxY4G3rTHfLMMI8GwKBwQCQI5c4Zum2pTafTkudHcY DYl+qmHQNitrCDa9hnABAIngDonM09H/SF56U1URX+xpVUq0xmhoo2sYhUOUtWmvig79 ugoVYTp7/ZzSECeqDG5EySgNWU4E5gToRfu0gLkZ08nEebfA1O8e/ZoEITBfs07Ajqos L8pIWJX0qAfQvg6k4M2T5cTDulXqfQk0JERt+T4OQ151i2poqZ6J4Q1JPB6igajG3Ae3 vXBpSyYR/HwK16jiUeeMrfcyM8Zvf7jg=", "c": "FfduBtfq6jawJMyfNjqViQ5xBAfqT+Zp4behM28eqOAC0KyvuLGs96xjxr+Fyg D7mDHfXR4JjLnn4zsAJ5h4BDQaRHzBijJl39gYhqNOD1szTVWdkQSrRHozlLP546lmjx ZWjerT0B4VhvhQ0n3BdhYHZrMkZ3mLUhsjNgbXcKPMj03DKGMkk+NeQIyfGjt10JBpOd zI8BnY0e8TIN/LJpjEj/7v69bl2iLdUbsPY0QuiDz4mQzSViMHruSM5RaLPBfbJUW0K0 utoC4EHQdAlKYzvzSD6DI4aC0s2YfOEyCQoiMwxHTal8PgWiAlIttSfAVTFnLWVZdIUi pdXQP1CeG0lych20HfeleLI9lwgZ3GmuXgCnBvkdCadLouxz47ZFuCHyw8enINbSIyLR leEjmNPA9VxwEVAJQiUwXVmcBW93rH94mbyNc1AqtBqVSbRZ69j1yECRq/Ac7D0RREgZ mO0DTlVU2yyRB9fgWxiGnGw8iT21Maq1KADZHOfvCU6HLA/ILTa+2y3yAY4mJcakITcD OI3HQ+M6jOnchwFp3xWb/3NrhyCIpMtPa5IbyFyExgdXH+y2SkxQnGr5Vj5i0tSlDyq1 Tdmpj+UWezTCKxM2s3mxoRZa2wryILI0kfM5pCv0Ev/xOC45jgs2Ep+l1cSxr6h80nNg zOpiZvgUcK8djRsqv41i9PAqJas8t1lXhzwMthT66f3cRsirtGUqcYWjF8d+RnSbcEDt O1t7pmLOwlMXTQs+ZbpDleglIlZfZt51ClIwR2ld32L2wO0O4+IrxxiXsKC9H+fmuuc9 d/2fGi8FKyCMoo8yhZjnSaRXayyUWvM52PfZBVlGJikbb5cOj1RyfGhUK2OqFbgJFcdi 34yjBz7obuFbpvMv1qO1h8qhXir4f0rkLwQMs2iIKUFqjO45D8QYaJri+zzPm+UZeARe QRBeXt6GXYRsNzz7mFr5Vy7seae4cLfGTQ8XnYeKarn1Vb8W4ue2e9vHQc8PdN1rgpa8 PbGgtxyVohbYYobQ6qV921ZK8P5oHU/aGL/b/SV+ybanUr9i8dPudefT5+Ry5uXnht5e +375S/+Q19qBMyT+OAx0gP+VH1Vs877PeFTHT7WkqAkQU5NUaa0yBp5TYYdaz5+s3KeE XEF6uZeggRkZdZ9kr/hM+H9O376Ys1p1pek/euRHii9yflFZe38mqV4wiQ4R1hSdAHM5 8nS0UlANjwqGCfx3r6+v2Z10kvp5sjXYpgvI/5E7Jmt7eh6HOKJcYnk3QQ2Cu8wa4Ol5 xiOJ6caxLFID6wHC1nn+kBonlcS8lfvwdm1HiK6D59tHD/4Q4VMT5xw8MZg81JvrDjJR PzYCh9MrAf0ZuHtXgDSGbFaNPNtP5AisL0xSk3za6tV4a2cBCTjhJYHhpJnnjPePkCtG CrYA6KsHDgNgZ9xPMMvDP+56NWOudA8fO0DlEMKr/Ngwrz9+Ij6PYHxQzbVVgMD1QpJU h00LPZeDtVKH3JRAd2NF7FLetaDLQ8ZYswnO0Fttbdxdk/0GTV6IY9l1/kqMitEZ+mFG p2cEwULBmiARSzE/SmPwSxBBm1ZY3uHXBSgW0zaQHY+7qmKM0bhYeMPOam+IJ+auWSnI WVxICCNa3WEDdN3kFL5SFjQBDcqmB0gOFH7HW0rO3w7/vPPKVWHjPnjdD4wzSdM/Zc4s Jh1+FJxckwrDV7If/nK+6AxnX6+qrYdAqFweNuepbS4qf543qFI/ynWwBU/bTuzWAh52 4eoYSdqMC98uTy0WzWgDahP53b+L0xrvD1laLsgiDPGDFwN3FQqwYmbRCwN5zVvpZsWR 9rCWt7NtDOvAlKU5fmy00y8O9svnCeLqOrGryFr6zc9vnwS6mbwxCepLUCLWg47C5mth 9UQXhIVre8UwvSBekHhCTgI4YHKGFwxA/MyiBtIPua2gQL/r09T9RtjFRFFc9YmRk=", "k": "flvh/1AnY1+NTLk8xhqei/TPjZv8Nyr9/VtOsUw4EzE=" }, { "tcId": "id-MLKEM768-RSA4096-SHA3-256", "ek": "NAaqVVqGlJvC00KmVla6c5oDWVQHmFJxOJOea0eKceoWdEUmYHOAQMtpmEN0C RO7SYsixTLDV7SQqqdyfFtnPUINfQs7oPK8RtWMYNCpNJJX7HKLI0YZ6xk78rl0+4Kmv bVCmgVUX2sM0Kioi+gxdzREX2KVyZqgeedxPiA05oySWYCABKUzC6fPf8PMS+eqsoSax EyozpGE/UM/XQawS2iK51c2jZJRuPaqlhJWH7hZTTJ3XvxS4COYzGCtr8Sjz6YxndM7b 5St/HsWlTXFQsBl+wFqhNkcenNOzGjKLvCWGdV+QkNVXDpIM+KjJJukO+hXS9SUEiif4 VVYGHqNsOXEcHc9KcrMLCHHqCRUNyRNxGN2kogTC1qDbDc7FYghBnZcFrsNCmCAkVVyK XUCt4yklvQBY2IqeUJ2hGpFB9zLfEdIVVguLJFyXUUi+ORFxKyz5wpzxeTHjqWpP+mpF UOF6AKLCYoxCFRwNlHGLURoNtE0y9pW1dMKX8w/AMiphvxjp9Fa1QNVJBKsFwNTIXpQ8 0web6uULPtwwmp4dLUy3BG1nCmwKzSX14VzYfNTgLOJMlm5vgAHKNufDKJJ2ltpttefH Ounsworth, et al. Expires 7 May 2026 [Page 90] Internet-Draft Composite ML-KEM November 2025 kongDKQo4OCmlqLG9cYjolIMXQEc/sf0cOP/8U/RvMrZNtLRXC7VgYuRxp2LwxMlseiu ZYktSi6p2it+XsnR1s5UVs5cqiGAnaUumIO4Kx96AI/SbHDxLWTADVTC2vBcIPACAKXz 9QqGENR4ohAuMccw0l3uheSU0Zk7um/prgCLeZrZ+OM4+VuB9Rw3ROLUTU/8+xcbYDMd lWaLKAYthgfx8UPI4B58sImFUsCrdt5Tfinj+AwgkcwfOZVeWJcb3TIXUihOYo8xHilJ 4PIV6kgF+thETZBZdu26bRdv4DKPhATfpJjMWlpfld4pIx3DWsz9PHL2qXLgZxX4RWqG DJF7bRmF4PH58Cg5QG02KZkcRWVufdHuuYwiAdGg0aqJWVCOkaxtnYBF/fF9lBKBfp8Q iWfsVaDLTtKC3WXrbnJCBiApIDFaBMvCvySXtxIt5tF9prAaHolMrFQA3FeAwh71aE+z DxdX4md6nt3TJW8HIsWutGq1UJEqBfHFNCHyMKozXNQFhqgeMtjNcZdqpBzy+an8zQVZ 6J21rShMNPOgkqk3flftXerATWvmFp3ubzIwbw/2NwmI5RmR0dKc4JRVKMwDXR5VuOT1 dCWzLG4nIx4Rld3r0VDtVhDrpqtyXKgAuSYUQuAM5qbkNYDQ8B0+yAhTFKmN6GvxGVZ+ TEZsLVUK7TBq7Nm6edN3TkHo+ubZdRomQm0LeYdUfycW0KdG5SQulkqE2EpWbWTQmtnn Sg5Rltu4SNuhKwJ+QoQc0ZdELCknTSkIchDmJZcRRsTvbCjnYkf4eFJ/Bg35nSLZwSCP NAhjclJkwMataIPYqe6n0hEmDm4dYW+JKMs8+MpwDk2vHGZrTFkLFQnQrxz6RzKoHfEa OgqVNQmsqyX7tsHr3yOUkZyR7JFxQgFC/MlZnF12uVYKzKx7BVp2bsFLsxcQM9ZtFr3U nFER11znfa2ACKvTW0sT1MwggIKAoICAQCZ3BRd/efPVT4rbNPoZ9MTVWIdEHad34JC5 GLpin/9+/scZy6wwthpN/BaKUUnVOiA6yhgY8q1O1qZLNY0uvjkr7tRGfhaNuCOmhaHR YY/l00unP6SJRYwJqLsa/bKrut/VAr6zAzNr8UZhOwobdWhDGV2ASsJyz6c1239A/EjW oJ1RX0Pmub/wKZMI/WdbpaCf6GRsULIIDu+24xSX/3lnxtzFGjx0Gi486lv9Tnfyyzqt DseqjmdEHnbNV8T6zCJ43PD5LeLqURBeFdxPyWQJaCATjcLrl+ZUT1FiD+aL8M8zt0q3 v1sopxC76xVL7tqt2ce9PMJAddnN9ixNoFH7hPpYlGYIRmUkRsbX8YKXmufwy/gbk1Dd CCmzARoO6VGz8csOigv4s5++iNLG/ZYwUZBzxB32+hsHXquZoe6RIdvi8s4fZOYNZnDs 1mQR6aBU+VL2jF5N30bCJhOqN5QCCYPNFVnNPDzgKpJGa/ayyDIRbSDIceHyFlF3K/Rx wniSIQnRU9a6rQK4HwVzoPKwRj9y/rNvd5BVdDgSkuLVfe8bKpAxg+fx7K3pkXrdaCce c4NPTzVwD2plUGsgQxYtVQIlVKUOu7Eg3wFnyTX7r3QAxzUm7Hl7Mpj7fLrEZmJdHLLz buF8/aG0KPXfHUynnl/4XpOnQmQUFhSnFFZ6QIDAQAB", "x5c": "MIIUrDCCB6mgAwIBAgIUUvNnFgblQf0H4CGS36FsHERX5xUwCwYJYIZIAWUD BAMSMD0xDTALBgNVBAoMBElFVEYxDjAMBgNVBAsMBUxBTVBTMRwwGgYDVQQDDBNDb21w b3NpdGUgTUwtS0VNIENBMB4XDTI1MTAzMTE1MzAzOFoXDTM1MTEwMTE1MzAzOFowRjEN MAsGA1UECgwESUVURjEOMAwGA1UECwwFTEFNUFMxJTAjBgNVBAMMHGlkLU1MS0VNNzY4 LVJTQTQwOTYtU0hBMy0yNTYwggbCMA0GC2CGSAGG+mtQBQJMA4IGrwA0BqpVWoaUm8LT QqZWVrpzmgNZVAeYUnE4k55rR4px6hZ0RSZgc4BAy2mYQ3QJE7tJiyLFMsNXtJCqp3J8 W2c9Qg19Czug8rxG1Yxg0Kk0klfscosjRhnrGTvyuXT7gqa9tUKaBVRfawzQqKiL6DF3 NERfYpXJmqB553E+IDTmjJJZgIAEpTMLp89/w8xL56qyhJrETKjOkYT9Qz9dBrBLaIrn VzaNklG49qqWElYfuFlNMnde/FLgI5jMYK2vxKPPpjGd0ztvlK38exaVNcVCwGX7AWqE 2Rx6c07MaMou8JYZ1X5CQ1VcOkgz4qMkm6Q76FdL1JQSKJ/hVVgYeo2w5cRwdz0pysws IceoJFQ3JE3EY3aSiBMLWoNsNzsViCEGdlwWuw0KYICRVXIpdQK3jKSW9AFjYip5QnaE akUH3Mt8R0hVWC4skXJdRSL45EXErLPnCnPF5MeOpak/6akVQ4XoAosJijEIVHA2UcYt RGg20TTL2lbV0wpfzD8AyKmG/GOn0VrVA1UkEqwXA1MhelDzTB5vq5Qs+3DCanh0tTLc EbWcKbArNJfXhXNh81OAs4kyWbm+AAco258MoknaW2m2158eSieAMpCjg4KaWosb1xiO iUgxdARz+x/Rw4//xT9G8ytk20tFcLtWBi5HGnYvDEyWx6K5liS1KLqnaK35eydHWzlR WzlyqIYCdpS6Yg7grH3oAj9JscPEtZMANVMLa8Fwg8AIApfP1CoYQ1HiiEC4xxzDSXe6 F5JTRmTu6b+muAIt5mtn44zj5W4H1HDdE4tRNT/z7FxtgMx2VZosoBi2GB/HxQ8jgHny wiYVSwKt23lN+KeP4DCCRzB85lV5YlxvdMhdSKE5ijzEeKUng8hXqSAX62ERNkFl27bp tF2/gMo+EBN+kmMxaWl+V3ikjHcNazP08cvapcuBnFfhFaoYMkXttGYXg8fnwKDlAbTY pmRxFZW590e65jCIB0aDRqolZUI6RrG2dgEX98X2UEoF+nxCJZ+xVoMtO0oLdZetuckI GICkgMVoEy8K/JJe3Ei3m0X2msBoeiUysVADcV4DCHvVoT7MPF1fiZ3qe3dMlbwcixa6 0arVQkSoF8cU0IfIwqjNc1AWGqB4y2M1xl2qkHPL5qfzNBVnonbWtKEw086CSqTd+V+1 d6sBNa+YWne5vMjBvD/Y3CYjlGZHR0pzglFUozANdHlW45PV0JbMsbicjHhGV3evRUO1 Ounsworth, et al. Expires 7 May 2026 [Page 91] Internet-Draft Composite ML-KEM November 2025 WEOumq3JcqAC5JhRC4AzmpuQ1gNDwHT7ICFMUqY3oa/EZVn5MRmwtVQrtMGrs2bp503d OQej65tl1GiZCbQt5h1R/JxbQp0blJC6WSoTYSlZtZNCa2edKDlGW27hI26ErAn5ChBz Rl0QsKSdNKQhyEOYllxFGxO9sKOdiR/h4Un8GDfmdItnBII80CGNyUmTAxq1og9ip7qf SESYObh1hb4koyzz4ynAOTa8cZmtMWQsVCdCvHPpHMqgd8Ro6CpU1CayrJfu2wevfI5S RnJHskXFCAUL8yVmcXXa5VgrMrHsFWnZuwUuzFxAz1m0WvdScURHXXOd9rYAIq9NbSxP UzCCAgoCggIBAJncFF39589VPits0+hn0xNVYh0Qdp3fgkLkYumKf/37+xxnLrDC2Gk3 8FopRSdU6IDrKGBjyrU7Wpks1jS6+OSvu1EZ+Fo24I6aFodFhj+XTS6c/pIlFjAmouxr 9squ639UCvrMDM2vxRmE7Cht1aEMZXYBKwnLPpzXbf0D8SNagnVFfQ+a5v/Apkwj9Z1u loJ/oZGxQsggO77bjFJf/eWfG3MUaPHQaLjzqW/1Od/LLOq0Ox6qOZ0Qeds1XxPrMInj c8Pkt4upREF4V3E/JZAloIBONwuuX5lRPUWIP5ovwzzO3Sre/WyinELvrFUvu2q3Zx70 8wkB12c32LE2gUfuE+liUZghGZSRGxtfxgpea5/DL+BuTUN0IKbMBGg7pUbPxyw6KC/i zn76I0sb9ljBRkHPEHfb6Gwdeq5mh7pEh2+Lyzh9k5g1mcOzWZBHpoFT5UvaMXk3fRsI mE6o3lAIJg80VWc08POAqkkZr9rLIMhFtIMhx4fIWUXcr9HHCeJIhCdFT1rqtArgfBXO g8rBGP3L+s293kFV0OBKS4tV97xsqkDGD5/HsremRet1oJx5zg09PNXAPamVQayBDFi1 VAiVUpQ67sSDfAWfJNfuvdADHNSbseXsymPt8usRmYl0csvNu4Xz9obQo9d8dTKeeX/h ek6dCZBQWFKcUVnpAgMBAAGjEjAQMA4GA1UdDwEB/wQEAwIFIDALBglghkgBZQMEAxID ggzuAKdROXA2St3ow4h4w9t+9WiDh6APtOd4fkxB5ZIrkKO9BHdXojpM9CSanVUhvBHF w6h8rKYCYUogyznIWcT16E+tvtZWgOFEGjDjo1pGCw6Gnq70XI/5+r8lumt6FkD8cSMy fD/jxgF97nRo1AARVoq3Zfy1DrOV9BYYd4fee7NTgLS4YxLcbaFsHXTcNY3Toj7A65bG fLUlMH77qTZOJuhI3UIyx9/SKw3Q/2uz4F9rm5TP0PBiGHtaAmdzr6aWqonleMzUm/8e RIGg9hYEt/t+D8PDOz4woRbplEFE48S265PGWOdyuPAG+GsL/EeT+BRmxd23ZlOQjbdU 603eUHCiPxMLmrF8VWtB8RGsDo+NtweMCveNGU7lhkkMWBoCD68o1ME/rim8CBLJlMal hqm0qiJwLEgw3t8Mp6QxzpkgBdcCwotc9BmbQ8hDlkCE2oh6DdX8OFPDCOAuDZma8A4F 0wwUpxXyOOM8E46DjYYsemCMOgMvgxldEjcS5wHyMpMTh0HjssqI63gLcvyLdy0L1tIT 31C67lnH8xBu0BB03kqP2vJAQq95iS4KR2iVNWGevPIlZXmBr8FUo3dAl0f30jqTq1LC ub8bT+Klk7vkxeb7g1j25eAAWGkT0oLFlbBCJXaDBhj9IPuGj7G2/UAfNpqbZnPrBi0t uClowRQ332TExv+AY+1l7TEZAoZs2nuCYTpTpbh8wKpwpa0gAzwcJ93OpbNzVdKGUW6O ue8WP1Ah+p08Id3bV53U171IwmteBJbsY8z0XB85w455IDP1MywhhdICkZQSFr4QO8n1 CSRo9v1Q5v5WahgJgJQlmLBmD8SqQaZlA2qjne/h0XExMxWz41V0wFbLQ9QmzAoIF+m0 F62CnxtvUj4nzvR/yMUw8DPrNPKANNw9vfruEn3Zz+2r//s7TW3LKX+xoJkC5Anfw4Bu llZhsqGed8cMHJnLWy5PzIctKTOZhfwsmlCVJKfA6WZnwEkkynXAnRHo28V+03fVCm2T Ua9XUC1eFZV8QzoHVcmy5iB4cSnKgeFQwmChzxwRMBwNH0Ghu1rTZ5dHPWHltzHABejV yG6V4V30stDnWl5BceWSZJ7axfOUwH2Z+ofIhIvh+2wYNtaTHi37EkmRURDIKJ+O4wes 7mTSn2RmslFVLjWfNiZbiku5v/lmN0w14ndoqtTqXUYuVN9/KL8tV22prc5Wf+E0KqXY OFMpcQQN6Yn0yI4U1QJEIqRPt3ZW0ONaPBoSlj0dd5sDwShybgphWDgMpgT/hURylpla MbKsZsFzvQ4HAa2lGwigLBQv+u2UVUiMNWiC9UUe9KjkQefk5E26qfLxuf2oGOL724w2 pCj4ZasWq8RiPngyU8LXB6Q70M9Nr2Oc/nTYg0VxatosmYub9pdHSEzZm+84dAd+jFhn ngr6N+JzG9pPnVmRLpgHIrR+Ik2sweTJCxTvkh1dXdEr0d5ek0wdu7aZqvvWHA4NA089 HhHSM5zcE0V7XQE0g7Xw5zcPXNwGm4Li+LkPeHc4qA1ttGtIPmjeR3MA76E1GX2aok9u EoVbx2x4Qpw2w/x4FyFGp1XJpMpytMAxNeOvkm7NDQ7oR5FLdM0zDmvz1BjR08GtLwqQ fSXlmA5hSCrKqfo6hzRetyymxO5EdF+m6M3CBuYLYZPBZOrUxUUTcP9zL3LSgA8MkYWY 0Oqfq+N0WNJQjAWGuWQEpBnLKuCtBwa7S2r84bl60E5ETCbJMUa4eyVOOAVjVTbEU5yR b0yy1SPOpgcSpX8iW7ol+DBezQxs7EqBKJZmWEtdMjn0QiC0CjhtqTc2TNYNDAwkQEjA UFJO5kAsaPRRQok8MJkT/op3uQ4z27mJ8/05+k5drE1VFi8qqQOzNj10228JcrCguFKA ULAWLIPVjGdl9ERuRNn2ZKFF4vUviC1mZsnx3wsypQCmi6OOAJl9VcvWg9QjwqJBZwbi 2oGGlv+zSY6tS/Ouqv20etg9WdRY/I+GlBcATdUQ/bNsi3NXFl1RGW8/XnomRG3d3KtH MoLCJNdTGbcc2W3a1Fn5o24HoO9VVc6T1HFu+RdtvSJ1OC+wgdLSuwlRCewO1l33tZIM fN7DOx4HD1dzsVJoh1kZwJvH4Bgj3xk6Gokj5J7GiTY3cXL0GxT6/UpNxK3ptL5DuVih Ounsworth, et al. Expires 7 May 2026 [Page 92] Internet-Draft Composite ML-KEM November 2025 gMh6BUzQgMDZ9Y4YzGpIzsF4ZAJg3NG9+aHAE3QWFCcKVB3L7qbWIvLmhbl+zXnS9Ga2 bNFBfZdYmNq/6YcnXnA4t8BkdS447NpZgGtrzqHE7//TIwu1nx/lkkHnEv7CptTIAjLQ jpuSRL0cM4Cne3CKy3P9WIEYXteUa4oJM5iC/HOMW9j7TicZ9q4BIrqcBbOoFzhpVU9e BQvFJHmES5fxbEIesVQOAPrlvpQrhRw2whjnzbn28gLg3UUbIwnY8Y/lYEUc2p43qfDq q88mS7vZOHGUmWXwI2jUuPQzeZSw1dtFuwktZi/kFLQTM9vTpmZFk99qPRvBtmw8o6bG X/wZEJSLzIBrjSPAs+38vCp+hyU4NUmMfy2mWC7283aFUENP4Oq9j0Qm5Am+nFFERNPB gnUryvCp+C+JPjqwR+mI7TnKGjFnbmDr4l3I1WhRqTYqOAe0lzPJ9OzDYXPAnPYYSq3M wfN2cblqVot12UkL4paqSXCgHDunM2iz3AagqvIS2IhmtvO9KiO8WL7TEYQcYN0oxEJE kp5UMTOafEvWtaa/NY2CpwhGzLgfJd/PIQERRITpt1++H3xgvZhX05/2D4eC0bh8siTk Xbdze1lt8vvfsE/ZthwaqZsXhXtusuBYmKvAzMGimL2uKd747tVmjbiod0SbA3x3gNv/ 6zmxWk2QBXHaP0yWn/7PnQQ8Pv6x74oWVqYJEQLFB/iPOFuSi6dyY5v2tdngccZ1inTT O/L2lNsFW42PE5Mmko/0StswoJQfhJSBvSbllvcdXZ3xqmJTPPEJVI3EuV9fn/PvK/ff TZTvqaTEmP81512P3GQsgKjCs1eHPzYD0wWT5/xX3r55siurjJ4xLQSH1bM+BP9VTPmd Vg+fyX8y4r5mKWVNC9TI0z/OZ2LdTeion1ERqWPcGgXchnLrVuoCSjfiazbPFs3fYXql FYI7LeMIhxucYGwRGIrCFOcZTooRlVgN3Nju56ZFS89+IvzgFlUlUM2LDXsTg/hiGpKU JNiujH1/GwwIMvXvgygVcDztvU5D1/niJoH52Xnix8YumSQmtekr+Sn5N3bJpKuUHYP8 cJ7X7R0X0S26EVjJxuUwx9C1WOZTzZZrrEzKHm4dOurpLyMolVZSIey+OX1vF+SWbr+I rTH0O8eR7X9OnvjXRxSf+4LgF2YPRpzjMgzjT41r0ZEXQVrrTXxbdml2BfalLmv2re4V LANFYF7CC5m8jrcjpe/Qxd5kGlhy0fTVjCM7pKo7VQxlz+XNHBK8+Gjb2DVg5j2a6I/f sjqq78z2BZE3fFCps1fuxjEW5xT4E1tsTGrNLVJhepAzOsJsrH/cPv4jgAfFmC5MJmKO x8tX2iqPkhuFCThImHSHsgnjponBQ45wcSN9jlWP8kNhYMCDqdl+hFQCVSIb+nva/1+e sWZkL2iYfWB/FOywDLYdsQasj4ECPdIV2IEKdGClb/1LU4+TJMVvo/088X0SCgYpIrI/ 3SPuWd6Hx3ONm/dhsLNvKx09zPQdCd1uLF/hG7CZHX4sQRbGcbc3cS6v6SEb+2EeUR2B A+X0hNTWhPUAZTYMaz/cD23zrIGUlKhUHGOOLUM0oZeXJpkQIn+Cr+O3fFTPfprYGloQ Lr6JN2jv0ZddkQg3nREYescMzbhWWZKtsA3lGZUsT0r+qfZNJoxEn3OZ8dZgUjSTRV23 6yp4QfuTejL2n0ij1wBX/DG1RON6UylMLqRXYRvwB6qgDZamNGpB5+i5PmiEC1KFVP9H tKUI9+kLWSF+qx77NfklJC5t4JxQIYmS/btH/6XYHRLHFtFJ4S0eln+oHYjdNtm6wPVA ZjyM4ODTblhamd0m472sjCFOOuIHVJ98l2W0/m/P4Dy6ihj22jF0/1zgWj0vFiw17ggR wUpzFD62Cmw9tSSikHwdMk50GZPrYyuh419DE84iOCt13pi6eP0U3VF/gZje2Ntp55JB APWJh0a4pIhgogK5vGNtmQQc9HjwWQn2k59HDxL7B2eY6X6NLoh6SXgee9ez6rLTDViu 5lzfqgl9HA6rQ1Sp9byRabOU0LNIt5tIsswZgc8d5dbogvWSrsF/p/NfQst63HUxlF5n NtFQYfKykUfDm9wQO0Ecn3rLRBHNF8V5F5ut8QygHUAtpTmPUa54HyEiUVRYqgA6WIuT mKUVHChmfbgsLjV7mZ3K9Pc0o8PjCSpDX7bp+gAAAAAAAAAAAAAAAAAAAAcOFB0hKA== ", "dk": "XlMqJi/g3UUwwqq2jRNp6+vx6I8UzMDDVvneilBYX9rc6/ztHGTBhZUZ0Ko42 hjqkW8HTxxq7AOlmTmhQ/xi2w4CMIICCgKCAgEAmdwUXf3nz1U+K2zT6GfTE1ViHRB2n d+CQuRi6Yp//fv7HGcusMLYaTfwWilFJ1TogOsoYGPKtTtamSzWNLr45K+7URn4Wjbgj poWh0WGP5dNLpz+kiUWMCai7Gv2yq7rf1QK+swMza/FGYTsKG3VoQxldgErCcs+nNdt/ QPxI1qCdUV9D5rm/8CmTCP1nW6Wgn+hkbFCyCA7vtuMUl/95Z8bcxRo8dBouPOpb/U53 8ss6rQ7Hqo5nRB52zVfE+swieNzw+S3i6lEQXhXcT8lkCWggE43C65fmVE9RYg/mi/DP M7dKt79bKKcQu+sVS+7ardnHvTzCQHXZzfYsTaBR+4T6WJRmCEZlJEbG1/GCl5rn8Mv4 G5NQ3QgpswEaDulRs/HLDooL+LOfvojSxv2WMFGQc8Qd9vobB16rmaHukSHb4vLOH2Tm DWZw7NZkEemgVPlS9oxeTd9GwiYTqjeUAgmDzRVZzTw84CqSRmv2ssgyEW0gyHHh8hZR dyv0ccJ4kiEJ0VPWuq0CuB8Fc6DysEY/cv6zb3eQVXQ4EpLi1X3vGyqQMYPn8eyt6ZF6 3WgnHnODT081cA9qZVBrIEMWLVUCJVSlDruxIN8BZ8k1+690AMc1Jux5ezKY+3y6xGZi XRyy827hfP2htCj13x1Mp55f+F6Tp0JkFBYUpxRWekCAwEAATCCCSgCAQACggIBAJncF F39589VPits0+hn0xNVYh0Qdp3fgkLkYumKf/37+xxnLrDC2Gk38FopRSdU6IDrKGBjy rU7Wpks1jS6+OSvu1EZ+Fo24I6aFodFhj+XTS6c/pIlFjAmouxr9squ639UCvrMDM2vx Ounsworth, et al. Expires 7 May 2026 [Page 93] Internet-Draft Composite ML-KEM November 2025 RmE7Cht1aEMZXYBKwnLPpzXbf0D8SNagnVFfQ+a5v/Apkwj9Z1uloJ/oZGxQsggO77bj FJf/eWfG3MUaPHQaLjzqW/1Od/LLOq0Ox6qOZ0Qeds1XxPrMInjc8Pkt4upREF4V3E/J ZAloIBONwuuX5lRPUWIP5ovwzzO3Sre/WyinELvrFUvu2q3Zx708wkB12c32LE2gUfuE +liUZghGZSRGxtfxgpea5/DL+BuTUN0IKbMBGg7pUbPxyw6KC/izn76I0sb9ljBRkHPE Hfb6Gwdeq5mh7pEh2+Lyzh9k5g1mcOzWZBHpoFT5UvaMXk3fRsImE6o3lAIJg80VWc08 POAqkkZr9rLIMhFtIMhx4fIWUXcr9HHCeJIhCdFT1rqtArgfBXOg8rBGP3L+s293kFV0 OBKS4tV97xsqkDGD5/HsremRet1oJx5zg09PNXAPamVQayBDFi1VAiVUpQ67sSDfAWfJ NfuvdADHNSbseXsymPt8usRmYl0csvNu4Xz9obQo9d8dTKeeX/hek6dCZBQWFKcUVnpA gMBAAECggIABAm6nxzi0JY0I3+fsCHJcGB1Sr373vjWulq0Hdz8rvXGCWDL4Oe8Nka5k CQ1JGseDwQc8yqrT0ZXgl2i4Y9mqNnT2LUNx5BZJGT24mX4uAKIjAiixcMjafAZporO1 1Lv60+RWjOwwlUynxDWAdmgGbHxl79AGemzovokcNeBpKPjeKByP86Y8W1k7+qhr5gPa y1eWCyGzCnMZ53reN38E+KxHbwTZQVLOk9qyv1sn2r9qstAIfXlvTGJgS9NZ4BsrbHCg Amop4mxuOYnpVk66yWRqMxktXHGIIf5S7HfuXQ3c4kaVN21WPyLjVYs969hA9P8aNuU5 U+fD55vmXcMvYQWPY9o2AcKtz0fcJivEv4x/eig1wPIbHFMwWr+1u2vhunuUs8yMMFWm S76KHbnLW48jcmv3TdWMpPIqevWglx59lc1++3YWOiqpdQtYNfkEfHgXdYNcprruQ7Jm grJ6amXe9+utjBoAJIDbTJlnOJp7w49zxJDf2jSzqb1+BIPc1UaWC1iBFz36SJILh2va S8erCm1npEqGl/hNBh1VcSpP25OlSre7Go+O6Vj8ezgdrmoqQNAvjd6pSp6tyM45dEHh p+c1FQ44opifgyob30Xz1HMam8+dyoyo/ZanhMmkxHlxLkE8DhB1wjaLiLk2nqkv5P9q k0MDOcVzfxb94ECggEBANdq+solZ4JRO0G5rAgZ8O8eM50ncGFL3h9+R2DyNXMTpz/Mv vRxPuWfKg0VB/Am1kRhSO3gXg2bPwWymmmVhdDiNF6An+vvd88z23K8HuEMJFuUDSi76 kDw8F3w2ySGVaJHb0hPkE4R6JBGK3DAXLNFtYdryWFsfeRPbGpuqUZqfXjlnDv0OBAGi sROwHJuCdpTKnTTcoS6UOQYRxNqV7Y0TNBcHtMh4EIHHCdj9Ekh7oBltVHvm4NI3eOPz ii3lq3pZYV/u9kPp1AyZbbWaa7bRGdGifYVz7i+vd6e9AdvwRuYB0BZ3DGTfTQuDQvT+ uw72RvKluju8SwnQ6devR0CggEBALbYUJTWiyFZ3rE26MZ0x67bsgJ/j4L31jC8Kd+4n BUA3UL+e+4Mrcjj8USrhIBnRiWtmeK6Yo6vuBwP3IvECSRqd7pXOe8R2zBJje8rlFZkg i/vpoTqJiB4hfoI9wfsJx9ypf/hPp+y13BkO8BUzw6BjVvsQEoYHEx9bNRlBffDgLXFD Nz5PTNYDXoL70cFQIZY+8Ruwc3gu8In7rJ/1BI3g+sv2Rmc4xHHTsBukdeZh45WFdkuD PVi1tafxHTnDyMyudAz5VLOoOGSMUyM66QCCZVT4CFO7Z7wiVXKYCc9GT6I0KPB7NsVv 2MgNgnI5s296oguL49wD8p8giHnUj0CggEBAJRFkUtURZPAP840c4G8AUdE/Xe9Lq/5n XEF5TGIZVvI+kSCtCjiTc2VKUeJ40XcJX05jQ4WcgZhhhZw4bGs9kdZe3xUgj7OPCQFa JXngEWcquXR2ODhvxJmBLxUTTItuIGTM7iM8yGZV/7+HWZlMSk/4PvOJ/WDzH86X8A+X QsXvzdYq5nktjXpmtgV8IaS0PtSZRW2eMt8xrLJNxrZBnhmNTzxO1JNreMkq689MGaqE VSVLSGxj9Pkcr3wPJFwFCmuTW9/BRgZmysrFTGtEV8Gk2WWet1EFA7wUxYJSKRZuow4r z0O3O3Ou84PqHEsvjid1Qk4/3hjBuNCP2HTZs0CggEAJbNagiXukBTgtveUbX8cwTApd xxoMd/6ORhDJg8Bl88S0EJ6uS3CE370e21GJ9ejfhdaeIZn1fXjZ13Z4rOsEuclArYDi wjKgh1Yd60rq9iTg2DNm/BPpjhTn6eDkA2gT3qrQaRm7jTI+TKho1mZS+tog0CmTODFz Pu7mduurFSSUGht6440kUahmL2nO6SYllr4ppsTuOiSrkjfjcyPpKXvvGmkQQS5SSwoT 8M8rRDKA446eQpmv53+oEhXEKen1mEaMRTSPw293GTxZ1BTMgD9it29hACrPC9qkdbll pGhh+Rb6LgOp2nHiZ/VpJTZCikTl7q2McQwbVbY2jbBHQKCAQBFC/NTLHC4/niMBTqU0 dBvzTgA+FUcsfcZH9ItasmoP0fLxtCAXKRjjyC/0sQKDD29eDHwqJmNEAuhDgygNh+YA PnXmK7JxdZMwb3kKgFncYQ7k58O1LHhZHXh1HFJ5CCm8qlx0nAKx6IS1fGMswd8u6Sj9 xPX2me9RMlHeZmH9UGN5g5qHSDUuESxc1zzyIQ8Zm4foHQFaxpoAOX/d4OInDj/X/Md8 R4BrmfFvQzCuJrh5ogdgZxsuBySlM7AW8BsOQQYikmwkgRwA6BXDDOMN2aVuZcvzVWcc jkDUODo3s3+UvCkmQWMMFzvLgDIYMrHjoxyB9fsLH9cgytLrz6k", "dk_pkcs8": "MIILkgIBADANBgtghkgBhvprUAUCTASCC3xeUyomL+DdRTDCqraNE2n r6/HojxTMwMNW+d6KUFhf2tzr/O0cZMGFlRnQqjjaGOqRbwdPHGrsA6WZOaFD/GLbDgI wggIKAoICAQCZ3BRd/efPVT4rbNPoZ9MTVWIdEHad34JC5GLpin/9+/scZy6wwthpN/B aKUUnVOiA6yhgY8q1O1qZLNY0uvjkr7tRGfhaNuCOmhaHRYY/l00unP6SJRYwJqLsa/b Ounsworth, et al. Expires 7 May 2026 [Page 94] Internet-Draft Composite ML-KEM November 2025 Krut/VAr6zAzNr8UZhOwobdWhDGV2ASsJyz6c1239A/EjWoJ1RX0Pmub/wKZMI/Wdbpa Cf6GRsULIIDu+24xSX/3lnxtzFGjx0Gi486lv9TnfyyzqtDseqjmdEHnbNV8T6zCJ43P D5LeLqURBeFdxPyWQJaCATjcLrl+ZUT1FiD+aL8M8zt0q3v1sopxC76xVL7tqt2ce9PM JAddnN9ixNoFH7hPpYlGYIRmUkRsbX8YKXmufwy/gbk1DdCCmzARoO6VGz8csOigv4s5 ++iNLG/ZYwUZBzxB32+hsHXquZoe6RIdvi8s4fZOYNZnDs1mQR6aBU+VL2jF5N30bCJh OqN5QCCYPNFVnNPDzgKpJGa/ayyDIRbSDIceHyFlF3K/RxwniSIQnRU9a6rQK4HwVzoP KwRj9y/rNvd5BVdDgSkuLVfe8bKpAxg+fx7K3pkXrdaCcec4NPTzVwD2plUGsgQxYtVQ IlVKUOu7Eg3wFnyTX7r3QAxzUm7Hl7Mpj7fLrEZmJdHLLzbuF8/aG0KPXfHUynnl/4Xp OnQmQUFhSnFFZ6QIDAQABMIIJKAIBAAKCAgEAmdwUXf3nz1U+K2zT6GfTE1ViHRB2nd+ CQuRi6Yp//fv7HGcusMLYaTfwWilFJ1TogOsoYGPKtTtamSzWNLr45K+7URn4Wjbgjpo Wh0WGP5dNLpz+kiUWMCai7Gv2yq7rf1QK+swMza/FGYTsKG3VoQxldgErCcs+nNdt/QP xI1qCdUV9D5rm/8CmTCP1nW6Wgn+hkbFCyCA7vtuMUl/95Z8bcxRo8dBouPOpb/U538s s6rQ7Hqo5nRB52zVfE+swieNzw+S3i6lEQXhXcT8lkCWggE43C65fmVE9RYg/mi/DPM7 dKt79bKKcQu+sVS+7ardnHvTzCQHXZzfYsTaBR+4T6WJRmCEZlJEbG1/GCl5rn8Mv4G5 NQ3QgpswEaDulRs/HLDooL+LOfvojSxv2WMFGQc8Qd9vobB16rmaHukSHb4vLOH2TmDW Zw7NZkEemgVPlS9oxeTd9GwiYTqjeUAgmDzRVZzTw84CqSRmv2ssgyEW0gyHHh8hZRdy v0ccJ4kiEJ0VPWuq0CuB8Fc6DysEY/cv6zb3eQVXQ4EpLi1X3vGyqQMYPn8eyt6ZF63W gnHnODT081cA9qZVBrIEMWLVUCJVSlDruxIN8BZ8k1+690AMc1Jux5ezKY+3y6xGZiXR yy827hfP2htCj13x1Mp55f+F6Tp0JkFBYUpxRWekCAwEAAQKCAgAECbqfHOLQljQjf5+ wIclwYHVKvfve+Na6WrQd3Pyu9cYJYMvg57w2RrmQJDUkax4PBBzzKqtPRleCXaLhj2a o2dPYtQ3HkFkkZPbiZfi4AoiMCKLFwyNp8Bmmis7XUu/rT5FaM7DCVTKfENYB2aAZsfG Xv0AZ6bOi+iRw14Gko+N4oHI/zpjxbWTv6qGvmA9rLV5YLIbMKcxnnet43fwT4rEdvBN lBUs6T2rK/Wyfav2qy0Ah9eW9MYmBL01ngGytscKACainibG45ielWTrrJZGozGS1ccY gh/lLsd+5dDdziRpU3bVY/IuNViz3r2ED0/xo25TlT58Pnm+Zdwy9hBY9j2jYBwq3PR9 wmK8S/jH96KDXA8hscUzBav7W7a+G6e5SzzIwwVaZLvooductbjyNya/dN1Yyk8ip69a CXHn2VzX77dhY6Kql1C1g1+QR8eBd1g1ymuu5DsmaCsnpqZd73662MGgAkgNtMmWc4mn vDj3PEkN/aNLOpvX4Eg9zVRpYLWIEXPfpIkguHa9pLx6sKbWekSoaX+E0GHVVxKk/bk6 VKt7saj47pWPx7OB2uaipA0C+N3qlKnq3Izjl0QeGn5zUVDjiimJ+DKhvfRfPUcxqbz5 3KjKj9lqeEyaTEeXEuQTwOEHXCNouIuTaeqS/k/2qTQwM5xXN/Fv3gQKCAQEA12r6yiV nglE7QbmsCBnw7x4znSdwYUveH35HYPI1cxOnP8y+9HE+5Z8qDRUH8CbWRGFI7eBeDZs /BbKaaZWF0OI0XoCf6+93zzPbcrwe4QwkW5QNKLvqQPDwXfDbJIZVokdvSE+QThHokEY rcMBcs0W1h2vJYWx95E9sam6pRmp9eOWcO/Q4EAaKxE7Acm4J2lMqdNNyhLpQ5BhHE2p XtjRM0Fwe0yHgQgccJ2P0SSHugGW1Ue+bg0jd44/OKLeWrellhX+72Q+nUDJlttZprtt EZ0aJ9hXPuL693p70B2/BG5gHQFncMZN9NC4NC9P67DvZG8qW6O7xLCdDp169HQKCAQE AtthQlNaLIVnesTboxnTHrtuyAn+PgvfWMLwp37icFQDdQv577gytyOPxRKuEgGdGJa2 Z4rpijq+4HA/ci8QJJGp3ulc57xHbMEmN7yuUVmSCL++mhOomIHiF+gj3B+wnH3Kl/+E +n7LXcGQ7wFTPDoGNW+xAShgcTH1s1GUF98OAtcUM3Pk9M1gNegvvRwVAhlj7xG7BzeC 7wifusn/UEjeD6y/ZGZzjEcdOwG6R15mHjlYV2S4M9WLW1p/EdOcPIzK50DPlUs6g4ZI xTIzrpAIJlVPgIU7tnvCJVcpgJz0ZPojQo8Hs2xW/YyA2Ccjmzb3qiC4vj3APynyCIed SPQKCAQEAlEWRS1RFk8A/zjRzgbwBR0T9d70ur/mdcQXlMYhlW8j6RIK0KOJNzZUpR4n jRdwlfTmNDhZyBmGGFnDhsaz2R1l7fFSCPs48JAVoleeARZyq5dHY4OG/EmYEvFRNMi2 4gZMzuIzzIZlX/v4dZmUxKT/g+84n9YPMfzpfwD5dCxe/N1irmeS2Nema2BXwhpLQ+1J lFbZ4y3zGssk3GtkGeGY1PPE7Uk2t4ySrrz0wZqoRVJUtIbGP0+RyvfA8kXAUKa5Nb38 FGBmbKysVMa0RXwaTZZZ63UQUDvBTFglIpFm6jDivPQ7c7c67zg+ocSy+OJ3VCTj/eGM G40I/YdNmzQKCAQAls1qCJe6QFOC295RtfxzBMCl3HGgx3/o5GEMmDwGXzxLQQnq5LcI TfvR7bUYn16N+F1p4hmfV9eNnXdnis6wS5yUCtgOLCMqCHVh3rSur2JODYM2b8E+mOFO fp4OQDaBPeqtBpGbuNMj5MqGjWZlL62iDQKZM4MXM+7uZ266sVJJQaG3rjjSRRqGYvac 7pJiWWvimmxO46JKuSN+NzI+kpe+8aaRBBLlJLChPwzytEMoDjjp5Cma/nf6gSFcQp6f Ounsworth, et al. Expires 7 May 2026 [Page 95] Internet-Draft Composite ML-KEM November 2025 WYRoxFNI/Db3cZPFnUFMyAP2K3b2EAKs8L2qR1uWWkaGH5FvouA6naceJn9WklNkKKRO XurYxxDBtVtjaNsEdAoIBAEUL81MscLj+eIwFOpTR0G/NOAD4VRyx9xkf0i1qyag/R8v G0IBcpGOPIL/SxAoMPb14MfComY0QC6EODKA2H5gA+deYrsnF1kzBveQqAWdxhDuTnw7 UseFkdeHUcUnkIKbyqXHScArHohLV8YyzB3y7pKP3E9faZ71EyUd5mYf1QY3mDmodINS 4RLFzXPPIhDxmbh+gdAVrGmgA5f93g4icOP9f8x3xHgGuZ8W9DMK4muHmiB2BnGy4HJK UzsBbwGw5BBiKSbCSBHADoFcMM4w3ZpW5ly/NVZxyOQNQ4Ojezf5S8KSZBYwwXO8uAMh gyseOjHIH1+wsf1yDK0uvPqQ=", "c": "+MFHUvhg8w6T5GQGQrg80vb8FbqyQb5Cj9E+4P2st7GS5MMCkNXNs+GpE+0HWZ CdDVKthmzpjUwIZnGeyReybLK/rxQWmlzMTX+0PJR0ZfI7z4Pn3tWXvfV7wwbbFsKY+x ZSNnLLYOCKHQvfzsuzP+Oc/j1SHQdd1ozKb1N3fCyq7aW9fXREh3tLB2ImrGon2rXdZF 3yLhmJNAcoNdEArYWBNu0U/FQwDIIVjQkpmj5w3vORCLWNUKyG39TUExi2VORhREazSb towhMIi40UR+DVKg6cPYj5G7EzmIfJzrLmDRgdwYq+7KFFsQubfyp8SKPjvUzc+2BiAJ kzYPPhVMoZQiqldoa0NcieB8WolIYk7Lng5/douUlalJT05dvFQftBOGW9F4eTB5bxcq 9jhInAE4po3LZ/S82Dt2S+DoxzjzZeATBQeBvm3WRC2ERoEFWgPZ7wXbOlqjAGipnw0d eXvRs7VM/Jqb/b2x5t63weUh53Qr+F9YHEWKnCWWQ9jdIlZjcU2nGoOHjpZyVex7oemi c/q7IMQSH1agYzPmtbD2dRlbaPle1q0Fh+Do2CrHPV7OEYftYd8jKMJtsjy7Qi3MuZA6 Dc6x7blIkjRkPaW/XAZ5uWQrTRxnQdC+QuUG6kI5/CmrQcz76FbRyZI+1Sg1QD6HKQ7P 48xKTCu7BCIKM2WkrUJwmQ+rPlbkx7jM29AKk7SLRaRxbsjrmR2vn7/o+q2qi+QCAdz/ bRQ1RLM6kednj0lw3uLHGcBw3h0nzdTJ1hJrdYLfrF5vs55bzizLV9pqwolkcHTZ31+f 5Z42RUh38L4ysSWyZ7kYepZ9InfxEs8xhrppifMD5MwuW2QVVYC7J0McvI+ycD7jXXRZ 0r6I/8J3oVKQ1N6nsP0RjdekUy2vQ3OQjzHk332lM92w3K0OgLYDrXaL79HU/VT9s7Fg K4Kk5IDYgSuM9uJthKTiXZMoZo7zZirajWNnbQD2wI+i/qykUAeRPA33Sz/UyfGwKdNA XTTTxREaZSDlHWZg9VwaXLkDZyoSWhARt1v98nEEklevGLooUKLQ/xCCRthz8OvR70Gf jSq2cxhVFBeqI+v8DzqOmsFfO2Au2yGPI4kRFMKC+K6tEOdL91iXPl+cdr8y1fI9m4Mv qGaF7d/3FvWFwhgbi+H3VdLSABo2jBa56HWmNCoDuFs9jnGY5w+zQTK8I50W3KMnjFHD jDhoXBOfEN0Y7CNE/4f6nhsy4c3hmAQYpqGwPes/KdJL/RQAq+NrU/lkzmrByM6kEftu 3diyBI8J4ZkZRAZymKsIKxqq8QiOBtmghltcRbADIG2eakyUytIUYeAuOV1xr4EP6a8/ gGReHqCL28Ehp3FklQ+YLf5OVgOiANwqb7H6h0CYRm0AwyDjd70VgwndLOLfA1KEHsZN P29Kfa5a13wFrFhlq89/KS8KfaHjsTG6w+6MpWZCFJNsv4Sh8/q4yuhJt4KOXVziQzte c2+62fIozmouMzVhvXx18+U52k7yD3FJ0IE4ccPIM9WzwCn2/0aeMetCGcnLwB7AuxEl AjpXYeQUfhMW3Ai/sP3trznE67q2shaQii8cNs3RGI+te6AxHogdmeqwD79QlJDxrccJ cAuO2BhOCsXq9jMMNyVnXnHXRf+FSJ+kyHUYvhMIA0vIY11PiVntvk0Jr6Uav8hUu3bX zWsZsMtMWb5O7qjhrg8fi4eObq7OiPmjYKukV5JMMFXsR649Soq/9Tsx3qoH83Be6R2b DairgfmY5GPBO5WhQilxPmCUpgSZmac5lp+md0s1b0cNYR7g5flZbsoQwIMv/r1dNMs3 9atLCf4CsxOGvU1UXFL6+/wGnTWMbKejbWQ0RwkvBB4hcnmx46+XrCKvuNoOGnp/payA uodg06wLHl78Ri+ufSWQaXBs/BYdaUfJ8R7LgsNNUDfC2DfO5keqFxiFGVjysYABWhdC iXXTZ/plqsOT58z4iDquLD9dyAw2N0EqTRn+9QTlsAr2nsaWQqgTfnVuKL//fyNgvBa8 cLFl8RNSbYKnTLvG5shexLcMT0MZNjLKKumNm+V2CxhDXGEPSOVFh4h9ZVF8z9p1mAPF R6DdTceBzCq2sZ0P6hlI60nGckyCS2Ag==", "k": "qsCgE3nLWJTUd5eTnqIHgQbgYGp1RNpkYu3p8rRYKRg=" }, { "tcId": "id-MLKEM768-X25519-SHA3-256", "ek": "+iSlKWMrCWF/vhQfukoQWGEjguyQ45ufYHZX8fQkp+lRTHiFQmqXtpMR0dsof KcUH0RIDonPovEiaWsY6ri+EYgLMXRhrwBbYSDNgol+cMia9DhNUsvKUcx+5DKocYXNy OsCh9AKsteH8cvCNyJt+vlTyFN9fiFuiFQlXLTKTBQNhPyFWqvL/gtAQzkxy3yxSMCaU nQMaNBZAITHHYaaJaRynxhIGCuu+FHH75bI5Ou9fDXBlMeaQhSYXOOjqDAsOqU181nM7 GGwLGhhZmx3U9wfSZliXmhIduW/YAsnj8Vl5PZMNmQ1Y7CL/kZUmpe77fw0BfalESGqJ Ounsworth, et al. Expires 7 May 2026 [Page 96] Internet-Draft Composite ML-KEM November 2025 JCk2TpGNxvBfdXJEXnD8gjDxTi3FxpZobzGzgIfxRRunpvGwIVQN7ATDmsN6fuAoResC csuAjaYhAerjIBAaWtzQcNh5nZZ/VmwpSczYwuxm0U0zhsf71rKD+e9NOJCXAShh7CGe JJqX0t+GBVASvto8pU+eKtquXkFO7OyVBIQnVjL+deGIAeW7BFx97KNkysrWVpsl1u3U wAMkIB0PVKkLQM+XimdObIZPEh6M3gvRiwWmnYVSjxrUlLKottl21Mbmgm8aUmfEfzL5 Pm7Q4bCCjln1ZFxndou6cuRkkxReApKBFNn3pOYc0lM/sGJ5hFCTwbPMoh7bBlhj6pqC qSPRDqwKAF5IgsuXxF7fSiHHwcS82eS9cIQQIeMgLcAYBHD6rRUAhybxTh5TJBzPPrHn EmDMTyzjVxl4NS+IrSerSZzlQFIpHcgv7YeZBl1DPlCfzu5LttMjsxii/s8oVGtdbKt2 UodnXp/bBqQ2AJ+ZaSM24JaLePHg+GKIlWQjNl9x5uxQFo8CoaC7cZxGxBatBG7HIsnW Wwb9ZDE2IxbhPaWrHpD8jWiMxK+klS4Wyu1QygSLcGGSCS7tzeWcftcOhtTpAJX3QERL WMD7yltCsUiROMwhhu9ZKwtEJTN8tt4JEWJpraeWQA9j8ohtDQM9+ltkdsn0pocYYtiM 9G2jthzlpycAZY0FmfDjTZiIbOAB2WUz+iZXVZWeFSPq6OlTRSBaTdjSuhqpLqe8PY66 yBJXQI+ATcaDKDGBbWWKtZifIpezBIhDSlVXJUxiVgC6aSoNAFnqZFzQqosCUqdGgkMd bWY5AJ1UueK2gRmA9hhZkkPStSWFdg+4tEiW7qX5iSw4FhOsXNnzOi9H+FeXrR5GMcJm KdzE5osSiYkavtYV0yl4TIU4TKrzZbHngB3HUpz/NmgfDtZbNFsQ5O4TDUAshNbmba3n ON7r9kO4+UnvqUPK9gT8+dCUIw5CMouPPZQIcoK4JZiWNF0KZG8YRpzjgos1ey09dG8w klVwvM0a2YX/RepikNLLSlwPZtS9OfGYbKpH5dAubsITntPbWQoT2eoTzMcI6F4DkJpW nbK6befIqCMSGjFMNapV/a8xQw+SieCtjUQ9fQfjha5iVBUiwaE2Oxu0bCV2JgsVXRbd fdfjTpQoMKsDULLH+VGxJGWxfHFozPGDNoBBFxpKzO6cXYhScepigu5/e1sOJ3cLyMZp pTCNzHxBssYYhEtX+kp7ZGmbBHfBqQuNf7JmzQNIkFg3pc7UW+BrW1uX3PGtVAiTg==" , "x5c": "MIISvTCCBbqgAwIBAgIUQCkNn1ZQR8Guzh0ar7OQYoT1h+UwCwYJYIZIAWUD BAMSMD0xDTALBgNVBAoMBElFVEYxDjAMBgNVBAsMBUxBTVBTMRwwGgYDVQQDDBNDb21w b3NpdGUgTUwtS0VNIENBMB4XDTI1MTAzMTE1MzAzOFoXDTM1MTEwMTE1MzAzOFowRTEN MAsGA1UECgwESUVURjEOMAwGA1UECwwFTEFNUFMxJDAiBgNVBAMMG2lkLU1MS0VNNzY4 LVgyNTUxOS1TSEEzLTI1NjCCBNQwDQYLYIZIAYb6a1AFAk0DggTBAPokpSljKwlhf74U H7pKEFhhI4LskOObn2B2V/H0JKfpUUx4hUJql7aTEdHbKHynFB9ESA6Jz6LxImlrGOq4 vhGICzF0Ya8AW2EgzYKJfnDImvQ4TVLLylHMfuQyqHGFzcjrAofQCrLXh/HLwjcibfr5 U8hTfX4hbohUJVy0ykwUDYT8hVqry/4LQEM5Mct8sUjAmlJ0DGjQWQCExx2GmiWkcp8Y SBgrrvhRx++WyOTrvXw1wZTHmkIUmFzjo6gwLDqlNfNZzOxhsCxoYWZsd1PcH0mZYl5o SHblv2ALJ4/FZeT2TDZkNWOwi/5GVJqXu+38NAX2pREhqiSQpNk6RjcbwX3VyRF5w/II w8U4txcaWaG8xs4CH8UUbp6bxsCFUDewEw5rDen7gKEXrAnLLgI2mIQHq4yAQGlrc0HD YeZ2Wf1ZsKUnM2MLsZtFNM4bH+9ayg/nvTTiQlwEoYewhniSal9LfhgVQEr7aPKVPnir arl5BTuzslQSEJ1Yy/nXhiAHluwRcfeyjZMrK1labJdbt1MADJCAdD1SpC0DPl4pnTmy GTxIejN4L0YsFpp2FUo8a1JSyqLbZdtTG5oJvGlJnxH8y+T5u0OGwgo5Z9WRcZ3aLunL kZJMUXgKSgRTZ96TmHNJTP7BieYRQk8GzzKIe2wZYY+qagqkj0Q6sCgBeSILLl8Re30o hx8HEvNnkvXCEECHjIC3AGARw+q0VAIcm8U4eUyQczz6x5xJgzE8s41cZeDUviK0nq0m c5UBSKR3IL+2HmQZdQz5Qn87uS7bTI7MYov7PKFRrXWyrdlKHZ16f2wakNgCfmWkjNuC Wi3jx4PhiiJVkIzZfcebsUBaPAqGgu3GcRsQWrQRuxyLJ1lsG/WQxNiMW4T2lqx6Q/I1 ojMSvpJUuFsrtUMoEi3Bhkgku7c3lnH7XDobU6QCV90BES1jA+8pbQrFIkTjMIYbvWSs LRCUzfLbeCRFiaa2nlkAPY/KIbQ0DPfpbZHbJ9KaHGGLYjPRto7Yc5acnAGWNBZnw402 YiGzgAdllM/omV1WVnhUj6ujpU0UgWk3Y0roaqS6nvD2OusgSV0CPgE3GgygxgW1lirW YnyKXswSIQ0pVVyVMYlYAumkqDQBZ6mRc0KqLAlKnRoJDHW1mOQCdVLnitoEZgPYYWZJ D0rUlhXYPuLRIlu6l+YksOBYTrFzZ8zovR/hXl60eRjHCZincxOaLEomJGr7WFdMpeEy FOEyq82Wx54Adx1Kc/zZoHw7WWzRbEOTuEw1ALITW5m2t5zje6/ZDuPlJ76lDyvYE/Pn QlCMOQjKLjz2UCHKCuCWYljRdCmRvGEac44KLNXstPXRvMJJVcLzNGtmF/0XqYpDSy0p cD2bUvTnxmGyqR+XQLm7CE57T21kKE9nqE8zHCOheA5CaVp2yum3nyKgjEhoxTDWqVf2 vMUMPkongrY1EPX0H44WuYlQVIsGhNjsbtGwldiYLFV0W3X3X406UKDCrA1Cyx/lRsSR lsXxxaMzxgzaAQRcaSszunF2IUnHqYoLuf3tbDid3C8jGaaUwjcx8QbLGGIRLV/pKe2R Ounsworth, et al. Expires 7 May 2026 [Page 97] Internet-Draft Composite ML-KEM November 2025 pmwR3wakLjX+yZs0DSJBYN6XO1Fvga1tbl9zxrVQIk6jEjAQMA4GA1UdDwEB/wQEAwIF IDALBglghkgBZQMEAxIDggzuAEcgsGiCc9s+Kk0q6+gbNgl8lMsZL/uokM+vEyBAZHPO 7KDL7Im/phrPfdP95zzEigRsBMzOh/hbOYcb/5/bkgr3f9ES5gYI9rXrNJ21fdGeHH4G NAsljm2SzyI6+xBqsWyqZ53aBfRqRT84OZt8NN+9vy+m4pXkk34nktxSR/RBaYsqlq94 bWKC/JxpI2S+8FHBwK16n6wjhz2TKVIBQheS43iGy2OFuXUmzLNyXPErbS9hhQ0yCXxi Q5xIGx+Oy1ep4D7/gA9qdrt+eW2VdRG1l15c96B7XzGxogMHox6lAFkmefIBU494K3C0 aYUcyq45x28yiWMu2n5SLWQ9zzouI+7pYrBKpYAFwqPpF4nJWyC8lAHFrka3yD/84leL riM1FinwciB1T7ZlswRaFu5/DdxlExWMHOyJQk/Hcg1aBZTQ8vxw9ql5QGMSqT/cbJUU VpM+JVs40hiyGM135kHSmvJO1a+xIdh7YajyUxBtAgtphhNZdSvjJZ7qSnibN+Rh8U/R zkdmQfYyGuk9c4+I/X3nZ9Ky9kEGfspb+SQjhwSyqQDdmIw7IEQmUk2ux5g/op1/bCwE G2OEHp8tJbK7ieqgAPNAG1nbTtSYa7SQI92A/5gEwgBpXciAByun0L69/llpcFEp5zh0 ezISBIo+UYnZREfcBhWOk9LUBWn+GYx9NnitaJLettiT5eP1AMIOwher8hHdFiOSZjPJ tsFlvlFn9yYx48d7ESZqnMo1Te3sbdGvNn3o/wbtg5RsjPjVEmIJwB2X9WniQ+bJtFOo wpiEV9cepTVgDlg2NGWixoNdxF4tnLgc97s95s3q4tUne0OSLml5aQTzDeeV5lT90ngP DkYEG57LQ3uwCBRUGxC61EwHkeR4V6TVTOy+6yuodZ6TocgzaJ8RDp/tMbEdhaHdmOCd 1ACaxNxofLRB0kmkgUk3VGJvSHeKlZy5YfH81Bk5uTDOW0tlVSSR15Y0pmlL4lZ8B31w e1sNx8wbfTwM1UyBdpP5ZvROfvBVbM6lhYv/Ult/Anm0mMwe+EWfgQtrAyOHzKyDUMqy twXa+dvgSZ6qN6eROhDo+tinovwJKAEq5pEWdgMX/IrOFRBvorBTDCac0OtAefvlS6Sl qeaM51rm3Vvg5P7bCETpVlhb2C7rEOBJIkyQtkkj7t4RPOFH1w8BIDF1GWSSKs78Utjb 60JhcwQPu62oNPC76/Wersn5gWLKQM/pFMLL+cTzFf95HbeSNh7A7PjrvSEM55AUxpmC +JOf/D0/UizcTdGHP/KMFlzR8yLCjkqD+WbKgTYGKG/WduFEym5Rdhn3OJA3BEfCYa3A HuIjDYka/YvY1SMpoMzt1u4KdHSdKxg/ppMHFODlakfVzTcj+pWIAzAygAKFI+Z+9FjP ltu+9GsRqh2vbCkD8KgRVC6aGMfFiBeJ3FhS0vIWRjN6JeoUAUAlHpjCnzklGDiNxoGV gWxuDUYDR/0AYPYg2YdpG/3XfNuoZz3J4U7KW3oFc59eg/Ym7+Jrkm6t76v7EVgBhCB4 IiRbBlcvAJ258vorsu1h1kgI0wzJ+DeowXmKJ2EzKbZhoJWSOpZZzmmxA4kq2gwCavhq 0L3UT+5WOZFDsLNCgHvWzV0TmIb0taHf1aDHr44pQFToLElWHq7E/p3+UrH9HAxEF/nx Mg/whj2VRLh6WlPQ/8s65G4bk86BD/p9ZcXHFGmrFdv+uyeh6UR6kmWKt8u9Dwo7KmDr zvH8Wp5kuX9LMmWor7VY953Zad3o9EwCDThOBKgdtrGHwrBGHKaZmVY7FgMOxMPoi4f9 4jbt2rNBISqCsQKYw4WC1WYv9CUM7npJB2BHvaGU+j+aAKdABd3f3h3IdUaajIs/AiBr wtIc6dChsuf59uy+yl/KGKa5cqUQor8gsv5RV1GLgduXMTSnxEZv4UcpIvTr5AAzvaCr 4dUVLLZ7C7moIWyDjGgyTS8Lh+ZvMjeL45LyvDeF/NuHX2k1C0/FU+IgGKlCgC8IS+ha UYtWDcG4sQExR+SM5CgkQN2W7Fwm1i5JKZclVz28bk5P85ipI8ucpkgnfcxHojLOVLPp KbCrvVWcKmG0M1pwsHARcErPgq2WRfMs7h8ubCnHDNHP3VPSMl9H+JzP9MBJPGo+PcHZ e6yhufXkVum4m1C+JxNa2NyEz5pTGTdaCPUOP4cNzG8oL0NdMzcQOb82uPJKZBEPsmz3 V9QJsCObYX5eJJxk6jJs8TTi2xjN4+U4M4lUq6jSo6e1VF8bAWn5Pz1lad6vLG3qCZI9 6w2RymrcCCE4fzjEpFU2r6CEfoKjxDWJG7pz/pDj+zcXrNsSUvw3lTRTFG3mf36RPxWB DepMc5ur9cWf8GP75Jojuj0zixa5OVHRjwG1adhL1t+qyPFpKOAdquv16Nob5H9wv64G FpMNq/BV+1vXly4FdrnLpp9zKMimfpJ043xefMOgyXOazDslwKtceqz6EWaTxefsuliu gQl8IKVF9kSMb850vlvsA/62IIBgJKSz43whzO2htC/lgWctGwNqc5OPk2XuT4WFP4Rz 2G+sRSenaY6cNCXhVvJIm1lubZVgLVURncJF82WquVsbDz6C/iEGqDsZ+lJQemaH21AA YdMV28HqpquBtTIJp+YtlWS/+RDK6P/uJl619doAW422DODxI6CcJgmvX3G0TZi5Cjz3 3Z2l95jfMd0bvC4567g0j1ywLBJAL37uiOqNtjZ5PpnUc6mkEfwhP93+DUdKp76gk0OU w5MvwGhfioUxlcFe6qgBU3O+DSShHiGw+PSjvOxwkbypbNuAyH9M6X2oIvzCCFk5/J43 duuvxaraYT6Eg3xAuU0KY2m1o2u9YXcqLnYeRFxrqrfz0mlJswDkOT2/ZsFxsDqzOMmH fP3/sRSfeChm39Ta87rzCAHB9ZDG7ohsJtejgeZnQ2+Os6l44DHoiD1nlWh4WMADtX0U elB/Egu7yDm3UtsI8jScXexNGkuzyIP0IVr2+iK45q4rL/9MuzLp3fow5HPjUajXGbyQ 3lVMlb3peNO+guGkF75eSx/zfhBdMzjfc7Srmxbaay5Wf57yi/zTR9Tq0hMd6lIhaZDj tFKxYPuyVrnzv9D6hDwO5q0TFIcapTbMKaJqpC4VJIhw4zwGR50QCsbgj4uHbbONX2qF Ounsworth, et al. Expires 7 May 2026 [Page 98] Internet-Draft Composite ML-KEM November 2025 pmLbh7cxmR4k38NzB7VyUCn7h/h4XVk4BiHaCvNLyjYZh3CvrWw9d0I90WCYOtvvesif yH6rVyGGPCsXZduYAP1mCDIfgWvM4v7rcLTmLIPhC34VvT2+6nv2W0tgqXRFGQYa80BK ZNdn4gTgd2pLyhNu+fEMajHpwgazWk7fdMScBo0ZnNrVadDEyQrz+NF0Bx7+ZtxYPm7p X77MzdvMD2div4ry/gOjtSnOMWis/HcSEjQ0qcDeBFFK8gto2nFFGNiFOJIy2IIOhmrV imm45/nBZ/dbrXa24j74O6W2IJ1kpJfGrDnTfUpeTPDxrFMOFmyVrR8Tbg2lQZmhcbhh IH0iUBiw2VkZ9o/pcoUr2giiu8gPAwM2fvpiNpZ0LKmVdY/y9KszbhAg8YMvVJ39tqjF 69IwPtugF7tLGEYsPBfkIITE+el6H6dEiPPu2wrccv3CJnntNysSUsoOox2mJ5xoG9BO D0G/6Ot2HU1kweMtxtSB3HyFLt0+b3DpKOBWrqlYD5gxKdYzZqdiw30kEgjj3aPbqBIy 5JGmecA3iZp4Rc3wYKHW+RojDetwlXJwI/CUQnzBDOtjaGuU4eHt9RSyjVvKXcc3jK1B joADzcfnoHa9gA76NP7EIBddiNZoW7/lwayGRoa4VQQ1CUVqgL9dy+/y1CFQat9EB3hj +rg23mYtyNbTCVtitbSQVskl51QiEl4PQ2O+86QDpXxOv74sbJL8yQk4cpih0vcXKAV0 muDjphUZcsN6gIWxUN/xySjTWdXsuJZmXPQQSNynRjuqpd8RJrodpNg1qtZOMGzvlBWF I2lo3xD9dEfmc55Eguufg/gqTz5JZa10l5HI9U8SLWthRgL8d/LpI/4UErDjtg4Vcue9 D09m/6EQEGT25w3FdBXw2Y4/rGvo9DzCTqbKzRuVM074ITHev46dvM8b6yjnW/+RlNiY Pg75ZYONaCAlhV/fq2SiUl7aaMzCYAL+VgwpUsKrmTjMk5NTwQ4tkKu06BMZFbBL6aq7 a2NUyorHpK0eDb84ToEPLylXtD12BWpT3bALQOZNtIBhGWBrLjIV2ZtwyPHWoCKus7bD dB58et2F7DdzZDIXDQUhaVNK5WqVj16+9pmyU5at948i2d6XGGJaDTl1/cZzjiIn8Ggf zztyK15hcnN7fqDoGWF0wsXhF3EGo6TO6w6FtLgJHUnZAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAkPERYaHg==", "dk": "l+1nOMY8/764UKY/u/cBE7zXj+H5R584Xk5JdgqlCGRyJCURwnQHraJmeY0ZF w78bhPHGhgyjbbueMjjxSsF+iAApmwR3wakLjX+yZs0DSJBYN6XO1Fvga1tbl9zxrVQI k6IBxZFViFv/VBFGrAAFM6GHN5YJGo94mAb7oN8+Aauag==", "dk_pkcs8": "MIGXAgEAMA0GC2CGSAGG+mtQBQJNBIGCl+1nOMY8/764UKY/u/cBE7z Xj+H5R584Xk5JdgqlCGRyJCURwnQHraJmeY0ZFw78bhPHGhgyjbbueMjjxSsF+iAApmw R3wakLjX+yZs0DSJBYN6XO1Fvga1tbl9zxrVQIk6IBxZFViFv/VBFGrAAFM6GHN5YJGo 94mAb7oN8+Aauag==", "c": "pLRPboIjynrsmQA3wPw9BFufXLhFQ+j+tXnxpRGKqgBwpi8Hvv23dvEokPn1q6 teEXGh+FAkQxC6oNzynIujYi681DOhIxHGRudfy6CD37jf0DXKi6UV8+TYmbvmh2Con6 56SbT34tOSUi49GoF8g/cQ1a8eZAIUm+7O3GdIr3M1A28ajRvOFxO0tODSto0LfWzFLs ea+aRH7s067OpRhNfNsUg5xQKGflL+O6/gNJaCNi0gK3o/HLMqLcvRE2uOUNDPRavhMp r+StDGD1bCC+OgYGP4haMwf7tAJqDg6bnjpJh+9gsiPJROZ5uo5SRtemTU23MHUuqBjG xAmXlwNd+ye5khaoxtQa5srmQgNfZarSUl6pDMhpF5JchfAZo9Q+rv9+0/Vm+PbklzDS jOwI3ybw5Mc6XX1fMrX6EpPSbi1oFg34Q9aiBnn/4kAFiPd9qhFkP5zEKfBCLyB9GUvM EHI+ZvCjxoz2WA6f4GWJ13iRZFkhnNSBGDK2Kh4BV7P+INWiYDlNksQ4qGwm9966XyIa 1nu/Ji/LncohtmuQ1lpnNdmlNPRw9IxMG1whtTnZrTvLwq0MiulfqnciPvu9/tsSjtXz qTJ1qMlZdxRwV38gJ3GB9tUfstR8hAtohOVQMBDWGSAzi0VllWMIcPCPe9g3LqIyc9Xg j2sZAeQ76v+t+Bpcl4/RMuTB0OF5QR8pzfMlXJNiD7//CFvyK9n+4s9aOSGegYEPKSCk 927PgeemQjv8dnT93Yhn77ZWs4N/BuVyz7d461K0eJjUn941yIPwzBQlJ26ktivewiIR OQuQkGvEJeI4RTzqjWFi9EMiceu8mVmxrfspv3I2YlCvkBI+aBzk+QB+atha0X7wzHxf qHRoGYIx1ANtFCqdMPGxEcEFJSKjE2T8xeSr+G+UNkmd0DfB8zHfutDcB+pAaGXivF6f zpyGJ4RbVFACLdjb5d8+NZAF5zBSsGTAX04Fc/1Z1aNpLNVgn0UkTqZ9TTOKTImpqmPL ab1fhg/Y0XjtcG4RyyxQVuwYA8sF80+t8DJJQen7ktCJ5rq6IYgltE56/Gl3YpFIAXq6 MDaPT5+8+Aa4Cn9uffOpk/XXO7QI1W2voyJllYoRfb9zvzisjVR0cX0JBY0tqgZWl//b 8oAkCXrpeJmOGEkLrMvOU+d9F+9682hkXZPWK91XzUbyHL6So5BXBfVthOnvWtV3md/U HkccQYtbDDHzy9kQjEnwQJIiETmOAC+DqljcWEUm81BIztqH8XAnkRJg1jCoFMY7ksmA dqoJaryHnutkUB13Dxomnvq9poNWVeSQC1VRFJZFvY2kP1qvUDjaYVCism5Tabr/bOvS j5UtYGUXC+1VwaTg0cKsSX1ve6dGqisi326kw9kVvS03P0Oy6tgvsCEu7gp0CH5M1j0M S/1C+hVsGF7qPlSKNGgKwidWNgQ0SYsQ+yJh1JYrhkNGc6vaaTo2bBCODw+uHVkWo8WX Ounsworth, et al. Expires 7 May 2026 [Page 99] Internet-Draft Composite ML-KEM November 2025 Akfg==", "k": "KtuWda1TIlccUwJMDiJziKzsltUI8f/eNcDp9KbU+vM=" }, { "tcId": "id-MLKEM768-ECDH-P256-SHA3-256", "ek": "D2gXQhQ/nAfA5/SiMotAFYaWOWNmLXW3vFxFNUMnwpwZLaZ3ozOsy6pTjgUfI 6hPx+E95zQ/zIU/6JQPJzMi3QtfvIhJ4fV9CQo3TYQoQ2DDnIl7DnGfzcJAjDtsCEMo+ iyADeMw8NJLIzmuGCWTW4DIs8a/WnoW1BB1RCZOKgogWpGuL+TEarhyWPUSfouZwka9T geqCwInsuZBewJFNrzLB1py5yJM4WdWysElh3GP4vNC4OFiGuRJOISrOhZXxjmOqHZiN ByHtiamG8G6BjPMIuwR1fYiCjFb9RUYrgxLB2EG6VMHvQBCUTyZT3eFx/YhdXB4UVIuH 7uIq+wL6+yVMMgtZGy/9HQgt5xxBgckTUASdqwPFosDC6iOgBA6L+q/muVU5UwUUUOhY QtjqJuqwou919oZT+dQOiaWw5yV9tWmr1nCj/lMcTXPYxnCQQdRK7MB+WJkfpAHmUMcN /YW4PtVsUdLB9M6USa1eokBChh6BIZWJpCSm1yip7SZf/WCPmabuyMQL/wt3iWeZHYZg OS58ksqFXREa9HFIGALdSJVCmFUcmE/nqCFcBQTT6upnfRcIksVkcURJMItP7HBJxlgN WpvEvELopCkcrXJpZkm7rq3qmQnU9V6YeiSbJiqpEitoOFBSDwu6rMpHyxla9Mp66ocy rhSYZpd9ShyPId6PwmpNPap94pitjQbwgPOIjGRIWkQuautMmJaIIuVDaJf0FPGXtmkA 2ZIMxBGw+Ad17iOV4SjSNgKIhGw1iSNZbVMz1AyFvx2+gVXkggnMFRaIqNkw0aCQrlHB HQcP5w7AEaS7gVBlnM3CcsdAANijqsgK+VpH8ZYy8OAfKADnxsmQjDDbRKOhoUyIGlO8 viXu3m8iNZemfs/Z1JICjwqJRcCzyGRXPcvXbqRLqO4qdhU0aZN1GmZZglI3QFBHPiaD toq6SXLJQh9nBdSc1BQteo3d1Mi2Fg8dCwrMZseKtsBdPQcaBFosxtDCBkGgsbIZ5p4e BCyAIQ442UgU3rPsnFVMdZ+H2K7c+ORTGUKZ+PN32tGd8SKO4zLhaUz7PJizkGcOqaHi jxCJ+JtmeFxaIbG8wmX3lh6xmMaFtPIgpNiRfAe+6NffbuGO3vIvZUMqFwIk3SOSDUYw tWR4oOO4xjAq/lMG4VUQzfP0GduY2OrnMhItEufgRZzh/C0HKGE5TmlQhLG63OiRXvBq HNKuddrIgKxRyizK/SFRGZ99vGVuMZPphAtSPkhwrZ3QqZXK1xHmBE32yM3yOUssSMRi PKeTjmsFFejTAco+Lp9fOqaJeIQL4qeBZG1vldefOCGT+SbxYIj2UV+fRRhFnsPcfgy1 wyKu4NXIECAfyt4Q2KcDIFdfAHLytqQ1mXGL7VvIlZbSSdaNRYoF6mL11JBYqEvWzTAo yx/HjVnKuMc3QjJ7NTPq2IP5Vg1pno4Y7dbNjBKfSd6K6MOB5aHzFNrgEytiLBKsGlKm Psy/bVnrkKLgTI+C/a4EeMxK9WWPvg/3ZJHZ5Q8ZrVhjaySZmutkHchEJGgR3+hX2cov tmMGeCDNLCXmk8gy10LWA4EU9u7dUSOHEE6PEvbRhMtbF3gAMXalK0wuMb4BsIuVwiYe a4ZQbv5S6Bo7xyNTxV6LFiq8NoDhLHTD7zgAtOOPg==", "x5c": "MIIS4TCCBd6gAwIBAgIUBjTkEKDIGyKi3NnE0mdSGnRHsOUwCwYJYIZIAWUD BAMSMD0xDTALBgNVBAoMBElFVEYxDjAMBgNVBAsMBUxBTVBTMRwwGgYDVQQDDBNDb21w b3NpdGUgTUwtS0VNIENBMB4XDTI1MTAzMTE1MzAzOFoXDTM1MTEwMTE1MzAzOFowSDEN MAsGA1UECgwESUVURjEOMAwGA1UECwwFTEFNUFMxJzAlBgNVBAMMHmlkLU1MS0VNNzY4 LUVDREgtUDI1Ni1TSEEzLTI1NjCCBPUwDQYLYIZIAYb6a1AFAk4DggTiAA9oF0IUP5wH wOf0ojKLQBWGljljZi11t7xcRTVDJ8KcGS2md6MzrMuqU44FHyOoT8fhPec0P8yFP+iU DyczIt0LX7yISeH1fQkKN02EKENgw5yJew5xn83CQIw7bAhDKPosgA3jMPDSSyM5rhgl k1uAyLPGv1p6FtQQdUQmTioKIFqRri/kxGq4clj1En6LmcJGvU4HqgsCJ7LmQXsCRTa8 ywdacuciTOFnVsrBJYdxj+LzQuDhYhrkSTiEqzoWV8Y5jqh2YjQch7YmphvBugYzzCLs EdX2IgoxW/UVGK4MSwdhBulTB70AQlE8mU93hcf2IXVweFFSLh+7iKvsC+vslTDILWRs v/R0ILeccQYHJE1AEnasDxaLAwuojoAQOi/qv5rlVOVMFFFDoWELY6ibqsKLvdfaGU/n UDomlsOclfbVpq9Zwo/5THE1z2MZwkEHUSuzAfliZH6QB5lDHDf2FuD7VbFHSwfTOlEm tXqJAQoYegSGViaQkptcoqe0mX/1gj5mm7sjEC/8Ld4lnmR2GYDkufJLKhV0RGvRxSBg C3UiVQphVHJhP56ghXAUE0+rqZ30XCJLFZHFESTCLT+xwScZYDVqbxLxC6KQpHK1yaWZ Ju66t6pkJ1PVemHokmyYqqRIraDhQUg8LuqzKR8sZWvTKeuqHMq4UmGaXfUocjyHej8J qTT2qfeKYrY0G8IDziIxkSFpELmrrTJiWiCLlQ2iX9BTxl7ZpANmSDMQRsPgHde4jleE o0jYCiIRsNYkjWW1TM9QMhb8dvoFV5IIJzBUWiKjZMNGgkK5RwR0HD+cOwBGku4FQZZz NwnLHQADYo6rICvlaR/GWMvDgHygA58bJkIww20SjoaFMiBpTvL4l7t5vIjWXpn7P2dS Ounsworth, et al. Expires 7 May 2026 [Page 100] Internet-Draft Composite ML-KEM November 2025 SAo8KiUXAs8hkVz3L126kS6juKnYVNGmTdRpmWYJSN0BQRz4mg7aKuklyyUIfZwXUnNQ ULXqN3dTIthYPHQsKzGbHirbAXT0HGgRaLMbQwgZBoLGyGeaeHgQsgCEOONlIFN6z7Jx VTHWfh9iu3PjkUxlCmfjzd9rRnfEijuMy4WlM+zyYs5BnDqmh4o8QifibZnhcWiGxvMJ l95YesZjGhbTyIKTYkXwHvujX327hjt7yL2VDKhcCJN0jkg1GMLVkeKDjuMYwKv5TBuF VEM3z9BnbmNjq5zISLRLn4EWc4fwtByhhOU5pUISxutzokV7wahzSrnXayICsUcosyv0 hURmffbxlbjGT6YQLUj5IcK2d0KmVytcR5gRN9sjN8jlLLEjEYjynk45rBRXo0wHKPi6 fXzqmiXiEC+KngWRtb5XXnzghk/km8WCI9lFfn0UYRZ7D3H4MtcMiruDVyBAgH8reENi nAyBXXwBy8rakNZlxi+1byJWW0knWjUWKBepi9dSQWKhL1s0wKMsfx41ZyrjHN0IyezU z6tiD+VYNaZ6OGO3WzYwSn0neiujDgeWh8xTa4BMrYiwSrBpSpj7Mv21Z65Ci4EyPgv2 uBHjMSvVlj74P92SR2eUPGa1YY2skmZrrZB3IRCRoEd/oV9nKL7ZjBnggzSwl5pPIMtd C1gOBFPbu3VEjhxBOjxL20YTLWxd4ADF2pStMLjG+AbCLlcImHmuGUG7+UugaO8cjU8V eixYqvDaA4Sx0w+84ALTjj6jEjAQMA4GA1UdDwEB/wQEAwIFIDALBglghkgBZQMEAxID ggzuAHy4Yj5rA+5vRNBjONE4VTdEPmmFkmgwmqMQQz96Zuw+Tl6xmMG7ZRp0lrsfuXXF dJCL+sJZDZ2326xYgTD77js/jYTz6Gw0BaPNz0Wj1/YQr8nV4Z9ZACTVjvTc5ZM7KcjP NcgJiY9aM9IVlulfoTjYN5w+P0CW0PFoexuF0/x+9kTlvYlkxngStMUZoZoiXUJYfYKr kGApJnEn2jB0qLieWNfBAKsxASzZwvj+DR5gOEcX9ah28cvIaSLRA6weDrMvRjb7xxdK EsPsXrGl7KI8speUGyFaw7RNoU82Qnk/dv4DKP90LAQ2ewSm1p1HOU50c32WDCRfSw0k 2iAqVPSQcqcckM5st+hoh4mlg/MKD+Xkn6p8o5HVoTXxeDhZXsFGeT17vzxzoApTsl5L 4gWi5Wz3MRwqcmJywtx3NgScOd6zChM4hyagzamasMe0qqLnDdWCLSaA9GhB70OYcN1r U/kVNhW9EzuB2ph6BzoiODtT9d+WSneT10DFq1c++VJ5/eGPv7OUL7g2D2KuiKl573pb IccNkL0YTLG4m0mXk7fCIQvh/2KMuS5ooifO7B5UkTgfgW7tEnYPF3r+2aOjvNYUDNMy lG2SIcN583gUGVLhEbttRPCIhefYGdv/LvstoEm3dBdAkTazuHkru9Z+EvomJ+pr84RR 3JvekZ9GFbK1fwJMfPjAyaTvuG2ucxV4cPhsFOcQV8+V0QXXt+GtVPSfcdlB59hpKrNy kMKgA4KXiejG0ouv+fqjqUUOzYkq68uAcaKTvAsu9TumHjAJdcIoS61ixldzoB/cSztL q3CDlSUFTJhOAHkpCsZILDol4SGh/x17K1pG+DCEln8bCbiBgseTHixaiuLEQzPzVBAl xttrhZ9cICQFueIMPdVUZyrD5/v1mC+Ijd8Jy67PU/8OoQWHcr9jN7TdpCHdoWcd7MBo oDEMA86Dp2p1lBtVBYnQ6Mpch3b9IZitj9E2b6irymbND0Sw7wU7XrwaldQ2thrs9fMx adoj5VQ/acjgJZ74sbwyxS0D7jP4SZdHlEep4B1xV3WrD3zid6x9Jbgch+7V/dUNP3xA azHt7SLdGsPjgjaLo4Ls/5UhqUSMBIEMqAlnJI5QUY9NY8ICPLhQ2W+HirjAMxrUBhnw tL54kT8klOIPSvv1vpGWbfIurucfYV+HO93r9AGfbZUVsQYMSELd0hq8VxthPmhF64p9 VOz+ErpyO+a6KC4W3nMHNFaFqIRI3jTEhSJ1nnjd4DksipIgkRvNqAvC4oQD+eafwZfZ 6clvMPhp15j8ZDuGXc4tiXav+3NRJ6j4Tu4aQp8aNFyBKYY7zC9OzXsDhLEfB/VSVGMx m+OH2VmZRi8MYypK5iqZEVG4Z8wxqMUJSvpsJDMYJy468AjsgqavrwnVyjWxnf1HO+++ agnReWrifarhRMQRYtX30dFeUJ5il0aHZN2hDwiwCvZlYXljp1qyfg3pn3qL48HS/al0 2tSc1oVsTMlzyiZtjevTIAnJLAd6eqBST6GVnB8o+WcGpWHyx51Pt/cDUmSC6aiwolAf XWByo1dFyvPB+SdRieiKZidDFcuZcKL3828VAUvkpQ99CoK1DTFxof+U6xzdUMAbRttV dUn4g60TUpPCdaig8fu/tjExBQdUB1SlkVtiyztOjstetzAin/kc9r/SXnQo4OxeOXUD W0hM+GeJG5Jo7JCy/xp7FLZ2KSZxRR07o/6PWZZeCQYxW0Uj8N4E2XDXY9Jv1mnnjrVb 1R+NRqhxsD2yuyiK5tl8aKZAE3Dk3+d3QHeluCRKHd6pzMJvg6czTzB+oJVlBWLhGKqa D6OHVpfsSn36EhQOxMbdEDLC57Zww7iAnZM19ExXP+ok725rfbbcKexJii4WiIQbMBRb +Qts3c/UxaXjXsiNxbeuwuo4OS/vIqAFUyHDVX7RKKB2Z/pQ1cj34RUFkBs/hE1yD/iE gYJKXtl3nltJvQ5lGwKfrDIthkRuq7G9NSSTEIj4acWLqEXGiY1BnIkvJjdwjPSKISO7 3XpsOBnMplJmlqgX6Velzgqd5EDXxIB1M8bXt2Tq5rZTBaHWO734fhLTehsYznyLrsAV Dqb0gRl6dOpTOrVt/fEJ4y7T8Qya4XznY3YI86fAigyGH0FHjKrLgwuzTR6wkXs7CH8I 5Kd7ylnhh7g7d8+mmTEpC3K8KT39mWr0ONxHNJKvHDalc9KWEs9CQQceS/HPZfQyA1UK 4VGsNJtS5wSIcQqh5QUkb6vT9CKosYgJ2YZ7Q4KPotU0hs53Rea5kHyWivKdxSc0xXHg SCAicZxbdgu8XtiapkWIlbbtVMGdBD6OAeZ4vLfEAZuAOXpZgZ41+KG8nTV2WwouozoY W7EjOsltFWffEKchr9n+8N7XE2JRE1EKfGXbLFVgV04bYM+n62eSIMe/49osgcEM8WKz Ounsworth, et al. Expires 7 May 2026 [Page 101] Internet-Draft Composite ML-KEM November 2025 V2wM8s/o8heZiheQcEH/GBjjfjmy0pfrevTiblJ5qzdMZjRDA0xHZGUpJmK+9w+reLyO duI+71Vgzc3QpYvJd2u25WL+UHFFlh2cy3VMVquYIAeMBtNBu7rsxXcqOx2flH3lCn1N Al42zTW3qN7fxFpbZbsahxOAhBxO5vOIry7NK+2Rxlue/9Q9N7mvwG6xEmURxIa+wuBN q0X1P7UINkl58KbcXl4JhhoG33eKt6sAW+Grh7Ox+x9sThTGBBoOwfdq+A2a29Dcxphl 2Zz+lI82SxJAKkLHXcJlQpkFYIZkOupfE2fzTr7yNOYSnQBkqaTPd8tNkSGF8q4shUtJ r7xb35UyI+n83t5YnyG23P6E67KoC/nMCB8NkLtnFGJeaMr8F8JpAWh8qNgz4u8SB88K PIcnqk7AIgesr12Xd5ucL8UQzsUgx2nmMFsY8439Zshxh3XGtdrotQ/QrO5hDrVWkNtx mi8CQlL+ph7t56Y63KEunDJXrVmInHBuJs+n+HgTiK1d6cKkeFMHxU7z+aCPvkBU/Tn5 oaRAWrw2hARwa8O7HdHMzMoCo9MwPk4ijoxy19d+C+Tc51oQ3GZ7lG0CoDYw+8YPjSJX RltH+DVHUWFQ0MlMCTtMLoVQ7tDQA2g64x5W9ow9SBeFexpL/szlNkMhTPZ7fbkpBdCQ gDlg94T1CBWGTFT3bUhq2wl516U7MhwF7AUVLBeV9uz1svjPFZYaVm8bn8LFwEKI4PgG ogl2w0IK3UdbUlKLuiDIMuD9ti3cWHYHTK0QxFJR+7WDyTfYavJdMAbYtoeS6GB349MZ DY0SkDWHONUhEE0h79+dsCwG9ISnJFUx4JaFCkvxDSmX0N21EmkEeB12WBjEQ8+rqHqb MYJenNKrMWbpOK154Rsyl+SnCdO/EIMtCOr6LyOYNIaTTQ/2F9fzQ5WbzaAqdvBT2SUo LsjJJOvNJHr9sq7h7ldzZ4JSYaCDHudxdS4+6KnYHSYH9fDNnetZ88UiXquS/OObgErI mUo2xTkhyZ9FuPaTjxg1HNuEDXpmiyvEMUglKfc9A3XY8F+wix9evpp9Pt5wxVvK0rkC Pa5uGbFjNmrrRXk4nTjYWQqR5xxd4xQWHskaqJLcl4tsB4jqBlN/KyIgpitN0jt/Flbp Xz4DGtmnbUE6cwn+pyc8povnZL43TdmRn/6q/xZeRKS0nsoO+CqMx4ZFZcTI4X6iYpWO cPlnETpqJZbtFRd+CF/oJ4wjIThOeYIXdfQfygKV7AKw1hmjyXD//UjLv+8VNlAVrTrd QXAEwwixir+EcXjdpc5xzLb4iFIVXVVqsmyDsc2FKn3WWlSRRV3oAFDNwvnOLPUUJq8B dFR4z/iNUAmuzoPzNgNhNPpfuAkOrnBfmwtg53muvnpfrubHlQMfZ8ou0ok/xh/uXMCl AO2j+nHXmOHep9D8u7abBFQmraL4r18tmBy2OdqzhRJy0yH1NJdIY+yXTeA+1Eay2xEq D04Za7bKSq3oTVL1EZ6s56RxM7oK0tFBsNTgb9q+9AU4HgSbmuxREQSEMdyuLBTBRJr8 b5mmu0GZUxLn6vt1vQF3hTfnlnu7FzZhte1vwnxEIicMKetjQpoD2Ygl3TK0/GuLLrPB jpWcJUqNilJctgCN0dXv+soZ0lSUDu1kqsgECi/dNsM9SUBvO4tkjV4bpHgaoaQenjY7 TOLgePrOJe4Q1JIcH93TwrGOAlT3hBEXVzzDbgm5VVvfAOUU93xhTTtkvo6mvMaKb/Zy 04ZBA6pWqTyzL+CfC17zjchOO8sm9OJn6BHqTUbwAA/c5LZ+ut1et4ldWZv6muiKpC42 w74nYrMbNIbjSIEVsXAuW6xXSZqi0TitQ+Fs2UVjKcVulXgEZmDzBScqLzBbyvUHN1Rc XsbR0vYbKDlKd6+58xaSp8fK1NvmLkZOgbTp7hloq8HX+AAAAAAAAAAAAAgRGSEoLg== ", "dk": "J5v4o+MFvP4hFcDML0YBeYyFw+rshLzBmzC7b6+4wOADNFnZOBFL07sYlQWfB aVTWsRcGQIb9uh4AsZfqcZFgkEABFPbu3VEjhxBOjxL20YTLWxd4ADF2pStMLjG+AbCL lcImHmuGUG7+UugaO8cjU8VeixYqvDaA4Sx0w+84ALTjj4wMQIBAQQgbMmRlaR5sm2IR Ct/LITNpKqN618r4PPcYjUOKBceZYSgCgYIKoZIzj0DAQc=", "dk_pkcs8": "MIHLAgEAMA0GC2CGSAGG+mtQBQJOBIG2J5v4o+MFvP4hFcDML0YBeYy Fw+rshLzBmzC7b6+4wOADNFnZOBFL07sYlQWfBaVTWsRcGQIb9uh4AsZfqcZFgkEABFP bu3VEjhxBOjxL20YTLWxd4ADF2pStMLjG+AbCLlcImHmuGUG7+UugaO8cjU8VeixYqvD aA4Sx0w+84ALTjj4wMQIBAQQgbMmRlaR5sm2IRCt/LITNpKqN618r4PPcYjUOKBceZYS gCgYIKoZIzj0DAQc=", "c": "3fzbSWuzQXoMP2YxpfLEeY03OYCmymr+N6s63HiYBPIEHLmb5I7vZST8Hs++Zh gPHZpEaz88Fo9B96GGt3IfBO3yXNIXOy5pof5qPHNpdbU6KQ9SbSl5XiK7kGyzOhTGCV vDnM0g4SDp+7Qo99Rl9BfeUvoEqlINhzVCXWHMB5+IUkcrMQmCk83pFtlIwviIdd5yaX D6e4y17MWor4BiYXQvf7PLeQn0cZBSmKVlLAlS3aacZ5sD2TUr2vY8zitqmBB9MVv4dP QLsQdPGTWsxcL8CHHxohuXxgXxkK9Sag3IxwfLqQYPkx+Juv4aRTt8OmAeyc9A5l1EYi CS/TcItYAlAXV0geTQh9ArI1U0NEg5rnoSyJ6MADSmw5jaYuKdjhHhz9kyeYFrLIEXlb EvqBjXkeSFGDcE0Frepj3ixuDB+Tcw0IbOK0JVJMda08VwFzlkLsctOaL1wAUzSFZgJS i4dwqErPpJzFgSwceIitf+DXkNoTg+F2SbQgK19pLbV+S2DKLvSBJnrqeRLoaLygDuar j62b/rztV4kps1FK6ke8il/dElfGQLH/6dYRSZrJ+y0aMN1vCVb8QoSoGRzcUo6rb12j Ounsworth, et al. Expires 7 May 2026 [Page 102] Internet-Draft Composite ML-KEM November 2025 gGCVvKmMMNIM11iDG4JP1ZzeOU25C/PZ5TDvboVJF+X4NLVqlbAktezYgf7yllwpoeho pY+1efxMQlsnUcuj4rA6sLONc7C9Ia3jJLkq96YDoBRfO4pE+VbsS2g0D/RqWloh84mv poowaf6cTC5+2qBOXMbrmbTaxtuxa93SJv3wmNl8JjevD7T03zi7rFEyc4ni86I3QENK JMY2P7EoUWLIjKCbmKf+paMgvmTjcH/clI3kIkW4Gk9MZBFoiO3oe/4Cl2c9UQdozFAC CWsaxditK5d04Thuu8i63/2gZi4zaIX1hOHMBJs1Bt41JIj5pt3ODF1/Od76YqNg3d39 VFoPUDw9fqWbNtXW3ifoNQqb5sxaFcZf0tRyfYVz6DacqcETcvI/Ye2pu1AHHcSAFbDa YHvO/oNxGmwjtdAe4TbqBBDzqCsXIVVkgvJJodDfgF1WcMg69GrM87q3+gyHToYZfvt/ HL70RPfLEBRKu7++RfKWvp1BHrXPaG9yRyjg788GExSi6rEBPWOAq/OLyQi24nwdr86l DINKRV/bBMxpGvhvIKZZgPGEQyl1djLMtYoAe/aDtvzsipNSR3ELQASD31wQlmw/Vmkt xzbrHR6ati5aJDrBBNWUeTonWW5PjUwasZ/2khmbyZNiSgAyeGOWEP94yscOa4Bb+c6T h03u28OiiC9ZoqOhtPcOgh2jmLDIAR4vfQM3gxvm0eJkJWx/IbgHJ4dBm9s4OrIq/4bt RSXuMSw4dqz0LHGSH/66HfWROVdABa1FatuFxbAL0/YEd5CBwD52JUoKB5eUJrXgrME+ CyhQOk2nhqbV/rSPQuE6Tdi7PUC0kEZ4djdeEzwRqJousBt+yAvXcfquFsOE5u5hERtY 45t/GRytTFhN4epMYVpyVpnLrakcTJTULj+nMrFi/vmUHNnw==", "k": "SJIWe4XtGaOYUze2j9GYibB/eAsqhqjQ+eYdk/dRW98=" }, { "tcId": "id-MLKEM768-ECDH-P384-SHA3-256", "ek": "97fIzsNwPOMmrAopBwW0H+AaHtohsjEJHLUcg9E/R/nA1jqmuLVGMMB1WLxOS jpAkpacbqUy1DE9tenKb+o6mQkX44AB4+WC+vnIGkhko8qI85y8peAEOKZvsqSrZxSl/ WOcDMk/VTdUILy7IzFu0zB6DaMhNxcUmqCxiGAHlETKTgCyLtcLC6YMi3FEiHdoQ+AYV 1m0f5WarNSzNBOPmlRw1gY0nVO7ssCE16h0oEfPzoOv93I+coEc0YMr9MdsLmx7G6aJE iGvBGWbefBDBMpBRqeRc6ww7qvA/QMUG3w0I1EDLsseHQAGDAQB1Bw+Ojt2prpm8QoDl 0cBUMVivMOGS0HN8gmwlesN1jVxCLc06oMLQdACV+nPWhCWU+RLxEiOQIvCxeIMvku70 IMFYmOPnGgBQwYOz7yuHJwu1qow2nfAAvCAsdeSgOy7cUiORzWO8DSZ/Ri4wss5pFLL8 2yRUry4fGkQvrdeJmSm/cF5amZuA1xqgXuHGaV2juEZ2bCwetMJMQK/EgvA8mmxVHkfr tp4HCmOpSUFNnQDBXoAAhfBh2OL5cuGttxsHpESCikwH5aAWkxWbgkHA8XKXKqY8GfAD dFMYfeovfa11rAlk2t1H1yLLfXHlYpPEmw05KeFdcI5Lao8QGwZ0aZRVffMEqULgbyr3 WCEPaSXtsPNVpQr3FHGknpH04KuFGk5E3Y9/JdZMot2WYNB7xSoS5cPaNQ3B0Ip3DcOg cibZQBiVJBJpTR2x5GBd0gU95PHcBF+LSgiVtmQnsRHAVFWk9qAd8G+RbF53rODO0Yus QIt10sGKUO9+DGA9xMnXdC9mKm76vF1i5iU5YpsyqatVIzNJyJjfWULgNoC91Ve3hOg2 +cnoRuLfNUspIWXjLZi0VZ8SLMBvzU1T2WZFGCO9nCWkZZOxEXBccomXyCd3EO67MBLB Ch0RLqHWoO+gtJbL8p+2GtlV0cwYJCfUClyh3fO6RltzpJ+oJQdu7K/MhulsLUR7Kloj Eo+PghY01Zu4TuXrtdTJtBnjKofhTtPbZA7T/FdB5Sn0uOJPxFUSMCHiTgbTMvDjbUSy AJ7J3isUrqagEB9JDZ4nSlXg/xrqMN8MgB+wFgr1OEL83VpzKagDZIHwVqaaIBLtGpG+ 6llJGsx99mjaVJVDehdodhTrdGszza7gBE8/DBd6KwwyYdiCdp54xrA38S0KTzKULq6Z hd+sMAJMkarlhe3sahOoMsydzxZL9nDzArG7DyQrzB0nocj5KhvigkCQFeMUrXNlUCKe zGt12LJXMclGaceg/I0kmV82NZkNSpzMEZ5zIAXHPCox+HH33qkZxs3Lgh1MCXNtbiw8 DGqIVmSKQFBwoSVpRcK7nfFRriv7GWvYOcu19MifhZjd6k00nA3GalJTtoUjHkhXrCFK kKb32N7tfMMRro4nIckx9xkUEQY9zgqcyogsnS1qkhJQaEqj9RwRktWnks+EOJdv9K9N cvD3hWmCam/S2TFsdUcKYCu25tVVhQL+pxzkeNWbQyaz7OEyHJQf578rsdBDc4WndtOd LLvWeHlfnuwV4CkNXabKYUEF9O4vtQ7afmi6IORmkTeUrR/zi/ESEmM0AugMOgrVl8zx SLakHtebKd+P1Bcdu2wnJV6SWG3U2X/jeJGhFmPYCgdj4apFPdK/AG+Fv/SKjGxVyliZ gpu26SmOnytawh8", "x5c": "MIITATCCBf6gAwIBAgIUQcXyPhyaFwVGZyvMujNUnXvrWcYwCwYJYIZIAWUD BAMSMD0xDTALBgNVBAoMBElFVEYxDjAMBgNVBAsMBUxBTVBTMRwwGgYDVQQDDBNDb21w b3NpdGUgTUwtS0VNIENBMB4XDTI1MTAzMTE1MzAzOFoXDTM1MTEwMTE1MzAzOFowSDEN MAsGA1UECgwESUVURjEOMAwGA1UECwwFTEFNUFMxJzAlBgNVBAMMHmlkLU1MS0VNNzY4 Ounsworth, et al. Expires 7 May 2026 [Page 103] Internet-Draft Composite ML-KEM November 2025 LUVDREgtUDM4NC1TSEEzLTI1NjCCBRUwDQYLYIZIAYb6a1AFAk8DggUCAPe3yM7DcDzj JqwKKQcFtB/gGh7aIbIxCRy1HIPRP0f5wNY6pri1RjDAdVi8Tko6QJKWnG6lMtQxPbXp ym/qOpkJF+OAAePlgvr5yBpIZKPKiPOcvKXgBDimb7Kkq2cUpf1jnAzJP1U3VCC8uyMx btMweg2jITcXFJqgsYhgB5REyk4Asi7XCwumDItxRIh3aEPgGFdZtH+VmqzUszQTj5pU cNYGNJ1Tu7LAhNeodKBHz86Dr/dyPnKBHNGDK/THbC5sexumiRIhrwRlm3nwQwTKQUan kXOsMO6rwP0DFBt8NCNRAy7LHh0ABgwEAdQcPjo7dqa6ZvEKA5dHAVDFYrzDhktBzfIJ sJXrDdY1cQi3NOqDC0HQAlfpz1oQllPkS8RIjkCLwsXiDL5Lu9CDBWJjj5xoAUMGDs+8 rhycLtaqMNp3wALwgLHXkoDsu3FIjkc1jvA0mf0YuMLLOaRSy/NskVK8uHxpEL63XiZk pv3BeWpmbgNcaoF7hxmldo7hGdmwsHrTCTECvxILwPJpsVR5H67aeBwpjqUlBTZ0AwV6 AAIXwYdji+XLhrbcbB6REgopMB+WgFpMVm4JBwPFylyqmPBnwA3RTGH3qL32tdawJZNr dR9ciy31x5WKTxJsNOSnhXXCOS2qPEBsGdGmUVX3zBKlC4G8q91ghD2kl7bDzVaUK9xR xpJ6R9OCrhRpORN2PfyXWTKLdlmDQe8UqEuXD2jUNwdCKdw3DoHIm2UAYlSQSaU0dseR gXdIFPeTx3ARfi0oIlbZkJ7ERwFRVpPagHfBvkWxed6zgztGLrECLddLBilDvfgxgPcT J13QvZipu+rxdYuYlOWKbMqmrVSMzSciY31lC4DaAvdVXt4ToNvnJ6Ebi3zVLKSFl4y2 YtFWfEizAb81NU9lmRRgjvZwlpGWTsRFwXHKJl8gndxDuuzASwQodES6h1qDvoLSWy/K fthrZVdHMGCQn1Apcod3zukZbc6SfqCUHbuyvzIbpbC1EeypaIxKPj4IWNNWbuE7l67X UybQZ4yqH4U7T22QO0/xXQeUp9LjiT8RVEjAh4k4G0zLw421EsgCeyd4rFK6moBAfSQ2 eJ0pV4P8a6jDfDIAfsBYK9ThC/N1acymoA2SB8FammiAS7RqRvupZSRrMffZo2lSVQ3o XaHYU63RrM82u4ARPPwwXeisMMmHYgnaeeMawN/EtCk8ylC6umYXfrDACTJGq5YXt7Go TqDLMnc8WS/Zw8wKxuw8kK8wdJ6HI+Sob4oJAkBXjFK1zZVAinsxrddiyVzHJRmnHoPy NJJlfNjWZDUqczBGecyAFxzwqMfhx996pGcbNy4IdTAlzbW4sPAxqiFZkikBQcKElaUX Cu53xUa4r+xlr2DnLtfTIn4WY3epNNJwNxmpSU7aFIx5IV6whSpCm99je7XzDEa6OJyH JMfcZFBEGPc4KnMqILJ0tapISUGhKo/UcEZLVp5LPhDiXb/SvTXLw94Vpgmpv0tkxbHV HCmArtubVVYUC/qcc5HjVm0Mms+zhMhyUH+e/K7HQQ3OFp3bTnSy71nh5X57sFeApDV2 mymFBBfTuL7UO2n5ouiDkZpE3lK0f84vxEhJjNALoDDoK1ZfM8Ui2pB7Xmynfj9QXHbt sJyVeklht1Nl/43iRoRZj2AoHY+GqRT3SvwBvhb/0ioxsVcpYmYKbtukpjp8rWsIfKMS MBAwDgYDVR0PAQH/BAQDAgUgMAsGCWCGSAFlAwQDEgOCDO4A8KXI729JIJTrxgcQDgBQ SrwuxzXScJ66O/sVpI+lKgY+QMWhlgCiN9bZAe7uDdG/n0NdEm/KXBSAXv8M2dZzA8uw WjvI9zkeku6aL73M+vVYke/H2c2AYyufv3G1PIfCz6ZimOkcjDjvrpHpK8SyNxAhlvqp Mo10AFCXYSu9LaDi9QtppKzotPZUoJ3CKVRgG2t+0a6FToR4+stQfP7nrHUN4DWGJpgC TkoWK/9EJCwRuUEIyQg9cCXoQo1mB2j7KoG9sSZ7CgQWrkJAGakLZBsYZlbYmserPZMc 56kLQUu6/a0zCegWAePXMZ2hlHRRdN+892WWFSmeKxvuKvRvZKZfqti58SVQzC88Y6En 1WFSTvI3kfo6pdK99xY7dMGtTUoe7otSCbfP2E0mSe1ch0E8u43FZmnQF0TbNz/jSdsL q/2W5fwvMEqX2XHwNys3RxRlhBZGT7NenwYWET5uLfa0EANLkCiE3eYjnZLWtyDKX6wZ DOwWYcHlwhPWLWEgTU3TBMo8NzrDeLmiiJbajazqGeBD+NYmLbY1dcSvsmuuoccnEOze xp9UxYg80tp+9Oa5MKC/KscTRsJjBAUrPgjkTKe4zCqztv6UaEpCLJMZBq6FmkGnYziP 2/mCHEv1tC6zjL7fzt7H9GPjbH7CQMZ5fs0d4lmwkXLJ3WF4r/LS+opL/cEkhlP94XTP 7JNQHtXBSWnADlWjvxIh15gklWc/5GCv5Vm63u5S/uGkgPuFj4U5lfElgxYtI5SouAYS 0GS3mwUUtzQRk1bJociZL2DCfe4oYnU5kxDMywRNBBcrh2+NF4lcClyDDPm+fOwyS0Qw lR8mxGXUOoYSEhoI52UNJtdVeiRH8YBQCMe81FdejTyawzRcu9vkLnxj55LqbfggZpZe zwJTRaoWU9NrLT2OsIL2ZaRr+DChECqQqf7E5Fzs9yWTuyNKYrysGe+E824C6AlrDfNb yf+ljJ1BQucm/dktVe6xqDvNUq+GcDRDdMEmYdkAbU9RZgfbrmNk3aNRMAYTajXClJx9 DtjuiQpcs7GNFV22u1U48NGfbsPU4Mt3PBKR/kvZCJHSkLmqrphYod16oPlILUIZGrq6 bVkAPcHOHaLKIGOLgzqQT/m2NgeUKCtjUAhWGSwDmOO/6CWogjR+/J0ReFJlDGVlfInr ZScn3uR+8BltH/yWnkGMUN/FBoxCSTrCu4f83kp2eVS27JyjmkoWe8HDbDLLxp5flD6j O9YV/ZO9cPtMksRR9xH0xlX6Rtd5wFkgtaWNwMQazkLDDxN3H/sB/rDcuXaPpO3uOMJ7 Dc+i8yXaBR8NCy5cwH4FaBx2baWhh7WIePJKECA6P6lMm/uZ1KSHUIPCfWjFFUmK+bga VGyYGuXdZJgVUaHHUf9LTM85y101H9wy73WJxDflFi0fZeUCzsm8ESPnMxJbfeF5aYpI Ounsworth, et al. Expires 7 May 2026 [Page 104] Internet-Draft Composite ML-KEM November 2025 yPxFwM1HU5ME0+1tCseAWQbvIdBD2DfUDTbRzfgbfWM6pqm1Htjlrrg//hhG/jPhKg0b uPGkXNLsHXEc3YIuCjH7+wMHlXzvZrllmkBMGFboW0GAGLojmiiiSoYuwNaLKtqH7Or2 vMYjyBpktDECptw+hPc498+XLRoNfyiAH5B8LvE5G8OLAle+bRWEk57l/mqDCqu5dzl3 lFmjlD1brAfQzZNy2D6OtX0z6fBOqaKU0RrFWH14MJT4Lii7dCQ59ag/DhPsqIiD0zXB wiiNszAueP6ZWn2YEIycx+XcuIpJ9sMiMP8+XHnMUSBjlpR2sT2N/07q70qH7b/xzEyI uUAxSnELUlabtABMsXyEYwlIzfM2tLMXf/jjAKIwqDkNVHYimTvJHJbomvuW/lf3mzVl ZFhjZYHtEJRY0QpjlnQfvdRiLb5ohXr6R1zv5kXNU2pML5CYic2VTZuk88Zc3BhYC+Ov Rh2By2i3q+Rxx77MiVD5BT43cHKqnfHSgqXweBONn1rrXTJUA8Dc1bFF+ZGRWImtlA0g kShmpl4xcmZ4AByIgdBn6YkmxQGsOZIgCwwqc74xpb8tZ+8tghSwl2TU94XFDbCsCHk0 UOjDe3WvjoIBrROsmhhoPmEQ1y+8M6nVvWI1k2zgC8v8SjxqFMBRWSIgTq+KcE8fG2KF VBFzrvj2duFY+ICkX1KL4eZwOZJFcu/kK+7kiNI25DIs8+hJzHjtKxX5O5h5uDa4hAzd WiEc8Lh1g836QnHNKDZkbvbg/2NjLKXk7185uhzrRalAvWTQsaCQm/gx3TGW519+yqs+ uHxb2dpaBAnDpPUzkWnvnOPv5D+7qqgcasLoVf+ggCFMrxmAQwkBXyPg0ImkLBdQNjzr 8tWFkQ1d1TGKhwmhXf7DNSrH2syaZBxCccYrB6p54plIqXLmwCW99EFdKQm/5yBI3loN chTKjCdMqJhsRLQS7oFnl/M98/mhhYMBiarxy/oIwVr/HDo26/RYJAkrn8VxIxDXA9B/ ZDctZFlrBfim7N8XvOO9zkRBDD9RB90RA1iuUSWWQT4UF83Iu7jl7/O8ZBNV5suGFeUg PyMGTOhCjWevFPcYwwK4er7uH/XFcDLmHtDFPgJSYSs5fFurkYDjkLVvWe9Josy5vPsT ybMlm5LTfI7FxpXws4/CkFoSzcUPyQnKzcdRa+IqVNr/qlO1br384tyyy9iytoWTAx8j Ru0gNyOAYdIg8kskYkD6WvN2erDvBaSz/NWHtZ6F1LkepQ3mgd3bGk9YvKiLXiSkkA7b WzQx6Q7zJf8BcRU9YE41zJNJY0uNvz2Gy5vm6WxYgog3bN+OfyqP3MKytMdQhlLE23Q2 ApOmWIg946NGt7Mw1+tJWiMeXjmlPEZ77m6W2369GHl8nagyeIkPiVIcloM9cpLuBH9m FO3ataIe4dbD0k63cgoALt8tEZ1p5rdu9vAHrbSnPQDJAa/ag9tegVvmOQwTCiLjjcUa veraZ6TWJlvEH12aYgCXXztFxxg/+wWO//YPvnecZ/eOLOxDPapFj5/EJbSyy3QDy2ri bDlQtEagqanHaC1sxNyCbwMH6ZCrcJJMkv1Um1dvRnYwiTxFWgsw+vGBxqHokz4MsV7L A/cRdXskHfRGbbf1iPEF4Gzc+Rh7GS7MIjF4Y+TsHag9flPMQFfoQg0KVbplVUHUZV9E TOR4JfoAEXx6FHGcNflWg4XoZiU8zjsas2dA5T3v9QClHu01e2A6PNKQNb8uIKIm/xP0 vbqRUOTzNF+rtSInhqfjD63cI2xVb65pt65wcL0Hs4XwFCRe79n0myGmTrmQ9k+gu8jc QEqlxC/JH+UV9Am/QewmyC5kvcUNPzwye/5vVQs772kSgynexa2B/QntLKn2xX0O2eWz uKsgFw//6rFhFtndVs51qhp7Gq6uEK9lVc8uuieTFBkYzSk8HbgwoiUUw1DK/RIiRZeL bC3M+cfsi8sbjbkuei8ZHhb/Su0qJ0pn7lNTzciZ+bvMkhRlAuc9kPlUZc0KnNqhSDTC bUcq3/OAhdY+/ggYywYEIilidjRfw9cSBk0OpHzv02/zMLn9IaEzOWio5dBqsHEG08JA rOGBeeKZzbPVXiDfZvVxw+vdsPWGVwOLlGq/aWCdFIwbgCK87Hlineo65IyKuDCnikY5 YzexKMM7RTTzKk3/ZVMTyoDFLzQmGHud9d1H0ezvkPdwAbfjo07jTRKIuw5Huo4VdBql VDEdS97eUHGyGsVgOI6AXGL38TevmOpNpA7xulW/aYgswD32ol2PkUnn40HboLVe/u9/ XkVVRXalftLvH1zSDK5J7itWe35xZh4SY/Qsp1mlz95QrVxFoj3cvuDHNXRxm9NLD9Pu 1tO+tbSdtn7BDvuhGMyBipiNW/VtjVGxGg4naNAqanqA83eYM9g+gQ6fx/piZbDvTTxm E4kK6OMLOme9/aSFojlmKIC5MGVMehYK48Z/7bU8GHe4QlMcQbQZ4jgxB8+1Y0UkoN7R Xaloc3F8guO7gFEprx+6nFII7eb5ko7WXh4G8jZOex7js73JcTvDvPPVSbqhC2BuDV+A iKrkYymYlapHzHZO5IIc5fMsoqVSCs4rqqv/cyWUmJ+a+5iihiZmLzP06vg+UT34/CtV j0G/kwZTYreMLBlAd1DldBkMzbyGMY+sTYeGbdUxh6vDJ9vSWU5ADVYR9+jl0K/b27tX A60uMAU5KtsfrsGAjr8vWRqxDT8xmvaUz9v82brZJ0hvs3G5z0NxtJvGz9+y7jT9KT6U ovbSmY62EP9JNaY1EfpH7CU3tAUbI863G6wKtoc/KwtMbOSUqDAprbPX3IcGSrSop7mL 3DkhJ2F3b79tiFtpP6JTGmRPNZo6cZG1KDxNY3+M+xpBZHCxsgAOfoqPkZ6guMvl6PFA TWuHoLbE7fHzGTtD+wAAAAAAAAAAAAAABAsRHigs", "dk": "E9DcmHyVlZ+pjFoBTDs4y8OBfBPy9thOUZ+y90O8D1PwaP0eqZpHopaab+AhB Le2I/cnBSOf1pWcEvazZBaTAmEABBfTuL7UO2n5ouiDkZpE3lK0f84vxEhJjNALoDDoK 1ZfM8Ui2pB7Xmynfj9QXHbtsJyVeklht1Nl/43iRoRZj2AoHY+GqRT3SvwBvhb/0ioxs VcpYmYKbtukpjp8rWsIfDA+AgEBBDDe6L/tc448AK4jc3axY60cBWbCRlg4M78LP+kQQ Ounsworth, et al. Expires 7 May 2026 [Page 105] Internet-Draft Composite ML-KEM November 2025 dK9/Ih2lVx0ttxjVAuYzy8puNOgBwYFK4EEACI=", "dk_pkcs8": "MIH4AgEAMA0GC2CGSAGG+mtQBQJPBIHjE9DcmHyVlZ+pjFoBTDs4y8O BfBPy9thOUZ+y90O8D1PwaP0eqZpHopaab+AhBLe2I/cnBSOf1pWcEvazZBaTAmEABBf TuL7UO2n5ouiDkZpE3lK0f84vxEhJjNALoDDoK1ZfM8Ui2pB7Xmynfj9QXHbtsJyVekl ht1Nl/43iRoRZj2AoHY+GqRT3SvwBvhb/0ioxsVcpYmYKbtukpjp8rWsIfDA+AgEBBDD e6L/tc448AK4jc3axY60cBWbCRlg4M78LP+kQQdK9/Ih2lVx0ttxjVAuYzy8puNOgBwY FK4EEACI=", "c": "WHARPFGFZGZZuoa3FliQeWaAe+NC/LvjPV9kgkTo1n23Q0+jQtbo0dNKqsJZML k+2OH9yysBb0TfqGt1F0Ds5BPHD5zyHkDrs6UfOxQnUJR23ryNI5oeO5LtIgAQyz2wac 4kuJzR2WJlz3h8+s2a1rbKUFfBpzSiNarTDmRXot4IP5s+x279qksBpMwiCDAVY+dVIX apWK7yRRnvW974tOr0cg4Wn16q2K596aeFfED+76vT6w4WS0vpxaeSlSK7QdXlURyJHC nqoHwpamXUpF2M2Go2t/3lAnoYe+KTTApRsi4tELd16FvXwCPkkMCqiTAnI+RK8VxU+6 TfLmwYkBqjxEAL2AoWKsn3FVY8drtu/O/ToGGvEKB+CZTDVsxtgI03LyIZ+U/TeLXnPs X4+c9znZw+9NFzXsnMtd5WhbR+mouGAy8wpgGd8NScdWkPforbYDVh7Ndjgp/8ltuPWF H0WtGkGhuvqO2dfh4l1YGw93Fgpn7DJrUwILU1jLBaF5iN7FLSkW/5ZfP8oVMeFhr5FY 4QWGPjM1AnMw1jpp0a5zwkhegi2rIUqYqV4+xvTGRlKrLg770mk8k2LGtd5QZznXb9oB eFZ3KrOlUKs3uFcKX0cu3IZZgfhptmqQDwNtoNDs4eYAaS8xb2zK8p4Rx7mRW1WMU4cR kOKjc12SeRKFGDg8C5nNuFsUxlb0L9R1/kuFJO3VSf/EMZsmHUebSG+l08nzNrhEsuVH d7FKsxTBsdq8M+hdiGn1/tcVOYVQJ7SjA72Hb59IhP9NlQExZJvRhK8GY9/t1hRl+Wmf PAjU/5Ewk3Z28qOrtQkjzTcluIl/xVd+7CQ+iGQvAttflzVWYvIhx+Rds6ZHCVlDP/4R 4JVHVHTViXcXHft2d+DdzPu5bPHWLdHBvAaDOxNYlfuHfg+fnE/KBsAbce7I8vzX31LV y0GYf5ClxDN7g+0N6G3PhbT/B6RazRSik48E8hjM8BsV6HYPL7PSp8VMVVLrOametqfq JvTDRxYx09SWCVe2n+d0kJDTFulrCcMM4Fol/ScxlWuzbIZDZTlp3b34HkwfolSLTcDP /wlv6m9y7CtJ8gf8oxUuGjBH3t7NU2M1HewY3RUAaHhi42qZzYIofda2vvlvPqtWcqCA r5HNVPV6d4cV8qkYs7lwUVk6+NIA+XDLrFa5n+xlxgCfl90ho8pB4XEc4/PXTIIxTmU5 wXLRlWbl0G4ElFmmtoyEZPpGqqKXZvgxlVCUIq+c9HA2tKjE+ObeaqIi/z3Whl6FDajB uiyYZYbcVkhsM08WC94VwLBZ/kHYgDhwSG7m2qVxlPcKU5Qo9dhkzhycQDx/NV+xOQAC 5J7CNA2A9ftyQ3uCoxXZ/Qd3GB+5Vvw/54a83lePVkqYMLqtLrj2e/WFR0qkBaF0VoN3 gvCMAagktRJzKGejcC25z0l8XLo2YE51koO1P/yWIrPoenJeIhRKhamdCT5OWtBcP5iM dnlit2mrnVjli+0kEyRzxlIk8Rd3BkAq2R14iVS6MAKBRS2o+LF0dAi9wXhKoetMNCJY vav11yPv//VHDcL5qZMrCW", "k": "pk/2u8QKJmYV5nI4VJYOtzWSBzJgHu1xnC9ILQCOVS0=" }, { "tcId": "id-MLKEM768-ECDH-brainpoolP256r1-SHA3-256", "ek": "DBC0ZKhyCmqc6rVq+uMakCVbbnJyIfoJYvK36uh5UvTEQ4xN+dG4iOU7cDVWk DC0UGu5qhe8PMknHOMvLpkCRWpEi5xA+yUTkjqrKoQPApVqP5pgu7qmIaSHhSTCvcBVh wIPsxClPax4RapIbYFyuyoL4/SFdHSBAYc4RtuV/zsZxLCJKGyqbdFi4AoejeS8U2EOg oKemEOkvliBZ2l19cgmmBFBgsgYaTwVwFirZfU0xfzPPOS/9/OuGhQ4bnJgYNlnHpM7i ZNSU9p2yjp7CytuFMV6pHR5nNys0yU3kKWvI0CfDxtr+vilsTl+l5gq+QmOnDSLDYI4M SRnzlZcHYlwWjiEmyVHZ8SLYMe0SNw3VrGpUkxG/Cc9jpEUDJqgCBa+zkKGRpARkuBMl VcRaLgMPZhAgyHNrtxDtsoDZGF1SYEtZUiuI0Qv69S5f4Yfrummw/wazFQuY6tDmHksF eBESVx3GZS4LDuRwlls0ypMDSu7vENoQeWJkaNUgvYHQVNggcKWpNBKRUW3YoTGuYorK VCFR4LDL4A9dYaTt/gf6TIMb5dj/mxvbbsOEKNxIkwPujEm+vAgfcAzeBciEcRnyiU74 Oyf7KObN+HOYXQEdRCRdjzHUsWtDqkPcwcrjYhS0WW9UCXMrNSRCzBHTnPMJ9svu/Jkp IAZOWkfpPeijiS7l+FamiHLMyVDl0Yt9FwEKGNmKIS3FPEXg1eY51EzHvUwa6IfSoo6Z iCysbiCXhYaJss1JaGmCbTK45m7pEYHJbxOktRJEgeysgpeNtJvbHOUhNLDmUIgdYNAx MewRCNu1QXJbjO6wLBu9oAja1I5J8wOfAMazSR86/BPzswpb4bBdeNjcrKYHCbDK9SWu Ounsworth, et al. Expires 7 May 2026 [Page 106] Internet-Draft Composite ML-KEM November 2025 nEEOZUdBWNe/pxoPTphOfoEiqAzmacUChA89DkCc+EO+7G7bOuGEbALy9pHY9qvInmDr SUTk8fHbzuZ4Npskbyo1cSTlQEq8TJNUHI56CeVKqZaSUS9uqK8wWYU33k9D1q9AdYD+ feAydUeDwgRxjA+nHssOEMtrkNXeaSGdKN9gvsOgMCqHiixSVgPuGsJevpYVxlxU/gSc DhdHaNA5zpS/6umjZlquYhI7xsNUmlPQ1AQ5yVC1wW4+MoDi2xXp9V2S5ZSHhIY42tv/ /StEdIcQTxiyVYMjIt2kjm5aIk+8Gt4/IVAVgwfphbOjAnB8qQP8AzPGFuPUOpwnfoxZ CYyvftaLZBM5daDKaWN6KIKVzSFYjCBb6e17fW+XoEXEwoxNwYuOmax+SUppnp9/5htG /t/7mtzYYE7OlpdjfFk4/JuMZFu6CLI55ZkTxJulIeghzOgadRnx2sbRSxyQwi+fClwj RAXLWcJaSUHQMsdW3NSG4gjbcyCRIaqa+ehoTdOn0nIH4pXtdICShITpKhVnVLPNVdRs Smk4EVuTCvAHgiMg4ONwQWYQ6awWZVrSamNVSuo8GyTadeixXLHRPKLJZFvw7m8XoSjJ Wk7MieawwGWsBOuRTY8w7yKXLkUxTZICgUZO+pCQCWFxDCBbF4AomhyT6+qHEzrIgqhK Zkn1pQZv25Zy2HvAFDewq4EB4ROGHybJRNwFuzwzI3bdosaUuuZx6xfNWo7kWgQoZ2QA nym+muWgFBuLf2ZvDeWZpHcm3DPDEH2ARe7meP+zg==", "x5c": "MIIS7DCCBemgAwIBAgIUJ9IMhQg8xRejj0VdK5C4LZBdczQwCwYJYIZIAWUD BAMSMD0xDTALBgNVBAoMBElFVEYxDjAMBgNVBAsMBUxBTVBTMRwwGgYDVQQDDBNDb21w b3NpdGUgTUwtS0VNIENBMB4XDTI1MTAzMTE1MzAzOFoXDTM1MTEwMTE1MzAzOFowUzEN MAsGA1UECgwESUVURjEOMAwGA1UECwwFTEFNUFMxMjAwBgNVBAMMKWlkLU1MS0VNNzY4 LUVDREgtYnJhaW5wb29sUDI1NnIxLVNIQTMtMjU2MIIE9TANBgtghkgBhvprUAUCUAOC BOIADBC0ZKhyCmqc6rVq+uMakCVbbnJyIfoJYvK36uh5UvTEQ4xN+dG4iOU7cDVWkDC0 UGu5qhe8PMknHOMvLpkCRWpEi5xA+yUTkjqrKoQPApVqP5pgu7qmIaSHhSTCvcBVhwIP sxClPax4RapIbYFyuyoL4/SFdHSBAYc4RtuV/zsZxLCJKGyqbdFi4AoejeS8U2EOgoKe mEOkvliBZ2l19cgmmBFBgsgYaTwVwFirZfU0xfzPPOS/9/OuGhQ4bnJgYNlnHpM7iZNS U9p2yjp7CytuFMV6pHR5nNys0yU3kKWvI0CfDxtr+vilsTl+l5gq+QmOnDSLDYI4MSRn zlZcHYlwWjiEmyVHZ8SLYMe0SNw3VrGpUkxG/Cc9jpEUDJqgCBa+zkKGRpARkuBMlVcR aLgMPZhAgyHNrtxDtsoDZGF1SYEtZUiuI0Qv69S5f4Yfrummw/wazFQuY6tDmHksFeBE SVx3GZS4LDuRwlls0ypMDSu7vENoQeWJkaNUgvYHQVNggcKWpNBKRUW3YoTGuYorKVCF R4LDL4A9dYaTt/gf6TIMb5dj/mxvbbsOEKNxIkwPujEm+vAgfcAzeBciEcRnyiU74Oyf 7KObN+HOYXQEdRCRdjzHUsWtDqkPcwcrjYhS0WW9UCXMrNSRCzBHTnPMJ9svu/JkpIAZ OWkfpPeijiS7l+FamiHLMyVDl0Yt9FwEKGNmKIS3FPEXg1eY51EzHvUwa6IfSoo6ZiCy sbiCXhYaJss1JaGmCbTK45m7pEYHJbxOktRJEgeysgpeNtJvbHOUhNLDmUIgdYNAxMew RCNu1QXJbjO6wLBu9oAja1I5J8wOfAMazSR86/BPzswpb4bBdeNjcrKYHCbDK9SWunEE OZUdBWNe/pxoPTphOfoEiqAzmacUChA89DkCc+EO+7G7bOuGEbALy9pHY9qvInmDrSUT k8fHbzuZ4Npskbyo1cSTlQEq8TJNUHI56CeVKqZaSUS9uqK8wWYU33k9D1q9AdYD+feA ydUeDwgRxjA+nHssOEMtrkNXeaSGdKN9gvsOgMCqHiixSVgPuGsJevpYVxlxU/gScDhd HaNA5zpS/6umjZlquYhI7xsNUmlPQ1AQ5yVC1wW4+MoDi2xXp9V2S5ZSHhIY42tv//St EdIcQTxiyVYMjIt2kjm5aIk+8Gt4/IVAVgwfphbOjAnB8qQP8AzPGFuPUOpwnfoxZCYy vftaLZBM5daDKaWN6KIKVzSFYjCBb6e17fW+XoEXEwoxNwYuOmax+SUppnp9/5htG/t/ 7mtzYYE7OlpdjfFk4/JuMZFu6CLI55ZkTxJulIeghzOgadRnx2sbRSxyQwi+fClwjRAX LWcJaSUHQMsdW3NSG4gjbcyCRIaqa+ehoTdOn0nIH4pXtdICShITpKhVnVLPNVdRsSmk 4EVuTCvAHgiMg4ONwQWYQ6awWZVrSamNVSuo8GyTadeixXLHRPKLJZFvw7m8XoSjJWk7 MieawwGWsBOuRTY8w7yKXLkUxTZICgUZO+pCQCWFxDCBbF4AomhyT6+qHEzrIgqhKZkn 1pQZv25Zy2HvAFDewq4EB4ROGHybJRNwFuzwzI3bdosaUuuZx6xfNWo7kWgQoZ2QAnym +muWgFBuLf2ZvDeWZpHcm3DPDEH2ARe7meP+zqMSMBAwDgYDVR0PAQH/BAQDAgUgMAsG CWCGSAFlAwQDEgOCDO4A1/O27/5NYyGD2RV9Fa5jfF+Paev/OE9bepafvRHU0BrgGe26 fmSpSZM4YhpfMrxvax4KIb/VmRBEb716Qpm5PMb3oPWJSJip0Mnoju9zcmly61ekUJQq RPYzUGTpDzcsnfGytxJ6aRobINWspo0PVZLFNVwTCvnTN/i3SHG1VXjytBiUIlKOS5eE AKV7lhbTCx/VozPCShSzSFrQsbGeRm4cMPAA2Q2zIz7tdxrFn/iCxMuk+369ccA+S8Ax 2bbdX6E/MhMGSVNa+Z9FLYwkpVZ8U5uPPUkvhSLexx3H8N8Djnsl6d0XyVVj4lbkJPY/ XMJ/YL7L3UKqdA/1zGrjUPNLbhjr65e46QKlLodt6SKHme+kuSeWcHKE2/xmZYFa1Xhh Ounsworth, et al. Expires 7 May 2026 [Page 107] Internet-Draft Composite ML-KEM November 2025 TtxuEPqpnYop8MUCOZNMSxab8+3NbHkEvBuHZYh0V+m2zqkaysz66IPndRV5xYRFbI3m wqg1Ih92ovlzrtVE5dvac8LlGMWjcVNCDXFVaer+x+79TUVbykB91QF7+WPEnMtINDUz uE/vdvzpUTDcvSITgLCMMEeGaHCnzc58ViR6w0AjLOxbb8KoIt4zuMuiMjntpsYW52Gd 1wqVxaIfN86riQoUL8l7eIkQEHrSzFWNV/JnyDB10FwsVlZatrn237m0HvgYC2Y8Abmp eJUfwiFWaxDDUbs86uce84Y2OLk3IFaMmINtPu5wjAdij0vFAyDk4XipJ1T3YpiollGT q1xy0TePovzpQ3t54KPgM2VbTmfjba1dj4yWxkIAaVcyyYvYFVg6P7XvUu2A8I3Gj54T YpaShL46p8OGZRPqhjwxQ2YCHg1F7CJ4kBGvY/vBqPRW9mHacLriyOhS9AM2XoWgHXvQ PcIaXqCayjapj4CxljoEOKxEL7N5UXxY2YZ8BV8mBYE0Js4VoXf0KPpR74PmpHqBvo5L CzUEzHuf+SLVRjKWVMfgAMzBwniPA0HOE/8nzliFpv2DEflDZET1UVbFccrunKgleEsN BPa7yMkEOY1BjxUvS5znC4OlehJ1ov/JtC7i5AXAHFGyjSv4TFK5pni85u5W2FeZkaEv dcGSxLkjhC8kfrj2iwtgPGBM4fAf9SvX4dnNP3B3Mne4HY/yTNliZ2GI8ptA4sDkfQTd znAqkGXRuqmnkeTXfD4x3YewstpwDntpa0Zxf/H5o5aceevP05jVV3WEgURB7JJnw9WA MWDeM6Lw4WiKuDitlI/CZSk0KmS2Dda+ctTTyzG473J7ucQp6xMEbxt7XIv+Hp3tRaba TDSn4h88hF7DCSdOMoEQXu2tV2c3pq2RjvnAUL4KyBOc/3tqzv0ftvxLlD8StXuZbPEi bdA+/0n4LjdEqmVEVxHdSiiiT61azcmz22Hkm6UOucu5oHSEEDNz1g+Mym9u5jxkWN6S oeHumD5w4w3NG3iZtSahtaqq1yPtKQUa6z9a5dn2qsvk21veMB61htI6sHAaqGle3fvr oeAC+wu5Iq8lQMXWUFpnWQLEOcBEYJyMsFx8voVsLmrfc6Rr4dI3vOEu+LC6DfwjKymk 93XplFxA5Waem7X+kiHygAP23UEwSG65YDmkV8v0I9sfYxPoZvx92gUs/+mNcjwR1Cfu Pgdn+2/mRIpAtQ4V2djDHjYRlzGUWffUKBTj7WBxy9cwS44mP0T42rSDyr1vDKTT0zIT miWcRRkIr8F5i/13XmMpP9asNSF5nmSVEJTS1SuhHq7GVRfa2Q3xFsOg2VdfjGz39MCv 5zKMy1U9ACPQt1vlYR5V+lOWEUhjMWpDb1aWqCHA5UpsV3WxoO26U3kz5pIwNjh1g/eP 9YmjKAq8j92/ki87OwkEwVUntOhvxhYo9ST3ir/ndka4XPKJbzHg2sRkRtShMAWFH7+a OstKe0RCYgXhaE/aKEMAQqRj9erxX4+OELFvUAdrJ/iKKX/DY1JiHoiZOxUuMnGCLAe4 lf2xmQ/kqXD01VRT8KJrHQ1rmA/aDfo/6Eg4PlvfaUi/OwrbS6b16BRmyOaNNcFR3Lxy UasdiCDdhVVV8dxekyGkOa0NP05tDxBD4MvjC9M7LZDS5Xzl+TGRHJyD+ykYWuuDMZn5 zxE0paJeV27aNn22Cy9v4ygWuuzgnjV84xs0Qn4609yYM6BIO0MS2N1I5f3PYKwMd8Kp myBf9A0nGQNCnis56W2ylS0vMhelnVJTACfsNgQH5ixTSF1PUwrteyEx6uXuLCFeVrJG DfVATqM1AaxCKnfKT09FrnoGd8+6WxxBREyxCf6rM04F8YYUzJSA0Jx6MIIRFiX1FxgA CtQVqIHpbwQQ3FJXkdz//QME9eAMr1M7nkjoh0VxbaPP4Wo4itkpVrllM25xtRmQRpEe TxB/vFkrVqFjd8zrinHmwDGh+YOINvJncK5aKrbusvfszxGRHThEhsK5sex13yPUcgKo GXarJLT1IE/RPhB1p7afkNiymF9fhtLOo9NWF6+nFPgMGYeItRZVfyDXLOCFfY7KxyRj HhFfUOao54UBpiUAnb/nx+bMPkFEVfDZDf7FB6nwEMjPc98luRnoVXZbnK9tdLIenxT+ asBbNFiFpI5rJvpT6FpBqzgBURn88MB6djakkU0P7od3n1T6gZgWK30/yWUhRnuG2J4s ogwllK9fScnfrOtfk1fiz8OzDlhTPlwwxPsCPXuHwYejRfyaJ8q/9SO+fqMxgMM/R7XW fg/qnQP8Aov5ACir5IGUWNmAY0y2OZ5l4xnyVtj0FiaYnjoSXqtaJSptl45QCgX6yzx0 3ngIePGaHtNJ+9OD581Roaip16RPqt2f0q1XFg7nUYbo9snrPJBZ1+xHOyPy7EQd/61R WcuvinzqlAcx2EwgIMBptyT1lf9Hm0hrl5cYY9ZcL41BK+GBLOQCC2ROyqsigTMnaYax kUBM4Cxfu7Ts0iMgt6js7NV8LwlM38nW7mChmQBghAbn3gM2/7nKMAPoEWj84YXZGneY FbtmukFMqoPBEnw5bK8BJnKC1r4076x1VDdEEXbiMy7UK32s+YGnQ4eNlTjmTxyXwTLa 7lD7PVS6wxI3fOdqi2hSOeTp0R/tMfkC1cOuBoFakIoSv58VfYGdZPJHGswTlfVaXjxa rXDtvU3dFKGO+XCrgiY/fwvAT0byynh4QZljxgU9V51ta+Fp8pzV85ieBMk/z04HjVWr ntE0ofYtjRN/MwsEEJQLghQB+9sLRrviH/Nte92wW45tA6MsilqkXo7rkdFF309hvMK3 msu1FYRdRAvZq7iayDVlLT065n1I7MF4DTBnVuauSNPLNDVtStRzEYTZ+fZJcUsu4Su2 6QS3Gf/65bsNEPg6AF4quu/HA/vSPC5sTM59ZECcIFQNfym5KNtWfhSK/3qZU9YBc2Jt fr6Q3ihGRoUtfHqr6tpkecaqMhEdNs1YBkV1jiuMtGf7QTtxoYbyn2sz+ren5XmfLcI/ oRI5+fi3IMF4Gsumu3lk9oS/4+nHyxc61Rp680PGpzr6bmx/uBrq08lWRtUAAu0bsizz yopZoBZ+peqQ4ucSla8IX7Yw/kJkp2nxHoQDGvism3HpNvk77Hb/ooyIKcTW1k+NCZ+o /k4q7yvUr1kzynPKjTEMolyUKcSaOaLU5EcAghSJysmcqFN0xRQ8jLhVjeTRS/P7JSEx Ounsworth, et al. Expires 7 May 2026 [Page 108] Internet-Draft Composite ML-KEM November 2025 CE+oRE49+N4Z0G+oUTg7n+lczE9OshPybDRLziUIyJDUVFUg/YK+tsWEGIignmaqkzm6 LgA0idc1p6wQUwcsDArV+bsaG6noOXnx3ezTEVODlDPHPhDKXmCy3Ny0HL0HkqNyfRQM BKAXCmNEooMK6kxn9OeKWTiPK2EXHo+DFD0bACivooPTwa/ylD6jIEFi0x8VYh8a/ia/ xSidb1xMQseYC4bEsXMt4XxXj9aRbxLLi5WwOrzRFTxRcNzcN/2suJqMG7TBFXkMuz4d M28sN5ow6faGhsUhgxpgc9JZQqGpYTgVii4p2TTjZwr4BAcFbfsO/P28TJ2xU1k/uIGr 3NFSdaskAnnBbZu/61ShZDhKYjC8GSUsfStE9+9jGIEwd6wVgkcMXkFyxAJGfYY1oMwh qSPOYNsPUOYHQSjLUo8WSeK67I7H33IsEsFahUR12moJdaHH/LF7Ch3/Z6wE2El4FKBJ eJm4VTMCukpY3pXOpEEuo+vEIHQzGhW88gfLhoHM23i6vXLtho4EZrbddPeZnyoLtsdk E+xHr21FWQV0p9oO6DZTxQ9/4MQeQTRcbpXlNlhYr966yspvdXCg5XNi3YqMQSepPNEt 6eGD7hnVZcjC+vNCC6B0guJxtMKv2v8HoZaJF+2GWzexiIZY/vawT9SaYVBn2x5y5C5i nUJOX2VyudkVz90oYmmFo/kQFRk5hNQYND5JTnSpuLzk8AAAAAAAAAAAAAAAAAAAAAAA AAAAAgkMEhgj", "dk": "URFweJueH692aT5JMzOp6gL2EP3e+5oB7dz0ow38JWhkIxkHfxTMM0f4qndIp jF8gfKEHf7z37KfBRKOpzi6lEEABAeEThh8myUTcBbs8MyN23aLGlLrmcesXzVqO5FoE KGdkAJ8pvprloBQbi39mbw3lmaR3JtwzwxB9gEXu5nj/s4wMgIBAQQgPhmxJgH2H9NvN IFPKU02z+bKo5cgb1VRXdFfImi0tqCgCwYJKyQDAwIIAQEH", "dk_pkcs8": "MIHMAgEAMA0GC2CGSAGG+mtQBQJQBIG3URFweJueH692aT5JMzOp6gL 2EP3e+5oB7dz0ow38JWhkIxkHfxTMM0f4qndIpjF8gfKEHf7z37KfBRKOpzi6lEEABAe EThh8myUTcBbs8MyN23aLGlLrmcesXzVqO5FoEKGdkAJ8pvprloBQbi39mbw3lmaR3Jt wzwxB9gEXu5nj/s4wMgIBAQQgPhmxJgH2H9NvNIFPKU02z+bKo5cgb1VRXdFfImi0tqC gCwYJKyQDAwIIAQEH", "c": "yG4nE6/gjzkZuMkj9maUrGVhSBGAAAprOn5XqEpC7xoJKD8fjMPT54nmfjpFiN +SDvjDZppDPD9Mzah0kEAx3mvQ+yC5Vj11pIATBDd9LKMQpOD+cXe3hD23MhWbKXALJh br9Qybzbpu5cm741nwJ+PUU3oe/DJYXCH2npBdKIF/SKtqkHMl/zkAS08ebtXrx80rmv 02kQXrxcTxHx2NYTBoziGjj34WtPIr0cNgNBQG/D4PpUwcD+ZYPL6Od1ogs0Zrygq3e1 w0Gyaw9nCEsvhZFHdxDC17OWyy4PhAKc/HYuxNYmHGO/W8xOkSLH7lEQzWaLWmkMFYJN rj7jqRO8txGB4uZYjvjXaoHhd8bkQ9CpcAM3zcUVf3Tn3CCWrvpIqyz4Uv/puSOwPL3x R16E2cdPUqSwILPazbQ/Z/fPQy+/hiSGKIAMd+N3RhwAY1+y1D1KlYmGNa68mBUjLGYU n4vX+ch+oTYlwDwESS810/vT2wbx7Rin9cnap274c/yhwC5vbCB5uW+M/+YyxzNHJQcF 5SqGKPJ8aeiXQ2AVVTURzaNyW6XGoMfymJoxSdQ7/q+n/sXrwWJo2GfqXBVyT0re4I4D FBmrgIZzcNxhDT40w7bgkNgu5w+QEa4Mw65L8bU4c+28LcsH0O9KuKx4p0/jLHlWxLC1 KNnR31KZ5c01lr2fbCJ53rHgnAfTHVnWynkWeycYhJO+JWhikg5nHoQNxRRFkJaCX0Lu EetZB+fDytHkjDew9p8oyH7mNsgZmrlzerLtkqmHoJBz7xFAHyfsplCbETZ5d1tml4cM iDZCDq9pzjBEtjhyJYz2SE5Pdv9nTS53ZHOIpQU7G1/pQyxtswLI9hG7dq5nSYEBRq1Y EJewElrKFcaujNPM4U66bn6PEM7Hm4tRQHNBhfyNlP2LrSljHgl94IFTa+GtjlCvF51h RkmOr9BgBjsxsP8Unea+FqjsraF5nMCYEtz9M297a5EC5n+b10yo2/sJEo+EF6iUU9/H fj2xKPFiH+gsGpq48TVXwmtORMjVHF29n5BB9HQsAf8kYsOa0Ub9g3APlPtZ55cWpm7f xr92bG61Fm8k+23ip2ZQQMnU0O/8wBNkBCL4kybMwmMo1dDChO7toGB41Kzja2KuFE7Q TL4LXF+1H4J8MniHwhlibf7HZbzaaMb3KO38V0VN+v7ToDMBHdKbtUE+Gce8gKD2RrhC UHUAMfxdsyY31oV+ThPDD1NemTyAQ4iqlP4GH6gZPaJGt9YY3KpoaIQuWRcEJjlccYUn TOJiENgQWy2lX9MGxjZqclH9hP0OPksIQKPlM0WJ6lVFPPxhnWtQlaV4PzLbVsDs5t5j XWN7u5GWvXh7VUjDF+Rf7QCtyEh2RVYno40tlN4UUDffrNiDYB3D79zIzlPT3Pk0IoQj 0skK06XKUxbz6yEAoR4WM1CyESksEERyVaOlYJLKite2eSR7yQqqclgwHao6u0Ub8kPP AaH8Z6w1X5Ddlu5Ngg+jW0gv+wQzaAkRjUrWY1KkGa3MKiUw==", "k": "YnsupoFe9UAUuYOL0X63mQ11nReltxb0Hv7/YktsGd8=" }, { "tcId": "id-MLKEM1024-RSA3072-SHA3-256", Ounsworth, et al. Expires 7 May 2026 [Page 109] Internet-Draft Composite ML-KEM November 2025 "ek": "ONISf1CWGzRHjhkoA5MH8Ta9T5e22oOBODOY4NM9J7adpRhM6xBwIgCpEchi6 EIFuSG+AXdgMMse9Ty1xskWdHWwIPJqDynGGObFCxxOPVbCq9VHo8B9NtSBYpuorHLAl aeC+npYKje+KDlZAolfiqQXFhTHVItCpEqvInAEdfVrkIs5V0U8AFsBXSE4JiyLGeqXT aonobajmTVlWAaIUuEVowO+0knPPKg38kgxGNaQh0SG/JEnauQqvMuqR/LHafmy69pv2 qIPkKSJ/gIAoMO+2QfJA0uVRghUgSd6Ukku4xi7GDCx3YwOMpBFFNZbEWDLMmV1AjDFs 2XIXDup1sESPpqWfKmR3YNdlCiCXjGr7rBPFyysVSVzQOGkdbYTtdlc0AOz6Jazz2i0F 4ViB+tubLUhLiB1PkjABBI7nZg+I9ldtmuxwOBP08DCzIeq+FPEg9KQdka2UuLCBVtew Hi0SiPL27uPWfcSuoBnxpAhsuSUf6MugNLHGJrMwmSN4gt52useqzxaW3aH7OagD9qg9 GxSNVPNKwdh15WHUxZvpHaWUsZx5qPJ5AClVVy991LNIyidZ0csCDWm3ljK4tKIbTMa4 fWsFcVvmTMCytFL8fFC5suMMQNqnZS8HHHGXipnSfWvwxdhsLtAJvfB92cQfkoFW1pon NMPpjjGv+nPc/kwtvEaTNas+yI7erBB3VwdFfam2Nd63Ca/ZUbNrvNoYZJEy3U06PSAZ 6YW2WlSQcOMsDx8NTnM/kklk2u/1zS5IfhvCuoKm5ZjxTgXo6Vzb+oQz6xsP8wMOrNvw 8W1cOLLMlEpIIcDvDMfZPGoMcXM3nC9Z9dsTmhUXYkUQgistDRqhxqmQ2AgYfKXsZMWr PIVGkrGYISzDtALLvRjKehiPehcsARXMfYrySgRWDZBmty8GbahQKdenxtQ1suR++Bl9 QV0YKxoetdl8RavtkGl3wjKP0Y6pemKUJZhimtK8hVmvKI/zXc8sZEifWWtvIxCscCi2 /q9+DXPRhEO96WzgFe+fBA/ktINHaHOAUKytoyfjiGp+fCGLjBcxvUU4Qw4VhEtCxhye 8dUzwkCs/o8t5SfPCc3xSSkL0iY/FpjRaRd8RaHWoEvsZJ5vBUlxahzvxNfNgrIwOg6y ssivAuorvx/0XZ4WfkG79yVrGhqeWpJINgRhbyZ9TzCCTIrYCo+rrJCQdsfL4uj5cIGq KZS3RKN/zgwTWtJ5RleTOB1kTtcy+ocFwS8cHuaWTpzD5uM5PcUHZdUd+krm/gfYDsb6 hpwqiIAC7S1hLGuN9wGFJjPzCYs/mbMTJMnd7EgrMc9M5NivyQj4/FPu7kGpOB4Rqp+x cmX+6u8SVS13gWd2ZYq9SlDOUY+C8imR3ITR0gC9YhTJ+yQAGxq/CukVXClNKxCEZM/E eNXcFtC6KdV7gxWwjx2rfuI4squjqhRbUCPLIRcxzxyi8ErBgYbnfKahRIy2UxYhrQ5A TFZplhL97G7OXNZfPh70+WAk+nAD+uFziWfEsAyUZpqZtpLOKZQRQEmVSu2M5PEwGcxr YQUldgIfCluHHZIGAuuFQZ2huSedHJZQOAnemyk6Exz+nS7kjOLtgcK8HETchAlv1jEw uYkTBorSqYhlFO7RqYuT7p3nNM0z0BFZvXGwAuuiRcFR/g3Q8yRNyPPJviS0AE2zjpCn 1pwXhPIjMNiU5SNdjyMPVVktcldNTWuZwUDoHqYxPl1CBN0/kyfO3O6pDioeuBxdZFuV 4Rt8vVSEKMJ3EfBiAW56Wc2BWNmUnKUsDNfeGgIUkOcpNiaGCWQYaWz90N0b4RShkyn5 DlTrUyj72hteaUEC6CPVMGGg6A7JnUNvxhIHThzkLcE2HaEihQt07iR5+aSuCKvHPCoQ DGCXjly0uwoVPZyOcB7x9EV0TENiLmyMLp96nwlCZcclJs5rwKTkKpih5tZ+ImvathWY 4iePDy07Hi8J8ZjkFk+poQk0zVAbLLDdrw5m5NTGVfEpAAx9dAKXwqLIAGaS4iQ/6iA0 MBmvFk6SEY1rfhqia7wcf+0rEfEP3w93GUI+cgRg5Xb6E27xoM4rwrE4KcwggGKAoIBg QClKP7h9N/VZvo+6NMM4Aoc2uqZkKB1Njv107gN8rWIj2LI3mOvnvtGBF1uCi4ONGw7E 63+BsGBPUYMWU53tpuG1vhZNyFEkh9U8xvymqtjogEjuEHQOlCKMeztgiK0UW4LK3eIC QN/ECwm8eXx9z1WHEn5muCYTtK+pXMJjyoKq2GV4Ek8t2STTV8hrJRzQWmHg0ETQ7JNg aNF3UVdbXAoNfFiFhVgp19bgxqMnx6+FbiF/387SfIeiY1v4TCIgu1mXlEWtm9zHU9iq sSt2rXLpFnLqAA9ZUj9POPcLPIgNK0xQSeh4IpTk03j4XyKl9kPcM2RJxr3GbGCG3Z+F onM1TiyEbQzO+Y+sAihwAmimjKObvLhhCS85io/dZa37pU9NVwUZO2FKegO3bHMk0U4C LlOpEpHdPHYJNwebk3cf9+lS6TFJTSbYsB8nRpmmcVEl5cBjJFM8FnUYVWhMU1WwunBY mEdMcIMrIXdste0B5OoxGiyiUtjahtGE+mkiU8CAwEAAQ==", "x5c": "MIIVrTCCCKqgAwIBAgIUDOHb2ADJ6khlvN/QCAPGOeOfracwCwYJYIZIAWUD BAMSMD0xDTALBgNVBAoMBElFVEYxDjAMBgNVBAsMBUxBTVBTMRwwGgYDVQQDDBNDb21w b3NpdGUgTUwtS0VNIENBMB4XDTI1MTAzMTE1MzAzOVoXDTM1MTEwMTE1MzAzOVowRzEN MAsGA1UECgwESUVURjEOMAwGA1UECwwFTEFNUFMxJjAkBgNVBAMMHWlkLU1MS0VNMTAy NC1SU0EzMDcyLVNIQTMtMjU2MIIHwjANBgtghkgBhvprUAUCUQOCB68AONISf1CWGzRH jhkoA5MH8Ta9T5e22oOBODOY4NM9J7adpRhM6xBwIgCpEchi6EIFuSG+AXdgMMse9Ty1 xskWdHWwIPJqDynGGObFCxxOPVbCq9VHo8B9NtSBYpuorHLAlaeC+npYKje+KDlZAolf iqQXFhTHVItCpEqvInAEdfVrkIs5V0U8AFsBXSE4JiyLGeqXTaonobajmTVlWAaIUuEV owO+0knPPKg38kgxGNaQh0SG/JEnauQqvMuqR/LHafmy69pv2qIPkKSJ/gIAoMO+2QfJ Ounsworth, et al. Expires 7 May 2026 [Page 110] Internet-Draft Composite ML-KEM November 2025 A0uVRghUgSd6Ukku4xi7GDCx3YwOMpBFFNZbEWDLMmV1AjDFs2XIXDup1sESPpqWfKmR 3YNdlCiCXjGr7rBPFyysVSVzQOGkdbYTtdlc0AOz6Jazz2i0F4ViB+tubLUhLiB1PkjA BBI7nZg+I9ldtmuxwOBP08DCzIeq+FPEg9KQdka2UuLCBVtewHi0SiPL27uPWfcSuoBn xpAhsuSUf6MugNLHGJrMwmSN4gt52useqzxaW3aH7OagD9qg9GxSNVPNKwdh15WHUxZv pHaWUsZx5qPJ5AClVVy991LNIyidZ0csCDWm3ljK4tKIbTMa4fWsFcVvmTMCytFL8fFC 5suMMQNqnZS8HHHGXipnSfWvwxdhsLtAJvfB92cQfkoFW1ponNMPpjjGv+nPc/kwtvEa TNas+yI7erBB3VwdFfam2Nd63Ca/ZUbNrvNoYZJEy3U06PSAZ6YW2WlSQcOMsDx8NTnM /kklk2u/1zS5IfhvCuoKm5ZjxTgXo6Vzb+oQz6xsP8wMOrNvw8W1cOLLMlEpIIcDvDMf ZPGoMcXM3nC9Z9dsTmhUXYkUQgistDRqhxqmQ2AgYfKXsZMWrPIVGkrGYISzDtALLvRj KehiPehcsARXMfYrySgRWDZBmty8GbahQKdenxtQ1suR++Bl9QV0YKxoetdl8RavtkGl 3wjKP0Y6pemKUJZhimtK8hVmvKI/zXc8sZEifWWtvIxCscCi2/q9+DXPRhEO96WzgFe+ fBA/ktINHaHOAUKytoyfjiGp+fCGLjBcxvUU4Qw4VhEtCxhye8dUzwkCs/o8t5SfPCc3 xSSkL0iY/FpjRaRd8RaHWoEvsZJ5vBUlxahzvxNfNgrIwOg6yssivAuorvx/0XZ4WfkG 79yVrGhqeWpJINgRhbyZ9TzCCTIrYCo+rrJCQdsfL4uj5cIGqKZS3RKN/zgwTWtJ5Rle TOB1kTtcy+ocFwS8cHuaWTpzD5uM5PcUHZdUd+krm/gfYDsb6hpwqiIAC7S1hLGuN9wG FJjPzCYs/mbMTJMnd7EgrMc9M5NivyQj4/FPu7kGpOB4Rqp+xcmX+6u8SVS13gWd2ZYq 9SlDOUY+C8imR3ITR0gC9YhTJ+yQAGxq/CukVXClNKxCEZM/EeNXcFtC6KdV7gxWwjx2 rfuI4squjqhRbUCPLIRcxzxyi8ErBgYbnfKahRIy2UxYhrQ5ATFZplhL97G7OXNZfPh7 0+WAk+nAD+uFziWfEsAyUZpqZtpLOKZQRQEmVSu2M5PEwGcxrYQUldgIfCluHHZIGAuu FQZ2huSedHJZQOAnemyk6Exz+nS7kjOLtgcK8HETchAlv1jEwuYkTBorSqYhlFO7RqYu T7p3nNM0z0BFZvXGwAuuiRcFR/g3Q8yRNyPPJviS0AE2zjpCn1pwXhPIjMNiU5SNdjyM PVVktcldNTWuZwUDoHqYxPl1CBN0/kyfO3O6pDioeuBxdZFuV4Rt8vVSEKMJ3EfBiAW5 6Wc2BWNmUnKUsDNfeGgIUkOcpNiaGCWQYaWz90N0b4RShkyn5DlTrUyj72hteaUEC6CP VMGGg6A7JnUNvxhIHThzkLcE2HaEihQt07iR5+aSuCKvHPCoQDGCXjly0uwoVPZyOcB7 x9EV0TENiLmyMLp96nwlCZcclJs5rwKTkKpih5tZ+ImvathWY4iePDy07Hi8J8ZjkFk+ poQk0zVAbLLDdrw5m5NTGVfEpAAx9dAKXwqLIAGaS4iQ/6iA0MBmvFk6SEY1rfhqia7w cf+0rEfEP3w93GUI+cgRg5Xb6E27xoM4rwrE4KcwggGKAoIBgQClKP7h9N/VZvo+6NMM 4Aoc2uqZkKB1Njv107gN8rWIj2LI3mOvnvtGBF1uCi4ONGw7E63+BsGBPUYMWU53tpuG 1vhZNyFEkh9U8xvymqtjogEjuEHQOlCKMeztgiK0UW4LK3eICQN/ECwm8eXx9z1WHEn5 muCYTtK+pXMJjyoKq2GV4Ek8t2STTV8hrJRzQWmHg0ETQ7JNgaNF3UVdbXAoNfFiFhVg p19bgxqMnx6+FbiF/387SfIeiY1v4TCIgu1mXlEWtm9zHU9iqsSt2rXLpFnLqAA9ZUj9 POPcLPIgNK0xQSeh4IpTk03j4XyKl9kPcM2RJxr3GbGCG3Z+FonM1TiyEbQzO+Y+sAih wAmimjKObvLhhCS85io/dZa37pU9NVwUZO2FKegO3bHMk0U4CLlOpEpHdPHYJNwebk3c f9+lS6TFJTSbYsB8nRpmmcVEl5cBjJFM8FnUYVWhMU1WwunBYmEdMcIMrIXdste0B5Oo xGiyiUtjahtGE+mkiU8CAwEAAaMSMBAwDgYDVR0PAQH/BAQDAgUgMAsGCWCGSAFlAwQD EgOCDO4AuvyaYAshP4rxiIyAwUnOHpLk5EGea8YsBhVUjyRQZCt1Ys22gMRb6zt/luD7 sP7VDKOTJWaMjyR9CGTcVBU+lWTgd06SFVdfsDT/5LPKHqj0kKTgvEq8CvxNvG9pPfLy x+icxdxga3BaD8JCj01gqBM93wqqE1uGmTcOx478/6+OH+824G+RA3yPS6NBM30upIOt QX8W4XFPvNss9u9yYxS1iSfpM8nUmlf83jUazloIXJUeBoKKhyO39/l+01ccX1TfQBM0 F5vcBtr72R59/Z8Y1VvVrgihEKUtxTD8pH1O61oGMedjQxCDEcsNzr0AluRobFPPtThV nLfBddCM+GErxxqYqBZkzLQvearR9cxqZsSX3DsBLtfHnTUxx8oCr+0zH0ipijZIa/HU vf/mDRi7itJjuOO2l1xO0KJ4Vy9TWXGSomXEz7VDyr0OcnzclDchTek4jAp6qISK96+u Hz9t1ScglBpe9fVm8Fn9qNv7+h0Bz4XYIXedO9QcFAWonolGOuNqJizRPKN8hTAiwBKz fI2h4F600lDDIS2nXCT6xi66mCz1EAh8zXcogoi6xLrwaJP5TpIcI6XlkktFxMsZqtI/ 3vaCD6JBqDyy/zas/G7ddASo7D847NGUa2jlxAQNg4D+hFEUl3i4Cx+GWATfP7w732Zj o+EX+zxjpxS4KST7d84blibUveCI1iCoDc5kqrUb901+NH5jZ89qBurXJph1FERmr587 dt7KSxSIH5EYfv91fdd3jJIu2p7YtGzMR7VBltU2KAM3qaO/9mJfuxkXGXDaqT7+YWKV ICoMMGYa/Bm5xhJ+gYVDCVox1Cf08qgU+L4GnZ0slcaJiO9HeYXOn45Iqs0WtGHW0uYW Ounsworth, et al. Expires 7 May 2026 [Page 111] Internet-Draft Composite ML-KEM November 2025 0I81c5hVK+JyziqmtgvG4pZlvOVRlvehLT0L7K100LByAMLudLS3i0eLvrZCGcrF5LP4 OfIyJdWT7STPc4wHHws+5UiNdoO5Qo9UlisnaZcQwi9OK4xkPeuILGOvqMsnOyn9G4k4 oTboz3Ewz4mMiEU4o1QpuESG9NeyEM89qJ7O3tnHJ9sX5BfGiAgTSHfGrySqeKGPGPtd BOH74F3XxaokkxhN7hMJAdf6jkVMv+GneBHYzHg1eANt7bvTrib2HyVjyqPPUJWHdjcI 01ySMo4LdpoZZ4ZJVRrBtNBkgNZy/yFhZwTlQP3rFLbICGwTuTw/3wVr9HU5lFunElS9 mZeAxnBcZh864u2jl8hIbANYmVSM/z1ObwlgzJVgUNMO7PjzXlx4AEmULjXSKksNLQDR EegUBYYoSTlEMh0nNj/hPFYzjZSwVsq+vEq2SJjVsfzbgl3VmYYBiDCAhYSS69Im9Cl9 JHBsqBut/xqYBCg7hdccvFjBAJ0d1R6HxJYRMqG9cuXrqp5/4XdaY85y95QGD50GKxcp L0o7ukpbc+gmvdizS7JzloFnC5Q0n1t/R3JQy5sM6o8aJCwRcmxwskAXoUG48rLoDKBb BwtDGKCOAvd6ljkjiZbThUXxDLH67e0cxImHprhhT3YtPGWZ6JWq5s+Fo+1U7bvmCr2k LQQ/jpKHMfNWMDB/Re2QYjPMOxL7Nh/UFcCoyJrToAq5s1oZz2uBSioDuUM1Iv+Id1ip 1l2g2XrzO6KDd3RlQ6UjHO5M84TqZMlx/4HPFIba+BdNoc3vURT7yRv6/JtsR5rRgX1U eLmW2+WOsDNJmUjqi8oqlHWm29Ss+QxdtsPrC7UxZLnAgpCCztJD7ObeuBm+SHBjwLf8 EP8ncMBT2cZibwokBApLf93dO5V1QSoWispQHC0G/UTNB++ZQyXYmOuJIRshPEpOxfRv 2pyO5N2g9nQyBkoZLv3RgNnk4RYOZeH/EU9gEd8UucmxCYAuYHIbu6lxTN+FvY6d1JaT f3DgbsffuoH5/h3cjXx4BjQ7flF9+YsDXk9o8212zjPhZbjemZoO+nQun2XUOglOVr2I HYQWhqKucrHLzCxBKvjjFRJPULRRSX/fWkqhhzPBfJqQZIZYxDVH01S5DoTmQV3vRtGk sr75SekOs+1tnN3F8SJjoFAVOCrfsFgzY9Xfln8R0aFBa51Y0zjiDiEbqBa8tPYkdp3L AOHzVPZo0q1bgQqhGYdFZoLm5nkq6b6sYLJ321n14xClD5aQuqs01RVHGjUpboQQao3r CvqJK9TFv85HLoAT/2lQJQnN1HrkUEGIG1/gXRPQ534+b3R8Mrw4U6jnksEHOjia2WNQ jzqlo6p4gTxw376uokR0YwjxoPoYab2QjGBGzt4tZwGx8kZaMr3Bx2M4jffBWoULsnuV QgtbHNuSednP3ikC8WuovMuVnl3M8HeVty4DcxO0leKVTdcNcQwYY6xX5HNNxngny17e 6+Fgixhc4rhN9er8tNSpVnMSKgBBYPx5xFmWFXYWAjroSndzLxp8t93gjzh79ShGW8d3 4zJhPdhx/y/DMvCgAjlzIu99HvSJecfyDBmq7sUH0yVgMtkhKcfDayNDLlBPCaHyaJBp /G0QsumHyz8Cv054q7klwv0sGBkhE49EpA97hS1aBdTw7/GCoEXUL9N2GM8k0ojoE5i3 SPQmqetw6GA/0kaBLKTMQzXKirWlrhpxKB3z++GueJQdoMF/RXhKFNtasjevn1Cb0VmC 4g+E/Je7+PFNn2cAzGJ+JQya0k1nStN2tjwZA/4iUL4tLm3B0WnqzUPPz+T8mTLZ60rx 93O7FC1o5xtDk1UYNPCAAMYgwdInSgWDKNn9g3b9oK4boh18wrlYupK1NqoNMggqixMM da2mFBd2k6rp05GJrbaXziVxdLe2+pNg2zezRQnLkAUKepYPPjLWCLBrnXQtibKpEB4N BuSAQ5sy9xt/SOwquzf/ombqLlk+ngc2Amb27kk8NVHU0zrojfsR6KGuzCe2cI15vjfp dPgyB8do4eyyBkBJ3J58JN065TjO7qLJk7MEJRI3RwAiOYhpXHC704T+cgguf52ce3s1 ZIORbIvDn5kDbN2qaDGjHRe1bZXVllG4j6ADaXH5N+AzNZ+evk57CphECFa/776xJUK2 /K6K5+6MzyVWbp/Pziy5h17XH9oRDdRN4DoddZWksGFuPRmqYYodn2LRuPSIB977isH+ 0nicSHfeFL+mfTs1+dYgL1mV9dBuhDSWpQxzLmEnTG3sLObajft+6Li7UqvSMorAjwIW ipxp9CSEf2rHtYIW8Aw/T2fK23HZJKCBlnULVxQ6MApa7YIgfmZDvHHusU/9bxi2vkRb 61Navu7RJWs2WEaM7A6hNETC53jag/5wRd3XS9EQ7x+KlPRXPFdLQWdUbrjpb34G7UzV KXP1AYvIv0ldpTHmiP378f1PPEDmCA1ZT/n2qTx/jPQItskOssGSOl/yHY9xNU5keCTx fDKhBC83R+VwoztxB8Rz0bnj8+XVychKjzx7VtZn5Z6iQWbX6yM4oBazRMTW4lNGFTvl 1Z8uB00CQAfeFRJHuGjpUjDb4+dewZVagoQ8722ndeaM3CS35rcag9MUpWfC42LI0O6c Tkswn6TTtOtjLISupY57M6B/0qCrsxsJ2SWfvQ8EBHAp9lGNsVc6JQ6rJBkC33qQTSEd iUue+k8t+X5CDTsCnQz0o2OUphd/hdMR8Q7IDIYa9/nVnOD/GBGr+UblAsa6kL43bno+ yBbQn9wA8Jcw7bnRT+sUh0t2bae+wlaoQqOrcDvfCiWUt030yIxDSWHIiTyDSu37Frfl uCfpUtRg/zCmwKgb+YZFJ60lKoFSOX4QlFyQpQk6muISwoV6qmzHEyLMl7dG0I/4n5eC Kxuv+zSUJl6saI2LazX9I+99ZtYFjvyDKnZueZP49AAZcTEocEpmyAyYAee31DpOPmMX SDneCq+HXqy+z/sh7bdbJ8cEeR3wwV70KsKs3S7o/JjNIYnrw4eOvkyl6EZzQ7PFHHG5 uhJuGQaYiyD8JSU5HZDjEzRb+/CCHqnsLJamnzfKwyuARrz+PdKpsH/hzvPYcZ8Sr5vK aOeRt6VWIRsiw3ldHw7KNtrUfJxB0caXP4IwylbFsL9AMclF7LnOq2bMLV7/DTpYDTMI JoqvDmD4uWiTtQBYp7p2U7hQG6pzfIHUYQn8NK+AYaXcJ1OV8jRvh2yqpR6X0zWCJ6PI Ounsworth, et al. Expires 7 May 2026 [Page 112] Internet-Draft Composite ML-KEM November 2025 wyzepGBZBFr9ka4jF7V1GrB9ce6vfPWjDzSssgEyE0XGnfUVr8oz3pz5FXbwCBIUxlAW 429vtPU/+Dwf20/YQrngcsENV11UCOqPJlHS4lxiSxZO0XT1B5fGaqdHuMAnJ2y8TXgq YFBF7B7i5LWe9mkFzBBH+lAdGu14hhFJOrQHZU3roIFk3RDmUqRU7PkPNGl5kJWW3gcx NkR6hJGWucfMFBUXHitAWn2Drb3H9gULFWukDzhBoacKM2F0iI/EzvAAAAAACBMgJSoz ", "dk": "qRZ6sjVjRAX2VOQuzTtQwRpExGddTJYbKwfl9o96FS+svpgVj+hvIX9LlzThs e2x4KRmaQyf8Iobw04qlp5JeY4BMIIBigKCAYEApSj+4fTf1Wb6PujTDOAKHNrqmZCgd TY79dO4DfK1iI9iyN5jr577RgRdbgouDjRsOxOt/gbBgT1GDFlOd7abhtb4WTchRJIfV PMb8pqrY6IBI7hB0DpQijHs7YIitFFuCyt3iAkDfxAsJvHl8fc9VhxJ+ZrgmE7SvqVzC Y8qCqthleBJPLdkk01fIayUc0Fph4NBE0OyTYGjRd1FXW1wKDXxYhYVYKdfW4MajJ8ev hW4hf9/O0nyHomNb+EwiILtZl5RFrZvcx1PYqrErdq1y6RZy6gAPWVI/Tzj3CzyIDStM UEnoeCKU5NN4+F8ipfZD3DNkSca9xmxght2fhaJzNU4shG0MzvmPrAIocAJopoyjm7y4 YQkvOYqP3WWt+6VPTVcFGTthSnoDt2xzJNFOAi5TqRKR3Tx2CTcHm5N3H/fpUukxSU0m 2LAfJ0aZpnFRJeXAYyRTPBZ1GFVoTFNVsLpwWJhHTHCDKyF3bLXtAeTqMRosolLY2obR hPppIlPAgMBAAEwggbhAgEAAoIBgQClKP7h9N/VZvo+6NMM4Aoc2uqZkKB1Njv107gN8 rWIj2LI3mOvnvtGBF1uCi4ONGw7E63+BsGBPUYMWU53tpuG1vhZNyFEkh9U8xvymqtjo gEjuEHQOlCKMeztgiK0UW4LK3eICQN/ECwm8eXx9z1WHEn5muCYTtK+pXMJjyoKq2GV4 Ek8t2STTV8hrJRzQWmHg0ETQ7JNgaNF3UVdbXAoNfFiFhVgp19bgxqMnx6+FbiF/387S fIeiY1v4TCIgu1mXlEWtm9zHU9iqsSt2rXLpFnLqAA9ZUj9POPcLPIgNK0xQSeh4IpTk 03j4XyKl9kPcM2RJxr3GbGCG3Z+FonM1TiyEbQzO+Y+sAihwAmimjKObvLhhCS85io/d Za37pU9NVwUZO2FKegO3bHMk0U4CLlOpEpHdPHYJNwebk3cf9+lS6TFJTSbYsB8nRpmm cVEl5cBjJFM8FnUYVWhMU1WwunBYmEdMcIMrIXdste0B5OoxGiyiUtjahtGE+mkiU8CA wEAAQKCAX8SYv39KcXBfDVfy4uzYz28+KIldnRmmCMUuv1CkEKlcVEOC7QNWSWgJdxA4 +E8s5lY+lfkb9wbBzdFKKwTp8CowkXjqL+LYrkaO/Zgi9eIwABgeaLaC6PrvqMhzdsPO AGIPM6R1m8NNj+0FjoDNgMeEwgpQZS/YAcWMlUcO1Py3CGBDfcZS1FnFLYCibP9IMsey v3zpxWyizwiCwAt5oEV+OtmgA7hM8Dp7y6FeTFy9/gS8t63OwQ5Yhbc3bUJfYnCkyotx WfOXGFb1ZNmPAHmtnGfrbZfhpl4VBbQapdFKkTKvMNH2EqAtVG/fTe9449vSUqou+oDx NB8kCMMvoZXwQixhGeObOhBWv2u1zLT+hEO/F4vwiiSJexKUuA/gRUHlIlepyZe7ZUXA mfHkzeLbJuP+yPaQopyZALBT40NzLptxLV10ZPmTOz5tntjgR0rHtPy2Fn3U112cIraY l8ngW9B2PB0elN4DzGbVhF1r+66TF9SXfiquNenYOcmTQKBwQDOKMK2NoNpgmmKIlwBe YYnSPD7KM807mqyQPoMNUBr2fpNzioB1SLLEhY8vAGA8kOlsmd9pSy6hRUjc4/+W7qV+ Zwk6oE3FdvCQhD8izYN0kMZeEuZAE8nnftawFxEl1WmW4Aa4KrfUlE1jlhTv3yhZ6U6S fwH4hN/okaK4zbCOwlO+aO5uQhhS5VBtPIdEpZTqtCNvGfjSifpRaOLoIWZFmQ6v0nXy lQgqPvWk0NSGtWwp4W+q1i6xQ73o2QfipsCgcEAzRbK+ccGSpS7c8xdl6DmkGpGWqAaH Mf0yWKuJUBoK1Fd8N5J0HsKlfwUHaOK7b3RYiOp71jaCYisCmxnuy7pYUQEUk69jWU+w e4ASGdLVFQcDTGzNWpHZZ2SQM6uk9sE5jwSUaOFzZAmaDRx0tPQfueR9B4Z2SyHJ7jcI F/rZ/XzuShY0MolxmmUioE91OD7/EsfqCdKi/0LZiAkOid2jV9fPD6E1d4rB/2WAlzik QioRuGaA65nICuzmM5T3P1dAoHAFvnj+XrJ2pB2Qrbhmih5ExfGA7fgn/2SVpt3QrUMo PiCNPmtJNckMY2qfMpXQI+/ik//yLkH6yG54WGXwrlmaiCPjm20SPderp++VOcO9ytf3 w7RHhQyvi+VO+AEaICVQx0fgd9YK9t4wYdDwNGuii6K85wbQqWnlqn3QrNf/vWla+/Wl 3RPwsgxskkAUs0ng9udsq40xdgV6qGgQId7XDxqn0GCcVJTXfB3YMq4zgW/mxiQh1eBZ A9iQ6cqGXnRAoHAG06LnBJJ3ihLhTGSzJuZ12SvFWX31BkzmJTRBxi6RfpBfc67GU0or auwqfmah+kcNer1t26nKVnPPlwMu7mVTWQXBzaAupDeeEfONdW7C/FfAsq5R8Vs2DTQw lxClmE1F8qrzb7uE967nmhNN3sIab0/i7duTaJGJJ3SgWUEHQV8fAzJNpOT0AVCx+ZJa 0zBgGgoQOVqYZVBrUleSXfzqwMl1Qml+ivootm63XmsmQ8ECNwE+7R++qOW+COQuv3pA oHAPXM9L+BjweipjPc3XPLq9IRJNKQMwtKCQbOuXXCB1KTIZT5noYQxmXKDjGYnDYBMQ HlQjMPwUuVDoouDgNrylSNU17Qx8JPmZrH+s5KDVw+y9nsqhunbBOxZRLMc7NRXAcaWd C7ZRPVw/fARJvXlzdntlkHWqjhOEBj4dS4mv4HIEqcWArZseBJLd1BROMhJMqY106Eyz Ounsworth, et al. Expires 7 May 2026 [Page 113] Internet-Draft Composite ML-KEM November 2025 hpV2uDzpMlHybYG1P8SIJ90QVjsFzH5dk/RsFdIOmYaNXgSTm3E1/Fl", "dk_pkcs8": "MIIIywIBADANBgtghkgBhvprUAUCUQSCCLWpFnqyNWNEBfZU5C7NO1D BGkTEZ11MlhsrB+X2j3oVL6y+mBWP6G8hf0uXNOGx7bHgpGZpDJ/wihvDTiqWnkl5jgE wggGKAoIBgQClKP7h9N/VZvo+6NMM4Aoc2uqZkKB1Njv107gN8rWIj2LI3mOvnvtGBF1 uCi4ONGw7E63+BsGBPUYMWU53tpuG1vhZNyFEkh9U8xvymqtjogEjuEHQOlCKMeztgiK 0UW4LK3eICQN/ECwm8eXx9z1WHEn5muCYTtK+pXMJjyoKq2GV4Ek8t2STTV8hrJRzQWm Hg0ETQ7JNgaNF3UVdbXAoNfFiFhVgp19bgxqMnx6+FbiF/387SfIeiY1v4TCIgu1mXlE Wtm9zHU9iqsSt2rXLpFnLqAA9ZUj9POPcLPIgNK0xQSeh4IpTk03j4XyKl9kPcM2RJxr 3GbGCG3Z+FonM1TiyEbQzO+Y+sAihwAmimjKObvLhhCS85io/dZa37pU9NVwUZO2FKeg O3bHMk0U4CLlOpEpHdPHYJNwebk3cf9+lS6TFJTSbYsB8nRpmmcVEl5cBjJFM8FnUYVW hMU1WwunBYmEdMcIMrIXdste0B5OoxGiyiUtjahtGE+mkiU8CAwEAATCCBuECAQACggG BAKUo/uH039Vm+j7o0wzgChza6pmQoHU2O/XTuA3ytYiPYsjeY6+e+0YEXW4KLg40bDs Trf4GwYE9RgxZTne2m4bW+Fk3IUSSH1TzG/Kaq2OiASO4QdA6UIox7O2CIrRRbgsrd4g JA38QLCbx5fH3PVYcSfma4JhO0r6lcwmPKgqrYZXgSTy3ZJNNXyGslHNBaYeDQRNDsk2 Bo0XdRV1tcCg18WIWFWCnX1uDGoyfHr4VuIX/fztJ8h6JjW/hMIiC7WZeURa2b3MdT2K qxK3atcukWcuoAD1lSP0849ws8iA0rTFBJ6HgilOTTePhfIqX2Q9wzZEnGvcZsYIbdn4 WiczVOLIRtDM75j6wCKHACaKaMo5u8uGEJLzmKj91lrfulT01XBRk7YUp6A7dscyTRTg IuU6kSkd08dgk3B5uTdx/36VLpMUlNJtiwHydGmaZxUSXlwGMkUzwWdRhVaExTVbC6cF iYR0xwgyshd2y17QHk6jEaLKJS2NqG0YT6aSJTwIDAQABAoIBfxJi/f0pxcF8NV/Li7N jPbz4oiV2dGaYIxS6/UKQQqVxUQ4LtA1ZJaAl3EDj4TyzmVj6V+Rv3BsHN0UorBOnwKj CReOov4tiuRo79mCL14jAAGB5otoLo+u+oyHN2w84AYg8zpHWbw02P7QWOgM2Ax4TCCl BlL9gBxYyVRw7U/LcIYEN9xlLUWcUtgKJs/0gyx7K/fOnFbKLPCILAC3mgRX462aADuE zwOnvLoV5MXL3+BLy3rc7BDliFtzdtQl9icKTKi3FZ85cYVvVk2Y8Aea2cZ+ttl+GmXh UFtBql0UqRMq8w0fYSoC1Ub99N73jj29JSqi76gPE0HyQIwy+hlfBCLGEZ45s6EFa/a7 XMtP6EQ78Xi/CKJIl7EpS4D+BFQeUiV6nJl7tlRcCZ8eTN4tsm4/7I9pCinJkAsFPjQ3 Mum3EtXXRk+ZM7Pm2e2OBHSse0/LYWfdTXXZwitpiXyeBb0HY8HR6U3gPMZtWEXWv7rp MX1Jd+Kq416dg5yZNAoHBAM4owrY2g2mCaYoiXAF5hidI8PsozzTuarJA+gw1QGvZ+k3 OKgHVIssSFjy8AYDyQ6WyZ32lLLqFFSNzj/5bupX5nCTqgTcV28JCEPyLNg3SQxl4S5k ATyed+1rAXESXVaZbgBrgqt9SUTWOWFO/fKFnpTpJ/AfiE3+iRorjNsI7CU75o7m5CGF LlUG08h0SllOq0I28Z+NKJ+lFo4ughZkWZDq/SdfKVCCo+9aTQ1Ia1bCnhb6rWLrFDve jZB+KmwKBwQDNFsr5xwZKlLtzzF2XoOaQakZaoBocx/TJYq4lQGgrUV3w3knQewqV/BQ do4rtvdFiI6nvWNoJiKwKbGe7LulhRARSTr2NZT7B7gBIZ0tUVBwNMbM1akdlnZJAzq6 T2wTmPBJRo4XNkCZoNHHS09B+55H0HhnZLIcnuNwgX+tn9fO5KFjQyiXGaZSKgT3U4Pv 8Sx+oJ0qL/QtmICQ6J3aNX188PoTV3isH/ZYCXOKRCKhG4ZoDrmcgK7OYzlPc/V0CgcA W+eP5esnakHZCtuGaKHkTF8YDt+Cf/ZJWm3dCtQyg+II0+a0k1yQxjap8yldAj7+KT// IuQfrIbnhYZfCuWZqII+ObbRI916un75U5w73K1/fDtEeFDK+L5U74ARogJVDHR+B31g r23jBh0PA0a6KLorznBtCpaeWqfdCs1/+9aVr79aXdE/CyDGySQBSzSeD252yrjTF2BX qoaBAh3tcPGqfQYJxUlNd8HdgyrjOBb+bGJCHV4FkD2JDpyoZedECgcAbToucEkneKEu FMZLMm5nXZK8VZffUGTOYlNEHGLpF+kF9zrsZTSitq7Cp+ZqH6Rw16vW3bqcpWc8+XAy 7uZVNZBcHNoC6kN54R8411bsL8V8CyrlHxWzYNNDCXEKWYTUXyqvNvu4T3rueaE03ewh pvT+Lt25NokYkndKBZQQdBXx8DMk2k5PQBULH5klrTMGAaChA5WphlUGtSV5Jd/OrAyX VCaX6K+ii2brdeayZDwQI3AT7tH76o5b4I5C6/ekCgcA9cz0v4GPB6KmM9zdc8ur0hEk 0pAzC0oJBs65dcIHUpMhlPmehhDGZcoOMZicNgExAeVCMw/BS5UOii4OA2vKVI1TXtDH wk+Zmsf6zkoNXD7L2eyqG6dsE7FlEsxzs1FcBxpZ0LtlE9XD98BEm9eXN2e2WQdaqOE4 QGPh1Lia/gcgSpxYCtmx4Ekt3UFE4yEkypjXToTLOGlXa4POkyUfJtgbU/xIgn3RBWOw XMfl2T9GwV0g6Zho1eBJObcTX8WU=", "c": "t565yPYR9WUN7iUpuTFAu3AGeQ7IhuwGYqVUKKXk9Ym9x13foiO9irvvmAKI06 EXA4vYRKD1tGCutAZT7No2+IXnsidaTVDEKR/aXFNsEF5kR99L7awgrbJ5V8b0mABCz+ Ounsworth, et al. Expires 7 May 2026 [Page 114] Internet-Draft Composite ML-KEM November 2025 uKn2rhkhnwsPCTLPFJo7JxgMuVP209JcFPaOor+wsPZ4GRcGSm6HNPfdEqKqQd36p5+I Zbb5uWAZTOb2s8f0g/i66OXTSd4LDxK0N4gRnBVaQLgm/nSCLMuxt+Yt4mTLWXSClX0M WUZ7fHWvrsmjEI23HqAZsMZL0CNzWoU6Thj60Iz20TH6mWV397r9chJk9P0D8CtYB37J oz/j/JY975EooXv6ZcTGmc3PpcJp5ZfaFGrzXA78gfR2/g7J93IxBGprNvICbTj4G23k dOg40KDFI6HKBstsIIW9K1RZqXiCK4+lS+yarEJ4LgMFnIcn0xll9S2xDfd7wsGyeCPr ULM1XYEG/AsI0Vj5/rWHvHclEVpCEY1PPP3vC8sGaRzUHdpwublwtT9tS1AWH+FQ9zCn iyBVCsMPXC8erz39NCu1fiBcFx014SzMoNNkiCxFymgeuj/mBWaRL+lDP3atHoIJ6DrP QEYFPM6155S6Hz2MvRkN+1CC7UlGRM9bBorKmO5UkP7F5Fo7gYp0LlMBucCR8ackLPWB XtgqtPS7hHShAr8r0WWhnjvmIHrXG0V/WIV4mGYgLtzb+vIp7+FgcglQFqdVepEjlwwg yMJoZE3vmwy8stREMzF7W19DCQcrBkR1ydlyzUnQ/85U2ipNlHM11IIpqpm5CkViJe4o VyPeQjw9nIqKfCoaZuOAS+LXWYlbh+I8TP9zyP0lGg9L1lQzS8+bCiViRGsbsLeivxbp c9+Z393MeVlXcM4iMNA/jJdv+wBxGYDlxX3tugSSHMPPwPvBiG6lBMoLqKKOx87TZHj5 srriCSMg6J/6X8LXwbhqWF4bumVi0n/qkRF4bniDeJiEikRS7SMDnENXT3bXhkgZFOmx ah4PTwtdeLJaE/GuvwhkjyIT5QDzBPDZNmzIhzZPUskMQG6tBqdcotxzr7flNDHzqjmi FHf7jpVPKXPunIb3CGYItUFmgJXxLgzpgUQQ4SdQePxAZmjNGJ0xQfdw2x/v8ZdjZ148 4kjBiL0Le+7+aoRcxh2jDa3l6v3LZPEwo63we/WYzeFAOpx4KAqYpxU0r4mOsM7+BnxY h3nH2VdJfrNMeheB1ujmdvHq1ggyt6G+yBGGwjw/Ghk3q0p+3qcYsLLBYArZrOI5Im1L 3x5jOMijBL6rlpwWUWVR3jQuR3rMU0SB/jkEdNssG2Be8GWV02iK2NoSiucIZFKMrhPR s88LFQugo8xTiCi6JB2PZfqczwvY5qOpplqiZW3Eg0P50PZoZelajocQwptFLmn3abkY KYkgcNmv/vrUsJzOMGrzxwx+HyBcULbXS9HqkeFprNVsf2WN/VrZ+peJAmqhGmRG7Uxf E8xuOza+TJo4V4pExajnOpBnayW2MU7XOCuwm1/ifCEotFVZDxwb/Hp5CImGJEzwslih ya54jMJ5na2mDj/OE2xC3I7GFcToeX/uGTQSD7O08K+BCk2SSNT9zkrWrJxckC4dDq7Z E1LhrmrZbqWj0DVX8cF6EZ9TZKisCpSfUs4CnieTP/ZB10KVvbJ0D8pzyNatIt6Qj8DH iFOCPKgTimvSlfqBU0Vbwra/rylDyHpmmuaoYqz/IW6zZRt7Uy62eoY8SFJwxQYfNs2K zO3UBN8N3uw3GOMKtlu2frcwDJpUQeH9rW0dPeSfY3xakSWsMue/wxAO+JQdnuVA+QYf K/iushAOxa87grv1ZLmx5tt/YJ5ZEWGRjtFg93oDuoK/hBS/O1tCwcDwdEAAEA9Mpr3j SgWiJwQSFCnH3OHrG6kftboJC78/osmWgW4Sqy4+Ux5DxmQe/UKGDKtJqMt76Vaw3QID szmTuYW1tEnfhExOriCl37tkxz1XvkECippip3VnfgSy9trSgFshDpE7AAmZJxEokKaM jun190xQrwHl2MX/nyFzBfu5Kdst39LRVnZOhiYbvFFC5qZDBfl/3brXtq+wRi6LG7D9 Y1FAbpGpwYwwQLabD+fOxRE2WHcafgwBcxvQTeyiqeqplVMKSv/CY2m4BfCZ0/Mh7sU2 ESRVjLXbyy+UyFQkfzt/ZK06Sf9F8+lHIYOoPrCBvQdhX5kLTkpFKo+wIYTE10t8PnGa b7LGzGRcRbMiNFZWzmxkEDzwPcI1aMr869SAtzcx5FudR9gvIe7gM4/y70Lr0cOjVzkv 9KoJ5A9lEoqeNzyAyWFe0+Eiov9AzBYbM42FXUXGZS04XCfYviAIfWbmBqPfjFwPllrd xbIZ0gObWdCHkKzjGTYWgOKtrXlbK5YiZG0NGWhFIK4g+FTSa16/eUmr9QmOZmALj+FT /X/TuJswtD+M15tmN/k5tYW1fGy30fMYyf9mJ39VOF12H5nrORDCCoHyffH/8racWKUR 6lNDBU5VDbbMGEMCYHkPlPCS2PLKLMGHtE1fEbMS5dE89DNDq2g9WtXJgYiC9dLYo1A5 r/E6oHzKLGRFeOKpSriVK2Cg0=", "k": "BVMr1b5uXVCpd25C8hQ9q7nmN6c8MrccNbT8txbCg5k=" }, { "tcId": "id-MLKEM1024-ECDH-P384-SHA3-256", "ek": "RAYaFuBQtEex5vTIJap79ECVojKuchJNIveaLKYxeAYTO0WpeuRh1bwamYskF SeoWOmlejyp2BUmvAilZuy/nLlF48rPJnGzITWJ8pMssXvJDGCTSefHu/JhUpJXgCQJS NmRIlsWy/WEzecWo9QCunSBjwUflvdYliy5pvzBX4QYbqhw5FebdshvjHyscdW1a5acr IaxEQs0RhCOSlVmYzkWQOlQoTNOgoAjgVy4xUMzxuBpD+eR+oZysPUMrzSDbGmbheGyh 1EQJwuN4hQbNWq8zhR/J7d5N6fJtlMGttk10UMDSvmSukhGMoIHO5tE2KlQfVcjplBYC lQmHStiHUqZeDwOerhRC0IH+6hvc3RyqymUO/HPNXmuktgLCsoUDmMgHAMN0bWX5ViT4 zvArEKyQTk/GFEZw8h1zmAbiOhRnUOA09xnb8KsvciWvmmEJSZdidlT2Hdcp5FHdyE18 Ounsworth, et al. Expires 7 May 2026 [Page 115] Internet-Draft Composite ML-KEM November 2025 Oc6NNKONQmpRGQzRHBFZOFTMCgyCnzF9PNT7rMM1oBy8zklUJtcKmgEMOxXEXs6S5FoZ ymRGIaeGhl4HHauK/dUXnpRtNayP2QjbHqzAtN/BTtKOJyVbeGjfQMpRFTJ7CyEE3JL5 RczwdDMNCMflBYihyxEIDGjguuRTEc73cPALWSJaXpU5CN5e4J8RtNr70DAaIFU9cFGe egGvRptgvEHs1OPXaWoSfkwHSlzD3c6CLY30esLDphWcPiSULYafmUSMjefF7NOHchXD YO3o4girspasXw9TbQmK9YWTrjOXZEVS9tzo/Zgtxw39IRxqktVqDy80CAHbTuJUBGpl /bLiHuBOVxHm3AFS+PBd0xAtHKMHHZ2+MwNLBu/JvZLlGuIaxvJbnqr5hxeRIJGifhQB mmECTF1vOORyYV5zBwvc6lkqdYSdsE/agq2BVqwc5QIDxsAp/ulFeUWzRZWRVzDsmWEB YU47MJY9yo0s2K9dClZqSG09oQqINwF2IU6FKZMMZhHbWCMatkkgSVCXcek+icGZDeJc PNSOwuoDtuSnDaxJ4qOxoxD8eQes5u8QUXKBNgnjpG1LJhAg6d3W0s37/c87AmDBGgZd cbLSvHEUlNG+lg/1WZaaMl1kyyljzN8AnCyfnwGTjV20btzCKmGl2QTtJPNwYgnUjZhw LRGw0skuAuSqgqE9QpTBvYNQehTKmqKwmJyAmBKtuzLR6bCByeknKB0EpDBarg9fgMyP ShUJnKdVEG6upqChXEX9+FeVmIktbC9dcxN+1wSfauFxkFiIyhMYDsfmwcVuWsbvLcKz +YCanmq7IWYt1ocM5y51wCoLYsL+THHPUyweveFJrOHeBe2T9umYrmWmzdDtPpEQ2Uo6 uq88axdptB8h5ASJ+Edj+t+wGepons5YgBm68mrHLYQEbJ153Qx3yMbiZJ0K3dL8PGqX ALPV5NbZ/BgUxMUYgdoOHqKvMwJmmYSELIzqCwyEctaV1VGPwUwAzvBEfK+ngEzekReg ad1guPLKkOovdhdDDY1ekCcXrxKThlfdbUQOoZZkrZ/PXMMJXYqyvZbsitNfqjL4tWTr sK3d5gj8/FA+vonGCEUyulSbWYR/moZ5BqplSg3A6YesxJZLyc7Rdao+qRYh7cRRzYyL lB2Y1KZ+2wVqoOmRVFRDOphvjBUMFaKzbkrTTyi/lOF+XJRu/ZqLiQQQeIZrrEJ6ZcsQ HCNrTU94WOZ+ji1diR0uGkYA6WxRknBani9nnV8FAp+BjIiMqe/Ete9eqNDp3F9FMsN1 YeScrVF1AcYEqm4S4skKdNRzjSNSYBd/zNdAZgcboyGrGczpoZ5yyFrZTiNp+UtuAqab 9oZCIRRNaHBNWUWJ+u3AdE9iqUeDIRcAxWUvYiagbA26NsA8jgejzKgZyjHpWEqTuShD Fy53EwaoxIA+gB1vMsEJjR7MVw8BZa1yQkP84tApDeqecizh3ZBguwHLIVrKXJTnwgKq 6Vq+NPFTmGRMYdHhNHCvTGkzFMaIuCMm1JdaEpbVaBpWhSaffHBpBPH7DOMTxJbNPrF7 EZQO/J7SaI0GVUbCLMGeMJwpa/pXfgrQWTfjtcMbZZKag9IpRxE1NCuYQwELw59TxVAI 4rUcxPke3/lMLA35UvTHmLLXSnfBK9EjrlXHNNci5v2ihTmihAKSF5hiIlM+LDfd0P8J mwQFq7U8RF8bUTQcXYWUvpgPQ6Jzn7sXxcq/kJI7Vm0AW0qAeEa", "x5c": "MIIUgjCCB3+gAwIBAgIUKv+Jmyy6eGCG72vUPAmJMygIJxcwCwYJYIZIAWUD BAMSMD0xDTALBgNVBAoMBElFVEYxDjAMBgNVBAsMBUxBTVBTMRwwGgYDVQQDDBNDb21w b3NpdGUgTUwtS0VNIENBMB4XDTI1MTAzMTE1MzAzOVoXDTM1MTEwMTE1MzAzOVowSTEN MAsGA1UECgwESUVURjEOMAwGA1UECwwFTEFNUFMxKDAmBgNVBAMMH2lkLU1MS0VNMTAy NC1FQ0RILVAzODQtU0hBMy0yNTYwggaVMA0GC2CGSAGG+mtQBQJSA4IGggBEBhoW4FC0 R7Hm9Mglqnv0QJWiMq5yEk0i95ospjF4BhM7Ral65GHVvBqZiyQVJ6hY6aV6PKnYFSa8 CKVm7L+cuUXjys8mcbMhNYnykyyxe8kMYJNJ58e78mFSkleAJAlI2ZEiWxbL9YTN5xaj 1AK6dIGPBR+W91iWLLmm/MFfhBhuqHDkV5t2yG+MfKxx1bVrlpyshrERCzRGEI5KVWZj ORZA6VChM06CgCOBXLjFQzPG4GkP55H6hnKw9QyvNINsaZuF4bKHURAnC43iFBs1arzO FH8nt3k3p8m2Uwa22TXRQwNK+ZK6SEYyggc7m0TYqVB9VyOmUFgKVCYdK2IdSpl4PA56 uFELQgf7qG9zdHKrKZQ78c81ea6S2AsKyhQOYyAcAw3RtZflWJPjO8CsQrJBOT8YURnD yHXOYBuI6FGdQ4DT3Gdvwqy9yJa+aYQlJl2J2VPYd1ynkUd3ITXw5zo00o41CalEZDNE cEVk4VMwKDIKfMX081PuswzWgHLzOSVQm1wqaAQw7FcRezpLkWhnKZEYhp4aGXgcdq4r 91ReelG01rI/ZCNserMC038FO0o4nJVt4aN9AylEVMnsLIQTckvlFzPB0Mw0Ix+UFiKH LEQgMaOC65FMRzvdw8AtZIlpelTkI3l7gnxG02vvQMBogVT1wUZ56Aa9Gm2C8QezU49d pahJ+TAdKXMPdzoItjfR6wsOmFZw+JJQthp+ZRIyN58Xs04dyFcNg7ejiCKuylqxfD1N tCYr1hZOuM5dkRVL23Oj9mC3HDf0hHGqS1WoPLzQIAdtO4lQEamX9suIe4E5XEebcAVL 48F3TEC0cowcdnb4zA0sG78m9kuUa4hrG8lueqvmHF5EgkaJ+FAGaYQJMXW845HJhXnM HC9zqWSp1hJ2wT9qCrYFWrBzlAgPGwCn+6UV5RbNFlZFXMOyZYQFhTjswlj3KjSzYr10 KVmpIbT2hCog3AXYhToUpkwxmEdtYIxq2SSBJUJdx6T6JwZkN4lw81I7C6gO25KcNrEn io7GjEPx5B6zm7xBRcoE2CeOkbUsmECDp3dbSzfv9zzsCYMEaBl1xstK8cRSU0b6WD/V ZlpoyXWTLKWPM3wCcLJ+fAZONXbRu3MIqYaXZBO0k83BiCdSNmHAtEbDSyS4C5KqCoT1 Ounsworth, et al. Expires 7 May 2026 [Page 116] Internet-Draft Composite ML-KEM November 2025 ClMG9g1B6FMqaorCYnICYEq27MtHpsIHJ6ScoHQSkMFquD1+AzI9KFQmcp1UQbq6moKF cRf34V5WYiS1sL11zE37XBJ9q4XGQWIjKExgOx+bBxW5axu8twrP5gJqearshZi3Whwz nLnXAKgtiwv5Mcc9TLB694Ums4d4F7ZP26ZiuZabN0O0+kRDZSjq6rzxrF2m0HyHkBIn 4R2P637AZ6miezliAGbryascthARsnXndDHfIxuJknQrd0vw8apcAs9Xk1tn8GBTExRi B2g4eoq8zAmaZhIQsjOoLDIRy1pXVUY/BTADO8ER8r6eATN6RF6Bp3WC48sqQ6i92F0M NjV6QJxevEpOGV91tRA6hlmStn89cwwldirK9luyK01+qMvi1ZOuwrd3mCPz8UD6+icY IRTK6VJtZhH+ahnkGqmVKDcDph6zElkvJztF1qj6pFiHtxFHNjIuUHZjUpn7bBWqg6ZF UVEM6mG+MFQwVorNuStNPKL+U4X5clG79mouJBBB4hmusQnplyxAcI2tNT3hY5n6OLV2 JHS4aRgDpbFGScFqeL2edXwUCn4GMiIyp78S1716o0OncX0Uyw3Vh5JytUXUBxgSqbhL iyQp01HONI1JgF3/M10BmBxujIasZzOmhnnLIWtlOI2n5S24Cppv2hkIhFE1ocE1ZRYn 67cB0T2KpR4MhFwDFZS9iJqBsDbo2wDyOB6PMqBnKMelYSpO5KEMXLncTBqjEgD6AHW8 ywQmNHsxXDwFlrXJCQ/zi0CkN6p5yLOHdkGC7AcshWspclOfCAqrpWr408VOYZExh0eE 0cK9MaTMUxoi4IybUl1oSltVoGlaFJp98cGkE8fsM4xPEls0+sXsRlA78ntJojQZVRsI swZ4wnClr+ld+CtBZN+O1wxtlkpqD0ilHETU0K5hDAQvDn1PFUAjitRzE+R7f+UwsDfl S9MeYstdKd8Er0SOuVcc01yLm/aKFOaKEApIXmGIiUz4sN93Q/wmbBAWrtTxEXxtRNBx dhZS+mA9DonOfuxfFyr+QkjtWbQBbSoB4RqjEjAQMA4GA1UdDwEB/wQEAwIFIDALBglg hkgBZQMEAxIDggzuAHIpl8EXv0/ViGAbEM8staiGqr/ot4ZwCol2jaW6VbGuXNsQ6+HK mPkGpez6KFHPE542nBODPRgaOACIDNIpnYgjwgMYQ5g0PD4+Ir/krKKW3APyjtEXxnYE 82jg016gui+rhrSCJP8TsRB+NWYVAp9xO7KAfN/uAPWOYPFS9w4GQeZaZiW5sp7ZUsct w9TW03ZWhvVAcf9HORiaDw7poJ7zpiroAJidw4dmy4r9bnGKd6EpwnLfHY+iTkP76rzz /nLnzDIOFTKumkY/XiEGjbRxd9ZXJ9ET8uxdLOiazMPnMjuvTdbkiMe87x2BFa/WCNHv 8F6p1MtCb28NEASraRGNI2woo3KBtKxdQUVCAifsBivdp7zpJ3llhfRn6yNVAWCBrT2n 1QE0sMM2HFfOB7LJniIBctyy3PvpF0sTngI5ijRQBMfv82mV8+hQTRNGzg04CaCvnEtM fL0O76EojFzoKtqIRtl2wkRYzgKU7fEbwl3675/1NDZ+S71V9b5GTWBaHDIfEmw1gAN6 xRV4ylmYBXCP6cNcpa08H3xNugodpZNKy4spnY6fIlzDyezuZKxgyLcjRgvgJRVbYzqF P27vr4BoWwldyd6sOZYi7mxQgeMamAPU43HEtX8yX4GuXAzk9dnox+pgiYGy+Klto7SP kDsta2l1JmYw7BtecYPl4nkJRiDPtEWkB0zr3l3fE1VuqxmjaAKptJNDFfELJ6K3nvmr Ri0k1vB7bHsd1OrN5BUkIgABL/s71DmTtuha4gUsB4xcvkh3e9DkSUGF8ruP0n0lwaHw jxvUicPkStPvhbUkT3oZZoqTjBCE+K57shsdloxTIJpQeSQhBbeQFccQYLYU6yckhCqh WM4W4Obp29B1wxNB5EcSWwrAZKewWo7RPeA3MMrqMScYvYv4+gmwAfuArupouOTqcBNS g/ypQSvq+eeXnr+SWUFt//0n0kZ9ylDu8NZEj0jr9FehIAED2GMU8ubKOt+4HrGwmSl+ uol/z8WpWi1VEGNOGSoLIpkEwfYSBkf1OzhCB8Wb9TteAxzJGm7TjhtR/8BM5cbWhLta 8vl36qVolBh8CE3O7jqdvNAcjM7RkVt+B/D/FWaugI3tcIpDCslTW7Qf4kvTKZ4G14hV 0uOK68BDLSPnoPM1A2a7n46r1ZH0ymeYQVDq6lOkzNn1XuLYqjH004eVdZPcBHw/jRfJ 4jA7wkVuG6m06IPq4I8PH/O8ZNXKz+wfcdgUbd8YKlsADj3PNEREMDaMxpc+J6dKnUuA Nh15rYrVYdx4zG6LS8mSZGPLV2l/gpAH0Rk6pcsK9fcEkKL1ycLwjCMEUjjlbPa9Olhi uVQwaHYGx8sGJNFJrPOIXnji4P4glfF1E+Z9tdi5phpp62R5w3oNVB26/8Src8vYvIcR 4fXq0h76LJYHVjDvH2tZ+5Ve3ZN8ObWMsaghw8msG74B2J8xIPKR2RxZxC4DUER02MU2 AAFHtF71DmJcF6M+mX9pJrwWEUfezrjg6Crew+M/SQaTk6nbZGQMAmC3SXxN7ilHy0Yi zUbc/t8s9dF2PpJtzYfXL7v0yizizJb/SNvra4v3liQW5V80nDsh3UIqFRwGjxabYyu0 SwWm0qKcnHhqEb1Hy1zihzmsRq+RKSYG2WfyIj1cZfXg0pwmjbDgv7+XKuqY1RheVp2C EMHvGRIGR9qIqJmgCn2yEJcbzbinWry3UqWLDfuotKTQWAupkcLcmKL4huz70hmiGwGw zzQ8MVooVCsgdTATKRUndKRm2yvgSi5MQlWgb8OZ8OfJt3NB1yzmyy3a0iT3FMmOOYud tRGCAUZ5So2ZYLwv32Vb+BPGZip1xGxWzQfGZwuXwiS18Vp9gxmDWVpF7WdlDG/A+Iet MQquln5r5IaoKnXedlyT+oWpNbiWX3o6eXdPOR+v6tRUs47+L/Eq2iTZyE25zRy7G3gs cjeNjyN8aUJ79SNjLamSTCLWzVilLw82vVr31bbMbnEed2clzK6vRVQ6udaag2bA9pB5 0q9VB8ZEHG40n2pWTNSYLFp8qT0ZZuDrJJXxplSDK5PUZp76eu3Bad82ZD0wAA0EIq/R 6JcsfNAAthYHs2JRGWp7ioFIEKMWq8MlzvyPR0gnEsibt7loJ4z+3M6wi0TEZnsh2Tw6 Ounsworth, et al. Expires 7 May 2026 [Page 117] Internet-Draft Composite ML-KEM November 2025 Xd0VLLFAOBJRTXbawhcnVximdfcNvzV82yEHqAg7TV5ftzPVv1s7Et0RX9SzgN/CDQLW EpnnfX3qIs/fSfdOnZPpROmALvHbnHkrE2kBPOMXTNVSRsFB41rKXDy34QRVG9DPYXd0 HN0JQO8qhEQRHdURVYRjvK6LsSH/KThZ6URRnMn/dI1hun0BUkDFv3hZECKlOOfijzbq E65vNcDG+t3QU5zx4tKxgATcm529hPSfdGP/RyXZC307fqeM0vVzhTBZtQmCfG33enQE O6DsEzfEjtV4uGoEYavM/OsQ6CutQHREZMNsklFstAxS1kbyIs8+sLQnKlid7QpP1fzq 4LXKcRKPR79oeCBrybG/kDiBY7oxfmB9PxTV4ro1w/k+sOspF2y1mumij1v/Isx+FHU0 i/qaTWdRifZWuJ3swqfI76eR1jwK0UbV1nTogDWAQtg9PiIep2gyoL2nvQXnjdN1ZwSr ZDCfyDIeBGA4NLpQpFogzreRQSmKhIkpGoVTQBi/2mVu8zcwxPFEnTX8w+2/bFH2IuDK HhwpUB2zg0UBN0Kxrr8ck31XLVADEy1uerJX5/L3KEYxi1f9JpdhJ/B74ljGjxP74OKF c+PB9I6LopncmmUDJoNY+ID5j+XQi0mc1btam/oKDewvIMtjqsQ7doPYr/Prw+fhV83k 9Pe+w6nxuz+q8fU0Tx0AuySBA5TRIYy2TG/TEHVNE/3pw4mBRLmCTjuhz7x7cslD+VRj IOIbNlwvzcEH3JrYM2vOvTZKYFP86T0MHbWANkqedtlH6gDyizk0F1BjeYwFj1PRRag/ EJS3Pv4rbq9EQDtSXVfTtbQyZdAv24HFleWU9D4/ci4h3riHTnEqxr3tE5Eop3gV3G+U 1DDXmEaItgEuziq+j2EZh+jQynwlHS36F4n5WSJW6P3yzLouPc0BykX7J5tB6fGB899h uBurk2EOq2arFqZULWGx6HjfBMK5y6jeTPuYCOV6ZHk8J2SbvhNvp/u2NgAFrrIeap/u 3cg7NkaGAxfNiuJTJq4EZupSiLgHqRLtRP8+YSnJLh53bNjZmf+Oxx8dGvd97eklSTp9 O55Vruoo30r/zCI20krqm5tvlMJLYDSz8Svsp9u66NWCtUy3rhjPLhVB++333uVR0VWb QfYWx54tLylyOeQ2qs9e6eXMra+7G0KiuUfY9ipV8uaZFXIsAmyVRtC6l+B8dqkOztYL /CbRHGJ9jVwepGFFZmkIjyPzIoOn/pvQy4CMMkiL7SR6clDMfUP/OnWW6hkHMLhzPw2J RRKn8PIAX+7oC+n6acnZOBSbGvlZVIAw2U069dCp7LhDyQhLGDq/RLECex4VHuwo28Xj HnQxTrYhRgQfLOBUE42GYNasyYrx77x+Ip/V8vVl185+IzxxbHNefnlAIdCSwXkjND3b 7BTiKIVKB9WjXpzyxYfWiAYtdOHkMDCw4jIEk720hj4bSPB/6L6qq7XcEu6JJ8b0Zruj op9buC+ptdgeKHjuZziDrXBwPcJYpo32YDp1vp1PvDPYOqVK88hz6X4Llo+9pg3wm5+6 ZQCbhv4NMcYsxKKR46/kJnTJZBQkG7NwAuhqJOaPdCX2b84QMQeRw3qv+WalyEZUINTG 4OC+2fMbeeZbBgYvCwMrUM/kam8EY0crcZxo+IQmfk/1lcRihjvzEr0QKuVOtdd0XmIk /t088m03dze97ikvWUEiA25Ro37oXcTYTew3i7hL4ElOIL64x8S8Pih5wO5yM3xN8/mK EBqxYdGrBYckxAYGOUxZUkAXblePvE7rw8cLUH146Ug1hVeg4MTKUx0BxDuLdnFZDaAY 1OP/R9V+CGI3cyOH/RB6K4snudjsaDrjFHuhwqahAD7JZUsszP8TzVquwOy4S0T8bDe0 xXPoyM2zvXedRkp/SjYRIXzb4VjW/Abj7bapOYllH7WuWHB9SOn2AOdVElPLSqQ3Yerh mS/TDQk0d5npRj0R/N1Ti9ErunZVEd2fj7Lt44tVlSpCYxERx4OHrA0UoKlEeTHGhWP/ k60rqhAHlJfxdOuku0gENsXrhmvF/s204CEQrzOHwb4FC1jKoqzYSFjb0+iKQ/JeoD5r dyBCcDsIaZG2u8SjLRTBJ5jnOGHNkxVghC/CfX8b2JxjBmqFYkJT3MLBOrU+DMbXGFhd j74caG+DmaQ4O1BpcvcALtvfa4m/x9xBYG+6vePpAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAULERUaIQ==", "dk": "bnzPfCeoYDxiVvebn2/9PDJk98JhJdJN0xwZ/YSxMqUWu91I34qJsOK8wrMdX djM1Qb2SSNRp9N0pISr8J8qXmEABC8OfU8VQCOK1HMT5Ht/5TCwN+VL0x5iy10p3wSvR I65VxzTXIub9ooU5ooQCkheYYiJTPiw33dD/CZsEBau1PERfG1E0HF2FlL6YD0Oic5+7 F8XKv5CSO1ZtAFtKgHhGjA+AgEBBDBkA/HFjYrR+cqZgw0CTEsiBOOMI0ulpaLAiMaaJ MI9Zo2G0er1XhPaTwy5k0HpJlagBwYFK4EEACI=", "dk_pkcs8": "MIH4AgEAMA0GC2CGSAGG+mtQBQJSBIHjbnzPfCeoYDxiVvebn2/9PDJ k98JhJdJN0xwZ/YSxMqUWu91I34qJsOK8wrMdXdjM1Qb2SSNRp9N0pISr8J8qXmEABC8 OfU8VQCOK1HMT5Ht/5TCwN+VL0x5iy10p3wSvRI65VxzTXIub9ooU5ooQCkheYYiJTPi w33dD/CZsEBau1PERfG1E0HF2FlL6YD0Oic5+7F8XKv5CSO1ZtAFtKgHhGjA+AgEBBDB kA/HFjYrR+cqZgw0CTEsiBOOMI0ulpaLAiMaaJMI9Zo2G0er1XhPaTwy5k0HpJlagBwY FK4EEACI=", "c": "CJOcWpgQ/4lVcLSZwUOg9zm/3s3/B0bgrlKZQUDXtGPBqR7zxvjxb16v0erLGt 0pKq2Yo7t/hKdkMq4mEnCHI6wzqFDt/vwU1qzfc6C3kqCRaXEgMr4euMJDymXkZM5njx AUTvKfkU4owYGZX3xuv9fJpoUXexu2+S5Ckjn/bCvmKE2yevR1OX/SjdjDgDnQ6t/2G1 Ounsworth, et al. Expires 7 May 2026 [Page 118] Internet-Draft Composite ML-KEM November 2025 CODXtNg7R9U4s/1kQXbnSzHBnbq9hKPj6NL+b1JA0Auai7QSMz4CyzeKu3Mvxskphv+D ziUzLgd07Up6bNBI66usncI/KGk2ZwDAlGNdekhgVz7sh2mAVCrQ9xvfMjQNw2aBD7Ru QhDlmxx1fB1ZFa/kD9IrBDgpcJUfJygaDmo2CNAv2hmpKGs3E11mYg2Bn+bzPRxZF9BQ hG0JusO0d65nIZlQOasta16dACBjHyQQIK4V9EyrDareQPmVkCxrELwpmNln0fPpwKZn UpLNfpcNlYi2j5/g0F3YuwgjFN1hbUawaHKHcqsPH5kXLEqlNRXgO5LFDBv9mbFQBSgh NTO4M+WFVqTRtpst9+UcTOPdp6pKSOdvJ6ENe33byivnuSjXxWs+J6E+Q+BdibJjA4wH y33lc0273Bv1S7rgYnLbLUvfiabDNmFVYUwvuz93p/c8gYhTvJoZzVL4wzl/qpH83pu0 pPWquX9W/ezD9qWcbhde8PH0qA/elY1G1kgrVC7hXP8h6kQCD4+WPYK9mzlfL/ur+Rub RYrG1hQgi+H86CZB25CWMbloMjlmsceSFm5Plcc7Xz2RT+vG3nPKjU1X0obzWYyrjbZG RRiLwUkIfaLpZbWAfKUeHEl7hOw1FTzrRWuiTfkHqjVhORLW4MwG4bjirTNIxk2bMjTB Zv3QNB4mhNtC3UBlHy2+cIiZRY2ZYWbEPk6PF1sDM1gtJ0xG9GZs72vKGJJ1+64ojtZ8 E2xgApk+wL2IQrZ7wnIMSLFhHeXkAkUl6vDec7ZAiV0WfQmykEFYHnjgHUdycLezENRh qXERNZpRNBZrVR74vvFZfInsCwEXhu5igfAc1IwXnV3GaMg/nzm3oO+pzyIEksLkTqbZ Eou+qqc5gcK50hzhwMSI2OGgw8jeyL228T0AtEUlHwiBDsKNvireU2psS6KmCJ7tYmO7 qT2nplNMG0OcvAFLCrzIrjxwkfqdKYVMNAL/X3NCpMgjNdegwqB3Ug3an6ff0zR/tJC4 gF0Wrp20SnU3r7JMhJ1j8FaLiOsa9LwtlpoqC7K6ngjnUjgp/3XbWbZXuG/fHIFZUll4 TdLAiJpyJMxvymOnRDJaIzPuycnDZ4UWCMy9SFxIzf5sOIPpdj7dWQ9Wc8Bhcwq95FT0 AhVGEDZPnoyMKkEwm8AkNh6CKO1cEg2cilrt1M+eH+DmjnHBIxLe9luZCb2e1PAfi8fs s8HtI2Vf/+0LJGY+jw9gwQ7KCKjX2jRJ2gg6/f54DSUYqEemIgUMAXJ5n37rYe1v3SXc dkDdkwEjLa7j4+B4yaETnhznHHwjQDhpvnoAVALTcGCbLjykVkEeFVOG0AZhWCE/Iu4H TSUTu3PYYjqS2upeEpYSRdUiRebNYbiWX1SJ9dyx/sEQhxwGkagrSC5VyhRSDRe4+Z9V euYW78lWYW35GpFRQnl9e3xZ9PWv5E7sS+42SoNR7YEyat9zu2dD8Tc3hO11+u1kGOWm r0yPnSg0FN7FocvCpn1lFVs0bvaIsSbOLNaltAqCMIKiUUBF3yBZKEEG97xUAQiqQTFG 7b8mMsOmAgRFY3d+uyf2JJ8Dz0G9LyjgJ9UC8rN7OxW/xHPU6BMx64G2OedRtI0hZ7Hy zuX6awQId2MucyneXeZRTYAuNqdOjo72GLklNNo5SNgU0RS4dJcKtDDxJLZFdHYkDfkT 98j3YaVl93WcqLdbmEeM4+MJMhT3qcb6m2Yzv+DT7wD3EbU0BskQqE8gKGaqUnl1O7HL CKiWVygu5JB9colGX65tUV/KvxvdzyLHJ5mt3yA1st63SVOsLaGGqDbXyQunDceWXCjU 0eAOeuw5GA4rU29yUB0C/MInmf4NUeeKy/sg5PiwydNCLOxTclJ4iFAxAE9UyVBIP8hx BhYyIwqtBymbwm0e38b4XJ/YraMXgBdj9v4hIL6KDZ3/oKwAnJfK6HHgfk8EXujpwx4e HKT3XOkGHHj8lq2Wb5OjeMCbYx4vEfV19sx42OyFBA9xQVUTUm", "k": "8HsYMldvAsypCNwaRkQbbf9etmrqp0EhcItMxZ6PtTQ=" }, { "tcId": "id-MLKEM1024-ECDH-brainpoolP384r1-SHA3-256", "ek": "b6O8AIuUuaafRRBPmFZtQbKUNtR7yte+5Qx5dzqFyDzJBlMw6iiHgxU8njch9 ZZC9fFpdkmfqFUmnbAsqxgjMlMeFkEm85KVT4dIZXq3WdUoDJMqwddYw8AvMyWG7bGaw TAWriUJ7RR0ZNxRoWDBu2w3H3qDrYswrlF3ZVF6itsFXwEwcgxa9eAMHHMh4uBHA2o12 ailGkMQ7/sUqYMkI6ETItqvfMsC1dQnZYSGXmjN57FKckVeIhOZBoAx/RXHYclSpECVW tWLqIbB1MwXf3Zhe9eUuqsqOSOBJLlQEMovdhCRH9JwqgBx4DZcppiHCgGYIfGcmnC59 9KL2MRQtvAy8gxgksRWdXWoUBEBAeIxgxINSER8a4JLJket6+Qx5cxkNwCb8fOtP3qO1 TLKqijOtHGiMpYKMTid8SoQjQx9kYIfdAOWbTQ4itkcLnlCQ8k3AXtJTVV4b0yJvaCMl Vi8leKSjulvTQqGv8xw99BZODFM+uMCIjE1p4NukmlhhBCX1nOSUrRpWPc+H2N2IipaL ANmDZVlyYNOg/VF/7UKZGaDZPqbtMRlhbChz6moDrQHlRtDYii/KMiJZad8qAY+SBB2x tsvPLYOocFqtNG+pEsnv2I7cSmF7xmFl3ax+tN55kh4+VOxNMs33mu8hfyiSlKJvJwFW RFe9HeWh6GbiIEsZ7oRyyll/OKr1bKg8Bmk0Rw9dsw/99CudAUpz7cuAoVmFBRtSCdVh rN5ztMAGQN2yZdwDXeSdlEWPnxvRbJ0c8dbnJMgNRI1i5kCDXMFWCTCLjTHfgKizZAh/ 3yiiktqkssJdqJ4Dqci7egrMIwyzno7+Rtjc6myGppL4tmI+YPNNQUkiWYesohtrXhqv 3iUC7UFk0EFvKa+/bITNeBP3iBCx+a+tDwMJ+aU2hpZAzA1W/rC3Pg5FIWrhnet/QVyo Ounsworth, et al. Expires 7 May 2026 [Page 119] Internet-Draft Composite ML-KEM November 2025 AGJz6EW6Uo3+JlcExWjHkJuS2ZvmyE8lhrPnvu2v+cWPIDCxMV20NQIMRCmGYB8bruR/ qAib3k43+GuQylPC1anEPiS8ft1wEUn1Qi3gmFXxgBvv5ZOpwhf4ps0RydujxyBUrtdg KYGAkyY49bE1RNcpBKJNmd1/hymRgYS6bVQj9HOk/qLiqiI6pyNNCNtgPTGE9WPbYfBQ Ys5SWhwSUfGZSk40FiiJAKFHWFviNuEHXqFBOKLhGoc0aCgHgGhrnwHTtV+D2urHdVQV /KYXuB4l0vEq1Yka1lXWnsZE+RCrRRdM7I4+btCLqQz9vAgQbkYv2WhJ5YwmQhPBSNPw FSHulrIe5Uh57JsrKJ0dEdAQogZzhq/fHfEpThk8/c/R0eTxlSB1cO7GWGuQ4KTjvQn9 SCkFZAcDshqj8rF1olfAFSvjIDKxFF2CVBBkKuYGIU2zFhJobBrBNK9AgUy4WxOg1KCR +dLAXUY4DFAK0wT8lMKlVdLP1StMUGjS8pApGO6zdwLE5kkqEFAawCPmmZWfPyy65xqU EA66eV/uIwpEKeOFwYCT0GKnQtghkO8/Tl/VjNf5ywUmupvzRN1F6MedAdEuReeUEuR1 pZEcgVW58DEubWgMlTMNxovi5aoI8fB8RZWFadnJuR6KNcRIxyPU3tR77mXiaQx92cdb FUxQIs7K2hMvCdSoEbAMtazVYfJRAi3qekjOqKHCOmWceiJYhUrL0UdyUU+cFag6ezCo pKFqzuzXckgZFnC7uZ+/7UhqEU6iXJxB4DDRhYJ8Pdg3tZWjDNim9ZutmxOasKVG5w8h VWGaRiZy8klWnAh6UVTvEMmARFf/uxEAPSpdteRV9I8YPFJ8amYkFsuxsqwqaYLMBkGh WVd3hQEBtPBNAWgUcrOWiBTfjueoQFlaFQXOQaBZ2MqJrOLHvVPV1k5r/FBKUc/IjKuy /ias6MdR0QapThRvQm1ZopzORIlnOM2deF/fEopkIxitFprk8OQGDwWi5I0sCklFTTGo RGZpZKLSQh1CNgJX5ETrXCUmJIdxhlKDFuaR3lT7TKBmsV2OlShyjC3z9lEkmFDAmeeW uFNYSigITEqC1nLs9q8+m+Y62TnMyqhJZLrVryYyZdIigMnljRwkEuy6RMEJ10zrRc7m anSHpD0fNdkJTL7dxNO8uiDfBuJshlS+lcQTrv6wCuL7X3FVt/EGEqKdFieqYDZU2hHB ZCq740z3StUwiK+sSAox15PcK15OvLvQNVr8htZGaDAx8ZmT3nJ", "x5c": "MIIUjTCCB4qgAwIBAgIUCl2zsIFEEEPognO+/H7GUNngmm0wCwYJYIZIAWUD BAMSMD0xDTALBgNVBAoMBElFVEYxDjAMBgNVBAsMBUxBTVBTMRwwGgYDVQQDDBNDb21w b3NpdGUgTUwtS0VNIENBMB4XDTI1MTAzMTE1MzAzOVoXDTM1MTEwMTE1MzAzOVowVDEN MAsGA1UECgwESUVURjEOMAwGA1UECwwFTEFNUFMxMzAxBgNVBAMMKmlkLU1MS0VNMTAy NC1FQ0RILWJyYWlucG9vbFAzODRyMS1TSEEzLTI1NjCCBpUwDQYLYIZIAYb6a1AFAlMD ggaCAG+jvACLlLmmn0UQT5hWbUGylDbUe8rXvuUMeXc6hcg8yQZTMOooh4MVPJ43IfWW QvXxaXZJn6hVJp2wLKsYIzJTHhZBJvOSlU+HSGV6t1nVKAyTKsHXWMPALzMlhu2xmsEw Fq4lCe0UdGTcUaFgwbtsNx96g62LMK5Rd2VReorbBV8BMHIMWvXgDBxzIeLgRwNqNdmo pRpDEO/7FKmDJCOhEyLar3zLAtXUJ2WEhl5ozeexSnJFXiITmQaAMf0Vx2HJUqRAlVrV i6iGwdTMF392YXvXlLqrKjkjgSS5UBDKL3YQkR/ScKoAceA2XKaYhwoBmCHxnJpwuffS i9jEULbwMvIMYJLEVnV1qFARAQHiMYMSDUhEfGuCSyZHrevkMeXMZDcAm/HzrT96jtUy yqoozrRxojKWCjE4nfEqEI0MfZGCH3QDlm00OIrZHC55QkPJNwF7SU1VeG9Mib2gjJVY vJXiko7pb00Khr/McPfQWTgxTPrjAiIxNaeDbpJpYYQQl9ZzklK0aVj3Ph9jdiIqWiwD Zg2VZcmDToP1Rf+1CmRmg2T6m7TEZYWwoc+pqA60B5UbQ2IovyjIiWWnfKgGPkgQdsbb Lzy2DqHBarTRvqRLJ79iO3Ephe8ZhZd2sfrTeeZIePlTsTTLN95rvIX8okpSibycBVkR XvR3loehm4iBLGe6EcspZfziq9WyoPAZpNEcPXbMP/fQrnQFKc+3LgKFZhQUbUgnVYaz ec7TABkDdsmXcA13knZRFj58b0WydHPHW5yTIDUSNYuZAg1zBVgkwi40x34Cos2QIf98 oopLapLLCXaieA6nIu3oKzCMMs56O/kbY3OpshqaS+LZiPmDzTUFJIlmHrKIba14ar94 lAu1BZNBBbymvv2yEzXgT94gQsfmvrQ8DCfmlNoaWQMwNVv6wtz4ORSFq4Z3rf0FcqAB ic+hFulKN/iZXBMVox5Cbktmb5shPJYaz577tr/nFjyAwsTFdtDUCDEQphmAfG67kf6g Im95ON/hrkMpTwtWpxD4kvH7dcBFJ9UIt4JhV8YAb7+WTqcIX+KbNEcnbo8cgVK7XYCm BgJMmOPWxNUTXKQSiTZndf4cpkYGEum1UI/RzpP6i4qoiOqcjTQjbYD0xhPVj22HwUGL OUlocElHxmUpONBYoiQChR1hb4jbhB16hQTii4RqHNGgoB4Boa58B07Vfg9rqx3VUFfy mF7geJdLxKtWJGtZV1p7GRPkQq0UXTOyOPm7Qi6kM/bwIEG5GL9loSeWMJkITwUjT8BU h7payHuVIeeybKyidHRHQEKIGc4av3x3xKU4ZPP3P0dHk8ZUgdXDuxlhrkOCk470J/Ug pBWQHA7Iao/KxdaJXwBUr4yAysRRdglQQZCrmBiFNsxYSaGwawTSvQIFMuFsToNSgkfn SwF1GOAxQCtME/JTCpVXSz9UrTFBo0vKQKRjus3cCxOZJKhBQGsAj5pmVnz8suucalBA Ounlf7iMKRCnjhcGAk9Bip0LYIZDvP05f1YzX+csFJrqb80TdRejHnQHRLkXnlBLkdaW RHIFVufAxLm1oDJUzDcaL4uWqCPHwfEWVhWnZybkeijXESMcj1N7Ue+5l4mkMfdnHWxV Ounsworth, et al. Expires 7 May 2026 [Page 120] Internet-Draft Composite ML-KEM November 2025 MUCLOytoTLwnUqBGwDLWs1WHyUQIt6npIzqihwjplnHoiWIVKy9FHclFPnBWoOnswqKS has7s13JIGRZwu7mfv+1IahFOolycQeAw0YWCfD3YN7WVowzYpvWbrZsTmrClRucPIVV hmkYmcvJJVpwIelFU7xDJgERX/7sRAD0qXbXkVfSPGDxSfGpmJBbLsbKsKmmCzAZBoVl Xd4UBAbTwTQFoFHKzlogU347nqEBZWhUFzkGgWdjKiazix71T1dZOa/xQSlHPyIyrsv4 mrOjHUdEGqU4Ub0JtWaKczkSJZzjNnXhf3xKKZCMYrRaa5PDkBg8FouSNLApJRU0xqER maWSi0kIdQjYCV+RE61wlJiSHcYZSgxbmkd5U+0ygZrFdjpUocowt8/ZRJJhQwJnnlrh TWEooCExKgtZy7PavPpvmOtk5zMqoSWS61a8mMmXSIoDJ5Y0cJBLsukTBCddM60XO5mp 0h6Q9HzXZCUy+3cTTvLog3wbibIZUvpXEE67+sAri+19xVbfxBhKinRYnqmA2VNoRwWQ qu+NM90rVMIivrEgKMdeT3CteTry70DVa/IbWRmgwMfGZk95yaMSMBAwDgYDVR0PAQH/ BAQDAgUgMAsGCWCGSAFlAwQDEgOCDO4A4gQCfjnbwLpcMsgfbLI4KpPg0KWHXnlTgebF 8o5Sw0bJuJcNuu6VLYYXe52S7THzIcxPQ8DScK2p7rlWIhraBIoyUkXKeu9w1u1Hp/cU dlUHPj1NnW2ghjXUCDCZowYs65J4ITzFHpsg39f2DQ+yqC1XsZKiEucTilderhzJs1z3 GlzBzBO6AyDqbg/OEfobxwuPsoBVtFgqkwCDGRlaDBLyY+4U7YzYfea30un6GHliAL86 T9T56e/wbiRj/zZpEsodF9HdajvP/Sw8QjqxJWygUDs5gCIkLtBzW5hRTPo1KdrNH3FU 3oBp/8uATr8EzNSSQzY37Brv2CHJILiWqjgu0oZyOXDHSx4z+bjXG1OaUNLih4gtxNWe SVv5oLianGFTZbCPXzh+G13e24J80XXL51uuHJrPVnmd8TyH0SXkZEfnZ5ZoWgfqFOrS BOfW6lgwS24W220/Zxs/TL+oGbYzTNfCJz8iHOdekacewymw98sytPR9vqdA1nKCZypl jh6CL82tzq2ql0LNcHK882oca/GBHpcNa/E1fyazS2J3BL1tS4dy2VHX/BeHeITz/KAa aJtrD301VGmnUOshMHwLBPDrQ77f/3XhhsI94KwAlHWHQEmjcVfdqtipRbCvKFsbSkK1 3vCGLs61u36W4erWmrFxrj2lioOVT3iTqZFyPAPbL6ZXeiMomBUhu5Hlec1AVXxiggsV 1nWEvatyr3Xx1MFrymMESrSfif8y9WkAGBovzH60/4tX/lQd5+2XbObQRNbo0V9PGHDb f1uAdROzg8KzhyQzA4cF8S7gsB+PXcIhcA7JtBmCqysYrHPOnvNi3bLC1f0zrUB7nHHi +qvItzxu9DTqX/PlC4nCdV6HsmbbzLaAYSuuIdTLh6HWMNAo2T5BnCdd3qTLqTxENhLm bV/24d9YGOvcKuyIdcNzefQaQ6VMgVuGXLMnoNuOtpa3NgbqpPeCnUft79LTjlAUe0je TGGeJ35yK/7dZXG9kz1e9qnqR8yD4VzNujO7irOLRq8ygwbSS01j8cSFL4YpZLLaVc1U EQgr0kdwaw8GCRonAt7dFwUgnasP17FCztyIH/+NX75Uc05wJJRZZRt3vNZpJ9h3qnD9 cA3NZhVMwyE9vlElz1GucXsNH7ijSJP+XmBXwhIcXuGPfL+z2idWd65qqNTUT+3CWDGI bsXTFgcyfwHQNAZYhpE5wx2aCNRJUMaxrCyZhcayCTnvgJAMaf5o6DvXNAlDQMQfWvdy u077asNTGfgLkr9N2tvHek9ApRE2TTb3G0gcqfNvRC628aZF6J4zAYuGiiFPA3FNcbxg 8b19NaDzXC4v5i44nokW+JHvwSIFgNEFGBJEH60Q2ZF+idCcEj/g3fYsuEctnmr5Yrb1 uIQuTRKgg0Rh0sCdS5noQ4Q4lubI4eHxizUrW+S6IR3VbJYGZcO10bOszGuWqcU6+3Ve Oz/23YQz2VTImD8c/jGU8dEQXRLE17QofqNt+lv17++s5E8iGap0rXyzCs5r5MpKlsmH YHL8COr4CmDuL34CHITmE4VzQ3mrNVorePzljim1WVOHOnsqOxeDaynsNWThFy40ZRoZ eaPW2scPKnImED8pupRhna0uKOPI0XaI76XNL19w3CFxf+dbM1bki48SgS+LwdKixbDq fd6EsuELT53seV6TuCsbTMNbSsTxY8FWHvR+p68tZmGQwRAYJ/fa9NgLZx8uvT5OP3VQ CeIwxiXVZvL+Yq0ly+HLSBCrH1KHBOQ2NGqc/S+hGNGb1zgMG+1ROFNq7R3fh3B0trGM nv2ZuDJRBD1rVtH6uTUIvP0LDkEg2k2nH4wg1mlQtSovd7iktjY811C8BEOhSdab6KzQ 8MTwKNS2NGUcGM83KKhhAcdMtkqAw2cfwfqONNkB45Mgux64vmUgDghVaSEGks+Bfe0R 14+pOUvl7THcXkRxzgfHUf1RqJ1cgfwloMb4wB8v8LJjSDJwz9wGQO4xPppj0SpmDrAQ BeHAyd0BGrDblG243X0M7wK+oVhIJ48DRCdr8IPxNcZCnC/GqWj+wh1yrHFvW/Ctc+FB XJ3i3HWYwJTaRLS9GYqvRpV/JRueuLvGg4tTJ/JIcVrobgf/9RNBI7BCMwbpv56Ni516 WPVoeibUAI77NaBzEHzZ+QnoaUTg7HxSMJ12pviM9JSwcW4/QrJonkXhISoQbzKN36HP gITzld5etkkraAZs8EXR8wvgwtM7QvrgLxuMiF+zRSc4+2Q7uWeR1nwcbpwkM+VaBRG4 HgGamK2AUPLNlamxIeNFWXMNR42fnCS3KjZTIcDrVHFq0S8v9D0/bJIs2KEcqEZWnbre YuIlD8n4pyogvwq7qJNsPSm7D99P8HP4J8ZA2h7ZjwG0Oe7RX7IvfynrozJuHogwEZwQ PeGdLUn5zeEVyFXvX8V+YGx+2y0ovgnWyTBHv/DK+Z6ptE6YAgFSelc6xu9YdLK1aXZa FdtEhGsYFY7Qj1wOJVAqR6XanDJxpO6g4oZALG9r8ApHhy3ZkOjktr1qa9FE/P8iEppR 49LkIZKKBzJeMYVrS3elvxS5eLh2wpOe1uw7M4RdapzGg4eY3aGOF560Ey6dFHgdWoDW Ounsworth, et al. Expires 7 May 2026 [Page 121] Internet-Draft Composite ML-KEM November 2025 FEIMFbHV0XboVh96q+4/wllpZgNtNNcK2005QWVdlHw9aiFWS6K/A+yPR5RAm1+rIOIm xhysWi6kM+35royngAp6j+CqQl9sAkTqa0fLsLFo5oaq8avSxw/TKCLnqSoXTL0kuDMv KXYnTD6zPk7qCfXFSJfU5GUymucf4rHy5GYAob72ehJ4xecQn0+vBN5Y3UGitTGtzPnR T1tvGYbQD3oSEivFXg6Y2FnZZRHJ5nPUN0aqqKsqihhPJn1d4Zets6++vL3n0hDyk0Wg FSG1+x5gElml/cpGF1Ti600l3qqTLoz/9i7iNV91PGBnHzHU8vsE4M+5Oi+PzZoKWXgG bXtZebodnkU9d0EGMkRmMl97YV6Ag7U2uOpMm9Q3DaSe6o9HlzAmYCXss8pVszJZT4Ka SkJr7PX6hsES9mxUK3TcunpaIHH4aJTlQhLRzWR1JXGfqgpIsQPbI/cy1cnZlaJ0ZqG7 Uw0o0VGDV5HkVZjoKwvdAdi7MlJdTcbRYHBclwEc/nuP++fceAE/xyDe9+uVkQ0baWqe TTxa1a2GKULk5sRfo0DlBjgDJtb5drhKxBSg9GQocBYd5ClgsvtmmGP7r+MauGHhyJ40 EVLjEyBA3oFY2OscDD4HBJqwhOx1rirPK2JgfPbLDeJdTNksGH3Zkzx6llO59Tp0uT3Z Dtwt6KkuEiSQKVXgSBx72yUft2CH9ilxPRqNCfZdy1CbcsV5Y0vAYxPdtNNnwZQHLzo/ /ubdhegTDH409IjkPScLm7qgHToaHqYCs5pRa4y9Gcbc94vMqttBUGOytaQJXS7Jlwv7 EWQQoV3YcF4bGXLghyIdcI8+Ado7qYt/+IMUnQHqLIDgbTfWbmUV/d5O2TgRJi/DTtei T7QrBZRJ1NBZ92KDDQlJlaHhAJeboLGxuappdOuCAXRpoucbGKRPQqQmPrWHSP/G6oiT I8dMg6SBj0k7Gr9dSzVGpSmcTE3bAEMIUnUQNDpB3XrsInJMx0mimhpxytIxkiLjWYID uSCcw8rZN8ipRd5Skgvu+CKcf+KxmF46TiADX71LvQDZHka3Cm88RMFyBq/23kGKkFOx yQpQs7zvCIPhraLKYh9bz9sslEK9C0H8CcLAwxOO56fDtiZoO5/WYC7GdYFqA3Kth/qj vsxZr3ZHnUupoh/h7vytLyCdOTIDlOcND7VgLgWeETIYJ/vTUAXdK8Z7g7UTIk74Xh5+ tLQG3W2geRWUluE7EsiOnVkOAkYgPzOuQBTZcqp4fluOW5ndQOZiB6zc480BzCqgaYy6 Yok9g4A4VSJNuwuDX185zUpYsnYUmIoQCIxmJEwHJqXG1SPQZzWQpcxyEnchFLePtiFF w9WcBla6zuzdInwOFsVbC446fOfXOYtNW72kNJ1dD9GqDBMVVGRjyQ2EI00PbXIJ2D+Z qeiPjZuP3rZOZzruOpagYtbZm19dfWtTDzkJZ0q52VTcqMHebthm+D2Xpi3niLNfsf+6 AXQyNppu6YEs6tFXN00XHANDIMy06SfIKLAaXOCG8eFp2UkQp1dtis7wE0dnLslB9qhy mUNwIfwRoPacVtJX2OkdB3WdQzyTcRJxMhglMOLXKop8DzKivJ5+lqAw6iWOmzvvlirx pGma6BGlZGW43k5IgUV0C00p+bbORJPBU+aTkKqkkA3wwJi+eKSVecUMNUr7Z2u4nA0B B7VXY+QVr4sMERggRoKGk/wBLmmNriE/UpCV3+tASY2Qpert/QEDHjxMU2e/1vAKI3qK 5AAAAAAAAAAAAAAACQ4VHScs", "dk": "wMFcIci8UT7wUHUAn9RPlo5fJfO5kc1KEHBGtd/0ttPs2f6avsHQmJ7Av2rsX gIiTHx3iBKOnFqYaVuQ3Z1ZFmEABCddM60XO5mp0h6Q9HzXZCUy+3cTTvLog3wbibIZU vpXEE67+sAri+19xVbfxBhKinRYnqmA2VNoRwWQqu+NM90rVMIivrEgKMdeT3CteTry7 0DVa/IbWRmgwMfGZk95yTBCAgEBBDAXJg5NFMehzMXDoSETDkrkOCLbgVhlvceGYeQ/S G5Bfa8Gp+Hs1YcxhHREiWKIwWOgCwYJKyQDAwIIAQEL", "dk_pkcs8": "MIH8AgEAMA0GC2CGSAGG+mtQBQJTBIHnwMFcIci8UT7wUHUAn9RPlo5 fJfO5kc1KEHBGtd/0ttPs2f6avsHQmJ7Av2rsXgIiTHx3iBKOnFqYaVuQ3Z1ZFmEABCd dM60XO5mp0h6Q9HzXZCUy+3cTTvLog3wbibIZUvpXEE67+sAri+19xVbfxBhKinRYnqm A2VNoRwWQqu+NM90rVMIivrEgKMdeT3CteTry70DVa/IbWRmgwMfGZk95yTBCAgEBBDA XJg5NFMehzMXDoSETDkrkOCLbgVhlvceGYeQ/SG5Bfa8Gp+Hs1YcxhHREiWKIwWOgCwY JKyQDAwIIAQEL", "c": "HapOtzTyUfcgqWytKJ0woJ7vi2wNwzNrAUezrLbD0wWCPmasBmZuu1yCTFgYXO /saC8yPLCE1clwPNi8rCE+8ifE4i+XKOovLM2sPL9NEg7MvLou6scX0hSKcojgzR8HLW Jl9kRZJP/Ott+/sIDYnW6Cg84b+AF3IJzZ4rL46QMIBi0H7J8qw43u6npk6eF0MS1r38 gbMbzjMniE8LAYgfQCg7UQF3L+enneV/aucuJuPMQm+T7sdmM5KSgTUrIBJzVuCIWXBD GosWuOMz8N8nT7PNdV8M4y1x1sjerS3YfKxnbvo15P51RTgrOaZMB03I/IqpNVDAhFOo JBRxR+zYdyqYrPGHabZB7xdQL+40K9YcabUc2y//mBbvRJBQPJctz71Sr6gIoWMtSdpJ zvjdVwQSvV6rslBSubX3vYX5F3cuKdeBG2xBBmA38xw++QcKPIHOjoy8Nd3YybH3E+F7 Jfvu0vzNjMAvQphJbsYDleLWS9iih4W7mJEqgFjklYI9O2uvMeAa0oCPIumYRpPsZ3o9 k5Ya5T+UdQFEYl/8mvmvrqEFM4hkOD3P08JxpcRB9GJr0IX1YXkCzFW/mqWKRh0f9iEp bWjV+WZ51KtUvEP8H8Cetr4Edv2Hd7Nvi5jUHLQ3SuGHC5/6fQdkeAt59qQLSZzL1SWB Ounsworth, et al. Expires 7 May 2026 [Page 122] Internet-Draft Composite ML-KEM November 2025 Pf4RYREmw6qSXS9+d/oxvJfQR3GM6NYOMgDnmTKFwVTcYhXAOLz7hHkUFeZu7GDAZ34g 7znJ9MTAHhMmMgg29L4iXHmRGVYe46MmYF7jLKoljpHc6S7OXRSWtTsykG3knMvcbklF uxqLBKPmw9LiOzYGjeTXLX1zTq7wkn3LwlTiAtNDOy8SQni4gXOre4igAl3KZgrdJ98q InckKxxDCcU4RHBti3aCKcxSMuiCR7bnZuKBFjO7krBRlH8a/c8O6DvMM/bKu9ObgP06 sz/1qADc6MrQP8e6n5LczxAQewf5lQKcPl8geFq7sKriQaPWX/Oo/+N0e0O5L+NeD3LU mMEaNtmNCZu0dhCPmJHNBXALu9E+V+9wavIKET8RlEGvKdNHSQtkmJonSIkc7E6CuiTz A9GGdouQGNcOra1A8969T/qiMbiMLprJvLFW8hbChqIcImzT4Hoc36Yggrgyd9Db658o 8kn1DCMctW/QQiMRXaOAo+Hj1crGHHCx2XNLxFArMhmf6i/IiJpHab1FAtyiyfSgpOQv WE9X/qZHjGfoANeri9bxxjBAQ2Qya29YVaopxWq38nxk5PiXmTcQ7195aoVx8VYcKFZZ 0MDcX/IUEE+nK60S1iVEY+rhc4gF0+LY8IzTHxn6jetE7N5dK5dBDkg12EmTHZQE5v6n 4y7rGG5xx3h53Vuq3H6WpqzuC7tPzR9hiSkRMCYNRns0D6qV/ZcNMQ/cPXkZ2GVL0Gpx TrgS/F66oOsfWliuRLM8Wvu7Qs9Odnu0Ol6nVjUO+xexFCmeZ7vAyzvBCjlbNsV+tual b5YUDzAE2iLprEjfd02ouaT0Phs/EFNvHEKV6uDmxx1hMAK0VoP5fM+zqZhaSVCGp/gI 3r7M2zxswYLco7VP8qwXM4qNLlTSK0uxRxpKOakLhLF0e7TFliH6sIigG5T/MWmWXqqP rnmxJEVB5YzzPWzNfsCOhjcHbp2kLE2OJ5Jyif7aAA8zLOjEnpt9B8gWWROdjpNtBYjI +SnpKM7E7fq6aat9QFrD8ByLOcD6XDb/WQ2wIXiVhtgG5vzdkZNgch/r7Lr9rKgCceqw ZIKTfMLleCp5TuLUvBEKP73nFd/wS4RIjHu3fhCNCBwbSlVATX9YuNcJU4YzQN4lSkCn hvXV+TNOvHpSU7A3CDL4qCqAG8MpBu1giC8shbvL8sEN5HwJ8gM4VP1wtH9s370WodSW Rvof5TJk77CbiyO/q0xLswTOpgUm8fv0QgNaeP/kzhmPfTbJvoYzyL6pDaZa6edcyXG9 Ra2PdYhVDv/peCaLStWeJuhquIkf1zaHvHHXHq6zkhvhFkvYkzKCQwWpC3zTXNXnP7Hv 9GlVBXaQ+hs5caxUIj6vlSHuU4mKdkOv4TXPdMlrMZEKyN7AvRCGDfKQAEMXigKS3HqF /5rsLVn+GtQLK/eIg/PvUYGYIatFptitRwTgUrRxg1V3M1OzrFMjfkMOPeAbTMEhckSa uRNRGCLqpT0hwQ7VdKdLvwwdJOcivr9gLXrBxcMyUlYVXsAXHB", "k": "3l28B2kjUR8HCXaXJoJnjkh41UpCo+6B7tikoYfvyuI=" }, { "tcId": "id-MLKEM1024-X448-SHA3-256", "ek": "R3E4p4CSX0jK0pRaWbEF0keNNfJw2NvNoxUHwnF6narDl7ZVOmKPuHCucdcFU 1kPMZBqnNsicZRdhypvLHkAFhuoePABhZyEbDiA3VGt+GuiL+olorEmY4MSSaSZI/Q5y 0aVFooKimJdPXdfwhN0tXSEaym0yJHE81Ny9VbONSUAsVBYe0EhcOabWTcFkGOnkuzHa Ec+o+o43/xj/+iD6tJGT5gqL0SWXPE41he/AqtXlFc1n0m2IyNsKqyn1KyiJ4VjZWAVA uMSHamjIgBIdSeGPCigMpytsYuznEmL/po6HGlOwShCUeRvAvModclTH+fKrWRVg8yb9 7XPP2mZDZQu2px4/Yxlw/JF1ucStoGgQ7vLq2BrUNadoVB5ugpah7URfpIYwqMHc8Bly uYw7cGbYMZvHsBRBfuSLaSBzeZEkQy3GcYpz0AscsQIH1OXRGoU/McqfmCC+tJKqmY0t nOI1oKYHsER9xGVZZs2JQd+B4jKsUwtEcALZQJ3amhXG8ceOXSS/4pxDZdzgsENBLRBy 8aXEac3P1Mm6keMbqqUY0u6QTapEZM4gkelXGR+EJmGHAai7UJzmtGfROBbpWIDg4RNK xkB5hCX4/dtZ9hbd+Yck3uc4NwfiBmOtdZKqCsVxOl1cFIZwEZuDUYWMOkuHGZNInQWU fXB3sdnVrZlxaysQ7OoC0A1+OGg19bO5XFW7RJolgcxiCUHtXyJn6a6XiK2LMh3UXtyr De5RkRzu6KJJMGkI0VzKvYkiOjAjqAQqSdGkHFpuSATu3WwnhS4P6VpU6FI0IQdh6DDN krL0+IIwgOmzLsgP8u9uUR7zuuohTpaiWCknno6oyR5BRlh34oYfbUOjBWur+Sp0Gk7/ kRQe8lMZmUXGaEQIjcv82l8FLSV+Xt+rkeqw7Fes8RtEDZrYLkW3Bdoxctrtfke8xG3Z UIADsk0BgGGWvcyK2C/46IjTptb2eG7KWkh4odXErvFclcuVzlznXK3EwGK3/gTU6GqJ FYLrboJVdqBaRdl8TxHxOLGCGOTM6BOOZBJ6alHQcgAMvgR4jTEIBNnmhg9dBl8uFcdn 0uw6iohG7Gbgxs0HqGeHsCqlzjI42Ndo4HN3ggzpacAkEIunDoO+uewv+bD9WKD9nGOq fIF0rIcMpQD8Stnanw0YPG3/BqHOWR5W1yMUpNsopCCORUUGswXiEyRctyGLKnCu8XEm BoGJngPnULEaGR88ojC8AQDVyM9n0IYr1C0N3MxzKazYgmHhoaf3OdIXLTOrZc0W3urt AHM5ZyypMkS5+qTL4LDupQMmAo5Wmkj9Xqp38ApdoDGDFAc20IBephR+jOIq0kQqAOFk qcOHoEOsDVdyPdFO0HNOiprmGN1NaeURFWxK+CzGxOTeGurBuhDNFWYFWqeqrlXv4OUD Ounsworth, et al. Expires 7 May 2026 [Page 123] Internet-Draft Composite ML-KEM November 2025 zdbbvQM1MQDOBIzmVAlMtNybNNHtOyJ5RR27zPEggOGbRUVPaAabxp2XWi6ZMC5baORQ lU+0IWv//d6vrO8NGdX82ErVYYkSMkzpsQjTLMur1hxViZBGhok1punxPwsa5oGTihav wV6r9us+7NhRExWd2qJI0AVz/pzm5F/TkVs3DcO/7nCaPmrg5NIGaKQsNCS20AxhQNaY am9vYtusGcNmMlDEvKrdUa0POAI4rbEz6oLp2CmfJOVOQkvnetbkMVVvSWiFqxj2+VCv 1sKlSc8g8VPXYYEcRA5K4d0j4QjoVaXq/nLO2VP9DvIbvcnn6pWFAqivLGT5SoJA7kmh DNq3hjDEMwXdBYz9VFA8YxlNbTFQ/YgVKgSXPh/nUsDEfoB1QRYLZsWE1QRAyABPSZt2 OIVkKuhbcrOZPBcZaNRwshOxBtYrypqOjQHdHxPFgYOgBmh2cGvMmck6sQG+fQRYTAAc uwJp+i46wM+WpFBT1SJKoIJD1cThdMd61h8whZlwaeyrhE3HgB5bxOBQBwrbzdNCEYOV ngK8vwSFrqkTBQ+rnpcUqaGOgC3T1dleiWl3CqkI1uvszEpRHoi6aHHgQV/XUIovgJrF xKdYJOB+9VX28JEsQPbQINvLL9z5AiLyTSCAnnZ3HU3M0YxTSx7YIyHvyHFZJKttgeFo MNpeE6fEJveiG53M8ZyeyrBa69ubClh61XMDLxzi3C+rmNTdRf0FLaE9m8ZoNaATA==" , "x5c": "MIIUVDCCB1GgAwIBAgIUINwllcDhGK55m0DuE8nmI4ZVF3QwCwYJYIZIAWUD BAMSMD0xDTALBgNVBAoMBElFVEYxDjAMBgNVBAsMBUxBTVBTMRwwGgYDVQQDDBNDb21w b3NpdGUgTUwtS0VNIENBMB4XDTI1MTAzMTE1MzAzOVoXDTM1MTEwMTE1MzAzOVowRDEN MAsGA1UECgwESUVURjEOMAwGA1UECwwFTEFNUFMxIzAhBgNVBAMMGmlkLU1MS0VNMTAy NC1YNDQ4LVNIQTMtMjU2MIIGbDANBgtghkgBhvprUAUCVAOCBlkAR3E4p4CSX0jK0pRa WbEF0keNNfJw2NvNoxUHwnF6narDl7ZVOmKPuHCucdcFU1kPMZBqnNsicZRdhypvLHkA FhuoePABhZyEbDiA3VGt+GuiL+olorEmY4MSSaSZI/Q5y0aVFooKimJdPXdfwhN0tXSE aym0yJHE81Ny9VbONSUAsVBYe0EhcOabWTcFkGOnkuzHaEc+o+o43/xj/+iD6tJGT5gq L0SWXPE41he/AqtXlFc1n0m2IyNsKqyn1KyiJ4VjZWAVAuMSHamjIgBIdSeGPCigMpyt sYuznEmL/po6HGlOwShCUeRvAvModclTH+fKrWRVg8yb97XPP2mZDZQu2px4/Yxlw/JF 1ucStoGgQ7vLq2BrUNadoVB5ugpah7URfpIYwqMHc8BlyuYw7cGbYMZvHsBRBfuSLaSB zeZEkQy3GcYpz0AscsQIH1OXRGoU/McqfmCC+tJKqmY0tnOI1oKYHsER9xGVZZs2JQd+ B4jKsUwtEcALZQJ3amhXG8ceOXSS/4pxDZdzgsENBLRBy8aXEac3P1Mm6keMbqqUY0u6 QTapEZM4gkelXGR+EJmGHAai7UJzmtGfROBbpWIDg4RNKxkB5hCX4/dtZ9hbd+Yck3uc 4NwfiBmOtdZKqCsVxOl1cFIZwEZuDUYWMOkuHGZNInQWUfXB3sdnVrZlxaysQ7OoC0A1 +OGg19bO5XFW7RJolgcxiCUHtXyJn6a6XiK2LMh3UXtyrDe5RkRzu6KJJMGkI0VzKvYk iOjAjqAQqSdGkHFpuSATu3WwnhS4P6VpU6FI0IQdh6DDNkrL0+IIwgOmzLsgP8u9uUR7 zuuohTpaiWCknno6oyR5BRlh34oYfbUOjBWur+Sp0Gk7/kRQe8lMZmUXGaEQIjcv82l8 FLSV+Xt+rkeqw7Fes8RtEDZrYLkW3Bdoxctrtfke8xG3ZUIADsk0BgGGWvcyK2C/46Ij Tptb2eG7KWkh4odXErvFclcuVzlznXK3EwGK3/gTU6GqJFYLrboJVdqBaRdl8TxHxOLG CGOTM6BOOZBJ6alHQcgAMvgR4jTEIBNnmhg9dBl8uFcdn0uw6iohG7Gbgxs0HqGeHsCq lzjI42Ndo4HN3ggzpacAkEIunDoO+uewv+bD9WKD9nGOqfIF0rIcMpQD8Stnanw0YPG3 /BqHOWR5W1yMUpNsopCCORUUGswXiEyRctyGLKnCu8XEmBoGJngPnULEaGR88ojC8AQD VyM9n0IYr1C0N3MxzKazYgmHhoaf3OdIXLTOrZc0W3urtAHM5ZyypMkS5+qTL4LDupQM mAo5Wmkj9Xqp38ApdoDGDFAc20IBephR+jOIq0kQqAOFkqcOHoEOsDVdyPdFO0HNOipr mGN1NaeURFWxK+CzGxOTeGurBuhDNFWYFWqeqrlXv4OUDzdbbvQM1MQDOBIzmVAlMtNy bNNHtOyJ5RR27zPEggOGbRUVPaAabxp2XWi6ZMC5baORQlU+0IWv//d6vrO8NGdX82Er VYYkSMkzpsQjTLMur1hxViZBGhok1punxPwsa5oGTihavwV6r9us+7NhRExWd2qJI0AV z/pzm5F/TkVs3DcO/7nCaPmrg5NIGaKQsNCS20AxhQNaYam9vYtusGcNmMlDEvKrdUa0 POAI4rbEz6oLp2CmfJOVOQkvnetbkMVVvSWiFqxj2+VCv1sKlSc8g8VPXYYEcRA5K4d0 j4QjoVaXq/nLO2VP9DvIbvcnn6pWFAqivLGT5SoJA7kmhDNq3hjDEMwXdBYz9VFA8Yxl NbTFQ/YgVKgSXPh/nUsDEfoB1QRYLZsWE1QRAyABPSZt2OIVkKuhbcrOZPBcZaNRwshO xBtYrypqOjQHdHxPFgYOgBmh2cGvMmck6sQG+fQRYTAAcuwJp+i46wM+WpFBT1SJKoIJ D1cThdMd61h8whZlwaeyrhE3HgB5bxOBQBwrbzdNCEYOVngK8vwSFrqkTBQ+rnpcUqaG OgC3T1dleiWl3CqkI1uvszEpRHoi6aHHgQV/XUIovgJrFxKdYJOB+9VX28JEsQPbQINv LL9z5AiLyTSCAnnZ3HU3M0YxTSx7YIyHvyHFZJKttgeFoMNpeE6fEJveiG53M8ZyeyrB Ounsworth, et al. Expires 7 May 2026 [Page 124] Internet-Draft Composite ML-KEM November 2025 a69ubClh61XMDLxzi3C+rmNTdRf0FLaE9m8ZoNaATKMSMBAwDgYDVR0PAQH/BAQDAgUg MAsGCWCGSAFlAwQDEgOCDO4ACY+B0ox4dxPsAQR1pU6S36zIqeuLcP3YcgzrNsYd67AS PN3LioL3VJjbYR4BaRSXwscCLkRm3sDquTSRaTLQYsghuqPzqYWLXyZ6Wxbu0U4tmLry WlyDPkzyQtxt2iagEi2sEfNsflCkRR1UKaftn5Ven4i+4yv7rIEZfGtmn0azn3JaIxtF dmsHCIBBvOpMKmvL2tNkcnJ5eACx/9fbHC6UkxxfoTvu+KvS/htWq6khZl3hy9MMIU3v noCxKvXB7DgnwlNmhfBGZ8ijyV0PSjdPehmqgyz2YIhSfNut+U8H+ZUEtMpKiw9f6Fbt MotqeixiKJWsiP3Vzm7lEVbgr4cf31wEcSfcfXJBmMn4qDQsSsdlwP+Nv+ohxyJKMWN5 auSKXllAqIffTcp8VwXEfCT0ZUOexxlUcVq+19rHg3Vr8kjkpPobSY9pK/NwFUbEogd/ i8RADFNxGaBr+DnsyfWBdbcDCFiMi1zv1Q2hpODG61jS7fLMTR04d/zPNT1VaY/AlwN5 1Mh8clOX40I6PDYuq5k2sTVkDYouXH4xtAl72GSRwaASFeL6iE+6M9WLd/MRbeRUw01A j6gDjv/HopbiDxsrie95oejs6nHqnVDP1/7bOyWOv5tk0G+stWxw5macsZ+XZw0Ms32h WDFhZYoq3f70Rvoxi4YAVZurE4z+WliOlKw1hjmeN5iXkOtd7wiGKUVkfX1cqR8d7GZL +Eq/G/d/crCQWo0LgDEzWfM8bIFxQml8JoU8712Delwd7jASegzvlZURYbOjxF6+w23M 2IzGa73gB6+I6n5c5BwAui8adfcWpq7Ci5FrDz7Xk98xkftFPncNkzth4NxpFcUIFKzx ew0Z9e7XIzSuFY7zFUPmsTmozNcTEYGWAoYRKaAi296De/0lubMTKExdLZi0PcMozPXX F3p23XwfLLSse44xPb9VfziRhYlLBqV3H/5vq2iFo7/4OkEkGjw9l6RovMRJW0/2PKP0 CyRkafwKdmu3aTQi/o9FdCfRtrLPjZvjlb3qW5A3/3RUTzAzEVaa9h3Df1RQn0dkqRh2 R2/NhnOO8dNGNmX6vCLtwnSROMFN5DrKDog6g2fg8Rx63fOUS7UOCeA+WSg/RNJBPA5t NdcB/bLt/qB5PpfybIBEhsuvi8DoghHUaqmqxVFPl8KEVgpedVdeP5Awi9vSRcWIPGyR fxVjQ+g0FHsiJ/DSrp4Fq1TSyjGqFhiNP2QNdYrSUKhOXrqN3cAkeFLgUbyEDXhpu8Op P2WDRWfDHiI2nKUGdYQie/tZi696TNnbn+1bJg5QP5S+pbkluoWZeIIozlahFVkE+VhQ F9NKxkszDbC1YbkDESzitUin7c0AkAPvOhb/MCguVZJ4YBhWwxLc/dAcW4PVJuJ2RN7K y7GI9KOG7K4YvpOZdQPJuc19oQb4Suk5rZs4lbzoPSUSNVE/KI+niXAHawjgQwFVA0Kv xrVMBuWjTpWK0X+7UDz5nPqv/9UA1VhK2m1FRlg8xNcoWfX69naDOLCC2619mTYZtDxI S/yTy0xC1mSkT+E5zbWXcFP0x7Cu2MbBbTmmvSZmlfHuKyRaAgi4RzPmxe7kO0LpTXAV z2hrWvpVb0Qhr5yTU0pyj+ntIPQgXH1fCLlwJ/OocWEa2f46GwR8ZYgWo87ZBkP0qR/0 fxTRFxg12DSV7QQUVO3kt375wjXCaMi4XCn48AuN3WyMZHJqJBxSj98QrMvo2rO/zFO8 uwzMHE0wlIlJ0fC+S55ZjXJLzPjuyPeVNJHV79hJsg3ihcrWpi55dDgmLX/v/3TMUu5D mhGsorkWnJCwE6dJPI9+j0ogIoHAFCc9FQpXRitCjmcM0WBsog6557XuI4ZWivZL6220 eSa2I7G9ERYGVS4g1IF3wsnZ/N+oaPXX1ru9M2C2L3rg3Qn3Ez7NV17bj6jstDGiHyy5 VtnAbNOqpn2cmB6rluQTXsiwqCdscE/PU3nG5MFz3z9JUyzlKEYTfTkWQ/+nmTkkr0w9 KF7aZleHkcenmUNlF2PqM78eoOw+gTge62pIiLqsNBm2320XUi4WearMUAEOq4rotH0M Yi7nY8tML65bWLV9kwJv+/6+ASCpHs3l8FlBehv0pLydei1ygz+/s7JQiyLJKKCD37zX fTjumf3xKC3n7vAA8xUyUveKWDliheuqGf05pnFt8EW9gH2Dp2rjVuYhlJaYqT2oDuMR NlbaCy6Ly7RdXZUpsXOcbxmCj+5TufDOCWOarajLedY9/eJhyuQeaGWpPU+u30vQ6BcV LAWcS/PisyxxJMCmtMvUNApr35i/sm2aQYm7b32Pzl3yh6bK1Gm4y09rtV54N8bLKY2Z WmZVazd3ZEx10S3rO+ooJ8SFiswogOMjjyF8epV/zE2GusFkfgUJ847x0M3z6lzH8Nh9 bZrE0kZzwZNaJA8h+AJIlKhtZUylmV+49UndVTidAoKUOuc0gGLox/176OQd7qQdwrY5 3icYN5AOScbKEwj6QUQRAUQ5GPFKcLlwHzaBAATIyks7TSAg/+1O4lyNUZvmId56v65N f0NbdeMRgygU+4xzujSWUMAPT+XexRf6eG5EfwaDldglJExIN1nC6ms3VuZNt3Cvqi+u CenuSpyIK4BKxRQq1qTkg1vRfkJwvTTxvgDGOOiHY0/mKwdEk3/QWu3V0JKaPcmLUMSL yoTcTPneDrj26afTQAoAKKFWNaatEJCndNebodlbo1w1J5WRxGsCtsMkL5jNJPWf3c6R zHsDowgqwFiMP+Jv7AJM8AJs5cECB0o813rWwgbqq3eaVZp4+inQfpATXPxBhoce12GH T9iC4AYtmIgNbth6G2YAn7SY2WtGzuMz6LTcecrwjkEIhKgV7QiHfva2f/Vf1nPCaThj 6NTI5nGvBVem6yhsEDYKko1CyFupV+/VL8MZ0TRLIYC9l1QcOhPtO9bnYVpLnuebgapk olvP7wiOfJ4HdX3thNqlq/nFFEF9dtlhPB/tV06iStaKX+t5+UCPj1cnT9+kaeZKKgI4 WtxJKy9twqzSubtrWnVeMpxN/xDT18D/nfYOtSWCmYCFIRZdESivqWUm5TcmOGW/3w/I F15ZEjskFGOPw7g2RBzSNkPJjGRKZhjHD2dh+vrnkuPxxjacyys3OCmrcbrY9poe9gBO Ounsworth, et al. Expires 7 May 2026 [Page 125] Internet-Draft Composite ML-KEM November 2025 CduM2gQJD/XqG0j+qb1ldKIE7Z9wWljsxfaNNwOXVBUckbwAzeGgLC1It3yDQYrU1KRv uHHiNGeIZA0BT5RBaRvJcNjzuZ5Yc1WLj0HVH/AoE2S+1ZWVKz/M1eK/TjgiuF5gd/RO 0vsqQV94AneMSio9vpBSYOyhy3CpM1FeNrLTGELgek/gVhuHbAFXvfy8wbss1I3nU6qp McIHMLdGleR01Muei+PNcVJXCJp6Wf0gp32Lz/r4BkKH5GtU/YVukLnmEfLGs9N9GsmV Nxh8AFSAZKP5Sg6VWq+UqAGcI50ZrYCoIgVaXZFiYfHK9xptCUu69ENVURqSRLEMJUea RinASNesz9cWs+e5deUBTttYWftzvyuqGdGvKOZrWmn/fDm3/TaousYeNBHjtQ85h15n 50SfpHU5JqYq5LEMLK0bkLRKPNpaR+0KqbIOujM+apJUvyR7qAfgdzXuuVsTi0xnrl3l CJfj3FS5fUPJ23YfbQ34cIa6lkeQSxJeSHXKTWt1riO2EDHOMG9o/iEJLnvP65WZWDFk TdL2dy8+ZS3oQJub1IvPmA2ysllu2+mhhqgA8a5Ga3HwNGOj9JFdw12fT7ZveBf2w5cl AhNeKi+qx+ptmDsWeuRK5lIEMf+Ra2BOzc3WWySx1v+ARkR7gTqufYqSIkiBmkPnGfn/ +74JnILCdB7Ux/qn0sB/cc14xFWF9ZA7ZAibu98UL5jA2UMTGK7UPhOQ++JQHEvg5ZSL Y2iobSGyma8ZqYRyOG6iJSA7AlcN5TrsErm0CpFPn8dEaxiSQbo8Ki/vAyt/ojlMW8eI PNBe/o6w6Qos5K6H2+GNQloSzwgOpDE2Gl1h1GADaobJWRmPXepjB3G8ziOSdVLiN3XT UBfAvkoNU0H8BmVdsjvPxRWcx95wZPEG8tMGtns1FAvim4iCAeooYvJPXhnceaSihHqq C0ej8pZye04XgL8fACuFFDZjmSQW20QeiBlq7F+SKs9gCQ5YGRsBwgcpHdFBVlrNxAkk MvuFzkrQh1Cfgs5QeXTyszYLHm/ZThX7Rwz4YwJVZ3cHsw5ZAfxI0lHB0h6TfoB2FuMZ a4CqcJi7yqHN1z+9vjaDclOXeW61HYV/pJlyTbkuHHFUxWRP97oXJ6p01XYgetKlm99t sQUXLEGUt+4dHzKly+Xm6+7xxu4BDEVHgomztrzH/gcVyCaJi6O8AAAAAAAAAAAAAAAA AAAAAAAABhASHSAl", "dk": "I27wIQ3oPi9tyrzD4xRzpV5cJVXbxO7s2ssqqMe5+FZJtk8FyieBbCwXaKJB4 ojXqIRuuUEyTLW/295aIqwBMTgAxWSSrbYHhaDDaXhOnxCb3ohudzPGcnsqwWuvbmwpY etVzAy8c4twvq5jU3UX9BS2hPZvGaDWgEzEIWnedJIbj7/AOVJmU7xS1xbhyqZ+bWMii Gkfd6BfUDr4bcfBVU83QUFWKAsdAJuwqP4te9W8kw==", "dk_pkcs8": "MIHHAgEAMA0GC2CGSAGG+mtQBQJUBIGyI27wIQ3oPi9tyrzD4xRzpV5 cJVXbxO7s2ssqqMe5+FZJtk8FyieBbCwXaKJB4ojXqIRuuUEyTLW/295aIqwBMTgAxWS SrbYHhaDDaXhOnxCb3ohudzPGcnsqwWuvbmwpYetVzAy8c4twvq5jU3UX9BS2hPZvGaD WgEzEIWnedJIbj7/AOVJmU7xS1xbhyqZ+bWMiiGkfd6BfUDr4bcfBVU83QUFWKAsdAJu wqP4te9W8kw==", "c": "rhqdy7/gKMwaG6vKoqVKzVv6+gLVneYxQwLugsxmScb5UpgFxLjp0SBEoyc97m hwD6GpugWaKaoYSO961cl/FLeSilF5xpvW5yXAMcfEN+Z63LpdzGoEerEYSqdIrDcMSc nyjfbhkdHnT8JQ+Rsc6HZ3KVyMRwKnaOmm8yGtUGnPFdL6b4vpxOnMe9BuItYpbbU2eB ydpMoCUn+fqAdsnu6yBlzTbsYvI/GArBM5btao3fXEx9OS0L0AuDny8aWDwidpGo9BsW CGRGd3SmTVKAhoe8uI6ihIQhkRChZrxD08XuJNePBCOQ06gZDK+CAzf499nbrPi3WsgU OMxXYW9ScGLPwdAM6L3kSmhc26uQZuyoORxtRkyfCXRatsThB13RO0Txc0G8jeFkwrOo gQDH3jVZOo6ilxBu3ua+zFGpCNcfEwF112ROE5sIzT+ZkcV/RayaU6/j5siFZB+dB5au ncbjNAt8maTCXRunHzYGfKJd/X7KxR72iycpsM2dj6anx2w+145JZcLgXaR00Y84806z K7d7JZ+VuNwHeyWACL3PlDZaE+LehyVpG53nZHdu3zfuPXIUO3aW64JUE8/SPIHYbvW2 lKB6WPpYPgl9ozcU1HgOEU7deWNdpG3yLC9RzVjBMcQyfF0FQT3aNEYCyENWFK6ZUxsa j6mJf96LJ2+0R9yGXTAUPzG0Hv2dr0VRL5HZhTXCVUfC+Y+BzMMthmhG7HBOeMLn4mu6 PBmri5sKYVw3PfrMyMhvZR9zrnsPhlPsO1cZkcBIIZAWgWRSZDFfmYC0tnKmc83AyV1F 0VrKwf4rtU0qpa6l1EFgJAXYVbq350TcZJbI6DCMLEzf5G6mVMMMUavJYjoJoCwp6gcw mBQx6Oqv4mSxStFm/AuqevOpEDSGDKF0tEgq6sOQjTd2R5iKELzpSd+YWva6sHH8Xyim VuYbcNOGXyu8fzYk9/Ok578MW1rJRRm5URcWikBuIyk9KV17k2FptjyAIDcyXNaVTLLM CeoUIyTpA7fbeQdzPW017Q6rvmNTRAFFIpf6QDuHzRSNypYwY5mbde38aH4HaOwdtRTT QbioGOBNNNPctDI+PTH3uVEXMdElgStwOLLSGvtFKNcX5ecvWnssjjYp9XhQ+NEDwrbE RezK/Rl872VL3YmE4lAY8QbQrBcOXIwJjMoO+QIpuWT2FD6qf9Q5V5QSGAqABtqbVxyv aWIjcbCxQXssmLFEh2zBe2afHcgzVapql2kyleicd9SxvkNaqxiDsuFCmQnVyYHlJwKH qiyeTK8j9zlBdTXOn/HLc6g79in3MS3c0/gPL3L6zmI/ub3n6j+WBtRQqKmMJMFccgES Ounsworth, et al. Expires 7 May 2026 [Page 126] Internet-Draft Composite ML-KEM November 2025 nd24Zt8MWvP4g4kj2vGae/6QZ8gucbEerlLK8me/DGzVH8lMxMAPIGwMGjKPfZEg3hTH di2AQufHlodwUT0OUSSy/YJWxdfY/Ebp/JTyCqpKTeKDdXbBUg58+zHIY+szg9PhmKpp gqn+cJVUVU4uFVj6K822HDjUlO/P/1XD3+pq27jqZi45GHt61Sq7tBJSMoGSA+JxR2E8 3pmrouMjho8FsMbKWsYc8SQfLUcqg8BYQGhQ/wUMjVWsZ/IoiSTKpp8xH5VqgH+gsui8 MCS9vPgZf9nNizO+pPk6N+YXeTIBt9oTXs/EXxx5cHAXXXZ4ctWGirk1YWJBSiYT+uSq oLBxcjDq/ivJfXNlGTK/TB6KK6433bwxJGQE7gh2QcE4A3xRzVqOK899Yfk4hKKwtWYe AEaAvBEWyy/D4NykUc0u9u92ssn4iJ6k240BiJOY9KrQiuj3Ue3upZ+Y/ut4y4HfQPA6 RvZ9l4vB++064u7H4NzX1lDofKjxLBi18eWV7Popz53c1M75vTGRgjL7nDhiKTmL/CRC qFFQ0f/lusqutvtaifWJESIWQzL+rc6Xkz3WxwNolkCzNIBd5GJll4b94eIcNIfJGZDW iaUvgcq2A7wLcM/NCcRE8cRo9q05uTQAPMDzTGxthFtiz2FrP8H4KGxyvJ8AkZgQ2Fej xIkLviVwqa8WVEBHILERolJWcqkYf50nDNAS5oDFalf+RfljBkQeVOzWT1QDeTHIBGy9 SwH4CGetVJLietabGxchhNt0Y/8VMpuqDAfbwE3c4fGlO7dQ2JYjVQOJIUuF5bQg==", "k": "cKxHn3ED1ixZXAGgP1IPMrWKagMZm/fWt6t/+jJxyII=" }, { "tcId": "id-MLKEM1024-ECDH-P521-SHA3-256", "ek": "dOhnLHWfP8t8rquQHXSZQNu4yiOXdQUrFIKjQPSyMLkLGOdjuIgBWQDJJolBY 9VDx/EYRxGsUbvHOTePCVa7xAadDUxsJuLAY4kA5OdBtSi6sMSI5Gh2i5S7P0kcMSstp XuD0zOcs0h9QdIuRMQquhkoz6hEgvoC6kRmtAtbArh/Jew8VRJ5tlov3/SIUqB6reZxe CuDXmVR2MQ3fOd38JNl89igX4Oa7DaDXmBwFlwm3MVTeIXCkFiFi1gRu5Y5C+GgSJRPU vaiV8dWQkUzMClL4ubB//Mr07x8TSUadCYH46ka7LKH4iOtNoHOKdpknCUJTTl7ujgU2 mgWLrwETmnJ5yFil9CBq4aHbyjKylMShwGzn1gyi7a7N1lCsts3emUzOPaboIy17+zDT 8QRQWKKTSgpxAnQdcmCn1fDYtkzSquhduOxpqNIZpSNbVspaOufHBByi9wYZ7cRgWpHB 4qiQ3fFtwiL7dsOa5iQgggTOtGyS0DKRvFymEqPwevIVaLM9KaxQxGLDTKWLxCBxAEzt 4W30CGwrMsj3+sEu6hz+QGokokxrsPDMpk/4tVvS1JHlZK+PtJ/9AsradgJPydI7Cq/u BgFs2ipe5t+TVujfTsPdSaqnNEW6Sy5BNiuGdkdccQzAuFGgEeFZeWX0IAHCMSaYoCpp InA6lsIhePAGSGBSHAoQsG2yqd/SltivSlLROOrLWVQ1sBHU+rEWWIeMsSjmqSg29UBw pu6EFM3wscrscg+ZzMKtMXD2QvDTPgb9UMo1ouCAdQObHynoMY05EYR7iRvNKUj7weQU 2QOoMNwG5Z/eYAWTIJDGmmnI0NgzFO4UbNVf1eqJ0cOGbsEZvPFXfOOTmKb1MJu/OlTr keNfTTLzRdqHTZu88CeKvSHfTg6pAxVV5pawpUvJyy3TDSfXASkE6Me0+IdJwAe/Xq6s jZz/7JBcVWz6nQklntA5KCClcFRWtwxnuCCdsgIO5SADFdqzXw/Z4JX5iauNupU2uOUU jqGrMAtoxwNYutSn1SqqbyX9Ema4Yknp9GOpABGdrA3qzIetqicr8CdbgC3K5V/LAW3F 9GYiFeUMQQtVAKdcBpo1LqLKrOo5ng+fKVh0rVxYsydmFNKg9iwt6jJJuJQa6wEZcqOE GwJwdZxPRRMghJDtrEPDSnC34iM5LbFsXZMO+WX9IpOvJmOOye+ljsfRYNTDcYsZ8ZEj ydB+UejxjcOBCloDGEMbbp0pMSl0aoLUbYFfyNvZjmrv/hfshsnwcChe2Ndp9rL5spHN 5dzlOEfYPCVTifKQLQ1iKc5S/II/NenXdorZqVoBsuoI9NCyaYaCYshFSGwmzrFXUuf8 wi5BPRYoQMeevSG+WgWVJSUcERQzFAfuSBHQFh3FdV6xIpQsCYY2WusvWA7+AJ/LBvLz eC+oak5rEFz3MSp6qK9ffqSPOJb5+nEdACDMoUgMnEQhkbKGdOp4KZTEDwaPlcRafUDd PCSvOhJOKuf5lB1A5w08qVMUhdUFfees+kemJkeUCI9YKF84MiHNezFHpasNCS8+jIe8 HwbyYEvUZqGXQeRxFy77jZbn7kYOxdBGIlTnJtSL2BngssKliZr/hQKH0y0n5ZtKpwR6 esG7Gpj8mMErWpvkJbKnrSYnphWERV3rjkONaYhsfE951lNjGukXZWTSuW++lBazZbOa KU458dLOtWkpeeMD1olY2SB8iEG6NOsahYqtfauo8SpGsiBEAeBURAx0jorkqsLsHe3I WSHovGulLRoCfVQ1fNNQNATrDii/Yt6pvnMw5QT/REsHIIORQUCKFO82npC2psxt9mKa iK7hJZ8omNEynGfxnQwqHbJSCUmTcQF6cNs4wa5XqwxIOa5fFmb/1mCtJmhgTW/OYhHu MpTYGBOMbORqEyoKyAPBGS/OEEItWUlvmGKEUShRoeHk7IXPbCJnne0/Iupuhk2a2ibO aOSZsMHEjYLtvKbA6APt5kdPbFx+Od8/VVqWQQPsGyZffSqlUoqNjh/ETVF6kC9dYhkB XByl5tsQSepiRgIJUhN4jQzVzTNArrrACUFyO8FSwsel9+OTJRh1cLd0vAEABrpgxmDy jy8hMbwpjg+hsWo5AFSKTCM1ODiPJ8o9Ngw1fNH/UCLNnKvR+QfLUYIS8cZg+rZiUx3k Ounsworth, et al. Expires 7 May 2026 [Page 127] Internet-Draft Composite ML-KEM November 2025 yS22Ti+S7VyAQqTACWhta+Fn9chy4KA0eERe8xHj6uEhNzgzxwftm//V2UP0FTtaHGGG yYyVWxyUOFcLEw2DZzt/L26GBjiXmZR", "x5c": "MIIUpjCCB6OgAwIBAgIUMlyFZBJi0CrjvhjPFeVDP0fMRN0wCwYJYIZIAWUD BAMSMD0xDTALBgNVBAoMBElFVEYxDjAMBgNVBAsMBUxBTVBTMRwwGgYDVQQDDBNDb21w b3NpdGUgTUwtS0VNIENBMB4XDTI1MTAzMTE1MzAzOVoXDTM1MTEwMTE1MzAzOVowSTEN MAsGA1UECgwESUVURjEOMAwGA1UECwwFTEFNUFMxKDAmBgNVBAMMH2lkLU1MS0VNMTAy NC1FQ0RILVA1MjEtU0hBMy0yNTYwgga5MA0GC2CGSAGG+mtQBQJVA4IGpgB06GcsdZ8/ y3yuq5AddJlA27jKI5d1BSsUgqNA9LIwuQsY52O4iAFZAMkmiUFj1UPH8RhHEaxRu8c5 N48JVrvEBp0NTGwm4sBjiQDk50G1KLqwxIjkaHaLlLs/SRwxKy2le4PTM5yzSH1B0i5E xCq6GSjPqESC+gLqRGa0C1sCuH8l7DxVEnm2Wi/f9IhSoHqt5nF4K4NeZVHYxDd853fw k2Xz2KBfg5rsNoNeYHAWXCbcxVN4hcKQWIWLWBG7ljkL4aBIlE9S9qJXx1ZCRTMwKUvi 5sH/8yvTvHxNJRp0JgfjqRrssofiI602gc4p2mScJQlNOXu6OBTaaBYuvAROacnnIWKX 0IGrhodvKMrKUxKHAbOfWDKLtrs3WUKy2zd6ZTM49pugjLXv7MNPxBFBYopNKCnECdB1 yYKfV8Ni2TNKq6F247Gmo0hmlI1tWylo658cEHKL3BhntxGBakcHiqJDd8W3CIvt2w5r mJCCCBM60bJLQMpG8XKYSo/B68hVosz0prFDEYsNMpYvEIHEATO3hbfQIbCsyyPf6wS7 qHP5AaiSiTGuw8MymT/i1W9LUkeVkr4+0n/0Cytp2Ak/J0jsKr+4GAWzaKl7m35NW6N9 Ow91Jqqc0RbpLLkE2K4Z2R1xxDMC4UaAR4Vl5ZfQgAcIxJpigKmkicDqWwiF48AZIYFI cChCwbbKp39KW2K9KUtE46stZVDWwEdT6sRZYh4yxKOapKDb1QHCm7oQUzfCxyuxyD5n Mwq0xcPZC8NM+Bv1QyjWi4IB1A5sfKegxjTkRhHuJG80pSPvB5BTZA6gw3Abln95gBZM gkMaaacjQ2DMU7hRs1V/V6onRw4ZuwRm88Vd845OYpvUwm786VOuR419NMvNF2odNm7z wJ4q9Id9ODqkDFVXmlrClS8nLLdMNJ9cBKQTox7T4h0nAB79erqyNnP/skFxVbPqdCSW e0DkoIKVwVFa3DGe4IJ2yAg7lIAMV2rNfD9nglfmJq426lTa45RSOoaswC2jHA1i61Kf VKqpvJf0SZrhiSen0Y6kAEZ2sDerMh62qJyvwJ1uALcrlX8sBbcX0ZiIV5QxBC1UAp1w GmjUuosqs6jmeD58pWHStXFizJ2YU0qD2LC3qMkm4lBrrARlyo4QbAnB1nE9FEyCEkO2 sQ8NKcLfiIzktsWxdkw75Zf0ik68mY47J76WOx9Fg1MNxixnxkSPJ0H5R6PGNw4EKWgM YQxtunSkxKXRqgtRtgV/I29mOau/+F+yGyfBwKF7Y12n2svmykc3l3OU4R9g8JVOJ8pA tDWIpzlL8gj816dd2itmpWgGy6gj00LJphoJiyEVIbCbOsVdS5/zCLkE9FihAx569Ib5 aBZUlJRwRFDMUB+5IEdAWHcV1XrEilCwJhjZa6y9YDv4An8sG8vN4L6hqTmsQXPcxKnq or19+pI84lvn6cR0AIMyhSAycRCGRsoZ06ngplMQPBo+VxFp9QN08JK86Ek4q5/mUHUD nDTypUxSF1QV956z6R6YmR5QIj1goXzgyIc17MUelqw0JLz6Mh7wfBvJgS9RmoZdB5HE XLvuNlufuRg7F0EYiVOcm1IvYGeCywqWJmv+FAofTLSflm0qnBHp6wbsamPyYwStam+Q lsqetJiemFYRFXeuOQ41piGx8T3nWU2Ma6RdlZNK5b76UFrNls5opTjnx0s61aSl54wP WiVjZIHyIQbo06xqFiq19q6jxKkayIEQB4FREDHSOiuSqwuwd7chZIei8a6UtGgJ9VDV 801A0BOsOKL9i3qm+czDlBP9ESwcgg5FBQIoU7zaekLamzG32YpqIruElnyiY0TKcZ/G dDCodslIJSZNxAXpw2zjBrlerDEg5rl8WZv/WYK0maGBNb85iEe4ylNgYE4xs5GoTKgr IA8EZL84QQi1ZSW+YYoRRKFGh4eTshc9sImed7T8i6m6GTZraJs5o5JmwwcSNgu28psD oA+3mR09sXH453z9VWpZBA+wbJl99KqVSio2OH8RNUXqQL11iGQFcHKXm2xBJ6mJGAgl SE3iNDNXNM0CuusAJQXI7wVLCx6X345MlGHVwt3S8AQAGumDGYPKPLyExvCmOD6Gxajk AVIpMIzU4OI8nyj02DDV80f9QIs2cq9H5B8tRghLxxmD6tmJTHeTJLbZOL5LtXIBCpMA JaG1r4Wf1yHLgoDR4RF7zEePq4SE3ODPHB+2b/9XZQ/QVO1ocYYbJjJVbHJQ4VwsTDYN nO38vboYGOJeZlGjEjAQMA4GA1UdDwEB/wQEAwIFIDALBglghkgBZQMEAxIDggzuAMlJ gLK1iUdowlcpDRi3h6zLMc9yKaNbegPhDG10ZwhRL1O43A+X80Zvr8haMW/WaGH1vds1 0bWbtrrhjACTl4y4KrfKVFRd8CGliT5975tNJ1HZqeMATRYK6mo9asYrFXy80z05S80T QgDIxILyuyjojdI8rH2ghm0EHhKflIT/SdMq+qM5rUbfIHIk8nJZ8hCSFrfFfDvqL6Ex jtWcg3H5YqIufKDKgO/G1isp/+M9Ms+y0bmOhqJx/nm4fkxmpb3AGgo1e8s7TMTvaRU9 754iyXwqdIkUhtWAfi/BZRK+Fpxtm+MA/PI42DCik1gJAkU+YVE58IhWL1xDSMrRaQ2P f7SsrPEndF4OSOz1OIte04VYo2/DGzU/L2mqyxq3nmtO7ntnOkjt4X/qSqk9EtY7W0S4 KsxTks+TDCdGtTbMUllHqRCSc64kAlE5o0VfJ+NepzWdU9WDekZQa/pg0siw1Okd5yL1 Ounsworth, et al. Expires 7 May 2026 [Page 128] Internet-Draft Composite ML-KEM November 2025 7cwVeMYj8hXF4JGA1WX39uWNa98Zp+4ey/WILXgKF+rah+I7qwddIQkV7i3WQdiuMRsC HW6d2zQvYQaECjFyb6BxYRyIY7Ae3cLcg1DLuGFHII1vPXBuNeWxDU+k057nJxMLaIyu zjX9UoNwJfIoWDjJjrB2XwRKfKI0fi90D8loeZ550La3E9aD1A5FEU1l6gPZGvJUAqdK 6bTixXM+s9GiJfkhh/UMxgvce25yZHjty4my1GMebU8HxesSuuMxxaLREAD1XIrYIBe5 hXxrNrVhDJSnp1HIKhpsufcyD5hp1qI6xnOPfTduBZ4GsaT5GnFE7JS35KP3wt1J5N9b 7u/rGfVQ+S1+3qhSfo3u9thUShoEAIxxkdD20ooKrxHthmSZa03vrVLv2RKZ5IwGCGzF PRta3BQXsvufGsz0xC6zix5PfuUZ6jnEQrToZdkt0mO4UogvQCvQbS8wRv3t3alILy9e p0naGuT4IK/UwEPWLGjX3YsHwxbX1+PIDslssHGKtNRptROJXW5uCx4l4AElz5zRqyil X2RfA6fXCfn6iHuTjUvxRBlLavp8zHnmyOqn6VtzFgGRj7Uup/nQgoSP9colxAJ400nD 9o2mHro3UtFmNtpVoIZnI4V/hu6xBVE/4RgQRfM9bcXL039hKHfCy+qebzfd4xwPZgpl XUbaiz15ilxh1etdm7ZUy/+9QbXugvnRIe16mXkVwkpNZui6tFbbXWV0yxlCOCkPOXnx Kx7a3fwsq/LBqrbxOelvwW3dUs7M8/B1z3Znpudjl/OCiD1buL6qNXKAszcWCNZi6I2j NzHJZKAcQLB5O2ue4VAxg7aHPmpx+W2rDdJLzRyp8Pknce0qa+XN2/mbCr3WJsYF1ylz Bw/FD7pfMtXMCH/WhAZLE3/TO9/YqAzI6/OZ/JPBByh5QWA49tgXI3lSIQCegRhfpnpj cSHqu8frf1iWYcTDKWA2nmj520VaCteIJNTQ8QsbD1+fwa4KxlpqIWwBEhHmpaHZEXky UpLttnSjFHXjoYhcm4ZNgIxhJqdCIU8aT2UDU5M0QkyZaBb9HiAZjzROWg9eLfuW3uHC GKsvPS4RwylUY/ej5zF+M8PmkB7Tp3fHNeFj3kzE9TSrbopV0rLAAtZHMYDkHaEVjhxF W/MSBg1+LRfkfwsDyvKLs7cwNmEh19qJuXu/EoJx4KcD9o+/hTJtwd9sIm6hyjj43koR upGxNw9MGPWP8MYYWdsEkQw/8RFIazUzsZdMt6KYiU/Ohw9VG2JLI2ztfGA4X/KCv41x +q2dKk1CkuW9UDOrpmT3806nDlgjBIW30hBKN8398+ebNipltXLvRi77NlS9meMDsHwJ scDlGrWU3oFkUBuESDnqV5gptl8Xf5Jw6p37O1/s69cM0OERj2sVdIJCGJxtlIjktUu5 kMh7CBwzvhGqVb5PTb4lwveo+SqFDzaHujGlt8+0wVSgGTtFyHSuCl0NUgnsQyPEnpXG gCWSQz9szn67fLJQhkU16t/RHPPJlyJq3NYixIr09u01SuaIqbisRytXPXVozLpF4b7m fJGra3ayx3dd3Uv2brfStm9wbo93wgA2tb1aqGjCRFS1Z8PNKw4uhjbBDbDNw3Qy//QC 5II/n51a5uBoEUYhL2d2Tsbxrn5q8u1p4LHolpwdeUeKBexkk60BZVvW9xJinqrhwBam nP019400ASncoVRcUf2Jf/be6gYldjytvYqNhEC2r2g+llNxUj2fAZ1HcXo5zrFJjJC9 OJMddAhHdrJxJu7NuWXn0VIJA6e7vRjEo1HQc+PZsUC/+3W3X2r8DZKicgnQmogQ878t kKVHSsO61zaqoCTSMcNfrnWQTXnRTK20Qk0PY3KE5rzCVDCl0Ax4IoqgU3S84wQZaOHf V0FGsYj1QNNzzECoxT8PAHiGtM2b8AjCx+pWfgTs0hxsuhpnkoTCZ5k1TqQuvky+c3yX a7qwjzpE8Ug7p1+mlKBdOSwuViiZf2qEbcxt8nv2zqlWxMZ/5RPdkJjNwTamNRz1N+Bs IO7bm4ppuwlaR5sJmhpIBgFagTjBMGhF0dey06EofuWuFCKtsv73uLG6uiEuR0Oc+qi2 Jx6Ju+50uwOyUEOMDCOA5TqnrvD3I+N6Sxew8JoQdUBohsP9Elk2Z/nlV3amijiDgYq3 phvjjYRzsAGbYWq36Z2mn7DHQ808FccU22FE9HtIte7QG2vuWhjopYhSydYh7UF0PTLs kHlndn+HcA96xuhyM5POTNl4O/I7MYb9IiehtW/GskGpGLaTOoL8SVBC3lwOXUXKdiCB QYlwJRQ8xF4oNUGpZp/1VjgKMow4BnrYDAT1BrGnP5FTzma+HvLmPNAS/BCxCWPVJQZj UmDf1JrkiqIsCwXz6ku3Fe+Nz6O7PZm8GgQZEyBNqCQ7ToCQ63j2P6RY9aIO8u171fGC OuCBJTYyimxLqQJZ9cNIPtcLfXq/X1lAKMAmZ2PIG43Yj342oB5p5cnulYj22046h8TZ ZEwTC55QlEGb/znAaaYDz4jSwVIGc4hvmyUdlTyuGCCEgi6WkNO1ti+/88iT0XF03x+t VjqC2mTwqplY2ndShCVn8tOjfLke8bJd6pCvU+KBshs67U3+0nkei1ulWYYI1CdEzK6A 3tDS5wGeE6cgcpjkKiyzXPT5jAKY9k01pmbbsYtOLqqj96FR1tbbuFeUIDwhMUxbDG+T 6/F4lEMAU1DLPifjxHfJqMSP2dEZjvYxeXys5rS9bEYoAKT1dcA0Wme+0YC6PQR/0Re6 CPL5NOscffaxttH3xyP3/lh2Id4ofFatP/k/NYRnMHxIt/WEGEDlMXBwhU7x6XfmiZvA txzzTDdm5PzoE8dTPAPm7ynKz3BnEek+7Shzi2XX1y293HJpUcGOa3vczLK8gIpNjkD6 Gpagy3Uum7ugxN3Ppej2DoBV47VrCMAq3SrJCPgfyD/DKSYpPg0Y+N1IWJOS6YbDds3G LiCCAMJ65psHaOQB6yEMd8UnVQASKfi9mE8vDuDOEu9UlsDnT87h06PCQlO9giWLRiBg 7ATQZl6yckCAxZJVDGv6GeyEgBmRt7u5PKeXRn6tTPZmV2J4aswoJb9Xqy90XCVbhNUP ItWYa11mD2XDqFIhDYAls7ujs1/dLtgRlo3BakQzsQAC1qMJG/haphNqotFC4xuPAzgJ bmG8dRKIXSegZGcuN2/k05gOgy+1D/ehv2B78Lgjmv3h6Kq+/Kd+tGrNKDqvzewE29JQ Ounsworth, et al. Expires 7 May 2026 [Page 129] Internet-Draft Composite ML-KEM November 2025 XuQtQM77/VBq8bra2E6N2mjUnbkt8ln9L41RAT5s22e/SJCoPjD0RulMeQ2tlD80Sogk +VnTib1+3b6g2vKpx9r6qTuEqcozoGsxzvH3K7rFkGxJQQ2iQ2VkFmXovJqu20C0OldW JZ2kFPpcBeC12OF/Zg2dI71iApK5RZHztsh7CYRK0ISeJRjn3BoOgL/73XyP7NdgreHj CPcK+Jv1V38OFdEfEemHlhlpk4MY6Xt465jTWtDrSr+Pr8UYnFgRDc7SAmRmgSvgpfsb KMB1sEZFqDL40K1h/l6vOhHTdMwBOntkhfrYvor8rB2Uq4QmEWBP5wq6dgH/OSE/eQ92 D/60MHEr0x1CH0OR4NwI+GOXOFKCQlRlIu2rhubcdt/fvW5qewpDdb7pDZUXnsny2rEw 5ub7Kfrgd2YXy4MHq7T8dcmJRlKt1BCIioytb9NP8kp9yAIj1rgYeMS7iAsgy8YC8+Da Z4q9CVJ6TAEQVepANRFGhgZTKm5/pNOm6AlDO4RuGoTJdd5jTXzOJ7UQB+P6mjGQRWXt tJqz6vO1xx1wtGms7hf2fgJf34HJkYVVYzOYLHQ4tn6FHjxZcXuu9wMKGjNWcIGYtNvg +/9GZXWBoqbS1gchJExyhub4EiEmLEFMqbDQ5ShMdaGiq78AAAcUHCQuNQ==", "dk": "iqkbmWZoNX0BLHy2yXHGUQVaaOEjTmCMT8KQxoihXIWRauGfObpKfMFgPJ2e9 7rI5pTRpBlXQjGN2/MNUlRJz4UABAAa6YMZg8o8vITG8KY4PobFqOQBUikwjNTg4jyfK PTYMNXzR/1AizZyr0fkHy1GCEvHGYPq2YlMd5Mkttk4vku1cgEKkwAlobWvhZ/XIcuCg NHhEXvMR4+rhITc4M8cH7Zv/1dlD9BU7WhxhhsmMlVsclDhXCxMNg2c7fy9uhgY4l5mU TBQAgEBBEIAl3aSOmzfimlrhgmIJYoQTJ8Xvuquybcvr7dS9LoXEpQchLxv4P0Y0qGLb 6ka+dvgBo3JCiGbiMEsnI2kiOimlf+gBwYFK4EEACM=", "dk_pkcs8": "MIIBLwIBADANBgtghkgBhvprUAUCVQSCARmKqRuZZmg1fQEsfLbJccZ RBVpo4SNOYIxPwpDGiKFchZFq4Z85ukp8wWA8nZ73usjmlNGkGVdCMY3b8w1SVEnPhQA EABrpgxmDyjy8hMbwpjg+hsWo5AFSKTCM1ODiPJ8o9Ngw1fNH/UCLNnKvR+QfLUYIS8c Zg+rZiUx3kyS22Ti+S7VyAQqTACWhta+Fn9chy4KA0eERe8xHj6uEhNzgzxwftm//V2U P0FTtaHGGGyYyVWxyUOFcLEw2DZzt/L26GBjiXmZRMFACAQEEQgCXdpI6bN+KaWuGCYg lihBMnxe+6q7Jty+vt1L0uhcSlByEvG/g/RjSoYtvqRr52+AGjckKIZuIwSycjaSI6Ka V/6AHBgUrgQQAIw==", "c": "RdOX1zNHts6EewGnoRWQDDnFpVPXnVp1slgATU3RA7JJzLa2XOIvw2pOU33mX3 c7lr7Ev3VRXWNFVQ0DJJXtqkWfyVCsXKjDI2XaUDBPUMjMshYgb1DoA9k+da6HpYCiap /xq/jIMfWL38PlBZg4bo2aaBax5LwF+igTzKWI4rjEujm2CIwzecgE37Atptcao/xCTx 0DMvjWAVCJvhTq05dA80R0aFJGJ0x8AJzuGHos0APY2jcoH6oFAByZRHEiQMryYcr9ep 37wbm9UBL+N/bPNTdTOHB49xsJZ/r0frqfzXrIyUeLePwK3q598dWRSFF2BvB+iJxPju yKPz8CmJRakRbQUkCu54oshWii9J50RTH5AcuqMh5bX9zsBdsyYfVlxB3RVkmd9x8U1D 3CoWLFvhezZvDRPUjum85LfSZAsP9B5XdjzVK0z+IyQCHc9sQEcWMpDcnhWY8EsaXfpf HfnP2Vs71C6YhEymii5QdKlOBF8ApcIUNmyDMmXjDCucJ/7aJR42IBaStPDLGDGTzfnK KNyk7r1ZLIIwvdck6VDRxqLU6TtGX2tBU4gmLMq5FF3+UNVJ4iSvVC7piW4HFYaP0V4U EqDEU7Wtz2boaNJkgou9Nh9HSyUEGRgt+VCIvWiTXbxbLeY+/8XSbEKYAjPPdNiQ/RmN mLAirTvLkCijdMREeYaVcrzQz4Fk+JGqvdsAsIVk24mDJLJRsJOnPxabN4NwhX0Nt2L8 Gl/HOF01HFXXq04+/As6gBi2rYprDTFgPGWmng4lhfJWfkCdhPALOFiGaO5LWJs7gjJA yLyaWfZEnSo6wVASBrEb5p2mYyCJNSflMf8OYMjyqtUAtvIfmQnpH4kk9yuPz2N59AXw c32JqXHy7MWwWMPP1uSDbmDOs38ie/xX5kRb6zb84u6hSnQoA83xS1jDahHz3qqaVy0q mwv4UAUyCG3MeBmVKX1hmHKdy5QvLy2FqBPxoO97IJP2UVRd98plv128IsFfosb1iK04 GNMWlTfhWkl8Qr4KMC495qQf6qM40/hD3jK452ZhqF9GW2+7H0RxdjI5aj/Yu+9VvZl6 ljgxKEQjwRGp5mSDu2X826How/TeNC1NRBI8YXgfwxKWJOX0t9O1kf1hzDZ2qB1m+UFJ QG91Cs7+/rHp1jSwAvvgf7X2lieGTHIBIlgbmGqrb+XU4uz7xReHD4W5CWHLCSQaVsi9 fRtg4t2X4ZItYj1UEOBJc8XXy1NewU4z9dNPw4GVk44LYKuhu/MknMYHzQtWZzaQg1/8 5Rm9Z/IU6N6hTTeBtYQaG2nm+KdxH8kuxGzHgSAoDdErnCAzkKucmrjlGTdGqpV6no4h qYO+rJXp1MN7mBC0rnPWlhVOQmSkhvpqwnPMHZE8Bf3IKPgLYC2j90E+OA3K6TBduSAG fKoeiug8TiSKfU2SHgi+PVBr2CKhZoaGDebCQ4rjkTZ9Sd3C3kQPtmCem9a9MFjPDOPB 38l8g/7+7IHF0zOxyy4+yAxedBQ3z5VwiCQvN2IequfbFrw9orH8KMfUOB8TZpET+sMC ig9CsFARXXFW4oEQ/XGz3FTDU0g6I3PheML+nbTJFNBZlxXMcILH3us64kHJHkMbqL7Q CxjEyPtJdNXG3xxs0oUvvBx9+jEka2JsM6JWFnO/SLWA9CAn1ZnkO9dERDIKVuL3EkUE Ounsworth, et al. Expires 7 May 2026 [Page 130] Internet-Draft Composite ML-KEM November 2025 L8mWzil/htVoEmyrtwuii/195pIpSKmQfMcFb9ALHxvT30iVMchSpY2o6sj2fVhSSpFN Mi3vrYR8WXpnApT+pPUULBPNkIEcbS2mewqLpu/83vfinnk8jVbLPqE9CAp9fFtHBmoC QPeuqRS89keabYodAyxtm7v9kbhpntOKi/Sa+QPRxWpGGyfT0+C1gmca+agfacxinhxf XWmVlaTqsdnths/jwo/TLaWEyp1k+n/hIDZe+DD7dDHsGXBGVzG74r4HfgeyLeFbWlsE zcKa74xmd0Jb4bhLDAfjHJghz1cVccg4FW3+NUQWeZrJ7wwReXK21joAIFVnK5elcyaF skmzxKp1Qsxk5Vq4kFZvaTVlA3fOHXZ5IQIwxkxR+Fj2+JKVPxyBEMjmoEASqGSmktPu xESmCVsflDMr4PsdgSyhrG0vfUfzWd45+8XjFpMTUt4OEfjPA64RTqto7NC34/k2/u8J VgfixUaZzHAHLG6BHjXk02mbVTrEOntzdj5erOFx+CF1ho26FqqeZON/kJT3JM6UeEoa xZDiHUsf07GnILqeBiZAHLRJnctnZV", "k": "tpDu27HSAeCdXeCjvDfPWWYMzUJr4oG0cJga5XAE9J0=" } ] } Appendix G. Contributors and Acknowledgments This document represents the results of a many-year effort by the LAMPS working group. Over that time the following working group members provided valuable review and commentary on the document: Serge Mister (Entrust), Felipe Ventura (Entrust), Richard Kettlewell (Entrust), Ali Noman (Entrust), Peter C. (UK NCSC), Tim Hollebeek (Digicert), Sophie Schmieg (Google), Deirdre Connolly (SandboxAQ), Chris A. Wood (Apple), Bas Westerbaan (Cloudflare), Falko Strenzke (MTG AG), Piotr Popis (Enigma), Jean-Pierre Fiset (Crypto4A), Carl Wallace, Daniel Van Geest (CryptoNext Security), 陳志華 (Abel C. H. Chen, Chunghwa Telecom), 林邦曄 (Austin Lin, Chunghwa Telecom) and Douglas Stebila (University of Waterloo). We wish to acknowledge a few people who have made notable contributions to specific sections of this document. We wish to acknowledge particular effort from Carl Wallace and Daniel Van Geest (CryptoNext Security), who have implemented each successive version of the draft over multiple years to provide valuable implementation experience and hackathon testing. Thanks to Stepan Yakimovich for contributing to the reference implementation to be able to provide and verify hackathon artifacts. Thanks to Giacomo Pope (github.com/GiacomoPope) whose ML-DSA and ML- KEM implementations were used to generate the test vectors. We are grateful to all who have given feedback over the years, formally or informally, on mailing lists or in person, including any contributors who may have been inadvertently omitted from this list. Ounsworth, et al. Expires 7 May 2026 [Page 131] Internet-Draft Composite ML-KEM November 2025 Finally, we wish to thank the authors of all the referenced documents upon which this specification was built. "Copying always makes things easier and less error prone" - [RFC8411]. Authors' Addresses Mike Ounsworth Entrust Limited 2500 Solandt Road – Suite 100 Ottawa, Ontario K2K 3G5 Canada Email: mike.ounsworth@entrust.com John Gray Entrust Limited 2500 Solandt Road – Suite 100 Ottawa, Ontario K2K 3G5 Canada Email: john.gray@entrust.com Massimiliano Pala OpenCA Labs New York City, New York, United States of America Email: director@openca.org Jan Klaussner Bundesdruckerei GmbH Kommandantenstr. 18 10969 Berlin Germany Email: jan.klaussner@bdr.de Scott Fluhrer Cisco Systems Email: sfluhrer@cisco.com Ounsworth, et al. Expires 7 May 2026 [Page 132]