LAMPS M. Ounsworth Internet-Draft J. Gray Intended status: Standards Track Entrust Expires: 28 May 2026 M. Pala OpenCA Labs J. Klaussner Bundesdruckerei GmbH S. Fluhrer Cisco Systems 24 November 2025 Composite ML-KEM for use in X.509 Public Key Infrastructure draft-ietf-lamps-pq-composite-kem-10 Abstract This document defines combinations of ML-KEM [FIPS.203] in hybrid with traditional algorithms RSA-OAEP, ECDH, X25519, and X448. These combinations are tailored to meet security best practices and regulatory guidelines. Composite ML-KEM is applicable in any application that uses X.509 or PKIX data structures that accept ML- KEM, but where the operator wants extra protection against breaks or catastrophic bugs in ML-KEM. About This Document This note is to be removed before publishing as an RFC. The latest revision of this draft can be found at https://lamps- wg.github.io/draft-composite-kem/draft-ietf-lamps-pq-composite- kem.html. Status information for this document may be found at https://datatracker.ietf.org/doc/draft-ietf-lamps-pq-composite-kem/. Discussion of this document takes place on the LAMPS Working Group mailing list (mailto:spams@ietf.org), which is archived at https://datatracker.ietf.org/wg/lamps/about/. Subscribe at https://www.ietf.org/mailman/listinfo/spams/. Source for this draft and an issue tracker can be found at https://github.com/lamps-wg/draft-composite-kem. Status of This Memo This Internet-Draft is submitted in full conformance with the provisions of BCP 78 and BCP 79. Ounsworth, et al. Expires 28 May 2026 [Page 1] Internet-Draft Composite ML-KEM November 2025 Internet-Drafts are working documents of the Internet Engineering Task Force (IETF). Note that other groups may also distribute working documents as Internet-Drafts. The list of current Internet- Drafts is at https://datatracker.ietf.org/drafts/current/. Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress." This Internet-Draft will expire on 28 May 2026. Copyright Notice Copyright (c) 2025 IETF Trust and the persons identified as the document authors. All rights reserved. This document is subject to BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents (https://trustee.ietf.org/ license-info) in effect on the date of publication of this document. Please review these documents carefully, as they describe your rights and restrictions with respect to this document. Code Components extracted from this document must include Revised BSD License text as described in Section 4.e of the Trust Legal Provisions and are provided without warranty as described in the Revised BSD License. Table of Contents 1. Changes in version -09 . . . . . . . . . . . . . . . . . . . 3 2. Introduction . . . . . . . . . . . . . . . . . . . . . . . . 4 2.1. Conventions and Terminology . . . . . . . . . . . . . . . 5 2.2. Composite Design Philosophy . . . . . . . . . . . . . . . 6 3. Overview of the Composite ML-KEM Scheme . . . . . . . . . . . 7 3.1. Promotion of RSA-OAEP into a KEM . . . . . . . . . . . . 8 3.2. Promotion of ECDH into a KEM . . . . . . . . . . . . . . 9 4. Composite ML-KEM Functions . . . . . . . . . . . . . . . . . 11 4.1. Key Generation . . . . . . . . . . . . . . . . . . . . . 11 4.2. Encapsulation . . . . . . . . . . . . . . . . . . . . . . 13 4.3. Decapsulation . . . . . . . . . . . . . . . . . . . . . . 15 4.4. KEM Combiner Function . . . . . . . . . . . . . . . . . . 17 4.5. Error Handling and Explicit Rejection . . . . . . . . . . 18 5. Serialization . . . . . . . . . . . . . . . . . . . . . . . . 18 5.1. SerializePublicKey and DeserializePublicKey . . . . . . . 20 5.2. SerializePrivateKey and DeserializePrivateKey . . . . . . 22 5.3. SerializeCiphertext and DeserializeCiphertext . . . . . . 23 6. Use within X.509 and PKIX . . . . . . . . . . . . . . . . . . 25 6.1. Encoding to DER . . . . . . . . . . . . . . . . . . . . . 26 6.2. Key Usage Bits . . . . . . . . . . . . . . . . . . . . . 26 Ounsworth, et al. Expires 28 May 2026 [Page 2] Internet-Draft Composite ML-KEM November 2025 6.3. ASN.1 Definitions . . . . . . . . . . . . . . . . . . . . 26 7. Algorithm Identifiers and Parameters . . . . . . . . . . . . 28 7.1. RSA-OAEP Parameters . . . . . . . . . . . . . . . . . . . 33 7.2. Rationale for choices . . . . . . . . . . . . . . . . . . 34 8. ASN.1 Module . . . . . . . . . . . . . . . . . . . . . . . . 35 9. IANA Considerations . . . . . . . . . . . . . . . . . . . . . 40 9.1. Object Identifier Allocations . . . . . . . . . . . . . . 40 9.1.1. Module Registration . . . . . . . . . . . . . . . . . 40 9.1.2. Object Identifier Registrations . . . . . . . . . . . 40 10. Security Considerations . . . . . . . . . . . . . . . . . . . 42 10.1. Why Hybrids? . . . . . . . . . . . . . . . . . . . . . . 43 10.2. KEM Combiner . . . . . . . . . . . . . . . . . . . . . . 43 10.2.1. IND-CCA2 Security of the hybrid scheme . . . . . . . 44 10.2.2. Second pre-image resistance of component KEMs . . . 45 10.2.3. Generifying this construction . . . . . . . . . . . 45 10.3. Key Reuse . . . . . . . . . . . . . . . . . . . . . . . 46 10.4. Policy for Deprecated and Acceptable Algorithms . . . . 47 11. Implementation Considerations . . . . . . . . . . . . . . . . 47 11.1. FIPS Certification . . . . . . . . . . . . . . . . . . . 47 11.1.1. Combiner Function . . . . . . . . . . . . . . . . . 48 11.1.2. Order of KDF inputs with Non-Approved Algorithms . . 48 11.2. Backwards Compatibility . . . . . . . . . . . . . . . . 49 11.3. Profiling down the number of options . . . . . . . . . . 50 11.4. Decapsulation Requires the Public Key . . . . . . . . . 50 11.4.1. Extracting RSAPublicKey from RSAPrivateKey . . . . . 51 11.4.2. Deriving the public ECPoint from ECPrivateKey . . . 52 12. References . . . . . . . . . . . . . . . . . . . . . . . . . 52 12.1. Normative References . . . . . . . . . . . . . . . . . . 52 12.2. Informative References . . . . . . . . . . . . . . . . . 55 Appendix A. Maximum Key and Ciphertext Sizes . . . . . . . . . . 58 Appendix B. Component Algorithm Reference . . . . . . . . . . . 60 Appendix C. Fixed Component Algorithm Identifiers . . . . . . . 61 Appendix D. Comparison with other Hybrid KEMs . . . . . . . . . 64 D.1. X-Wing . . . . . . . . . . . . . . . . . . . . . . . . . 64 D.2. ETSI CatKDF . . . . . . . . . . . . . . . . . . . . . . . 65 Appendix E. Examples of KEM Combiner Intermediate Values . . . . 65 Appendix F. Test Vectors . . . . . . . . . . . . . . . . . . . . 69 Appendix G. Contributors and Acknowledgments . . . . . . . . . . 128 Authors' Addresses . . . . . . . . . . . . . . . . . . . . . . . 129 1. Changes in version -09 Interop-affecting changes: * Reverted back to the private key encoding mlkemSeed || tradSK. Editorial changes: Ounsworth, et al. Expires 28 May 2026 [Page 3] Internet-Draft Composite ML-KEM November 2025 * Added an Implementation Consideration section with a few suggested ways of acquiring the tradPK needed by the Decaps() routine. 2. Introduction The advent of quantum computing poses a significant threat to current cryptographic systems. Traditional cryptographic key establishment algorithms such as RSA-OAEP, Diffie-Hellman and its elliptic curve variants are vulnerable to quantum attacks. During the transition to post-quantum cryptography (PQC), there is considerable uncertainty regarding the robustness of both existing and new cryptographic algorithms. While we can no longer fully trust traditional cryptography, we also cannot immediately place complete trust in post-quantum replacements until they have undergone extensive scrutiny and real-world testing to uncover and rectify both algorithmic weaknesses as well as implementation flaws across all the new implementations. Unlike previous migrations between cryptographic algorithms, the decision of when to migrate and which algorithms to adopt is far from straightforward. For instance, the aggressive migration timelines may require deploying PQC algorithms before their implementations have been fully hardened or certified, and dual-algorithm data protection may be desirable over a longer time period to hedge against security vulnerabilities and other implementation flaws in the new implementations. Cautious implementers may opt to combine cryptographic algorithms in such a way that an attacker would need to break all of them simultaneously to compromise the protected data. These mechanisms are referred to as Post-Quantum/Traditional (PQ/T) Hybrids [I-D.ietf-pquip-pqt-hybrid-terminology]. Certain jurisdictions are already recommending or mandating that PQC lattice schemes be used exclusively within a PQ/T hybrid framework. The use of a composite scheme provides a straightforward implementation of hybrid solutions compatible with (and advocated by) some governments and cybersecurity agencies [BSI2021], [ANSSI2024]. This specification defines a specific instantiation of the PQ/T Hybrid paradigm called "composite" where multiple cryptographic algorithms are combined to form a single key encapsulation mechanism (KEM) presenting a single public key and ciphertext such that it can be treated as a single atomic algorithm at the protocol level; a property referred to as "protocol backwards compatibility" since it can be applied to protocols that are not explicitly hybrid-aware. Composite algorithms retain some security even if one of their component algorithms is broken. Concrete instantiations of composite Ounsworth, et al. Expires 28 May 2026 [Page 4] Internet-Draft Composite ML-KEM November 2025 ML-KEM algorithms are provided based on ML-KEM, RSA-OAEP and ECDH. Backwards compatibility in the sense of upgraded systems continuing to inter-operate with legacy systems is not directly covered in this specification, but is the subject of Section 11.2. The idea of a composite was first presented in [Bindel2017]. Composite ML-KEM is applicable in any PKIX-related application that would otherwise use ML-KEM. 2.1. Conventions and Terminology The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in BCP 14 [RFC2119] [RFC8174] when, and only when, they appear in all capitals, as shown here. These words may also appear in this document in lower case as plain English words, absent their normative meanings. This specification is consistent with all terminology from [I-D.ietf-pquip-pqt-hybrid-terminology]. In addition, the following terms are used in this specification: *ALGORITHM*: The usage of the term "algorithm" within this specification generally refers to any function which has a registered Object Identifier (OID) for use within an ASN.1 AlgorithmIdentifier. This loosely, but not precisely, aligns with the definitions of "cryptographic algorithm" and "cryptographic scheme" given in [I-D.ietf-pquip-pqt-hybrid-terminology]. *COMBINER*: A combiner specifies how multiple shared secret keys are combined into a single shared secret key. *COMPONENT / PRIMITIVE*: The words "component" or "primitive" are used interchangeably to refer to a cryptographic algorithm that is used internally within a composite algorithm. For example this could be an asymmetric algorithm such as "ML-KEM-768" or "RSA-OAEP". *DER:* Distinguished Encoding Rules as defined in [X.690]. *KEM:* A key encapsulation mechanism as defined in Section 3. *PKI:* Public Key Infrastructure, as defined in [RFC5280]. Ounsworth, et al. Expires 28 May 2026 [Page 5] Internet-Draft Composite ML-KEM November 2025 *SHARED SECRET KEY:* A value established between two communicating parties for use as cryptographic key material suitable for direct use by symmetric cryptographic algorithms. This specification is concerned with shared secrets established via public key cryptographic operations. Notation: The algorithm descriptions use python-like syntax. The following symbols deserve special mention: * || represents concatenation of two byte arrays. * [:] represents byte array slicing. * (a, b) represents a pair of values a and b. Typically this indicates that a function returns multiple values; the exact conveyance mechanism -- tuple, struct, output parameters, etc -- is left to the implementer. * (a, _): represents a pair of values where one -- the second one in this case -- is ignored. * Func(): represents a function that is parametrized by meaning that the function's implementation will have minor differences depending on the underlying TYPE. Typically this means that a function will need to look up different constants or use different underlying cryptographic primitives depending on which composite algorithm it is implementing. 2.2. Composite Design Philosophy [I-D.ietf-pquip-pqt-hybrid-terminology] defines composites as: _Composite Cryptographic Element_: A cryptographic element that incorporates multiple component cryptographic elements of the same type in a multi-algorithm scheme. Composite algorithms, as defined in this specification, follow this definition and should be regarded as a single key that performs a single cryptographic operation typical of a key establishment mechanism such as key generation, encapsulating, or decapsulating -- using its internal concatenation of component keys as if they form a single key. This generally means that the complexity of combining algorithms can and should be handled by the cryptographic library or cryptographic module, and the single composite public key, private key, and ciphertext can be carried in existing fields in protocols such as PKCS#10 [RFC2986], CMP [RFC4210], X.509 [RFC5280], CMS [RFC5652], and the Trust Anchor Format [RFC5914]. In this way, composites achieve "protocol backwards-compatibility" in that they Ounsworth, et al. Expires 28 May 2026 [Page 6] Internet-Draft Composite ML-KEM November 2025 will drop cleanly into any protocol that accepts an analogous single- algorithm cryptographic scheme without requiring any modification of the protocol to handle multiple algorithms. Discussion of the specific choices of algorithm pairings can be found in Section 7.2. 3. Overview of the Composite ML-KEM Scheme Composite ML-KEM is a PQ/T hybrid Key Encapsulation Mechanism (KEM) which combines ML-KEM as specified in [FIPS.203] and [I-D.ietf-lamps-kyber-certificates] with one of RSA-OAEP defined in [RFC8017], the Elliptic Curve Diffie-Hellman key agreement schemes ECDH defined in section 5.7.1.2 of [SP.800-56Ar3], and X25519 / X448 defined in [RFC8410]. A KEM combiner function is used to combine the two component shared secret keys into a single shared secret key. Composite Key Encapsulation Mechanisms are defined as cryptographic primitives that consist of three algorithms. These definitions are borrowed from [RFC9180]. * KeyGen() -> (pk, sk): A probabilistic key generation algorithm, which generates a public key pk and a secret key sk. Some cryptographic modules may also expose a KeyGen(seed) -> (pk, sk), which generates pk and sk deterministically from a seed. This specification assumes a seed-based keygen for ML-KEM. * Encap(pk) -> (ss, ct): A probabilistic encapsulation algorithm, which takes as input a public key pk and outputs a ciphertext ct and shared secret key ss. Note: this specification uses Encap() to conform to [RFC9180], but [FIPS.203] uses Encaps(). * Decap(sk, ct) -> ss: A decapsulation algorithm, which takes as input a secret key sk and ciphertext ct and outputs a shared secret ss, or in some cases a distinguished error value. Note: this specification uses Decap() to conform to [RFC9180], but [FIPS.203] uses Decaps(). The KEM interface was chosen as the interface for a composite key establishment because it allows for arbitrary combinations of component algorithm types since both key transport and key agreement mechanisms can be promoted into KEMs as described in Section 3.1 and Section 3.2 below. The following algorithms are defined for serializing and deserializing component values. These algorithms are inspired by similar algorithms in [RFC9180]. Ounsworth, et al. Expires 28 May 2026 [Page 7] Internet-Draft Composite ML-KEM November 2025 * SerializePublicKey(mlkemPK, tradPK) -> bytes: Produce a byte string encoding of the component public keys. * DeserializePublicKey(bytes) -> (mlkemPK, tradPK): Parse a byte string to recover the component public keys. * SerializeCiphertext(mlkemCT, tradCT) -> bytes: Produce a byte string encoding of the component ciphertexts. * DeserializeCiphertext(bytes) -> (mlkemCT, tradCT): Parse a byte string to recover the component ciphertexts. * SerializePrivateKey(mlkemSeed, tradPK, tradSK) -> bytes: Produce a byte string encoding of the component private keys. * DeserializePrivateKey(bytes) -> (mlkemSeed, tradPK, tradSK): Parse a byte string to recover the component private keys. Full definitions of serialization and deserialization algorithms can be found in Section 5. 3.1. Promotion of RSA-OAEP into a KEM The RSA Optimal Asymmetric Encryption Padding (OAEP), as defined in section 7.1 of [RFC8017] is a public key encryption algorithm used to transport key material from a sender to a receiver. A "key transport" type algorithm has the following API: * Encrypt(pk, ss) -> ct: Take an existing shared secret key ss and encrypt it for pk. * Decrypt(sk, ct) -> ss: Decrypt the ciphertext ct to recover ss. Note the difference between the API of RSA.Encrypt(pk, ss) -> ct and KEM.Encap(pk) -> (ss, ct) presented above. For this reason, RSA-OAEP cannot be directly combined with ML-KEM. Fortunately, a key transport mechanism such as RSA-OAEP can be easily promoted into a KEM by having the sender generate a random 256 bit shared secret key and encrypt it. RSAOAEPKEM.Encap(pkR): shared_secret = SecureRandom(ss_len) enc = RSAES-OAEP-ENCRYPT(pkR, shared_secret) return shared_secret, enc Ounsworth, et al. Expires 28 May 2026 [Page 8] Internet-Draft Composite ML-KEM November 2025 Note that the OAEP label L is left to its default value, which is the empty string as per [RFC8017]. The shared secret key output by the overall Composite ML-KEM already binds a composite KEM Combiner Label, so there is no need to also use the component Label. The value of ss_len as well as concrete values for all the RSA-OAEP parameters used within this specification can be found in Section 7.1. Decap(sk, ct) -> ss is accomplished by direct use of OAEP Decrypt. RSAOAEPKEM.Decap(skR, enc): shared_secret = RSAES-OAEP-DECRYPT(skR, enc) return shared_secret The encodings for the public key (pkR), private key (skR), and ciphertext (enc) are described in Section 5. A quick note on the choice of RSA-OAEP as the supported RSA encryption primitive. RSA-KEM [RFC5990] is cryptographically robust and is more straightforward to work with, but it has fairly limited adoption and therefore is of limited value as a PQ migration mechanism. Also, while RSA-PKCS#1v1.5 [RFC8017] is still widely used, it is hard to make secure and no longer FIPS-approved as of the end of 2023 [SP800-131Ar2], so it is of limited forwards value. This leaves RSA-OAEP [RFC8017] as the remaining choice. See Section 7.2 for further discussion of algorithm choices. Note that, at least at the time of writing, the algorithm RSAOAEPKEM is not defined as a standalone algorithm within PKIX standards and it does not have an assigned algorithm OID, so it cannot be used directly with CMS KEMRecipientInfo [RFC9629]; it is merely a building block for the composite algorithm. 3.2. Promotion of ECDH into a KEM The elliptic curve Diffie-Hellman algorithm identified by the OID id- ecDH as defined in [RFC5480] and [SEC1] is a key agreement algorithm requiring both parties to contribute an asymmetric keypair to the derivation of the shared secret key. A "key agreement" type algorithm has the following API: * DH(skX, pkY) -> ss: Each party combines their secret key skX with the other party's public key pkY. Ounsworth, et al. Expires 28 May 2026 [Page 9] Internet-Draft Composite ML-KEM November 2025 Note the difference between the API of DH(skX, pkY) -> ss and KEM.Encap(pk) -> (ss, ct) presented above. For this reason, a Diffie-Hellman key exchange cannot be directly combined with ML-KEM. Fortunately, a Diffie-Hellman key agreement can be easily promoted into a KEM Encap(pk) -> (ss, ct) by having the sender generate an ephemeral keypair for themself and sending their public key as the ciphertext ct. Composite ML-KEM uses a simplified version of the DHKEM definition from [RFC9180]: DHKEM.Encap(pkR): (skE, pkE) = GenerateKeyPair() ss = DH(skE, pkR) ct = SerializePublicKey(pkE) return ss, ct Decap(sk, ct) -> ss is accomplished in the analogous way. DHKEM.Decap(skR, ct): pkE = DeserializePublicKey(ct) ss = DH(skR, pkE) return ss This construction applies for all variants of elliptic curve Diffie- Hellman used in this specification: ECDH, X25519, and X448. For ECDH, DH() yields the value Z as described in section 5.7.1.2 of [SP.800-56Ar3]. For X25519 and X448, DH() yields the value K as described in section 6 of [RFC7748]. The encodings for the public key (pkR), private key (skR), and ciphertext (pkE) are described in Section 5. The promotion of DH to a KEM is similar to the DHKEM functions in [RFC9180], but it is simplified in the following ways: 1. Notation has been aligned to the notation used in this specification. 2. Since a KEM Combiner Label is included explicitly in the Composite ML-KEM combiner, there is no need to perform the labeled steps of ExtractAndExpand(). Ounsworth, et al. Expires 28 May 2026 [Page 10] Internet-Draft Composite ML-KEM November 2025 3. Since the ciphertext and receiver's public key are included explicitly in the Composite ML-KEM combiner, there is no need to construct the kem_context object. Note that here, SerializePublicKey() and DeserializePublicKey() refer to the underlying encoding of the DH primitive, and not to the composite serialization functions defined in Section 5. Note that, at least at the time of writing, the algorithm DHKEM is not defined as a standalone algorithm within PKIX standards and it does not have an assigned algorithm OID, so it cannot be used directly with CMS KEMRecipientInfo [RFC9629]; it is merely a building block for the composite algorithm. 4. Composite ML-KEM Functions This section describes the composite ML-KEM functions needed to instantiate the public API of a Key Encapsulation Mechanism as defined in Section 3. 4.1. Key Generation In order to maintain security properties of the composite, applications that use composite keys MUST always perform fresh key generations of both component keys and MUST NOT reuse existing key material. See Section 10.3 for a discussion. To generate a new keypair for composite schemes, the KeyGen() -> (pk, sk) function is used. The KeyGen() function calls the two key generation functions of the component algorithms independently. Multi-threaded, multi-process, or multi-module applications might choose to execute the key generation functions in parallel for better key generation performance or architectural modularity. The following describes how to instantiate a KeyGen() function for a given composite algorithm represented by . Ounsworth, et al. Expires 28 May 2026 [Page 11] Internet-Draft Composite ML-KEM November 2025 Composite-ML-KEM.KeyGen() -> (pk, sk) Explicit Inputs: None Implicit Inputs mapped from : ML-KEM The underlying ML-KEM algorithm and parameter set, for example "ML-KEM-768". Trad The underlying traditional algorithm and parameter, for example "RSA-OAEP" or "X25519". Output: (pk, sk) The composite keypair. Key Generation Process: 1. Generate component keys mlkemSeed = Random(64) (mlkemPK, mlkemSK) = ML-KEM.KeyGen(mlkemSeed) (tradPK, tradSK) = Trad.KeyGen() 2. Check for component key gen failure if NOT (mlkemPK, mlkemSK) or NOT (tradPK, tradSK): output "Key generation error" 3. Output the composite public and private keys pk = SerializePublicKey(mlkemPK, tradPK) sk = SerializePrivateKey(mlkemSeed, tradPK, tradSK) return (pk, sk) In order to ensure fresh keys, the key generation functions MUST be executed for both component algorithms. Compliant parties MUST NOT use, import or export component keys that are used in other contexts, combinations, or by themselves as keys for standalone algorithm use. For more details on the security considerations around key reuse, see Section 10.3. Note that this keygen routine outputs a serialized composite key, which contains only the ML-KEM seed. Implementations should feel free to modify this routine to additionally output the expanded mlkemSK or to make free use of ML-KEM.KeyGen(mldsaSeed) as needed to expand the ML-KEM seed into an expanded key prior to performing a decapsulation operation. Ounsworth, et al. Expires 28 May 2026 [Page 12] Internet-Draft Composite ML-KEM November 2025 Variations in the keygen process above and decapsulation processes below to accommodate particular private key storage mechanisms or alternate interfaces to the underlying cryptographic modules are considered to be conformant to this specification so long as they produce the same output and error handling. For example, component private keys stored in separate software or hardware modules where it is not possible to do a joint simultaneous keygen would be considered compliant so long as both keys are freshly generated. It is also possible that the underlying cryptographic module does not expose a ML-KEM.KeyGen(seed) that accepts an externally-generated seed, and instead an alternate keygen interface must be used. Note however that cryptographic modules that do not support seed-based ML-KEM key generation will be incapable of importing or exporting composite keys in the standard format since the private key serialization routines defined in Section 5.2 only support ML-KEM keys as seeds. Errors produced by the component KeyGen() routines MUST be forwarded on to the calling application. Further discussion can be found below in Section 4.5. 4.2. Encapsulation The Encap(pk) of a Composite ML-KEM algorithm is designed to behave exactly the same as ML-KEM.Encaps(ek) defined in Algorithm 20 in Section 7.2 of [FIPS.203]. Specifically, Composite-ML-KEM.Encap(pk) produces a 256-bit shared secret key that can be used directly with any symmetric-key cryptographic algorithm. In this way, Composite ML-KEM can be used as a direct drop-in replacement anywhere that ML- KEM is used. The following describes how to instantiate a Encap(pk) function for a given composite algorithm represented by . Composite-ML-KEM.Encap(pk) -> (ss, ct) Explicit Inputs: pk Composite public key consisting of encryption public keys for each component. Implicit inputs mapped from : ML-KEM The underlying ML-KEM algorithm and parameter set, for example "ML-KEM-768". Trad The underlying ML-KEM algorithm and Ounsworth, et al. Expires 28 May 2026 [Page 13] Internet-Draft Composite ML-KEM November 2025 parameter set, for example "RSA-OAEP" or "X25519". Label KEM Combiner Label value for binding the ciphertext to the Composite OID. See section on KEM Combiner Labels below. Output: ss The shared secret key, a 256-bit key suitable for use with symmetric cryptographic algorithms. ct The ciphertext, a byte string. Encap Process: 1. Separate the public keys. (mlkemPK, tradPK) = DeserializePublicKey(pk) 2. Perform the respective component Encap operations according to their algorithm specifications. (mlkemCT, mlkemSS) = ML-KEM.Encaps(mlkemPK) (tradCT, tradSS) = TradKEM.Encap(tradPK) 3. If either ML-KEM.Encaps() or TradKEM.Encap() return an error, then this process must return an error. if NOT (mlkemCT, mlkemSS) or NOT (tradCT, tradSS): output "Encapsulation error" 4. Encode the ciphertext ct = SerializeCiphertext(mlkemCT, tradCT) 5. Combine the KEM secrets and additional context to yield the composite shared secret key. ss = KemCombiner(mlkemSS, tradSS, tradCT, tradPK, Label) 6. Output composite shared secret key and ciphertext. return (ss, ct) The specific values for Label are defined per Composite ML-KEM algorithm in Section 7. Ounsworth, et al. Expires 28 May 2026 [Page 14] Internet-Draft Composite ML-KEM November 2025 Errors produced by the component Encaps() routines MUST be forwarded on to the calling application. Further discussion can be found below in Section 4.5. 4.3. Decapsulation The Decap(sk, ct) -> ss of a Composite ML-KEM algorithm is designed to behave exactly the same as ML-KEM.Decaps(dk, c) defined in Algorithm 21 in Section 7.3 of [FIPS.203]. Specifically, Composite- ML-KEM.Decap(sk, ct) produces a 256-bit shared secret key that can be used directly with any symmetric-key cryptographic algorithm. In this way, Composite ML-KEM can be used as a direct drop-in replacement anywhere that ML-KEM is used. The following describes how to instantiate a Decap(sk, ct) function for a given composite algorithm represented by . Composite-ML-KEM.Decap(sk, ct) -> ss Explicit inputs sk Composite private key consisting of decryption private keys for each component. ct The ciphertext, a byte string. Implicit inputs mapped from : ML-KEM The underlying ML-KEM algorithm and parameter set, for example "ML-KEM-768". Trad The underlying traditional algorithm and parameter set, for example "RSA-OAEP" or "X25519". Label KEM Combiner Label value for binding the ciphertext to the Composite ML-KEM OID. See section on KEM Combiner Labels below. Implicit inputs looked up from SK: tradPK The traditional public key is required for the KEM combiner. For discussion of where to get this value, see the Decapsulation Requires the Public Key section. Output: Ounsworth, et al. Expires 28 May 2026 [Page 15] Internet-Draft Composite ML-KEM November 2025 ss The shared secret key, a 256-bit key suitable for use with symmetric cryptographic algorithms. Decap Process: 1. Separate the private keys and ciphertexts (mlkemSeed, tradSK) = DeserializePrivateKey(sk) (_, mlkemSK) = ML-KEM.KeyGen(mlkemSeed) (mlkemCT, tradCT) = DeserializeCiphertext(ct) 2. Perform the respective component Decap operations according to their algorithm specifications. mlkemSS = ML-KEM.Decaps(mlkemSK, mlkemCT) tradSS = TradKEM.Decap(tradSK, tradCT) 3. If either ML-KEM.Decaps() or TradKEM.Decap() return an error, then this process must return an error. if NOT mlkemSS or NOT tradSS: output "Decapsulation error" 4. Combine the KEM secrets and additional context to yield the composite shared secret key. ss = KemCombiner(mlkemSS, tradSS, tradCT, tradPK, Label) 5. Output composite shared secret key. return ss Steps 2, 3, and 4 SHOULD be performed in a timing-invariant way to prevent side-channel attackers from learning which component algorithm failed and from learning any of the inputs or output of the KEM combiner. Step 4 requires the Decaps() process to have access to tradPK, which is not carried in the private key format and therefore the implementation is required to acquire it from some out-of-band means. The Implementation Considerations Section 11.4 provides further discussion on this. It is possible to use component private keys stored in separate software or hardware keystores. Variations in the process to accommodate particular private key storage mechanisms are considered to be conformant to this specification so long as it produces the same output and error handling as the process sketched above. Ounsworth, et al. Expires 28 May 2026 [Page 16] Internet-Draft Composite ML-KEM November 2025 In order to properly achieve its security properties, the KEM combiner requires that all inputs are fixed-length or length-encoded. Since each Composite ML-KEM algorithm fully specifies its component algorithms, including key sizes, all inputs should be fixed-length in non-error scenarios except for minor variations introduced by encoding. In the cases where there are minor variations introduced by encoding, those encodings already have a fixed-length prefix followed by length-encoded data, so the requirements for the KEM combiner security properties hold (namely that the input is injective). However some implementations may choose to perform additional checking to handle certain error conditions. In particular, the KEM combiner step should not be performed if either of the component decapsulations returned an error condition indicating malformed inputs. For timing-invariance reasons, it is RECOMMENDED to perform both decapsulation operations and check for errors afterwards to prevent an attacker from using a timing channel to tell which component failed decapsulation. Also, RSA-based composites MUST ensure that the modulus size (i.e. the size of tradCT and tradPK) matches that specified for the given Composite ML-KEM algorithm in Section 7; depending on the cryptographic library used, this check may be done by the library or may require an explicit check as part of the Composite-ML-KEM.Decap() routine. Implementers should keep in mind that some instances of tradCT and tradPK will be DER-encoded which could introduce minor length variations such as dropping leading zeroes; since the underlying KEMs are assumed to be IND-CCA secure, decapsulation against tampered ciphertexts or public keys is assumed to fail, these length differences are considered benign to the KEM combiner. Errors produced by the component Decaps() routines MUST be forwarded on to the calling application. Further discussion can be found below in Section 4.5. 4.4. KEM Combiner Function This specification provides a combiner construction with SHA3-256 for all combinations of algorithms. Ounsworth, et al. Expires 28 May 2026 [Page 17] Internet-Draft Composite ML-KEM November 2025 KemCombiner(mlkemSS, tradSS, tradCT, tradPK, Label) -> ss Explicit inputs: The list of input values to be combined. Output: ss The shared secret key, a 256-bit key suitable for use with symmetric cryptographic algorithms. Process: ss = SHA3-256(mlkemSS || tradSS || tradCT || tradPK || Label) return ss 4.5. Error Handling and Explicit Rejection ML-KEM, particularly its Decaps() defined in Algorithms 18 and 21 of [FIPS.203], is designed to be implicitly rejecting, meaning that a failure within the underlying PKE scheme due to a mangled ciphertext will not cause ML-KEM.Decaps() to return an error, but instead any errors encountered during decapsulation are handled by producing a pseudo-random shared secret. ML-KEM.Decaps() can, however return errors for example if the provided ciphertext or decapsulation private key is the wrong size. In Composite ML-KEM, not all component algorithms will be implicitly rejecting, for example RSA-OAEP's Decrypt() can return an error if the padding is incorrect. In general, in the case that one of the component primitives generates an error during Composite ML-KEM KeyGen, Encaps, or Decaps, Composite ML-KEM MUST clear all buffers containing key material and forward the error to its caller; i.e. Composite ML-KEM MUST be explicitly rejecting whenever one of its components is. The same applies to Composite ML-KEM KeyGen() and Encaps(): Composite KEM MUST forward any errors produced by component algorithms. 5. Serialization This section presents routines for serializing and deserializing composite public keys, private keys, and ciphertext values to bytes. The functions defined in this section are considered internal implementation details and are referenced from within the public API definitions in Section 4. Ounsworth, et al. Expires 28 May 2026 [Page 18] Internet-Draft Composite ML-KEM November 2025 Deserialization is possible because ML-KEM has fixed-length public keys, private keys (seeds), and ciphertext values as shown in the following table. +=============+============+=============+============+ | Algorithm | Public Key | Private Key | Ciphertext | +=============+============+=============+============+ | ML-KEM-768 | 1184 | 64 | 1088 | +-------------+------------+-------------+------------+ | ML-KEM-1024 | 1568 | 64 | 1568 | +-------------+------------+-------------+------------+ Table 1: ML-KEM Sizes For all serialization routines below, when these values are required to be carried in an ASN.1 structure, they are wrapped as described in Section 6.1. While ML-KEM has a single fixed-size representation for each of public key, private key, and ciphertext, the traditional component might allow multiple valid encodings; for example an elliptic curve public key, and therefore also ciphertext, might be validly encoded as either compressed or uncompressed [SEC1], or an RSA private key could be encoded in Chinese Remainder Theorem form [RFC8017]. In order to obtain interoperability, composite algorithms MUST use the following encodings of the underlying components: * *ML-KEM*: MUST be encoded as specified in sections 7.1 and 7.2 of [FIPS.203], using a 64-byte seed as the private key. * *RSA*: the public key MUST be encoded as RSAPublicKey with the (n,e) public key representation as specified in A.1.1 of [RFC8017] and the private key representation as RSAPrivateKey specified in A.1.2 of [RFC8017] with version 0 and 'otherPrimeInfos' absent. An RSA-OAEP ciphertext MUST be encoded as specified in section 7.1.1 of [RFC8017] * *ECDH*: public key MUST be encoded as an uncompressed X9.62 [X9.62_2005], including the leading byte 0x04 indicating uncompressed. This is consistent with the encoding of ECPoint as specified in section 2.2 of [RFC5480] when no ASN.1 OCTET STRING wrapping is present. The private key MUST be encoded as ECPrivateKey specified in [RFC5915] with 'NamedCurve' parameter set to the OID of the curve, but without the 'publicKey' field. The ciphertext MUST be encoded in the same manner as the public key. Ounsworth, et al. Expires 28 May 2026 [Page 19] Internet-Draft Composite ML-KEM November 2025 * *X25519 and X448*: the public key MUST be encoded as per section 5 of [RFC7748] and the private key is a 32 or 56 byte raw value for X25519 and X448 respectively. The ciphertext MUST be encoded in the same manner as the public key. All ASN.1 objects SHALL be encoded using DER on serialization. Even with fixed encodings for the traditional component, there may be slight differences in size of the encoded value due to, for example, encoding rules that drop leading zeroes. See Appendix A for further discussion of encoded size of each composite algorithm. The deserialization routines described below do not check for well- formedness of the cryptographic material they are recovering. It is assumed that underlying cryptographic primitives will catch malformed values and raise an appropriate error. 5.1. SerializePublicKey and DeserializePublicKey The serialization routine for keys simply concatenates the public keys of the component algorithms, as defined below: Composite-ML-KEM.SerializePublicKey(mlkemPK, tradPK) -> bytes Explicit inputs: mlkemPK The ML-KEM public key, which is bytes. tradPK The traditional public key in the appropriate encoding for the underlying component algorithm. Implicit inputs: None Output: bytes The encoded composite public key. Serialization Process: 1. Combine and output the encoded public key output mlkemPK || tradPK Ounsworth, et al. Expires 28 May 2026 [Page 20] Internet-Draft Composite ML-KEM November 2025 Deserialization reverses this process. Each component key is deserialized according to their respective specification as shown in Appendix B. The following describes how to instantiate a DeserializePublicKey(bytes) function for a given composite algorithm represented by . Composite-ML-KEM.DeserializePublicKey(bytes) -> (mlkemPK, tradPK) Explicit inputs: bytes An encoded composite public key. Implicit inputs mapped from : ML-KEM The underlying ML-KEM algorithm and parameter, for example, could be "ML-KEM-768". Output: mlkemPK The ML-KEM public key, which is bytes. tradPK The traditional public key in the appropriate encoding for the underlying component algorithm. Deserialization Process: 1. Parse each constituent encoded public key. The length of the mlkemPK is known based on the size of the ML-KEM component key length specified by the Object ID. switch ML-KEM do case ML-KEM-768: mlkemPK = bytes[:1184] tradPK = bytes[1184:] case ML-KEM-1024: mlkemPK = bytes[:1568] tradPK = bytes[1568:] Note that while ML-KEM has fixed-length keys, RSA may not, depending on encoding, so rigorous length-checking of the overall composite key is not always possible. 2. Output the component public keys output (mlkemPK, tradPK) Ounsworth, et al. Expires 28 May 2026 [Page 21] Internet-Draft Composite ML-KEM November 2025 5.2. SerializePrivateKey and DeserializePrivateKey The serialization routine for keys simply concatenates the private keys of the component algorithms, as defined below: Composite-ML-KEM.SerializePrivateKey(mlkemSeed, tradPK, tradSK) -> bytes Explicit inputs: mlkemSeed The ML-KEM private key, which is the bytes of the seed. tradSK The traditional private key in the appropriate encoding for the underlying component algorithm. Implicit inputs: None Output: bytes The encoded composite private key. Serialization Process: 1. Combine and output the encoded private key. output mlkemSeed || tradSK Deserialization reverses this process. Each component key is deserialized according to their respective specification as shown in Appendix B. The following describes how to instantiate a DeserializePrivateKey(bytes) function. Since ML-KEM private keys are 64 bytes for all parameter sets, this function does not need to be parametrized. Ounsworth, et al. Expires 28 May 2026 [Page 22] Internet-Draft Composite ML-KEM November 2025 Composite-ML-KEM.DeserializePrivateKey(bytes) -> (mlkemSeed, tradSK) Explicit inputs: bytes An encoded composite private key. Implicit inputs: That an ML-KEM private key is 64 bytes for all parameter sets. Output: mlkemSeed The ML-KEM private key, which is the bytes of the seed. tradSK The traditional private key in the appropriate encoding for the underlying component algorithm. Deserialization Process: 1. Parse the ML-KEM seed, which is always a 64 byte seed for all parameter sets. mlkemSeed = bytes[:64] tradSK = bytes[64:] 2. Output the component private keys output (mlkemSeed,tradSK) The function BytesToInteger(x) is not defined in [FIPS.204], but is the obvious inverse of the defined IntegerToBytes() which is the usual little-endian encoding of an integer. 5.3. SerializeCiphertext and DeserializeCiphertext The serialization routine for the composite ciphertext value simply concatenates the fixed-length ML-KEM ciphertext with the ciphertext from the traditional algorithm, as defined below: Ounsworth, et al. Expires 28 May 2026 [Page 23] Internet-Draft Composite ML-KEM November 2025 Composite-ML-KEM.SerializeCiphertext(mlkemCT, tradCT) -> bytes Explicit inputs: mlkemCT The ML-KEM ciphertext, which is bytes. tradCT The traditional ciphertext in the appropriate encoding for the underlying component algorithm. Implicit inputs: None Output: bytes The encoded composite ciphertext value. Serialization Process: 1. Combine and output the encoded composite ciphertext output mlkemCT || tradCT Deserialization reverses this process. Each component ciphertext is deserialized according to their respective specification as shown in Appendix B. The following describes how to instantiate a DeserializeCiphertext(bytes) function for a given composite algorithm represented by . Ounsworth, et al. Expires 28 May 2026 [Page 24] Internet-Draft Composite ML-KEM November 2025 Composite-ML-KEM.DeserializeCiphertext(bytes) -> (mldkemCT, tradCT) Explicit inputs: bytes An encoded composite ciphertext value. Implicit inputs mapped from : ML-KEM The underlying ML-KEM algorithm and parameter, for example, could be "ML-KEM-768". Output: mlkemCT The ML-KEM ciphertext, which is bytes. tradCT The traditional ciphertext in the appropriate encoding for the underlying component algorithm. Deserialization Process: 1. Parse each constituent encoded ciphertext. The length of the mlkemCT is known based on the size of the ML-KEM component ciphertext length specified by the Object ID. switch ML-KEM do case ML-KEM-768: mlkemCT = bytes[:1088] tradCT = bytes[1088:] case ML-KEM-1024: mlkemCT= bytes[:1568] tradCT = bytes[1568:] 2. Output the component ciphertext values output (mlkemCT, tradCT) 6. Use within X.509 and PKIX The following sections provide processing logic and the necessary ASN.1 modules necessary to use composite ML-KEM within X.509 and PKIX protocols. Use within the Cryptographic Message Syntax (CMS) will be covered in a separate specification. Ounsworth, et al. Expires 28 May 2026 [Page 25] Internet-Draft Composite ML-KEM November 2025 While composite ML-KEM keys and ciphertext values MAY be used raw, the following sections provide conventions for using them within X.509 and other PKIX protocols such that Composite ML-KEM can be used as a drop-in replacement for KEM algorithms in PKCS#10 [RFC2986], CMP [RFC4210], X.509 [RFC5280], and related protocols. 6.1. Encoding to DER The serialization routines presented in Section 5 produce raw binary values. When these values are required to be carried within a DER- encoded message format such as an X.509's subjectPublicKey or a OneAsymmetricKey.privateKey OCTET STRING [RFC5958], then the BIT STRING or OCTET STRING contains this raw byte string output of the appropriate serialization routine from Section 5 without further encoding. When a Composite ML-KEM public key appears outside of a SubjectPublicKeyInfo type in an environment that uses ASN.1 encoding, it could be encoded as an OCTET STRING by using the Composite-ML-KEM- PublicKey type defined below. Composite-ML-KEM-PublicKey ::= OCTET STRING Size constraints MAY be enforced, as appropriate as per Appendix A. 6.2. Key Usage Bits When any Composite ML-KEM Object Identifier appears within the SubjectPublicKeyInfo.AlgorithmIdentifier field of an X.509 certificate [RFC5280], the key usage certificate extension MUST only contain: keyEncipherment Composite ML-KEM keys MUST NOT be used in a "dual usage" mode because even if the traditional component key supports both signing and encryption, the post-quantum algorithms do not and therefore the overall composite algorithm does not. Implementations MUST NOT use one component of the composite for the purposes of digital signature and the other component for the purposes of encryption or key establishment. 6.3. ASN.1 Definitions Composite ML-KEM uses a substantially non-ASN.1 based encoding, as specified in Section 5. However, as composite algorithms will be used within ASN.1-based X.509 and PKIX protocols, some conventions for ASN.1 wrapping are necessary. Ounsworth, et al. Expires 28 May 2026 [Page 26] Internet-Draft Composite ML-KEM November 2025 The following ASN.1 Information Object Classes are defined to allow for compact definitions of each composite algorithm, leading to a smaller overall ASN.1 module. pk-CompositeKEM {OBJECT IDENTIFIER:id} PUBLIC-KEY ::= { IDENTIFIER id -- KEY no ASN.1 wrapping -- PARAMS ARE absent CERT-KEY-USAGE { keyEncipherment } -- PRIVATE-KEY no ASN.1 wrapping -- } kema-CompositeKEM { OBJECT IDENTIFIER:id, PUBLIC-KEY:publicKeyType } KEM-ALGORITHM ::= { IDENTIFIER id -- VALUE no ASN.1 wrapping -- PARAMS ARE absent PUBLIC-KEYS { publicKeyType } SMIME-CAPS { IDENTIFIED BY id } } Figure 1: ASN.1 Object Information Classes for Composite ML-KEM As an example, the public key and KEM algorithm types associated with id-MLKEM768-ECDH-P256-SHA3-256 are defined as: pk-MLKEM768-ECDH-P256-SHA3-256 PUBLIC-KEY ::= pk-CompositeKEM { id-MLKEM768-ECDH-P256-SHA3-256 } kema-MLKEM768-ECDH-P256-SHA3-256 KEM-ALGORITHM ::= kema-CompositeKEM{ id-MLKEM768-ECDH-P256-SHA3-256, pk-MLKEM768-ECDH-P256-SHA3-256 } The full set of key types defined by this specification can be found in the ASN.1 Module in Section 8. Use cases that require an interoperable encoding for composite private keys will often need to place a composite private key inside a OneAsymmetricKey structure defined in [RFC5958], such as when private keys are carried in PKCS #12 [RFC7292], CMP [RFC4210] or CRMF [RFC4211]. The definition of OneAsymmetricKey is copied here for convenience: Ounsworth, et al. Expires 28 May 2026 [Page 27] Internet-Draft Composite ML-KEM November 2025 OneAsymmetricKey ::= SEQUENCE { version Version, privateKeyAlgorithm PrivateKeyAlgorithmIdentifier, privateKey PrivateKey, attributes [0] Attributes OPTIONAL, ..., [[2: publicKey [1] PublicKey OPTIONAL ]], ... } ... PrivateKey ::= OCTET STRING -- Content varies based on type of key. The -- algorithm identifier dictates the format of -- the key. Figure 2: OneAsymmetricKey as defined in [RFC5958] When a composite private key is conveyed inside a OneAsymmetricKey structure (version 1 of which is also known as PrivateKeyInfo) [RFC5958], the privateKeyAlgorithm field SHALL be set to the corresponding composite algorithm identifier defined according to Section 7 and its parameters field MUST be absent. The privateKey field SHALL contain the OCTET STRING representation of the serialized composite private key as per Section 5.2. The publicKey field remains OPTIONAL. If the publicKey field is present, it MUST be a composite public key as per Section 5.1. Some applications might need to reconstruct the SubjectPublicKeyInfo or OneAsymmetricKey objects corresponding to each component key individually, for example if this is required for invoking the underlying primitive. Section 7 provides the necessary mapping between composite and their component algorithms for doing this reconstruction. Component keys of a composite private key MUST NOT be used in any other type of key or as a standalone key. For more details on the security considerations around key reuse, see Section 10.3. 7. Algorithm Identifiers and Parameters This section lists the algorithm identifiers and parameters for all Composite ML-KEM algorithms. Full specifications for the referenced algorithms can be found in Appendix B. Ounsworth, et al. Expires 28 May 2026 [Page 28] Internet-Draft Composite ML-KEM November 2025 As the number of algorithms can be daunting to implementers, see Section 11.3 for a discussion of choosing a subset to support. Each Composite ML-KEM algorithm has a unique Label which is used in constructing the KEM combiner in (Section 4.4). This helps protect against a different algorithm arriving at the same shared secret key even if all inputs are the same. Label values are provided in two forms: where the label value is alphanumeric ASCII, they are represented below as strings. For example, "MLKEM768-RSAOAEP2048" below is equivalent to the hexadecimal value 4D4C4B454D3736382D5253414F41455032303438. Some of the label values contain problematic characters, such as backslashes, that can cause issues displaying correctly in rendered documents or even in source code when the compiler interprets it as an escape character. Below, these are represented directly in hexadecimal. For example, the label for id-MLKEM768-X25519-SHA3-256 is "\.//^\", but to avoid transcription errors it is provided only in hexadecimal as 5c2e2f2f5e5c. EDNOTE: the OIDs listed below are prototyping OIDs defined in Entrust's 2.16.840.1.114027.80.9.1 arc but will be replaced by IANA. Composite KEM algorithm list: * id-MLKEM768-RSA2048-SHA3-256 - OID: 2.16.840.1.114027.80.5.2.86 - Label: "MLKEM768-RSAOAEP2048" - ML-KEM variant: ML-KEM-768 - Traditional Algorithm: RSA o Traditional KEM Algorithm: id-RSAES-OAEP o RSA size: 2048 o RSAES-OAEP parameters: See Table 2 * id-MLKEM768-RSA3072-SHA3-256 - OID: 2.16.840.1.114027.80.5.2.87 - Label: "MLKEM768-RSAOAEP3072" Ounsworth, et al. Expires 28 May 2026 [Page 29] Internet-Draft Composite ML-KEM November 2025 - ML-KEM variant: ML-KEM-768 - Traditional Algorithm: RSA o Traditional KEM Algorithm: id-RSAES-OAEP o RSA size: 3072 o RSAES-OAEP parameters: See Table 2 * id-MLKEM768-RSA4096-SHA3-256 - OID: 2.16.840.1.114027.80.5.2.88 - Label: "MLKEM768-RSAOAEP4096" - ML-KEM variant: ML-KEM-768 - Traditional Algorithm: RSA o Traditional KEM Algorithm: id-RSAES-OAEP o RSA size: 4096 o RSAES-OAEP parameters: See Table 2 * id-MLKEM768-X25519-SHA3-256 - OID: 2.16.840.1.114027.80.5.2.89 - Label: "5c2e2f2f5e5c" (hex) - ML-KEM variant: ML-KEM-768 - Traditional Algorithm: X25519 o Traditional KEM Algorithm: id-X25519 * id-MLKEM768-ECDH-P256-SHA3-256 - OID: 2.16.840.1.114027.80.5.2.90 - Label: "MLKEM768-P256" - ML-KEM variant: ML-KEM-768 - Traditional Algorithm: ECDH Ounsworth, et al. Expires 28 May 2026 [Page 30] Internet-Draft Composite ML-KEM November 2025 o Traditional KEM Algorithm: id-ecDH o ECDH curve: secp256r1 * id-MLKEM768-ECDH-P384-SHA3-256 - OID: 2.16.840.1.114027.80.5.2.91 - Label: "MLKEM768-P384" - ML-KEM variant: ML-KEM-768 - Traditional Algorithm: ECDH o Traditional KEM Algorithm: id-ecDH o ECDH curve: secp384r1 * id-MLKEM768-ECDH-brainpoolP256r1-SHA3-256 - OID: 2.16.840.1.114027.80.5.2.92 - Label: "MLKEM768-BP256" - ML-KEM variant: ML-KEM-768 - Traditional Algorithm: ECDH o Traditional KEM Algorithm: id-ecDH o ECDH curve: brainpoolP256r1 * id-MLKEM1024-RSA3072-SHA3-256 - OID: 2.16.840.1.114027.80.5.2.93 - Label: "MLKEM1024-RSAOAEP3072" - ML-KEM variant: ML-KEM-1024 - Traditional Algorithm: RSA o Traditional KEM Algorithm: id-RSAES-OAEP o RSA size: 3072 o RSAES-OAEP parameters: See Table 2 Ounsworth, et al. Expires 28 May 2026 [Page 31] Internet-Draft Composite ML-KEM November 2025 * id-MLKEM1024-ECDH-P384-SHA3-256 - OID: 2.16.840.1.114027.80.5.2.94 - Label: "MLKEM1024-P384" - ML-KEM variant: ML-KEM-1024 - Traditional Algorithm: ECDH o Traditional KEM Algorithm: id-ecDH o ECDH curve: secp384r1 * id-MLKEM1024-ECDH-brainpoolP384r1-SHA3-256 - OID: 2.16.840.1.114027.80.5.2.95 - Label: "MLKEM1024-BP384" - ML-KEM variant: ML-KEM-1024 - Traditional Algorithm: ECDH o Traditional KEM Algorithm: id-ecDH o ECDH curve: brainpoolP384r1 * id-MLKEM1024-X448-SHA3-256 - OID: 2.16.840.1.114027.80.5.2.96 - Label: "MLKEM1024-X448" - ML-KEM variant: ML-KEM-1024 - Traditional Algorithm: X448 o Traditional KEM Algorithm: id-X448 * id-MLKEM1024-ECDH-P521-SHA3-256 - OID: 2.16.840.1.114027.80.5.2.97 - Label: "MLKEM1024-P521" - ML-KEM variant: ML-KEM-1024 Ounsworth, et al. Expires 28 May 2026 [Page 32] Internet-Draft Composite ML-KEM November 2025 - Traditional Algorithm: ECDH o Traditional KEM Algorithm: id-ecDH o ECDH curve: secp521r1 In alignment with ML-KEM [FIPS.203], Composite KEM algorithms output a 256-bit shared secret key at all security levels. For all RSA key types and sizes, the exponent is RECOMMENDED to be 65537. Implementations MAY support only 65537 and reject other exponent values. Legacy RSA implementations that use other values for the exponent MAY be used within a composite, but need to be careful when interoperating with other implementations. SHA3-256 is used as the KDF for all Composite ML-KEM algorithms. 7.1. RSA-OAEP Parameters Use of RSA-OAEP [RFC8017] requires additional parameters to be specified. The RSA component keys MUST be generated at the specified 2048-bit, 3072-bit, 4096-bit key sizes respectively (up to small differences such as dropping leading zeros); intermediate sizes are not acceptable. As with the other Composite ML-KEM algorithms, AlgorithmIdentifier parameters MUST be absent. The RSA-OAEP primitive SHALL be instantiated with the following hard-coded parameters which are the same for the 2048, 3072 and 4096 bit key sizes since the objective is to carry and output a 256-bit shared secret key at all security levels. Ounsworth, et al. Expires 28 May 2026 [Page 33] Internet-Draft Composite ML-KEM November 2025 +=============================+=================+ | RSAES-OAEP-params | Value | +=============================+=================+ | hashAlgorithm | id-sha256 | +-----------------------------+-----------------+ | MaskGenAlgorithm.algorithm | id-mgf1 | +-----------------------------+-----------------+ | maskGenAlgorithm.parameters | id-sha256 | +-----------------------------+-----------------+ | pSourceAlgorithm | pSpecifiedEmpty | +-----------------------------+-----------------+ | ss_len | 256 bits | +-----------------------------+-----------------+ Table 2: RSA-OAEP Parameters Full specifications for the referenced algorithms can be found in Appendix B. Note: The mask length, according to [RFC8017], is k - hLen - 1, where k is the size of the RSA modulus. Since the choice of hash function and the RSA key size is fixed for each composite algorithm, implementations could choose to pre-compute and hard-code the mask length. 7.2. Rationale for choices In generating the list of composite algorithms, the idea was to provide composite algorithms at various security levels with varying performance characteristics. The main design consideration in choosing pairings is to prioritize providing pairings of each ML-KEM security level with commonly- deployed traditional algorithms. This supports the design goal of using composites as a stepping stone to efficiently deploy post- quantum on top of existing hardened and certified traditional algorithm implementations. This was prioritized rather than attempting to exactly match the security level of the post-quantum and traditional components -- which in general is difficult to do since there is no academic consensus on how to compare the "bits of security" against classical attackers and "qubits of security" against quantum attackers. Ounsworth, et al. Expires 28 May 2026 [Page 34] Internet-Draft Composite ML-KEM November 2025 While it may seem odd to use 256-bit outputs at all security levels, this aligns with ML-KEM [FIPS.203] which produces a 256-bit shared secret key at all security levels. SHA3-256 has 256 bits of (2nd) pre-image resistance, which is the required property for a KDF to provide 128 bits of security, as allowed in Table 3 of [SP.800-57pt1r5]. 8. ASN.1 Module Composite-MLKEM-2025 { iso(1) identified-organization(3) dod(6) internet(1) security(5) mechanisms(5) pkix(7) id-mod(0) id-mod-composite-mlkem-2025(TBDMOD) } DEFINITIONS IMPLICIT TAGS ::= BEGIN EXPORTS ALL; IMPORTS PUBLIC-KEY, AlgorithmIdentifier{}, SMIME-CAPS FROM AlgorithmInformation-2009 -- RFC 5912 [X509ASN1] { iso(1) identified-organization(3) dod(6) internet(1) security(5) mechanisms(5) pkix(7) id-mod(0) id-mod-algorithmInformation-02(58) } KEM-ALGORITHM FROM KEMAlgorithmInformation-2023 { iso(1) identified-organization(3) dod(6) internet(1) security(5) mechanisms(5) pkix(7) id-mod(0) id-mod-kemAlgorithmInformation-2023(109) } ; -- -- Object Identifiers -- -- -- Information Object Classes -- pk-CompositeKEM {OBJECT IDENTIFIER:id} PUBLIC-KEY ::= { IDENTIFIER id -- KEY no ASN.1 wrapping -- Ounsworth, et al. Expires 28 May 2026 [Page 35] Internet-Draft Composite ML-KEM November 2025 PARAMS ARE absent CERT-KEY-USAGE { keyEncipherment } -- PRIVATE-KEY no ASN.1 wrapping -- } kema-CompositeKEM { OBJECT IDENTIFIER:id, PUBLIC-KEY:publicKeyType } KEM-ALGORITHM ::= { IDENTIFIER id -- VALUE no ASN.1 wrapping -- PARAMS ARE absent PUBLIC-KEYS { publicKeyType } SMIME-CAPS { IDENTIFIED BY id } } -- -- Composite KEM Algorithms -- -- TODO: OID to be replaced by IANA id-MLKEM768-RSA2048-SHA3-256 OBJECT IDENTIFIER ::= { joint-iso-itu-t(2) country(16) us(840) organization(1) entrust(114027) algorithm(80) explicitcomposite(5) kem(2) 86 } pk-MLKEM768-RSA2048-SHA3-256 PUBLIC-KEY ::= pk-CompositeKEM { id-MLKEM768-RSA2048-SHA3-256 } kema-MLKEM768-RSA2048-SHA3-256 KEM-ALGORITHM ::= kema-CompositeKEM{ id-MLKEM768-RSA2048-SHA3-256, pk-MLKEM768-RSA2048-SHA3-256 } -- TODO: OID to be replaced by IANA id-MLKEM768-RSA3072-SHA3-256 OBJECT IDENTIFIER ::= { joint-iso-itu-t(2) country(16) us(840) organization(1) entrust(114027) algorithm(80) explicitcomposite(5) kem(2) 87 } pk-MLKEM768-RSA3072-SHA3-256 PUBLIC-KEY ::= pk-CompositeKEM { id-MLKEM768-RSA3072-SHA3-256 } Ounsworth, et al. Expires 28 May 2026 [Page 36] Internet-Draft Composite ML-KEM November 2025 kema-MLKEM768-RSA3072-SHA3-256 KEM-ALGORITHM ::= kema-CompositeKEM{ id-MLKEM768-RSA3072-SHA3-256, pk-MLKEM768-RSA3072-SHA3-256 } -- TODO: OID to be replaced by IANA id-MLKEM768-RSA4096-SHA3-256 OBJECT IDENTIFIER ::= { joint-iso-itu-t(2) country(16) us(840) organization(1) entrust(114027) algorithm(80) explicitcomposite(5) kem(2) 88 } pk-MLKEM768-RSA4096-SHA3-256 PUBLIC-KEY ::= pk-CompositeKEM { id-MLKEM768-RSA4096-SHA3-256 } kema-MLKEM768-RSA4096-SHA3-256 KEM-ALGORITHM ::= kema-CompositeKEM{ id-MLKEM768-RSA4096-SHA3-256, pk-MLKEM768-RSA4096-SHA3-256 } -- TODO: OID to be replaced by IANA id-MLKEM768-X25519-SHA3-256 OBJECT IDENTIFIER ::= { joint-iso-itu-t(2) country(16) us(840) organization(1) entrust(114027) algorithm(80) explicitcomposite(5) kem(2) 89 } pk-MLKEM768-X25519-SHA3-256 PUBLIC-KEY ::= pk-CompositeKEM { id-MLKEM768-X25519-SHA3-256 } kema-MLKEM768-X25519-SHA3-256 KEM-ALGORITHM ::= kema-CompositeKEM{ id-MLKEM768-X25519-SHA3-256, pk-MLKEM768-X25519-SHA3-256 } -- TODO: OID to be replaced by IANA id-MLKEM768-ECDH-P256-SHA3-256 OBJECT IDENTIFIER ::= { joint-iso-itu-t(2) country(16) us(840) organization(1) entrust(114027) algorithm(80) explicitcomposite(5) kem(2) 90 } pk-MLKEM768-ECDH-P256-SHA3-256 PUBLIC-KEY ::= pk-CompositeKEM { id-MLKEM768-ECDH-P256-SHA3-256 } kema-MLKEM768-ECDH-P256-SHA3-256 KEM-ALGORITHM ::= Ounsworth, et al. Expires 28 May 2026 [Page 37] Internet-Draft Composite ML-KEM November 2025 kema-CompositeKEM{ id-MLKEM768-ECDH-P256-SHA3-256, pk-MLKEM768-ECDH-P256-SHA3-256 } -- TODO: OID to be replaced by IANA id-MLKEM768-ECDH-P384-SHA3-256 OBJECT IDENTIFIER ::= { joint-iso-itu-t(2) country(16) us(840) organization(1) entrust(114027) algorithm(80) explicitcomposite(5) kem(2) 91 } pk-MLKEM768-ECDH-P384-SHA3-256 PUBLIC-KEY ::= pk-CompositeKEM { id-MLKEM768-ECDH-P384-SHA3-256 } kema-MLKEM768-ECDH-P384-SHA3-256 KEM-ALGORITHM ::= kema-CompositeKEM{ id-MLKEM768-ECDH-P384-SHA3-256, pk-MLKEM768-ECDH-P384-SHA3-256 } -- TODO: OID to be replaced by IANA id-MLKEM768-ECDH-brainpoolP256r1-SHA3-256 OBJECT IDENTIFIER ::= { joint-iso-itu-t(2) country(16) us(840) organization(1) entrust(114027) algorithm(80) explicitcomposite(5) kem(2) 92 } pk-MLKEM768-ECDH-brainpoolP256r1-SHA3-256 PUBLIC-KEY ::= pk-CompositeKEM { id-MLKEM768-ECDH-brainpoolP256r1-SHA3-256 } kema-MLKEM768-ECDH-brainpoolP256r1-SHA3-256 KEM-ALGORITHM ::= kema-CompositeKEM{ id-MLKEM768-ECDH-brainpoolP256r1-SHA3-256, pk-MLKEM768-ECDH-brainpoolP256r1-SHA3-256 } -- TODO: OID to be replaced by IANA id-MLKEM1024-RSA3072-SHA3-256 OBJECT IDENTIFIER ::= { joint-iso-itu-t(2) country(16) us(840) organization(1) entrust(114027) algorithm(80) explicitcomposite(5) kem(2) 93 } pk-MLKEM1024-RSA3072-SHA3-256 PUBLIC-KEY ::= pk-CompositeKEM { id-MLKEM1024-RSA3072-SHA3-256 } kema-MLKEM1024-RSA3072-SHA3-256 KEM-ALGORITHM ::= kema-CompositeKEM{ Ounsworth, et al. Expires 28 May 2026 [Page 38] Internet-Draft Composite ML-KEM November 2025 id-MLKEM1024-RSA3072-SHA3-256, pk-MLKEM1024-RSA3072-SHA3-256 } -- TODO: OID to be replaced by IANA id-MLKEM1024-ECDH-P384-SHA3-256 OBJECT IDENTIFIER ::= { joint-iso-itu-t(2) country(16) us(840) organization(1) entrust(114027) algorithm(80) explicitcomposite(5) kem(2) 94 } pk-MLKEM1024-ECDH-P384-SHA3-256 PUBLIC-KEY ::= pk-CompositeKEM { id-MLKEM1024-ECDH-P384-SHA3-256 } kema-MLKEM1024-ECDH-P384-SHA3-256 KEM-ALGORITHM ::= kema-CompositeKEM{ id-MLKEM1024-ECDH-P384-SHA3-256, pk-MLKEM1024-ECDH-P384-SHA3-256 } -- TODO: OID to be replaced by IANA id-MLKEM1024-ECDH-brainpoolP384r1-SHA3-256 OBJECT IDENTIFIER ::= { joint-iso-itu-t(2) country(16) us(840) organization(1) entrust(114027) algorithm(80) explicitcomposite(5) kem(2) 95 } pk-MLKEM1024-ECDH-brainpoolP384r1-SHA3-256 PUBLIC-KEY ::= pk-CompositeKEM{ id-MLKEM1024-ECDH-brainpoolP384r1-SHA3-256 } kema-MLKEM1024-ECDH-brainpoolP384r1-SHA3-256 KEM-ALGORITHM ::= kema-CompositeKEM{ id-MLKEM1024-ECDH-brainpoolP384r1-SHA3-256, pk-MLKEM1024-ECDH-brainpoolP384r1-SHA3-256 } -- TODO: OID to be replaced by IANA id-MLKEM1024-X448-SHA3-256 OBJECT IDENTIFIER ::= { joint-iso-itu-t(2) country(16) us(840) organization(1) entrust(114027) algorithm(80) explicitcomposite(5) kem(2) 96 } pk-MLKEM1024-X448-SHA3-256 PUBLIC-KEY ::= pk-CompositeKEM { id-MLKEM1024-X448-SHA3-256 } kema-MLKEM1024-X448 KEM-ALGORITHM ::= kema-CompositeKEM{ id-MLKEM1024-X448-SHA3-256, pk-MLKEM1024-X448-SHA3-256 } Ounsworth, et al. Expires 28 May 2026 [Page 39] Internet-Draft Composite ML-KEM November 2025 -- TODO: OID to be replaced by IANA id-MLKEM1024-ECDH-P521-SHA3-256 OBJECT IDENTIFIER ::= { joint-iso-itu-t(2) country(16) us(840) organization(1) entrust(114027) algorithm(80) explicitcomposite(5) kem(2) 97 } pk-MLKEM1024-ECDH-P521-SHA3-256 PUBLIC-KEY ::= pk-CompositeKEM { id-MLKEM1024-ECDH-P521-SHA3-256 } kema-MLKEM1024-ECDH-P521-SHA3-256 KEM-ALGORITHM ::= kema-CompositeKEM{ id-MLKEM1024-ECDH-P521-SHA3-256, pk-MLKEM1024-ECDH-P521-SHA3-256 } END 9. IANA Considerations 9.1. Object Identifier Allocations EDNOTE to IANA: OIDs will need to be replaced in both the ASN.1 module and in Section 7. 9.1.1. Module Registration The following is to be registered in "SMI Security for PKIX Module Identifier": * Decimal: IANA Assigned - *Replace TBDMOD* * Description: Composite-KEM-2023 - id-mod-composite-kems * References: This Document 9.1.2. Object Identifier Registrations The following is to be registered in "SMI Security for PKIX Algorithms": * id-MLKEM768-RSA2048-SHA3-256 - Decimal: IANA Assigned - Description: id-MLKEM768-RSA2048-SHA3-256 - References: This Document Ounsworth, et al. Expires 28 May 2026 [Page 40] Internet-Draft Composite ML-KEM November 2025 * id-MLKEM768-RSA3072-SHA3-256 - Decimal: IANA Assigned - Description: id-MLKEM768-RSA3072-SHA3-256 - References: This Document * id-MLKEM768-RSA4096-SHA3-256 - Decimal: IANA Assigned - Description: id-MLKEM768-RSA4096-SHA3-256 - References: This Document * id-MLKEM768-ECDH-P256-SHA3-256 - Decimal: IANA Assigned - Description: id-MLKEM768-ECDH-P256-SHA3-256 - References: This Document * id-MLKEM768-ECDH-P384-SHA3-256 - Decimal: IANA Assigned - Description: id-MLKEM768-ECDH-P384-SHA3-256 - References: This Document * id-MLKEM768-ECDH-brainpoolP256r1-SHA3-256 - Decimal: IANA Assigned - Description: id-MLKEM768-ECDH-brainpoolP256r1-SHA3-256 - References: This Document * id-MLKEM768-X25519-SHA3-256 - Decimal: IANA Assigned - Description: id-MLKEM768-X25519-SHA3-256 - References: This Document Ounsworth, et al. Expires 28 May 2026 [Page 41] Internet-Draft Composite ML-KEM November 2025 * id-MLKEM1024-RSA3072-SHA3-256 - Decimal: IANA Assigned - Description: id-MLKEM1024-RSA3072-SHA3-256 - References: This Document * id-MLKEM1024-ECDH-P384-SHA3-256 - Decimal: IANA Assigned - Description: id-MLKEM1024-ECDH-P384-SHA3-256 - References: This Document * id-MLKEM1024-ECDH-brainpoolP384r1-SHA3-256 - Decimal: IANA Assigned - Description: id-MLKEM1024-ECDH-brainpoolP384r1-SHA3-256 - References: This Document * id-MLKEM1024-X448-SHA3-256 - Decimal: IANA Assigned - Description: id-MLKEM1024-X448-SHA3-256 - References: This Document * id-MLKEM1024-ECDH-P521-SHA3-256 - Decimal: IANA Assigned - Description: id-MLKEM1024-ECDH-P521-SHA3-256 - References: This Document 10. Security Considerations As this specification uses ML-KEM as a component of all composite algorithms, all security considerations from [I-D.ietf-lamps-kyber-certificates] and [I-D.sfluhrer-cfrg-ml-kem-security-considerations] apply. Ounsworth, et al. Expires 28 May 2026 [Page 42] Internet-Draft Composite ML-KEM November 2025 10.1. Why Hybrids? In broad terms, a PQ/T Hybrid can be used either to provide dual- algorithm security or to provide migration flexibility. Let's quickly explore both. Dual-algorithm security. The general idea is that the data is protected by two algorithms such that an attacker would need to break both in order to compromise the data. As with most of cryptography, this property is easy to state in general terms, but becomes more complicated when expressed in formalisms. The following sections go into more detail here. Migration flexibility. Some PQ/T hybrids exist to provide a sort of "OR" mode where the application can choose to use one algorithm or the other or both. The intention is that the PQ/T hybrid mechanism builds in backwards compatibility to allow legacy and upgraded applications to co-exist and communicate. The composite algorithms presented in this specification do not provide this since they operate in a strict "AND" mode. They do, however, provide codebase migration flexibility. Consider that an organization has today a mature, validated, certified, hardened implementation of RSA or ECC; composites allow them to add an ML-KEM implementation which immediately starts providing benefits against harvest-now-decrypt- later attacks even if that ML-KEM implementation is still an experimental, non-validated, non-certified, non-hardened implementation. More details of obtaining FIPS certification of a composite algorithm can be found in Section 11.1. 10.2. KEM Combiner The KEM combiner from Section 4.4 is reproduced here for reference. SHA3-256(mlkemSS || tradSS || tradCT || tradPK || Label) Figure 3: KEM combiner construction The primary security property of the KEM combiner is that it preserves indistinguishable (adaptive) chosen-ciphertext (IND-CCA2) security of the overall Composite ML-KEM so long as at least one component is IND-CCA2 [X-Wing] [GHP18]. Additionally, we also need to consider the case where one of the component algorithms is completely broken; that the private key is known to an attacker. In this case, we rely on the construction of the KEM combiner to ensure that the value of the other shared secret key cannot be leaked or the combined shared secret key predicted via manipulation of the broken algorithm. Ounsworth, et al. Expires 28 May 2026 [Page 43] Internet-Draft Composite ML-KEM November 2025 Each registered Composite ML-KEM algorithm specifies a Label -- see Section 7. Given that each Composite ML-KEM algorithm fully specifies the component algorithms, including for example the size of the RSA modulus, all inputs to the KEM combiner are fixed-size and thus do not require length-prefixing. * mlkemSS is always 32 bytes. * tradSS in the case of DH this is derived by the decapsulator and therefore the length is not controlled by the attacker, however in the case of RSA-OAEP this value is directly chosen by the sender and both the length and content could be freely chosen by an attacker. * tradCT is either an elliptic curve public key or an RSA-OAEP ciphertext which is required to have its length checked by step 1b of RSAES-OAEP-DECRYPT in [RFC8017]. * tradPK is the public key of the traditional component (elliptic curve or RSA) and therefore fixed-length. * Label is a fixed value specified in this document. 10.2.1. IND-CCA2 Security of the hybrid scheme Informally, a Composite ML-KEM algorithm is secure if the combiner (SHA3) is secure, and either ML-KEM is secure or the traditional component (RSA-OAEP, ECDH, X25519 or X448) is secure. The security of ML-KEM and DH hybrids is covered in [X-Wing] and requires that the first KEM component (ML-KEM in this construction) is IND-CCA2 and second ciphertext preimage resistant (C2PRI) and that the second traditional component is IND-CCA2. This design choice improves performance by not including the large ML-KEM public key and ciphertext, but means that an implementation error in the ML-KEM component that affects the ciphertext check step of the FO transform could result in the overall composite no longer achieving IND-CCA2 security. This solution remains IND-CCA2 due to binding the tradPK and tradCT in the KEM combiner. The QSF framework presented in [X-Wing] is extended to cover RSA-OAEP as the traditional algorithm in place of DH by noting that RSA-OAEP is also IND-CCA2 secure [RFC8017]. The composite combiner cannot be assumed to be secure when used with different KEMs and a more cautious approach would bind the public key and ciphertext of the first KEM as well. Ounsworth, et al. Expires 28 May 2026 [Page 44] Internet-Draft Composite ML-KEM November 2025 10.2.2. Second pre-image resistance of component KEMs The notion of a "ciphertext second pre-image resistant KEM" is defined in [X-Wing] as being the property that it is computationally difficult to find two different ciphertexts c != c' that will decapsulate to the same shared secret key under the same public key. For the purposes of a hybrid KEM combiner, this property means that given two composite ciphertexts (c1, c2) and (c1', c2'), we must obtain a unique overall shared secret key so long as either c1 != c1' or c2 != c2' -- i.e. the overall Composite ML-KEM is ciphertext second pre-image resistant, and therefore secure so long as one of the component KEMs is secure. In [X-Wing] it is proven that ML-KEM is a second pre-image resistant KEM and therefore the ML-KEM ciphertext can safely be omitted from the KEM combiner. Note that this makes a fundamental assumption on ML-KEM remaining ciphertext second pre-image resistant, and therefore this formulation of KEM combiner does not fully protect against implementation errors in the ML-KEM component -- particularly around the ciphertext check step of the Fujisaki-Okamoto transform -- which could trivially lead to second ciphertext pre-image attacks that break the IND-CCA2 security of the ML-KEM component and of the overall Composite ML-KEM. This could be more fully mitigated by binding the ML-KEM ciphertext in the combiner, but a design decision was made to settle for protection against algorithmic attacks and not implementation attacks against ML-KEM in order to increase performance. However, since neither RSA-OAEP nor DH guarantee second pre-image resistance at all, even in a correct implementation, these ciphertexts are bound to the key derivation in order to guarantee that c != c' will yield a unique ciphertext, and thus restoring second pre-image resistance to the overall Composite ML-KEM. 10.2.3. Generifying this construction It should be clear that the security analysis of the presented KEM combiner construction relies heavily on the specific choices of component algorithms and combiner KDF, and this combiner construction SHOULD NOT by applied to any other combination of ciphers without performing the appropriate security analysis. Ounsworth, et al. Expires 28 May 2026 [Page 45] Internet-Draft Composite ML-KEM November 2025 10.3. Key Reuse While conformance with this specification requires that both components of a composite key MUST be freshly generated, the designers are aware that some implementers may be forced to break this rule due to operational constraints. This section documents the implications of doing so. When using single-algorithm cryptography, the best practice is to always generate fresh keying material for each purpose, for example when renewing a certificate, or obtaining both a TLS and S/MIME certificate for the same device. However, in practice key reuse in such scenarios is not always catastrophic to security and therefore often tolerated. However this reasoning does not hold in the PQ/T hybrid setting. Within the broader context of PQ/T hybrids, we need to consider new attack surfaces that arise due to the hybrid constructions and did not exist in single-algorithm contexts. One of these is key reuse where the component keys within a hybrid are also used by themselves within a single-algorithm context. For example, it might be tempting for an operator to take already-deployed RSA keys and add an ML-KEM key to them to form a hybrid. Within a hybrid signature context this leads to a class of attacks referred to as "stripping attacks" where one component signature can be extracted and presented as a single- algorithm signature. Hybrid KEMs using a concatenation-style KEM combiner, as is done in this specification, do not have the analogous attack surface because even if an attacker is able to extract and decrypt one of the component ciphertexts, this will yield a different shared secret key than the overall shared secret key derived from the composite, so any subsequent symmetric cryptographic operations will fail. In addition, there is a further implication to key reuse regarding certificate revocation. Upon receiving a new certificate enrolment request, many certification authorities will check if the requested public key has been previously revoked due to key compromise. Often a CA will perform this check by using the public key hash. Therefore, if one, or even both, components of a composite have been previously revoked, the CA may only check the hash of the combined composite key and not find the revocations. Therefore, because the possibility of key reuse exists even though forbidden in this specification, CAs performing revocation checks on a composite key SHOULD also check both component keys independently to verify that the component keys have not been revoked. Ounsworth, et al. Expires 28 May 2026 [Page 46] Internet-Draft Composite ML-KEM November 2025 10.4. Policy for Deprecated and Acceptable Algorithms Traditionally, a public key or certificate contains a single cryptographic algorithm. If and when an algorithm becomes deprecated (for example, RSA-512, or SHA1), the path to deprecating it through policy and removing it from operational environments is, at least is principle, straightforward. In the composite model this is less obvious since a PQ/T hybrid is expected to still be considered valid after the traditional component is deprecated for individual use. As such, a single composite public key or certificate may contain a mixture of deprecated and non- deprecated algorithms. In general this should be manageable through policy by removing OIDs for the standalone component algorithms while still allowing OIDs for composite algorithms. However, complications may arise when the composite implementation needs to invoke the cryptographic module for a deprecated component algorithm. In particular, this could lead to complex Cryptographic Bills of Materials that show implementations of deprecated algorithms still present and being used. 11. Implementation Considerations 11.1. FIPS Certification The following sections give guidance to implementers wishing to FIPS- certify a composite implementation. This guidance is not authoritative and has not been endorsed by NIST. Implementers seeking FIPS certification of a composite KEM algorithm where only one of the component algorithms has been FIPS-validated or FIPS-approved should credit the FIPS-validated component algorithm with full security strength, the non-FIPS-validated component algorithm with zero security, and the overall composite should be considered at least as strong and thus FIPS-approved. The composite algorithm has been designed to treat the underlying primitives as "black-box implementations" and not impose any additional requirements on them that could require an existing implementation of an underlying primitive to run in a mode different from the one under which it was certified. For example, the KeyGen defined in Section 4.1 invokes ML-KEM.KeyGen(seed) which might not be available in a cryptographic module running in FIPS-mode, but Section 4.1 is only a suggested implementation and the composite KeyGen MAY be implemented using a different available interface for ML-KEM.KeyGen. Ounsworth, et al. Expires 28 May 2026 [Page 47] Internet-Draft Composite ML-KEM November 2025 The authors wish to note that composite algorithms provide a design pattern to provide utility in future situations that require care to remain FIPS-compliant, such as future cryptographic migrations as well as bridging across jurisdictions with non-intersecting cryptographic requirements. The following sections go into further detail on specific issues that relate to FIPS certification. 11.1.1. Combiner Function For reference, the KEM combiner used in Composite ML-KEM is: ss = SHA3-256(mlkemSS || tradSS || tradCT || tradPK || Label) NIST SP 800-227 [SP800-227] allows hybrid key combiners of the following form: K <- KDM((S1,S2,...,St), OtherInput) (14) Composite ML-KEM maps cleanly into this since it places the two shared secret keys mlkemSS || tradSS at the beginning of the KDF input such that all other inputs tradCT || tradPK || Label can be considered part of OtherInput for the purposes of FIPS certification. For the detailed steps of the Key Derivation Mechanism KDM, [SP800-227] refers to [SP.800-56Cr2]. Compliance of the Composite ML-KEM variants is achieved in the following way: The Composite ML-KEM algorithms use SHA3, and so can be certified under [SP.800-56Cr2] One-Step Key Derivation Option 1: H(x) = hash(x). [SP.800-56Cr2] section 4 "One-Step Key Derivation" requires a counter which begins at the 4-byte value 0x00000001. However, the counter is allowed to be omitted when the hash function is executed only once, as specified on page 159 of the FIPS 140-3 Implementation Guidance [FIPS-140-3-IG]. 11.1.2. Order of KDF inputs with Non-Approved Algorithms [SP800-227] adds an important stipulation that was not present in earlier NIST specifications: Ounsworth, et al. Expires 28 May 2026 [Page 48] Internet-Draft Composite ML-KEM November 2025 This publication approves the use of the key combiner (14) for any t > 1, so long as at least one shared secret (i.e., S_j for some j) is a shared secret generated from the key- establishment methods of SP 800-56A or SP 800-56B, or an approved KEM. This means that although Composite ML-KEM always places the shared secret key from ML-KEM in the first slot, a Composite ML-KEM can be FIPS certified so long as either component is FIPS certified. This is important for several reasons. First, in the early stages of PQC migration, composites allow for a non-FIPS certified ML-KEM implementation to be added to a module that already has a FIPS certified traditional component, and the resulting composite can be FIPS certified. Second, when eventually RSA and Elliptic Curve are no longer FIPS-allowed, the composite can retain its FIPS certified status on the strength of the ML-KEM component. Third, while this is outside the scope of this specification, the general composite construction could be used to create FIPS certified algorithms that contain a component algorithm from a different jurisdiction. Third, a composite where both components are FIPS-certified could allow an implementer to patch one component algorithm while awaiting re- certification while continuing to use the overall composite in FIPS mode. Note that before [SP800-227] was in force, [SP.800-56Cr2] required the shared secret key from the certified algorithm to be in the first slot and therefore a Composite ML-KEM implementation using a FIPS- certified traditional component and a non-FIPS certified ML-KEM is not believed to be certifiable under [SP.800-56Cr2] alone, and requires the ammendments made by [SP800-227]. 11.2. Backwards Compatibility The term "backwards compatibility" is used here to mean that existing systems as they are deployed today can interoperate with the upgraded systems of the future. This draft explicitly does not provide backwards compatibility, only upgraded systems will understand the OIDs defined in this specification. These migration and interoperability concerns need to be thought about in the context of various types of protocols that make use of X.509 and PKIX with relation to key establishment and content encryption, from online negotiated protocols such as TLS 1.3 [RFC8446] and IKEv2 [RFC7296], to non-negotiated asynchronous protocols such as S/MIME signed email [RFC8551], as well as myriad other standardized and proprietary protocols and applications that leverage CMS [RFC5652] encrypted structures. Ounsworth, et al. Expires 28 May 2026 [Page 49] Internet-Draft Composite ML-KEM November 2025 11.3. Profiling down the number of options One daunting aspect of this specification is the number of composite algorithm combinations. Each option has been specified because there is a community that has a direct application for it; typically because the traditional component is already deployed in a change- managed environment, or because that specific traditional component is required for regulatory reasons. However, this large number of combinations leads either to fracturing of the ecosystem into non-interoperable sub-groups when different communities choose non-overlapping subsets to support, or on the other hand it leads to spreading development resources too thin when trying to support all options. This specification does not list any particular composite algorithm as mandatory-to-implement, however organizations that operate within specific application domains are encouraged to define profiles that select a small number of composites appropriate for that application domain. For applications that do not have any regulatory requirements or legacy implementations to consider, it is RECOMMENDED to focus implementation effort on: id-MLKEM768-X25519-SHA3-256 (aka "X-Wing") id-MLKEM768-ECDH-P256-SHA3-256 In applications that only allow NIST PQC Level 5, it is RECOMMENDED to focus implementation effort on: id-MLKEM1024-ECDH-P384-SHA3-256 11.4. Decapsulation Requires the Public Key ML-KEM always requires the public key in order to perform various steps of the Fujisaki-Okamoto decapsulation [FIPS.203], and for this reason the private key encoding specified in FIPS 203 includes the public key. Moreover, the KEM combiner as specified in Section 4.4 requires the public key of the traditional component in order to achieve the public-key binding property and ciphertext collision resistance as described in Section 10.2. Since tradPK is not carried in the composite private key encoding, the implementation is required to obtain it from some out-of-band mechanism. This section discusses several options, but is a non-normative, non-exhaustive list. Ounsworth, et al. Expires 28 May 2026 [Page 50] Internet-Draft Composite ML-KEM November 2025 1. Derive or extract from private key. Many cryptographic modules expose functionality to obtain an RSA or EC public key from the corresponding private key. For applications where such functionality does not exist, Section 11.4.1 and Section 11.4.2 provide the suggested mechanisms for extracting the public keys from private keys for RSA and ECDH respectively. It is assumed that this is not required for X25519 or X448 since those private keys are seeds from which the public key can be obtained. 2. Fetch it from an external data source, for example from the public-key certificate corresponding to this private key. 3. If the composite KEM private key is being carried within a PKCS#8 OneAsymmetricKey object, place the full composite public key within the optional OneAsymmetricKey.publicKey field, which allows extracting the tradPK (and re-encode as necessary for correctly using it in the KEM Combiner). 4. Use an alternate private key encoding that explicitly carries the tradPK. 11.4.1. Extracting RSAPublicKey from RSAPrivateKey Assuming that the RSA component of the composite private key is encoded as an RSAPrivateKey, as required by this specification, then, quoting from [RFC8017] you have: RSAPrivateKey ::= SEQUENCE { version Version, modulus INTEGER, -- n publicExponent INTEGER, -- e privateExponent INTEGER, -- d prime1 INTEGER, -- p prime2 INTEGER, -- q exponent1 INTEGER, -- d mod (p-1) exponent2 INTEGER, -- d mod (q-1) coefficient INTEGER, -- (inverse of q) mod p otherPrimeInfos OtherPrimeInfos OPTIONAL } This can trivially be converted into an RSAPublicKey through simple DER decoding / re-encoding since both required values are already present. RSAPublicKey ::= SEQUENCE { modulus INTEGER, -- n publicExponent INTEGER -- e } Ounsworth, et al. Expires 28 May 2026 [Page 51] Internet-Draft Composite ML-KEM November 2025 11.4.2. Deriving the public ECPoint from ECPrivateKey Unlike RSA, the ECPrivateKey does not contain sufficient information to simply extract the public key. Note that in the interest of having a single unique encoding to foster interoperability, this specification forbids the optional publicKey field. That said, the EC public key can be derived from the private key in the following way: g = generator for the group P256r1, P384r1, etc. s = ECPrivateKey.getS() pubKey = ec_multiply_by_scalar(g, s) where a recommended implementation of ec_multiply_by_scalar() can be found in [SEC1]. Then encode pubKey as X9.62 uncompressed point. 12. References 12.1. Normative References [FIPS.202] National Institute of Standards and Technology (NIST), "SHA-3 Standard: Permutation-Based Hash and Extendable- Output Functions", August 2015, . [FIPS.203] National Institute of Standards and Technology (NIST), "Module-Lattice-based Key-Encapsulation Mechanism Standard", August 2024, . [FIPS.204] National Institute of Standards and Technology (NIST), "Module-Lattice-Based Digital Signature Standard", August 2024, . [RFC2104] Krawczyk, H., Bellare, M., and R. Canetti, "HMAC: Keyed- Hashing for Message Authentication", RFC 2104, DOI 10.17487/RFC2104, February 1997, . Ounsworth, et al. Expires 28 May 2026 [Page 52] Internet-Draft Composite ML-KEM November 2025 [RFC2119] Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC 2119, DOI 10.17487/RFC2119, March 1997, . [RFC5280] Cooper, D., Santesson, S., Farrell, S., Boeyen, S., Housley, R., and W. Polk, "Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile", RFC 5280, DOI 10.17487/RFC5280, May 2008, . [RFC5480] Turner, S., Brown, D., Yiu, K., Housley, R., and T. Polk, "Elliptic Curve Cryptography Subject Public Key Information", RFC 5480, DOI 10.17487/RFC5480, March 2009, . [RFC5652] Housley, R., "Cryptographic Message Syntax (CMS)", STD 70, RFC 5652, DOI 10.17487/RFC5652, September 2009, . [RFC5869] Krawczyk, H. and P. Eronen, "HMAC-based Extract-and-Expand Key Derivation Function (HKDF)", RFC 5869, DOI 10.17487/RFC5869, May 2010, . [RFC5915] Turner, S. and D. Brown, "Elliptic Curve Private Key Structure", RFC 5915, DOI 10.17487/RFC5915, June 2010, . [RFC5958] Turner, S., "Asymmetric Key Packages", RFC 5958, DOI 10.17487/RFC5958, August 2010, . [RFC7748] Langley, A., Hamburg, M., and S. Turner, "Elliptic Curves for Security", RFC 7748, DOI 10.17487/RFC7748, January 2016, . [RFC8017] Moriarty, K., Ed., Kaliski, B., Jonsson, J., and A. Rusch, "PKCS #1: RSA Cryptography Specifications Version 2.2", RFC 8017, DOI 10.17487/RFC8017, November 2016, . [RFC8174] Leiba, B., "Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words", BCP 14, RFC 8174, DOI 10.17487/RFC8174, May 2017, . Ounsworth, et al. Expires 28 May 2026 [Page 53] Internet-Draft Composite ML-KEM November 2025 [RFC8410] Josefsson, S. and J. Schaad, "Algorithm Identifiers for Ed25519, Ed448, X25519, and X448 for Use in the Internet X.509 Public Key Infrastructure", RFC 8410, DOI 10.17487/RFC8410, August 2018, . [RFC8411] Schaad, J. and R. Andrews, "IANA Registration for the Cryptographic Algorithm Object Identifier Range", RFC 8411, DOI 10.17487/RFC8411, August 2018, . [RFC9629] Housley, R., Gray, J., and T. Okubo, "Using Key Encapsulation Mechanism (KEM) Algorithms in the Cryptographic Message Syntax (CMS)", RFC 9629, DOI 10.17487/RFC9629, August 2024, . [SEC1] Certicom Research, "SEC 1: Elliptic Curve Cryptography", May 2009, . [SEC2] Certicom Research, "SEC 2: Recommended Elliptic Curve Domain Parameters", January 2010, . [SP.800-185] National Institute of Standards and Technology (NIST), "SHA-3 Derived Functions: cSHAKE, KMAC, TupleHash, and ParallelHash", December 2016, . [SP.800-56Ar3] National Institute of Standards and Technology (NIST), "Recommendation for Pair-Wise Key-Establishment Schemes Using Discrete Logarithm Cryptography", April 2018, . [SP.800-56Cr2] National Institute of Standards and Technology (NIST), "Recommendation for Key-Derivation Methods in Key- Establishment Schemes", August 2020, . [SP.800-57pt1r5] National Institute of Standards and Technology (NIST), "Recommendation for Key Management: Part 1 – General", May Ounsworth, et al. Expires 28 May 2026 [Page 54] Internet-Draft Composite ML-KEM November 2025 2020, . [X.690] ITU-T, "Information technology - ASN.1 encoding Rules: Specification of Basic Encoding Rules (BER), Canonical Encoding Rules (CER) and Distinguished Encoding Rules (DER)", ISO/IEC 8825-1:2015, November 2015. [X9.62_2005] "Public Key Cryptography for the Financial Services Industry, The Elliptic Curve Digital Signature Algorithm (ECDSA)", November 2005. 12.2. Informative References [ANSSI2024] French Cybersecurity Agency (ANSSI), Federal Office for Information Security (BSI), Netherlands National Communications Security Agency (NLNCSA), and Swedish National Communications Security Authority, Swedish Armed Forces, "Position Paper on Quantum Key Distribution", n.d., . [Aviram22] Aviram, N., Dowling, B., Komargodski, I., Paterson, K. G., Ronen, E., and E. Yogev, "Practical (Post-Quantum) Key Combiners from One-Wayness and Applications to TLS", n.d., . [Bindel2017] Bindel, N., Herath, U., McKague, M., and D. Stebila, "Transitioning to a quantum-resistant public key infrastructure", 2017, . [BSI2021] Federal Office for Information Security (BSI), "Quantum- safe cryptography - fundamentals, current developments and recommendations", October 2021, . [ETSI.TS.103.744] ETSI, "ETSI TS 103 744 V1.2.1 CYBER-QSC; Quantum-safe Hybrid Key Establishment", March 2025, . Ounsworth, et al. Expires 28 May 2026 [Page 55] Internet-Draft Composite ML-KEM November 2025 [FIPS-140-3-IG] National Institute of Standards and Technology (NIST), "Implementation Guidance for FIPS 140-3 and the Cryptographic Module Validation Program", July 2024, . [GHP18] Giacon, F., Heuer, F., and B. Poettering, "KEM Combiners", 2018, . [I-D.ietf-lamps-kyber-certificates] Turner, S., Kampanakis, P., Massimo, J., and B. Westerbaan, "Internet X.509 Public Key Infrastructure - Algorithm Identifiers for the Module-Lattice-Based Key- Encapsulation Mechanism (ML-KEM)", Work in Progress, Internet-Draft, draft-ietf-lamps-kyber-certificates-10, 16 April 2025, . [I-D.ietf-pquip-pqt-hybrid-terminology] D, F., P, M., and B. Hale, "Terminology for Post-Quantum Traditional Hybrid Schemes", Work in Progress, Internet- Draft, draft-ietf-pquip-pqt-hybrid-terminology-06, 10 January 2025, . [I-D.sfluhrer-cfrg-ml-kem-security-considerations] Fluhrer, S., Dang, Q., Mattsson, J. P., Milner, K., and D. Shiu, "ML-KEM Security Considerations", Work in Progress, Internet-Draft, draft-sfluhrer-cfrg-ml-kem-security- considerations-03, 15 May 2025, . [RFC2986] Nystrom, M. and B. Kaliski, "PKCS #10: Certification Request Syntax Specification Version 1.7", RFC 2986, DOI 10.17487/RFC2986, November 2000, . [RFC4210] Adams, C., Farrell, S., Kause, T., and T. Mononen, "Internet X.509 Public Key Infrastructure Certificate Management Protocol (CMP)", RFC 4210, DOI 10.17487/RFC4210, September 2005, . Ounsworth, et al. Expires 28 May 2026 [Page 56] Internet-Draft Composite ML-KEM November 2025 [RFC4211] Schaad, J., "Internet X.509 Public Key Infrastructure Certificate Request Message Format (CRMF)", RFC 4211, DOI 10.17487/RFC4211, September 2005, . [RFC5639] Lochter, M. and J. Merkle, "Elliptic Curve Cryptography (ECC) Brainpool Standard Curves and Curve Generation", RFC 5639, DOI 10.17487/RFC5639, March 2010, . [RFC5914] Housley, R., Ashmore, S., and C. Wallace, "Trust Anchor Format", RFC 5914, DOI 10.17487/RFC5914, June 2010, . [RFC5990] Randall, J., Kaliski, B., Brainard, J., and S. Turner, "Use of the RSA-KEM Key Transport Algorithm in the Cryptographic Message Syntax (CMS)", RFC 5990, DOI 10.17487/RFC5990, September 2010, . [RFC6090] McGrew, D., Igoe, K., and M. Salter, "Fundamental Elliptic Curve Cryptography Algorithms", RFC 6090, DOI 10.17487/RFC6090, February 2011, . [RFC7292] Moriarty, K., Ed., Nystrom, M., Parkinson, S., Rusch, A., and M. Scott, "PKCS #12: Personal Information Exchange Syntax v1.1", RFC 7292, DOI 10.17487/RFC7292, July 2014, . [RFC7296] Kaufman, C., Hoffman, P., Nir, Y., Eronen, P., and T. Kivinen, "Internet Key Exchange Protocol Version 2 (IKEv2)", STD 79, RFC 7296, DOI 10.17487/RFC7296, October 2014, . [RFC8446] Rescorla, E., "The Transport Layer Security (TLS) Protocol Version 1.3", RFC 8446, DOI 10.17487/RFC8446, August 2018, . [RFC8551] Schaad, J., Ramsdell, B., and S. Turner, "Secure/ Multipurpose Internet Mail Extensions (S/MIME) Version 4.0 Message Specification", RFC 8551, DOI 10.17487/RFC8551, April 2019, . [RFC9180] Barnes, R., Bhargavan, K., Lipp, B., and C. Wood, "Hybrid Public Key Encryption", RFC 9180, DOI 10.17487/RFC9180, February 2022, . Ounsworth, et al. Expires 28 May 2026 [Page 57] Internet-Draft Composite ML-KEM November 2025 [SP800-131Ar2] Barker, E., Roginksy, A., and National Institute of Standards and Technology (NIST), "Transitioning the Use of Cryptographic Algorithms and Key Lengths", n.d., . [SP800-227] Alagic, G., Barker, E., Chen, L., Moody, D., Robinson, A., Silberg, H., Waller, N., and National Institute of Standards and Technology (NIST), "Recommendations for Key- Encapsulation Mechanisms", September 2025, . [X-Wing] Barbosa, M., Connolly, D., Duarte, J., Kaiser, A., Schwabe, P., Varner, K., and B. Westerbaan, "X-Wing The Hybrid KEM You’ve Been Looking For", 9 January 2024, . Appendix A. Maximum Key and Ciphertext Sizes The sizes listed below are maximum values: several factors could cause fluctuations in the size of the traditional component. For example, this could be due to: * The RSA public key (n, e) allows e to vary in size between 3 and n - 1 [RFC8017]. Note that the size table below assumes the recommended value of e = 65537, so for RSA combinations it is in fact not a true maximum. * When the underlying RSA or EC value is itself DER-encoded, integer values could occasionally be shorter than expected due to leading zeros being dropped from the encoding. By contrast, ML-KEM values are always fixed size, so composite values can always be correctly de-serialized based on the size of the ML-KEM component. Size values marked with an asterisk (*) in the table are not fixed but maximum possible values for the composite key or ciphertext. Implementations MUST NOT perform strict length checking based on such values. Non-hybrid ML-KEM is included for reference. Ounsworth, et al. Expires 28 May 2026 [Page 58] Internet-Draft Composite ML-KEM November 2025 +============================+========+=========+============+====+ | Algorithm | Public | Private | Ciphertext | SS | | | key | key | | | +============================+========+=========+============+====+ | id-alg-ml-kem-768 | 1184 | 64 | 1088 | 32 | +----------------------------+--------+---------+------------+----+ | id-alg-ml-kem-1024 | 1568 | 64 | 1568 | 32 | +----------------------------+--------+---------+------------+----+ | id- | 1454* | 1258* | 1344 | 32 | | MLKEM768-RSA2048-SHA3-256 | | | | | +----------------------------+--------+---------+------------+----+ | id- | 1582* | 1834* | 1472 | 32 | | MLKEM768-RSA3072-SHA3-256 | | | | | +----------------------------+--------+---------+------------+----+ | id- | 1710* | 2415* | 1600 | 32 | | MLKEM768-RSA4096-SHA3-256 | | | | | +----------------------------+--------+---------+------------+----+ | id- | 1216 | 96 | 1120 | 32 | | MLKEM768-X25519-SHA3-256 | | | | | +----------------------------+--------+---------+------------+----+ | id-MLKEM768-ECDH- | 1249 | 115 | 1153 | 32 | | P256-SHA3-256 | | | | | +----------------------------+--------+---------+------------+----+ | id-MLKEM768-ECDH- | 1281 | 128 | 1185 | 32 | | P384-SHA3-256 | | | | | +----------------------------+--------+---------+------------+----+ | id-MLKEM768-ECDH- | 1249 | 116 | 1153 | 32 | | brainpoolP256r1-SHA3-256 | | | | | +----------------------------+--------+---------+------------+----+ | id- | 1966* | 1834* | 1952 | 32 | | MLKEM1024-RSA3072-SHA3-256 | | | | | +----------------------------+--------+---------+------------+----+ | id-MLKEM1024-ECDH- | 1665 | 128 | 1665 | 32 | | P384-SHA3-256 | | | | | +----------------------------+--------+---------+------------+----+ | id-MLKEM1024-ECDH- | 1665 | 132 | 1665 | 32 | | brainpoolP384r1-SHA3-256 | | | | | +----------------------------+--------+---------+------------+----+ | id-MLKEM1024-X448-SHA3-256 | 1624 | 120 | 1624 | 32 | +----------------------------+--------+---------+------------+----+ | id-MLKEM1024-ECDH- | 1701 | 146 | 1701 | 32 | | P521-SHA3-256 | | | | | +----------------------------+--------+---------+------------+----+ Table 3: Maximum size values of composite ML-KEM Ounsworth, et al. Expires 28 May 2026 [Page 59] Internet-Draft Composite ML-KEM November 2025 Appendix B. Component Algorithm Reference This section provides references to the full specification of the algorithms used in the composite constructions. +================+========================+===================+ | Component KEM | OID | Specification | | Algorithm ID | | | +================+========================+===================+ | id-ML-KEM-768 | 2.16.840.1.101.3.4.4.2 | [FIPS.203] | +----------------+------------------------+-------------------+ | id-ML-KEM-1024 | 2.16.840.1.101.3.4.4.3 | [FIPS.203] | +----------------+------------------------+-------------------+ | id-X25519 | 1.3.101.110 | [RFC7748], | | | | [RFC8410] | +----------------+------------------------+-------------------+ | id-X448 | 1.3.101.111 | [RFC7748], | | | | [RFC8410] | +----------------+------------------------+-------------------+ | id-ecDH | 1.3.132.1.12 | [RFC5480], | | | | [RFC5915], [SEC1] | +----------------+------------------------+-------------------+ | id-RSAES-OAEP | 1.2.840.113549.1.1.7 | [RFC8017] | +----------------+------------------------+-------------------+ Table 4: Component Encryption Algorithms used in Composite Constructions +==================+=======================+===================+ | Elliptic CurveID | OID | Specification | +==================+=======================+===================+ | secp256r1 | 1.2.840.10045.3.1.7 | [RFC6090], [SEC2] | +------------------+-----------------------+-------------------+ | secp384r1 | 1.3.132.0.34 | [RFC6090], [SEC2] | +------------------+-----------------------+-------------------+ | secp521r1 | 1.3.132.0.35 | [RFC6090], [SEC2] | +------------------+-----------------------+-------------------+ | brainpoolP256r1 | 1.3.36.3.3.2.8.1.1.7 | [RFC5639] | +------------------+-----------------------+-------------------+ | brainpoolP384r1 | 1.3.36.3.3.2.8.1.1.11 | [RFC5639] | +------------------+-----------------------+-------------------+ Table 5: Elliptic Curves used in Composite Constructions Ounsworth, et al. Expires 28 May 2026 [Page 60] Internet-Draft Composite ML-KEM November 2025 +=============+========================+===============+ | HashID | OID | Specification | +=============+========================+===============+ | id-sha3-256 | 2.16.840.1.101.3.4.2.8 | [FIPS.202] | +-------------+------------------------+---------------+ Table 6: Hash algorithms used in Composite Constructions Appendix C. Fixed Component Algorithm Identifiers Many cryptographic libraries are X.509-focused and do not expose interfaces to instantiate a public key from raw bytes, but only from a SubjectPublicKeyInfo structure as you would find in an X.509 certificate, therefore implementing Composite ML-KEM in those libraries requires reconstructing the SPKI for each component algorithm. In order to aid implementers and reduce interoperability issues, this section lists out the full public key for each component algorithm. *ML-KEM-768* ASN.1: algorithm AlgorithmIdentifier ::= { algorithm id-alg-ml-kem-768 -- (2.16.840.1.101.3.4.4.2) } DER: 30 0B 06 07 60 86 48 01 65 03 04 04 02 *ML-KEM-1024* ASN.1: ASN.1: algorithm AlgorithmIdentifier ::= { algorithm id-alg-ml-kem-1024 -- (2.16.840.1.101.3.4.4.3) } DER: 30 0B 06 07 60 86 48 01 65 03 04 04 03 *RSA-OAEP - all sizes* Ounsworth, et al. Expires 28 May 2026 [Page 61] Internet-Draft Composite ML-KEM November 2025 ASN.1: algorithm AlgorithmIdentifier ::= { algorithm id-RSAES-OAEP, -- (1.2.840.113549.1.1.7) parameters RSAES-OAEP-params { hashFunc [0] id-sha256, -- (2.16.840.1.101.3.4.2.1) maskGenFunc [1] mgf1SHA256Identifier, pSourceFunc [2] pSpecifiedEmpty } } where mgf1SHA256Identifier AlgorithmIdentifier ::= { algorithm id-mgf1, -- (1.2.840.113549.1.1.8) parameters sha256Identifier } sha256Identifier AlgorithmIdentifier ::= { id-sha256, NULL } DER: 30 4D 06 09 2A 86 48 86 F7 0D 01 01 07 30 40 A0 0F 30 0D 06 09 60 86 48 01 65 03 04 02 01 05 00 A1 1C 30 1A 06 09 2A 86 48 86 F7 0D 01 01 08 30 0D 06 09 60 86 48 01 65 03 04 02 01 05 00 A2 0F 30 0D 06 09 2A 86 48 86 F7 0D 01 01 09 04 00 *ECDH NIST-P-256* ASN.1: algorithm AlgorithmIdentifier ::= { algorithm id-ecPublicKey -- (1.2.840.10045.2.1) parameters ANY ::= { AlgorithmIdentifier ::= { algorithm secp256r1 -- (1.2.840.10045.3.1.7) } } } DER: 30 13 06 07 2A 86 48 CE 3D 02 01 06 08 2A 86 48 CE 3D 03 01 07 *ECDH NIST-P-384* Ounsworth, et al. Expires 28 May 2026 [Page 62] Internet-Draft Composite ML-KEM November 2025 ASN.1: algorithm AlgorithmIdentifier ::= { algorithm id-ecPublicKey -- (1.2.840.10045.2.1) parameters ANY ::= { AlgorithmIdentifier ::= { algorithm secp384r1 -- (1.3.132.0.34) } } } DER: 30 10 06 07 2A 86 48 CE 3D 02 01 06 05 2B 81 04 00 22 *ECDH NIST-P-521* ASN.1: algorithm AlgorithmIdentifier ::= { algorithm id-ecPublicKey -- (1.2.840.10045.2.1) parameters ANY ::= { AlgorithmIdentifier ::= { algorithm secp521r1 -- (1.3.132.0.35) } } } DER: 30 10 06 07 2A 86 48 CE 3D 02 01 06 05 2B 81 04 00 23 *ECDH Brainpool-256* ASN.1: algorithm AlgorithmIdentifier ::= { algorithm id-ecPublicKey -- (1.2.840.10045.2.1) parameters ANY ::= { AlgorithmIdentifier ::= { algorithm brainpoolP256r1 -- (1.3.36.3.3.2.8.1.1.7) } } } DER: 30 14 06 07 2A 86 48 CE 3D 02 01 06 09 2B 24 03 03 02 08 01 01 07 *ECDH Brainpool-384* Ounsworth, et al. Expires 28 May 2026 [Page 63] Internet-Draft Composite ML-KEM November 2025 ASN.1: algorithm AlgorithmIdentifier ::= { algorithm id-ecPublicKey -- (1.2.840.10045.2.1) parameters ANY ::= { AlgorithmIdentifier ::= { algorithm brainpoolP384r1 -- (1.3.36.3.3.2.8.1.1.11) } } } DER: 30 14 06 07 2A 86 48 CE 3D 02 01 06 09 2B 24 03 03 02 08 01 01 0B *X25519* ASN.1: algorithm AlgorithmIdentifier ::= { algorithm id-X25519 -- (1.3.101.110) } DER: 30 05 06 03 2B 65 6E *X448* ASN.1: algorithm AlgorithmIdentifier ::= { algorithm id-X448 -- (1.3.101.111) } DER: 30 05 06 03 2B 65 6F Appendix D. Comparison with other Hybrid KEMs D.1. X-Wing This specification borrows extensively from the analysis and KEM combiner construction presented in [X-Wing]. In particular, X-Wing and id-MLKEM768-X25519-SHA3-256 are largely interchangeable. The one difference is that X-Wing uses a combined KeyGen function to generate the two component private keys from the same seed, which gives some additional binding properties. In order to allow for re-use of existing hardeneded certified cryptographic modules (for example, getting the RSA component from an existing smartcard), this specification keeps the key generation for both components separate and only loosely-specified so that implementers are free to use an existing certified hardware or software module for one or both Ounsworth, et al. Expires 28 May 2026 [Page 64] Internet-Draft Composite ML-KEM November 2025 components. D.2. ETSI CatKDF [ETSI.TS.103.744] section 8.2.3 defines CatKDF as: 1) Form secret = psk || k1 || k2. 2) Set context = f(info, MA, MB), where f is a context formatting function. 3) key_material = KDF(secret, label, context, length). 4) Return key_material. MA shall contain all of the public keys. MB shall contain all of the corresponding public keys and ciphertexts. The main difference between the Composite ML-KEM combiner and the ETSI CatKDF combiner is that CatKDF makes the more conservative choice to bind the public keys and ciphertexts of both components, while Composite ML-KEM follows the analysis presented in [X-Wing] that while preserving the security properties of the traditional component requires binding the public key and ciphertext of the traditional component, it is not necessary to do so for ML-KEM thanks to the rejection sampling step of the Fujisaki-Okamoto transform. Additionally, ETSI CatKDF can be instantiated with either HMAC [RFC2104], KMAC [SP.800-185] or HKDF [RFC5869] as KDF. Since this specification uses SHA3-256 as the KDF for all variants, there is no equivalent construction of CatKDF. Appendix E. Examples of KEM Combiner Intermediate Values This section provides examples of constructing the input for the KEM Combiner, showing all intermediate values. This is intended to be useful for debugging purposes. See Section 4.4 for additional information. Each input component is shown. Note that values are shown hex- encoded for display purposes only, they are actually raw binary values. * mlkemSS is the shared secret produced by the ML-KEM encapsulate or decapsulate function which is always 32 bytes. * tradSS is the shared secret produce by the traditional algorithm. * tradCT is either an elliptic curve public key or an RSA-OAEP ciphertext depending on the algorithm chosen. Ounsworth, et al. Expires 28 May 2026 [Page 65] Internet-Draft Composite ML-KEM November 2025 * tradPK is the public key of the traditional component (elliptic curve or RSA) and therefore fixed-length. * Label is the specific KEM Combiner Label for this composite algorithm. See Section 7 Next, the Combined KDF Input is given, which is simply the concatenation of the above values. Finally, the KDF Function and the ss Output are shown as outputs. The ss is the Composite ML-KEM shared-secret generated by applying the KDF to the Combined KDF Input. Examples are given for each recommended Composite ML-KEM algorithm from Section 11.3. Example 1: Ounsworth, et al. Expires 28 May 2026 [Page 66] Internet-Draft Composite ML-KEM November 2025 Example of id-MLKEM768-ECDH-P256-SHA3-256 Combiner function output. # Inputs mlkemSS: 7a87233aa6cfacb3f28776785ee1c3ae0175d502ec6a6ef5f12ae426e1b163ef tradSS: ac00870310b72b5a1820e787ff9d553b05275bf70f3ffa9b8bb821fc9964bb89 tradCT: 04d2d4e8a247899f779b6233efabe17d328a0fb3772e5e37eae3405dec 1909e31984c3ec4cfd462d76d84d178ea104a38122b4f5942ba4a95a62e78c68938 8158d tradPK: 04f080fa8049e82f6a247555cdf04b927d65d9502673ce87c299344aba bb87de837a22f3704f471bffc04d66807ffccbbf3fde99e12afe3c5a41e05f80f92 36aa9 Label: 4d4c4b454d3736382d50323536 (ascii: "MLKEM768-P256") # Combined KDF Input: # mlkemSS || tradSS || tradCT || tradPK || Label Combined KDF Input: 7a87233aa6cfacb3f28776785ee1c3ae0175d502ec6a6ef 5f12ae426e1b163efac00870310b72b5a1820e787ff9d553b05275bf70f3ffa9b8b b821fc9964bb8904d2d4e8a247899f779b6233efabe17d328a0fb3772e5e37eae34 05dec1909e31984c3ec4cfd462d76d84d178ea104a38122b4f5942ba4a95a62e78c 689388158d04f080fa8049e82f6a247555cdf04b927d65d9502673ce87c299344ab abb87de837a22f3704f471bffc04d66807ffccbbf3fde99e12afe3c5a41e05f80f9 236aa94d4c4b454d3736382d50323536 # Outputs # ss = SHA3-256(Combined KDF Input) ss: e8a3638eff395201ae3577199e0655c636974e3d9b8746e8ae4511e84f7158d8 Example 2: Ounsworth, et al. Expires 28 May 2026 [Page 67] Internet-Draft Composite ML-KEM November 2025 Example of id-MLKEM768-X25519-SHA3-256 Combiner function output. # Inputs mlkemSS: 3553c8859d5013fa95acdaf2e3098f48c513eec4877316d8b118e20848ffe686 tradSS: 8cea86ce190015374dc62e392f62873e879f4b91b4e14833bbc90a3861ec8015 tradCT: df1cd647a0794c5aff520844148660491922d6b8172e7f93faf722632171b70d tradPK: 8d21e8c462970d8b8600480f8587277393f113a4e2297286bde54b65aa334311 Label: 5c2e2f2f5e5c (ascii: "\.//^\") # Combined KDF Input: # mlkemSS || tradSS || tradCT || tradPK || Label Combined KDF Input: 3553c8859d5013fa95acdaf2e3098f48c513eec4877316d 8b118e20848ffe6868cea86ce190015374dc62e392f62873e879f4b91b4e14833bb c90a3861ec8015df1cd647a0794c5aff520844148660491922d6b8172e7f93faf72 2632171b70d8d21e8c462970d8b8600480f8587277393f113a4e2297286bde54b65 aa3343115c2e2f2f5e5c # Outputs # ss = SHA3-256(Combined KDF Input) ss: 491538ed1a0a9bf9bd5622a25e1f8139209f2336dab28a22b61b43523cf7fecc Example 3: Ounsworth, et al. Expires 28 May 2026 [Page 68] Internet-Draft Composite ML-KEM November 2025 Example of id-MLKEM1024-ECDH-P384-SHA3-256 Combiner function output. # Inputs mlkemSS: 4ffb4e09862a6b2de28a94f1c45c0ff156427f7889c8cafdd5ccd05c18e061aa tradSS: 78d093eca7248340a89dd0109f6f460f0cd7d4d0337b3121695870ee1d 0afdee312e47708c4fa2f7798ef8fbd02ea0da tradCT: 04b8bec46bf81ac8bd1eabf8d6e9dff02439a1e44e0e65a6df7a73f0b2 13b331abd51422fb0d732f3717f5d7955c267a08648998f793fac2112e7abd8a8bf c5fe3323acaba0272e4e2e95b5ec8508e93998a26338df5249cb09fd7b421cecd26 0b tradPK: 04945e7f006691a33aeddd4b9f1a63cf2b322269225a4e20fbf5fd7448 038c7aa27a9ed02998486dc3cb281a8d461db63ad3e7eed8e3960333a60f6e6b295 a36bc109be18e3bbf9eb7495b6a2badedc81f7b554edb5c940d14f3ee903788c7de c4 Label: 4d4c4b454d313032342d50333834 (ascii: "MLKEM1024-P384") # Combined KDF Input: # mlkemSS || tradSS || tradCT || tradPK || Label Combined KDF Input: 4ffb4e09862a6b2de28a94f1c45c0ff156427f7889c8caf dd5ccd05c18e061aa78d093eca7248340a89dd0109f6f460f0cd7d4d0337b312169 5870ee1d0afdee312e47708c4fa2f7798ef8fbd02ea0da04b8bec46bf81ac8bd1ea bf8d6e9dff02439a1e44e0e65a6df7a73f0b213b331abd51422fb0d732f3717f5d7 955c267a08648998f793fac2112e7abd8a8bfc5fe3323acaba0272e4e2e95b5ec85 08e93998a26338df5249cb09fd7b421cecd260b04945e7f006691a33aeddd4b9f1a 63cf2b322269225a4e20fbf5fd7448038c7aa27a9ed02998486dc3cb281a8d461db 63ad3e7eed8e3960333a60f6e6b295a36bc109be18e3bbf9eb7495b6a2badedc81f 7b554edb5c940d14f3ee903788c7dec44d4c4b454d313032342d50333834 # Outputs # ss = SHA3-256(Combined KDF Input) ss: 9704485a39219ae696eb9978d24d7641bb2743b1412844808e81cc00afc174ca Appendix F. Test Vectors The following test vectors are provided in a format similar to the NIST ACVP Known-Answer-Tests (KATs). Ounsworth, et al. Expires 28 May 2026 [Page 69] Internet-Draft Composite ML-KEM November 2025 The structure is that a global cacert is provided which is used to sign each KEM certificate. Within each test case there are the following values: * tcId the name of the algorithm. * ek the encapsulation public key. * x5c the X.509 certificate of the encapsulation key, signed by the cacert. * dk the raw decapsulation private key. * dk_pkcs8 the decapsulation private key in a PKCS#8 object. * c the ciphertext. * k the derived shared secret key. Implementers should be able to perform the following tests using the test vectors below: 1. Load the public key ek or certificate x5c and perform an encapsulation for it (you should obtain valid ct and k values, but they will not match the ones in the test vector since Encap() is randomized.) 2. Load the decapsulation private key dk or dk_pkcs8 and the ciphertext c and perform a Decaps() operation to ensure that the same shared secret key k is derived. Test vectors are provided for each underlying ML-KEM algorithm in isolation for the purposes of debugging. Due to the length of the test vectors, some readers will prefer to retrieve the non-word-wrapped copy from GitHub. The reference implementation written in python that generated them is also available. https://github.com/lamps-wg/draft-composite-kem/tree/main/src { "cacert": "MIIVpzCCCKSgAwIBAgIUELslaxaD7w1XIkGXIz3lWDj6thEwCwYJYIZIA WUDBAMSMD0xDTALBgNVBAoMBElFVEYxDjAMBgNVBAsMBUxBTVBTMRwwGgYDVQQDDBNDb 21wb3NpdGUgTUwtS0VNIENBMB4XDTI1MTEwNjEwMDEwOVoXDTM1MTEwNzEwMDEwOVowP TENMAsGA1UECgwESUVURjEOMAwGA1UECwwFTEFNUFMxHDAaBgNVBAMME0NvbXBvc2l0Z SBNTC1LRU0gQ0EwggeyMAsGCWCGSAFlAwQDEgOCB6EA7IgeAYwmSE4u/PLcttUc3WtsL Ounsworth, et al. Expires 28 May 2026 [Page 70] Internet-Draft Composite ML-KEM November 2025 /+DceGIKRDlyHw1FnrHoKsxSZolBgyq6gPeFmk4qJ07+b6auAS3RkgqQVHMRSRN8IJZ4 c3mMiAe41OPJs5soK3iKnkMYLMMeKSrdUJExPpF1mZXpYnE3ehrfQl6aRTeEZZwQBCjB YvO1Y9+sKhIBtGBcI8ysddf9yKoAYblraHuas4Mien/iACZTJK6FceiUSbUQo/a/PQau 6EWv+BYci5T/4NfotUQ5stqd6+noh9mgiSssyebSaz9ntsz5xGmcupPZVygSNumvuCpa duhf+Y6yQ4ERxjNvqJVyDn/M7KaHGI1/z0HlXPu0SjBc8gCWSrHmNX8gLqUzEWtvDyNg JdabRpTQnso3dPF7Wt4FZVnL40/dSSUFDBkBheX1gMQ++nHPbf8hFdGK/brDn2t9sMmi MHjb4qaX+oRB6LNPpe7XdesPPPPoCta3SiN+1pBNzl2yc2VR1j7N1/rPhdRltf+QZfb/ jM6RU9h9enue1hvvMuNZ+7LejSNhngO0TKEKea/leZwiUwEnNOHMz7iWchEey827xI55 oAM2jSRJKNUo65f/OGcTX4icDjoM/sfAYj//KsEoLeVZVD+BB7DgLVMRvr44qmsSDeMg 1aNRDU6b4Ie3QbHGhAYkg8DMk9VIZ7XXgDx5hLDvirFXceQ9/LiIdT032DYNgbwXK18F WwoQ5w8Bgub/Tof9Olg34sSqjjT+EItytM8Q25Qyq/IS8Hc17zTn9gk/S5RV60Ro3AfO xzVj3J2dRWq/Xv/WQ1xO84LQ92m4gAfb+Rz1NIkWPsY1TJlLDoRbujRK5A3LLs1hV8X/ lN9NkALcT5tJFhmsQZqabGHr1HvSfZUv10aVhwQcrD73i+8HHBBIXgBx76mvsI40qA+Y 25lV9IN168pA28TXHeo1TbmOxOF9i6q6vGCKFvA6VtKNKFzVkIkB1o+3e4wBdzOr6URg w57QRQzFJX09cUjzGGYGJT4m4oatAZuOa1oSq4nvIyzA1htlTCTRrmWB8kSSOn9jVwcX 16av17aGxyuOYeUPq0IOkYWv5V/qAZ5YyDXONSsOAjO1LjZN4jaug0norXJurQoAR/10 7Iv+J7dfDHtu3dnt2SCWqjwoecehdPpyr5us3yiajDbzTKa8fPW5YmBenCjYFB9UpFsU Oz7N1eJ9BoB67wDIQzFbGnVbYsOm5QChTFjJEIaukDmgsre25kszvvByB490RSqdqp1n jdbYYjMfprKx535NfKlU/+M7rU/t/FmimWr94BtfiUcYuYwOm07sd/ovhKUXKlAXgSQ3 618pc5whJ0dlYUA06XCpv5Xfq292p1y2KJxA4ZwxEjlnLjerZ1zCOF8JoTgFziorV6+j G6aCprGJR5LTtIILPc9rEQCgtCUvygF7+Q/IdYTLABjqPQN5X7KzaBR3rgRsH2x3i+jc 8QPN8j+16AvxrERP3qdBzR+FPTawJWFApWhcLm72QT5O0gSxhe1q0GPdtKmZJneTiL3m dy2g9BlEugaq36EZf+BuSLn20wZsP/oyVCEpSp5Ps6cGZUpcfxMOFVT2sJgEJKfPnHMQ o1u8Mu2Idaan4gvDRBElHUavgyFjzttZ121WDGCxzVu60BPukFJUlDBP1oMpzrrIYxpq iksrZDcY5TbORTcYjoJZ5EzeHnV1fKA8tCkk2YxGisuYW+M3voSPfvDW0yyqgBeajVdP Ne1klLha/KwKbN11Ysg0Nki0xzHaAOTDLfE/iyzR7wSh5z+FWAu1Epn66LRiPGS46453 MJRlmusaf6+8lT79SNkoCSO5j1XlWl9uKZn5xelWTYgQufXfL6ZUooJ6vg1Um6420pwN GJIceyspORTVQcUUS2SYSJN9i2GN3LL8R8AnUy2CF2nKLS8UBX/3MpNKSPTObOFfXgqt S3+mcLqQnjDQ1a/NnBL4AMf63AfPk6d1JJTjsc89TvXyQXZtljPJh205CMa5La3eQdGi eF+DQInhI+bl6fUg7B3ubIipuc6TciJt9DEGQ60TqkGPSxncdLZMEV1vG3eJtTrbPMlW WAV5jYpIs6tqRkb6ZSAWE5uk5VAsoh1ND3Wjdn0t7vKoPr9sv6ypdRvAu2M9U69LzQvg 5+prWmND8UsmUqZq0+CcIqquvfzuBjyyZVOxZrGvqdbB3OjMYQXwKabBOmS0IKlCoDK1 l6ejwTfbE3w08c+bMxQi5c6h783G5hGztQRkLo7iRROXhwQiwBRjkBsjiwPFpVK81r5a Mpx7lR+1g5U6gqIudvK2yhAFbXcGoGlk7BZH8eWImRDGshQDsCL/ND2znMQSY6wKBgQV eQESx1abL/jGHI80NHYKVES9leVC5LDCSln7m/EelwGOii0xAjtaNOgeCDbh8U8ouPPI yW1zrMwv3X0uE7dcakB8cL6KxavOFKgSBTef+2pbdxqqaRiEvuuMsMtVhiVi4B4FX+Yd qfTZ5U2OYKDTNC39L9xvUppNND2GYIXfvy2myw4r6Cow14n6VwdbYCVq82LnvLPQXwpz Rs0Xw1egatrz0c1mJZ/1ZVLkbGxbJB26jLEZOCjaY0j3f0JpcEZXlJE83mb1pGjJjAkM A4GA1UdDwEB/wQEAwICBDASBgNVHRMBAf8ECDAGAQH/AgECMAsGCWCGSAFlAwQDEgOCD O4Ah/zEWRc9TRGrizub2QwV1cBeB+rBVZ9rai5W3QBLcpd2uoVmTyINmchuh3zV7IMSr YpNybgoxVxXberxeew5DcSwwfFO0ue1CgmGHHwgk2kZ42ceDHMB28BtbYXfgml1qP2fh jQbAZScWt6x5fSDvQp9tZ6WdIBRi53GTBV/qIh9o5t8iSx2Oa5eHSNXuuji/bgE5Gmpu sM4dPhTp5S53Td3CsZFCwq2w/PfUcVekG0evDJaXb6EZ255JyaMIBQfOubeWoD6/+Dme MtrgdABbBX4IFiN9Ppkbzl2V6jtur1RFuF2usB3ZAdFhiG5mMQg628JD0BgGTxiVcwx7 f9EEZ3x/LH10OwgvlHlhJydXouTNxDY4C9ca7D/RxWM/zu4BOiX8WSUR2OmtCZHWoyr2 POEbCFfT/lfuKRLgzIbvqZdz7WmH3OKtqcrxdZZiyciyfv2mQ4EXQFaLRZuUpeCrSHpM GXJaopx1wxcFX18P9UrITMlgpRiHEG2KZee7UYc/tZEmMlqZNVw4miYRejhCNejARQCF NKgddiduBVsNoCD0f4pIh0jAvuak5RTkJe+epIEWt89o3/cXhrlAdYr6sFKbmWH29gyI Ounsworth, et al. Expires 28 May 2026 [Page 71] Internet-Draft Composite ML-KEM November 2025 r/K+VZvguaf1GgiI/PHmK08OJyQD1pMAdtncBC06yHMUCjrSu+3EaiYObMYprTHW+be6 8MHi5jla1ae6B0aJGtLVOq8Ex0sHm9YH/Q+uOVHZHSYCJslEwZkKydOpTRpdCHLXjZJE dz8PHnjsPFxKyDroKhnoSFSfiOcbOvu+ItERORKJQ/DTXAaJRFOFSqSN1FTagEsUxqIi 3bgFBgJPKeakRGsw2zGFa7gIDbQwpG7ImuSElkG9t0fxrkMTxYEL/fJ0GfOGT276s+MR HJIAIDljrneAzRaTdwzbem7/G53BWJBbYAk6ZkXhJ2PZd9v66W7tb2hEHDAWeZ49fJ+i aeGLbBrjgB2QWr6cVEl12FW546M+4Azfzyp8C/ne9C4XQ6jOhrCO8P8vGbNsnpoiut8k 87u/pFyvIUjL8vQPJgqgPPcZ64D9KIkvdz/tx77O4OyE4NcoQmxNC+PUIfIIGTfkCb4H PItZ1y56DvOeX/2EjVGNiaaQaw1T5uQbhVoHhg1e5pq7VJMEXDhSVZSb7Tx4gL93u8HK 9lvOnBzicFORGQWVKowhFuybKrzyHn1h1EiMa3wy+0JzZCr5dUtcq6Ad1JP0s84oZVis 1mKcp9kGgbzKIaZTWr+LBGvR7Ar1lGZbx9U8+zgvj1M1FpqvCVmO91C1Sd+L8k4ex0eP yE93oWWv250hlkUCr6CwiPw1t1ONXKdomkfRpTOxlMlJ5xUK1sRwHiEiXCwHAzAonkkg xBWWIk5Xo6OjoNxDxK/6ManZq14frc3TF39LnKjqU2NUsQVWzA5E16xfyFEfPQhw5pgn T7FQ8jckT5sF18PsCVNZBpBS0kUN7GnCSi1NPsTCcWyOaDZAkycELbTXflbLswlTf5QI i0x6sLx29f633qlkqGQg42P4DGikV653QnxKL8YxAfgDB0kCklBoH+h1wNJGA2lRpgfn 9sg4bGC19w6foURMJGTYi4Hrn+MmRrPoZe+2ueFcS04kpJiKj9dtEIfdmRioFUAQCM5E /vgnfszgvm+/6WlmzMq7VFbznNXKEO/KITLwZIExxzFDj3Z6LlV0rNmuc6FE6p74zyzd uUEv88MA5Ppk97t2oPCOSfMgoqWw5uROqq2S9CvWz30TfKmfj0yCH7wR69MZLAWo3b5g K/oCFJc9yzQno7t/MFL7Xy7aABNO2WcvsmHSWG4GrkwrWFkWLk4G9Qzi4a4VO+Nq5KRr laH88T6XZ1pvc+077w9pcisCmH14M4aFRSScUqT8apszyfCsGmuQkFGWVJPs7iNQ1UT3 7fp+NGCrH1773wBO+M43XvsenVJoaebDlbGCbCiQO0EFFpKy+oNuuKgGD30kxIDXNc3P o6R1qgHtWal1LmnG1H92vw5SMXwsqs4XLKcauz/OKs3EpGSuRVCprVZ1lHPsQwaU+nCN JM1e0CzwXjHbdIxu9A6+kVg+bLVD/fXv9rmacF1LHe3Z56wJ7KqXS3bgqQL7rqrAKqbd 9Zo1DDzImqmbr0vDelLQvnB1pP9qQu9DJ1w33j4elwHLtksjFL9s8F1gqQv1EVLHKNtX Jt8VOJem83RAp5NUp8bN6G6tRDex6xa0AtM64YC0XbTqdGcG3+GH7fpgPM5R+Fd6peLO wFmFiErT+yD8Gy/lOQtmnpYkfptYBRytwGfZgH04mc/0VgUZ33sl1TvqhLaB0sjwyM1n Cw0wia5MiD/jL6DzpE6D8cY2flE85UEFJ2d66ryIq5vkJZ/aA/4vr6nAsTtfBaLnPPiM neqNaRDGGpOfIAdnekHEAxNOYPDssVTe7UZD6L8+MELbWJyog0NufW08eQ85mpSxaRcB uYsTQOB37dvqXxHdCKmEHyEVBAegLIg28a+046+bNocVHqLGz7D+WzJ1fy0Yd11mT7UZ qSTNwDz1K4q0smuBk7ISn8nFtARSifntucEZzAWlIvETluyW+Ysw3BBfEflQOb6A807B 3GYj1JGwsfEMFmSPK5v/RlaE9bDOILfiNRs9CQdl2R7W3TcDQKUpJ3fDMihV/Hi4abRw 12H4DIBofT8FY5RpwkkRD7Rsvlep5YMBJHOrSUKaQCZ5zH9I2VQLSkgiroxzBtKD01uv 6ovPbI0/28uXoXd8bVyExqdOUk5Gt+/c74x1mJgu/EBkFYNFNMUuCw459EIeWxJLEdg0 JhhX+HvA901T0zDqZK/DW94DAHiFBlm4sxKJN8wEbbiG3iGPUy5CEV7dB/eLxS5ttNfi UX1OmUzI2jd1+9MFME6xMUD/Bwsi/1wKQiCfxet8mIEdYYDPu6bXEMTO4+pG7ZQqX4Me BFeLyWphLyRAqHkY9C8zpPA0e3mGdSDiH3X44MDz0QUK66T8iP1hZJIbBjCo+5MDp53K bJseb9bMOtOR/SwQ11hfE1nDiQJBdUuh6+Mv7Ao8+niDxBI6nTDp++OxII0viXDCAFbW 9WOxlYd1l0NDoVKz3I1hQH43SPGJX9Qmwdi2Urv23RVdGwL1dgFAL3scI4jEkIER14q0 3uB3NIyXQ8YvYvLWuuPfhTUp0Ybi5Cw8yuhiNrVKWi7JSxC9fjur3+1LWO/JeCHpUOCw +Dvwmqs9rdr8/d95KRGmyM0IOhu7b3XTIIX60JmikQeNonrWjV2CT7Ln4b+nAgFVYJ6O den/cSbISIQbVdohUI16aKPIDEDXO2hwgtsQUPlNMO7y9DnLDkYzsRbKxkSjbGOtZmkh d57uJwkh3Xj6jaYmxFk+STgJlsrc3YdusTCokBYT+zdOxUimc6SwUKorRXhfVHCC5PoO QQGxWVPoyYEe0Ggw9v9qlsKltwYFISr1iIP0CFhQLfKu0rTTfReSOtWriPfRFM8tH26L hxjC8lXMc8cMjGcvm2HScc0ynRmjiLJmzlQyJ0pIaZNY5lcBZvPc48rd/A+fEhKZC02c jXDMiuserRjAs+DM9WoG9EcX6cpHMnvBO91y6/PX1TSvGOZowksQEQxF1imrL16CNmiS d2OnrqpUMjKVGvGdituDBTzCilCLZaJ2OJogswnw94syUJcjjVvlXKSD6JifESvGOj66 C0rwWbsWYiVhQy5cOH+Gv2OhDT0ECa1yY/qal+tj1WPGbfoeQo3C8fSCxJr+1bawdKCF p4pKsmRj7t1c7OyoyBlBtiqNE5YkjCgwLYPe7v0/ROO+HHB8AfQcPJejfw6VLGxrMc2q DQKQPjx1UtPnqL4NffJfCQ2OReJxaqQBh6T1qr+90oZZ+4b/hsqXDgXP1cLABHWJFKlB Ounsworth, et al. Expires 28 May 2026 [Page 72] Internet-Draft Composite ML-KEM November 2025 PHiQ0xUby8rrypPJDKnV21RyL9RrtXR/vZTHS9WCFScEB26sdGjuZ7/iB/ST9MNMreSL So5mnfTim2h4oAe7wGyi7nmF4VmfDAPR3uzERl0V7ggRqOxTYyiHJ8xVqkqdA2BQ/L0f eK8EqU6N/Iligl3Ti7zmNpLb1YGnm4X9b86fYGaMj9tx5m8uwAe/QLPPo+ZoXy6Tcmrq ZlfKswMyMiMbUhBRN3rvThsQw51Lx7+wfTxApBiuFZxEDhOU6SiBhJjCrixjyLg1h4Bo 78i3csO3UPVtyx2FwCnh1SbrROznkfX2DWKkDAsTU/DnSKX/rKNmSABLAtR3rNzpCVRy Zb+38Nl76c/D3vorjhl1sgtXKiAcrBEgaXmdyc8TGq1Pc+VbOLIxlwuK6zURd6vCHEzM 7ErTV+8D5jfId45oFQvhQyCudTJf5qZYXRydOmdfw5amrHNRoFRXmZszt4IPx55kMHKD z9vmrMRFMvzK0t9hsjTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABggNEhYc", "tests": [ { "tcId": "id-alg-ml-kem-768", "ek": "a+uG8RhLCuiAX1Nj6gkJYiCYeMVMaOg2pEypFxigUZUiKJCO+KkTTBKRJBLNF 8auDXzJ+ccQBPFzC6SadZtf1ZB3SuMsNHG9GMk+afk0oPYEGPm8LbCMknhjbWyn6yi9d Fa8GsY/AVaY1gF2qquXxjcTNoOeOrB+5/oelHvK6EHHoodc+yMZySlZdLWyiHrLYHay7 1QR7BY2cWB2giecvoiK/dRSi6OkodtmcsaBWGRSQYKh81ga9yRQMxYuQPbFMdlpJ8hcL 4gkN1tALmZ2JtJ5q8ubDjhzQVQZjNCWd6y+vTVDbmuJYOGPOShjLPw7V1R8yBZ7jJmq/ zllhoYPVypjGjsJvdkOPfGJfDalBrp2LMhh+Yk8ZJkiA1Amb9E8xmpk7NnCi8R5feKrz hKt6tFQCwm0hZdUjbRMPwBD3UOFa0sECGO7G3tYGtlNsoFMO8s869HBoVnPI0aOYtLCJ +qpMzhRGKG0LwjJKWhPMuXHsWSMrkdtrWWWdvFmwHcfVHofOdOTUkbJw+eFq6UVUvkPX 4WRg0N7NBhZ1REnNgdhJ3odaAmUZbiYgNSi0XMiqua+JThtwOh+1bIu2dFWGpkqFqM3l +qQRyciY3NXQxlUJAQ5u7ElURJDxpxW6aQGZFIhouXBsfvCqtpi9dcXkRUeWTsS1kQec 5xsCTVaHMENizSL2te0tTlHoctiGiihHKNgEvlJTVXPqBZieBRdHEsQawrEUphN8NkX+ 7J6U/AHJaxSFIBBt6ekncMQwKYBNSp5MupW50AoN3hDBgt0/+g39YzH8+jNBmrFxOs1K ONU1Xp9xxUjlUZQ7fFY+LLMC1LOdnwtX7y8mSVkqxdkd4SDGKBkLKqFfwtzjcaJsMJDQ PiuKUylcEsqh7K0ica4glRzOnd8XkeaOFLFlMlxPGG4IkdcgSafgxCNL6mMSyeERWzOt 2sKuZu0EME7PIQ0acaVJxy/HpNsdYLKtEBFBjHEeaMH4NsI+8AmQawtRjU3Wqtwipms3 vVkhlxGNoaiTKatEQSJtBx50JNiluFg3QnD2yNharaDICUe+gdabPYHKFEbSPauKzxFi fU1pgFMD9V+CXlAQhoLuyZZH5rJ45uqbIKFAYVcgwotCMwP+jBFfwM738DNchAAtjxjv kEgmUZ511p4uUVtnXe9dLZ7RcK1EqUUVzhcV6wzFWJzrxxRCKtQ8gN8bQAthJJhH0Naj GJzSucxsBQlK/ch7VwaTDQuFreItafJIgZq4ykDgMBFCPJrErt0zpaydtwTjcEcykKkq Mk8B6c0nCI83+Golimg7GA3eiwuX1dHBbRVYOHIareaGaIH/zUstWqZ7ISeWHGAscUHP hpVJUtkyPykOWMmo9t2YGNeBaZGRSmnE4EY1wyfz8wr9PusUgDFI5vAQvS7LcEyOuEyj ZyWZNgoBDwvT2kTbXQ8DDq+eWmnAFSIK0IZsQHBXyBz3VdoFJiAzPQ1NlueXGF0D7B3E qygkcVjdPnIFPhJABFzWyMOy8xnu8qkekqoNfuh8ck1cqZayOvmBOvpEkTpnxRo0nQMk 7KKFNr9HVAL0X8wkKBUO74=", "x5c": "MIISkTCCBY6gAwIBAgIUUaOcelwDq0c0aqL9/tV4yjb01H8wCwYJYIZIAWUD BAMSMD0xDTALBgNVBAoMBElFVEYxDjAMBgNVBAsMBUxBTVBTMRwwGgYDVQQDDBNDb21w b3NpdGUgTUwtS0VNIENBMB4XDTI1MTEwNjEwMDEwOVoXDTM1MTEwNzEwMDEwOVowOzEN MAsGA1UECgwESUVURjEOMAwGA1UECwwFTEFNUFMxGjAYBgNVBAMMEWlkLWFsZy1tbC1r ZW0tNzY4MIIEsjALBglghkgBZQMEBAIDggShAGvrhvEYSwrogF9TY+oJCWIgmHjFTGjo NqRMqRcYoFGVIiiQjvipE0wSkSQSzRfGrg18yfnHEATxcwukmnWbX9WQd0rjLDRxvRjJ Pmn5NKD2BBj5vC2wjJJ4Y21sp+sovXRWvBrGPwFWmNYBdqqrl8Y3EzaDnjqwfuf6HpR7 yuhBx6KHXPsjGckpWXS1soh6y2B2su9UEewWNnFgdoInnL6Iiv3UUoujpKHbZnLGgVhk UkGCofNYGvckUDMWLkD2xTHZaSfIXC+IJDdbQC5mdibSeavLmw44c0FUGYzQlnesvr01 Q25riWDhjzkoYyz8O1dUfMgWe4yZqv85ZYaGD1cqYxo7Cb3ZDj3xiXw2pQa6dizIYfmJ PGSZIgNQJm/RPMZqZOzZwovEeX3iq84SrerRUAsJtIWXVI20TD8AQ91DhWtLBAhjuxt7 WBrZTbKBTDvLPOvRwaFZzyNGjmLSwifqqTM4URihtC8IySloTzLlx7FkjK5Hba1llnbx ZsB3H1R6HznTk1JGycPnhaulFVL5D1+FkYNDezQYWdURJzYHYSd6HWgJlGW4mIDUotFz Ounsworth, et al. Expires 28 May 2026 [Page 73] Internet-Draft Composite ML-KEM November 2025 IqrmviU4bcDoftWyLtnRVhqZKhajN5fqkEcnImNzV0MZVCQEObuxJVESQ8acVumkBmRS IaLlwbH7wqraYvXXF5EVHlk7EtZEHnOcbAk1WhzBDYs0i9rXtLU5R6HLYhoooRyjYBL5 SU1Vz6gWYngUXRxLEGsKxFKYTfDZF/uyelPwByWsUhSAQbenpJ3DEMCmATUqeTLqVudA KDd4QwYLdP/oN/WMx/PozQZqxcTrNSjjVNV6fccVI5VGUO3xWPiyzAtSznZ8LV+8vJkl ZKsXZHeEgxigZCyqhX8Lc43GibDCQ0D4rilMpXBLKoeytInGuIJUczp3fF5HmjhSxZTJ cTxhuCJHXIEmn4MQjS+pjEsnhEVszrdrCrmbtBDBOzyENGnGlSccvx6TbHWCyrRARQYx xHmjB+DbCPvAJkGsLUY1N1qrcIqZrN71ZIZcRjaGokymrREEibQcedCTYpbhYN0Jw9sj YWq2gyAlHvoHWmz2ByhRG0j2ris8RYn1NaYBTA/Vfgl5QEIaC7smWR+ayeObqmyChQGF XIMKLQjMD/owRX8DO9/AzXIQALY8Y75BIJlGeddaeLlFbZ13vXS2e0XCtRKlFFc4XFes MxVic68cUQirUPIDfG0ALYSSYR9DWoxic0rnMbAUJSv3Ie1cGkw0Lha3iLWnySIGauMp A4DARQjyaxK7dM6WsnbcE43BHMpCpKjJPAenNJwiPN/hqJYpoOxgN3osLl9XRwW0VWDh yGq3mhmiB/81LLVqmeyEnlhxgLHFBz4aVSVLZMj8pDljJqPbdmBjXgWmRkUppxOBGNcM n8/MK/T7rFIAxSObwEL0uy3BMjrhMo2clmTYKAQ8L09pE210PAw6vnlppwBUiCtCGbEB wV8gc91XaBSYgMz0NTZbnlxhdA+wdxKsoJHFY3T5yBT4SQARc1sjDsvMZ7vKpHpKqDX7 ofHJNXKmWsjr5gTr6RJE6Z8UaNJ0DJOyihTa/R1QC9F/MJCgVDu+oxIwEDAOBgNVHQ8B Af8EBAMCBSAwCwYJYIZIAWUDBAMSA4IM7gBOKGIBviaADAgAE5Y4JdgCKIpSeDIC8ud4 zq2rdOjX14uLgOaO1OMpOtM/03Q9x00L3G/WMVgZ8Luu51wtqf/EJZ4etFVIAKLSei1a yR7zsiNcJDeYx7PqjZVDC8RbCWfQlwkKmQajbSRr9DnWsr/5wIFNPwXPMASH3q51rRj/ v/NCUyDSdbkNkGPtXGDzgy7hPtQoLV8rLXCkn2pnQhyeHhZGLy7uvja0+iYSdOEQ8x1j lwn8sYUIBkxLi3EMPQ0UEgto1pTG4Q+EpAZOC+VLH7hXQs1zbqe1AnFcBe4plAq6anXT Fu+pUy3vs+Qwrjrq+16k6ctXmz9+ZyXVqSNHVgIs/aIlI92gzMX0L+A3ZBB82dVypCVL A0YzUCUL78urN0pEzV2fEQmxLwaDNmKNKDWrY7geiyoccFrusQr8yuVjDDdBbRuO+OoR aK4Bwt44/uPCBjhiC4VNjZ0noYqFiLxONn1ocYGXzYndKD81TV5DIsEerZEYfgQpoWeh NlaVVFHJTmHQQEMW/Lm0NWWnFZn2NujiNX++Kvc6wkW9/E0o+XfcfMOzYMiXSBiSzYjB A7hsdfVfhX2+7ejarKiIutAQqfoxYqP0kuh/S9XvTk1tMCIz/1wu4VkGcH99vKSECXrk ecP4jqwzymBZhd8TC3iJLoBNQqOOmjZe+gfqHkJd4Wkj8iqEp8Eae0uX/ZgssymIrpaT uM4rJX7egJUi9ZuouymxEtky8DxLbyFGbnU0Jl3tra0GQpDXg90RH2mT2Ad7sGHL2PKL f2NKTbcb+oHnXM3rLiCDkiQfovr3R/5lMePIw4zAc6xwSOKTGaYjLdsn8g+0IwK8CZ8o ih6D0jaDVY1TJOdeKIEiXefFi6srif7ILfhnnjjBl8A7SKVbZNUrKLpv7HS/n6SvjXP3 wSN9Qm8IxaXUQAVOYcAodQsXmL9R7wy7VwxayV64aW4QlLjcUagbKrwlCz7ag3+rnRLo G2mwjomRUNrORtpqvEsq2NvTIxiq3K9w5jS5mD19AFhRTyHgTTer3dOw3sYutogY1D4x qlRdrUerY0YB2fUX3C3pvlmfFlj6GAhEJCt4G40Amy5unmdI6kn5TGzIIbjFt8AmZlKC xJ8vFmTXJ/oFmf3pZp1NqlEP7ad1y27Yg9ibJuCqIVcp8toP18IAJvZUswOZHw6bugB9 Yfyjr/Fm6z7TfwATHQ6RZ6w6ynmdgFv0Y950JfyQGn3jjxaFIYe4UtJK0lcDpUfhu5HY kB+Bm0X13s/8cGLAEWfUP1bn3pOBJbr8xmk+mDrIh9wbcW6GqFxM36L+fDUtHN1vzebm JedQGVYtcXYmPZPwZh2nK1a6AAuopvYo/qxBSh8O9S/efkgRyLBrdlQdG0DJ3MB2VpqC Aq+NBC2oCGVkpWk3eozoU4GEsr+/SSffHNJNXtjCqWBPmtg04Sdjqudj9mf7GRJCdSA6 g0vhhTdqL0as5cmRBjRcebRN0nKwldWU8zi11WOHJrzYfxwkxh424Aui7TYDP+EBM7/B 2h447X+2lWiOfwJvM/DL4EKlmNMq3EH2/GA6pH/Vv1hAjggUB6AuQxpR4fa8UAt+zfv2 n8FL9R8K06KkZWXtM2OrdV0nmr2ru8awso3aQhlo+2HZoN/PuBzeePIZzz+zAUTrRTDR iX4HIR5kuhuGVsiGv6q4eclIcsxn5qOMBllB4ZeN9aQ08NlWvuKjjq4JUcNsU9ie+hQN 0gqukqOW9Q9VKWNahSKGFA5+TqgXP9L98oXJ5IghtdmpM9/6ZUliaJ7G3WuAm2xYZf0X mQ/H3o3QJ+BK8FegY0OYDvbu0UL5/qkaGXwoH79eDjspb0K59I8SAO5W9nudR/lnkypw MTM/jpuVp6e4yMh9bLFGDZD0O44uBdwvXqeZrhHU6tHX92aQooGQGuJiZ2qd7t04nFzM tlvOzUbJ958uD7F0wREHNz0IPjAt0gPxySB5Ta49jAMIAmot4kGrt9sLoZVlffChzzVD By5kbeJl18PZa6Fd/Ah7Aaui+ZIc/2MF82l4tdnljLqoNI8E28Qu21K6ksADUOWK/fgs OJfDLvWgUZyRr3l9weqd278OAuHESMhp0t8+YXQNwKTz5f0XFy5A0AujyIdiiwoJKpKj jI9tdU/3+ooWc80SxEI8cokZ2v/tr264NUCmQDufjWwYh1bAmxbmQYdHkZPEfU466nKq Ounsworth, et al. Expires 28 May 2026 [Page 74] Internet-Draft Composite ML-KEM November 2025 cugwQP05w78qhE9lwoHiHYODQccXaW0gbL/2C4TJqtAVw8wFWcrfm/f0tLFoBwTj+y0G Dp/sgAb5Vtg9pqzhtAEIXnto/pX/4icU1ZOIg3mkjDdorEtntvrmkVY/6wgEm1ScubuP /SstozBfA4JM+AT+A01rD5J9CvHB/AIzRuuvLdv426gsJ6ESOhGitAJDQAWNqafMisHt 8FjKcxqeiVlGQYa69eyJDajRvl/wirgal30sEZkAyxyfU8h0LGncFTIPV5hQPVxYp09J tyoruUdbfFIqdgw06a7Yj7UCgP7Z7NnYY+0GBuaPzztArsNBgZ3ZhOZNfcmNezHv6d4Z gaDP0G/7z15YoHc2cDNcye6TI2tZMXGdzUZwpDLUKFPkztG3MKhs7nK6pCeyqJk+hhe6 Rbwt6osaD0gog65HmEODBuB7A67Rkll8beAymMvg/P3/ZskicM16yiqByjSo0bouLCHd NotxtBpaqeym4oEM72pmbwmyu+RXcTaW2DSoFUvUFKqUNjjaClMl2PCIzvz6Aap7TL4w Y9yl8zdZFRvexF278whrW4kDiP8bTInuQj8igMbaE1lv1SEojzAq9TSQF0/0UfwHpIg+ Tza89kJXFa0WohOg7YU4qJ1XrLG3TAtNMWSbiQjA3S+P5z5bwgNOkjuWMmefd3BONbYt wBE8NVAKqABqPfNltB4M6O7UNYlR2/agY3zMzZ84Zu1v9Fxr1IAGbGjRifExalgbqCyf LYO6YXkA1HpvbYovxbWDBOLemvZHMUvmCKi3WU81S9niaLiqpIdSm5RkVFCC3teXHvS9 9CU6Dwz6M+L+TvA7IicVRmu0CCGV26OdDT41MnpRlMLsjEbJBavBoMustps/vPpCERCs LL6q093syWRQp+P0nIBfnk3wgi3pEYoZ1f4IYEZXwt3jcHW2GavhT4HhcO9eu4j/v32Y v1OlWU4Y/ZA40mPpOqH6ptp8pegQOmBA/R4SAWYN1G1EjOqRI2pKrAnjNln6VOYNujGH IBpG62NmSkuWZpuE6UStD4YjnCOMapCDOPb11dD0T718X1bYKogH/Yg+iesEZ0+b9dJz BHW1L1YgSBEzQFVQor+q433tJFyHpQG/F7GoIU2LVE7CHdaizqHYjacJFiw7JzkDd1MP Xvvgq/6TDD2QCz2Lt/qCGddn+byZAUZBDt2Umtjoj0IDqELjVEt0vdiz4gpVM8SbUSK9 zeOsNkQ34YM+qPTHoPnfpSC5WAV4DrymylrrW5TmgPNAK6HVFtToIMDOlq4Sreu+uoNd LYCZR5kCsf2Ny33ym/biLFwJCL6V7vtLb6WvBCaVgKP2iuDGZurc3bGiTgky0S1t0VEs mWmlWS4oANzmL+CAk37G0uKxbH2TUHzG7+zIq/HQoacBonblZTPSsOTA/EjwSquRDNOR t/u97vUfesO3kbSR+fpqrUYXBooVl9wWs63W163FaZWMDRye/6RDnt0YMJlWNlArictH kY9Y7I7abklPJL5bFsyyO0dBVGTppzoGYrY2y5inxQQd3asmeD6WNxzturgd/HjjE8Fc mlJHqSBEASMfxzTpPJQRzBprQFPv99Wcfb2LUYGne2rgRweidpIWeZ+BzrDf73IvGjcf zvr4H+q5RBa8NVes77LeSMwmsmzYjUTsr4DUAbcYUjsXw8xN3N0NcHfXOGWdjzwjAGal 4GIBbLaecijh92y+JEHZ8jOmgnlWuyASKJffCYEje0fX2mUd3XAg7WHmPSK7USP3RNwv gDiP1UWuA4iHK6OxNdP3+34xfiOi6ebkVC4kyf77+Yqcp0CpeLGx2Yqe9ekK6GehX91G +GNCvWvg18ztghIv6Wv8/0IWgPMlZtGCTv5GuHoFhucNFuDpUU9uG1ClIUhA5SpaoXaf TZjSQiQU3J7YsYgfgLYI9ckhalJKQELn+tdd4ca240HBzM4ajTCF3eL5oCe+OiPG5nxc zPb46vueJBsrE5WLBtNVkeH97T5Xq88FNcmaPeIlVaQviy+M33OyGcVXo7JZ2ob5IWmw XL/8jTzTSxopD1b9eAv5rIEyYEJPvwfv8aVwC1lYApT9bxrTBPmKykll5rnCSdURUzAA 94TpgQai62qEbzhapr3I2+T0GyR0ojpwr9w/tdAjVX6Hz9vnDURrcIK6xQAAAAAAAAAA AAAAAAAAAAAAAAAAAAAIDBATGiE=", "dk": "emJPPMfM+sQV3Ok4i/UbQuQm4xz5aQonXtspo0YsgXqHlMhJO/GvBERUixhPe 1vA/zah0SGiTsaWzNZWbKmeVg==", "dk_pkcs8": "MFQCAQAwCwYJYIZIAWUDBAQCBEKAQHpiTzzHzPrEFdzpOIv1G0LkJuM c+WkKJ17bKaNGLIF6h5TISTvxrwREVIsYT3tbwP82odEhok7GlszWVmypnlY=", "c": "loCPgBo0GpAj0Ux2fwd5faBhwEKe1XOtWuf1wcRUYh4WSZ3aSBgHYgqMuiklYA ak2ZiFoRH/aEevng3+JZ/YT9698YKyY+4V5A6QfyzINouwnv5pmI9Mf+xelYDopdObl7 sGHthfjt1z8wUkFDhffQh/Nx2kmg8rvMKeU8TSryjshYflqBEFez5NB4l4rjXX1g8M/T SgPXOxM2KkQxxUrmwG0M1TQD6rf7wgVPemwL8ck1QyJdoO8CxDAAzrIUBWc3Zg02tEHW XT/Xtw0rAsY/gsXHp+s6Y3kEicriq16+LfVeiRmNUB5cM8A4CaUEnia7SJk3BndR6vjg U6+5kbulXyT2D/KOcq+IaKvc9exEwKw7yPhXBrls0gaAWJIRzrKzGZv5MCgHiEKgyang j71L3/2tD4Lg+0rhTuzF8ATMqPgytdpAn4UOxmYOccJ5JJNqoKxEl72K0WtU7q/4wk5s T6Mtugu00Ea3AlekC4LPx3M2stIf4tTPyjEbvqUjzlp906J9no7n6JNVOHpqqul+sHL3 1um+TA8mjrIngffFMbFMftZa2P6UP50Sjx8D8o46c493tVUBW9XG3ecOKR/bC7lzyEXH DSoYnSpGBF96iEg7RTYtK1KMjkJjV+59CljuQhacMIzqzmK8+E7MIca2STrRHbvdswXu WED95U7dfhMHeTjgonKI66sGIYP1apnpN7dWPDzj20BTovEezkfwrNNHQR5oJ+IIe9In Ounsworth, et al. Expires 28 May 2026 [Page 75] Internet-Draft Composite ML-KEM November 2025 ZY6ErP4qH9riRCQDM32RXNHYKXTveJAHt1lLZE3U5tbr8idI8lEAS2otXeQXhcVIw6NW rVdmwdYRm9sXCAI5vpV2Twpb0U14as8x04bpFS28A9BVOlcq4pOfqhd0g9KQsespBfM7 dhKEGnoraUngmDCPflP9lfThhoIrAYotL/ypQUn4o7LVFnaS00vreRP6hnuDWlW6AHPF EmvHIP2VWah81eskAGnfhsbCzxIE8MXOjSFHNh4ccdmB37igklrd3xToTdy9mmO074vw mawNEc8T9NYSSTXTAkAnEZ+FOvxRkEPenswi26GKUjNrQ7T1+WGXGW3JBJey0V5/Bv6F M3e++M7VDnV8QZDsx8wWSFkb4yt63OWK74osZoRFlvaGYLSm+Fq2crJyu9msvtGn+Kt/ SCWyd5HszyBJ9T/9foTxcUSg8vXpq/5ndgXCyY6eW5bCqGNL1szLo1Qu9s/2cjdpWyj6 Jm5EEfoe4lKZiMfRMv1c7QHuqW0tKtKA7h66XHkS9iq8HRV9lhdUEWEb6Y4s+ljS92xX 0UJMOAStUTgTqVWQKY5skV99gXANU9fEwHw+lBSYHhI1Hwsdms1HCqlFhRn7wEe98qyU 1uwEyttArqjQgIVME/9VTV0L//DO5qJmnlH2OgCb/9/86iKOkUPCLLGX+v6zFkD9iiq0 IUkt6BdLYC9jgRdJhRmRmt0rZiqBU=", "k": "YhR+8UVm6sAquJ7aKh4cqCc2tG0fBuJy7XqgKP+4RIg=" }, { "tcId": "id-alg-ml-kem-1024", "ek": "n1ag32ErMaUKZagCZ2U0OgJv0fQvq/M3VwpDA9YoDvXFedUYyMmirsRgqanGN 4sqTEtf+nBkhvYcDiwGTwyH09gi/3VAKNBSj6qDvjZbF+zDV6CvfPe9FRMt3zFykEK2e za9nQfHUjQ00eJLIRAn2mK+BcyGkdPFXlE9P3a82/svgmUf7RoMYJgsn4UljcaKzQKok +xIpLXFXPS0dyI8mOqji3xrCZmIRgrQSjkogoES6SQFC8vN/LpmoIRvt7B7L3VIOZovZ zOAyGeNdGBFvpdgcTYnJtRiyhgcSHqbSwJv6ZpGDKoJlOKaqASyGzYqNrd9pEZXVGMRv 1ZjZqo8azLGX8Rjl9F7BdBhgHx0Z9OO2CxFoRWrjWGzbho7nkuE17rNNJNedlBbPnJ9K ZlCF/Jbm5nDRVFf8eh1ZfaljYi7S8Y5LrEUYKJaSOhiN2OrGCtRgKxzIByLlcZQxhVoE 5fBZDxZWTByuKZZyzquM0POicQ9lQTN/VVITaYiTxiRXCdk+bRlr6W6glhQfFOTCiWgF AyGMToq3Atk2Ayz+TJNhTtS2iyOict0skKLdiNP8UGlZcg3TbO92exHWrtqIeNzUyCmU ddT1gci9xMPe9shsbCZBNIOJ/zEqQy1oumvmWSWAYi9xeRc2vlN+DemAkyk+0YsWJhLx rQQYqoFSXpwzSJ6+qdTtWJGkBqyatZ7PqmF2ZyUqwgA3+i5DWQP0eiwxlB2yIU2mqiwa 3CLH8CJmxGmYtRd8KCKAWhn1DJjP5OpqKZvXxkqJcw7ZEcm28QlshMARIHOhuALz0V6+ pql9NsEkWIJ20SAuVNxpYl+JZIwnhwndrI29rIT5hBBNWhz9DghqnafyBhtxERj3IW/k UGbdFwGrihyneoMeouPHAPKTEF0WeyJaYC1oNBuV7VQ1XYtCjJACgIHE/pfBlNeQdQvq /S+DvMKCkMMItChI5SZenlw14rH54wO/0ycr/AvValEpSAVDUoxtEgoWTtDsiQYR9ar6 Nt4JlO4fzmoW6G7zvAqQwQAXNR5uymVphOlijZ16KCR3ZrKYtRKYox7hWqchRd2zlear 4hY++w5q9t7KfaFbyMhe6vAXZS/rTDOf2fDPjqbD3x4AivOPSNc7qK8dghopkx9Z9Vgw dUghELPRaIs9rerPbEPN8l6BjZQTmqsMTtZTjwEtpI/UIvDCswhSJUFhFe0hlbBFyhcy 6SKW/sAu8spJjjO75eeURnGbLCTbIh6uTmUqyQ/+qfEYLmWwVcEZyWAlVRl3FW5e9Qo2 DST8NgXgtpjuJEoBlxbvQSvvuluyWm2orYtLpJps8x1H3WBH5RMWuAKF6cxWFc/RCiCY 4dPi9d0sjtES6A0dxZSE+Fnz4cVeNaHzmkWz0Wi2qNO3fRN+8F3N8iUBbY8JFgDzQS0Q /RiyYmeQXhH7nhAc1VgT+p6tCF2f9M1b0qP/5QM9ApOKIAuT7ZPNmCWEHkkQeeNjUViR TUbeIlgUCk3HAipk+WJ+EmPNJBS/PMSc9YmX+wiRpyFumVdoeABQJwxe3JmoGRN0LuPo JUln0actABmOPuhftRPs1STJpVYdpAT52M1OWw+sMHO8Fcfhrgxf7PJ9evEX6FUyNdJU gUf2puwmvaJEgec6wjAMGbFNAuQLeXLxQjAdAgYB/O3c2ad/ZWxliFVPMMfBXpeXZwIm SRNpkN73YJ8SAlVRgtYmbyjs2EQDCm1/xN4kDMztQaBSRkyhQoHdueuuwTQgaGzNAMnW NOXEYEXvUavjhU4bGB81Cos1TZGggZPobQPFZqndkPFftgR/NQUd+mKDuUTJwjMPUu8m BkLd2ccfAitd+eG6YQVRTTG5nwgpUk5NWIkhVVeGuq5uDh9vHCx0KYLr8yOTLSnhmkgK 9SQiTtVSsmZu6vEjwqEnsCuHtTGvZtG1doOabsSIHUFjIcCzOYfshuheRQGnXCvfiyvV NA4H6YqCMVr1WoXmSdwqfZZFVi15EsIBwKzhUI5XBhuF1VwC9GletZgdVhmMUZR03Q3e +RD8VQcXZicsmVDeZV9rtTa+hxCZUIyDwFdfn+9CcIEcM8pgb94spwTn5U=", "x5c": "MIIUEjCCBw+gAwIBAgIUM9G3KeNfrGP+UovXgpLnMowWMFMwCwYJYIZIAWUD BAMSMD0xDTALBgNVBAoMBElFVEYxDjAMBgNVBAsMBUxBTVBTMRwwGgYDVQQDDBNDb21w Ounsworth, et al. Expires 28 May 2026 [Page 76] Internet-Draft Composite ML-KEM November 2025 b3NpdGUgTUwtS0VNIENBMB4XDTI1MTEwNjEwMDExMFoXDTM1MTEwNzEwMDExMFowPDEN MAsGA1UECgwESUVURjEOMAwGA1UECwwFTEFNUFMxGzAZBgNVBAMMEmlkLWFsZy1tbC1r ZW0tMTAyNDCCBjIwCwYJYIZIAWUDBAQDA4IGIQCfVqDfYSsxpQplqAJnZTQ6Am/R9C+r 8zdXCkMD1igO9cV51RjIyaKuxGCpqcY3iypMS1/6cGSG9hwOLAZPDIfT2CL/dUAo0FKP qoO+NlsX7MNXoK98970VEy3fMXKQQrZ7Nr2dB8dSNDTR4kshECfaYr4FzIaR08VeUT0/ drzb+y+CZR/tGgxgmCyfhSWNxorNAqiT7EiktcVc9LR3IjyY6qOLfGsJmYhGCtBKOSiC gRLpJAULy838umaghG+3sHsvdUg5mi9nM4DIZ410YEW+l2BxNicm1GLKGBxIeptLAm/p mkYMqgmU4pqoBLIbNio2t32kRldUYxG/VmNmqjxrMsZfxGOX0XsF0GGAfHRn047YLEWh FauNYbNuGjueS4TXus00k152UFs+cn0pmUIX8lubmcNFUV/x6HVl9qWNiLtLxjkusRRg olpI6GI3Y6sYK1GArHMgHIuVxlDGFWgTl8FkPFlZMHK4plnLOq4zQ86JxD2VBM39VUhN piJPGJFcJ2T5tGWvpbqCWFB8U5MKJaAUDIYxOircC2TYDLP5Mk2FO1LaLI6Jy3SyQot2 I0/xQaVlyDdNs73Z7Edau2oh43NTIKZR11PWByL3Ew972yGxsJkE0g4n/MSpDLWi6a+Z ZJYBiL3F5Fza+U34N6YCTKT7RixYmEvGtBBiqgVJenDNInr6p1O1YkaQGrJq1ns+qYXZ nJSrCADf6LkNZA/R6LDGUHbIhTaaqLBrcIsfwImbEaZi1F3woIoBaGfUMmM/k6mopm9f GSolzDtkRybbxCWyEwBEgc6G4AvPRXr6mqX02wSRYgnbRIC5U3GliX4lkjCeHCd2sjb2 shPmEEE1aHP0OCGqdp/IGG3ERGPchb+RQZt0XAauKHKd6gx6i48cA8pMQXRZ7IlpgLWg 0G5XtVDVdi0KMkAKAgcT+l8GU15B1C+r9L4O8woKQwwi0KEjlJl6eXDXisfnjA7/TJyv 8C9VqUSlIBUNSjG0SChZO0OyJBhH1qvo23gmU7h/OahbobvO8CpDBABc1Hm7KZWmE6WK NnXooJHdmspi1EpijHuFapyFF3bOV5qviFj77Dmr23sp9oVvIyF7q8BdlL+tMM5/Z8M+ OpsPfHgCK849I1zuorx2CGimTH1n1WDB1SCEQs9Foiz2t6s9sQ83yXoGNlBOaqwxO1lO PAS2kj9Qi8MKzCFIlQWEV7SGVsEXKFzLpIpb+wC7yykmOM7vl55RGcZssJNsiHq5OZSr JD/6p8RguZbBVwRnJYCVVGXcVbl71CjYNJPw2BeC2mO4kSgGXFu9BK++6W7Jabaiti0u kmmzzHUfdYEflExa4AoXpzFYVz9EKIJjh0+L13SyO0RLoDR3FlIT4WfPhxV41ofOaRbP RaLao07d9E37wXc3yJQFtjwkWAPNBLRD9GLJiZ5BeEfueEBzVWBP6nq0IXZ/0zVvSo// lAz0Ck4ogC5Ptk82YJYQeSRB542NRWJFNRt4iWBQKTccCKmT5Yn4SY80kFL88xJz1iZf 7CJGnIW6ZV2h4AFAnDF7cmagZE3Qu4+glSWfRpy0AGY4+6F+1E+zVJMmlVh2kBPnYzU5 bD6wwc7wVx+GuDF/s8n168RfoVTI10lSBR/am7Ca9okSB5zrCMAwZsU0C5At5cvFCMB0 CBgH87dzZp39lbGWIVU8wx8Fel5dnAiZJE2mQ3vdgnxICVVGC1iZvKOzYRAMKbX/E3iQ MzO1BoFJGTKFCgd25667BNCBobM0AydY05cRgRe9Rq+OFThsYHzUKizVNkaCBk+htA8V mqd2Q8V+2BH81BR36YoO5RMnCMw9S7yYGQt3Zxx8CK1354bphBVFNMbmfCClSTk1YiSF VV4a6rm4OH28cLHQpguvzI5MtKeGaSAr1JCJO1VKyZm7q8SPCoSewK4e1Ma9m0bV2g5p uxIgdQWMhwLM5h+yG6F5FAadcK9+LK9U0DgfpioIxWvVaheZJ3Cp9lkVWLXkSwgHArOF QjlcGG4XVXAL0aV61mB1WGYxRlHTdDd75EPxVBxdmJyyZUN5lX2u1Nr6HEJlQjIPAV1+ f70JwgRwzymBv3iynBOflaMSMBAwDgYDVR0PAQH/BAQDAgUgMAsGCWCGSAFlAwQDEgOC DO4ArQ1ogCSntQNMMe9sbUjQ+saJc+nNSg0VSUHx+IjeXtKn/7aGTgCVFq3XPmwmO4J+ oBCpez7njuoI/7La2+I7n4K7gnSXzJabf0xsHhZ3yYiOVxy4lSW//MRy/0loPpYW/MHz JG8CrGp9wGlB5oWdufXX+4em0HqnkIRfBpdcubls/9KydBfOEWLsdzfY2y0tJMJnnYnu +FX+q2lHo17wsUSmXLEtTrgqooh1kpMKhdxOeWiKVvlRQnwUFBdq15cFuLGdZNJ/Te0K KB2karfTUfMXLRRFPFGjKoF5qhHtilyLR2+55YW/T/OWG/S9sB2EgFFFmA5yzWEZlZk/ XMb50ySRF1HMEc0iqtk1uv5vrpXXHvRSNJweiNS7abhG8GoCRHRtaur3lJ8TGcwz3EF6 iIdbZx2oCfPRGjAYvR9shGzvU70bGtOaY4mTX9ASASERcdMb00AJYmpEMxUTz07n9jAh nCU9Bpl+mAkjpxbZEvghBzuY2P6JKF/xxqxdoYh1g0p4u+dBI3SeQ+qj+phHahx5y5Ga 0G4QkedLUi2DUhrrQEkOXvr4ZZ+LwvcMzwIRsiy0ljTSgtDJfDguqBk1hMzm162mm+oB GCmhRqucGEh0bllBrmE4rjoUgX8DcS5YlXO+lipDVPOa7gkcHb6THmXI7hQEGyvFpYiC 0wzOIBLmAnZIQYre/b7KU4HsMslR4VSc7CkQr+AnHEenP3VuuLE7fZZkOzo5oTWc2/v7 PfM9lUR1v6HPwMwnX6icr9DRkGSNanQM/lLnjTpkdH0S0f9fd31uHU3do3rZq4aj3cOu MMdCB8Uz9/0g72N7rB4EVUFQTdQEbswWhvSlVZwe7AEu3P5Pn7cB2UAWnIFC4meSKlUV F0Q0BBEkzlVQBWn1cmj9sR7Yk/QwA3FOCve8Qmy3zwOzSH/GvuSdDexI9ZF9Q/+qiwkb Ounsworth, et al. Expires 28 May 2026 [Page 77] Internet-Draft Composite ML-KEM November 2025 RiZSiwh6TEY718MYB2lR94wQjcm/wzrK3/9PU6Enui+EHoZsiJbUTdFyobhOmDZUr2Dz HrKzuWJTAyKHuNMH9PjaKjDV5Vy/nrkWPioFybt/q9SVpkFHd7wkAgg1J6rEDFEovUSB L9HcJXpvQN0akzo6YlyVJ7wVJfKvWySQPlIR/wjD+1tyujHl3a3y5NL23ekImG31u/Gf LlDTUD2ABnl1Z/1Di2RiN84Qg6sIBIFjbLPSs8ZQO2++0wA9PTbccS3hV0t3RwmE0dTA Rc8PakkQyjuDwKJO0N4hAet7vuvWyT3RoSTBTRZ60lgH4i5GiZgVQ1frDBdNLsrLmtys HxfrX1N0uMC7rlsDaNwg4lhnKazQJdyxAO83H+ytf8aFtQcZl46bMUvsDJPbPFJ7FdfL QrMpqqkXoeXE7+SFdGO3x2zJX5ikCW/VTJ/pjbeRB9+1miNQEMjuiKSXFkTm1wvoamAa TpJvLGbFvF81hsyYycnd0mJbAXa3gx98GfFhFr/+sComNL/IvSApHilAQuHZulaGl5pr kC8v+jWiZHdoKuSAXTa2PLBao8XlKul1cA/8j0KUofy/Mn1Upr+6nS/l72y5JHEfXjf3 G0wTocczX7ZUplgnC44wGtSDAz7KFtTTIFO+qFBoGy2ghSPTSTPPOFW41a44sP3C5PeT Po1BhRNG59p6ulbUcQlcdoabnsWLP8OLml9XMGwHC0Wi6B0XdfqB5cd0IVP6M48t/nI4 vYiO5FGV/qLdhHOz4XRqjiWADe25QLCflZJGxghnHSltnMjG+tB9PL9btu8Rd6DGi0mR XcaFiiUE6K5chIxDTLekK51VvfrAXmV2Cqn8NAyp+mL/nPkICZAs3M/42uydpBU75X74 f88RXVayfEVad6CiJM4cs0hSrRk1K7y7nDb5BpxsT9TSZzgwy2xpIaOxyXlqqTAXunyM lDX/jrVPVU/2YVu8KUMv0DdvcggaC7FQXZ8la3hbmxnJmo330W8fv5X/bY3nLKQNRKhl KZ2yAQMEAuDDHBgpvC7e2A4ylbH2eaXr0R+Rh/PmQ63upvthl160f9vCAD8PfHvCviPy ZsOiuVeHB214d1Rpvmy0QISMhykgGIGX3wLHfaw1y1B/ftUONfjme3EyKlsRvxWymPmj tl4g6s1d1eS4jZZDyv0ObuatLVLF2eGn47w1DC0IW0hUJuzzbIKuFLmKpkjbJP9Uij+g JZbI0hZVoDRmdBQBd4NW4wfOw6JmThDMbgqBgsqUxf9/eC9OP3NVuyls5LnjLcVRuAlp DEBfR48FM+vVXpsRoGMOym5YWy8nD3v6K+Ua4u9kC29JjH3nX+/fjMa01v5zFMqStbDC sHbVOZNTvLcH7inusY185Jfwa2qzuY0NM1h8uNRzO6iVZQb3azsXmvIRZ6M6jt7lqPR4 uJtNp3JhIrS3f+Qk/Gm7uNTVlyenHYBdnZraNYJ2HgHqXZhmH55AM3XTAzD8evgsphXU +odUm1TU4olKz5MOoQgJK6aB4F7MaoCB+nYkUlOjsx3CGaw4e4ju+yZL88QEvnG8xoWA f3UeAcdnpAHBu9P3raMhvnsRQdy0x4fXuBfVX10zy0YrUn5WecfP6Mx6bE6Cd4R7/CRQ DtI4iCjHg1in9v7zzM1i7N+K6T4GASgzgn6UDZXy/MMZwmtb4H7en03bjzkmG+7PBIbq OlS1yltr60BzXm36j1bj0YbNHHGasnqscTLeedTG35c10bCz4AzpDB09Mtz9Bgd3YIq0 xJzr4C87k8hn5rALbkhR03OqGg+jQ4ZpPn9P1WQ2urhbWux54mwvvA2SWNV2gn0dgiyD YUQePHGX6e4H2+3hPLOcIJZf+X5IGaPsNU6P+bJDUqq5DLDBZDqKJAVN/1DaxyfzJzfW EF6/ARZGviN0F4OD6ijpE67VaVTYqwlBH46wp5F2MDiyp+GYuADLPRdLAkjJo/3Al9+3 z6UOVaXnAGFbJ5xlPoG0YwHj2iJ7vCCwGflduDu+0dhO+Dkhm1s62sKdk3BqrIP2bPKh /H4/QneU+9FyVRxrGHplDKJuEd8w/pDbf0NZvhuJ+ARqB+VvR1xgi7M6TCpTm8hMPzUq lGKDIeSCniUzGfIuTnSJh57/chZX831yskAyAPHYptHeq0l8WY0sCyBxNAAb/r98i5gk qw/Zmmje0fYBb7yK2uLgtwktEIVHmGioAwblXWeiSUSlMsQwelhiaq7qX2h/HfaKnIaV YKLl1WZQWXYFuKO18lZa9LvWsJqggpjj9VPbqQOED041aFKisbOLYxUmo3pYfz3TCG1u VfuPCN8F47a8fxGFOFI5qkdAvkDDfguubRWgn8lIqHfGCn9Yc6kg5XAH66PjVzxGYHBq MbHgu/MoMJe4W5hvehxBu+zJxLLTcKgjEcnX4V7m7jIfcM4KvvfF9LGOV8Dv4hMEv+yp VwWpPTTMsu+201OckDG1jdve/tcJCcbzpaApBXrkccXbYwuK7bzfsJdl/xGlD1Hdi1Mw RXsFzfGCnbjRx8KDBZp9fLVAozakpXgZfCLywwHotJEVsDv60hrLU9Ku2xM09VSSNsMu fUCIeBUwWA37BrhKf5gQsDayr6PkHLPgjZiLWBo7xGoCBdlsC1g7Qs4s6ZeqUs07diHW bTZ+mscnXTWiS+6XWQIWG4gDNSxGSMxW5EKwwOA38NWtnLc1LuqfLAjsJgE4iaKFjHEe B8Q0eK69X72KrzirWb247iyuzze3FSlAn3kgcpMaMAGRhh3vfe08YdUm2GxLb4Gmadii yvuJJSgMYpD+ksBkiekxDUSvHPFBlxAu1ATXTdjPhZTUspVXB94KjuTHD84Eu5FZP/wT 1lbbkgII9+aFFSVacHl2Stg7d/7giN4JzxMT7ZjnzYeJYMKWn/THNzFLyVg20fuahcm3 O2iws0SaKRwU/aPc1+pUHXgI4EyAvMZvPU6+M5zNGhcmjIWxjPFDg7Q2sh6kXy85Z/BN sPSYo9N3Fr82dBKcd9C254iH4JzvJYWCsTgn5h+eJdnR//jHZuvZ0ySMRV5XCMVxZ52T 6rSlVVDdPSh9eLyJdgm9/JYXMdarUfj+vO+J0jcuy/o5DAuu/omh3zkCj0/PeKAKr/CD 2hI7iEdL1cpy1l45mdYnvAo6bu5LOP0uwFLE/1nN3bMjX9WO+3yAxsTr9kmPH4mMjI8j r1oUsKBS3juK3CezwsfZSXhs/6TV+Y1wWqbIAQAS2TdgWs1merooH6u+7o6qwwqBXzX2 Ounsworth, et al. Expires 28 May 2026 [Page 78] Internet-Draft Composite ML-KEM November 2025 hBvs/533DoedhDbGYt+Y3w7tKtTH2cep//Sqb+HjnEs5DYGHvbNBX8f/kDxV65quYU4c r9jNJghOQP/01ZoAh3nnuPYKGf+Lq0ZKd6+1snA5MxxamMkk1HNVbW65NGqEu9cdjqAO Wp6+0v0iOJDOYqTCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAkMEhYZ", "dk": "w7PHIGqZs7+m+f7GH9c8bqjhIudaWJ+DcBpbgipSJkBaCjd7l7nRAuegppUHw Ti9sSUNDHaXETYtk6ddj0YEqQ==", "dk_pkcs8": "MFQCAQAwCwYJYIZIAWUDBAQDBEKAQMOzxyBqmbO/pvn+xh/XPG6o4SL nWlifg3AaW4IqUiZAWgo3e5e50QLnoKaVB8E4vbElDQx2lxE2LZOnXY9GBKk=", "c": "jLrhxPctlOh2E7Qwe4yW/CCVVL8dYzv99WJH9nfSo+EgjUKJA59dG85E2esmj/ TMOqWZIWGa3yyWXF2GSQEfguj5bJ7T4DJACyMNeXUcbjH1PZdJfz6D0zA/eRPRZGN1nO lyXv8mTZo8Lf6/e+huFpsDU44vVsT0wwW0e+5EtdvbhhSMTq1C01BMqRTqzOB/mSxzR4 AdT2GZifKnAzzSD4+gsIbjIxIqnWtOEWBpK/hpjQEI+Tmq45N2M5v6m7zwg7fmCWTh1h qs6zXP56kPzbmmjrTG8k3jEg/Rf/8z5bxu00L7bsmDM/MRBd41NLhqIy/e1lZS7j03iK IV8HrK7J+AMj+AXAGynuP32Lwqf+vpXcwYNSnU0BdH+rBCmzAoxy4ijzhUi0UILy2i/P 2caPWbURwJUkKNeseF4P4dPntjA/cLiUQiZ90fbCg8Y/mLtJ29iU5RWg1o4a8cP0M8BC yk7l20vyPBgIgAjm0Zz30LPTPRxfEo1uG6iv0H4CVcBbphzOC8Wy20EnSf825k/0pBVC CLdlKXDwk9vetxxPmcuk/iQ9mhfBh9RgF7MGR1MxmbgHDnOJSq8Lq+xF5TQU5VlBwJT2 /YDCUP4iq+j0fjOp2rCefP9PO/vtz9kz7XehvKBdtYLKkTx1g1OZph3qeRvjREklIGoa Azdt/wwupWsoJbyGdiUPfVlUCd1Kilq0ggLOHs5s15qq+7HAi2AbmzBy0ULMSOabovTw guLh+Lh8XvnSKnYRXYg4BDW2jJzj5dREHNfoCawMOtCKDpZcXxKFYlONWnkb3DccX6rt 4cWVirIBNe5b3EvoZn0pCFPTjWskth5PkC6DfkgzvWWBbvgbVw5a0WxWPJsSsZmjs7iE nSg7TCriHv8auh9fGMDiQX2G1xH9ZWB2suE+0E49gmB1gqEO62Ovwu/1sMEwW/uKFxu6 H7WBEAOtTHroFxoIPFzk7+F0QlOSZCR9EE3Wc9e5O3BcDAXj+ZTZty+6ojGur7mt8djg jwdG2cs/JEq0CgJFuGFPJAMYDJyepZoNQDWZ+/yK3L6SYI9ipq3M0yN9h7428eiw9EbJ nIckrhw7m57knx7SlB/nLRjOpnv5dYRkPOXhmgCEL1Z18Jyb4ijjE45DTpDCr4T2inKR Z9KEo4MrkTXiq9PgOiwLQo0pgJExjTIvkhSdXUWWPfuNtxnbD9oZ+CfNfP+zBSQCpkor ZnO20pfJ/cQ7YQASFMA2POEEIGeflbwxa4OyOHk6h8bji8IxqU2TzKleVcK2+fU52k9V NWt4o03dsPWpWsZF1KHUFpmU71BpDk2LFoqRM05Mk99SwMkhap4lKjRSF9h5RIL88BiV d2eBfQVEP50irrGxzaDsJ8a1wGvcuom9cukpXUDppYw1LLsYkGgUnLrSNBe5HeJoK/Zr jy2EckbmncJd2eTH1HpgUbiuV26lCKLJ+3zqJ1geE2MNGnowJLK0iMiQENSGbOqGVTHw 6aJX+GwlOA+TWRSbvWWl61clkGO7t3fVS4kJZ0JPdaFXn6MHNVhw/gewolCeU9TkM6eJ nVEnKwWlU05jfifv9Uh+Wt9ui6t+hWQAYzNqs7/CVj/ENsrZnnj9lAB6unLSNJB9iN/z 9dpcsWluiRq2u8XPyzsiDzhR9cCuthx2wC8nPo0Rk4gNhkaRvB77+c4IToTgxs2OvCym PJg3uPNac8CqlgWsOzwXBx+R/S3Q89gJz8xNid8OjRStp233kqKHDpfInOLxvFzQsBnM 0o0smmtvDhleUuxxRLv3ZAwQMHgQb2K7NnivV79Tztw1cOZLgBsnqR//+rBMBHuS/9yb 6GOe/ryg4zkvUjU3i1ovHoIbnm/Fa/uueZR3OXcicLcaj1oghc2ICJHYh9G+pKXBe9yU KXADGn9pGWbqJ/9zWLTSUOoKRjFny77/HE2npebIgTCslxB22OalDUW7hRIprVcVY0wF XuLkxwvmZPAMAKOR0tOIUo7P7M3eyiMXfql0EoKusE2J9LnkJyvecUr5/poH9L7WrWus imd/7CUXrO/keVKJaIjkoGJF9WOZJslHOOLLOsU+qqLJFLbVIkWknNzF8=", "k": "xa3QqXcaTL/ZvGrz9PYyfujcuzrmSrrdYCP/qaXR6PY=" }, { "tcId": "id-MLKEM768-RSA2048-SHA3-256", "ek": "5kqkVpyVPiKJ5kQGoOcwbutA8yEwsBIpFZTA1OZyPmNPF6BAOFZZCkQzxFu6a vknIQc1uWYo/wqTSLFocpaa6ogkNaAGoUNpgqx+OVLGHpMPUGMNDiNBIfxzafnNVWdcC 1LHixbLnYKVcUEEPxwiNTIeCiIBVWsjy/wCebtD7hJAZRFlYPXEskU3gpSlvpoMtCksf QVn0VvIJSJaHouzhgFUUbUb0ylKC5RVlCvOtotFpOlIiYZ3T4G0P/Y+2rM9A4G/mStn7 dEWEFSr7UfEcvgBxFSVCtEd+GG5YNJ/zZXNwbuEnwOmoYInxpYKoxqnJ7GAf8ZU65uHc mPKztoUYlZUMBnLv0JO2xjMy8iig7eg0QXPaAxvfqFiYTtmjaC3Gcejg+yWLOmAEqeV0 Ounsworth, et al. Expires 28 May 2026 [Page 79] Internet-Draft Composite ML-KEM November 2025 JxHYGJGflohULVK/kxPRChy8QBzsSAjcOETUwos6FsqKBwqhBArqjOXoqmdb3CVoTDFh nhSAIW09RKQuNZz9kNeQfi1oLOnuOyTq4xzjBchsjAwPFIsEQMGaryWX+UWZ4OZNwsvl 6anZ5E+gqgtgDNbQCus1blQouRhCrIhADJyQIZ91VxgTYGb19UU4yC1eetn2WBovfWoB la7NzqxlbCYRlQeJgccpeGtHHEsUmXLn1Rb1OpY+kKGzBAujtYPSolQcHEG0KLNe1sRk EYm/iVXVjLE0kLCg/suUqLM3HTG1iwXIBFaYjlRmya43DV53BGp5gZSckgAu4Bu2kZ4k rWKlom1aMY6CBq4qSzCrQoltSIzqVSXr2gEAEa06TkA5GcgdaOMItA1YWsA1PCcg5loV HtSfNiIzMKS/oCS+XaWyXm+/5aLSpnIj9AG1FK2cFqsVQJwqfJ1pgUqGIcLYLlSPaQDQ ykyRHYa6OGkCcJQqctKt9BiinSNGpu+o7dh7ct38qppRZeiddBWOGJX9QaW/KS55ajEa AgE7muCtnnBNmws+UuFB3Uti0PJyjys1PZLGVeLzUF5j9EDr7FVuTRLwZwTWosDWZRKS FfG9HCavQQu2zmCalSPD5tu9Mix6ZE4djiyWvwNnfR+PjyIw0WHl2c9FlZTLnFOzodCm QM3QbKtRZQW94yVFxJCXOoga3GJ3PJv/hGoHTx38TWq0SKOamALqRldsjRoMHfCkSlvb 6OMvFUr6HGTQJAKCMIOg9GXK7MmAGyxILTGW+HDHpqjFxexMZAxrFwuxWzOmcseODEVe mVScZW6EVQvdiZsYvMn3ccqqKZp4nQyOelpUOATWfq94aMND9bA6thUtfwdoWIdKlZTK ttmatNT6SCI74U7zFp1CVdXjpDM1xJpRxSYgpx1zWV8UTidnQdJUQA3D1fMIiq/aAwqQ WxzsxeIuIhAgdatGhE80DOTGPZ6o6O41demLldEFcUduLN7KREw1hpvLWAWVZcFA/BSf TAtbpwb9lK/QyaX4iMRSriQ2mW6PjvD/9PMfyF6umdvxJgVAnFFhmoEWfkwand88qWI/ EdiQWtFokNhW4WL4zplnzRdg0lJ/owtLEydkief3epupigKdtKjZk/Y7573Jjszb6ORX gyo1H5drDkeri24wDP8JLwwggEKAoIBAQDz9mXLXYPlBxooTA7eJYoAPnw3yo3iUUlL8 m5bIAILsJ0C1hXeACt05tAwLgn9P84z+2HhE9AMeC1LwYwn6NK9qNWt5b715N9HA/a/K MK9jyobq+L57zQnl6s2lHQwLV/W2Qd68HgTU+3hdupN1T5n21hGknIVSZlGJUZcNVppL WsdcRlOblQnd9JKHyVvavGc6sBKvZs4sNB2QLcHZhJ4vby+vMs9eLb2Jxz76oGmbZeyp eSZ4dkzHm6RF2VDGNUi5UQeBpg/XyaulHZYq/egDrFNmhGX/ebA0J4oDNBpOOEAK3Rkc bN00y7VJ8MoBINmGmf6Um7ZIsewMupJTBPBAgMBAAE=", "x5c": "MIITrDCCBqmgAwIBAgIUfPcEPXyqF7xJCPYr1e82q5EBq0owCwYJYIZIAWUD BAMSMD0xDTALBgNVBAoMBElFVEYxDjAMBgNVBAsMBUxBTVBTMRwwGgYDVQQDDBNDb21w b3NpdGUgTUwtS0VNIENBMB4XDTI1MTEwNjEwMDExMFoXDTM1MTEwNzEwMDExMFowRjEN MAsGA1UECgwESUVURjEOMAwGA1UECwwFTEFNUFMxJTAjBgNVBAMMHGlkLU1MS0VNNzY4 LVJTQTIwNDgtU0hBMy0yNTYwggXCMA0GC2CGSAGG+mtQBQJWA4IFrwDmSqRWnJU+Ionm RAag5zBu60DzITCwEikVlMDU5nI+Y08XoEA4VlkKRDPEW7pq+SchBzW5Zij/CpNIsWhy lprqiCQ1oAahQ2mCrH45UsYekw9QYw0OI0Eh/HNp+c1VZ1wLUseLFsudgpVxQQQ/HCI1 Mh4KIgFVayPL/AJ5u0PuEkBlEWVg9cSyRTeClKW+mgy0KSx9BWfRW8glIloei7OGAVRR tRvTKUoLlFWUK862i0Wk6UiJhndPgbQ/9j7asz0Dgb+ZK2ft0RYQVKvtR8Ry+AHEVJUK 0R34Yblg0n/Nlc3Bu4SfA6ahgifGlgqjGqcnsYB/xlTrm4dyY8rO2hRiVlQwGcu/Qk7b GMzLyKKDt6DRBc9oDG9+oWJhO2aNoLcZx6OD7JYs6YASp5XQnEdgYkZ+WiFQtUr+TE9E KHLxAHOxICNw4RNTCizoWyooHCqEECuqM5eiqZ1vcJWhMMWGeFIAhbT1EpC41nP2Q15B +LWgs6e47JOrjHOMFyGyMDA8UiwRAwZqvJZf5RZng5k3Cy+XpqdnkT6CqC2AM1tAK6zV uVCi5GEKsiEAMnJAhn3VXGBNgZvX1RTjILV562fZYGi99agGVrs3OrGVsJhGVB4mBxyl 4a0ccSxSZcufVFvU6lj6QobMEC6O1g9KiVBwcQbQos17WxGQRib+JVdWMsTSQsKD+y5S oszcdMbWLBcgEVpiOVGbJrjcNXncEanmBlJySAC7gG7aRniStYqWibVoxjoIGripLMKt CiW1IjOpVJevaAQARrTpOQDkZyB1o4wi0DVhawDU8JyDmWhUe1J82IjMwpL+gJL5dpbJ eb7/lotKmciP0AbUUrZwWqxVAnCp8nWmBSoYhwtguVI9pANDKTJEdhro4aQJwlCpy0q3 0GKKdI0am76jt2Hty3fyqmlFl6J10FY4Ylf1Bpb8pLnlqMRoCATua4K2ecE2bCz5S4UH dS2LQ8nKPKzU9ksZV4vNQXmP0QOvsVW5NEvBnBNaiwNZlEpIV8b0cJq9BC7bOYJqVI8P m270yLHpkTh2OLJa/A2d9H4+PIjDRYeXZz0WVlMucU7Oh0KZAzdBsq1FlBb3jJUXEkJc 6iBrcYnc8m/+EagdPHfxNarRIo5qYAupGV2yNGgwd8KRKW9vo4y8VSvocZNAkAoIwg6D 0ZcrsyYAbLEgtMZb4cMemqMXF7ExkDGsXC7FbM6Zyx44MRV6ZVJxlboRVC92Jmxi8yfd xyqopmnidDI56WlQ4BNZ+r3how0P1sDq2FS1/B2hYh0qVlMq22Zq01PpIIjvhTvMWnUJ V1eOkMzXEmlHFJiCnHXNZXxROJ2dB0lRADcPV8wiKr9oDCpBbHOzF4i4iECB1q0aETzQ Ounsworth, et al. Expires 28 May 2026 [Page 80] Internet-Draft Composite ML-KEM November 2025 M5MY9nqjo7jV16YuV0QVxR24s3spETDWGm8tYBZVlwUD8FJ9MC1unBv2Ur9DJpfiIxFK uJDaZbo+O8P/08x/IXq6Z2/EmBUCcUWGagRZ+TBqd3zypYj8R2JBa0WiQ2FbhYvjOmWf NF2DSUn+jC0sTJ2SJ5/d6m6mKAp20qNmT9jvnvcmOzNvo5FeDKjUfl2sOR6uLbjAM/wk vDCCAQoCggEBAPP2Zctdg+UHGihMDt4ligA+fDfKjeJRSUvyblsgAguwnQLWFd4AK3Tm 0DAuCf0/zjP7YeET0Ax4LUvBjCfo0r2o1a3lvvXk30cD9r8owr2PKhur4vnvNCeXqzaU dDAtX9bZB3rweBNT7eF26k3VPmfbWEaSchVJmUYlRlw1Wmktax1xGU5uVCd30kofJW9q 8ZzqwEq9mziw0HZAtwdmEni9vL68yz14tvYnHPvqgaZtl7Kl5Jnh2TMebpEXZUMY1SLl RB4GmD9fJq6Udlir96AOsU2aEZf95sDQnigM0Gk44QArdGRxs3TTLtUnwygEg2YaZ/pS btkix7Ay6klME8ECAwEAAaMSMBAwDgYDVR0PAQH/BAQDAgUgMAsGCWCGSAFlAwQDEgOC DO4ASNE8YZUxkX1TWk31M0tFit9T7kYv8G60gaGV+oEF26phzRSiFYHNmZlAuj3+HXRD xDuX/ZTCQFbBBB735MFQ/PVIJXZIn0SJSyy+bzOmevP6kS24dg43zrOm+4kic1WfkFkT WgR1swFzhz6OgDu337bInY1fYy22BGjwQYnBPprlnGECy3MJa9GgzL4ip0wE8lQnHC4W eC0a44+n8uRmXTGG1r32RTg9T3jLhF7d9Gq/Ta7rZvgo23oJKEsf0ikLOm/DeP2lqq2l tAYqlDZ/23bDuGBQYVxs8HPhy6OrD/Ox+Ib2Diy2+2HZVPIUrsjWIDvNSblh0Nhml1R6 NE7z5qfdHco60KAYJdcZ4ki2HV4VDvDiC2U5pMevDgCVToosOeD2iiYuzDjl2ybS+6qo SymjYYQ4Nm59a4oIH/FwdEFQH7I5sUx7KrqhXl3faQWhwtXmETxQNU+6lE2OVF8mPgGa A0kZdARSVkOV4xZpahVQ56M1x6aZnE/aP9jDhLwaYhQxh0Otfa3YeLXUyYWdZye8HGhT yQ2B9GYUWZ9R8W5RYbUrBJdmJQxzbfhBwO3xY+MzBsyW2zg88XObmvk5t2BhL0rtpFgO yA5s/DoAVGLFICnVDmJcq6fiiJL5zPbXvqms1L5BAIUVc/vHvPKluwF1gnpxtxrbosNo iqbqC3TXptm55LRjFIlYV4Z6PicgizYEoLjdnIUtyK7rF7SYbDaBD0Fk5B9Q7PkWFTky YvNS1s7I87EnL/KvXPEh6PmQ196rAiXEz3hY3peE2nPio3PAw7Xzs/J12c2I+XCTyQxS /TbyDpEYjb9rWa0ZhWQ+AtnC3N4OBvyMS2+JbX+LVZ/CkO/lC2YFYmBXkX3hEHpGVhPu p9yDSnnBznYaIeD7X/NJPDO+xeskDDNx+kjwzaEAbRsZIQY9a2wxlL/hURqZSz+XhvWN Gz+xY8yty2FLebzb/kqn4CW4ylVPr2lXkxc6H/af6AHGrruzalzAj0d5Hnxz0rigJt9M JTJm5TsHQP3BlhxgwIeGEOoSQAlQmCs4oXtIeen3oha9Bp8dmHJhjlQIR9pBME7zwwj2 9jANPSpwiQstlWbIbcxSlJ7JBVQ/EJj6cJWTEqTzWlVSLOKMy75pnLF4sT7XE8O53FbI m7IZKkudKL0hQsxfUyfDk2AG1DvbdnAS5KJIfVowMd6T0TWHMn3FEduTE1nXqbfuSnF7 jlU+jNwMqueBDtM1nXetZa9LOQyaubDC/954mFK2FTPXDUCd6NdIFOR9d5ed4RaYSdDR kh39PEYgYD/7hxtVWSTAltnsPSn6fblMLIN7EHiI4R7bHpBRzamVpzw+1QNDoUkdikpg aLEHhn2wAvLqHzwX56vMhhAWHnNCDQYo9xQuHe/t3RaKqdfYBXq5EKyC8PiyLaw5Dk08 6P7aXscMFy6jEwvFY6wUdWmLCpGY65n5d/hHv871rad82xrLMJQbxF66DAqusfzJVzeF kqlrpa0cE6Z6x/RHoU+3q0vcRcxevqAfobEXgL6yTg5YWK6opf5u8s4uR0MfqQPeSSiX qHnjdZT7ECNudnq4gYgomH9MUv+bDA6EXPDboP6+E6Y6ocOq/KIta3x7y21J7zZy9MMU oVfuiON0I9+AxGr/ygX74QRsIhCjkO27uyZ2fN1n/t5BrWJTZQTIl7WFtIj2Z6XML4H1 pGOTJUkBxJ3ZADk+loNIUSAu2L0iWeURApgvf2Mjcpm50ilWuNkuuz2xt0Qqfa9EKdqD FHg8u1+QR6a65N27pisJp8+vGob/4iDPzUr8M9tKGADy101cHsYX1q8Ko9HQjT5vN7MV kIo3aHKFShThLRv/UUxfANZsjn8YLYiV2Z7BSrvw3XrCUwSL1lBi1ewoSH52CDlNfUxc XVyGEO652/t/4BiS1gra7cKwqJs+sxqRD99S0aQ8j9S2l9REYLkpcEwuupeg+q4jPMdh u1M3TqT7/vKRKsOuGkrfuB0d8DpoR1SeNA7DK42ZUkfgtbsv5JEBVt4B+9m+JLaqS0Cg WTcvRjMHwVb8wfTo4viMA9LONWMw11Dt5zHqdqOtamgVMYpZIB0ITZ3BE8+fMA/4bNAS 5hAl13lYU1GbmeWPDu4rUbf7V1t9wTcDIFnP3cvtfTf3slKbEH3GUKhuUImi/LHh05w5 W8JIirWt2Zko+jDfuCaTUaHQYoGXS5l81AkBRADlQFmcRs2Eg2uxgSF5lGYXOyv0Jt2d cYyuAwJS8f3mzyej55IMW7bwX6XXi49uPz88FCMsKMn4d7jVw+9IzELFGfxPiNRzTHcP SSjnbyjEFvpxq3LkenxSmtFVy5IxsCRvsrleBzqxQwjGnwopVqhnowv6LRQ9ehc9LCGo joBGPnXXjXiLcAITb6KNk6Ao2qkgGoyZ4CNNnfib0oJJLpmcmNpbBIzUFUJS71V7viqb 1buxqTM8f8l2CN2T8SEDSNjJm5hCSTXT1S7OQB/f7du34tUTOM0qN0MXMO0rw9VQ4hCt mVA3n0ptGSgPx6yLggeXji27xQfxEFgYjHP9iqGn85NwWmWK5BHRwApGtQlqFDoCpDAS brbfBvULPEzRvzlYuz+TIuZrkqgq8ePHUI1CBBGLDs5TsHy+iKlPULXUNU1vZn2pwc0r Ounsworth, et al. Expires 28 May 2026 [Page 81] Internet-Draft Composite ML-KEM November 2025 1j4HvPQtftPcnY91Afr2+oAvYA5px5VSH2SmgGeuhv8QWhrej0rkIoMaHm+G6cw2a+lu H9K1M5U19CT/5dhdPkRCt5Q4AokWGVA4xj1hE+mFXaMlfFYsSuRWnT144/i2SbcIAfIs jjvpsdBxggmjpauK622YhOKOvCPh74FLcecSDqoXYqRDyeolqvz0NjDdsz8klQrW/qjc eJGEOWEla6KFe3YT7mUEQilOjCBaNNS0M9AicUOC951NYVPrxdUfKpmndXEkJVTlaqfb Tj8EBsuCFfir9wOtu4ddLNsOHjWRJas/EwletoRqYni4kCl0awoUb73Ya8R7izLs2gkv R8c8DMCcJ0S2TNGq5dDHTfvD27XziLSU6XYEPYqgRTb1W+/Qip2lJzv6XT1UP4gDsPjB 91qrNwfxW0qR63ADKW+NEmsvS6EJWBXbo2k03FgLWbNd6PTt7ebeMotjvHa0sBL0vrvm 7MZAPDKm8zdTtf0hDT+4lBg5PPVTEvWmym89CQ7c7TeMvlVIF09oks3CIdSpaG3ZkFN0 kxqn1Gcnv2yzj4RIF3BH3kHeToAVsbO3SjQKFBOpODM6H9N3fUChgFuvl4ESvCTQEACN mYMqQB8WJ1mlwo3dkBL+XjYKsa8pRy3KpBlLCYy3zDwBrW0ooKxEiyJU7rVsWbg9tWH6 wtrNQASh+V+40XSWHPGNTD+udP8lUCvoSF3NdSPvyOPAPmEdyH8t7oZG3PX19ezumW5d 87g8V4QDqgaLbdkDLYal1lSq0a7UpWHK+OuUDItFjH1VsuEd4MEdCNdNsyGM7FXQ7hRc wxGprVomyYqY2NeTdhsPL8fPPl4mBF3GBhmOzNrec0fy5jBLsIAcrNcVVEJaU4U+6wCE zMldpgimLSL4jt24tuwkhNmB9hGgaFMCBWJTrLpxydYidowdXttC3xs2uf8NcolY2Dpm Xnmq6Pc7UsMi2OhZJ3XLa5Tgg70EhT1k/RcRyy9FWNW4Dus1y7fuVPMzWodelo/dP8fc K/MHJquemfcBcZ6TWofc4QekbpFK1q9KuzOenB7ZQOcAK0omnEbNlBD3ubvtK/36PD98 ut5rqTM6ZX9pujXWwwgGJyTePm2/G47ox7yW5BZBmu4MpjUSsJ9RliPv7zngB4hUBsGM nAqQmId9BfG07wk3WjhlCxV4MF2RuEeZlUl4kjhrKxoo807eEzpQ+ORnFSsbOO+3yPAP OfuY9ahkW8CmL15Mwpdqn5u/XK1ZJwH9/PO5VRFLvktHYePvlx3bkL0r/y8ERjzfvngq 8GtLyCc2q1E39Exb5uJAm8fGXmQP3iJ1RyJEeUxWDIG55Zf4kUwYY3N6GFM7bKVxzZyg 75R4PzIsd+KeHatrqSSby+APzVjDvoiOkRtKVQhM6AZNvPpjfgY9m4Se0/xFr3yWF206 9u75leFMlqh7DkieHBpX9kO+hskEfEMGktQSCcI1yRfPE3Jm0unHm8oFGxC9rlxNkg5e plyrVxFbDe8dc5x4AiLwYH4/r83RGXD+Se4A4iX+n6dVxKaCEVWVO2wGpMh+k0AmKJNd mNceIkpKENISopdlCIEAcmF2AmUb9ur2lzr0oftcziTTG83ux5S5AWiuX6WLGuHEibO7 FN23o1FIi1vjo365li86v+sY+mm7Xd4OtIxfQAchGd0lRTQoiXMaM0tvfIad6VRdYrC3 u8zTHkmBl6XO/wFhfoKforrR6QNqgvT7FlNe2doAAAAAAAAAAAAAAAAACBAXICUq", "dk": "u00VG+RP4++IUPgC5C/YYCtWhBGduJRkSkZPg1zyUQni0HkZSzfr99egFDS/X +YXB3K3leCY8sJkkPjsZS72kzCCBKQCAQACggEBAPP2Zctdg+UHGihMDt4ligA+fDfKj eJRSUvyblsgAguwnQLWFd4AK3Tm0DAuCf0/zjP7YeET0Ax4LUvBjCfo0r2o1a3lvvXk3 0cD9r8owr2PKhur4vnvNCeXqzaUdDAtX9bZB3rweBNT7eF26k3VPmfbWEaSchVJmUYlR lw1Wmktax1xGU5uVCd30kofJW9q8ZzqwEq9mziw0HZAtwdmEni9vL68yz14tvYnHPvqg aZtl7Kl5Jnh2TMebpEXZUMY1SLlRB4GmD9fJq6Udlir96AOsU2aEZf95sDQnigM0Gk44 QArdGRxs3TTLtUnwygEg2YaZ/pSbtkix7Ay6klME8ECAwEAAQKCAQAAlqP3lFman3+oC CpyprGW1nh5HFc4g0TcrBwZwq7G0qdeilYrQcbByN4C7Y6XXmg6Hea6lTzRVcqCLa2+N rf1tqL6hNbvslLLfG9PXdlNbjOnLZXK21sqaLyP4PF0rgzp7oYcSsHMuI8mQKG8gGpHa D6vpIb/R9/wHi3HCkfnj7uoJYiTQVbwUC6BT9mcabtqqEw8JjKwqlsYMhKNr+piZxIoW Y2Jl8rywGYXfbU4+ebI2YgOpxFkXYKA/ho8P8iz/OwhwLw2DzrG4AuEjtdevqJg06g3/ p9R5G2Vd/mHxJjHopP8aG/Rxc5QZPx1GqGczwlGmYi+SCU3kfQymFsDAoGBAPwbDeMT0 fffAvEnzl7FY30V8DA01PiETptahjdVdRQ4ASIoE3bSXgoJyqiMzdacu087B8/0RL12j ZWxvzk0hqFx8LK1zKlsKUyLoUBaHdgc81O5unbmGt8iZT8rMdblcBThDw7Wyo4MneD3d TPWK2YGCHNQnu7OlybvroWL1MxfAoGBAPe7JC8Jv06KN+2PeN9dVWRwFN6eLQ+ggefz4 QlY5VHzS4kZU46t/54UdTJvSgkccD9ZfSecW0zMD4zNYemUZFhTtLL15oO1LJi4uJ3qc RbI6Lek8YQ+IXvUUcSX1m/VlTc4ax0EvGU7w5qjbOqy2TSpDJekSq9HjeMe22MXHRPfA oGAALYu1tpCeHmnr3iWS4wxGLRMJkav5zewZR3fTR6vouv5jNgiHe7AFzUp3knvdtCgc rvO7NZar1I7WhXTXVz5mFETBd4fgsbsYuvt+5mFhgum4DChBx7lKoYVVRVRIbMqGtT7z uXqUnZUp8LrEMdk/fe8ZF7w4+mvYYvBqVzYr+8CgYEAkdsTUMaSZnGmwC3q4sgXEM2U3 AWRTlQYaDME2fYG/psabBwHQEhd6frtjcZMdtTRmdrcf0fl0W+L8EC0V0xRUFfoWj3Bf OZc3YZU3FU+REYCDq4ErPHP0RKPGgqz7KB5/EsxdaJmMcxgPFngNMccb47gpR/MAStF9 Ounsworth, et al. Expires 28 May 2026 [Page 82] Internet-Draft Composite ML-KEM November 2025 OUkElF3g00CgYEAwXHaVl9Zi4psrPtaIE8CSN+nmRcnoFzRDeUi7YU84Q2gGP4NHEz2v qkrE7UMYOPKu6BpXRAgwwqf6BD6bs36rZQtTyTE6ZrVd32j4TrVDUmUv4TIuy8pQIhlW qVF/jRHv9B1ZgLUmLak/cLj+wBdGxlBRIiMAL5V9ig7zvRyFaA=", "dk_pkcs8": "MIIE/gIBADANBgtghkgBhvprUAUCVgSCBOi7TRUb5E/j74hQ+ALkL9h gK1aEEZ24lGRKRk+DXPJRCeLQeRlLN+v316AUNL9f5hcHcreV4JjywmSQ+OxlLvaTMII EpAIBAAKCAQEA8/Zly12D5QcaKEwO3iWKAD58N8qN4lFJS/JuWyACC7CdAtYV3gArdOb QMC4J/T/OM/th4RPQDHgtS8GMJ+jSvajVreW+9eTfRwP2vyjCvY8qG6vi+e80J5erNpR 0MC1f1tkHevB4E1Pt4XbqTdU+Z9tYRpJyFUmZRiVGXDVaaS1rHXEZTm5UJ3fSSh8lb2r xnOrASr2bOLDQdkC3B2YSeL28vrzLPXi29icc++qBpm2XsqXkmeHZMx5ukRdlQxjVIuV EHgaYP18mrpR2WKv3oA6xTZoRl/3mwNCeKAzQaTjhACt0ZHGzdNMu1SfDKASDZhpn+lJ u2SLHsDLqSUwTwQIDAQABAoIBAACWo/eUWZqff6gIKnKmsZbWeHkcVziDRNysHBnCrsb Sp16KVitBxsHI3gLtjpdeaDod5rqVPNFVyoItrb42t/W2ovqE1u+yUst8b09d2U1uM6c tlcrbWypovI/g8XSuDOnuhhxKwcy4jyZAobyAakdoPq+khv9H3/AeLccKR+ePu6gliJN BVvBQLoFP2Zxpu2qoTDwmMrCqWxgyEo2v6mJnEihZjYmXyvLAZhd9tTj55sjZiA6nEWR dgoD+Gjw/yLP87CHAvDYPOsbgC4SO116+omDTqDf+n1HkbZV3+YfEmMeik/xob9HFzlB k/HUaoZzPCUaZiL5IJTeR9DKYWwMCgYEA/BsN4xPR998C8SfOXsVjfRXwMDTU+IROm1q GN1V1FDgBIigTdtJeCgnKqIzN1py7TzsHz/REvXaNlbG/OTSGoXHwsrXMqWwpTIuhQFo d2BzzU7m6duYa3yJlPysx1uVwFOEPDtbKjgyd4Pd1M9YrZgYIc1Ce7s6XJu+uhYvUzF8 CgYEA97skLwm/Too37Y94311VZHAU3p4tD6CB5/PhCVjlUfNLiRlTjq3/nhR1Mm9KCRx wP1l9J5xbTMwPjM1h6ZRkWFO0svXmg7UsmLi4nepxFsjot6TxhD4he9RRxJfWb9WVNzh rHQS8ZTvDmqNs6rLZNKkMl6RKr0eN4x7bYxcdE98CgYAAti7W2kJ4eaeveJZLjDEYtEw mRq/nN7BlHd9NHq+i6/mM2CId7sAXNSneSe920KByu87s1lqvUjtaFdNdXPmYURMF3h+ Cxuxi6+37mYWGC6bgMKEHHuUqhhVVFVEhsyoa1PvO5epSdlSnwusQx2T997xkXvDj6a9 hi8GpXNiv7wKBgQCR2xNQxpJmcabALeriyBcQzZTcBZFOVBhoMwTZ9gb+mxpsHAdASF3 p+u2Nxkx21NGZ2tx/R+XRb4vwQLRXTFFQV+haPcF85lzdhlTcVT5ERgIOrgSs8c/REo8 aCrPsoHn8SzF1omYxzGA8WeA0xxxvjuClH8wBK0X05SQSUXeDTQKBgQDBcdpWX1mLimy s+1ogTwJI36eZFyegXNEN5SLthTzhDaAY/g0cTPa+qSsTtQxg48q7oGldECDDCp/oEPp uzfqtlC1PJMTpmtV3faPhOtUNSZS/hMi7LylAiGVapUX+NEe/0HVmAtSYtqT9wuP7AF0 bGUFEiIwAvlX2KDvO9HIVoA==", "c": "H50AI0e1KOFaOAJF9swwnuOHmYiiaP+4Sm1r3ocMv7njTLlXR6oaSimvg6od/b jQw1QDRooYD5j0wG5+Tqr2ditVslsxM9KqgTp9IV18VFSgfLpkxoC1QRcOB2v2KJIFbx lK1aehayXWh51g45Y+toz2/wRFo9XNgRv1z1bC9lX7+PteUD6DHVWz6SjyFHN+MZzyO3 Q6LWcJKNI2wZykvvzl/v7sK+Os9PJqGtK+3k+FwHzc8jErfqq5TvEwj+d648z5QRTnW6 AP/SHBw11AqyNqswOdR2rxiKfmUukoJnrLF/3UEweBvgw4b1Xhjp6BhGhWCuYJCvszOc Q6d1Br/VAXi3JZPa0PmwopNDoCRSk0np5kRTbGSy7JoPyz6/B77dj660+0WmgTQBDoZO X0IJ7wCPbSLi6PX2MtkHheiQwPYoF6a5fyamE1Epgt0Ri4cbxt530Y3eDvNU3yPvrin2 C0bNAgPmEzDBCKXC/1vM+B+C3JKkva03aGz78H9NTBwugD+XARXLOa2awJFVlKZiNLkj ODHkkDmF+kME3vMvzmWjZ/ImTnFXDFBs7diqHorypxb+vrqSq/TJr1Fif47GgNgGBh3Y ZKYVlgUPUg7S8gSgiykArNwkplNph8wEfRZ0OUyHdPqrmk1I8w1AL9YoqS/p+3Y/EwWo 5ceRjqbVSu0RDZeek5r9RUZV4NsnufGc0KiGDay663SBhrcclrxnD+3zOj44Y8239OOc pWFf0vKuPAcggABAgudeACUle5jJR3snNCWbJ4nPD3GkcJdADnJ1l2Cf0UkErn2bVAnk 5P53Q3JMkgkC9MHMIop7VqE8PAqmldmnCeF1xThlPTMb6dWkkz/GTsMcAuJm4oFlLpz9 LT7jkZF/sojyziSmoSjd7qP35NaS1BZlF8zqDf4Y4tMkugVVJ+cPv4Sn31Re355Cq2WF KwGtgjBLbpMsRNIR05kC4DcFXmI9fjxnpq/UOpvCJisaQog8ObIbeouBm8wPenxCdQ/H f7zfyPteXHR04tONwf/3YLVMG1REeSL6bhlcNbC4bf7x4f6gPNnzdBh6O3ANeRS/fVRg QmfuthGlb/D7kDEX9LcFF49u39jn77IJiQpKdSshG7ylyvYu8gwxVi4gsw1Y+L3eY6g3 DxTtgh/HlRA7FZfjdM9xM61lygl/ekaXB/gxv74jNeVz/PSms7I+oVdXzYBI/wnU02p8 TPMliKqZBHPwzFoZHg/eKc4WwK+kK6IWe+ziLu4L787ZrOVQOTXNrUs+MuT4/RArqGz3 Ounsworth, et al. Expires 28 May 2026 [Page 83] Internet-Draft Composite ML-KEM November 2025 LJwEBM7ei9nDQRDtESambZoXRLElPBrtfTMmNPzS4S0pwjMihem8r4X1VbgXBV6aNSkI JZrXlCzIPlIg55qmOH/HmumzxuczJ/5XRmsyluT4WA56Ly6Dt7rsfW/wzOPGufJV8UQz k9FYgH7/QOlpgLK81birXiN8xNE3Svkm8a8XKPuVt2C0iZQ7xESPQlS/YPiH59R0ObKi yMkqns7OIryZ6TIOEiPshSqEINBP0zT0TEieEBdgY/Eikj9wzshuKy2YKrlSQfri1kLJ 4uj2k1bbCZEVp7WHTXsedw/2jWcC6499KyvdRmbDty8OKKs7wW3Skjr+3s4TEhWghGCM BPBk5xEht+8etsgw/b77VJ359yp3OMK6zQe0GFi24cguTbx+XYG7Zzy0fGf3Jj45uuYq iO1zwGFFIytElblmuQxqdKvLtvu1pWYyYyynYCpSBpQ9an/lfHX+KACVr3N5T0g2DDns I0fe3m5b599XdR2jBXCIWvKqeUUzPh", "k": "OAjwncX1PeXEDjges1qJFVPMTmGNGXQbS0c7msK3x9M=" }, { "tcId": "id-MLKEM768-RSA3072-SHA3-256", "ek": "WbmobXUAR8jI2yAp+Up0MRalFciFP1pA0wYMMWI9PwMy8InJx5mzXlOqNGc0F lWL5Ttm50ajM5p2zIMw00Gj1mMF8Lq9aIp4H7MHCQilvQxVX9qscgko1ElMYzgmQTFwP aKl7tCnrwWpV0Ar8bTKfsJcMdZr3iW3/PZKSMHEUQMif4eKeTkrCXSHZyeLCkMFoJBra 0ebxbEhGcV/MWlFbcFeQcsCbtVdMpNqCwEkyvKZ7bTNjGJccuHBvCOwbjaEpRsZdXiUu mB8HyumzJmWZOVfeuFEEzp67Jt8sLtfS2OMO8hqaKyNXCO165pFf2pesqcQomhhlFnGm ig2zRA9AXij2WQc8KE3QHqxqSQpxRRaXmylnWvDUMoULbNbwJBH4aIpqvwM8QqDwMKTg CgD9OhjyxQTV8FmzgxOWwKToEMrpoIplngc0ymTDKGXRoclSitY5SfFynoznwtcBItbE eCrNotzdnVHLZYHleQXE9EJyuA9H8jH9euGDYyH42KKVSsIT+Ij2CRy3dCIiEqwEjp8w +CM+CkMn6UbdqRVq7C9u0EKoCG1hKc2NpB6KMGYxwlLPwFckSnCE8Z3QOy/gLUsOAZry 2Q3/NzHl0C6VTVqgpVRTbZEQVJFL/YHI4diHUIgY/RYLtyQXYRKnNGuZBy6nfrKtNUBi /ydnlcCDOo8B0KfPfCH7jyxpCPHShaRijt7dXu/3TwsEqBVS3hfpCs5c+LPtMhU3SEzX nVVpAgT3uFfZsE0AzKSrsZbSuC1p9MGWSBQYjW+kyUbxhsomLa6IwlP7Xxs7Ap7+mpmy UUvk+V1rnt4HpRj71wqiuqzcaeyN0sLpLJ7S/eO64BjenKGAvW//oBBBYbKwVTHzpcZ6 WCblGRRZxorRfuKZQGTCpbJPjkI8TQayBrPPEh1piaf0JshDwfHFBlpkQhGZxs+n1GnV KgM6/LFLsB77yZVraRZktyyvUVJUbImRbjBXKdk2aKS3CGrD4OBzHNllNaJvcTLo+ynx DNkhnWK5zADxjR8SKqHUXlSlMmkc+Kr86CSywDKvOi1obOYkdofdOS9ozCmdDBc9jx3I kl3IZscXzOpnoNsnMFwRgkmWjlQjxGMrEXBR2Id9yMyxUGvbKUweNarSyrFvJQcG/cAz qNFU2kzJZgTwfgS99FnydkSHUFGh7U5XvOUgOltaFBgkDyEPQWvxZE3MpBpishb0uwCg hzKyEGxg6wSiRIjs4diE8zMu+gzMpmIAbkf5REJf0a+pGVeLvdaVORQJYUNrYEfdxYbu WaCU6Req1td91B5PMV5dQfFEoOLKxN+HPtRZ6Qne4a7mXqwWktiYTlyqnd/WHFq91OqH wQiiwEmILGxoailLBqkPVXPv1etCqsz7EyabWNbiWK30WgNkxjK85jECeABkdprtASa1 TuxV9aNZ+hFjDAj0LWpb1JAq1k/CMlf3BV//ywidUJ1KOrMkyoAwFwGzbFHPiwJ7KEpC xWVewM7S5CFn9R6slh3pcEEPvBRgukhD3iqtVo/AfBjzGsjvqQLl0jIsIzRPHjOhCPtq o4LhvOMUUj2mp75EFG1q0wwggGKAoIBgQCr5MGU4b1JaAAWYp8mt8crUY4SJtVuTGbyh KemOiA8GEI1bXSmRnoOMSvHJdMQpStX2V8T8LbX/JhF/lMorWlAFObYCzwt13SzXHM/7 jrNS0Y6atmyYBUCCX0YGm+PtDuITNcySezzr8fRyPTY7aHdMSacg+OSKwqm1ilrJMlBn nX3GvjH63GdDreCKrKc/ZuWRUle00Gd9I6jhJVi+xmvQW+ibrlGSjMYBm+nLTuKDmmd6 7rKQ1h1SmJnxsmbii3/5gZsOO36aPKluXtOZlTYgKkZESFty6U5nXhylN2xQ3jyxKfcq ZuUpnbrGEgHnSbk19wOOTEN0fgprcdHIIdCv5NqsExWpmp5wtvvxXtRBEGkdlYSL5X83 B8p41EfLC4rrDGijp16qk0R2Ebl/0aXKQf72i8VBEOUF8VLKJEUQK8u3imXDGuYjiIDU xleak1n6k5nkMACdKlFD3dr4lqdc9ahkCuryaU9pMgdA4oq5eep655q9kWGgWwxsMKeq McCAwEAAQ==", "x5c": "MIIULDCCBymgAwIBAgIUcG3/zVgk4Zf2XBMAziBaVqbtD1YwCwYJYIZIAWUD BAMSMD0xDTALBgNVBAoMBElFVEYxDjAMBgNVBAsMBUxBTVBTMRwwGgYDVQQDDBNDb21w b3NpdGUgTUwtS0VNIENBMB4XDTI1MTEwNjEwMDExMFoXDTM1MTEwNzEwMDExMFowRjEN MAsGA1UECgwESUVURjEOMAwGA1UECwwFTEFNUFMxJTAjBgNVBAMMHGlkLU1MS0VNNzY4 Ounsworth, et al. Expires 28 May 2026 [Page 84] Internet-Draft Composite ML-KEM November 2025 LVJTQTMwNzItU0hBMy0yNTYwggZCMA0GC2CGSAGG+mtQBQJXA4IGLwBZuahtdQBHyMjb ICn5SnQxFqUVyIU/WkDTBgwxYj0/AzLwicnHmbNeU6o0ZzQWVYvlO2bnRqMzmnbMgzDT QaPWYwXwur1oingfswcJCKW9DFVf2qxyCSjUSUxjOCZBMXA9oqXu0KevBalXQCvxtMp+ wlwx1mveJbf89kpIwcRRAyJ/h4p5OSsJdIdnJ4sKQwWgkGtrR5vFsSEZxX8xaUVtwV5B ywJu1V0yk2oLASTK8pnttM2MYlxy4cG8I7BuNoSlGxl1eJS6YHwfK6bMmZZk5V964UQT Onrsm3ywu19LY4w7yGporI1cI7XrmkV/al6ypxCiaGGUWcaaKDbNED0BeKPZZBzwoTdA erGpJCnFFFpebKWda8NQyhQts1vAkEfhoimq/AzxCoPAwpOAKAP06GPLFBNXwWbODE5b ApOgQyumgimWeBzTKZMMoZdGhyVKK1jlJ8XKejOfC1wEi1sR4Ks2i3N2dUctlgeV5BcT 0QnK4D0fyMf164YNjIfjYopVKwhP4iPYJHLd0IiISrASOnzD4Iz4KQyfpRt2pFWrsL27 QQqgIbWEpzY2kHoowZjHCUs/AVyRKcITxndA7L+AtSw4BmvLZDf83MeXQLpVNWqClVFN tkRBUkUv9gcjh2IdQiBj9Fgu3JBdhEqc0a5kHLqd+sq01QGL/J2eVwIM6jwHQp898Ifu PLGkI8dKFpGKO3t1e7/dPCwSoFVLeF+kKzlz4s+0yFTdITNedVWkCBPe4V9mwTQDMpKu xltK4LWn0wZZIFBiNb6TJRvGGyiYtrojCU/tfGzsCnv6ambJRS+T5XWue3gelGPvXCqK 6rNxp7I3SwuksntL947rgGN6coYC9b/+gEEFhsrBVMfOlxnpYJuUZFFnGitF+4plAZMK lsk+OQjxNBrIGs88SHWmJp/QmyEPB8cUGWmRCEZnGz6fUadUqAzr8sUuwHvvJlWtpFmS 3LK9RUlRsiZFuMFcp2TZopLcIasPg4HMc2WU1om9xMuj7KfEM2SGdYrnMAPGNHxIqodR eVKUyaRz4qvzoJLLAMq86LWhs5iR2h905L2jMKZ0MFz2PHciSXchmxxfM6meg2ycwXBG CSZaOVCPEYysRcFHYh33IzLFQa9spTB41qtLKsW8lBwb9wDOo0VTaTMlmBPB+BL30WfJ 2RIdQUaHtTle85SA6W1oUGCQPIQ9Ba/FkTcykGmKyFvS7AKCHMrIQbGDrBKJEiOzh2IT zMy76DMymYgBuR/lEQl/Rr6kZV4u91pU5FAlhQ2tgR93Fhu5ZoJTpF6rW133UHk8xXl1 B8USg4srE34c+1FnpCd7hruZerBaS2JhOXKqd39YcWr3U6ofBCKLASYgsbGhqKUsGqQ9 Vc+/V60KqzPsTJptY1uJYrfRaA2TGMrzmMQJ4AGR2mu0BJrVO7FX1o1n6EWMMCPQtalv UkCrWT8IyV/cFX//LCJ1QnUo6syTKgDAXAbNsUc+LAnsoSkLFZV7AztLkIWf1HqyWHel wQQ+8FGC6SEPeKq1Wj8B8GPMayO+pAuXSMiwjNE8eM6EI+2qjguG84xRSPaanvkQUbWr TDCCAYoCggGBAKvkwZThvUloABZinya3xytRjhIm1W5MZvKEp6Y6IDwYQjVtdKZGeg4x K8cl0xClK1fZXxPwttf8mEX+UyitaUAU5tgLPC3XdLNccz/uOs1LRjpq2bJgFQIJfRga b4+0O4hM1zJJ7POvx9HI9Njtod0xJpyD45IrCqbWKWskyUGedfca+MfrcZ0Ot4Iqspz9 m5ZFSV7TQZ30jqOElWL7Ga9Bb6JuuUZKMxgGb6ctO4oOaZ3ruspDWHVKYmfGyZuKLf/m Bmw47fpo8qW5e05mVNiAqRkRIW3LpTmdeHKU3bFDePLEp9ypm5SmdusYSAedJuTX3A45 MQ3R+Cmtx0cgh0K/k2qwTFamannC2+/Fe1EEQaR2VhIvlfzcHynjUR8sLiusMaKOnXqq TRHYRuX/RpcpB/vaLxUEQ5QXxUsokRRAry7eKZcMa5iOIgNTGV5qTWfqTmeQwAJ0qUUP d2viWp1z1qGQK6vJpT2kyB0Diirl56nrnmr2RYaBbDGwwp6oxwIDAQABoxIwEDAOBgNV HQ8BAf8EBAMCBSAwCwYJYIZIAWUDBAMSA4IM7gBOnyk5Hq7rv8lrPPP0iRavvYPf/3Wm /gaZ3EAPBTjP3EHu/ZGTn8bJ2xfqmN2OukGzwFVCYP4lcs1ZwRGb/eu2b4843p/16m8r cIloH4ZSF6/smywQuLYYm1Ekf01p3hMzAW1GC1uh6G5B9t0/Q7hSngKcpR0FehP++Pde P2D5fsdvIDvUKzGs2LAbU7p9FPaBJw7Gm563IJIYazt2G45+U4TtnZGZGssEja1+GXn7 Xc605pWxxzHeCgv7kDoAUb8M1lNxDIIjh1lll4fcNCGhKGjGgizJjT+YSCUznOzgxoUl Slj18SV97kpCaI4pdmCJ+fgFtAWV+MTLiUFe6rD3XnR0MrMk1YsoKShNsbmPBIuVZLYu 07iXHGc3eMJ+iwtTJLO4zeXrbqjKDYr4Okf8oPue7Aiw9u5vS5dcIZI2y/+9gNpwn+6k 1JHa1KFC0Es+uz/HA9mo3JMghx+MCZSQL+VfK8ueka6i8A0R6MTTB434Aq/deIZJK/94 +IKPSs85CPaRo+aKT5DTM9pnI07z0+iNrWIzTeXESNlvxBzWb5knf8F7sQXphYM+j6dG NP/BdxY5v8EQoJbTpr40HAHHYdxLcBJ0G8e0RPG3wsT2/y3Qh7WjR71c+4j49GwgMy49 iY8t0Ak5kDDj5cSQbGpnMEBSsifWQ0xtZBXbTkzzZP+nj/5lh0Ab5H+Pm36TiUVxhuDT fJq9apJYOeQs9wuuQiF5dTH8z6Cmrs77dam2q9X2mLUY/2ZiCk/FSMS9QPv6cqefh3r9 gmTq7zUoOFwFFmnTpE54uZZ2vspq5BqVQObrSfKSV0LITtfCKvHQMF1V0SlZCj6RU6LV dsF4MRZwBEhZTLyOpANq+hQPO3JMaIJtFHwERUwCEcPUmDo8cVn9efAeTCgAVKvxqJhj F2L5+RH/puy7bLpfB30NJillKCX+/Z/oywgvygHt4Uc7dMQrGJgnWp31wj8R5egY1/3f EinQ2lXLfjvmM2ge0P8702TIpHKHF+jRa53y/aXjsofQsDYd0lRUGYoVrz+9zTorPTs7 Ounsworth, et al. Expires 28 May 2026 [Page 85] Internet-Draft Composite ML-KEM November 2025 7R8mz8tMGObCMD/4PtZ1YQ8MY9rfmC4ypZ0KZ1LW9/aztpn3J7LMqkNm64ztgcH2CAv1 fyFPlRpl8Yzhwc5lOhhJX2qdizkT5ncCYxUJx3UpCBT57QWJp+aMHv2F1pSDKQJ25kkx bGpKhv6D92zViPbgYH4Nv4riRpYPF79LzBMzeBTUQTuz/eKpnFCbQxnYwbsKsAeEoVDP xLOgyNABgDvGRihaNnT8mhRHTpqqoYCRsAP49+ayt9IyUQM1BG/Y4x1yG5Hj2HNKi++a gWgFgUm/PTjgzummeX+Ag8kysaEM6C65/Ji8b4UbaxkzStcqaZgWX+r2fBRCc2IAgsrk pk+UrnO8zO9Z4hNahoP0sv5hwLQyn8faCXcFbzDVFVF8hRlsMqDPk6FQTLFOdtiRDils vzRVFkNUaJhs9x4/edNM3QTVwxtBdjhSYMqueoBCjaoeTKWmGLyyAcktgFYIWX5Eg+Dr 6eL5fOs0CSzyl0P0X57bqM9BYrw6FG0kyt0ZU1XfZ4sUSVhyQUJb/9vnb7HvCra03U2q yuM0w0JSLe8UtCGqnlnR6yIhR+/3iGi4KTxHXvDFf5aFx4UX2FrfkLjN2ubcejNHsB38 46Qbok5Gl3nCpFPcUYWa8yQMwRoZWEOvhU2IkBWk2BcCI9f8iwRtkkk5aIxyn9mONxsE tOJrYwkwPtdogAZ103vMRG5HAoSbd3/9v+3c5Rdhpmv0ue9lVnmsBTMC+FLZ4wHeLVXL RC5h/W4BDY5eFHe8twAL2Jo+XQojGEmQn/xkPGS6MoULf11CZURi+rR7p1v7dmGxjB9v VMSteN0m+Fg7C/NJXNS6plvnGzuEy87pzfHrw25N/mbNxj3nYgD28AEEzL0/kDvz1FD1 3ilcFapZIKrwnlj1zzQKKtJuzoAvyzqLMHyvExjMwmCcQkSrtGx6ZWyMi01rU1tfY+qW BZlyWOIzIqkQsTAgD0d5B5uQXbDBiSB0ptIggZv4Rn+6sO2O6fi7qdvMlye9TZImJ/d4 EAKp1jRhzWjRLDwf9zax4qvTRy88sZ+xGGdY9dKVFisA27HLyNlPBYsRBszSLMmoDJzk bYxAtlTAyITcI9kUhvqcmMdDXxDnJwX/Z9jvD+XYXKzwFIdVnarG/kx3Xq4zQDzGhriF SqQRwS/5SFy7c/SdCAlgOadnSU0DwvEkKbFQPcfCTti66919kZLz2vzvDR6I9Em0IdZZ tkKA5z+Kj5EfRzSUjtGKXU314/tM53m/ziw1fFtuFQG+PCtMUh6w2OfbbZQ5jFwPa7+6 z2kIKn9to7MjiehMqAMmBpsS/3FqeDaIf9TSGCS4aNfy5wuUXTMFS9z/tIhMvjQFzHK/ E7Any/fQzSTLAjhjJTVLvtjiHi+fqh62r7iO10U0hAKqDnn9IEtDlx3+XX9xyWzbxi/Q hDBI88FP2XktHLXtlp0xy8qsbDpKbfiX781gbs7zqLlXQW2C1TbZ2wQwmNIJGbCL+QkD 2mMA1jH9TykIN2knGMHIYFcbUKV78aHlNzT+9Xzuonyz8VjXh/e6zFK2VFCPnav63fNt iROjbq3bZyxLuf/KA+O1a90Ovu/mjzae8T1Y3N4MpY/tKriomZfFWy7s1yTErE9rET6C PErT3jueW6Y/P+XCQY/OzHpiqbJKGJGSVOKkRWXXJxFNmUnrC5thxIfsPmWsPz+HAfSx TnxbPPqYT01/Zy1J+EMh//18z/bztvfjoPImV4efgZmP60Z/GHkxpc2J4Hma+SdqX1Pc huQYSyccbPQudu9TR6ig5QB4+Oy/ASUD8CqrR8zRhRrL9GRy8oelx7lmBm2sc4GL+HUQ 7h1eay0DspVqoLVrqsjdSgmmXxwtsVZpI+APhwdunzdPeAx0oOrcv/rYp+IRmlPF+9Ar 0g+3DQKyab4NV01AiAOqPqCUD5H3aZBnu0V9gij3NatcjH20UyuXIXuOnUEwuHp5g6xI K/fiyvGlaBkYlFh0HatZZsc7UfqipMdA7br1CmVcClrTmXiG/kGp+c3v2z/Wl6RCY9wA 79mNs6p9+ryk0fMe6uwKTb6CUQnoNlIgYfJUqXdoZK1Al2ZFObn0ILuFxIPDxwby3GEz qwznpQQrqUaW0KTHSte7IanTcDwSz2s5097sIYY+KiWuAnNmbaBA3f1jPRO0bVFDV2/A 94SDzJnhMh+7uBxJFfDQHxUOCsOUBKRfU1rO0+r6k9gi+z7tpJOBslfs23CI4s1ADSIa FaZWyMGpotuy0LkLZC8WWniuExmi0PI/7YLuTClFeWAs25mM6XZ1aEt9m2uZRP3N3vI+ k32W+ONlnQh7SnOt8VDLmEmSYnf+pk/lQehfjXYuBVmWViwnZuFjhj7EfcM+z/h3xG4O yNvuU3y+LX45eTLXUqyrFupv9ApkZen3FMpKFqxXze0jJ5dP27UpxmrgOZ+XpsnXfucB unnPyEgurwh6lkFRysZx0UL3THu9DairKYjdAA12UqXK0zcB+L9kJt8V3Idn9ZXj5Mi0 lafP3PS2zVwFpTDAgi/JxFyPkE9/aasfrU0UnZV0Zbte0Do/o1DW7Onqpi5c4H1FFdVz 09Yg7ZgKhkvGMkaN1TTLB2nnRT3XR5LD/0P5wEc3e5leAEVLf9KKwUHCYwBpiIjmBFUu RfHKmvQYlI4p8XTCrKTDDFi7RrT1YgY6/nPMKIhgHf56OPrGqCTJZItzrt/e6psevnbW lF4x7q/M+RQEzknRIj3XXCdHuQJq1cc3TW5R2oK/GtahEDHqqd/dTFb6mV0KUK5DHwoc dyN8BBr23dSUkAVlCmFGhkgtvXPYm0OTgL5RLKfh6rFpSL2uONDMzWfBS/cFiP9dnYKF CLxRpcpSLjHT23qzE1wLeFS+2mdowEmkRiXA/abuD7kc/Jp4kq0/NN+hXsAoMXdBvo70 UlcM5eUX+alGuHMX0aDEmWK5JFwDE7dkVd4KwOW7ZJb7w9pB4KU853StseamzJBldrnl XzeqVogm+bdUQ/MdaLj+ag8nQFJjYR+tescAvYunNMA9PBYuP9uKkjQ7u81eBkjXDRsZ L7g90u04JZPPXFzTmSmH1DDJzsFOWBHkwnNwxbM0/2OYR9d42xwdtNwyyWfP+pNLarxk TDqorGBRp8lJKN+4EJ7OjUHxpFRc41dI6ciFINmAjq7/ln3BcQra0nw9Ut6Aw+GREe0c vFWZ06CiDyo9lRkqM0EQ3W9RqNbkNTKTPLJ7vNqaDNKFMBfxmqEF2/aU0Hzogq4p/p/4 Ounsworth, et al. Expires 28 May 2026 [Page 86] Internet-Draft Composite ML-KEM November 2025 X3mzhIgXIY+Mc1Od/w0hJyxkc3h8kJ6+wcTO3SNIrc87P22y/hEfVG246Or6AgMeI0NY lavYBwuEiqG/4PsAAAAAAAAPExggKTE=", "dk": "UzSWgAko3M+TN/5aU2YgbnWf47+Mz+3H+rRcw/bX9DxGoZ9cskqRG2UvPcr2z xQUcYMn8+nUkqSZeAR6+MFevDCCBuMCAQACggGBAKvkwZThvUloABZinya3xytRjhIm1 W5MZvKEp6Y6IDwYQjVtdKZGeg4xK8cl0xClK1fZXxPwttf8mEX+UyitaUAU5tgLPC3Xd LNccz/uOs1LRjpq2bJgFQIJfRgab4+0O4hM1zJJ7POvx9HI9Njtod0xJpyD45IrCqbWK WskyUGedfca+MfrcZ0Ot4Iqspz9m5ZFSV7TQZ30jqOElWL7Ga9Bb6JuuUZKMxgGb6ctO 4oOaZ3ruspDWHVKYmfGyZuKLf/mBmw47fpo8qW5e05mVNiAqRkRIW3LpTmdeHKU3bFDe PLEp9ypm5SmdusYSAedJuTX3A45MQ3R+Cmtx0cgh0K/k2qwTFamannC2+/Fe1EEQaR2V hIvlfzcHynjUR8sLiusMaKOnXqqTRHYRuX/RpcpB/vaLxUEQ5QXxUsokRRAry7eKZcMa 5iOIgNTGV5qTWfqTmeQwAJ0qUUPd2viWp1z1qGQK6vJpT2kyB0Diirl56nrnmr2RYaBb DGwwp6oxwIDAQABAoIBgDJJsUyCIiNolqX14kOsfksxB9RNoiErnu6SWo2p8aZDHpOM2 xSOB8VBI2KWsUHsYFrKECPAR222y0Gm3uNGoEUMGGDaIJf0sYKLqHfqlS9cN0Z93gRuU ZcP+ZXkngC3pLcCa+6dbAH6ygWYufEAzFrutzIQ77Hif7JBc0qSL4LP/gj1zhSGz+030 f31yd1d4He8+3MPcOHqGxTBhAa6GVCJX0RxCikDKiF8OIv7ErEX+FQoE7R6sVVXFqTvp imn6cO+R+U7ugzL/6Xn6dugt7prRMjJ0Mmbtdix/odcm2mxfa2BVh2j2Mf9xPqgaRP/q ECa5KJC3OQg4ZVLDKPd7PG/ZpWsx8H5NB01qnRldDNVsgwWJ8TxwNq2Eoeq0cL4mTfrM YOrN5nfbN3PnQhLux4NF1UYmRc7gHE8Le0jkIlvcYVHwZJCHICMT1UyVAdvqs6dZajyg 0TG+BYISwnwzpwbJxtqenBb3oekPbQlaSnEvg1X+rdZzrQjr422PG2/sQKBwQDpx7xUG HX5O8CREu7KNaV3684Idh8TlHjVomi0TqvyoaCPgVn9cI4lF7C81wwEKHxpudxPjeUsu 9TuBi0kir9oyJObhgfF5/rlX/1EcvdYRAi0mZRmMbYIfwPnNxvUdppunuWj1EtXnfp80 fUpQma3jxIypllv1AN+7Cx8S2gF82u0Ex0/Ak8CLHDYRkAkCklREZCNkE6z7AQDm6Imo 7ZBqSKlw0DCogGZ9lGK9th85qXr0gLTWZsfx7H36+Xh5UkCgcEAvDs3BUPtnchlBS5sU TRCONGlKWEG0dgBwHkP9ypsyJ7xYgjJdZuxNwR8mvL7TcAaHUo7OfS0SvjET4A22ZTgE Ct39r/OQXI79HG4ydiyPVQlNJimO19+qjUBwuo/7EPXX5TokE84UA7IaU2wOzm5fTGOC Z0uIchO+UvQOnmxBTj+5MB2RBh+vksnwT0/Nu8sjkPjfI+1NjP7S/Ex8cGJ7CvdD3lBV 1UT81RztT6FHwz4yRahJG3/0L/YyIhV0+2PAoHBAK/RT4nPe6odjg2NN5lMD03JQgKLE 4QePWIt6qDwKdEoTSCgH5XDeKPc1UawVJEsAaVh6pbKGHk0Kkd4zaqVzq53asukWWQ1u zOWpVs9O1hekk2A02KoMEbjf4P8pil7qVlYl0xG9QLIBQKqxL5q+eVC7GS7RrgbsyVZa XtxGqKfF3kuhuhETDdORO/ipYp1Uf5uP1C4Hvihn8M24RQ+O2vWUABqf+HhBWNNJLZmP xpwPIjGQOnCki+sd+QEvbbOQQKBwA3bqjRYCPF55H4aKd1cpJd8T9WZECB478AU6aj/1 Zx7nzfhf7uJ5+UuDmJ2CyxxPTr00SF2M6PlZsaXoPIp9Mkb+iwPeQb2exWHHdy2eIDtZ gPWTT7HzBKJ7oRELMqfQAcIdorRWksCm5ytHJFvsYlXEacBjHjuP2o5O65icTb6OEHtL Yfb6dDmxZmDgdjwiO48b04nYmcIMrMnoc6zugzKOe8+tSHR4LMkf5RTcweTM+nSIbEF7 DSZO0OgTflZXwKBwAsr00r7rKMaxBJAdp0/mTqea5+d7AbZMbQ04MN+pTLAczHWN1tPo h7xBK7XqWIeuwd5lx4bud5R7kDN+OsG3Y2QDQ4ky5cDAyu5B8OCAylhiF86ob26BNURD fqS0SIF4NPj1fG+/CRwe/xPXrJdD40LDdFT2ngwHZwGHjczx3b7r8VPX22NYPGjUGTfM OeTCvM2+2iNrC0rd8ru2Qb/6FyA4qjRGNDUPwlHvW+U+zQ+uXqNLt/LK3EZB4xAfvA/e A==", "dk_pkcs8": "MIIHPQIBADANBgtghkgBhvprUAUCVwSCBydTNJaACSjcz5M3/lpTZiB udZ/jv4zP7cf6tFzD9tf0PEahn1yySpEbZS89yvbPFBRxgyfz6dSSpJl4BHr4wV68MII G4wIBAAKCAYEAq+TBlOG9SWgAFmKfJrfHK1GOEibVbkxm8oSnpjogPBhCNW10pkZ6DjE rxyXTEKUrV9lfE/C21/yYRf5TKK1pQBTm2As8Ldd0s1xzP+46zUtGOmrZsmAVAgl9GBp vj7Q7iEzXMkns86/H0cj02O2h3TEmnIPjkisKptYpayTJQZ519xr4x+txnQ63giqynP2 blkVJXtNBnfSOo4SVYvsZr0Fvom65RkozGAZvpy07ig5pneu6ykNYdUpiZ8bJm4ot/+Y GbDjt+mjypbl7TmZU2ICpGREhbculOZ14cpTdsUN48sSn3KmblKZ26xhIB50m5NfcDjk xDdH4Ka3HRyCHQr+TarBMVqZqecLb78V7UQRBpHZWEi+V/NwfKeNRHywuK6wxoo6deqp NEdhG5f9GlykH+9ovFQRDlBfFSyiRFECvLt4plwxrmI4iA1MZXmpNZ+pOZ5DAAnSpRQ9 Ounsworth, et al. Expires 28 May 2026 [Page 87] Internet-Draft Composite ML-KEM November 2025 3a+JanXPWoZArq8mlPaTIHQOKKuXnqeueavZFhoFsMbDCnqjHAgMBAAECggGAMkmxTII iI2iWpfXiQ6x+SzEH1E2iISue7pJajanxpkMek4zbFI4HxUEjYpaxQexgWsoQI8BHbbb LQabe40agRQwYYNogl/Sxgouod+qVL1w3Rn3eBG5Rlw/5leSeALektwJr7p1sAfrKBZi 58QDMWu63MhDvseJ/skFzSpIvgs/+CPXOFIbP7TfR/fXJ3V3gd7z7cw9w4eobFMGEBro ZUIlfRHEKKQMqIXw4i/sSsRf4VCgTtHqxVVcWpO+mKafpw75H5Tu6DMv/pefp26C3umt EyMnQyZu12LH+h1ybabF9rYFWHaPYx/3E+qBpE/+oQJrkokLc5CDhlUsMo93s8b9mlaz Hwfk0HTWqdGV0M1WyDBYnxPHA2rYSh6rRwviZN+sxg6s3md9s3c+dCEu7Hg0XVRiZFzu AcTwt7SOQiW9xhUfBkkIcgIxPVTJUB2+qzp1lqPKDRMb4FghLCfDOnBsnG2p6cFveh6Q 9tCVpKcS+DVf6t1nOtCOvjbY8bb+xAoHBAOnHvFQYdfk7wJES7so1pXfrzgh2HxOUeNW iaLROq/KhoI+BWf1wjiUXsLzXDAQofGm53E+N5Sy71O4GLSSKv2jIk5uGB8Xn+uVf/UR y91hECLSZlGYxtgh/A+c3G9R2mm6e5aPUS1ed+nzR9SlCZrePEjKmWW/UA37sLHxLaAX za7QTHT8CTwIscNhGQCQKSVERkI2QTrPsBAOboiajtkGpIqXDQMKiAZn2UYr22Hzmpev SAtNZmx/Hsffr5eHlSQKBwQC8OzcFQ+2dyGUFLmxRNEI40aUpYQbR2AHAeQ/3KmzInvF iCMl1m7E3BHya8vtNwBodSjs59LRK+MRPgDbZlOAQK3f2v85Bcjv0cbjJ2LI9VCU0mKY 7X36qNQHC6j/sQ9dflOiQTzhQDshpTbA7Obl9MY4JnS4hyE75S9A6ebEFOP7kwHZEGH6 +SyfBPT827yyOQ+N8j7U2M/tL8THxwYnsK90PeUFXVRPzVHO1PoUfDPjJFqEkbf/Qv9j IiFXT7Y8CgcEAr9FPic97qh2ODY03mUwPTclCAosThB49Yi3qoPAp0ShNIKAflcN4o9z VRrBUkSwBpWHqlsoYeTQqR3jNqpXOrndqy6RZZDW7M5alWz07WF6STYDTYqgwRuN/g/y mKXupWViXTEb1AsgFAqrEvmr55ULsZLtGuBuzJVlpe3Eaop8XeS6G6ERMN05E7+KlinV R/m4/ULge+KGfwzbhFD47a9ZQAGp/4eEFY00ktmY/GnA8iMZA6cKSL6x35AS9ts5BAoH ADduqNFgI8Xnkfhop3Vykl3xP1ZkQIHjvwBTpqP/VnHufN+F/u4nn5S4OYnYLLHE9OvT RIXYzo+Vmxpeg8in0yRv6LA95BvZ7FYcd3LZ4gO1mA9ZNPsfMEonuhEQsyp9ABwh2itF aSwKbnK0ckW+xiVcRpwGMeO4/ajk7rmJxNvo4Qe0th9vp0ObFmYOB2PCI7jxvTidiZwg ysyehzrO6DMo57z61IdHgsyR/lFNzB5Mz6dIhsQXsNJk7Q6BN+VlfAoHACyvTSvusoxr EEkB2nT+ZOp5rn53sBtkxtDTgw36lMsBzMdY3W0+iHvEErtepYh67B3mXHhu53lHuQM3 46wbdjZANDiTLlwMDK7kHw4IDKWGIXzqhvboE1REN+pLRIgXg0+PV8b78JHB7/E9esl0 PjQsN0VPaeDAdnAYeNzPHdvuvxU9fbY1g8aNQZN8w55MK8zb7aI2sLSt3yu7ZBv/oXID iqNEY0NQ/CUe9b5T7ND65eo0u38srcRkHjEB+8D94", "c": "y4y7d+lppqBBMCmI+i4rhJaWfO5aZjxgG9wKK/EgoGa9p7l2e/Pm4qdbzEN/E1 GzaNjlPogmFXHhgx5KRPBpya9UOHO7uMjlN4jzXNL9XBtRtJPgxT97ov6enHmNqIw0tz DEQr7ZwNjAXjwSXOeVDkyNLYO8srTjNRh26Ys48tQ2+Sgwdl8bzN9TpmWCa+LiGk3Gk0 9MuUiMPqprtvHdWzCm5aFFVhKoDNvK+PCWJ/dsAM6631TkYDkWm0m1SSxX7E3AlsylHo h4yz7+XX3YNAV0B/0TMYnYrDzpYRRnVcdsBfl0iV4uf3PjFjAUVxpEChXXFsCrXjunIG zilSCImnOciQlsnTkn6ve3dFnkCV81UcyHBhlhVt0Rk65jxziPFi71pCFH9Q97mMZ9+O qxYJ27RbzEXpIzN5j9RPIU4lO6/37bSo9iH8Quf9B2SMIJ2cLhqukAa9W5Cs/6Zs+5oT cwR+jZM66+uh115YjPaPQCcrmiIeWHx9OUJXEU5kz2cjt/3VHfz4JTWopGGkxKOb+OQb eiQouz3fDp1Sb9sJLLul2YEojbIOAGKw3ZvYMe/fFYLWMvn56RE1v8suueJpxiAqWK3b 5oQ6TTgK5oumJIEBW8QRyspNkteVFyqngdtgSE+eHdoAectgt76duhm9bh6QmxgI4rST NLJeRlhrZrJbT1z/33KGh91BC/KWVmn0DgE4ywLKt0wSFrWR/Fkfqp7psyVUy6bKSIMz 79gWesBEfduhweNVCoRhdsdNTHWibME7cHVmVqavCagakru+gms+Tao/XjKeLpWdySkI 9XA4/aGrjwrrIPmrheD8gosdEG5eVfQA2EQqvA2oWfH6zc67yWR4JShlFRsMBIm+hJJI ML7iXMCEkFPaZglzbUFQpJXfFSLH885YOYwd8xh4/aTYcrr/JOgZjCueRWy+QEtS5ujN LvX3TWMqsuBj99WjOsFo12jv5i8DoyvXYs81JXoyQ26NkKXMFYmR+tvX3Y7BSGf6//93 6GzoPcG932GiE0MnfqR6iYUUj2MxHuSmwq+MYs6vDy6LmNSy2GZg+2seh9KsuabLJiSw +HPDLnWWe5v6hliWIK9x3lOuo0hsf10oYpSnvqI4S5hBJreU/U5U5gLXw92Q/O2cHsSk LYPrstO2rYxxc5QpefZisNs+1FcuejEgSkYrM+WqeGU8qEoLJ6z9WAO21PHIDixEsaeW Hz4ikRDf1f6g+bc0ycMoonPdOihulIDug+9yESN/Iz+1v3qHL05zh/NIPNpQJJ3vTqAj RXReaZ5cTHa9bopOCPKlKiogoQeSn8ItJRN2j7TOOi/GbU6k/+alhZ416BS9/T08jTNN Ounsworth, et al. Expires 28 May 2026 [Page 88] Internet-Draft Composite ML-KEM November 2025 Jm5bUqlGOQ2fllwgervT44Pwy8gfPRfSPmmM/29p4gzdIyqfFZZz27EHMSUMWMHVXqyK 2+qnZbcIE6ON5IDcjzqW/dqo77iwB67/PIPUEHyaJbI4TpN1PLXGL4pTf9cTbxTFAdXA Z5VEaxjlxRMif+zUd59O5xEGkKd04+zEBJ3bvV7F3K8U21cX2x5LkLYfclltMpabOI8m QSIYev/NYsJ9SRp4vGJfWHY/wEhXE6eQy62HYzI1QAWV/H/RrEwUGC0WLj4lrZoU3b0C aF5HFvpa4/FYyWMdIsotOKqKAYeS8zrqs97eBdWObb60lwoS2m5jY3k+9BMQ0nd/+j4t 7wRI82jQPrCymTOZA3T6dX45h31uMT5XOxE25Cl59kcvyTuojHGPfws8gAug26RGw9RY EuvGASxNy3AmXYSrD0W9Jws9Bgtw2HhXkvE/K95PldGu7sxqhiClbmmONm6xZSY/kvjD IaCb42vm8jiSZzkciTTO6ybpqRnNmfJnSPH67LnUy1+3OtAusGtxCZ/ZJLziTL5BiLKE 5J8QUSq5dHYCmyNeYz3qs2IO8Fl6yAO8nObkwFi/n83POapoe1D1WqXP7LkAj5DnI=", "k": "zNNcC58g1jlgtVf+Sgve9vF76tvbDskM9hX1h1UNR2Q=" }, { "tcId": "id-MLKEM768-RSA4096-SHA3-256", "ek": "CqhSRUJjrbyPwTaH2uWk7XymENmaA7YO4enGXBY/QXd500nLoyKOa9BAeFpkM EqEiPIPMIHJxOrL51ikzGmtbQYM7VUxqGAqUncKP3c/dlCSCxFIANOFBLtR8tNpP9OK1 ZRQLZBms1EmUbSGP3WDthMHVTMkqKpRt1Rr9gcYupRIEhwhGvVDAih0TjZJm5shbthDc JeeqShc/kDFpNd5Xbll/BMx5MguMqOv3+F+iep3RxMDDGZj3aEVmgVFpse3lSYA8uags cyj44QQVjI6xPAKPdWqMOu1p3uRHSSZsXfNdOBbODy5xLGYEjpQoSBZ+NokpAkdwcQO5 /djvkRh76xzkOOxfedGR4ZL01mTMqiN7MB8N7aDE4xwo4xVRElF0aEPaiQt9mWEDHDNF BthsFc+G+jPw4G70ztGERER8rOdpuEevhwnwFMGcYfEHbQN7VmaOUVvU+KbZ6AXIlFzx cnNJZwD7VSXhsbNqbAHmGWhOolZN/OAgGGYgwe4b6ACD5hnjsJOYISlUTzAENeBZZRHn hY7w2pouTNT4oIHfNzBNGcnZupy99Gf1qi62tjMC1uyHjKzzHK2vKjMfmB9DVrGQZC6G KaQ1tGlzsVS6/eAwdN/MMNArlMfH4mDQ5lcLoc91Rm/s4yBs2zOdAVYqJM0IpGg/nsKB VZX0uhc2KMDyrhayPh+npUY5OZL8+tXbsdwXbYuVjc5Y8cWmnuEfQsab0VAWFO30iti9 2sxOSUWJKV1zacKxIcBurEi/EQXckO7QWKvajMbP/Jh6PhckcxHlCtMV8RLwDBbBgc6U Ik7y+Qi8aK8VMCxkxJczIOyRryPVFE7WjEnA5u44+xITNOirGI0lltcjnya/sCfZoLBs ounnrwsNFF8H3RFAMG//5y+vrsRTbclKyy32Dhqqidrvflv/fGNwCt7B2m5rfIGMFSdY gprcLuqUOi6Gyp5UsnCBGSWglZj5SZfW2GTuYhKqhZtrYINF5ISRjGGAgW7EobOaHEAw 3IIlUMBmCxCTzrMMzO9LccyAoO7n8VK7IEkWJItn8DGMKhXH0zBkopQXiaFaAnNvmcSg km+UXeBTeRpkPwg24a4dGBGIHtHiqJ0CulclYifPvBfnXljY2jDjqu8WRdGDWzP2brNo bkqHLy4IHKehCgxCGV9YIatpdOvyXIKH6grpohJsfVKspob+OiY9vIZbZQxsKslnfIy3 ox0JkQI8JaxlVAe7TqNSLsVcJkXQQWC6MgbXlMXdLOlSjrEgEc1iVd1tTppkvo8QfSru 2N/wiZckAq1ocO1ganFyZJ8zpvO5xtSUoo4I5KEjYsgYFYZGDh5E7YU7bmrgakBh2UEe JFdQDqXNQPNSxTE9pIdERhQRSC7m+ywJmKxtslb2VWVSwRNiZRiKiNocmvIffq1aUJPi De2bhsVCntf9UJONDCeRZSZIBfOznSi2lu/Jda0gxBPtvya3yYv3Ra2kGoTdBRuGfe3/ HVvT+W/kHhkawHJ6GaqQ5OlETAzLYSscQWYuFRjYbkkmaowzkhguuEMfNJnjRBOtdBvv tHdVCTp2Lj9g6WO3siuRnkwggIKAoICAQDJN583f2SGbBw+5d4rH7WJAl7HOAMfEEE53 JT4dPBIZOKPJ4KafPN6mJ0n3AUxv71YIwccsnd4TxJiBtLS0qeHuEBQoZy39qgSy4aAz HkJqWi4HUyQUfsG3NP36Fqjc2g0rjBHgtZNpybUhlpkn3ecCx5+xGpVqbrHNYee66MVX olas85nplgO8quFoxjTfnwx6WLyHDlOzSFyvPMOinAgNZlYx7BG6IVwaQ0ptWnYr/pAc DByB2EDA7s/sKeb6Bblua8k1zGaqYsrN+rRfryjHMYUcOfOOB9Oi76eOj0X2EMgIstM1 LZJam5/lk2T8nB5vHZi5AUaP24cEgFaoNXoCenXmnchdFkod+5ZcbuWIwPbO0BjoOTxR SUrdcBlONzPKy9QS0e60y56/Rx/+gfY+Y/P1qJawgG6lZY/U68I/GyXEYBjsckeRsTEI lQqbj4+a8TYXvQ/6Q2ba7A8t9eO+ifhfLk+saDmPs4klEC7SJfNk2ElDwe8PW/CDdo5N LiFb8lSLjf25VGREgPYuqdD2FmKUwgDGs52+AkE6v9384WTakm84m9zJ2j+ki3dh/FvL kEZ8nuBJxCYe3JUDXh6iwd6P5p7Z+6LJlJ859Z8TXdPfPj+jWOrwtXaVLeHQbs4tBQUm VEWKNLrFjOv9wjdpXKk6B+wg0tdv7BsMXA3QwIDAQAB", "x5c": "MIIUrDCCB6mgAwIBAgIUEnqIqtl+8BBQbrhMKBjv5yQ72W4wCwYJYIZIAWUD Ounsworth, et al. Expires 28 May 2026 [Page 89] Internet-Draft Composite ML-KEM November 2025 BAMSMD0xDTALBgNVBAoMBElFVEYxDjAMBgNVBAsMBUxBTVBTMRwwGgYDVQQDDBNDb21w b3NpdGUgTUwtS0VNIENBMB4XDTI1MTEwNjEwMDExMFoXDTM1MTEwNzEwMDExMFowRjEN MAsGA1UECgwESUVURjEOMAwGA1UECwwFTEFNUFMxJTAjBgNVBAMMHGlkLU1MS0VNNzY4 LVJTQTQwOTYtU0hBMy0yNTYwggbCMA0GC2CGSAGG+mtQBQJYA4IGrwAKqFJFQmOtvI/B Nofa5aTtfKYQ2ZoDtg7h6cZcFj9Bd3nTScujIo5r0EB4WmQwSoSI8g8wgcnE6svnWKTM aa1tBgztVTGoYCpSdwo/dz92UJILEUgA04UEu1Hy02k/04rVlFAtkGazUSZRtIY/dYO2 EwdVMySoqlG3VGv2Bxi6lEgSHCEa9UMCKHRONkmbmyFu2ENwl56pKFz+QMWk13lduWX8 EzHkyC4yo6/f4X6J6ndHEwMMZmPdoRWaBUWmx7eVJgDy5qCxzKPjhBBWMjrE8Ao91aow 67Wne5EdJJmxd8104Fs4PLnEsZgSOlChIFn42iSkCR3BxA7n92O+RGHvrHOQ47F950ZH hkvTWZMyqI3swHw3toMTjHCjjFVESUXRoQ9qJC32ZYQMcM0UG2GwVz4b6M/DgbvTO0YR ERHys52m4R6+HCfAUwZxh8QdtA3tWZo5RW9T4ptnoBciUXPFyc0lnAPtVJeGxs2psAeY ZaE6iVk384CAYZiDB7hvoAIPmGeOwk5ghKVRPMAQ14FllEeeFjvDami5M1Piggd83ME0 Zydm6nL30Z/WqLra2MwLW7IeMrPMcra8qMx+YH0NWsZBkLoYppDW0aXOxVLr94DB038w w0CuUx8fiYNDmVwuhz3VGb+zjIGzbM50BViokzQikaD+ewoFVlfS6FzYowPKuFrI+H6e lRjk5kvz61dux3Bdti5WNzljxxaae4R9CxpvRUBYU7fSK2L3azE5JRYkpXXNpwrEhwG6 sSL8RBdyQ7tBYq9qMxs/8mHo+FyRzEeUK0xXxEvAMFsGBzpQiTvL5CLxorxUwLGTElzM g7JGvI9UUTtaMScDm7jj7EhM06KsYjSWW1yOfJr+wJ9mgsGyi6eevCw0UXwfdEUAwb// nL6+uxFNtyUrLLfYOGqqJ2u9+W/98Y3AK3sHabmt8gYwVJ1iCmtwu6pQ6LobKnlSycIE ZJaCVmPlJl9bYZO5iEqqFm2tgg0XkhJGMYYCBbsShs5ocQDDcgiVQwGYLEJPOswzM70t xzICg7ufxUrsgSRYki2fwMYwqFcfTMGSilBeJoVoCc2+ZxKCSb5Rd4FN5GmQ/CDbhrh0 YEYge0eKonQK6VyViJ8+8F+deWNjaMOOq7xZF0YNbM/Zus2huSocvLggcp6EKDEIZX1g hq2l06/JcgofqCumiEmx9Uqymhv46Jj28hltlDGwqyWd8jLejHQmRAjwlrGVUB7tOo1I uxVwmRdBBYLoyBteUxd0s6VKOsSARzWJV3W1OmmS+jxB9Ku7Y3/CJlyQCrWhw7WBqcXJ knzOm87nG1JSijgjkoSNiyBgVhkYOHkTthTtuauBqQGHZQR4kV1AOpc1A81LFMT2kh0R GFBFILub7LAmYrG2yVvZVZVLBE2JlGIqI2hya8h9+rVpQk+IN7ZuGxUKe1/1Qk40MJ5F lJkgF87OdKLaW78l1rSDEE+2/JrfJi/dFraQahN0FG4Z97f8dW9P5b+QeGRrAcnoZqpD k6URMDMthKxxBZi4VGNhuSSZqjDOSGC64Qx80meNEE610G++0d1UJOnYuP2DpY7eyK5G eTCCAgoCggIBAMk3nzd/ZIZsHD7l3isftYkCXsc4Ax8QQTnclPh08Ehk4o8ngpp883qY nSfcBTG/vVgjBxyyd3hPEmIG0tLSp4e4QFChnLf2qBLLhoDMeQmpaLgdTJBR+wbc0/fo WqNzaDSuMEeC1k2nJtSGWmSfd5wLHn7EalWpusc1h57roxVeiVqzzmemWA7yq4WjGNN+ fDHpYvIcOU7NIXK88w6KcCA1mVjHsEbohXBpDSm1adiv+kBwMHIHYQMDuz+wp5voFuW5 ryTXMZqpiys36tF+vKMcxhRw5844H06Lvp46PRfYQyAiy0zUtklqbn+WTZPycHm8dmLk BRo/bhwSAVqg1egJ6deadyF0WSh37llxu5YjA9s7QGOg5PFFJSt1wGU43M8rL1BLR7rT Lnr9HH/6B9j5j8/WolrCAbqVlj9Trwj8bJcRgGOxyR5GxMQiVCpuPj5rxNhe9D/pDZtr sDy31476J+F8uT6xoOY+ziSUQLtIl82TYSUPB7w9b8IN2jk0uIVvyVIuN/blUZESA9i6 p0PYWYpTCAMaznb4CQTq/3fzhZNqSbzib3MnaP6SLd2H8W8uQRnye4EnEJh7clQNeHqL B3o/mntn7osmUnzn1nxNd098+P6NY6vC1dpUt4dBuzi0FBSZURYo0usWM6/3CN2lcqTo H7CDS12/sGwxcDdDAgMBAAGjEjAQMA4GA1UdDwEB/wQEAwIFIDALBglghkgBZQMEAxID ggzuAF6+VItkLShTG2iRXkK0o3pAc6POAy2rFWsOPzzWV13z/3trhT9/rTMFQGRfA0FM 7Cxjbye3m/RLgEcxxSAa50KWHASAkz7GTH+w34xnTYDoNwftE3zhDHwOzsOiM7Y61yrF 7q9g660q1iO9vvV1Fqx3yijwEezuaiKOij96hIhrHKdn9JLPUuxv0hKFaf339oirq22X UyXjAtlorLKCU7AIDqsCmLbcLUlgxYVIzxv9HaNIZAGoL7xygVzDEaBwmqSSc7C3lLoY tUVYASjE/fd/4tbPvNXN4btJ847dulUgP8LGv0rwd7J67AT/fl0rBeH3qxatGbK7oeGN DYbSMw6dNBEQZLk1VPgEBrYk83R9k+k0dIpe5J0ryfc3lQCp665EfaXxgLqCAQ9xNsZd IW7EBg901dYzbY9Z5yFSr0rH7DuQ2q9SD3ALX2P3wTd8k8+AINOk8pFtFgjXVj5fX5DO VcnBZmTsIrywtjt5bVE24xQjre242jmBpmItpQMtzngKXWMeNF5i6evQeTtHG83UlU2S EYRGDe/Zc+qGUmC2+j55IFubfFrhq2MGpOWT27+bp/uZvACX2DPz6p2kYQDoK6Dmrkvh uvXCPVLVVKo/IZb1Bk4Px1ft66dh7Ktu9cPqVbENj7Gss2Ef0l0+cKs678EomdqlsM5i Ounsworth, et al. Expires 28 May 2026 [Page 90] Internet-Draft Composite ML-KEM November 2025 mj7bKsc/bVRXT40sn9Q78IEz2/OXH8hFOiwK4LmgyIUCYy7b+Z9bL48mXU+kZeGkXI4U hZNHXUT+Rc/QpYblVbQqtZhrnHPicisk7z1UzJ7UbYVH7Ihy1EXFof3RUQxLrA+5A6jO EE0+vDuMWePrhiAcC4VkekrJUr2ZFNaYsnctIZ84jqEnvSnhOieVmzq3eFnLJKdegpx3 FQOPFNZAYYmUBbmJwO3snt8etFHrCHL7N268bFrZAIEOkmWZU270TQQMzocdrbxR+no7 HCC3E7zQH09mU/KELxdlTgYgGgqf8ZSKxPXrmun1VkPvv1eYs3J/9RGdtZvskQng6jn2 WVJXnNcIz4Ztwn9IKkcmlXjN4uqszNefvxOi+GBesX1rU3BVg/5vo2pUaEkbjKqljtF3 VXm85zvUPxjF9BtYGAyUCmK7ndBAWqQ4sp8uWA69qAze8BAF7bAWmAcA/zDJ8CFUnltf SX9006nRoZLeE1JwyFZXiiohGefpQI1uildi8UtXw3CWBCcv+nAiykOqT4eSPkWcasIJ EjocGsb1FxjOPRKFX9Lmspaz5z4OTv9XLaZlzKHUHIj03NxL+ZqqNuvhv5K9nYg2aTpa +qtufOgff7pN+mAwbFl4TNIUZKGZpWMu/9/dtgHpuwFD2c0d9rcSWTwAjChh7tV6UxNJ WT6hwzePismm2gwsXri+1RYL/d8mxNl02+B+F3nk8NcJLzjd0DciGSJUW5RVKZbCUyf7 9GhU5u0heNRuHSr6J4tu5fHHgUpHyCx7/DsK9zrSS8TQbcOAN6vZekgKm41AlwpnXQhR xHPxzymzbZscdzGVNrpwnwrIc5Zp+DVRd970eJGu7q1K0xB7cA3Q88kPjVDjuQ6N3UnI oLHkCHWtzqNk9puSo24oKsQnPQ5hSbJmWwPjOwXy8nn9Y/6Y9XEKzZwKiDChPgWag2DP YntTcPRoVfMtXxW6f3SIsKDVcdrExcKwIYoxbQwUF3bLi6iYt6+zL3c5OP0Osq+mMXx8 1RfbHLkLE0JdrA2+8iUpU+EzfWQmpNACxowbO5D979T5R7NFgzJ7sGBfMXmA3D7X4pa2 rQ19SiD0r3pL6dvlA3YEXzZv8fzVs/qePnlUoPkAmEPPJkuAk4Vgeelh2rnw6Vh0G1T0 5+PaBaV0VWc1KOBkSgtkSb9JfNApuecQgA3oCCVPVvGaYRNX1QbpSoJqrB9LofCxPcBD tt+WguthtIY9eUueczu91aSsHzaZcCu0ro+6C/COWj/DdJJ/M5UsghvTjr5m0xOg30js QQ7cawfPX49An2UwZ27tdR1GsK/+eslqOVzd+VzjmzkSLbspYw3nwmbOZIxGZL6nlBv/ nrJfrIKMqBUgoDQn/A+SMlhKbRdGwfqO2bgDnyYOTVCOU7sXfj9oulybKzENcFyyIQaN 9JUsmvNmymeb2YgmgKUfc/5WIpeoVAiQaSfGDghKmASBM3ixKGLrZnEMd/aVvabPtVE4 VGhe+DTsumEb/gDOwljAZWCx8kbPETXrHlSDKMScRzVcWJE87SgvUEJWO6ET7O9hbxjH 3Pp4GFxsTJqRE7UqoIo37gVWdKEeEFBS9Jk+Q6VxcMUwfiOp27dmmRS+vyFmDowjc4ia hzr6oWYraZ6OJYUA4ZgUtMdQIQKnnbx2YwfuGqgD7kUspYl+TA5Wb7Q9MyG0+Xny0dYD KS0EhgLBdgTVgukjnxq1hM7DSaiTBM4+LO4kS2Ih10zN9AnVuqgLaUyAX8Gcj4KlEOnb 5qd+74WElgX5n/gdM5AjzdknFgtR8ws1+UaEo5hLGsa8SxgEqqONxpE3wKd7We7CrlMm 09HEFJg9MIFIGR/k+L8/hzzWt+kNNXgOOnzuaqo+884SpNMISHJYgVgLsC6nQXTB7jKA GSPZanWQ0K16MppGLGrRVpLd6Qb3UFfZsGKPfawdU+4RwAGUjUvBtMrZddGV78zP+rHk DXqvAPFCHXMbtZpfC6wrshQxzgw1UZo3y2WELRPZgfkISlEdRTEUyh2j+lTSHgVKQXOG tSY9QShycrSIn3NLptf6FZe/einhcJ5VaY70XU4Bb2KdrpYcaJzGOKqwZvfg543MSXjT QhM37xS2DRD5Us8HiijXCZ3rgXzvyzZnwLuYOTXRn5nAQ2z7hAKzfFpwVOrFSuiRaQBB HdpNvXhj1cHgvb497m231rSl5YcVVcVavC4k/wKPyOGSsb6MfUzlK8cOAuEYJ+fyd0b0 wY57FMf4Ytz7FHO6Wl73EZpl4OslhYRJNZ7urmBluTt66GjK/Urrp4Q+MpBTrH6h1965 bm/ucgNK8JRFgDCQf22v5f++FoTxGH63mh5ARz8PjF3JWy6/bpX0TtHPe6gBcnt/WMzt c+ccgf7lB9TIIl0KFoSEoAMzJOr4GTboyoYqnugG+6Sd9gPZULEugvgMm0qFAQmkIHd+ ZmCes5au7/atNAea67m4UpQKR7k/1WjAbYGrlq4FYZFZliQGD08xcjcSVn+gOzdFPoqH YVhzUL0LeCtVdErt5dvJ7uG0onBeK+T24uNg++VMqGvB/DDMqH+3ZwDW+UagU5qb+6wo Sr1MbyDABZOu/PaV182iEjEy1N5xfd+QxX3jjJeXRBXe7NqUghMVZPggnZexdg7+it3A Cj2gENdRYkdVBk2CiQO7LpCEma0Sv7hHGiUx7pWbPVVZU/UbKSwJ3W9BEivY2f8NpHK1 JF0Ts08bABGRDxRSA/XBWZy72K633j4c5s3YNxI1Hd7VIRamk8fPRs4hC64PPJ/1jPJ6 85K5+LzoKZQ3naksGOZBRWFl5Pi8DXlQoKMf1ehBoltQ96C4j8hEDOUJcdjcsJa4mLXH CJ9ODOtWovDYW13wYs2ZNJcLB8Ie4jQzFX1KLUdGG0qOWEUkTj9rTsS8f91ckTfEGpOL 0xLS01GuJz3F4x+yy8Eu9v5s0Pu+VUqaI28+XOdbWyerC4NF26qdHi4Kba/EgsROhYX8 4nEDshY/k6MdiLmmRTvY6HDxO47A6DvRBgtLx6cSJ0mIVXqVSUE6AV5kFaf8ZmEVm7qx VafPItvx7Gd7Fh6iOMSBCLMcfHknRWRQ3HlQiTM2jS9kmq26hoFNER68aNL3LeASyFS1 1zXX1A7f3ve9AfZf/V2wnviPoIi9kbHht8OP0GXTj5d7isAWlqDvTyvgVa6Y/WN0eYsY hytCFs4VBjPVJ0b2EHtEd+pp1mVzl/gQQUi1hnplOAw/FO+ckO5PqHud1twT6am51heG Ounsworth, et al. Expires 28 May 2026 [Page 91] Internet-Draft Composite ML-KEM November 2025 c/5dgXNn1Lg5nJEScVmVgfkEh9QwAWjbLaHIQNTkbqIJumc8rox33kO6+Y623Dpd5JrX 72HkZqLDDNIdJ3VmN/9P7pWCOJAOYqlhuD4R1xFQ1SN2Lx6hPLsQafcEM0eY4oO5/JO/ P+6uta4b/qTGTG7LvAPHTfMKPLBUVyNsfsZiVVmAqnG46mCt8kq6w6CbD1zwUu5TSDeA rAgG0ePTK88PkPWAEMpBlWxnWsmNal5M99hVe8DKhl772Bz7MSpAjnQ0pPGH8MsCS7dt HZ9zP1/UtyMVRG17tqXiMFFvwY+/K4N1oyGzzzsF6+5ia9mxAhqY7f5fT4m+Razck510 fSN3lMHZqF34wD9Bg39AkeRamv8mXlmBcTxOV9WPo9R6NDsSWFr9ChkaJIayztf4KTm/ 5wMfZnGpueFHUZ7Q63iGlrcgLIyzyOTtAAAAAAAAAAAAAAAAAAAAAAAAAAkNFBkdJA== ", "dk": "D1keFtmDLEkdnLdyLy2EW3wX7T6s4MX5bNXeByh5yu3fdqVYOyuIOjhaOVNjJ +390CsOZjnuwcjCvnrYYINGUDCCCSgCAQACggIBAMk3nzd/ZIZsHD7l3isftYkCXsc4A x8QQTnclPh08Ehk4o8ngpp883qYnSfcBTG/vVgjBxyyd3hPEmIG0tLSp4e4QFChnLf2q BLLhoDMeQmpaLgdTJBR+wbc0/foWqNzaDSuMEeC1k2nJtSGWmSfd5wLHn7EalWpusc1h 57roxVeiVqzzmemWA7yq4WjGNN+fDHpYvIcOU7NIXK88w6KcCA1mVjHsEbohXBpDSm1a div+kBwMHIHYQMDuz+wp5voFuW5ryTXMZqpiys36tF+vKMcxhRw5844H06Lvp46PRfYQ yAiy0zUtklqbn+WTZPycHm8dmLkBRo/bhwSAVqg1egJ6deadyF0WSh37llxu5YjA9s7Q GOg5PFFJSt1wGU43M8rL1BLR7rTLnr9HH/6B9j5j8/WolrCAbqVlj9Trwj8bJcRgGOxy R5GxMQiVCpuPj5rxNhe9D/pDZtrsDy31476J+F8uT6xoOY+ziSUQLtIl82TYSUPB7w9b 8IN2jk0uIVvyVIuN/blUZESA9i6p0PYWYpTCAMaznb4CQTq/3fzhZNqSbzib3MnaP6SL d2H8W8uQRnye4EnEJh7clQNeHqLB3o/mntn7osmUnzn1nxNd098+P6NY6vC1dpUt4dBu zi0FBSZURYo0usWM6/3CN2lcqToH7CDS12/sGwxcDdDAgMBAAECggIACLbHcY8An/pTm NJkoN0ig/idznvZqsE4nz8Ia+Ad6Hdcq71sIFuelxBqkeeAiWstJywmf918uLGX8WCBR c8IoU3fPylYkPZLc2ZBVheaJaB4Cq0o0SveYVQz5nhiCye8Jg07GwW1WS85dRpiahl72 RP5h0eN9qq/ONGpJL6TVUwUSmDKD166pom82DCRf9XqSVEQT2gzKntODQWAyIBB+IB0Z SNfZMVnbfr8A8fkTxWD6BbTtO8mijZhqBGdmJi1pno4SwdPZyFw3PdyzGLJhuN/8oesi kI6R4ZcGXHFOTX3kOSLhbFv5CsJ9lg11jKOy2mC06fd+V6GMAyu5qlbdLmCVPUVhHhP4 EiBtbFHE2aKWVscK1BKqWgoNyBQYm99U5BoOhisa9MedfQFUxfuACXqFeAvxB8A+bWi+ V8ZMtLFUUWbbFefsMxvVnaZ4/iiC9TkGB40mO17mkjePjeP2eivYp0hULHDeKCpIvEsL Zes5BqLMSQC/YO5ZeJV2VNOX/qrpl0QUAsIQb4I5Ol4eHG0glL4/WmyD/9/iEOT5Zaqu OqmLueHWRVOz1hj294XTcbpikfXAQOMH+lbJ229K35GUhHXeGBeMrgWmzE3qYa2KvQ0J 5GLZdkDSUHEf0jVsMaVhk/msEVUIN142Om16wPrahaTe+I9x6ArzFjKVgkCggEBAPWf1 jBVAnMwT2XxdKx9iF8k2TmV6bHPQQRU8B7gBS/bHN0vNjCfj9Hc2XXOxeXqu7KknXAgP VWmU7B40af0GDMumb0Dgeo/AgNJ8Y3sRxutrbRPbDzJHOnUkbxaUh2X6EGkgYDYig9MK xkwK9Lr2IhdxH7OR3NUFi6DUtwB8pA04k3T0MX8/RdQSy75eE+F3yQ64DXbGxhst2Gpp DypGdMWOB/gevJ+R29o7+WR0rh+eolJ9Hj4fRMuOfQlEPkgG+RRI1tKzWTTcVDHo6LYf cychaNGTbUMz3vHBmPvMzgDdTo/aTeFqyHu/Ym/NzDwhJoddlUszybAmI0otQ8GMJkCg gEBANG3kgLjP1s1B//X7JLm81OJJc3f1gAqJVFecz6/S2+hKeM5OkyUnCgA6UxwTtLvu ODK1ZdSv2lXeVxTl5taUHmdHZzx9wRgNHSn8kKX6ZbYBWzD+E5NMJwbN8tXBWyd5Znsm GMSZ/Uxp0a2GxAnnKoVlbyWgIjSw9WvY87+5Y81i1DlXy/5sS2qArzIqAig7XHQCdEb+ WanxT/amJRYdROdHC2NsXMGDopS85TajpiAmkaHSDomvY1qPinwmhYM0nTwbTdtFHpTy H5tAzpcnv5weVRIpvr6kQO2VVOHEIYqK8+7uUeEPEmGx6fudhuS8CRxyhP8r4GVh/ENb xKJpDsCggEBAIJLeKaI4dTS4rt0O20o5kd6V5T5lk9RXu76U6o9MeMx+3zFh5yBeBxea CjbOBV/0HOyaSXKpF6j7a8mWCkdDh1QchNXIfpt1BaEihO8K/hdyFBm9UbFdIYB0hE1Z Gv4Yic4Kc58j7gPsqkY6ZZor6OfAhY2PKbMCzw/Q5wbmF2w//9DBnOQgX11hXx0r8KXh EhGxxsqkJQDT8AJ6mqXVXCpT7pxLScnn6NU6jVAhqSBy2S6i2oEfuzGz81YQEm3I7SY6 gWKh6wdkfXFAWPoLct1mFqFd8E7+3Bwok4u3F+xTeVJL/pY+O/2RB5nBdL7M4xBZr1GG Nk4v3PaDTncEbkCggEAT7SBHe/YiIWjQK2EEGEOYdViNNi5sN5TyJUpH9P8i7SpAt8hN THWF64g/RhCHRFXJrhwbU7ZyOOiEGEE4dp1c4MvWhLsWxFlXmDmRkEOWnJHvYrNuJTFw M7nabTtLtbkCJhPYngAYsQ4WzujFYS4mjwR6NcaiuXv4CsEuAtQnBkxldFXWBiCKmTPH Ounsworth, et al. Expires 28 May 2026 [Page 92] Internet-Draft Composite ML-KEM November 2025 Yj1tDHVjMgQsxT6uPVSlm4yR09HT+kKaJXNt3W52QCl6xEV2Qgnml6YKOHIcRLMBYyYQ 4EkC6XFHKesfMGTFdnAvFGva+y7cDkcnY7Vxp9p1pEiypsEg7NJO9EaSKedAkozQU+bT X6h2u7SlWGLhSYh7N27OQKCAQBnuTdt/svxg7tw7M926PDZmLHr2qk+5UpowekOMjxvI uTJRSWaVZii4iXGC1NkxKOiNhjOxaEL7q9Tn8nIKxyVW2Tgsg/+hLmW/5rK7BgSK8KOO OVflEo3HHOU1n6iVv8nyn78sQTkFfXzWXF/O3Ze2vfXlX5DAPYQXHIfyxfVqwVlCYwlP SnCnEizWV1BIH/88BajVhGqmehmHZlarIs8kKXLII4/FG+bkqDDMo6wuI2nA1m1qvFSy QbJwNOriyuGakc9sGO3oKakf26ttDf/e1Qb2xv8i+xKvam3h9Zp+sH2nLKUTFzJtO5Ot 7wLsrXqsSsfyHJpLvOwwbEP3INK", "dk_pkcs8": "MIIJggIBADANBgtghkgBhvprUAUCWASCCWwPWR4W2YMsSR2ct3IvLYR bfBftPqzgxfls1d4HKHnK7d92pVg7K4g6OFo5U2Mn7f3QKw5mOe7ByMK+ethgg0ZQMII JKAIBAAKCAgEAyTefN39khmwcPuXeKx+1iQJexzgDHxBBOdyU+HTwSGTijyeCmnzzepi dJ9wFMb+9WCMHHLJ3eE8SYgbS0tKnh7hAUKGct/aoEsuGgMx5CalouB1MkFH7BtzT9+h ao3NoNK4wR4LWTacm1IZaZJ93nAsefsRqVam6xzWHnuujFV6JWrPOZ6ZYDvKrhaMY035 8Meli8hw5Ts0hcrzzDopwIDWZWMewRuiFcGkNKbVp2K/6QHAwcgdhAwO7P7Cnm+gW5bm vJNcxmqmLKzfq0X68oxzGFHDnzjgfTou+njo9F9hDICLLTNS2SWpuf5ZNk/Jwebx2YuQ FGj9uHBIBWqDV6Anp15p3IXRZKHfuWXG7liMD2ztAY6Dk8UUlK3XAZTjczysvUEtHutM uev0cf/oH2PmPz9aiWsIBupWWP1OvCPxslxGAY7HJHkbExCJUKm4+PmvE2F70P+kNm2u wPLfXjvon4Xy5PrGg5j7OJJRAu0iXzZNhJQ8HvD1vwg3aOTS4hW/JUi439uVRkRID2Lq nQ9hZilMIAxrOdvgJBOr/d/OFk2pJvOJvcydo/pIt3Yfxby5BGfJ7gScQmHtyVA14eos Hej+ae2fuiyZSfOfWfE13T3z4/o1jq8LV2lS3h0G7OLQUFJlRFijS6xYzr/cI3aVypOg fsINLXb+wbDFwN0MCAwEAAQKCAgAItsdxjwCf+lOY0mSg3SKD+J3Oe9mqwTifPwhr4B3 od1yrvWwgW56XEGqR54CJay0nLCZ/3Xy4sZfxYIFFzwihTd8/KViQ9ktzZkFWF5oloHg KrSjRK95hVDPmeGILJ7wmDTsbBbVZLzl1GmJqGXvZE/mHR432qr840akkvpNVTBRKYMo PXrqmibzYMJF/1epJURBPaDMqe04NBYDIgEH4gHRlI19kxWdt+vwDx+RPFYPoFtO07ya KNmGoEZ2YmLWmejhLB09nIXDc93LMYsmG43/yh6yKQjpHhlwZccU5NfeQ5IuFsW/kKwn 2WDXWMo7LaYLTp935XoYwDK7mqVt0uYJU9RWEeE/gSIG1sUcTZopZWxwrUEqpaCg3IFB ib31TkGg6GKxr0x519AVTF+4AJeoV4C/EHwD5taL5Xxky0sVRRZtsV5+wzG9Wdpnj+KI L1OQYHjSY7XuaSN4+N4/Z6K9inSFQscN4oKki8Swtl6zkGosxJAL9g7ll4lXZU05f+qu mXRBQCwhBvgjk6Xh4cbSCUvj9abIP/3+IQ5Pllqq46qYu54dZFU7PWGPb3hdNxumKR9c BA4wf6Vsnbb0rfkZSEdd4YF4yuBabMTephrYq9DQnkYtl2QNJQcR/SNWwxpWGT+awRVQ g3XjY6bXrA+tqFpN74j3HoCvMWMpWCQKCAQEA9Z/WMFUCczBPZfF0rH2IXyTZOZXpsc9 BBFTwHuAFL9sc3S82MJ+P0dzZdc7F5eq7sqSdcCA9VaZTsHjRp/QYMy6ZvQOB6j8CA0n xjexHG62ttE9sPMkc6dSRvFpSHZfoQaSBgNiKD0wrGTAr0uvYiF3Efs5Hc1QWLoNS3AH ykDTiTdPQxfz9F1BLLvl4T4XfJDrgNdsbGGy3YamkPKkZ0xY4H+B68n5Hb2jv5ZHSuH5 6iUn0ePh9Ey459CUQ+SAb5FEjW0rNZNNxUMejoth9zJyFo0ZNtQzPe8cGY+8zOAN1Oj9 pN4WrIe79ib83MPCEmh12VSzPJsCYjSi1DwYwmQKCAQEA0beSAuM/WzUH/9fskubzU4k lzd/WAColUV5zPr9Lb6Ep4zk6TJScKADpTHBO0u+44MrVl1K/aVd5XFOXm1pQeZ0dnPH 3BGA0dKfyQpfpltgFbMP4Tk0wnBs3y1cFbJ3lmeyYYxJn9TGnRrYbECecqhWVvJaAiNL D1a9jzv7ljzWLUOVfL/mxLaoCvMioCKDtcdAJ0Rv5ZqfFP9qYlFh1E50cLY2xcwYOilL zlNqOmICaRodIOia9jWo+KfCaFgzSdPBtN20UelPIfm0DOlye/nB5VEim+vqRA7ZVU4c Qhiorz7u5R4Q8SYbHp+52G5LwJHHKE/yvgZWH8Q1vEomkOwKCAQEAgkt4pojh1NLiu3Q 7bSjmR3pXlPmWT1Fe7vpTqj0x4zH7fMWHnIF4HF5oKNs4FX/Qc7JpJcqkXqPtryZYKR0 OHVByE1ch+m3UFoSKE7wr+F3IUGb1RsV0hgHSETVka/hiJzgpznyPuA+yqRjplmivo58 CFjY8pswLPD9DnBuYXbD//0MGc5CBfXWFfHSvwpeESEbHGyqQlANPwAnqapdVcKlPunE tJyefo1TqNUCGpIHLZLqLagR+7MbPzVhASbcjtJjqBYqHrB2R9cUBY+gty3WYWoV3wTv 7cHCiTi7cX7FN5Ukv+lj47/ZEHmcF0vszjEFmvUYY2Ti/c9oNOdwRuQKCAQBPtIEd79i IhaNArYQQYQ5h1WI02Lmw3lPIlSkf0/yLtKkC3yE1MdYXriD9GEIdEVcmuHBtTtnI46I QYQTh2nVzgy9aEuxbEWVeYOZGQQ5acke9is24lMXAzudptO0u1uQImE9ieABixDhbO6M Ounsworth, et al. Expires 28 May 2026 [Page 93] Internet-Draft Composite ML-KEM November 2025 VhLiaPBHo1xqK5e/gKwS4C1CcGTGV0VdYGIIqZM8diPW0MdWMyBCzFPq49VKWbjJHT0d P6Qpolc23dbnZAKXrERXZCCeaXpgo4chxEswFjJhDgSQLpcUcp6x8wZMV2cC8Ua9r7Lt wORydjtXGn2nWkSLKmwSDs0k70RpIp50CSjNBT5tNfqHa7tKVYYuFJiHs3bs5AoIBAGe 5N23+y/GDu3Dsz3bo8NmYsevaqT7lSmjB6Q4yPG8i5MlFJZpVmKLiJcYLU2TEo6I2GM7 FoQvur1OfycgrHJVbZOCyD/6EuZb/msrsGBIrwo445V+USjccc5TWfqJW/yfKfvyxBOQ V9fNZcX87dl7a99eVfkMA9hBcch/LF9WrBWUJjCU9KcKcSLNZXUEgf/zwFqNWEaqZ6GY dmVqsizyQpcsgjj8Ub5uSoMMyjrC4jacDWbWq8VLJBsnA06uLK4ZqRz2wY7egpqR/bq2 0N/97VBvbG/yL7Eq9qbeH1mn6wfacspRMXMm07k63vAuyteqxKx/Icmku87DBsQ/cg0o =", "c": "lVszs+2KTEmPxPhEw13XM/lohSNIbvFdoiTrSUgVu3vIm1n25gVJD0mUZVsv5c Dms1dCkM7D/8EGUvw7BMvhqqFO7Cxmm6N2iCF2fJSqXVtHNxXKSFTSjqfrP/c/3AHqJ0 Kjjbc/9XVI1A2SFMbAHlU+QVzcqMR5iPNuu/2KrJjaAiGtat89JnT1BbUcdvOR163ou0 tj3dqw7VtqFkL0STGrPl7Xk+q8a0j58BYIR6IcvP0Jz+xUF4WUAsoh5IJbLrRTx4f0fV RhAwPxRTvO5ucaN2Br238wwVwVcpOrrzVi5W9vqEpuRPEhVDRmNP4rjVxrz9ZUGyL+Zo 9d9l+vgUr7XqnFaf8sXVqaDIc2pXQRpFCv7l123CDNjN2Kf4JBLTmjtaP4GfHUD1X6LN a47F+UjGq5yXBkSL4uVci4NGEAGVEvvSBhiwgOl2AoEux9p+aYSnOY2kq/rzLu+1UGex CtNa7P+ERNnyHY1vLAvMD/NJjzL3++NHCkfeuTsMHLsv8whxXx4xyuCXhpVB7h3tvogW XOKSrWDTebyByvEPvuh9Hy3g8nkrV8NjYi0p1hyh9fFfryxhkl2ojfmfJzXQcdP/Kq/r X3aEa96wBsakpVhuNnmU4OC6ThJFTIKHF2/PKJQA5I7NogS9EamoZbYxgo6tO7Tf2JdL MgdlvAoJY6TjOZx9YL+kvQYlZ6xYhibc20TzgGnGdwLKWUvNUpH/k5SgxDSaUF6S1lgG h0QnPYwVm1GFVEh9QPz6vv7ZU0ae3qwMynjEMLNTNhBsRq78GGByQ/VnIdwZQCjQf9FY +aFW2IbKRBpIWNASdhZzbOZJZ2IVo2XzO58oL7s2f+/drv3zOQoKELcvVoAEqCP6cfSQ eujPmxwQbIjF331uumXI7BNrA46qYcsml/kB1ZrsPGmh48eyT2IS/MlK+ByCYK9bf0aK oRPmlyNw87S/FXlMD6kF3neGPOOXlfR/509oEBbgV6RErzN0vdJMyq+agOvNBjrf9ApW WJC7NkW8ouAoDzLj7eJmn+t0u9oVoHGqh8DB2X60424Ih/GP6KEVz2PRW4gcQ9UziSPu L+elc8TqKIPHnlRjBen35BIFPwgUNPOjoDqtD9RqTrE/FOAKhesQMizditDOYtRTmyy8 s1rVyFcMi7UYm/J+cPZDzXGlOFFZ+VxdefEEHM9HpKBAN2SmtfZi7YTsThzy+706DK4M +FBf1/MxWA5p24jWLuHio5v7sIyTnUpWkenHqPI2gJvkE9vwafGPIv5F9DWEe+Ygp3OS lPwT6XjepolrXjYThlYWQ5x4dYXsGN02CkrhRieuHncLR8Yq4Yr9tjgOoYSrV2YIkolc oNjsGCMjQhnCpFnaXhUgXpP2Cqq62iG8YF8lUUnhL3AcR4vza4/O8zd9aTrx6r+unCvR d+xqbbzgzNqEgvbZpdLbwf2S39D7050cnHQzsOtAybhTGqsyylicgqma4fxnifj5NkIG 3bNmE8SstUVT1BMSgr8Z1v7JRn1EcJg1iRkCwVyR2xPX8t93pyuB31HnTB151+oCG59y iMnX4seIiWNhtkilNopHaIVGehHXiSn2mI/IDyNPC6YGk1tKvFaQnOMUrTk8t0UwTqMB 8vf8tLtOjIsSlF9h8Xvt1CUZoaJY5sOyyoxfsV2//4u0Fb5ITCoYqwN1wEcuXzlKBKPC 7eltQPv5Ck9VPNHkeViUfbxXO5la57hmmNT5HRv4AovLILtY9e0WcWXkdSY8ro0aywSY 344XJRbWErAJYw4fqxbEE+hRM+XZzz9oMpphST3W8FzA9e5Zg2+GcrwUMyZX7+rHxK+G NCBYluIfLvQlWgru5cc6DarczdwRNOBGwi7QsJdCx/u9ouCPS0o1b9SGrqCuOYR7LYf9 mPxW7I0m/iA2kcbNHigwh4G9wqehDuglE2+xH4FoXn4DAlKqmWNRW74R6C7gX+JFa/IJ 7Ar9RgCY7p2DAEzFOpJPGrQQCU9FqRjlTq/k8riJWYd6auhp0Vvhh9dZwg3EecccrpJo h2HSy3dd3DPUYwkYwttCpQZqyqYKM5E+cyb2BYUhlkmhBThyO++KuarOe0soxf+WtNYr i0vNVWhXydTFpIu8gOSaxbcgfBnTYBig==", "k": "ogKBMHJGJxpCeGnmGZ9RQqeEE+n8GhUpL4he6+DOB3g=" }, { "tcId": "id-MLKEM768-X25519-SHA3-256", "ek": "eDNUgCoxd3MPucIz9TB+3gtHkZlC66PCqXZGo/mxCfQM1Bum5EYwDpaaTak+I hapzerEgbREYzq275ms/WdjCejPBHS0BMlLLTdeLvgKmCSgF5FZ7etHnXgpatsnXGSFw 6Obv4k8ySFPNDQCgjiRDpZeymRSV+U6M3d/5lbHedEtqfGpxvW4OtaomgUoGJaJQdq2+ Ounsworth, et al. Expires 28 May 2026 [Page 94] Internet-Draft Composite ML-KEM November 2025 eqEBSJLYBi/vBSoZrGvdpWUz0KDnOZKo3yx1oJ/bZN1psSbScuiY3W17agecjOH0iAiO TVz1PkVYRMtNYoTlkOsfnGEjLlm9AlhWoZmXyuLtsgzO1SdfiGPG+hgKbgu1LaPVcIwd FLAjxwGpfmSKdWsdcSs6+qkPxFXzqglnQGEJyFiyXuv8iq696VqX7mTw7YcymQsxde9k cSSLgUsryQIWkbJGKIicRVhPQxjGngI3hNrlQYpcXVPPZSXOwuZ2qZDS6ItvOxGSncM3 OHBoMMnu0J/QZRPzPse4rymedSnLsnOPjQ0a5MJnRgFtEeYK9K5wntlHEiL5JMmC+s+A oKCzJyoudcjNuprKbquXScxBREVnzmEtHJ07bLBhTAktGtv9htKatMQ9Zlo8BtJlnoaZ zpFLmss0ht7FtGhMQpCrgFJeDMHsqVXnTXOLDyVrRgk0gugNASwWGAHvZEoyojJXKVe1 EMuYbGCJBLNmryO48UKHNSTVxS8yWm9U+WdSQAojdRgNnlUuKLEZcDN8cKS7EFs17uEL HTP7sQKMZAf5VVt1euqaAZKqPG8boZEzjkqqJmOBldv6XecjTla9yCMr6BLVYJD2je85 zZSMMcXk6lkvJNElXFhrjaI+WkWLkvNoEwSaSAFFrbH51tXDplu9WdCFxOu3Xkfc9Ryt 1EiXxQalYdUXfhZkaSdwlq5WMFfC4GrUQUUBNHKS0GmBInMNLmWDntQXphHBTzBpFQEZ pXHTrQWB8CuDDtHLMINVotCJQEVuGtAgkSbzLK/AB1tvGNT8DgbKlVFX0mShcaTKHy4u lUvE6EhdyJO7amBebFwjBqxG+HHkoOH/HwN45t1ZVlqo4VB7YVWC4ArK6kUgUW17WMjs mYk1Fp9v8olPyt+sUlD6tKUTAh8HlJvh+IKCXCtimwmGosUu3uivNUI4eAxvna+ObsnC tTOi4cInQkpuaey1uC65Qm/4rw8rlJ3msGvsnJX1sJBOakaCYcZFGdAgiJ60uQsJFFZK PJLmxPO4KWUrWiWoMwoJ4tHdYJ43XRGqNaFhbSFsPh+Z6fN5thDzArA+Clb+uAZ+BlQo 9xth6tjN2wO+bMSf8AgDvCkaXYUOainhRpfqwQxqsIIQXQHKhWpaKNxHYE+t7ejh4xEr sdGImYYFTlD/ILP9INYMUDFeaa7wIRZarO3giGyrEq9fJaSVMk82rWogyW8cJrOD4FRV TR779M5swkcF5ZGg3Mq43QYoQjIO5C1rbe2leE2yLMNqqglI+CrV6xhyLpAr/GCxoZh8 fgmBsOv9lGDf8K1bHzDtydRhShdItmi8kiZUjqBFWqWycYSdcyoTZ0S1LfZXy/mtQbaD rnqUoCxFBNCmrBxD1sDIEmdtXxzx+ITWKAGpjXkxJ3UoO01cJN+5TrsKQj3F1cEBg==" , "x5c": "MIISvDCCBbmgAwIBAgITUMSJEUfPg3WnL6esD0y8lCEuITALBglghkgBZQME AxIwPTENMAsGA1UECgwESUVURjEOMAwGA1UECwwFTEFNUFMxHDAaBgNVBAMME0NvbXBv c2l0ZSBNTC1LRU0gQ0EwHhcNMjUxMTA2MTAwMTExWhcNMzUxMTA3MTAwMTExWjBFMQ0w CwYDVQQKDARJRVRGMQ4wDAYDVQQLDAVMQU1QUzEkMCIGA1UEAwwbaWQtTUxLRU03Njgt WDI1NTE5LVNIQTMtMjU2MIIE1DANBgtghkgBhvprUAUCWQOCBMEAeDNUgCoxd3MPucIz 9TB+3gtHkZlC66PCqXZGo/mxCfQM1Bum5EYwDpaaTak+IhapzerEgbREYzq275ms/Wdj CejPBHS0BMlLLTdeLvgKmCSgF5FZ7etHnXgpatsnXGSFw6Obv4k8ySFPNDQCgjiRDpZe ymRSV+U6M3d/5lbHedEtqfGpxvW4OtaomgUoGJaJQdq2+eqEBSJLYBi/vBSoZrGvdpWU z0KDnOZKo3yx1oJ/bZN1psSbScuiY3W17agecjOH0iAiOTVz1PkVYRMtNYoTlkOsfnGE jLlm9AlhWoZmXyuLtsgzO1SdfiGPG+hgKbgu1LaPVcIwdFLAjxwGpfmSKdWsdcSs6+qk PxFXzqglnQGEJyFiyXuv8iq696VqX7mTw7YcymQsxde9kcSSLgUsryQIWkbJGKIicRVh PQxjGngI3hNrlQYpcXVPPZSXOwuZ2qZDS6ItvOxGSncM3OHBoMMnu0J/QZRPzPse4rym edSnLsnOPjQ0a5MJnRgFtEeYK9K5wntlHEiL5JMmC+s+AoKCzJyoudcjNuprKbquXScx BREVnzmEtHJ07bLBhTAktGtv9htKatMQ9Zlo8BtJlnoaZzpFLmss0ht7FtGhMQpCrgFJ eDMHsqVXnTXOLDyVrRgk0gugNASwWGAHvZEoyojJXKVe1EMuYbGCJBLNmryO48UKHNST VxS8yWm9U+WdSQAojdRgNnlUuKLEZcDN8cKS7EFs17uELHTP7sQKMZAf5VVt1euqaAZK qPG8boZEzjkqqJmOBldv6XecjTla9yCMr6BLVYJD2je85zZSMMcXk6lkvJNElXFhrjaI +WkWLkvNoEwSaSAFFrbH51tXDplu9WdCFxOu3Xkfc9Ryt1EiXxQalYdUXfhZkaSdwlq5 WMFfC4GrUQUUBNHKS0GmBInMNLmWDntQXphHBTzBpFQEZpXHTrQWB8CuDDtHLMINVotC JQEVuGtAgkSbzLK/AB1tvGNT8DgbKlVFX0mShcaTKHy4ulUvE6EhdyJO7amBebFwjBqx G+HHkoOH/HwN45t1ZVlqo4VB7YVWC4ArK6kUgUW17WMjsmYk1Fp9v8olPyt+sUlD6tKU TAh8HlJvh+IKCXCtimwmGosUu3uivNUI4eAxvna+ObsnCtTOi4cInQkpuaey1uC65Qm/ 4rw8rlJ3msGvsnJX1sJBOakaCYcZFGdAgiJ60uQsJFFZKPJLmxPO4KWUrWiWoMwoJ4tH dYJ43XRGqNaFhbSFsPh+Z6fN5thDzArA+Clb+uAZ+BlQo9xth6tjN2wO+bMSf8AgDvCk aXYUOainhRpfqwQxqsIIQXQHKhWpaKNxHYE+t7ejh4xErsdGImYYFTlD/ILP9INYMUDF eaa7wIRZarO3giGyrEq9fJaSVMk82rWogyW8cJrOD4FRVTR779M5swkcF5ZGg3Mq43QY Ounsworth, et al. Expires 28 May 2026 [Page 95] Internet-Draft Composite ML-KEM November 2025 oQjIO5C1rbe2leE2yLMNqqglI+CrV6xhyLpAr/GCxoZh8fgmBsOv9lGDf8K1bHzDtydR hShdItmi8kiZUjqBFWqWycYSdcyoTZ0S1LfZXy/mtQbaDrnqUoCxFBNCmrBxD1sDIEmd tXxzx+ITWKAGpjXkxJ3UoO01cJN+5TrsKQj3F1cEBqMSMBAwDgYDVR0PAQH/BAQDAgUg MAsGCWCGSAFlAwQDEgOCDO4A49NGtTVtxp9MFotvz6mPmqY8lA0vb7/0jGYC5EQ5YOj3 WryQQGLrGB7zI2zRDAoMqQ7jfH/Of25bnziJP5bvDsqxY5UZoMs598JCNaB7dAKYc1mT 9YRcEhV4XLC0svlfldSnCBNm8pYjHU9pcEVFrNd2rI50SpR2eBeI4sf+Vz+FR0qzvQl3 k9eKwsyVgZG44QamG2AqCC9UWEmt85ercNgYBJIe4UGSPIsLnQ96SoqFXOGo6UfmVvFt 1+4ND/TVTkLvGtB8EmMeEOKeXvI5g+vEyLtD9riyR2EKLfqP4FzjnNstaban+kRM3oR3 0Dz2WsYKI7vMe3yo0J/HiElWWnv/b+Fnhz2PvQp0C8RPEsj80fnEnBtDXCcMmYa0C0UV CoNJPgpef8aMQsVggRKgcLyN2fSZE9DiN9LQNHb/o9FaOqkzzVkAPTElWlJmEOSN35G0 7rLdqXjPIi7PrhsyS56rHxecpatDr/648y9bs53g9aWCS14os5EMBCbhb/Vq5EenB4rz gJ//4fkJgC44XGYbMnGeB0rpe1q9SPYgaCKBHDbn+zPsiSHNX5GNJWpyhmZRWBiuyBwF zR/dm3cTE7R6tZP8Jzt2tmHMjHx9yL/dP/bgScnGp08RarCbl5iRx5s6U5XSW8nReGKT jp9Iubca1oP4Ss2WaVheNqrHGpYlpfrC41MYBXq1pE3PGhHt9oy5x+/hYsXTIf08Sf1w kOrRqhHIKHEg3eS0LHhqLg0aCc0Og67+Ve1afoX9x6BROdYDmimdT3H8JNg/9ZnRSieq FgW7U760EzbaP8md86QKs5c5vvTmh+sq61CNG95SjY28dwiMO439M64A9iVskWzUAYZm 51bqoQbw5ZefI0v6PceWWOza5qWXzT32Q0hPEaUTQ0aqFoXznE1yHTD+UdBzeofTlQXO gnFnf9NaoJuDsv3tgvstEpxIOlEawLnJpvQMhQSNjsg2mD/q3nhVxXYw7OFHmD2jsIAN ySoxRYRoQYi0VZHP5uY4b00Pc3gPl2Myb9vo71+txR6LdO2GJWwHW491g35P4sgLyVoR oXZq0jBCZnxbWR3zGpdHAc1Bxq3e2ptrJeO/pSvYf8AqMQgE4rn8M6uCzBaQ64SChp2V KlJw97D9coK2ffN8/Dj7vcDooTLzyjme0zFaaoVZv9p/0wp/o5BM+vhF8GmYrUkSugJW tIjjZ3Zl5ICXY2iucoFU+4eb1gGCN3NPo+uK/a6OIFYTrD9jLqk67LjabthWLFpQNjte VB5767oZc4ZU7tYFQ/49oU6e6qu+qdM9rlJAoYbyQfL0mx1v1ACBgs65iFpNlk1P3rfS kleLntO23wPZfjAm9hHVkQ9qZ0he1YbBlKBCghbfPF/Wm/u7E+qH9WyJadxTUoCs+CJC IrlbepAzcIOkuGoB5+60fJwulDsIYsE+XBoIw0VXpzdoShOA8nDl96xFMqTNI+H7HxqL 4Y372VZObSCm53/PD7R6ke0iJRqx5u8UXQtSYhpD0gqs8wQSAAwh33LUuoBSHdLUoj9H 55cGCs0U46d1yP5RzA7e4zjCOlMykTa8L24yaI0OPP3imqGrOBYzmMcHg1ucmW58EULi 9x2h6BI8Yj3KfjFyjkK+tsWKg4YAR3A9+Wu2MeEG9+AKymE6MhzxCm7zWeig3TYtc1cv CFQrHd3A56ZTjg8zdoj7tM1LE4Rn3yziuCGBPXnZedfPuwI5mUlAcaqeRgLDUGb2S2No lBIx2AK7vSJEnmgiqlbhsh0KfUEkou3kCs+YyGI8iZGxZYRpmm9EVkbPNJNNvItNHqkp BdMipe29gIFr34WMJr25aXnjbHwPPUx1FWWbVUVBiZbrjhN2tVWOwktKs8JI8gLJf57S +HgsyI/yRTaevIYiMO5rSBnMoQUrimPh/5BTRvwM7luROQayYbSxzBY8DNuw3wIEpPys HRGyjH02pVA913IilZOFbU4CkhC+Lupi4/1HFONiB0R8hxMxGs0/dZY3gCKNqeqkKOvF bGzWi6rgnEqPCDLU0OpJ86XqMkEA2HUEdBn9thG/QjqDpo39hXl6qoLJpsgrAQ+M0zgf clfU9U2RtBcAAViVHXDvT3IQy2GzJWyyr+QMYl9DoYNcQgVKtoIqltHPTOA9RI49cDA3 xkOyWky4JfStg647HSFaNSdGqp9+6KsVUOlJQHRJasU0cSKH3bFiDKAH/jaA4wrKqZpc N3ZiHaAy3bEFQM7R3dnE+H1vXDx42axUAv/VE/ZbV4HfuTEEYuJHnwZgaFfOBPFpmrlt 5SASaoGBXu1T6qPLWFSUam8O4GxW/heN41TnHNPN78V3q9eWUjdV4sJD32o0jJ9rdFpm qauWDblvgDBDweske8oBjgEhYyRKTztz/JxK+ABNt4FpQDfdbAedQIAq2XmKL9BZtObV XmOACVZQpowK84y0jfy3TXSRa0cSlHxaaBJm7LImb/9Qagk9Wgu5uUvkt83XoV4B8/PC yGnkDOpAiFms3IVIE7P6Ysh7UOdlEx7jKkTflz4kvE1zEVYmSeQ+DYcbRm0x2J9su3RI 3VlrTaNSXzn/tjRRZ7rKSkZuLlnVW12jkiGrfUyWrBLJCOBOcJR9HjDzSoJj4cQM3KWx OEJnw+niFn1op0tnQT9ru5VWEFO+w000rm89AsHHPkh6KFv6pRk2zEO9uiCZHieLa1H4 1y8HA1oz6RT5h0sdBNVrTFs6g7J8e0zMBG386hexB3NLYs0/Bv7yDnc7UB5+f2o3CojS SsDN7YahU1cHF+Rq+iANGRATTV47laZ7sn6zNoXaFRbDDR/woHLHbUiRZixjTkd2LLyK UwAlBGUyl3crCPucABiGDqo0D2bH7F/tcei1GUALgrjUd8qGTnWnZovgLXpw1DqXwafb Zrm3RYmEZpLdp7BDQdR9Pt6n50HZSPqO2D8SvdjEvGHpnKtF/YfebT54ce8g9Sd1NfpX jgWqeDvaGeeRfmxx1ebGBPqQCXjGnzY9peLM2RThPLEkM3DGtTiHGzvxwyS7LXUYp55i Ounsworth, et al. Expires 28 May 2026 [Page 96] Internet-Draft Composite ML-KEM November 2025 IJ1291Lmi+eRYnE9x2mkylk48b5weCN5FYwGJVUCIlaiOnC9xdYo4s53htcjTOCOI0cd xRi7+doTvM+oll915XBXRYbrdhvYgvVY6L1inonaPzfNd5NOjH/92f0dagBFSUfwJ51U hV5Icp8Py5H4SLl3QNwHQfclSveaNspFGvv8ZyL7244a8ML5Z373ILN57jHaYLgytvxK 0ckZYwF856dwbo9HowzfioFodcOQ9bwQVQlPGrkpOE1BrpHZcjsM/jfft0md2Tuy353y Rb75lEYwRqypSj46lQhV/uZCeX4tfdN8ZfHed70HLOhzwkkQllEFfSSmJBYXydX4Pdx4 RGlz412mhYsyY34kq+JNukScvEQZ3GRMYefbrN0fLFtpG/yRF9G4Fyh/Q6Ecf2+K5gIz bTS12B2aVQE+LFIsmDkmj3tEmc5/I0Vz5/aODhmEO6xhzau6bsSUl5mSIQYPb+XEaNV5 gL8opHWKGOAhNSIeHzvzSDTUD79L+rIiMgUt/Gn+rVZ6FzIBpFLJxIWnpAjlMtpe2Mpc 2ziGREUX9sFuG9Np2uOfe9sINzdy/XdP8Pkz7j/9KI28dU7kYETvw2VndY1+RPIG5Rw5 +TQGJWHVMf5FUIn1Uf9ESmYTupxUptBKIMV+4JEThUYZmRo9ht6JSa/myO9noKjA/Ya0 xNzq0rrV2I2pu1loD1sd4Z7odtrSJPA1qyphYWWEJw+z5QekjWeU54gaYKhS5GbmpB9Y 7pcRc7iFFCqn5diq7ANYzZqxsLr3CuTtakAEl3uVR/mkvnC95v2AtG1QL3N1dipCI3Ue 0iF4BqJz5rkOaTEJABN5hs9OyFePfv3vmQst6xeXwdfI9ZiWfGywmO5mSOqh2Ukj3ACt j938ueq14wP+sNGsQ8d0XYHThs+SaMusOR9zblLuLzigLsrh2Wak5+wBM51SKx6ZJtqZ EmHUjhOKjyJG6NSKAHFjdKRrBnIrj9+sy5ekUgYNmgOL9NWlvgieo4ccKRe2DjfJqlla tJH78gg+BS3iSD5qyU5OFTzjK5763W3H9H7wHrjCP5+64rQSypZKfxkIKyXaAlmeRRH+ /w2L00TPqJ54dZzEu3U+Kt5c1wyF5MnuRaQIuAO0KeaQDKcxagp9tvhTrEBj2f5vCk6z iQ4Fxn3si+dYJ/oNPZ/wdp4xlHWvgE0L27K/MdcdVszM+uUnUZLkfzh6n1C2BXq8n6rg cjLlwn+UD0j0W7MQDLpesJ8fTRjBXkHlpMGcSZpRVCUbdMmxck9ccLGSkUeMAgAnBZgG z50CDDM1OURrhI+4uRlK0PcTS5GeuM3aBSMnUI2fq+MHIFhulprFzNJOWIarutHo+AAA AAAAAAAACw8WHicv", "dk": "19hK6xQjWC0qrEb70yo1l+/SGrp4owtvgvVCvJoPH1+6f0Da0ovn46ktPNlNK 4lrrWkL7MAhn+h0L5onbCLwFZh++rUnVXRrg73qOM8wJj8HoJQ4KZsmyXZwgYGyGgd7" , "dk_pkcs8": "MHQCAQAwDQYLYIZIAYb6a1AFAlkEYNfYSusUI1gtKqxG+9MqNZfv0hq 6eKMLb4L1QryaDx9fun9A2tKL5+OpLTzZTSuJa61pC+zAIZ/odC+aJ2wi8BWYfvq1J1V 0a4O96jjPMCY/B6CUOCmbJsl2cIGBshoHew==", "c": "YANgng7GbROULaM0ObtoJXxrqOM8mGUHT0RTka+xRR+xQjA8C+Dmqcx5ooINo6 iNXV4bUhndoZfZEBUxDsHhD0+My/h0WVSfNzy6PI9gmmjd5Wq/zhAeK5johkS1z+jtwn Yjb7+BsUdQuYqkFgIMmD5yTtijh4GsyBijZ0lIzP12aktW5dLQACJnbgRdBc463Cy+UM cw+LrRGBqEaM97nQJ0BeahpoDln8Ua2atAQpIoJrvm39ou5HEkBAJ0jr8GiuG5+OBnLI kn/cI4XfN11i0xwzYWmprt30g2xVcW9eST56ojtFdqNWNSSaDx9nquJ7+Nnw2X2u8XKS q72p9pxzADjOAljeqVDdcl/p9bIgha6b85V3bwI7FB8ZE7OAGfZmaFyEcovA83+8XSpo E5iZZVFFRZ+gdjSayGRiUeErQlbwc0iLzfs3FanhuzLcTJ01l+aM7aUR0jFlkOa297sB nvDwkzCOiym04T2ZeGF3Q2n0owfW8klpaMZUA0yad0yrO413WH1Gfdrjxxj9RMD4Q3c7 fNOXQqAgDiJ3D4Smdw6TP4kv29pa5quB4ifrcU5P8LGukHwcFNNuP2cL3jiBEmylK13p vUYzAvKxE9vXC6c1UIAnY8FSVjgwpTW8Lgf4vEW/S4H/mKex2+ZBf3HgyPkiQRTovfab oZRpghdj4NAOCKqDP1OSoPWmxRIMRKw+e31+5HANagSXIyhb2N2bQjNdAPf4c/Xs6she 8msf/7geR03M7v4EQuCMyRpQHHSvgfxG8Q2QCn9RjzbKFE7bYFej1UU3jI+OiyY+xp+D wm1oKnupX+45sCKIAlZ07S2orx9EvbMAZR4s/BwEPwYX3gAFxcH1imi3AAcZaZYekoLa 70BcTjFEAXbEQiZmUjomKLuVwHj+3diYcP/VXdaXh4ZOEtQMvY9kzH72IcNgKRJb+8Re db0phSyeGYCmax6+qsC9MP5LjTlvrrQ/2lHDGnyL4SnNM3Xh5Ot3+Hlwcua/rgmcEg7e fL2cBAO9GsYfiT+A9eFbsOQ9exZzQ8MJ/tVjFxfgVLUQi4Fk8dOhz+V3Vctr1OvZ9yqz Y1gf/91WILE6KeX006a98JnG240xZwPBwJb+7Ciy62htJpQJa7eLckcf7e0jgWYKCgJJ NFUOmfa+Nls7kOGZeyiCtq681eYCyYVtTAFjnShTEAj5VCyvaiNgxnj3tS5y9olTtPMX P+3DOu2f/EWwvtJxkcmxR4w7xAURmUUQujOlBnChgM8g7U1hPwkfg8NQB9A8eEL/cnoA uW9Kz62RwowBjH7stXfKQgO74riatCxSru0AE1b/rG2DE0BhcruNsQIrZLnulTyOalYo PrP/IZGHMkHe0gw7s0V14L3b8eBVlpy0SYRqjnbUhg3BZKBe8a+qjzfIc/HmlXmM+ron Ounsworth, et al. Expires 28 May 2026 [Page 97] Internet-Draft Composite ML-KEM November 2025 0GTeVxu5O1ETw9oDjIj9BQkatWwcA9NVG8h7WJwM9voQk1uzOikMLVGftt7aOL+7mxIm GfOg==", "k": "uRfBiaroahywi6Y+ECanMJsJuauPauljpN4LZ15mLHk=" }, { "tcId": "id-MLKEM768-ECDH-P256-SHA3-256", "ek": "yOhDMho0npN6WPgh5tYdaCukAvB/3Kl7NjS/bis7xfVSvXZ9NECE+Uaj7VoA6 jsXP1wHxhpgRWqesaSylYotGGqVh+ReYjasoTNfdkEbp1ktdWaoXEhzRmNiNenNopYVc JV6AqgUWwen9LfBKFObJbh57fN7CdUZoCoSWCVL9bFi9sM5Y7k7DVRdFGt3z/w7BZcPs zOQTKms3sjEjFY6ywUHJuRnOTOMcATICYcClYmmTPiUlFdLBOloePtMZsM/C4dpBWYbO LJ9DykLJ3xZh7FGjpFFYzFWKMZEBmcWaZt4tLB+L0Q80XunnuFlJUKWuImgMokWgQw5j 1BosUrJvvqWpiCbbCKrc4t3aplCooeg83uQ6SpeOboIC4aXFaMpaxwir9QI0zQMykdtG rDEPJyIOvqzJyCdYOppRDWs70hPqnCgTeHBYjQYZVSnKUW/NwFjJ1hgNLelW7wQqRBC4 XPApJq0R4l9+Oeb3yelpdtWtQw/smfJsDSEdXsp9ZUAB+oIFEEUyceJ9aUE34qbyLm6y TJDWlGbvkDFiJIdcYnKPWdoaEKnPlRaISDPNEtc2shGVkprZ9cGCasUdsZmYxt73QdAJ VySvaFSi2pWn+wKP7JdVtI5S2gdsSSu/FsKSMORn6dek2nL0mUs3PUn2phcAzTFsjRLy wyFECLDr6cqSNiNOycpHDJgj1F2YQeWbPRrJBAyaCVl3OeSIqYSatUi3cpvooafhegMg lVDt6NoOhRZqRTMtfDFBfNiZKEal5STAF1YGsAiVoW2+NUCDyY47sqexjGsxeyx4+i01 5IbQLQGEECeCZwQPfSftQceL5kjP5wA1kNAoTxZEPnE93uE70rJKOugAawmi5goh+TAt XsZ8xzB08CyOYScJ3c5RgQ6AusApSN3nMSY54OY7fgQd/ZkbgyV9FJbtnl74dayOXZzR KEfheAjVflyhGJdDUgQOaUsfploTBXI9cmqS4lZlLcaANh9mDLKJQYbC2dJU3xRrPvNv kYcrfc2phVC5rtG8ThZPqqr7BFUJooCQmmaS1FZPYVwVZEFESO/2HmvsDZbuyR4TWlY9 wkWr8Sb/lWCLlI9OSg5D3R3YybEr9bCOMYHjbNy2rF2cbu88NkR/EV8YHxaSVHG9OQNO sKnnpQQpGJuyFFiuShSK7V00jU0nEtRRsjAiEuN/UQh9/kyCHacEkhXc+BjYaCgRHMMA 5pjbFdEGsu94FnGQtUzz1codDgDc1hvfcMxNHR07Vi/NjtqF/BOqIx4bdRn5IaocIG2v iBykZdK1kOdcPiWRSGl4ApySsHEM7h/OtAo1MjLvOo8gkVCldakS7xIylgzbOvJj2tGI sbLAHMUyaoP9sllZOM+vQyCdjxsI8lq99wdiyVEMsNgYqIUgrN8BGhIqxdk5QyUDmE5j KO3TfCZcFi2Z/uDOih3scqW2Hywk6gVzzlcQvWXmxMhEHcTvAHEf3acccyG+YC+sDuld IQ2OUIaomh0PapQKYRqpqlr6XnECEQrZ3JoaPW593MHw4N9CDsQ9xZi5A4IIkLse6Vye /jvpSWCbTpsSTO+0GecI/sEXbkwq+ildsG4+/iIar2EJGD3jghb1mx5LLbVlEvdbThBH mphl3refbOzgF1SYa+EBdM3PYUWGYzM1XUAkBxwlw==", "x5c": "MIIS4TCCBd6gAwIBAgIUbGZ8xGdvbsDfJMShujhdNL7T+pUwCwYJYIZIAWUD BAMSMD0xDTALBgNVBAoMBElFVEYxDjAMBgNVBAsMBUxBTVBTMRwwGgYDVQQDDBNDb21w b3NpdGUgTUwtS0VNIENBMB4XDTI1MTEwNjEwMDExMVoXDTM1MTEwNzEwMDExMVowSDEN MAsGA1UECgwESUVURjEOMAwGA1UECwwFTEFNUFMxJzAlBgNVBAMMHmlkLU1MS0VNNzY4 LUVDREgtUDI1Ni1TSEEzLTI1NjCCBPUwDQYLYIZIAYb6a1AFAloDggTiAMjoQzIaNJ6T elj4IebWHWgrpALwf9ypezY0v24rO8X1Ur12fTRAhPlGo+1aAOo7Fz9cB8YaYEVqnrGk spWKLRhqlYfkXmI2rKEzX3ZBG6dZLXVmqFxIc0ZjYjXpzaKWFXCVegKoFFsHp/S3wShT myW4ee3zewnVGaAqElglS/WxYvbDOWO5Ow1UXRRrd8/8OwWXD7MzkEyprN7IxIxWOssF BybkZzkzjHAEyAmHApWJpkz4lJRXSwTpaHj7TGbDPwuHaQVmGziyfQ8pCyd8WYexRo6R RWMxVijGRAZnFmmbeLSwfi9EPNF7p57hZSVClriJoDKJFoEMOY9QaLFKyb76lqYgm2wi q3OLd2qZQqKHoPN7kOkqXjm6CAuGlxWjKWscIq/UCNM0DMpHbRqwxDyciDr6sycgnWDq aUQ1rO9IT6pwoE3hwWI0GGVUpylFvzcBYydYYDS3pVu8EKkQQuFzwKSatEeJffjnm98n paXbVrUMP7JnybA0hHV7KfWVAAfqCBRBFMnHifWlBN+Km8i5uskyQ1pRm75AxYiSHXGJ yj1naGhCpz5UWiEgzzRLXNrIRlZKa2fXBgmrFHbGZmMbe90HQCVckr2hUotqVp/sCj+y XVbSOUtoHbEkrvxbCkjDkZ+nXpNpy9JlLNz1J9qYXAM0xbI0S8sMhRAiw6+nKkjYjTsn KRwyYI9RdmEHlmz0ayQQMmglZdznkiKmEmrVIt3Kb6KGn4XoDIJVQ7ejaDoUWakUzLXw xQXzYmShGpeUkwBdWBrAIlaFtvjVAg8mOO7KnsYxrMXssePotNeSG0C0BhBAngmcED30 Ounsworth, et al. Expires 28 May 2026 [Page 98] Internet-Draft Composite ML-KEM November 2025 n7UHHi+ZIz+cANZDQKE8WRD5xPd7hO9KySjroAGsJouYKIfkwLV7GfMcwdPAsjmEnCd3 OUYEOgLrAKUjd5zEmOeDmO34EHf2ZG4MlfRSW7Z5e+HWsjl2c0ShH4XgI1X5coRiXQ1I EDmlLH6ZaEwVyPXJqkuJWZS3GgDYfZgyyiUGGwtnSVN8Uaz7zb5GHK33NqYVQua7RvE4 WT6qq+wRVCaKAkJpmktRWT2FcFWRBREjv9h5r7A2W7skeE1pWPcJFq/Em/5Vgi5SPTko OQ90d2MmxK/WwjjGB42zctqxdnG7vPDZEfxFfGB8WklRxvTkDTrCp56UEKRibshRYrko Uiu1dNI1NJxLUUbIwIhLjf1EIff5Mgh2nBJIV3PgY2GgoERzDAOaY2xXRBrLveBZxkLV M89XKHQ4A3NYb33DMTR0dO1YvzY7ahfwTqiMeG3UZ+SGqHCBtr4gcpGXStZDnXD4lkUh peAKckrBxDO4fzrQKNTIy7zqPIJFQpXWpEu8SMpYM2zryY9rRiLGywBzFMmqD/bJZWTj Pr0MgnY8bCPJavfcHYslRDLDYGKiFIKzfARoSKsXZOUMlA5hOYyjt03wmXBYtmf7gzoo d7HKlth8sJOoFc85XEL1l5sTIRB3E7wBxH92nHHMhvmAvrA7pXSENjlCGqJodD2qUCmE aqapa+l5xAhEK2dyaGj1ufdzB8ODfQg7EPcWYuQOCCJC7Hulcnv476Ulgm06bEkzvtBn nCP7BF25MKvopXbBuPv4iGq9hCRg944IW9ZseSy21ZRL3W04QR5qYZd63n2zs4BdUmGv hAXTNz2FFhmMzNV1AJAccJejEjAQMA4GA1UdDwEB/wQEAwIFIDALBglghkgBZQMEAxID ggzuAPjo0i1qjQfLGCeN3JcO/iKEEWhQS/JStbIQ3GeF+5bQkftlWR/eoWMssoG9O2li uI1RfagJ2+cZRs5sAvazan7vDXiwWKzW4DnMd1B9kY/+6qq4EMngCVR0tgP2kpdbwgmn A2BMdkHL7UdFeXYppScFIshcaTi1tcLq8XmfSt6FopZNhdgm2RrZaSUV/8bYW26KNZ47 qM80DaMU7mJleVmWTS+NX4NfyYL4sQ9aultR/DZ+3YDvYxH6I6o7qJRY6AG04/s5q/s0 BEsxRjHQ4LmjFpQH3ZexpTJdPxnUUfguH3H47BwnIrYT/Aw7QKLcUmtTvn0/q+EECfDD MaDlPtQVUu+guImVI9W1547oX9kw0UcONFRb9TUHXzuDhijEydLm70gqR5MMfEJNr2cA VTvNxYXbbP4Vr/1IItaHRj9OTJOZhPJbnbV9j6Yv8Mb357fGEDzU005tM2vVwGCl/xDN jqHwbhpUZ+Ja9iAOuFLKZL+6+ek2LerCM1jnrCgoP7ysIhpOxGg8cNsWfGY6lGT8tgoN NG4l+L2mC/dy3HywAgH348WcoqCqoNLofq9zzGD1u4E1b6f8D46dMoex+/q/KqyH2dK3 55rIOF6yv3pjKuJTsXrYSZziBeypN/wzpNJunhGs4C//FNrK5GgjbkZJlrQO2MPv1oZY Eo2MDUCuphTY+SyRGxOuPAtKvbhkJxTYRqHGWNToa0tv7zOAWni77Flkaw+mbb14H5mk rlyPUXIZGEl3EWxPQhry+mgvpdsRTOFA5e4sLb1VA7rQEWxEHuRy9EaQgFctbBJri+La /evqg7/QgKHWUjxAnoti77Ok0oOg3MhtWJVFVrEEHJ8dw58hJNIwOtTAc1Nns25Wp+cZ FOg+ZdVR60ONjyj2rRaNSWUi/ulQdtJ5c3rMB8nssz2YXLQsXrq0nCWT1jQe7PIb2G3o o9s+tKgb2NrMWCZpb1tmKg2bM56j8vt5XerlG3PIWAwe05CLbSsjV9h3GnHQukeclOpO TNtaL1013tzAWvAJ8JYzOv9IgqS1ZH0woEDfeQBj3bo0Fe6+EkyQisFNnJXXhagT1iX7 HCZlSGl7tUpv+VhGZ+tHMO7iiADMiZTbR67cCF0jO7VMAtsJqRq/UofEmBx0TAA9ah+a imCh4lPbFKCpTiRZ8OdOLp92s6/90J3+IB+qtyec5tcRE0AMJ9DJi3Zk46sQXJEHkmjj APVstCbo0L97rZLoyFCcRIPd7Ysjw60sGXPpPr6cmuH1jET5QY1YOxjXvwfuuNCK/OvW TpixYm9LFk/xBzvL+bRuiReGLh0l9lNEQVcy1sqyLNpRhbM0Swz+3iGlA0AAJRO3UTOS Ns98R/3Fk+QSaokh3it8WKFPSccP3kT1ZCte3J3giRciPqsMBg0mE6jabNc18PyTpmdn 5qsTxdH3igZ3sY2yx2m6PlIeO+mn4Y9xMojG6IAsr4N1RyGPn+4hL5pPbSm9GrSCmQbE Yk7ZCsc2v9/5Ff62+fpufbSe+s2spWMzdHQmdtnV3P/3JI+6rdkNGpIN068Q5nCtaVZm 1wyeqd0EgEZYKHG70l8YqG5y/tbUcks4ZLvVafPFOqisxiCfTfDiz+fuk6niuTn67U6f eWZNqE+vKP327iirteZhNbfkEDj9UIOjv4bkCNPswQ41/R+8tyvdgrOfoiHkXjmI9jR6 X+4hBx9AQQRiL90pltkCfAwrqqFDAACuCQLE3P4jvRVFO+YLr7NuKYlBPYhRz30AxjDz z4nr3cTO6MjjGzNrtRqaQIaibG5ocIAQBTDue76SLGzwMTm21Rn2Oh1kETqYw0D97NXQ GdRvrO+wwlEjuqRwzME1PtjOuOAWQL5j9i4VkRAPeW4hfV3Swf57XnUjPKCjQvdaRwj4 BNre7OO94eEr4hCPaOsVDn+MxD7Fil58Otv99vpCUbFiWzUHljbxZB7g+xK4a9nJVgqa IZ1s2bJ3Ahm6yv3P8LYBDuuu9hJ8nEOPdbD7463LC38cAJY7stWReriLxpMnlTrc+hRG cg/Jz3h7N45LFntY+Eo7j8yq6eADkyloebCTWypsH/qe3FESDoEmwqjXia8j+WhppmHP nYQ0kas2bTaK48BvlkG6MoBeBbh1OOgQnseGqFqPuPR4v13AWuhCDTEw9htho8zqezAz utTrF8xi2xul++RYrUiUJJusDiwjfX/BNJ2pawBEqsqljCu8qKBPvgOOtbQf987SH3wr 9q2sMMJRPs1+y+waYeFjDTunBuRQOXs3Qnl3CJvQzV6gKDFAKkyY4hJ0EK/xQzlleXRZ 0WpIXv7cXCj0GpXID63d/85Kw2hy5SIquEdDyqT0JGlFjRcu+yxHc7XfpsWl5j/2N8BV Ounsworth, et al. Expires 28 May 2026 [Page 99] Internet-Draft Composite ML-KEM November 2025 s5JHfEOcS2JigtFRByvebXZS/IAajLVQ2ayG3ej4S9FdLzf3SUDvBdEKBVAfvhS2/7bF Glyf1pu4JfnJFpivjgcrKPn5OArR3FU/dg9W88v5emS6OHtp3+Fn4769uUgLJnpnRq8k 5O9jaU9Iy+Cs63xd7vcyst5zlF5OQsvbxO6T1dsMjlXKIgMdxjAVgLROm2NnOA5/qYP7 yOdW1MmbydovPJqcz0Mi4e28U5fdITNU5nciiOtqu88GkC93QIePQTLFNK1gZiZGVBEf 6VwlyXo3KHUUz9/NSuum2v4OKeQzLsbNPsTbwobM6J7bBHdvoAb8Vlov4pp1UL3nxsVU j2yQtHaG9wk3b39yzhM+5UJrkcKTlh7bJtW6tSPRnSSdadxxTX5AdAeM1+FAhqQyWbB5 C0pUwemDSkz2vxSuUs9u4GIE5DV3Y2N50gfwQ09suDcg/9gOz3H7AXDStSxBdxNneGZo hbLbiFuvt8Nbu3BuG2enSs9uhhsAGslTYD9mrWVwkIv4XDeV0niEiixy1p0XMwXXA3vx H4FlTNd6v/2gpDScQvV9x3xbfAGWCOs5h2iGZPtNmnDbAphPWgx63mINbOs28sZxz7NI 4CREcF49FE3ub3Q3wfrSyYIaSdDJ6V+GeGD3WQwzFE/NOlH3wmEgukbmBBifyJzAyCn7 vxz1ooI9UAIaimBMxTbyb/tIKA1QOTa+fItZsYVuVkbWSnhtD5BLyAj3er7YeHi10vee RM9lu6MDt3kS5oAeUpoaA6dyWePS1PfiMcLjCQcOgvcRS2DyIpf2IZa1ljyqHjNGUOrb FjoTU9pSeNKYzBjbkjCse8gC8Iwwyo2Ka65yrF4p5ZNab3fh7iHs5I9Ys1vzfhgXn3yb of4Dt1qr1+0xz9H6Aa7ptNFLHw1/xIyyBDLRCYrNCeY+ZZcgaBZjVcJA8qVi6uJZgyeK Z1NlaPGZMRPpk44Y8S6ZtDdY12V/KvAWm/lUXC0UBWo2nc/E++i0jX7C2OpQLrcvbvNR CNxMgTaxH2xL1UFpSrabOETndXFPnfaTZjOHwcEPhGDm7nXQefvX07Ma/9hgo1epdQ50 YY7+gMSLgdpn4prATDwO0JN2WZXBXUG2FLCcrU0qyzwLXRa3rxKtQU9Kx+hfuVlunaja lfRd0OfOZyMpzb0jhF7VYTAXfzp7PNQCUHyRvUxz56fzqBXUaX1keWGqAgjspNNJk08L xbw63KxCG7ChwhKDngPmIK7N2P9G9GXTIIWIimW6UuY4E+doR3w3RTpPLSVaR5IDqXkb 0nPbVkTZD3TF4I++UnbU+0OFN1Ph3rjWN3XB7QvFrMZJ60LigbyZ5eDeDlI6lgyqDPCV xgfVFBfcuYa5d2zHJosaYkUbOuUslLNn51g2AYArxS6+reTaOuZrFNX846p0ucYcCXU9 +VbgsiDksoIaxxOWAcg1lv/MUNDHYP/DB3F2Yk+btiOtqgEpV6S2AjYMra8h/TOn6T0i X4tmVux3e/Ca0fU46mPTu/WY/7Typqg/XeoJJslhFc8XbDpiKuX/m7ByCNWoDqcmfS4J FFDMLhPFad2ha1KW6/H9B40jCqnYHRFR50NuiRGZ7FTrYmTJEjHtyLShnXftQZTpv6Px 22AKCBqPrdV498sO7aHWPFB08FffS4H4Wjdh3Njjn1KvrJTSfL/I78jPE9v95qocMv6O qoWBtMcPKAh2lY8aaUm7k9ik5GhcxI8HBIGwSt3yp5T9p0+5IEtQEwlz+oN7DUyZMBxK BwjgREGkAYq/RzpSfTKwC766EtxehSMeZO+qoSEJKSWJ8khvA3RPcCgPI3/m3YBdtzYJ TxlHoG5kEK4mov1WDAmKfvYY0DYrMb009QOACS8oKwSVSAjuZnh26Uc/s2tZ3mH+GnsB ywOxIFgqgZjm+jhOCz8f/BLvhxze/CaJjXqccFivXAUkaIiLRjPQWWNppLPm8TE0RVzP 1NsZQGmAusMMNEZHUl6FjJhuvg0fIFF9uwAAAAAAAAAAAAAAAAAAAAAAAAcOFB0fJQ== ", "dk": "QgoL9DN4T5OrE/IOUqH6hsPvFHSZhHQb+wDcMqqTv0DmdLqqv2suCj8YRtC5X p9mli5sCI7vzQBldPIlJSty9jAxAgEBBCBw6+qOxORaRC00Nk/UvIWvN+S/5oZElgeDX LzIGDQ36qAKBggqhkjOPQMBBw==", "dk_pkcs8": "MIGHAgEAMA0GC2CGSAGG+mtQBQJaBHNCCgv0M3hPk6sT8g5SofqGw+8 UdJmEdBv7ANwyqpO/QOZ0uqq/ay4KPxhG0Llen2aWLmwIju/NAGV08iUlK3L2MDECAQE EIHDr6o7E5FpELTQ2T9S8ha835L/mhkSWB4NcvMgYNDfqoAoGCCqGSM49AwEH", "c": "/m9aHQs23dtkp8oTilPb3TpyNLgKzJZU4Q4oN2OAGOI3Ia4cy/d2C0bLv6nscz YfAz6CK48KkON7htyPo0QirtdwX2CyZpokSoDd+6+QULFzm6DkHq6XP0VEngXHdyV4Mv 0scedgK9U8GxNrQBtSlsAdOHw9MS5YwkElCY3CutO7xR/SSFpbOvuPrEWzJ2x68Rrqph 3Z/eYTm5+ZAEeE6NWyOLaRNe0L6naB+uC9FjxvmnsvWlI3JnXWXhjo0/MAxL7d9RJVf5 qLdhDb/hCNQn9oNAyxwl3s8GUGpadX7buUGdzqdObhHoBRRI2PmxxB8JqNkW239JC0om ZTv82sp5mzWSlS+4uiV15GeihJ56dya3HpxJzuoeTVWXpfeh4cUau2o+7YHN8KiK/Zia 9pg3TAjdCmpYvQyQeafZmFZDqL06oStqTV3jysvsB8J5Ck1Mpo54/KfUPh0D05CQAiAV RJsN31SE5yqZEXvgn/Xu0//djvI3UQiIT08qzrD6M9oGd4jEhlkDAJstbKhHdfipi8jE FEIbueW26UagqZqn8RadFnj3ozRtHDevOdxkrpnWIXJR3DXbWzi4iY/+l4sC1gX097BO Datnc3aLHI68R+JII3zfb7YuZnmQgZNhOPLyXJMFRbmnJG+C/vWatdzHk39UHagv4gSt 9ONMKdQlPyTXHRIoB+2jKLdEawsYsYpkJPOdhECfLYJ745vJJUjgZV4Oxa7rhqqTWmlj Ounsworth, et al. Expires 28 May 2026 [Page 100] Internet-Draft Composite ML-KEM November 2025 jM6c0Im2Ze6FnRYuG4PRYuMmYrWCzNnwcrKb8uDzhFDaCoC+VuzAS/1cSHrBPBVhTQ6z 5KKuGwP5y1Q3umF9hNZ3Lswwjns84A8ev4IWkKJGaFP6KggW3MhL0ee5xbfrU8zugzFT Hc1dWwaO8jJ0NWclcu9Jwo5J02jisYrB6JvvM3W1TNLul/eF0p11C7tI8iwCtKfyxrD6 1oHiqjFVX2yD5PMUGbC6AEWUGPR7xLWEDhLHts13nHfiPEMSIAAbnLp7K/qQ7fPGJee7 PKS5jPjUjQleeo7lFednrJbRX5Q+gzCvPxGeKHY6IWcCNnlyp0PsBOVSR+T+t2fEERec zd6RIR2sQKgPp2ZA0OW4BA6X2RbIo5ofGyoz9sZk2KyBDCY9gF212XJ08BMdPX5rDTsR V01MntXTOG0DSQhkCeOHv3BCEhFVj4iIxRxaBKDz4Ijr04BEOUQyDmJ5JZQiO7Grw9qO at0Ltw3CsjGKs22rzVXtamkmxWVpTf5/jvTZlGeKRkIOb5hRGQ1Hh6es2KK8uNPyKv0V OK3GrpT6N+Lbw0v2ycJ1TmgCaJfMHe1AlR7qECSRIjBMyWclgXgdR3PYRf18aLpACiZp jT6wcltNBlf8+YXP+G/L4q64SDItx2KeJ2UCpLk42b3DFRSEQXJQWyyyyazFKHmRZQO0 V51HRCPo9Ijqkm1nEqYabUYqp59SIExXXsdQI1tKjSR960Sz8/36YUdfjyrjylFEeiz9 9K3zqgYw1suZtSlqPnySKjfYwhT/uC+KQ5cLqADSeYCKSobA==", "k": "Skz9eyB7hdN5ELIhki/gWS1ry3qidy3QoNxZTUU/C4M=" }, { "tcId": "id-MLKEM768-ECDH-P384-SHA3-256", "ek": "zUbE39gpIZpDVrG2WHcBZbqpBiSyoDKRbaVBO8AqTkFWFgFkJFnFKFkSVKMqd 3q5pmC2TNGlDQjErbp1mLAA0SpRpLsL/PaErKmqJNawOyOMUpxdxdUYkcafZCWb7sM74 8SJ7ZJzQ3YGXmZULGbEmMR1JfQIM2KrYVEqgzNde8eEh9lvajYwj0OceVoHgiyX7ZFAJ 8JJ70cGwiSHrtANvlYR9Zs+aIon6TF/kxM3iEpgXFa2aTJITCFbJCiH2Yxw6NYC44pbk +ulkMiBJSaCHGhyKkBN4hhsGGPK5KUV2iqU99BaDKOYeFYhvAlsouEnojEA5oerXYrJt iaJClGMm6xfVua3o6ZoJ+VPh7u/+7TLMeVMXkE4XiBGAMA+oAwmHYZeDXkSHgqHdSExS WpEOQm+IugzqWu3NaeqpZxBnUPMtbN4aJacEVlwEOgAlLNuc4bKUDvPHLoKdqtZ5PAYk VZ+1xRXAAwU5LuiVnBaGhA/UYo34baNe1BYimWYGXUptlpWGRMOeIorSWDHl2q53NK+P /lJB1ENLeBrPPFEOJMNCeACXbJKdgsjbBgOK8Zh2+lPhJYh1Wi7u6EWHgALd9uGabYds BlLpdbOxXdpyMDJVfmMoKmejaVbOUuWo2GEp6k0B+oqkwClYllUEEVwlyGMuzGk1CcMO kJlIXVbnnY4LAl1FOfHeOIJBceUHQsdBEfJAsmfPfo8ZpG+BJJinzmKgmuwbeQ8AREPE TmvQ1o4QYrPzsxq5ZIpDteHC6d+UwI0q+EA6TM5XeVlb6wDOxLF8TiXMAR5qgtiMBNI9 YdBsLYldupAGupnGQcuizVXHPKAQMWwlrS8HHhgNytV1LJ8ytSCHmNvbVV7yUgRWtFwE xWKtUhpk3YdNRp19pYsewMuoRJtS9qIedbFsxOBlBJ/sEEt7MEmYyo5GNKarjd0TAAz+ /OiuUkWo1Z3gTRdXzVQqPrF++hmPPZ1JOa3TmpOooRmQcCygMmHTAYngWiX6NpA97MMY 8XFKecmMRU8OZk9lfpnmRVkm3UicnGl9ri2B9UYZZNrdTY+PfRdEmEM88WvGwcDi1hGF WtX7dxGidjOJAtd7AwnjjieneILnymfq7FO2kMbiLCx0ZFr8HNWQkVxeoALI+J9oxKMU YtV7qiVXGM3l9stitIVxndKnMWFubEpzvaWH9ZKuZMXQ/eeiOUGcxECSYZ02HQcymwOU PBK8DIUT/mnFhulmJo3CrVTcRUtWDHObKRfMyxH1RIh21mcF0AUtCOKV6qVkSOmt0hwd OhxJHtFduKvEFecdcFI/raNCFJXJOAS0lEjCHs108VAgHIwl3kaX/s+NGUzAgBH6OuIV EhciGwUDxi4MsYudXEfvRVLRiIsUbwTd3NK4TolJUm6ScMUyESmcfRWYLQ5gTtC4BjJz ZI5b3lVUilSPMuh8Zgt+9iHkDPKDYk22ExYuXyG0Kt17gAOIlW1HWxPCxaU1TN3OZEz6 tKCcAwTnrFK1OsHGUY+3yM9UptvmflaSyAfjfdEd9CUA9RJ+T0QT6ulu0kjQWs2HhLyL vykD2tAm7aZpI4KYHlU8EsERfsfg8EoAiD3rAMk0NCtKRDbs/b2VwBtBhR6qBO55ht13 af579W13JPGkp5ZBmwcT108tQyPKqgp63SYYLuG0mvlFmjrawBWq8eq6CJzOfIrx1hsO XK+Ods7jzL7+1ab", "x5c": "MIITATCCBf6gAwIBAgIUCj8CuNe+rSqyZPd44febyylUqRIwCwYJYIZIAWUD BAMSMD0xDTALBgNVBAoMBElFVEYxDjAMBgNVBAsMBUxBTVBTMRwwGgYDVQQDDBNDb21w b3NpdGUgTUwtS0VNIENBMB4XDTI1MTEwNjEwMDExMVoXDTM1MTEwNzEwMDExMVowSDEN MAsGA1UECgwESUVURjEOMAwGA1UECwwFTEFNUFMxJzAlBgNVBAMMHmlkLU1MS0VNNzY4 LUVDREgtUDM4NC1TSEEzLTI1NjCCBRUwDQYLYIZIAYb6a1AFAlsDggUCAM1GxN/YKSGa Q1axtlh3AWW6qQYksqAykW2lQTvAKk5BVhYBZCRZxShZElSjKnd6uaZgtkzRpQ0IxK26 Ounsworth, et al. Expires 28 May 2026 [Page 101] Internet-Draft Composite ML-KEM November 2025 dZiwANEqUaS7C/z2hKypqiTWsDsjjFKcXcXVGJHGn2Qlm+7DO+PEie2Sc0N2Bl5mVCxm xJjEdSX0CDNiq2FRKoMzXXvHhIfZb2o2MI9DnHlaB4Isl+2RQCfCSe9HBsIkh67QDb5W EfWbPmiKJ+kxf5MTN4hKYFxWtmkySEwhWyQoh9mMcOjWAuOKW5PrpZDIgSUmghxocipA TeIYbBhjyuSlFdoqlPfQWgyjmHhWIbwJbKLhJ6IxAOaHq12KybYmiQpRjJusX1bmt6Om aCflT4e7v/u0yzHlTF5BOF4gRgDAPqAMJh2GXg15Eh4Kh3UhMUlqRDkJviLoM6lrtzWn qqWcQZ1DzLWzeGiWnBFZcBDoAJSzbnOGylA7zxy6CnarWeTwGJFWftcUVwAMFOS7olZw WhoQP1GKN+G2jXtQWIplmBl1KbZaVhkTDniKK0lgx5dqudzSvj/5SQdRDS3gazzxRDiT DQngAl2ySnYLI2wYDivGYdvpT4SWIdVou7uhFh4AC3fbhmm2HbAZS6XWzsV3acjAyVX5 jKCpno2lWzlLlqNhhKepNAfqKpMApWJZVBBFcJchjLsxpNQnDDpCZSF1W552OCwJdRTn x3jiCQXHlB0LHQRHyQLJnz36PGaRvgSSYp85ioJrsG3kPAERDxE5r0NaOEGKz87MauWS KQ7XhwunflMCNKvhAOkzOV3lZW+sAzsSxfE4lzAEeaoLYjATSPWHQbC2JXbqQBrqZxkH Los1VxzygEDFsJa0vBx4YDcrVdSyfMrUgh5jb21Ve8lIEVrRcBMVirVIaZN2HTUadfaW LHsDLqESbUvaiHnWxbMTgZQSf7BBLezBJmMqORjSmq43dEwAM/vzorlJFqNWd4E0XV81 UKj6xfvoZjz2dSTmt05qTqKEZkHAsoDJh0wGJ4Fol+jaQPezDGPFxSnnJjEVPDmZPZX6 Z5kVZJt1InJxpfa4tgfVGGWTa3U2Pj30XRJhDPPFrxsHA4tYRhVrV+3cRonYziQLXewM J444np3iC58pn6uxTtpDG4iwsdGRa/BzVkJFcXqACyPifaMSjFGLVe6olVxjN5fbLYrS FcZ3SpzFhbmxKc72lh/WSrmTF0P3nojlBnMRAkmGdNh0HMpsDlDwSvAyFE/5pxYbpZia Nwq1U3EVLVgxzmykXzMsR9USIdtZnBdAFLQjileqlZEjprdIcHTocSR7RXbirxBXnHXB SP62jQhSVyTgEtJRIwh7NdPFQIByMJd5Gl/7PjRlMwIAR+jriFRIXIhsFA8YuDLGLnVx H70VS0YiLFG8E3dzSuE6JSVJuknDFMhEpnH0VmC0OYE7QuAYyc2SOW95VVIpUjzLofGY LfvYh5Azyg2JNthMWLl8htCrde4ADiJVtR1sTwsWlNUzdzmRM+rSgnAME56xStTrBxlG Pt8jPVKbb5n5WksgH433RHfQlAPUSfk9EE+rpbtJI0FrNh4S8i78pA9rQJu2maSOCmB5 VPBLBEX7H4PBKAIg96wDJNDQrSkQ27P29lcAbQYUeqgTueYbdd2n+e/VtdyTxpKeWQZs HE9dPLUMjyqoKet0mGC7htJr5RZo62sAVqvHqugicznyK8dYbDlyvjnbO48y+/tWm6MS MBAwDgYDVR0PAQH/BAQDAgUgMAsGCWCGSAFlAwQDEgOCDO4AxzOeIvcAsPxc7Bdniw72 uCzGb1Vkqlrxaa5vnVLBF8tfVNZc1PDEh15ru3d8QdAOM9i8toCkTr/C0U/BXpKJoCf1 A5ASgEYDtbVNzYnLdy5+e3epjSx7hvRjPphWqns1F8JLlIrAGa9nnTh7N8w2mNuljlPh cNMk109cawbo8pgXp+paTzi8eiBtDrafGJnUNM9kz6ZJ+4UnP9HaZeZVTCx+W3VDmuDM 66Dfn7NBxqlYYu/xoeVhpqrDDIqBnp4VMPjYbBXO0VXyY1enF5PwwT7wuA5lTfzDtEPK pnlZ76ID6M8F53va/QKJK1QgM6I4X4D30a2GJofQTgYILg8TqfUxhkGVfZ9ugq5Ehtsz 1fXXk5KnbRr+XJNXZINqQGyMrcEzHekimd8bEwBKJzSFIyEqsi/pj7AwddiXLQ2dP5TU 5RdW36SxByQp/gq0M2exzK/nJUL+j8BKRkuPczwItBVi1rwHa/gG4wR9JhjLmn7g30CS /WEdcPQNY6dqCkSJHr7Cxe1N9nyPmVOAiApWr7Fl3+KEBHbRFaCAk6cXgN09hLj8tTzC 4OLIgr1d6HI1AgOb3u+06na72CnpyqqaRidMygyLMGhTcLMKW1ZlnnoBcq2/8lWYL9Y0 ikNsZUTb3pVjIORGElztQ+WSIlGkuid1SrBBW6C4kmQZZrMGTozfR2/0C6FHUfjHvZ+3 qi7n6Z6zTUZT/7nq8OMpnnO+ZJph5GYb3iORFJZhTUYmLu2FtP1512Lc88vsUTHWmi0q zUBj1uzXxsb8+PONy2yIWhcystz5EqNvemzeE7lwlHXYT5UzennKH+yCH7+Df+aT7k9T wTfAnzwYwA/mtf++K/k9CYYtXHskxo+z+0mn+rMYev5N/JnQM+TIfA/7ahTrKuG6+Z9Z Z/xDmSiG31S/kVxpLFGgp2bmVgitWEDnWdCdS8S7kubxFh5QQZahlfVgpFZzQmr2wBSR ckwMeKxos84tFdplyLZYxc2ivS1yF+4pqZLhptBU2McM839bALpo4O210N3KYIGuAvXp U6q2C32598bcRfeca7d0jlHjlkfZRZSqR3KjQzpdR//aYHWjLw2tfJrtkPYTllaxVc1C Rra87gwfr7X0YKIJDuqyNBvzhVzOiFCn7GH/M4u9T6GTPisLrjoIALkUlTfSU06riTUG ZAwFXZZnE02id+kuquZFsTzASwSIjzOK+5rR2UTjQ/8S2g/il6AAAtEs1a8xQslEjZlU ddk8tPqQzepzMahgFVRz5amipV6El8ksmb5fW+4GHWscStUVySsn+40/OuJynlEJxV4w Tx2lG5lOh5vuwn6BSGU59eSBi9Fp1gmVfMqNaUBB2278G0tpRVtyvy2nYLfwB/Nydljg BEIeaesU6IuBJtyjmf9Qo3AyXeVhtnUqzNgmcxlMjAO7pdigVeYQFGasyrIAD5InUh/5 j0ZMqs6rAghd4KWH0fns26L2+OfFV6nI3XR1vQ6ai6c5xNDLQ13gTgWnSt1u6LE9QT7x t5CA0MvZgeRbHTcsO+0kbbamM6kz5wmYKSrmC95WzQCahIFndzTD+MPvBZIGSz6cS71G Ounsworth, et al. Expires 28 May 2026 [Page 102] Internet-Draft Composite ML-KEM November 2025 tkdaO52+TD5lEK1d3HWLslpBO2aBiS9skXlMWnVxBJzVJ1YXLuSCXiaHdU9rxuTs2qMD k+TFUZwKWnqqhYxywylHr5G9wqWdMhwur7Oy/uqysHEpHFTxSupTyrxCr9dsspQ3Fc/F RYug3mLSmmZq+VAHb99Cj3pAcLgviNk8c7kOTQtWq4W0jmDMvS33YVpczL01EZLiOjR2 rALWiRxLEQjKCFlob7NI06Fca/dgA/QZxHDHeNNCIREZOOuzf8oDOS5rSKE2lpFBOjdE rcB4X+N70oqhTr0FBgoRl4f/iNtjDdVeKHdaOAwD1HgLEUdcHaFlUfRhVW/bU9r8Oc2u FwOmMBW2ZzwdPAoruQ8LLxEHmLcB/TYRhP+jkzFNxPkGgNsthpWXmZHCMYURIEatfM9Q ZBdYZcbqicb3zqNRsWxP1Qt/t7aXJ3OUnKUrVixLEWlR9vNjF+EYZh6tIWs+/+6q8Oxb uirRf66Ut+93q6Q2JzyTpn5hWwmFoEOKXYDDmd+wFaKtDgP2/8zxoGx39syTyHgonO4J N7fol5L2i4gC/0OjDxTsytzqPX58jSL5kSQtkBqqkpo0e++M/nuDwwE44s8Ju3W1Mj3e b2ENKpxLIiGZHv7Zsj9IaUV5B012t4dBZyojkeb+aSMVMsmx20/uijWZykgKlhXMoyEW 3KtgDQKOiL6Tuo2yqP1Jk4pfmMyRtO2rCScIPknWbsDvlb+MJo4eW6/SMlTU2rAQww11 N3w8PLAM2SsRmJrHaEbxXi60E3lP+lvPEcOU1yM4GRNbPJxApPBS+s09ZEoysqiFxcCj OK8YeccIqqsLFPSpFWqpaZJQxkcEAgjBD5vzKZ4LRqsjO0KPrS/x1BsOpNmKzavqYwtY b5e5H93uutkDtKJ7OWOnEEUtksp57d8c0fRteAz0hOysz4SUkPpYExXXh0sSsGAtLgv8 4Muz8hwktbPtVSGCJZl3hkmEw5Ks+u0etXzbpjjxDVTUQXgkpHbFOkjUCK/eyec4Pgww hgYs05Bq0jjpXPD/51hnTIR5QirKXKPQ9OF0OdLtF2/I8g7Dm72keoBBK+7orhZgaFYm +AyAdffp1lttazO/AcuK4H3ACGIOZnpUTPpZGko2Bl+wrxXp2r6W+9+yY+lRKfDQF8Sk nuVqyNPNuHLdDOvlWo0O3rgE69gZB2CpTqGjrN/bKhHOe4OhtTwuOW7od3IUocuP0LAg E05VsRWvuHFFlQ0CmWIUYYRPRtA5h5DJNdmgzdDFRT8SbrFCbETVjD5dgaFjSzWZ/n3u d0L+oMm0HWEt6lRBXS9CmqdLcRKZnSL6W0Uef+mDDGgddSqWuRpUIXNq50t0wfqaQ2FT 0lwOlM+3nN/Q2UdSqR21Y52fIQdsTdlXudizvtD8iCaDKQM05Lu+NjbZ0PCFzsboQpUe w1TKZ6fSJwwererK/5WtsADMu3KAOqYtLmWdBtrfzjJL0gGw9/hNIFrMwhUFcVP5SVFu 1DBXFMd366Yaf+ORXta8bY+wkaNrbdYWwqufr4LLEvJ45/oBrXWTOzoiZBGHa5S5LjVx 89l/6zrpVo4KHzGyo8R/N7TojPbnsHSLfXhiIVsEWi7Xj+vWvINLkO29He6AHWksK81X YEZvZfLN69DBZiewlyQDOB/QVUWJXJDHF8onEby6hXh4ynoQuZWrkcPfgdu/EoHLS5YH FYwKH9ndrMacbct78KVImbDqd+plGdCLJYm8xUKrsWegXe+yF75IJ+7aVM95g3EG/THI Ew3nnLoPHmIFpEY09tkpIa0w3hSHU7NUxqNnWx1kxKghhaOmrNglCv1hcTru5pVGdhJV gOGgGwdRSvs7FovXJiWsR+G8/z9YJN5V2BPVHqW4JgeUMb27S62AKlG5U5HWBCwGcpWk BwtnMVGJHNh9h80ZCM34Wziy4cxkqQiu6XNM3tOjgkxiDWIiIsjrFDnMkYOHbKxP4CNV Ok/26d9erViaCm6pNyi0YLPamiwPWt3xCSINB2CUcFhmUXBfQmqYXnjbTACtQIoSci8w hXkHzit7kd6Axd9vadIk6wo5cWSSFVM1bxsKE5lW7xVITlf1I2mM5/paIvSwFADKMH9m oh45niAUVyXbMEm6shD90B8dA0GD3cWTZnwRQX8ioDBZNSO9pu8SUA410y+BwWihuFMi idTg+uJlXjE5ty8cuAYNTbgdpMu80lnIoxCGE1Yaeai9LcH7FHkib1TYW2KzO5EXnepv z3FvfCZT0nCmaOV54DUoTidMH+OFUd/98JU1WOHeIla+KMf7NJyTqLP6TWpqArL3mdea o8OpPB+FJCV0Y55+FaFVJudoK+LJF/EEgLFDxOzuStWe3SsB+ODcgBxXA1zb14LSSOXJ ZvOIgOnhy7wUxohdCqEFSzmYMmzdtcZre23JBkvsQ3dONgUR2whtEs8OeyyiyCPqWLWO tnxte4xdmpE3ol8+ouYNNrCGl6C277GhTqDGICIspwVzhL9D/r7OW+YRNe63qyUreJBS kE57m7WmhPBJpuMkVrqR/UiKUOWgdgxLhJGB4yQYRMdg6Ea1ceGwTtp4ADNiy2trXD7/ vpbZBIJ8w8RuootqfIghswGVxWR+h6XN8+MVrV19Fl5TRAiwGjsy1uJV9iK3bnyNFts6 stcK0cL1sEaYT5FfdY9gQX6eQD1xF0w+VIyM8KYyo7KKTdwtWoPLoMX1l3z0zbjOrPbB PjwrXdLYW7N0LaNGqNcNPrRVdsQpb4Ovvun4BSUzTKi95P0TJl90fpWWneIodpeZrLHG jO/4AAAAAAAAAAAAAAAAAAAAAAAAAAAABw8SGB8i", "dk": "NpI2bgYrOPyMQke7f1T4aB9Q1cqzYiSMNHfym6/CZC+dcRUeXkMvUV+zpi5dx TDzGoGLB4KvUXg3cNoWJ1c12TA+AgEBBDB++GU2CgxQGoogIvuwdy44KKyQHTgX6vipx YU/HRod3Zyh0zpkd0AsCqqroLgOudigBwYFK4EEACI=", "dk_pkcs8": "MIGVAgEAMA0GC2CGSAGG+mtQBQJbBIGANpI2bgYrOPyMQke7f1T4aB9 Q1cqzYiSMNHfym6/CZC+dcRUeXkMvUV+zpi5dxTDzGoGLB4KvUXg3cNoWJ1c12TA+AgE BBDB++GU2CgxQGoogIvuwdy44KKyQHTgX6vipxYU/HRod3Zyh0zpkd0AsCqqroLgOudi Ounsworth, et al. Expires 28 May 2026 [Page 103] Internet-Draft Composite ML-KEM November 2025 gBwYFK4EEACI=", "c": "C0k/vLkSJ1vrl14zqHXCnkOlxuGvLpE8i5N+bb8PYI7E77gFak2lV1DcwEFPa1 ZDE7JHp/80J8bX5Y0tqg8NWZdHTEODyqf/3zpseHUvj75TckxpM9SB1RNgcPOgo7WJhK JWoI42yKUarmUiO7YQdJMseQF2zcR2A+z8VA+hDNNzooXvm8RXWPx+msvAZVGTOSfHwv ZUQfd9VOYXLcGPNOB+erdRfNmn3CGocCa+BjPsB2HUICoS99oTF+sBjR7PdlaHsOzxz9 YAfCsP0+KNRi6sLtnfQwuNNk8h9dllgi/1RjFaYUAeDRJYNKkToXt4YEmkD61cwtXyye +yhEWnaIwzqNUr4NegeWDzPzkMFf4H3FGj/sRtrgnvQpA9+MnbkxpOW717azXnma/wfA Oyozzlc3juJGXoo32Gde+KlhC2A6X/AHhza89FvNDO0k9PcreD+SiOC6SmerheHOu6jI eAQnarLb0mBLWNQygsDecyV81PjIEWyZAgSG7Nvi7ihMghA+Ui4jzjWIJwYxVpaW5kIk zywRTnFo2TFrw9anBSyG7Nr8os9AO7nsNfBPbEw9X0fOn6gumRUYBrTgKl7seXzuEoiR TiWr0z1qSSOtzrOgRPkeM7IfIC1FiIzkGWrkW3g78U1unfYONkiDYq3vTDIsdFj07EIF vsd9Dw/ESqIDNw6sDxvQoQd/z3w/GZXlzT0cowiyIo/u/fstSMxPPTrd91KX4pPJUiQY Prx4nrmkwUqL+mJYwu08FNP+4mbgXQUmyH7VSzCraMGZGspSwPC/TEDl3aBeiSqgUk4x OSxTA7HDmdiu+Hz5vF1maGz5mqjWExWUSc1FurJh1QUrUlkpOOAj8oLEfjoxDIZR+Fbf QTWEGYw4zTgmq/APwHNiykFfzcsaYKw8eWVCuyDn8xCmmDdsT7IvSYKU9/AUuhE8xcvp sJvz3o4gTWp3GDPzQzPSWXQX95UgRz8GtZb7TbfiEmIGPjEuLIgCbO86yPGtd78EigHY 3omPT4Vcme+63xvPzlhF8zQjoHYDFe3lJb00lW4N4+z6Sey6eEOuuY7cbp5tacapQ/cp uJO2D/0sJSNrDllhFhoRwl60MhmZbUzVJYzi6aZfzqhiKiWVXigc1/UfqXoQb0v9vW6e cz8yiAicGJ/iGiVm+UcwHgzLvY92oVSpJajRMzkCU+sC2qXg8xfHkTHoe4OI/eHuJ86n trJV4Xkmbah+W+POpvJbFf7BhmuFTBj5c+8kgagp4Bka4r4wshJypw0UaijaqvEOapAG XrUaDw28YByApXYmXcnAHzZavvd2CEzA45MOUFDUbfiNXZE+T3ZfKoM/PI8Q7FmzdcPz UT8o3hsXvxBFe3uEL9go8GVxOn0+zP8XdUlR3fqfm9z2usbfCVp/Re5MRFYpGZKEYHJm CHLetY0zjbAVXSQi4jJoOl/8+bAhkEY/fWK3hk0Eu6x66pXKPbd96FpeugRT/DnVuSxK v68+oEnR8Zf4x/V42pnPC7WrSM36LNgV1hTdRZbo3o5pbdKieAh8+QlULhoQYiAlHe9P vHYGkmBZ0g61Kkb49Vkfnh", "k": "4MtkQZzy9oM3lk1u9SvtVWz/qmeTMV6jUq/owfcqEvM=" }, { "tcId": "id-MLKEM768-ECDH-brainpoolP256r1-SHA3-256", "ek": "uBN3z0scTKxQyrEVRhYgCgig6KaXjVrJjhrEXiBMlwIAzSZXisxoPqKELyaB/ Xg/zyByA/QCmPdjHfBdmedygNlmv8MUkuOAktFObXE9VdkljFvB6YswI+pWTpdkxeZ/4 Jeh7OtNzMWlPJVT1YMawXnBmBy7pHsK2dhaH4GvaxJQpkoy5IbIJ1WOJ7CzSHFkCIlRq mcrzhvM0TisdcoLNGtnEOXH/atwAUKrh2N2rGK27jB2ZoaHP2MaRHW/ZbcfkmUC10x0T WI6zSfN7SJLchISB5ucn6k/JtkaiWlRtcyLvxuLNvReLYobgMSeiJd1dWeBy4FHXdSD3 ombDeoGL3xui8eX/NumH5pvb0W389l8EdFyVlM2tyR7uEZzpiqmpUSmeoB8o6p81kURO wJcSEOSr0h0L2i8wEeit0ZQnbstGodOe6oGuwi82VE2Kcek5lpbyoMGiElE8+xlJaVJX tpQwTYjpWfO4AjQ3Veos7TCzKCOl0TMAQlNgQNbc3Br3cCrC7lY7CtgUdG4ZunDNIJix JCqzOtd/pEl3GkIx3w93DQp7tAMh2pNmysqiWgcTWmlI/pYqTi1ptNpZFcc/xglVDla3 mlJCagoctaMYdYFnwJlC+sUyGtNyluAq7awd4WVHNeIi6CshvJzTwOj1tWu2yyG+dkNp cM9X1liByoS77ySh/Rf/BBf8Uef56QsNKLB1tiWwfwWTcutbYInPhA8LfGqCKWx9blXd cQUJANtPEU8tqNHtYdIqgARixOySgIwPvKsKat5Jght7DnNX2OD9Dy7RRaE61U7wOpoT HcnG4Ec7Eho9HlHwxqZNcwqrkYDd/A7CQJaVlt5VuHHL3esZszBNUKXGfnAxgNYntMEs KlROMtkjpVh4razGMtl4Bxq+Ks0JMpSdGuYmPxrJDyk1/F4HVtaR6SYbzafc8o1VFghn kMjpEQVJahGOcHCxTVMu+NeVPxvRGUfjnoP5By6pyXOjtJeClZWkMwtTRd6abLLi4oN3 pkrweCAXrNid4oH/YscHPCQgSlibiN+fGsucWGDaoSkO+gfhZGkvKdduRhjfKu0czouZ /uspts75pCNQfiIUAgKlqAVYlOfgcWT09Vgw1LOYEY2E9ZTQ+Z2fwEieMJ6rWhANTOlX hkqTypZ4LQS5XGf+8WsOqQzeoIT70MdNNF3f4eJgca/ttk1+9WJD1inkugePFOLoBaEg Vhw47MESyO0uhQOc9mk0PlwjvOWNnqs5aaoLmM7QlEp2bqpYhpgEHQy1xYWuOGZgzEpy Ounsworth, et al. Expires 28 May 2026 [Page 104] Internet-Draft Composite ML-KEM November 2025 Bs60BasuIQ04Heby5AxIKScWceohCBgGjWTebS835U3JQPDMqzLhcWzG1A+rTirS8caK SMLDlcCw5ohGkKISnQQFPZUVXhB2HsBWWikW8onRkoDbtodQNEmR/ZjCqcjboptICVir ygjNhAQx0fFK7Re/nHAFFWjy/dHXBk8e0ukrYM2BdODIjqji6wD3Pt3s7Ic7JpJ/jUDZ ptXmplHRfYrgPJ1CMAsYrOuPwVMxUDM2FBA+XwjtkAk7nd0j7iabNK0FR12KbPWbeI8Z 5DHQNT1adiN+qHLxRPacpMEk9CJbBO6acarDGVsJqC1v/UDUe8Qzr5BD/v63BQIOwcc9 3BaNOCy7B/jgFOMxGhOq0A/+hL8EVU/5Gf21Kuuiw==", "x5c": "MIIS7DCCBemgAwIBAgIUTcmrmYqf1ICJedMKHgFM55iYjzgwCwYJYIZIAWUD BAMSMD0xDTALBgNVBAoMBElFVEYxDjAMBgNVBAsMBUxBTVBTMRwwGgYDVQQDDBNDb21w b3NpdGUgTUwtS0VNIENBMB4XDTI1MTEwNjEwMDExMVoXDTM1MTEwNzEwMDExMVowUzEN MAsGA1UECgwESUVURjEOMAwGA1UECwwFTEFNUFMxMjAwBgNVBAMMKWlkLU1MS0VNNzY4 LUVDREgtYnJhaW5wb29sUDI1NnIxLVNIQTMtMjU2MIIE9TANBgtghkgBhvprUAUCXAOC BOIAuBN3z0scTKxQyrEVRhYgCgig6KaXjVrJjhrEXiBMlwIAzSZXisxoPqKELyaB/Xg/ zyByA/QCmPdjHfBdmedygNlmv8MUkuOAktFObXE9VdkljFvB6YswI+pWTpdkxeZ/4Jeh 7OtNzMWlPJVT1YMawXnBmBy7pHsK2dhaH4GvaxJQpkoy5IbIJ1WOJ7CzSHFkCIlRqmcr zhvM0TisdcoLNGtnEOXH/atwAUKrh2N2rGK27jB2ZoaHP2MaRHW/ZbcfkmUC10x0TWI6 zSfN7SJLchISB5ucn6k/JtkaiWlRtcyLvxuLNvReLYobgMSeiJd1dWeBy4FHXdSD3omb DeoGL3xui8eX/NumH5pvb0W389l8EdFyVlM2tyR7uEZzpiqmpUSmeoB8o6p81kUROwJc SEOSr0h0L2i8wEeit0ZQnbstGodOe6oGuwi82VE2Kcek5lpbyoMGiElE8+xlJaVJXtpQ wTYjpWfO4AjQ3Veos7TCzKCOl0TMAQlNgQNbc3Br3cCrC7lY7CtgUdG4ZunDNIJixJCq zOtd/pEl3GkIx3w93DQp7tAMh2pNmysqiWgcTWmlI/pYqTi1ptNpZFcc/xglVDla3mlJ CagoctaMYdYFnwJlC+sUyGtNyluAq7awd4WVHNeIi6CshvJzTwOj1tWu2yyG+dkNpcM9 X1liByoS77ySh/Rf/BBf8Uef56QsNKLB1tiWwfwWTcutbYInPhA8LfGqCKWx9blXdcQU JANtPEU8tqNHtYdIqgARixOySgIwPvKsKat5Jght7DnNX2OD9Dy7RRaE61U7wOpoTHcn G4Ec7Eho9HlHwxqZNcwqrkYDd/A7CQJaVlt5VuHHL3esZszBNUKXGfnAxgNYntMEsKlR OMtkjpVh4razGMtl4Bxq+Ks0JMpSdGuYmPxrJDyk1/F4HVtaR6SYbzafc8o1VFghnkMj pEQVJahGOcHCxTVMu+NeVPxvRGUfjnoP5By6pyXOjtJeClZWkMwtTRd6abLLi4oN3pkr weCAXrNid4oH/YscHPCQgSlibiN+fGsucWGDaoSkO+gfhZGkvKdduRhjfKu0czouZ/us pts75pCNQfiIUAgKlqAVYlOfgcWT09Vgw1LOYEY2E9ZTQ+Z2fwEieMJ6rWhANTOlXhkq TypZ4LQS5XGf+8WsOqQzeoIT70MdNNF3f4eJgca/ttk1+9WJD1inkugePFOLoBaEgVhw 47MESyO0uhQOc9mk0PlwjvOWNnqs5aaoLmM7QlEp2bqpYhpgEHQy1xYWuOGZgzEpyBs6 0BasuIQ04Heby5AxIKScWceohCBgGjWTebS835U3JQPDMqzLhcWzG1A+rTirS8caKSML DlcCw5ohGkKISnQQFPZUVXhB2HsBWWikW8onRkoDbtodQNEmR/ZjCqcjboptICVirygj NhAQx0fFK7Re/nHAFFWjy/dHXBk8e0ukrYM2BdODIjqji6wD3Pt3s7Ic7JpJ/jUDZptX mplHRfYrgPJ1CMAsYrOuPwVMxUDM2FBA+XwjtkAk7nd0j7iabNK0FR12KbPWbeI8Z5DH QNT1adiN+qHLxRPacpMEk9CJbBO6acarDGVsJqC1v/UDUe8Qzr5BD/v63BQIOwcc93Ba NOCy7B/jgFOMxGhOq0A/+hL8EVU/5Gf21Kuui6MSMBAwDgYDVR0PAQH/BAQDAgUgMAsG CWCGSAFlAwQDEgOCDO4AHPeOAhDc5QRcmE6slk5bDE8/kaT7dPgEqCa2a9mzJo6J/R3z yZCZYcQZ5erfPqCMQoNOyk/OWTbNMSmF0B1lEemSbtPdgBuzfLXUa8iuD6V+zH7l9prq PAXlS5jTkwILdvQxeSBlmE8rohQ5P9IzpFCzegadMfSS7UWptY2FgPgzuoJEwBJcxAlg PXyu1RF7Fidt2hxKIPlFwwmWhZ9KvzzubJwZAnB9J/Pvyl/S/4pguWK0ZqrCVGPwdItJ 3PDHMrI+rPJ9P3TzvGig0LcOW7eO96c5ufs9YglrmizMh75dOYXT/7StEmhoueEhHzHt aWvW+n+Tqs9vIHm9CJDX7I70bhxCdZ5b5vv0b7cshTwp31iRDS6DG8JNB/smzd/aZ2GF aq3nrsO3QNppc+FAE4PMzHIAwT+9fTzs1rnDrReyqSYo1trjG14qucasnfKkCG49HmKi 2g13Z9eMWjC5bcqWvm8CTao5g248eAQTa2yA3Ak+wzwTYboay8kHhBlqdiS6YxGewqUW ItRwEqDXUqkfx2fmQTOuHhyf5lATkwjWFNjlwPJpVIXuTKIo/XxRKH1jYwdCVeXHJcnA YO1QzjSlLI1S5BdpnRmkmGk/Xwa8hnKax9+u/gMPGVj6blLyf6p/xoDICsAJ3q6rEZgV 0gzuDqBgpVKH/mLb978+hoeI9pweVRNlZnORNKCcu09pZyVZuu9yCyJiEK8jjI59tESl 32l9mvrMpZn5pYiqOfXMUZjW3laUKHMi7ermcKK6CObIt1T9fAalR8QTdXmHC2vrklnF Ounsworth, et al. Expires 28 May 2026 [Page 105] Internet-Draft Composite ML-KEM November 2025 HCCtahGjcD3VdlVE7C7vc9lJRJ3wev2GSdOSDC65nM3TyxIm6aqNEeOVuu2k6DH2tg23 ZCWCSLQqnQ/6yXoS20hv20ADmWwykSIoBGXfHQPt+FxFSmddWON9E3PvEjLE6pc6Q7v5 FPqHIuKPkR9g9JiV/r+YwfvIPQalURrWHF6r+Y92Pxyq2A+3EK+ZPlFOQRWY4ty0d9Mt hnKWlYhPlBRkwxxpymdcuJnxCtXWm8ZqTqJ7naF+DqcxaFxE7A9wP2/C0esrWOQpT+LJ Fss0WXKybKYPuypSpqBJ9TqhTBbUhkewBYUKjo9+X0IzPu8Ce9/Y6+oln/nAtw4df4/e 6ludUPTGJsUU7ZAGLTNeLeLMBQyVe1DRSV2gsgkaBnl8nTowzxGX1gYeXgznrvH1ySWD N60YxOxS3dpDAtw3kh0+8s+IOq0z1DDBA8WUGIEha7G7vkCv7cx4yo4Vj2RoUtMPOE+U YifDC55Xg6PXsxmqfLqVSqtifP+SKJ220Pj2ehDaX+gf+vwyzctTiDEvllHoeGshbxne m9IA1zlY4wVlTtTR6ZHWiC5F9t80vDBQaojJLz5FQkEps0vwsx38vQypcEED8x/YhNbM X6rLKgoG1km9IRvZCMp1SHyWuafOJk59InbEqot1RcAblVPE6Gw4zIylNF90jwRldF0A CiDOTG+xMdE9YVYZDSVK92Uo/G+S/v7iyyj6PNQH8hLuMM35+hWcNPyvAPTkzsA8IjEz Uj3P++w0x6wvOotkwH7zpttnqV1PLVMcGD7E3c8sCLXbA5U06ijkzy0xM/1DTKGEF86t ZiL8onrsAMH2bXDBkPdHAYb+/JsMDQoztM7ERmDQP+5h3igpMjdF1L5rBXRRyRf8A0pW /VO30VXYEOn4f1blH3JaYPMB1VIqZy2MFGnCT9Q+9lxLPytY5sj/R/9uw4GCrmCdsbfF GDWUuth18R/ax7kDGXPytjCdAfkQHfh5pdcBz27qmoiOqzWbrq84uwgY0L8qFn9OwDNE J0ddlm2D+vpgti3OR2dTXEvqsUrmOiBsW2TJNXRituewtMUiG+xyXpSzCMTbzjrJpE/8 uqW7N5C8E2MdFmY4GxFufO7F2qWHeOzqYLh+AvryPQ5ckA41u0WHooypVb+YgNBTOjDK O8p4DEJPt555MCEu1zqnlP7PnJD5xN30ObESmr44ZaLU0P2Lzy7aXJv3Ab01M20X2hCR EBJX8q/r0vGw6T4ZDHTrOYr5JHYqqfo4L89uuyKMoIu1kk0mC+ur4b8UX7GQqzovwKp7 8XO8+PSAIro9A2UDmGrWsrxA2mx0RPclXReCkfpj5d7GSkkgSy1jPV5+uvtQ1kZ2CEFL WS2l7MFwylmawBO6WyuUKVKSWOaKQkwt14oVyYCU4Fc75gnzUC6JAnkVvan1vOAi0lKL UWUPIDOa8tteLku5+ZEWcBGU2HTOfeljALVh7v57OaxTfQp58LisdqwAm1/oMaImIkA0 U3aveE490hypPrtNC9zfRu7SiNxa0udPMtdMG3L+7Y4swEZHYr4Ms5h0jtkRwIyqrLeC icKSyRfvSltbVKdVsgM6ouM2lX+FmIKvCqj4N+m3xLPa8Tae7QtONa6jz8icKKp9/IoS qRmEJA6gjAhTCdLS0uX8EQB75HQ8EnXcD0ew0DN1CEeZxoM1nygT3tEf11BZVaxWx361 x9E9GL5+LjSe+YKpAJ760t8pFan7RX4JggMPzD43Ft4QDWA3WaNaNEVBaIdZ7zgSPRO7 sRq9kS7x0Bf75cHg04YUJWXqyVan34ID3/93DnWmRgA7ySrTFMX7Z8RuOcx34XW7wNBf D97l+4QoMglIs2WguYJJ1TDZkLi7AVBTzX8xEcWIf9omy4Y/RgPF2FQOqOJiwij/Tsp8 wgXTSStLXti6QTaUM0KTwQcrukps6hCU7UGePGb7WXycEXOtQNd3HOFY2rCgkpH5DC2G lcDWaGFB+Ca9FKsW6U1Llbn0U/VyMXDoSZN1yZ4HQhqOBmHhoh3eDf9SJZWY0m3DObQl 9eC0FWkYoY4PRNsz0MvwQm4ZYJVzAo5OcdxOUPjwR8vw2FaQ/DIXC/mGYVPofIkErqpm KON3ObaT5dmXDEMIxPlHRFerKZYmLkr8ezo3F9nGRW8yMchUa5kkP8Tqyi+Ty7q9+ZvZ QAmcwjv+2evoFtI/jOYobVvnwfkTaoNlP5Cf+7/BBgQkzXrPZ6br5WjEG2bLzB2GJg56 0VZ/Ty947irNjhkfkpMq5NaB7q+fN00IDySy3J/2UZ9ogfh5tyyZ1q7sAR+cLDnAsCBr 1e+qw6FYqeKqOwu6kB94ii15rdAleAFO/eOM2HOW73tpSTxKS+9+CyG7pbFX0gQqPHw1 bWmifa+WmCnLr0+x/iluhB1ojRhTXs70HJkta9g6HWUtuyhj059wFZE5GVHSm+oCBKJN GYqHB4VLVJy3D5rwFbl7BejBp9qsz0/rYswrXQReInUnGqXfoTSscWpWOi8d9qRajPED SSl4RfEP3vMEVuQwjl+Nn9kpMAl1kCWMwGQXEtgqrI/H7Sj2k6Sd1eOjlkgvhe4mErjB h3ZKk+HN40D1FZgSWSyIzZxPgulfd/QJEFkLddJExcuyCoIpkqGaYE+3ptv7Y9pl8UVt gIujYlXqDPeK0vS4jO1FjEQijJ/rO9fdKXWhWJ9J+og4olARD5rloTY6FBvBwd8CRCxt +3BjpsWHqLY/YxP0oVUESOb/aTUTKBV2t0nw+uUW2PWS+FU8xjWW0KyuyG3TqOnDn7yc uRfWBnrxRSGFsujOm8QJ+y0gAXHLD72IKdfFxouv+tV0klFutwRJzD0VoWFNgw7KrZU9 eJq/uNgF90Oejr78lTrr99n1f8sTp2J+IQclLwywBKGwbHyqxEwH0OF74xQyC+2vWDUS wjXhr3YsCRNeR/msqisBVJceCP2YVbuUANhLgVXimLznSvP1+czxgYOMS9H/aFEOCfvZ vjHUXeUfYmWPnfOQRjr0UJybEtPRw5OyfH5hzW+EiVgki9YkkX6/eflWz82gKbvZDJMS 9R/QSgRrsthgM/W715AE5hQGm0z2UlzIb3SoyNR4vC1OonDL/6ITiZxswGQGjkDKCwZw xzcK+iBPDovFroDOu+CnKRmk6NgR2YL5SCp1tTRZqoZERymkY6TaeZNeeSj1ughD3VhE VsAQdTKq1MVV1zjcgRH1gQAgoGowa6smwD09pO99MXZEd6asS7IPuCT6ZKZFKtX+e6fH Ounsworth, et al. Expires 28 May 2026 [Page 106] Internet-Draft Composite ML-KEM November 2025 3sISIB1CZ9mXEhvMnaX6FyP9u7yMGS8WJ5o6uYoIuf39tMhbrCbVMLyn+VrKwJGmT/oX e0/sEjMiPq2Rj3P1BaWoQ2NIUZbf81ZbOsLn/fj7Wp77AI/MWsaZjc5gS1NaEQxw+pX6 q7nPFQfEo0Dvj3DVTeYoaC87eMrLhN+1VhyKNpEWs3jP+Ui9XNau/I2sEWIi0hJVWjd5 IEuu7Vji8ttDFkV32y5EDBTg86xFJbTZdFhUok0UT3cXaqgoCiot7La9GKz/zTl1kfYX J0JZYZPNATZUm6C0vL3aCg8rNJ8JDyOTmftnuMrLDDVSl5vSAAAAAAAAAAAAAAAAAAAA AAAABxAVGx8l", "dk": "hr2TLIlZrKKwQtcJCzJyWPfD4g9fweyvx1nL2jQ7ChehOU6NOjpU0s4NMEHDw bIcggwhWgvDkVtBy/Aej67FqDAyAgEBBCAkiS9A/MQWnWrclgUW1bnrw9FITW4C6c+jM K3THZHDA6ALBgkrJAMDAggBAQc=", "dk_pkcs8": "MIGIAgEAMA0GC2CGSAGG+mtQBQJcBHSGvZMsiVmsorBC1wkLMnJY98P iD1/B7K/HWcvaNDsKF6E5To06OlTSzg0wQcPBshyCDCFaC8ORW0HL8B6PrsWoMDICAQE EICSJL0D8xBadatyWBRbVuevD0UhNbgLpz6MwrdMdkcMDoAsGCSskAwMCCAEBBw==", "c": "a9i+hICVHPH4iVXLsZV/0Rd9yXMorgBE+O1zICskgqeHA4jQDG+Kj/A7yc9MLE ca7no3q1R0CUEk3AddaY1Nc8EkFqXtr/Zlc/LKXB8v0UgdjblNNELcYjltVXl9II97u8 sFtYsmPWWvX/YzgrJWtIy+Jca36bx6GGBkC+L+3g66+QPNHox24Iu1nkIgfpnTb0m6Ig l4+dJOGE7htNljr2YivziqcOjwOmV5ribMWK9a2ZxJaEe1ir2veszXDJ7ITuT7ZlH3I5 jCb24gnZtL7ROvyloasQhx6u4xXEcaaL/LxSCWhOKe0EPjWSKP30axpbp88UL5RpqA92 4xyu3IPKN9CvoE3g/+HP0yeL0NJJXFsgJgP8KqC2wjl5PkVG57tv65n7TaGxFQ+bCwPX 6MHecYE09cvlm1Uc5Ybc0d1C0FHIzIcvoaEPsNdNWkUV5ahLZoDihG13LRXPZiXTgkZH NcW2mJdZiJilBZ5bXqbZzV+2lfmQipOYOh6nLlpMQ1TDUOk7EU5ss/ZDDdeEbIGRbRgz SucH58Zfdfgyl7NpsFE06MhZU7L3aU/RiKkjBoQsswhQht23OHnz6q1SZcVzJZVU9NYU cV67eAC2vc6cF5fQjCGEfCf/51zGpNRts68ZNXQSrblymJ7PApzCVmWtL92moMvHko6K 7wLsU0ktk1URgbS1U3HELGRjrKs462L5J4VifOMWppUuj9WuAG99wRpYxJA7RzhqsuQ9 lSzdqLxMM6j4HUjrppeUD3AdhQN5SNPUFYr4a8ANrCsp1Hjgv4udDWNU8lyhjDmP1brL hoVAdmEt00U3TkWdEe0SdIo0+ElbMYTJfKF2QeofjAh97HpKZLrvaEq9tWRJwnPnfstv Gk6oTPFEmIq3yTRkDXlsUI7uoscO235MnUgjQI1WKP2i3ROYeox1RyZoQpQj64BqesCA p4wnP74DeqGgvaNn+c9LvmJSEiE6IwhwI0Dph91VbM/iO9+PRHIytxmelMXC9lqZqcMJ CjaDhVv3aUKUeLzoLTGkbz6tXz5F0NCm/1j7kKl/VzaqFLTHp+/h6pTPy9ALURLHwGkt fTvcuApXF/B1+v1rOOFZTj0W98K8Fm0wCgFGDmeEycEpkHIqFnQWkPTVWeMoN5W2i2BO 7zVuAJFEdYRg6LqWGVKv8ZdSWCSR5luoTcECQEsP43Sw3u3N7RBclC44Tuq7484fR9TC N6wepCNiInuJduX0E1d8/XOzs5YjR1jcEeRley7TAtKziB79BU9igekF48UnH0VJPqJc SrS5T1StkVin1t5EtPwhsLzKiEuVP5ZeVs6SXEDjelxDmKMyw+fgykn0lqaiwzMFAFpe YBzaKlsob3MPBC7oplndprAlSdmIqZXidlJZ43G4pfgRrwQCygE4Xv45qtK3Pjpx1uhO AG9V7AOup2N3ZVi9jIBP9xCQuKxykEZCRkGbTggBvc+VPKSnAlqqrBhskDrlCKpomQTG KiOjwVTkrtFRIUB0Mm5bgz0QehAkju834Jhcve+eKPYbSJ0g==", "k": "knbuHT+fn30tMFpmoxNandjA955Y+KhuTfsCsyCtcK8=" }, { "tcId": "id-MLKEM1024-RSA3072-SHA3-256", "ek": "DpwfPoIbowRVeyik29UymCEqWXNIi1JCkuRVmPQRkJQO+RgIN+Ew5UGJ1SqXn 3eLO1GhKTNPI5FJSyp16LcxRUgZIZjKe1OBotpS71NcPRFx+cxLytkYwkPIWXOfypKrw 2KobWcf7rCqViitMMw3p0HDwfsenmdwAjgGKaxNWaSHKAQ+WMKhmgc09vNnrlNKJzyO+ cU3jwd0AFtoSQJOxcCswjSpM1cVVeXCs4GCrUAPW9eZDMGLF3m+UoYYExUNQWAo6CFx1 xOaMjS/lOKaQdVHLdqg6yofCzDFZZZ73ehkgmPEHdtOfxRUXxQ9/tBSwpYj9MU4sPFZL rjCZlasfqsxi7da0yEaMjurdMaRFlLF/aALspxp55UiFsEGGPgFcJcioWzCvHsaGZeFG EpxcYZ/gklqHTxkm8nJ3lqt3HaDfMuMPKtIoACBfUmoYOlFZYA7Biu/wMYRInxrBUERF XJzaakWfwEuB+Crx/QWhQmyweYE8IyDaQo9+XlGVOAXtrhphjQSBhsz+ltiA+NZTbYdD 6l77AB/IJajBGCpZqUn5LuBDMBLMYV4JQABcXIwjDWpyzhtg4laqnmut/VY6DFiD/CTF Ounsworth, et al. Expires 28 May 2026 [Page 107] Internet-Draft Composite ML-KEM November 2025 HizTHqteDCmjfZ9AuFFMdswNCEl/oOkflUqkPWA2vSdKmOqNuYW3EXEDufNjPi+9tEz2 Zy5VeGu1WEpnrkemSsZ4xZkyTrDyTGz1YeGPbeo7LIilxObrHybdNUXWTMWUWTH8DUsy BjOyXmdsFyQgOs9b2kNCYF0l0AwE+LD4SekPfRpySo8qkZa7AMtxoF2qOuM1QLARcoPU /cKamSSVZkykjJizjIIKSRz8eQcNTG1+4EIQncOsetEhnZ8Ifpy6bi07KannUWZiZXP3 lMoI1rGUex5OeuBWTlXF/mnMNB82iDI1rEqx9iYirIn+UbGNjw4l+k9pPGihmZws1phm JCUPQqgDhG4/IWoIjSRzrlGz/SlffUDx1pscoE7wHyBOSCA4fQ0BhYqR4UoQFOvmndlW eLLzHCC3Uu0SIwPtfFnLUawe6oyOxcLzLp2YYERk7msjQAkUrhqyfuORtdQh9AHlbt4q wsPJcePLwWbjwuYrmUGyOpHfIlOrVo3xTS/r3VEUvFDbus8VLEWMXA9uvM6yIcTplQRa xm5PYePiThLANhPDlW0CrGx9WQ5yZMgjcassfpoOQKLkytnw7MNkXINLMZw7uEpoISD+ mxbkGSfJ4hUdnYfuOC0RmSFCfujX+m3H1Y7NMq6XeaODiegjaYvODnDwAVuONC/Z1x1L eOB5KYEcNOi4QAoeZAEyEKpB/AqyWebxFsbJKmB5FmmeIFZoEsJXGyZO4AqApoL15JDO tmuHfvKssbKGqqyMsRJBas5SwwgQ8NwfeMu5KCHZmBC5gO7caM50VcUhowFnMyiGhYBa JJJ/VJwzfA8JchglqhQdukQMysSqrV16PjLeHFFxQsJN/KWeNayNOMhGhRdz7Vz4lG+s YIGQ3NBe5G2GsrPNhQk6IcFHfs1zVZWBjY8EttbHwimSBlaYaVLAThUVzsgt6jMvOAql ig96SquZVOzurQmFKNEylLAejaviMDD6TI28hs1b/xxwZNyN4gbuuF1jqRCOYVUOhAm3 +zGrhZ5WMcEoSqkfLNhJncZS6B/DFmR7uBrWBNBcHxcd9WDqJi/McUFAbtDfYGwW3pxm QWm6TKU5QSxhihUfFMj61hJB+sP9DaY1KIvoduaaUYMJRFLa0miW0kTR0UiOSo4UWQhD klfJAMbGMeTArOgg0nPnMh8UbgygdwwdLUSFjF/yGCmGhamfvKQ70gvU/vH4QfEyRVNY IRFhUdltzJysOMMK7m0ZLZlHuUz0GIfNaOOvwnFiWQYoZkS8PyH2SwrGeUIfJrMmyluN yARjzCQ70VbbgCT1RLFEUU5yuVlzWdai7JvTMoxHyN4NbcNp6sdUPBTMLR64ORJoUJa6 OCnGgFnRqcxu5KccABN08tmasGh4mkcZJIuvBTBVQhA6faJOzWmqJQRuFsE6cukEcRKJ FmMtstYH/M6TkpubSpXGQrRRRm16juDxbB7Lx6NMMNnb57GojVSR/3ZAmcwggGKAoIBg QD5xYAosfaLvUZ7rC2hDOJz/DBrJWTCbQ2U4ZD/oTgHzfuJk0qYtlY12DsXMrsGX2bg3 e2zoWOWbbnII3xbMg2k9Lvyi6CrvsLQhXbz52JTR3yJAp4xNn7uOgEGanwnDt/Ek21hu oNLWsMd9ZvFTLCZxeOlBfLu30qaiNCe7f9ql/xSBdijal/k9WXCdl0i4KVuEY1maVVJ7 Zy9cWe68ISjQOXiN58BP+Y3+7nwghe4HnkX+5m4SpY19HD9cEbhoQe/RAd5jOGp6SlhL WD0gT00rTLJdSUcbxo3jYJQF87t8EVX5+Z4sj+KnYuoYywz5IdsaRpflqUSxUwWLQFpS P8kdFifxDzMeaLz5vz/tBJg+MUII6JuKLkNj/SfBbFq5+KleoCsKwsX9JUbpem9ih+8b +tiJU7Uv4ZJtGcJ+7xxzm+KiMP+1Iuzl8Tv2dTd6ZGgBxKD2+A2L4eUCMb5juOzMUgdU lCwhyrpkp7ZVF1DDWv1MK+Oy4siq3VPNdDf/eECAwEAAQ==", "x5c": "MIIVrTCCCKqgAwIBAgIUVdzPbC1BOUU77YROwAfWJbBh9HswCwYJYIZIAWUD BAMSMD0xDTALBgNVBAoMBElFVEYxDjAMBgNVBAsMBUxBTVBTMRwwGgYDVQQDDBNDb21w b3NpdGUgTUwtS0VNIENBMB4XDTI1MTEwNjEwMDExMVoXDTM1MTEwNzEwMDExMVowRzEN MAsGA1UECgwESUVURjEOMAwGA1UECwwFTEFNUFMxJjAkBgNVBAMMHWlkLU1MS0VNMTAy NC1SU0EzMDcyLVNIQTMtMjU2MIIHwjANBgtghkgBhvprUAUCXQOCB68ADpwfPoIbowRV eyik29UymCEqWXNIi1JCkuRVmPQRkJQO+RgIN+Ew5UGJ1SqXn3eLO1GhKTNPI5FJSyp1 6LcxRUgZIZjKe1OBotpS71NcPRFx+cxLytkYwkPIWXOfypKrw2KobWcf7rCqViitMMw3 p0HDwfsenmdwAjgGKaxNWaSHKAQ+WMKhmgc09vNnrlNKJzyO+cU3jwd0AFtoSQJOxcCs wjSpM1cVVeXCs4GCrUAPW9eZDMGLF3m+UoYYExUNQWAo6CFx1xOaMjS/lOKaQdVHLdqg 6yofCzDFZZZ73ehkgmPEHdtOfxRUXxQ9/tBSwpYj9MU4sPFZLrjCZlasfqsxi7da0yEa MjurdMaRFlLF/aALspxp55UiFsEGGPgFcJcioWzCvHsaGZeFGEpxcYZ/gklqHTxkm8nJ 3lqt3HaDfMuMPKtIoACBfUmoYOlFZYA7Biu/wMYRInxrBUERFXJzaakWfwEuB+Crx/QW hQmyweYE8IyDaQo9+XlGVOAXtrhphjQSBhsz+ltiA+NZTbYdD6l77AB/IJajBGCpZqUn 5LuBDMBLMYV4JQABcXIwjDWpyzhtg4laqnmut/VY6DFiD/CTFHizTHqteDCmjfZ9AuFF MdswNCEl/oOkflUqkPWA2vSdKmOqNuYW3EXEDufNjPi+9tEz2Zy5VeGu1WEpnrkemSsZ 4xZkyTrDyTGz1YeGPbeo7LIilxObrHybdNUXWTMWUWTH8DUsyBjOyXmdsFyQgOs9b2kN CYF0l0AwE+LD4SekPfRpySo8qkZa7AMtxoF2qOuM1QLARcoPU/cKamSSVZkykjJizjII KSRz8eQcNTG1+4EIQncOsetEhnZ8Ifpy6bi07KannUWZiZXP3lMoI1rGUex5OeuBWTlX Ounsworth, et al. Expires 28 May 2026 [Page 108] Internet-Draft Composite ML-KEM November 2025 F/mnMNB82iDI1rEqx9iYirIn+UbGNjw4l+k9pPGihmZws1phmJCUPQqgDhG4/IWoIjSR zrlGz/SlffUDx1pscoE7wHyBOSCA4fQ0BhYqR4UoQFOvmndlWeLLzHCC3Uu0SIwPtfFn LUawe6oyOxcLzLp2YYERk7msjQAkUrhqyfuORtdQh9AHlbt4qwsPJcePLwWbjwuYrmUG yOpHfIlOrVo3xTS/r3VEUvFDbus8VLEWMXA9uvM6yIcTplQRaxm5PYePiThLANhPDlW0 CrGx9WQ5yZMgjcassfpoOQKLkytnw7MNkXINLMZw7uEpoISD+mxbkGSfJ4hUdnYfuOC0 RmSFCfujX+m3H1Y7NMq6XeaODiegjaYvODnDwAVuONC/Z1x1LeOB5KYEcNOi4QAoeZAE yEKpB/AqyWebxFsbJKmB5FmmeIFZoEsJXGyZO4AqApoL15JDOtmuHfvKssbKGqqyMsRJ Bas5SwwgQ8NwfeMu5KCHZmBC5gO7caM50VcUhowFnMyiGhYBaJJJ/VJwzfA8JchglqhQ dukQMysSqrV16PjLeHFFxQsJN/KWeNayNOMhGhRdz7Vz4lG+sYIGQ3NBe5G2GsrPNhQk 6IcFHfs1zVZWBjY8EttbHwimSBlaYaVLAThUVzsgt6jMvOAqlig96SquZVOzurQmFKNE ylLAejaviMDD6TI28hs1b/xxwZNyN4gbuuF1jqRCOYVUOhAm3+zGrhZ5WMcEoSqkfLNh JncZS6B/DFmR7uBrWBNBcHxcd9WDqJi/McUFAbtDfYGwW3pxmQWm6TKU5QSxhihUfFMj 61hJB+sP9DaY1KIvoduaaUYMJRFLa0miW0kTR0UiOSo4UWQhDklfJAMbGMeTArOgg0nP nMh8UbgygdwwdLUSFjF/yGCmGhamfvKQ70gvU/vH4QfEyRVNYIRFhUdltzJysOMMK7m0 ZLZlHuUz0GIfNaOOvwnFiWQYoZkS8PyH2SwrGeUIfJrMmyluNyARjzCQ70VbbgCT1RLF EUU5yuVlzWdai7JvTMoxHyN4NbcNp6sdUPBTMLR64ORJoUJa6OCnGgFnRqcxu5KccABN 08tmasGh4mkcZJIuvBTBVQhA6faJOzWmqJQRuFsE6cukEcRKJFmMtstYH/M6TkpubSpX GQrRRRm16juDxbB7Lx6NMMNnb57GojVSR/3ZAmcwggGKAoIBgQD5xYAosfaLvUZ7rC2h DOJz/DBrJWTCbQ2U4ZD/oTgHzfuJk0qYtlY12DsXMrsGX2bg3e2zoWOWbbnII3xbMg2k 9Lvyi6CrvsLQhXbz52JTR3yJAp4xNn7uOgEGanwnDt/Ek21huoNLWsMd9ZvFTLCZxeOl BfLu30qaiNCe7f9ql/xSBdijal/k9WXCdl0i4KVuEY1maVVJ7Zy9cWe68ISjQOXiN58B P+Y3+7nwghe4HnkX+5m4SpY19HD9cEbhoQe/RAd5jOGp6SlhLWD0gT00rTLJdSUcbxo3 jYJQF87t8EVX5+Z4sj+KnYuoYywz5IdsaRpflqUSxUwWLQFpSP8kdFifxDzMeaLz5vz/ tBJg+MUII6JuKLkNj/SfBbFq5+KleoCsKwsX9JUbpem9ih+8b+tiJU7Uv4ZJtGcJ+7xx zm+KiMP+1Iuzl8Tv2dTd6ZGgBxKD2+A2L4eUCMb5juOzMUgdUlCwhyrpkp7ZVF1DDWv1 MK+Oy4siq3VPNdDf/eECAwEAAaMSMBAwDgYDVR0PAQH/BAQDAgUgMAsGCWCGSAFlAwQD EgOCDO4AzjbGwtlroouJl1tKnox7v/izhvOZQUD0p9vPoFKH7QzzSNbSMakSy+K7vU99 7dEaFEaMYA0dj6suiGj4X79nUFVv4t8wsEjsyuQfLp3/q7x9ni2LTF8IhW1CzFRbKO+8 LY1CRjxklgexy45fms20fUz8YlltOK/aqKd/rFaH1LoNlLuGgI0FaSzsmWmr2KdrUt0L gJnRBEKboftXFUo9mIoSUDdM68JSwHUI3SZryCqKFe++fLncA7wkUKd3f8uQhXCpVpwm TVM3sapymBqtt0U91hhM1fHRYc0NvMqmTEQtwUmzvoZPdVTsu2Lxvtba8V5+VeoxwDvB WU0LWx67qu3oDRQt32l3ueM+jIY784Gfg4TatlgjvcycfzBZ5Dgag9XUAO4ba91j5cyL nORzm+gfqdN5LCPN8fv9HBa32lhcdHhVfU0rJCwBjr4uNBoGXtYzxwnKpp99og/4NS8g dMPeCP1woIZ0KBlN508epkpn8b5XSlfvoetI/Fw2pgNBBx3pgifQziAlTg1aiY5VyP9y w0fUfx6aPqqAGQChePVDRxWkMs/8cDisWl+PQ3v2BJN3TymVKhBGhrNUOgZOWPrHSsz2 n1kyN1Y91cS5iNlblxcQBazgoKAagkLawZ2T7MYEZDZhjhjxaGwv+gZLfTj/MbzVdQP3 acESm6Q/NEMmc0glBAP0unAlRyl9MLwGdkof5Oj7eNIsaWtr8GPRiBFLGHCrDKSTU2A7 l78ZtemJTRS23DU4IZO4NSCHYA93HpoKh6WshTusa5e7K8ZMIuCJLQZctLECysBIa1kS 29b5XVL8+8i87KCR5zONUzZACFb0/fXR47CPW9wrcWS5V5ulTms/gHzmbWGq5Ue5zZvT RpE/S/U8OXQNQpPNW+9wL6N4tZX0Ygg+zgC9GaCnj+7c3mGXDt8Fwxg/1YgRgwJFL1Ue LuFav9y/2aWco8b/wspawZ63DdNDThXgegPyFBjmlDU0vDFwU+KmMRyQhrrDalPWJMQr 3EBUWhzXVDwnY9O7d5U9n4tjoxT2knP+lisqutJ8ykw/log5SyrnIsmi0g4WPUIDgcGR eW+OBgkoI5NOHbdWqiSdYFAeMiL3xGR3CDthXzMH0w0cJbOMHDoQHq50uHYGkOoD81vz 3aHneXr9+NsKtR++YrZ0gzXJLCqJcXK2teJrxVz4o69BaBPtv4J3W8ZIlnl0+DMNat7O UqPTAbA7SR89eTbO49ebaJCpjQYPmDvCc2t+UL6l2iF4tCjFEGRFAFg3TAkAHNq0G6gn 9hxbbCbLLU9emR6yIiVW94OZ05Tgc+vqQfmymkEUlvsD39A7YGQjo69ZAujTFiH18bXs QQc/FC59oiEyhHQ/ihrpIo9NhLWzGTKTvjaDIysb5qUgw+XI7dXbCPB4HIK9ceisUzE2 vvh3qehvM+P9Fsw3En30HyrQjf/uzbHFMwWByNy7NJu63p8HUTKeh2u2/048M4Ub5fR2 Ounsworth, et al. Expires 28 May 2026 [Page 109] Internet-Draft Composite ML-KEM November 2025 nv/v5G3RI8x1Yz+dQ+cqamkGUyFisDlfc0V6RzZ/Jrhq+ZQmNu/O+4NcFC3GcPCxUJjs 0/sPtvWXZB/1fuvmQav9SZ0xDG5OjqdNfTsSGwLL97k4F5gTpruLRr8S+SITQ06noQCJ s/48iG9jQ6D+qbQNCvUWO8eD1xiox3qfIC0gToux8lhHOMoZMRb8kk3CXq2qaZeK7Jg6 59/gnuYGmzStNsnvdqvmZr6+IIaH4Cspp+bLmIxGOWpwEZHPp1gu+XlMdLAgwGGtCgsx t5KyEQcR8Rdj45WY0PC1A/wkolVIdb9V1D8ShQ/HwcwX2YAf2AJzjCzowa05C6FNAL0z zxuaes9Yrt4NPjy5XkgZW5B8dHifEjJ8RhBZELgh2LX0qKE9b+JapVgC/niKLFiL54Wb 7mPfZ1fZuLIxGyJUsTpC37sr+e165+jpBgXMbOAAlpAdRWGAsS3Exm9qaC34ppu4p9T7 slorU5Fqf8JqbSDrf8tW7h1Fvw4t3yOYmn6TB6OT+r8URO+1dqwlYnA40H7PHsWJ1fFB kGlcsCsiiQkmy3UCy8YkGiLJ4ikxvw41siist3N7VKc5VGDbD+u8efF4VZldwsDJ8n7V BOFgtJF/Si+4vbUget2Op+TQNdfazvbK5Uu9v5K3c2a7+0sB/c92lmhhmL1fenUrs18N HPHNAvkLclscaHwWqlUOhrlx8fmUQ3DK3WIspvqY68gNtVRcTK/+a7oSRCk7idGN7J0b SUKNhw7YRBmk2v7Q8ey/Gqfwig4Ua4nMlXTK39TpM5E6LpaUnsP2oZyj4uPG4jTXHC2g ZaPyaxLqhBaVnN+oqMpgBpQ5z3W9ujhhvyf0MERVm0rYXjQfCRERbBhgBLDNdPRocGmV GaQMYnV7VaPTeQpVA2eMwJV9jTzFG/s0CwqwOIqATdQZJJQFJblVWUG1ZZnbmJ97uSGZ sDqXoUXwq5UOrwdOcw6FgFf3UodThmHQaK7XWdAEkcATaOna9WpC2mByOvIV2/SBCbEg agTbgq4JYROmc2VfdFiFUdaqPAB2rYhxyItzm1OXl+8JEgQ0x/p2ShLJUs41p+9zQP2s g3b5RoccV3NZHHcG4mErGhAegeVID2u1+Hk0pWAsEHy0eeD+XhF3C3MmTNi8Z2YiNglF Z1gm6oYeg8ngdHUvsUoIi5b/flKPyJfNcJZ3na/UHz3vRbiNiP8lJDRMeNiXOkxA6151 YK74cvoMSoYVHUD1UGNMfILP0nj2+pYOyhUbfGZCVwYfGkp8aHmxmImRWbi9AkfMsld9 eCtnXOH2fxQEZlNZ6+lI25uEZtbb0G54lJQDi/WCs3uG6P/+p3/JMi4biRR6wgP+ei6D ULCkx4nrmklEjLgBZyIub3bp+IX2Z2qKHIAamq5JbzqEvp9mGp8NETFh+lcul5hutwpW LqWfRvShrvQ8bCmsTQGhNsOhBKxZJeVIim/FHJF6Xnsw0gT/GUnvPK9cYWnbSJGUPvL4 6TioVCblKAu+I03TUrSgOIQy0PfMZq74KjLwvL3ZG1vV4Cfgw6MSpDhXespWkoQifT7Y QmayZTST8Uj2Dnm+IHqdTEvQXKmVJwXbFsa1xQRLPsIQQeZNssPcFgLaW0Y59LwJXXsX R6GsUoh9fsYdmGbCvS1op3Bfy26voKvb7bglBSgaz3G3thywpLzK0+dGMRne60TIghQ2 lOK1TrRDivERwIm1kHJgGETaA+0lW/1MQW1obmnsDlPBQvMWgDqRFoyIMv4XUgx0Yl8Q qzhvm0NZG/gDDcuwbTicW3+zGdKC4AALKInrnU4x+1DDWPPuEJpeDxjUIEVpPxWBBo5Q zv3IsEZDoJv1ALiF070mJeWH59McWzhmn0KwgGtUuxgwjRJUWZCDg/u5d9uMjvi7TSpq cul+f5kvse26FuJRDrLzTMJJ1Kh6qhyTmanYEHrLuWyDyB3m4kTRUSjVUGAO/gfAXWlF jLAebQHtwv/Y+StbOZoUavnTjsS9hgAarWb4PWirm41fJvcVTq23m561mldBRH2xuVIE PJRyNtjWyG1HmcSiI1+BIhTm1RejBQDLg1tipqnzO+ZKaLTHlTPzkhNp+5KyT0yu0w31 +ECd0UXN9F9Kju6jYPJkZSzpVMMhVfW53JVKLY/cHgID2t0wpm5JcqECQPYNDWnvip3o v/9wwusBnSca4N+Md7cw47BdON+zrHv4KT3BBlYk/orKvz1By8C1OGH5nsW8lvXwArgZ NXBN+gs35iMokzA5ZopTEg3DH7SoG0ZS8Tu7i90f4lui6t7qvy7lxtqM1NoWNzQjUjLP v2EEp34Cz+ZEmjkebdcfOKZEqQIU83aJPwy6cwZxRw8yE6NMHNb9hmjOdDz4PR5iLm89 GogeOyrM6P0cuhCT4GfFYtSGwhtzCCGWTLcs+H15d1UlaPPrAZzYnWB2hrF2NLeZH4Xc yBlU4JocduAj+gtJ1o6nO20/JIQ9SHQxYjRe5exPRLt7VjCsOMGdAPgA7rbwBoX4cZC4 bdmkdIvU7a5sa8wFUqRbtYcV8jkUoj0XYF5Ghk4VZWLpGN22g0SXJ0yoQwCX/jnLI+IA IX/W83tchUi4nx9dVLqRj+RGfr8ogQEOE+kkFkakx19XYhggXIv37ALK1NIGjQlEtsFz haiyw6/weHNYB3ay9dZXpsMs/1Q0EDLsWsOiGlWxnsHXRtF7VmhNBW1KFQ6Sgcl/n3T+ 0rvDupV9KGseIHcR5qYJJxmHb4ygYAQ/EWnYrMGxr00t0A5BEm/YmFaU4yT/YcCaf+Oh mk/zeHRK04jmt5vmHt/aFUtKrYyxT3XXHLCQcmqbJqc8MH/H2BBXdkoBAi9QY4icoLPB Ro2hqazd/wwwP3CLphARP5/c6C81W2OKo93f9xo3Sld4o7y9AAAAAAAAAAAAChEXHSYu ", "dk": "vQ4PA11FOV/0enUAtUUCZGW0jDqDJb7aIaXW11BSMOQJQ0phr4ru+opdDOrso F5/Dri4GMIXYR3Ayiu+LPdOKjCCBuICAQACggGBAPnFgCix9ou9RnusLaEM4nP8MGslZ MJtDZThkP+hOAfN+4mTSpi2VjXYOxcyuwZfZuDd7bOhY5ZtucgjfFsyDaT0u/KLoKu+w tCFdvPnYlNHfIkCnjE2fu46AQZqfCcO38STbWG6g0tawx31m8VMsJnF46UF8u7fSpqI0 Ounsworth, et al. Expires 28 May 2026 [Page 110] Internet-Draft Composite ML-KEM November 2025 J7t/2qX/FIF2KNqX+T1ZcJ2XSLgpW4RjWZpVUntnL1xZ7rwhKNA5eI3nwE/5jf7ufCCF 7geeRf7mbhKljX0cP1wRuGhB79EB3mM4anpKWEtYPSBPTStMsl1JRxvGjeNglAXzu3wR Vfn5niyP4qdi6hjLDPkh2xpGl+WpRLFTBYtAWlI/yR0WJ/EPMx5ovPm/P+0EmD4xQgjo m4ouQ2P9J8FsWrn4qV6gKwrCxf0lRul6b2KH7xv62IlTtS/hkm0Zwn7vHHOb4qIw/7Ui 7OXxO/Z1N3pkaAHEoPb4DYvh5QIxvmO47MxSB1SULCHKumSntlUXUMNa/Uwr47LiyKrd U810N/94QIDAQABAoIBgDvyUjZSMidrQ9uiYSguaLpoLHHG3YZJeLFDKxMjbUh4QFcOX iDFYG8XaOVCNH+MzasKMMcEZNvBlY2KsMnNe1dcMrC9oNAfnm/AHKLg5akxttrGYVPT7 cZ87uqMi6QvLncmYCIMyv6+t6Y84MhLhfY+N8sPYLVCq8vnqtR+MCdz92fzRcHA4eeYm zX/RQ6+Jo5CkbKi9MijyhLwwTHtkJQDGzl+WoAJB1bn6IJoIsu6qpseNJB1/FPSSX0WY bi89h7nVv9ETlhc25EBvpDlNNZZ8CtmWfqiXNL6hXKEKC3AIIgHnZ/L7g9/gLQVf+01O 7hK2oVcIMZOB84kArZEgSrbo7Yh2UahkArREcJ+kxCU8qgY71IiHl613A/YeylKe8g6W aDVAwa2BfWn/GHj7lCmR5eY7YGkbj3CnM4+8AmtroSC3CAAV/u9oVHnuonpaaWhiBHBV ZE4US5b2jhV2KkzFQ25mvnjPjQjYRoOXGV2jsdKwSuN+e9xW6uhSUUeXQKBwQD/fx/kW rILSuFejPCqy9wcXdfKW/VbeivtEaZT5a4dALgglKcNfB4aOZCxbJ26VY/9WJvZyHBAx y4yyBE1mmNOxUVW2DR5M8Oq7NLj0q7V6LMydCO60V8gwUeyQy4QPxzoVQHdWYFl3/Jzj g3IIoQ6JUIR3/G6CdoM3BP+QcSgMbq1mYN/aGnT8gYWdhvc8IqYzPJHC0bup3t2VeCdm uIuATdTvuWqRVHwuEiW3yX5OOQf79VyDDceWulkB1JY6MUCgcEA+kN8/USuYtK884fAc B9Hkv1SrrB7DE93sMgHiZtqKrfYLZgbQqTkJJdCyFjW6c6vmhZYHgwdpStVBcI9TmHmU 08MnZsmOC9lqS/+gYwnTzfHHRJyWbi+RyX9FxEp9gnLA0E04csZZEReTht62GJ3FEbGm FNwsuPMmSUvF3cWd7L54IdbC5IJukkPZDv5lym9IhIIQluyA1n/ZuzofxD2yjpolpcts M/TGT1WHC/VrOhSVpPDfQ8NrxmWM2u1K3ptAoHANLY0jTdM/llvj8NCL+qpOcz+pUg9o abeAyYeC7caKe+pDUe+A2E1ELIJsSE4lWXrtBgg51icGDE/zchLDKUSkgDPInCuusa8O rprdAdWfNlqhyFA8d0aZDacJSIJEd8DhsdrABDkSnFeowqOu1irsRdYvzlVtM0tiHOrS EynVWmNHMRURefz1X9cVCv/6aBS5914qsGf28MADNUA52M6AMXNdWCwH2X31tMeXsohG n7rSc+AWOw+PuwAtNtx2NgFAoHAb3aBg7gER2V+3KRYtFdqJHCJU96sXzZBo83jdYlvx qjtMpltgsg4CIgKKXtP9QCmO2W6R1+0EG11R8RUU8XMtMwfXU7NvfZ2O91xaDeJBoJcP 3mIzqc2sC+eQpjVbIy+C6wOJoazv3Gn4vfgReHNEY3YQ93d8v78kDT8fWH/8r4XBsaia UvY40xI+6auqoHfh/4qCYwXg+CgnTHk9zsR/8316SRaKEbXyYUFBjbT31f13DOhvOBog tVNjYdqQHwdAoHAehOxQFv0bO8jXMrEv9gxfOWSKG28PSlG/6E69TQoWO3xuRIDe5yIQ nqT6pWXCCOmiiGapDqb9pyZtxWTWGwJZN5y1XK1LkOewhDyD+WrENv0Wy8i5cZYC0wmS yPn5q8lKXfBi+/h5ZggBGwj27cJc/6wgDRmlRJ/dDNNQYmlYT5DeGbwD9oj6jxZUNAOL XxxFPq3OK7MwJqaFC59nsygMoC6a3se2XoaLqPcLpQuPvZQKSyL16GbAdh64NU0digK" , "dk_pkcs8": "MIIHPAIBADANBgtghkgBhvprUAUCXQSCBya9Dg8DXUU5X/R6dQC1RQJ kZbSMOoMlvtohpdbXUFIw5AlDSmGviu76il0M6uygXn8OuLgYwhdhHcDKK74s904qMII G4gIBAAKCAYEA+cWAKLH2i71Ge6wtoQzic/wwayVkwm0NlOGQ/6E4B837iZNKmLZWNdg 7FzK7Bl9m4N3ts6Fjlm25yCN8WzINpPS78ougq77C0IV28+diU0d8iQKeMTZ+7joBBmp 8Jw7fxJNtYbqDS1rDHfWbxUywmcXjpQXy7t9KmojQnu3/apf8UgXYo2pf5PVlwnZdIuC lbhGNZmlVSe2cvXFnuvCEo0Dl4jefAT/mN/u58IIXuB55F/uZuEqWNfRw/XBG4aEHv0Q HeYzhqekpYS1g9IE9NK0yyXUlHG8aN42CUBfO7fBFV+fmeLI/ip2LqGMsM+SHbGkaX5a lEsVMFi0BaUj/JHRYn8Q8zHmi8+b8/7QSYPjFCCOibii5DY/0nwWxaufipXqArCsLF/S VG6XpvYofvG/rYiVO1L+GSbRnCfu8cc5viojD/tSLs5fE79nU3emRoAcSg9vgNi+HlAj G+Y7jszFIHVJQsIcq6ZKe2VRdQw1r9TCvjsuLIqt1TzXQ3/3hAgMBAAECggGAO/JSNlI yJ2tD26JhKC5oumgsccbdhkl4sUMrEyNtSHhAVw5eIMVgbxdo5UI0f4zNqwowxwRk28G VjYqwyc17V1wysL2g0B+eb8AcouDlqTG22sZhU9Ptxnzu6oyLpC8udyZgIgzK/r63pjz gyEuF9j43yw9gtUKry+eq1H4wJ3P3Z/NFwcDh55ibNf9FDr4mjkKRsqL0yKPKEvDBMe2 QlAMbOX5agAkHVufogmgiy7qqmx40kHX8U9JJfRZhuLz2HudW/0ROWFzbkQG+kOU01ln wK2ZZ+qJc0vqFcoQoLcAgiAedn8vuD3+AtBV/7TU7uErahVwgxk4HziQCtkSBKtujtiH Ounsworth, et al. Expires 28 May 2026 [Page 111] Internet-Draft Composite ML-KEM November 2025 ZRqGQCtERwn6TEJTyqBjvUiIeXrXcD9h7KUp7yDpZoNUDBrYF9af8YePuUKZHl5jtgaR uPcKczj7wCa2uhILcIABX+72hUee6ielppaGIEcFVkThRLlvaOFXYqTMVDbma+eM+NCN hGg5cZXaOx0rBK43573Fbq6FJRR5dAoHBAP9/H+RasgtK4V6M8KrL3Bxd18pb9Vt6K+0 RplPlrh0AuCCUpw18Hho5kLFsnbpVj/1Ym9nIcEDHLjLIETWaY07FRVbYNHkzw6rs0uP SrtXoszJ0I7rRXyDBR7JDLhA/HOhVAd1ZgWXf8nOODcgihDolQhHf8boJ2gzcE/5BxKA xurWZg39oadPyBhZ2G9zwipjM8kcLRu6ne3ZV4J2a4i4BN1O+5apFUfC4SJbfJfk45B/ v1XIMNx5a6WQHUljoxQKBwQD6Q3z9RK5i0rzzh8BwH0eS/VKusHsMT3ewyAeJm2oqt9g tmBtCpOQkl0LIWNbpzq+aFlgeDB2lK1UFwj1OYeZTTwydmyY4L2WpL/6BjCdPN8cdEnJ ZuL5HJf0XESn2CcsDQTThyxlkRF5OG3rYYncURsaYU3Cy48yZJS8XdxZ3svngh1sLkgm 6SQ9kO/mXKb0iEghCW7IDWf9m7Oh/EPbKOmiWly2wz9MZPVYcL9Ws6FJWk8N9Dw2vGZY za7Urem0CgcA0tjSNN0z+WW+Pw0Iv6qk5zP6lSD2hpt4DJh4Ltxop76kNR74DYTUQsgm xITiVZeu0GCDnWJwYMT/NyEsMpRKSAM8icK66xrw6umt0B1Z82WqHIUDx3RpkNpwlIgk R3wOGx2sAEORKcV6jCo67WKuxF1i/OVW0zS2Ic6tITKdVaY0cxFRF5/PVf1xUK//poFL n3XiqwZ/bwwAM1QDnYzoAxc11YLAfZffW0x5eyiEafutJz4BY7D4+7AC023HY2AUCgcB vdoGDuARHZX7cpFi0V2okcIlT3qxfNkGjzeN1iW/GqO0ymW2CyDgIiAope0/1AKY7Zbp HX7QQbXVHxFRTxcy0zB9dTs299nY73XFoN4kGglw/eYjOpzawL55CmNVsjL4LrA4mhrO /cafi9+BF4c0RjdhD3d3y/vyQNPx9Yf/yvhcGxqJpS9jjTEj7pq6qgd+H/ioJjBeD4KC dMeT3OxH/zfXpJFooRtfJhQUGNtPfV/XcM6G84GiC1U2Nh2pAfB0CgcB6E7FAW/Rs7yN cysS/2DF85ZIobbw9KUb/oTr1NChY7fG5EgN7nIhCepPqlZcII6aKIZqkOpv2nJm3FZN YbAlk3nLVcrUuQ57CEPIP5asQ2/RbLyLlxlgLTCZLI+fmryUpd8GL7+HlmCAEbCPbtwl z/rCANGaVEn90M01BiaVhPkN4ZvAP2iPqPFlQ0A4tfHEU+rc4rszAmpoULn2ezKAygLp rex7Zehouo9wulC4+9lApLIvXoZsB2Hrg1TR2KAo=", "c": "wPZJY9g91xrY/AOv+WvWyzhwlKU+z7yrBDmG7Fx7SmHgtHBOyDikaKyZNsOeP/ UuQdUK8uZpBn7AvK0OGCNsmR56Dr1NKZDTxPrVEun0nc75bajluL7HtUJ8hX1uKa6zLY ziKow76VhB/nf8sgyax2w+7Wd19yeDIq7gVj2T0TfN+7QikubUsesX46IIxtxwKua3sm 7Gykeoy1Zom3rRpcJ/YGcRQMz9uEILsX1Rj/ZImyLk1rPL5Ra0P0x62tJvYIG1e7pIwU rc0FbwQ93k7Q4rhwvE++jZYRhc2KCd3hOgRQ8KOCehdMnIt0zXgIDB58wNRQTTFqvfH8 lT3V/6RL2fYhRkffKi9gym5tzeYPMTGk6iM6GRTqjHAgkOyA1u19z4vuBhVmkiwbl391 fotg6Rfl6ngI4iWilRyP4zhNm26INLVkPDkUd9XzfXyH0sLXUK/X4alCYxEqL8WdHGgx iNAHNYPiuWYBCeW4YS/cv0cvhNltnXjZuULLvL8HfoXZvKBUNcsAMBqNGumr4KL0yP1J wAro4pDTrD79udA/yNItRlPE8WhaK4SqjQPcJUFfeN29AmeAtUWCtAmEBqMRowrXsXyD R5b1jVE6j52ffBjSv0FgAcbK3MgLOf/093+LyxUTYkMG3lhS3oRbturNbLZkk0xBFyp4 F9b6oyC6St08wKFmgkxsBwlS3heCV8Fd0iGOK5UQ7ku4+qpXXakdpaEVi/hNraIKe/U5 BkvATXkbxUKoSfNd+49Efv1TmHwiIjHygmDT0KOG3WO1b94+5KO71XIGLSMWLf94J1Sc r3H9Gxm9WDhxxuQZI9D8w0sBO/mqQSdutaiBTLp1mX9OlZhKQ22t9dcfHng7OIYsRzGZ IdvWOzKLhupeP9Y5xyOYVP2e1zq+8sKbd396UyK3ca9g+Z2OdT5NGPQar6oR9KIkzwa+ 5QLrdHEY08xX4rIyctihuVLaA9GlUdhtoBYU1GCMmRLLGt3h6JeuUrlYXZM2GmUOXBSV VXeVF29lnzpHQVnurLDooVkNtpdJlXtg6vpOYE/CTR6j84Osq3dnIEF3iEv63y1uuE0+ ewbz2liOumtUF5zj3aXSMvnGwK7f/mWItvyU2stArHpAIRlf6fTrVZc8A1t1YXfssILY 6NNBWqFK8P2hOiE/ISfBcXk8vJuE37vWfhPR1eeq0cwPk2qJS502CElEiIFbL0ctUXhO ozLmdqdYVphcPFNw/IO13PFx1Lg9zjYn5j7nM+PuhM8bJgmlUxVylyE3eq0mFji7rpyC m1pkHy9bzEEwmiFQ/OixOfsRv2L6HTX0cLSTUyk8Fb0UZTGGnEqd+TzEl+ZG9ddNcIw5 05hEJDlB6IuuIVGzQIoUY7p2XjLNnmWOO5Jq28NYZZjKieYWjCNDILrvnd1IGmAn8u1P qG8wFSEmp+pYEdk+Jmh7/FRIahyqyJT1FOO9QvONz25R0KIBIQfRZswIn0oJj1cF1nr0 fdBb2kkDUca5aX/V/XwPOXEgSEXDB+X0cBqFLeqvDg3xHo5AzFUSZa61XF65I9h0I9Me Wsj0Fu4gPCMuiTl13nx6JquJ2z8bdksQJt/C8kU0/9XxA16B4PRhItEfoJ0/QKeaU37c HEy9UjLJ/Rpu0vEIY+5gb6SzxBWOrKwwrpMQWwCw6UcGlZpI7k8u9zLTvgRr/KkI51qO 9ofX+fZnvmCGPQj0GtCWOHB8W6y1eefB8azqPGeTgEPt2QIqVe6Ur3q1Uxo7eDFw4DqO Ounsworth, et al. Expires 28 May 2026 [Page 112] Internet-Draft Composite ML-KEM November 2025 Rk1n38hJKfzX2QGfnAOTJUGQsn91uDm+bgZdJ/R0OGLAOnPY1x6XQzIXZhcTeKa8UMde 3uaukW1zRpxaQ6N9kO1+L/wm5c0rj3xvKeIWX1Yhff1a2DLQVHQ0N3qcBPN2fKB+xfVY 4+A5/NihkOnihbeZhXU5OHjN+MJnTzUs+xZ38KjiiRZgo7izE+BapFrsuzR7uwzkfX8s nYF7aSso3InF5QQbWEbDd7L6JAsdDuAppav5XwHI4Li34MTmvk2Zq6Rm5cfm1yduBq7S w1VCxkNKA4Cc7qTgq8A8K2brl2yfY0g0GrJBr5YMoL/oyEXx6pDjWmQq/4ibdvr7VER+ FD04oLN4O78wvsc+8KWyGBV04kUaDmpfJX7qlb6l3rFu6/qlCUoC2VyLiiw8RKZBobGO 4LABr+Ca1MaB0pFZ5CGnRbR7abnxDXDovnnnlBg5cCf3lsfjAuX15ps9/9UUhsK4l6ue qYucBY4hrggfRLe8KG1zv1/dMDG+yirdwos8vPebPu1e8WohSfgIWXh3WmDFOmTQa7sN HFBuHofWyo52iA2HKbLhwLWiW8VMLm0Oji+7dWZSpPcMHkcHe8vvacGLQXz+dxX3dEUB K/Tioozqv5RETX/9ti5PNgbM4KsqHkIxq6MJTf+aIYe1x/qUzLbAGnyzNuX0ozFsrOa0 kxArXBfCEsi6l15XlTbR+kfsb8xQ1vlhPu6L6goUFHxWtrPqqDgSP+9Vbb/k9Dln4z0X FD7wEP9x3G0inUpojZHKQrbHfic5LvpGxH7FpkPwIqzxpm0fZSesh2PcxWXVxczITppx sVH1SsAJCbs9YAW3DlPCR8JU4=", "k": "j39RzzxeIeX0hKEPfoRwk6gvYfL5D5yrQJWPPfctaw0=" }, { "tcId": "id-MLKEM1024-ECDH-P384-SHA3-256", "ek": "1ImKa2NHJgy11XFtLeDAwEqhbkIQlLPICPZnJyeNmYV28OJr36Z4a5ejFjU4D maF9vBOLyhNOLIbMMNU8tJ3urrNLFVQI/o3j8JmNLugKQWbLPCq7gMoqUWNNueBg+fB/ AY80Xp4R4ID0FJFVUAHpTLKQ4kjxZgHocZXuNZicGuHVHJ/ckwILTSyWKw8VpV6opEdJ VhLvgfIpCGYvzMP5UEKpUEiXQKcu5oduhtalBJ/tDZRJmnHcpLBoDy9lMQNc4ig/HZgb WiPZQwISMWtMbh7lKSUa+q5ClAf4BlnFcw68JqSdpYbhMk6VaBueFWd28G77aIaUKEhQ 0SMdhuohjpOPWZK6AsaQ7QLuFsgddR93pQM1oXPyiafgPoNK8J7MEpeYXFok3C3q6O6P xWhK+obdnWsXPZ49xJW5GcDCNUBpTFpMnrLORi3YqA0oYylVyF9oMy4NnWfXGaRsoWTD ooIe8iVAGUIHwhGElAy99cN3xlkptKEjnVZAlZ9TZVmVdOBUNpRGbRKtlhHl9qVHXvBZ og1u9qqIdlaATmwdJS2vHwFA1HOVNJSyiwj0ak9d/AGlotwwdZ19wtcXmnJ0eRuNAHE3 wVwcBI9WnoirkZrtGU3WulEdNCrWditQodBeXY6xsvCx9OkmKdRAMVBslJysUODMpOT8 PmLsyaxYMup7RZ2fMt5xcZmc+RDheN6oOPMv/GJq3N1hdDFuJq/aajJnso3sfNy82oYQ iJVAamT+abBcwnFdpaudXpG9Rs87JFHhmgIiwfPC7S6KYh7Y1I+k9xVl0Vs6XGhHjith PMSLMTDc5RfmTEmxUKV5wND3iVwz4J1xHdkaeCbQYW0BeZ2lgI3WymPbcWOr1PKeqs4W 3ZgcndMFDy6bhJwYIsysMN7tgdBCwdr2pUZECOQgtGFJ+pZbwLDPWMiN6gb0Ll0YQMlL zxS9pgYHBSXsZkSi/G6zQqTPsg4B1JzhHaJyTioeXy3gOIcfcSyISe173VI/0bItMxsa OFqmGZ0hvaRJplvpppgYOUX7wnHIwSb5CsRGxe3HaRJDjtY5qCjbdKTuNVdrjWh+Cgw/ DGaIcw4SonD7ZcBw8EPH5J7sQJU6def3kA69EQ4sVgRw+dPiqZsISkQiLWbD+EDy/aIL Re3roNKLTuDtCEtDfDLMWFuLZw42BaFbphQMfF1S7BpPdQ3RYooApogVyFnIspOfKVwK sUpTkqS18YEz5OEbyjFsOBx5bfJIjooEAyerIq8RnBqCAwN5rwbDbwmTnQlUbJMDnLFd qteNexdr/yo/nMvHtPLDSrHcKqheXZqS0XJQrw/SGTCxpFcNyqIS0KNezEoWBZxHaBuE 9RiH8C1TglRRfwjQcQAQkqjwqgtD7IyufCEEuc8ATSxGQjHZzCP87aP0+k9rWIiLQgYs 9Zh6iWVkkI3rmM+YWcRLxU/xnUVfWa/8EyVQ9lhWpVNDDq9p4E4DdQW3irJJnrKFalvq RMsnKTKarF9Ihq4QZzAxRdzLviotFciJ2Aq/7cG9ndl9TRWMSgw+5sMY2mtiTFpSbNlW 0dSWhiehghrH1E6mRYCGGNlMtyB5CYXkMydt3cvzKwxByi1U3bGlOs1AHyRMUplrvWE4 VKLgUuwSfAzFFyCj5wjf2BOcKiOBTsdrEyHthMXhXcO8AkTohJc+fS5uFm92zlXqSsGN GwPuNDMkVaxChWHGzAgDxsXKiNSO8KLPAResfMVvxPOJpnIpYRF1wiZsNIFdyNckQU+S QaqSBCCeHyFtcLG08vEbPwphLaOUZA5zzhEnaoHOiuuA/INDDtEtdNuztIerRG6lRxQ6 gIPajB9CGvEdsURp0FDD8tyhPBUhhqMYUYE7iOXWWkIHQWyXdcgCqlVxaR2dsunmMoRY nJGIGZSHNfDHlg3UTRumuZJj1Rv8pElZNSFcuR466u7UxVx+aNc1tMqeRRSkURkQhYkk DZa4/V/qMFyyDWvYzRm7PpvPwgUOlYKL1GHOWQbkoYQCtWPvKcZfhKm8vx3kyNgC0cmo AhCB2VflIw5V+c8+e/ag2tCcX228qVTf5lgIBMZz8b7cgYQYDgYxAiwFqwENK4LEbaTN Ounsworth, et al. Expires 28 May 2026 [Page 113] Internet-Draft Composite ML-KEM November 2025 f5FERdDHaE1QRFDOV6wvI9J8w8Cr6bcdshvnpKbAvrQcysyaKQZbEi7X/HoVwNhz0kfW ubPYxpCrf+QdUDVnRfJvOpbwrxHDdCw6UE/ZGn0njfJhCslb8b3", "x5c": "MIIUgjCCB3+gAwIBAgIUZvYC6mYN3AebXXosaOpYUsl3wpUwCwYJYIZIAWUD BAMSMD0xDTALBgNVBAoMBElFVEYxDjAMBgNVBAsMBUxBTVBTMRwwGgYDVQQDDBNDb21w b3NpdGUgTUwtS0VNIENBMB4XDTI1MTEwNjEwMDExMVoXDTM1MTEwNzEwMDExMVowSTEN MAsGA1UECgwESUVURjEOMAwGA1UECwwFTEFNUFMxKDAmBgNVBAMMH2lkLU1MS0VNMTAy NC1FQ0RILVAzODQtU0hBMy0yNTYwggaVMA0GC2CGSAGG+mtQBQJeA4IGggDUiYprY0cm DLXVcW0t4MDASqFuQhCUs8gI9mcnJ42ZhXbw4mvfpnhrl6MWNTgOZoX28E4vKE04shsw w1Ty0ne6us0sVVAj+jePwmY0u6ApBZss8KruAyipRY0254GD58H8BjzRenhHggPQUkVV QAelMspDiSPFmAehxle41mJwa4dUcn9yTAgtNLJYrDxWlXqikR0lWEu+B8ikIZi/Mw/l QQqlQSJdApy7mh26G1qUEn+0NlEmacdyksGgPL2UxA1ziKD8dmBtaI9lDAhIxa0xuHuU pJRr6rkKUB/gGWcVzDrwmpJ2lhuEyTpVoG54VZ3bwbvtohpQoSFDRIx2G6iGOk49Zkro CxpDtAu4WyB11H3elAzWhc/KJp+A+g0rwnswSl5hcWiTcLero7o/FaEr6ht2daxc9nj3 ElbkZwMI1QGlMWkyess5GLdioDShjKVXIX2gzLg2dZ9cZpGyhZMOigh7yJUAZQgfCEYS UDL31w3fGWSm0oSOdVkCVn1NlWZV04FQ2lEZtEq2WEeX2pUde8FmiDW72qoh2VoBObB0 lLa8fAUDUc5U0lLKLCPRqT138AaWi3DB1nX3C1xeacnR5G40AcTfBXBwEj1aeiKuRmu0 ZTda6UR00KtZ2K1Ch0F5djrGy8LH06SYp1EAxUGyUnKxQ4Myk5Pw+YuzJrFgy6ntFnZ8 y3nFxmZz5EOF43qg48y/8Ymrc3WF0MW4mr9pqMmeyjex83LzahhCIlUBqZP5psFzCcV2 lq51ekb1GzzskUeGaAiLB88LtLopiHtjUj6T3FWXRWzpcaEeOK2E8xIsxMNzlF+ZMSbF QpXnA0PeJXDPgnXEd2Rp4JtBhbQF5naWAjdbKY9txY6vU8p6qzhbdmByd0wUPLpuEnBg izKww3u2B0ELB2valRkQI5CC0YUn6llvAsM9YyI3qBvQuXRhAyUvPFL2mBgcFJexmRKL 8brNCpM+yDgHUnOEdonJOKh5fLeA4hx9xLIhJ7XvdUj/Rsi0zGxo4WqYZnSG9pEmmW+m mmBg5RfvCccjBJvkKxEbF7cdpEkOO1jmoKNt0pO41V2uNaH4KDD8MZohzDhKicPtlwHD wQ8fknuxAlTp15/eQDr0RDixWBHD50+KpmwhKRCItZsP4QPL9ogtF7eug0otO4O0IS0N 8MsxYW4tnDjYFoVumFAx8XVLsGk91DdFiigCmiBXIWciyk58pXAqxSlOSpLXxgTPk4Rv KMWw4HHlt8kiOigQDJ6sirxGcGoIDA3mvBsNvCZOdCVRskwOcsV2q1417F2v/Kj+cy8e 08sNKsdwqqF5dmpLRclCvD9IZMLGkVw3KohLQo17MShYFnEdoG4T1GIfwLVOCVFF/CNB xABCSqPCqC0PsjK58IQS5zwBNLEZCMdnMI/zto/T6T2tYiItCBiz1mHqJZWSQjeuYz5h ZxEvFT/GdRV9Zr/wTJVD2WFalU0MOr2ngTgN1BbeKskmesoVqW+pEyycpMpqsX0iGrhB nMDFF3Mu+Ki0VyInYCr/twb2d2X1NFYxKDD7mwxjaa2JMWlJs2VbR1JaGJ6GCGsfUTqZ FgIYY2Uy3IHkJheQzJ23dy/MrDEHKLVTdsaU6zUAfJExSmWu9YThUouBS7BJ8DMUXIKP nCN/YE5wqI4FOx2sTIe2ExeFdw7wCROiElz59Lm4Wb3bOVepKwY0bA+40MyRVrEKFYcb MCAPGxcqI1I7wos8BF6x8xW/E84mmcilhEXXCJmw0gV3I1yRBT5JBqpIEIJ4fIW1wsbT y8Rs/CmEto5RkDnPOESdqgc6K64D8g0MO0S1027O0h6tEbqVHFDqAg9qMH0Ia8R2xRGn QUMPy3KE8FSGGoxhRgTuI5dZaQgdBbJd1yAKqVXFpHZ2y6eYyhFickYgZlIc18MeWDdR NG6a5kmPVG/ykSVk1IVy5Hjrq7tTFXH5o1zW0yp5FFKRRGRCFiSQNlrj9X+owXLINa9j NGbs+m8/CBQ6VgovUYc5ZBuShhAK1Y+8pxl+Eqby/HeTI2ALRyagCEIHZV+UjDlX5zz5 79qDa0JxfbbypVN/mWAgExnPxvtyBhBgOBjECLAWrAQ0rgsRtpM1/kURF0MdoTVBEUM5 XrC8j0nzDwKvptx2yG+ekpsC+tBzKzJopBlsSLtf8ehXA2HPSR9a5s9jGkKt/5B1QNWd F8m86lvCvEcN0LDpQT9kafSeN8mEKyVvxvejEjAQMA4GA1UdDwEB/wQEAwIFIDALBglg hkgBZQMEAxIDggzuAKEZD4MQ6/Q6VkVbcMzVdbtZ3JlAYYojHHHnIgRvn7J8R0U4qnut OXizIV1IVjWo88a8+xu44UvKFEQkLlgZ9tZjkElGzIMNrF4p09Exquu2rs/6NXXn8nPT 0AUaFdSi46V4b/9J8oQV0knPIN0A2SbThsmCdB0op0LqIr0jm1QL4EEEOvYG4YneUlRm SbhjaspQd3XHbJ4wHp7wBjJhCPYkhnD9xC5aiwSLjrePmLwAu5CJbULm3MjwyAGUHhra OmlyThFudcq//ALrbn3Ynpu5moQ6iW0eVvFa2kMLtB7gr8fTwewlTKoJcQGz6A+X8dCU VzwRXLTmo/Vcn2xZii/kcHnEsMxVPsb3CvjrTqDUsRkVc7I9Co2XiKwVqZuay5cTOO05 DCnWLB/UhsYkD8qj4BQksvEArfiwweE7HSZLBrgODySkbWlGGs3LVpEmP4f/X0uCJ/cA Xd+d6aAOYnO+jugOVoPTK7G3cB7Xl71QXP4JFDI453Qk0JKqo5uljydVdDFqas/yTSiI Ounsworth, et al. Expires 28 May 2026 [Page 114] Internet-Draft Composite ML-KEM November 2025 LZIVyuvdYvydmVKbAraovcyerSFfhKucrTe7JdRbTv8oKI+ty2D5As6aOrcD23dNnkiR xYYO3f+U2EDkFzsJMuILuWFDI2UyCjfl5AQiaBSBsa5QzZ8Wjyxy01MtTSwJuU7+CZvn znvhn946CvYKMB+rf8P3E37U+k6KVQMfwwJSaaN0wzYF1R1u6NhUlSX1Y9b4J4s+b7Cr Ec+7ma7DYc7OaTWBCHUqZLTpjuJGrSe3mpvDwtIqYgbgk1qyP6+D92+CEk2DhK+AS3pK PG/FYFvqoSp9gbj2k2jvW4j9vQJG5P4LcKsXYkEI0gfZvb5vb1VWg68zym0ZFpd9/lsK 0+vg5dFuQvgneZiDhamNKYvDP+RGm8OVQDSvsFNu0Lr6TesIuKNbZ8Di9RsEULO4aR+Z Z7ar4WxJ7kqEBEzn6IcSBBl23EA+Q6nHm7lGamO6ZL3HG+I6WkI7D2oQXxlTzfJNTkF9 16380GLfgWZGea6aIAQllKF/kXm8wJZXJohtFOOye5Z8JM+VSpEocuhWw1CPMdYPmKQo R5pZBqTAmxlgyFzUolL0i5jVlQl2wYFiujEdPEoLUrONGuXp7+jGRl13o2r4KsCVcaCR crC0ZyeWwBT062YQLdjHhVq9MzCDxovbYEL0+Kf4MvvcmK5IJvkbsWFe0pm8/ACDYfzA YUpy7ekV748wGyc0MxiNQdCfXnj59xkrliC2bH5cCjsAqvjVyh4QuhGK7NNHPk5MMMyf TvHkPx7aiMqavNDUGEG35vwlaGeliE0oTJfmR4M4RgFu3JYbMTSLEc1I8q3k3VoHPv6Q bpebmAOPGiOnzD3euAWlN5wDB8ULRoVs9wZ9EkYyQsh3KnBzW55d2m3EYdCJ0E94MaQy dlmT15QmpEWnwc2N/WefqHNrXD112VPgBbYLVy7LBWOAvIbV3h3qOkEns5+MfN/geKw1 5M0LNRNgjh9hMu8Eh44o/1zTmYaF4G73fg2KzZPkc+/HXthSkKYHdgI3WAgibs3V0WYk AzYSzgFH2JKfm8UTJwg5QPG0BDV7+Ah1dI06Bj1guF0CzFFAGmSe8SoljsKJuqz6JGxS uliKQX2RpCkNuaSh8aP0GZuK0OQrBmFKIc02CG0PmBbXvubfSJvhRUfmrX9XKrwt6niP CmUqsT+8Q1z07sYrlDfwbp5bMopiB99/Gr/2+QMi4uPLMo1rd3fWsNdZTZxXuRg7aOpo mAAYy4gMxc5OJ99eYccuXXPOnDlPTrXSX6xX+aFsNeflPsLlF36NszxrWd/BCdAfTRo9 fbB8gEVgDTQGWCul+zQEjvRqBkIx+PVEzpo+O18Elxqledsz9cTxVW9cJ3jmZaOEZAga B9hUAi1V+gkivtZOeZyR/06pg9pfyuC/NW4KKv3Snul5PpfSov+QIP4vNf1QLVoOmEdO fdbtfMJsphH9b5t9MjGvuVlSMwN+KWKejUo2Dqlv3eapuNBCL7KpRXKQRBRvmqeKWWFz YyoBLF7GEBG5NNoM75m/N9M2CZwLzzyQO1ngR/ozMz2TpT7GZqngE/ijlUoDahZSilJL 3gZTyJmtqrn8qDKTwD9kjdhmt+LUXwQC4H4vlv8tT2xHF5F2fARs5dovibZHoqAo8twU LYIhUsswFU9FRhJkMDjsZp6hkcXvDlsRj+WqrvWWVIE1gG36bgtpNgYxZBHXbr5O5wz9 7now9wx1CfPr7XHIcXIiO/eG7xqn4NXSH1nX8KKRksG8jfRmOJ7Yw/DSCVDgE58htrrq 6F+dUMRez9WFo/UbLRLrQ1H+lcTK9ibtKwdnz7iBGhn0r++mh1hj3nNNdllzJ8ef3PPA Yg9mPEl80kRdDTk3JJragZuUZGCaZyLeM7GgXFGlLlkpCPBV+QMzgY6VAWWg7EVPOSNr Eu0ZTHKmam+muZsIsWwCyFZDrDTMVcmgJteaMzMbMdoHzCZF+JALfT1PBeKe2jZbMKHx UetKmo7Vqr5hVais4x1F8qNz+BOdnIBAm9TVybzK0EdFrjXb4K02N3+NVDpJhlA2M124 cM8DslhL+bpG/r0u/Ml6lJC8y1rNRwFABnJXn8VgWOTPMeSO+tVriIYevOE5+DTH9vW0 mDBhbxHVomoxyzZ4CnN6A+xCB0+x81Qny//MfnpKRT0HLA7hpak0Gz0rpRdlRdTU21CH dAcDgQMgV66r+mkXVkuVf2o+O6kxtTR8huTPpsvcuDGrVIr/ypauiXbbBySNl9FchDfe Tib/NZqAprO2l2aWSnMbwONjJzIqcJMLCeYO0aFm0cenpRuj0/FG/xVV2u+Z825owVck YQpbaEGgqnxuKvKGuxQIcgXqWPtdc1IJqWSITa1WLnO9zP0K9MnjnFQnTvO9K3CDf/z5 9TD9bZyN/SHFPrBHuQ0DMq34nCn2JNeTf6ajRHVc8TkSKvY2xaeh/BQai1CmhTCZRyw3 TIl5sOwuervHCqi0JTPBqUWaQNf/BDIfA13JDrfarWkfhsqtepO0Du0B+9dNl88B5Sta h4qi3fC3LO7yImHu3owbK4RD+4FsHlxTuxrtV3s1MkCW/e+Zi7C0e5qTwMi6tPwp/lsu 2rJZprbJQOuE8cY27ekqEpGtV4tUp2Fn8BX2hD5paSvviWiPhmkm+iVDQHFEm9NpeqQf Qw4YwT6Grgt6+OZzyw2gN4rd4W68R/sZ4UPah6aBo3dn59y7K5YE4ug3ziUBpx9GEUr/ VXu9dsRi3NKqI7n/LLMj90UN6jkA1nltU0p4/pHiyHk0Si7/c8rarGqqRj2tNSLTFMag ldc0nCd0E9M0FuGwYaxYt7Ddw8N2HwuUUwRqs6BS4a3XxLydrZwv6tEGjn438adYQd/D 4t81Cwmh5FiwwLi6DHH9tGIEdPAbM9BjksJAKvvp+JIPIICAxnq7p1kTT4p2EyEwi4WJ uQ4akAURuPV+WCvGprA6k1rxWAKl6EfVxPlXUZrBBIrbg3HjlmsXKYbDTu3EdbmF4tVT zX6/cCCKJcGec3cjcNGk6w9H1jMZP1PAJ2mb7Ruk2fwBFNR0QjUxHQNUFs+Hr/sAGy+c D82b4BijEDdPse4DFl133G8GMr0Sc3K2a/95diiYs+oIyCFMHcseCZHIJU9uYNssl0kK 5+TT1NBpEbDpmwLJVAwgBP05VgQM6DQfBbuQjcv5S5R0WFmfKjCmpMhsZTVQerUKvKC7 RtJtoPY55lwaAzA+SFn1Fba2D3IVfaB4N6veufwX8lw2IDYqYTqL6hxyRCL0X403pu36 Ounsworth, et al. Expires 28 May 2026 [Page 115] Internet-Draft Composite ML-KEM November 2025 B30bBGSFz+HjgFc8iaCF4GZAiWhUwU34rHLv0MCbwLNGUdK6hL3IR4kJFmlXdpB2Hws7 Io26qDZ0Pwbc7RGFvdMO/v2pggw9f1K5+BuK5gobNbdHAJ40//Exs0xrkP8R6qRKtvy4 4iUBcOZ2fbfYsBBSn4BibZYEZNit+tkqmXPq0tJk3ZJyUxhRuaWcXSlOrtOxu/kpgQbx ax38YnjRGAG+0BZrC5HcDTFY5l22spiirYcb+m1CK5V+A35pCSNmFjNLW6v68LQ4dDyl b72/0fqfh43HejSA+DlBlqARouLhElBGqH7WOXK8GBluL+Fya8mcH3o+laMBO6yRwl7U s1YB5FuSLKsF40kVMAbXQXJFXVr5TdHlsznXTwySi/AvAkex4PL3g3N+nITGb0/a/bbj P2ZHBX9MgiFD0100ICZPYXxiXML1TEpNGUQdESM7phixg280+XNZpgqzgbuUWBVRHIZM KXRTkKy1Zff7estmlclvNFv7iYpr2Ws8w6mlqZxKlg/GxJ3AVH3FoV+YVn8qo9w+Bh0g P1d5e8L3+hgwXqIuTVyFn9nb6/g3TmaHkqyy0tTl6CM4WGB9gRdpo8/UAAAAAAAAAAAA AAoOFyIoLQ==", "dk": "jAOpydMF3HGv+kExyJqLbWsKpiGDu9k7VY2MbX2BEzHtoeT9a6Url7t8FE+mO kelVayPymBLqXAVtX48MG4PGTA+AgEBBDCiUaQBJeD8d3ckAO/Xj4QdOd1kCQgberM9v bhr3hmP0QzXAMLhZXLLYpyK3DUkfk2gBwYFK4EEACI=", "dk_pkcs8": "MIGVAgEAMA0GC2CGSAGG+mtQBQJeBIGAjAOpydMF3HGv+kExyJqLbWs KpiGDu9k7VY2MbX2BEzHtoeT9a6Url7t8FE+mOkelVayPymBLqXAVtX48MG4PGTA+AgE BBDCiUaQBJeD8d3ckAO/Xj4QdOd1kCQgberM9vbhr3hmP0QzXAMLhZXLLYpyK3DUkfk2 gBwYFK4EEACI=", "c": "OmmuqeG+Pl7IAqsuk5eHS3OHBo+DqOtfla+d11vPM5y96JCTf5sgx8ccxP9SDD mJY8wuDc49rpvLUL8O8n+pb2qH21ps1bqIEbhGwOtRBZzEWQb2l8+1odm9HrbmB8gbQB ozKgC5ez3vSDlXC7ephvs85SGbyNoU4z6jEoBOHPi7TEZWxTy1inIAqkuARz+mvnR/DU BQWmSUkqJuDuQYI4T7O7gYLBbLaL3HhAWatBpbPPvT473IfIdD8Y4Lg/GiwXE64NgCaP tLz6rE9RoHBws2GPcsJfix0A8dqQtsAmR3a1GCVHB59u3T2fX18FhFLQ/9hZdbV+tGR6 VXz/zzAuCi0EF8+hFRWatQaC+GTx+Ou1V66qhvwKWt4V2oZ5UrmMLYnoyKST3vDh9vU+ UMhrxOndH5biXKvD5zBLUR6jMQib3EuIV7570QHmWmkUW0dM50ZHIK7DFvrIXhfhFyje jnIGTv7W/XIbJ6R3uQt6tcVvlPdLIXCLpPNfIeywwi/S2ijQpsx6QwzxwHyzIdLhe/rR BHB8BJ5txvSsNjBrzG4bYpikdN5OmTdg8vRs+/qx+eApFJvKCGqA4Z1h1ancm0V5M4S9 n2+TFLq4H7wwvjoNLRC4g5T722C4bO+hCGGJ3hoG5+m6GqpawsvzQMB4GxJErf7ByXz8 5XUhdZ7XZvFTgnVDmHyZmXvVzL3KLa0YxE9dxqoknFadZ58UQ4h7bXIA5qH1gEssVwHK +W+o7n6o0qNodYWOvVRGyPMH9F0U7oqyT9g8h79bGrGmxfB1G/bsfcD/kTefLIaoauZU sK8CO07a4xQ+Xt3Ds0ZeKKChAW9za6LzFDJZyZZTlxCITyLZT4d/eVJJHYWF1WVqGfqG j1GwWvl1r2qwdVIEDRyD9HglCLQGqtFtglCvH9Q/s8lyQWJuSN9CIDx4zutTqMCS8lbS Usn5auAvwhTFzYg+yY5f0dMYcc25YbqH8B3m557sejO5fzs0GALPrA768WlBb0SP/B+n /J4evw+MPLAshJxCh9IdlmpqNaaqpvoghY3ydzd6WcR6hRtwr4kKm9BYnGAsrBqxPhPk +h8+OmPY+ReZh2ZFGGXsdeNz39q3Ui92lvogMbQCnnyvmetGuT2FjD7lodHrKSPOfuHM 7T1Jhd8muMAFcx+zD4HWdUxFd4N2uMj03KLZHdKDwcjJeQzSiC2Hm64nyWaI/jnOTx6j PTFZxdsOvay3Vkhi+hJQCRMFzi6pDHuJW/naavjQNuPMkNmYHpYX6VeUQ/Lndjw3LPAf IlkGWUdorcJacMNmwF1s27SLnMnQSHO8rjkBQNb1LA7QZ6swrLor940JqShLffBvMDzt F3l+WCE6YLlm7iTaMiajQpY5iu/nwAsCnzIDPlY6IH4N+3bTt41i8FeGiw+CbWWknnwq HgUUckmnYcqjvLe/Kjf3H0asw2CeDMArPOe6SE5bRPbtCgxd5JlztIjbzEST21bL7Wbi DiXo4qlQTuzYjH4XalBtx5xsTsjq7GlVHAnkFHEcChe5F5OalaeGlUtXRSKvzcN6CYjB vE6TOJwkxncxxoIAFQYu1U2/33A9EQo5dYVZ7jkDD6RNgsDz+CjYNfVUOj+NRmovFpAC uZc35XP3YmiwdVeABGRdwZts4eKKoP0MU5O/CC5qxKlGeeX20eV0olViWarVO4SSt9UY zB1QFHSyaCIJGGYLKqeHdlg+XvA6WBfCoUPCFx6UrM+AXSiNhCJOsq4lVajdFyza5ZNm 8pW/UPDHOqJ52p/nWlVtGFKfv0+YKxNAr1JxPA1qYHmf4wegiCA9XvWUht7Am/R3rBCX xAAwc/AxxlXhOovWffIPdNHHrI8zHxdl4fPodBG2k8wwnRtXdjjHAsPoKM97+cGVyiJK e3f7X2EGeuhYY6fhXdIe1qlSmNj0j1uFs/PqVm9VeVIfu4CE64CVH06gweg830wpiRJz YrhfYn+WoR1GQ5qAZYAV4yXKIRRKApp8v1wG2+bQKDvy5vv5s+2+55r0b4auG4lBUpPm mvbkTMKrK2K+t7W/UOWFvsGOOqvzCPBj0Wsen+6fpc88DcaWN6cWp/q4UELVs6qBE7uk Ounsworth, et al. Expires 28 May 2026 [Page 116] Internet-Draft Composite ML-KEM November 2025 gMo8BCNpFIvcaB76EqIJlclkAflD2VioSmD3mrpCSRMt4U7hpRH2Sk42BQSRPxLOKVul 87oRf8TgreEg9REauHU4+59u6DUJD3wiOsTV0GKKwuj9dXYzPs", "k": "g1kbKxggqWS4Nfp3bLdGctC0iQvwuOng/xGuf6C5+mw=" }, { "tcId": "id-MLKEM1024-ECDH-brainpoolP384r1-SHA3-256", "ek": "2acvqCEw1zV5aYmuOZgWh0uLbskHkTvCjfUzJtyw0tVeNgNUQxFQnTdq3zpXg VCXxRt/SEAptekty0dbRsg+XXEXnrNw50yGymux4lVeSOMt7rUsNPWEucG953pioTMKa +agTvW49bpi5EISeyVx17rLEnAi1Lo3DuiNOzqrphwG+8IiOCgWyXlo6mZbmKRJx8fP7 8vEgrRzT9XOpJOKZfpM47gVlaEmDRQS0fClzRU3qly/VYMI+2U4vsOliwY8iAZ6LMXHH RqNHTossQxz7ERmidJ9EcGJG2ZEc7xEu8qEPEsebNY741E0zQpXKmei4pqkhaQ/agzP7 9ufdoW1Fnqci5cutyMmNGMzTogUOkdiUDtAHzo2bHY5Z/F1g/hZcEYcUPkUGxnP1TFJN 3A4dhjJGwPOZlUSaDyIOwMVFyWgvGeOVOBZ11lDcpSnWDFv1Ns8TIe/p+BL1eQ9F9st9 /p2pjc+mElEMbIvSxgaC7m+aHcKNHV+4zAhWpZyuJCOABRfBVuWzemnPeRLSWGMUzWJ5 PhlMWNtMyJXFACsp1uh9WZCYEELGLo4KTTCpLZ/7eTLtVoat9GIitsTbnGPAqexvHTP0 KGPOXjLCZckEmerh1mKSVKbjYSP5sgmq1Mj8raV0JRfG3JoqyTCLOtwTiCthsN4IVqJ1 wyQIiV97hg4M4nI9HCPdsA12UZX9/mNEYOs1oAU/ywyLjIfTAvMJ+pE8Igdk3Wmi2oXX fsnK6Z2oLOtuqgn3lBAdYrKAZciMYIKgilPeqETjvQYxzIEB0MVkVoUS3kXW0lu5Mkg9 BWV+KCUoqnOOhVARoWa85eQ2ISsnrlmqeRYK2lVA5I05oWHuObKsumubPPDCKu+HyRkX WkbElkjSSsHELoGIAWQU5PK80M9SZtHZjGwfqpkHATMrcGFgbggj5eZyTcqz7QgYfQ0F FTNsxpJcMSW50JXKzqEmBQBpdmUHTkHYAoCJZw+FGuw+gKyUlZja9GqTlBE6UQWAahzf Ya32KK+68e/FuDLJExaPUAdRGM3UJPAF2SaK0Ibx5hZb+Kvp5aknpcaN+nPhyh1QVhNS aSFu8sVsudDnFVA3qe4QVqtMtsNawev9KEinRFACDR60Fy1KsJBzlA+4aFUBkYwp4qzr qKUNKRTunXOiJmWS1tAtTXJ94Q/I1k/RGeHD5k5zxrKfxZujrMrI0NmXBeQG8OR+1epC lSu99SPhNkBm6Z0Y6uJ9xtQ+6VL9LWlxaSlcBPNEnMeUqIxNSqYC8M8u4VK9rFvn8p9h rkPafY4GtaD7OJUlUcVm0SfZvYW55a6uGoF01dnOsIJvkmb9lKK8FiELGW6cdwJ4IBV/ ER5FCuhfsIj6EQdEsyIUKyh6/pijTqqarGwoRwPoeiK67oDIxmPwjUJNQA/R/ONQiqov Yh8vDVjN9hzMWGEYhiuu4d9dVJB1UMdCpgUXNc5EYYoDwu6X+BmIXkbvbCfMplX9iit+ 3mLF1XDNvsxw4LGAWmwbOAJ9BtCZ4IG19gXhBHLn7REEQYfxaQCWcSVg1yDt3CP8IO2Z VJIb5wQsDFqffE3axhhTkE4a0iZ4OGVh5IYZcXFDuBHo/x8YXgNTAgLxrOUfDMl9sihx pY8voZ65JxAKbhW6/JO5qcxQeK6NPuANGa549stJcqeuncVQMcU6Hyo8Rl7womqtclB/ HkHgnE1xFjEazUBJGs3KDwXIwNmHJQSOalOnsqcw3hhsASyKnWFr5W/BlB+ZZQampGhP lpR1vmUDIQORcnN8wdOv3hDlSlUrhbPvXVns/ZDYsukezpnkIhqcuQzpul1XpBZH8g2R owBwUyYJKyQUeUQmkWqm7kNkYalPdRkYflJ4fp8oWaal4ix8vgD32a/G4eJr3h7PxONG 0UcITpTHIUb9NG8JprDTNESvOQwqxyhpsgJhcheKLtdSCjBLphuQbZwRfsdP6kLJFMUN RY0k8OSZqQAmKQZfOlw07OO/HMvI9yFK/inQnrDHQkNvKhAZCC113EOyxBBcaIzlApEq hciyVq081ZIFjG1Kj8tP3Zk6Pqrqob2JlBHaannAZ1s/ur/94zxAJvK7MwEgiE2ez0FW 652o+hDCVMuUBrBJE4PotAACvbG40+8ZKJSSa271jQawM7z/JSgI81hLrTBKy1vMzhfD X5fsQhaCEZV9hrQaJxC5rop7daZbUUzn2+WbjPLK8KM1wg1Wkfs", "x5c": "MIIUjTCCB4qgAwIBAgIUaUSbJBUd/pnAV6lcQfEEjLrDs98wCwYJYIZIAWUD BAMSMD0xDTALBgNVBAoMBElFVEYxDjAMBgNVBAsMBUxBTVBTMRwwGgYDVQQDDBNDb21w b3NpdGUgTUwtS0VNIENBMB4XDTI1MTEwNjEwMDExMVoXDTM1MTEwNzEwMDExMVowVDEN MAsGA1UECgwESUVURjEOMAwGA1UECwwFTEFNUFMxMzAxBgNVBAMMKmlkLU1MS0VNMTAy NC1FQ0RILWJyYWlucG9vbFAzODRyMS1TSEEzLTI1NjCCBpUwDQYLYIZIAYb6a1AFAl8D ggaCANmnL6ghMNc1eWmJrjmYFodLi27JB5E7wo31MybcsNLVXjYDVEMRUJ03at86V4FQ l8Ubf0hAKbXpLctHW0bIPl1xF56zcOdMhsprseJVXkjjLe61LDT1hLnBved6YqEzCmvm oE71uPW6YuRCEnslcde6yxJwItS6Nw7ojTs6q6YcBvvCIjgoFsl5aOpmW5ikScfHz+/L xIK0c0/VzqSTimX6TOO4FZWhJg0UEtHwpc0VN6pcv1WDCPtlOL7DpYsGPIgGeizFxx0a Ounsworth, et al. Expires 28 May 2026 [Page 117] Internet-Draft Composite ML-KEM November 2025 jR06LLEMc+xEZonSfRHBiRtmRHO8RLvKhDxLHmzWO+NRNM0KVypnouKapIWkP2oMz+/b n3aFtRZ6nIuXLrcjJjRjM06IFDpHYlA7QB86Nmx2OWfxdYP4WXBGHFD5FBsZz9UxSTdw OHYYyRsDzmZVEmg8iDsDFRcloLxnjlTgWddZQ3KUp1gxb9TbPEyHv6fgS9XkPRfbLff6 dqY3PphJRDGyL0sYGgu5vmh3CjR1fuMwIVqWcriQjgAUXwVbls3ppz3kS0lhjFM1ieT4 ZTFjbTMiVxQArKdbofVmQmBBCxi6OCk0wqS2f+3ky7VaGrfRiIrbE25xjwKnsbx0z9Ch jzl4ywmXJBJnq4dZiklSm42Ej+bIJqtTI/K2ldCUXxtyaKskwizrcE4grYbDeCFaidcM kCIlfe4YODOJyPRwj3bANdlGV/f5jRGDrNaAFP8sMi4yH0wLzCfqRPCIHZN1potqF137 JyumdqCzrbqoJ95QQHWKygGXIjGCCoIpT3qhE470GMcyBAdDFZFaFEt5F1tJbuTJIPQV lfiglKKpzjoVQEaFmvOXkNiErJ65ZqnkWCtpVQOSNOaFh7jmyrLprmzzwwirvh8kZF1p GxJZI0krBxC6BiAFkFOTyvNDPUmbR2YxsH6qZBwEzK3BhYG4II+Xmck3Ks+0IGH0NBRU zbMaSXDEludCVys6hJgUAaXZlB05B2AKAiWcPhRrsPoCslJWY2vRqk5QROlEFgGoc32G t9iivuvHvxbgyyRMWj1AHURjN1CTwBdkmitCG8eYWW/ir6eWpJ6XGjfpz4codUFYTUmk hbvLFbLnQ5xVQN6nuEFarTLbDWsHr/ShIp0RQAg0etBctSrCQc5QPuGhVAZGMKeKs66i lDSkU7p1zoiZlktbQLU1yfeEPyNZP0Rnhw+ZOc8ayn8Wbo6zKyNDZlwXkBvDkftXqQpU rvfUj4TZAZumdGOrifcbUPulS/S1pcWkpXATzRJzHlKiMTUqmAvDPLuFSvaxb5/KfYa5 D2n2OBrWg+ziVJVHFZtEn2b2FueWurhqBdNXZzrCCb5Jm/ZSivBYhCxlunHcCeCAVfxE eRQroX7CI+hEHRLMiFCsoev6Yo06qmqxsKEcD6Hoiuu6AyMZj8I1CTUAP0fzjUIqqL2I fLw1YzfYczFhhGIYrruHfXVSQdVDHQqYFFzXORGGKA8Lul/gZiF5G72wnzKZV/Yorft5 ixdVwzb7McOCxgFpsGzgCfQbQmeCBtfYF4QRy5+0RBEGH8WkAlnElYNcg7dwj/CDtmVS SG+cELAxan3xN2sYYU5BOGtImeDhlYeSGGXFxQ7gR6P8fGF4DUwIC8azlHwzJfbIocaW PL6GeuScQCm4VuvyTuanMUHiujT7gDRmuePbLSXKnrp3FUDHFOh8qPEZe8KJqrXJQfx5 B4JxNcRYxGs1ASRrNyg8FyMDZhyUEjmpTp7KnMN4YbAEsip1ha+VvwZQfmWUGpqRoT5a Udb5lAyEDkXJzfMHTr94Q5UpVK4Wz711Z7P2Q2LLpHs6Z5CIanLkM6bpdV6QWR/INkaM AcFMmCSskFHlEJpFqpu5DZGGpT3UZGH5SeH6fKFmmpeIsfL4A99mvxuHia94ez8TjRtF HCE6UxyFG/TRvCaaw0zRErzkMKscoabICYXIXii7XUgowS6YbkG2cEX7HT+pCyRTFDUW NJPDkmakAJikGXzpcNOzjvxzLyPchSv4p0J6wx0JDbyoQGQgtddxDssQQXGiM5QKRKoX IslatPNWSBYxtSo/LT92ZOj6q6qG9iZQR2mp5wGdbP7q//eM8QCbyuzMBIIhNns9BVuu dqPoQwlTLlAawSROD6LQAAr2xuNPvGSiUkmtu9Y0GsDO8/yUoCPNYS60wSstbzM4Xw1+ X7EIWghGVfYa0GicQua6Ke3WmW1FM59vlm4zyyvCjNcINVpH7KMSMBAwDgYDVR0PAQH/ BAQDAgUgMAsGCWCGSAFlAwQDEgOCDO4A/YfYcbvweFb/LzKFGQRaNiCJq8vHq92PqZP1 WSaQnEVJHp450t4p2OmFCD66YbLzzE0iZo5E+GFRPOI59+Sg50KIhTkFnxG98L7nS9oM Z/pgiZKGDG9I+avfQaf1ns3itfWFTETG83/yb3u+zfqBE2qSafofqiw3rjFDM3M2dUzI Xe3U0f93MTmrJqWYKB4mrCmNTdiaoyaIzPPf5GmWrwIipJFe4fwNdZ3f57gVg6HMKAYX jX3DrtOsiBohAHvuVAddoUyo4NbdMGoeLEbmIQalnpddniEucGWff9zfjP1TCX2Q0hqt nPufWU5FL7CjAyIwSRxx9jeiQqFK0nDdt8PgXrqw59jNZpybsPBMstEBfuy+qWSVi/Y6 AcCJjzX+O63JhpSFF66emwYaTMcsRav2ZHEZAC0Z/TOzVV+ejzw8sbzdbxTapKVw3T7M eyp+DIwLL/5GzOHatiXP3Fs2W+XB0WTPDErYZxkD3/99xDr3dEUg3JJOAm3Ddu2O0Niw Tv1Uhg7VXcrlur13I0/aQhWT8EYVeNLPuZPvvcAss8S/rq/CkawmjA/U1EToNvx+arND NF06cMuht1m8x8M18OgIgSCt7X5lg8wg6c5fjvwzPqOAglwWWpqvw6NMmk9YoqGJKGGJ 8LE8GbJ9suYoPGHq45p9RH1pEspKCrv6QeZy6YmxAEVS8yVpJWNXylRwALXIPPgCdByW nowFrsUtK+kpchuOxtW6ngUFAra/K0CVNuVAYNQupQd5fdtPfDwxwa+nN5q6N2ITXShu FCHqsLI9X9q+E7p6GIsGPCdZd8FmgdUv8l5BILi9NhWZqqf3hfzDGuF80FtxqnQ/FtWH uXZzCTA6P7aNnw9e9vCqptrpFTiTspTgQ4bWTwcv5G4IT9nzC62tGeaSJl65OgEGHk9j BELeYddI2My2lOlmyPU46DpaYKS5+nH+zeB8j2bGPzcF0QJKK+UIaiotwxqiYlOkXLkh /SzC+m+qTL8giLgxgvEtyMxUF6YwHnvgsuRX3DH0gV26Rl0nzX3gu76eS5qZwlMZ0lOH pisZsvw2KYMUWQuUMvvFk1PFA6/pojlHgvapkiUs7S/D8IbegOGTgd6rau2z+/OM90re JgGJYckk26BZM4bKm86uki09u2rytAh7yYPf7N2h+cmk3fgpcQ3f1joZF/ZZCQO7B3DA tXMoguKMA4QzTYsFfJmaahsFZIVb7Ii+3kFdMnrNfpE8AcM6XNdBoznWFM76T8HgdEjt Ounsworth, et al. Expires 28 May 2026 [Page 118] Internet-Draft Composite ML-KEM November 2025 b06kgmxcB8TND+PiTMhr6dPYqUgslcryJcb0ajNZyq8tAvr5Js3MDWHls18xuRvIoX6+ oHr9Xbxpq9zmtJZ4m2lcRI3kg4VBKmZzKRSwnTJHZ/I6xKWj8dpWPGSK0vlJ23xRrSsI 8dJSdmM0AbUdXrOa7KGm9P0ysdMhz46P/9oBf0fhYleBj6Ph7nnJpjnwVAxpwQLYxAM6 XoM75iyazB61UllVpQY6Whnb7dFzAbBYTtegPnNTPHmAt3EcB97eTN0L2TEHaWa7ZHKh U9z3AzJF6wGcccPt+l/dvQPInSQ+368SksNnic7rTJPGxPejWSF0vDDhYnA+i+YjP5MA xYUleom4xbRvcN2QBMBT1SREOTNMF+gNMRBiMGTI3Y8pJyxIsnLuiyOex4SIfFDfDw5p CUo5xoRPRzXzU6Hx5qJzfAUfVZXTp0yp8Kpluzkl5UZXpQ6Ng1LZvbR9OojZXTz0GmtM CrUf07J10qrTByhbGtxGpHI7fpzZq/fCkemq1fLgyQOsfx0CL5iAS2EiV0HJFRW5SjRe JACZNFd2+dXmthtm6Zcq3cGTa7PUXYkswIJWhrs7X2y4/8uzKb77WPcGeeTCq3rJw5E9 tbJU8LnISM+odruzsGczJlub+QvXBQTtm6r60MjpraqtjTFkEMfREkMaXM+6bNs/4pTQ A0kGmZ9WYp65VcbrsFZg22sTjYn1TcUxfkCUyU/Xeky7EJKgAh1IodpLHyrfOC+YBQjL uZvvn7uh0FbKY8R4kk4o0Zpv6eYrfztZhc7FeA523abFZI7h6nka0EJLCtfblZ85LLmU +jAbWMoXt1Kw80o9Zo8/mTWSI0IAlmgH1CZbUZU+xr33tOlsmWQt/KYtFU7R5LyglFs/ I0628OKAp04fvw+eGFauwHyuubJ4Q9yQLpsC2xOqVVtXv7JaveNGzhHs4a9umae2JgnO lQQobS/c8ezV59+3PjU/OfrN//KPpxwdlxNVy4kIk9QaZNcT841MlAhl8PwqAE6rqBTQ e/6mNp7w3e0zo4ngib/QqLX1ITLuyEaDcicuWIOb4YB/CUYZm8M3MMIwzFQrbz8s5ZRw HtinrDmMgRuWdQNwjAUY7+cyvIu4PqcDttpuuT8zKJEBtZ6jOVAU7JwUUAaem8mlPfti r5dZgbLKhYxqBxBQiloOaX30HmMqSejwYkXCr0gY8GASEjeEaYA6YAGvEoVo51tmYVyL 3jiaFCtpzv6XoGODztzgGj+Og/+3VhbHF1jV5uwu21F9enfdHEFchf4WoXV5O6GVvbeU f1Z/m1CUjEuCYfhV+IO17HIQkcrxmw34R7QUx4lcjbOtfOqsXQeOfCFTtpQErS9CZHEW lAXy4UjRXvI1ftpHUlgOeXPYnxq8t9WOmn/fuzkFxYsqKvXECDPOYPFXZsC8nXiSy50h YIdc+CSf9y4cZ90yaVBXW3P3c+eBdJjID92adQQoEx9+jQ3w/JbsVvxv2BtNKjJmZAaJ 0H92TtWYTLGuleccwqf6LDT5c8Hepx2AeVC3D5zK4u7GQRsEJs+d67eQK+sWFhaSrMZJ j1y9PE9ln4s9HdL8ASKC7z/OUlAZkYyiKJ9on1N+Mv0S16nkwGBzEkVg96lW3HoWkscR g01un4QwcrKsqAxfF41CDi/rCwFeykSHlruDxd7C6gFvHkh7CgCx5EBOwmySeeof7QYf /LkltvmsOhNkzumWrnKRAtgvF+Kbnn4PgO5qybL4WH/2k1sCjOrv2q6iIEcv/qiGgqKJ 6qam+BDFkZ3uvj1NipgfeNskjOa6Su8NiWZ+lisIDFRRpT1gLhcLuwlpDWLroyI0MaBx 1t7wvdlpd/I+yOzJdKEWMQ2Gt7XxIvH25Dr+t1FgRgjeNvKyqatM8rdTQbFzgSf/eIb9 aD8NrybWI+iwJb0X+/4wmpgAJ4sALD0prwWxAnLDXOBTikBsOFO7txtJaVUmZXXZWyRA 3PT6imtpKoXaVmfFgLSBn6LdTlBt1hBc7agZlFmeMR/bH3101jsxbI3AE0anVrqz1DVo 0Jh9ZttPZuz/Ey7pMQjKbw1PO2uvTt1AIYmW28yzFm9antL59FaL1QQJAoUKDIErJs42 9NnV20ndYJ0/JqH0TUbc2lVM1z73nrWRqQaD+0kUCzOuNVXEgeCFdyW/fmiPCnfocSKL HC8x+V8MnDpLl4hFpCK2jYjfSqKoqe08JNXQQrmfaBx/fZmjbUKIhyMidlZJLe/zqN36 Vi08Gw9zDXTpCJchmTMOvxzUHyNlRMlCT1KoMQxJ6z1Rrmi69RjF3kJHGAUt2FNHg7Zp hgVsMmDL1Fwz0SEGbpdb9ukESfbUv/XtODqaLeWs9BMrlAhRs/ktMdRqH6cCuSPjwJTZ jfgX3k8k9b/8zT5+hZ8oK0S7ZhDHqEMW6HymGof5b7hRR2YCfrWSqyhxdO5aw1FZVIdM FNsJxp8q4gNPxoFT0sBb39N6eTLpilewjuGgudZPyXOOxmbNXG4RQ/LTL60KuNJ9B+VJ b8QrD19M1EEgtj4HQNJppldJqUHMdm64XhbUdId9vtZJkGRvhHjtk4Nsq6dxDq8OZIb+ QzoShyS8hCUp4kpPCn59N1nt7oyl3YsAZdGzkJoMqTRikCrz+Hu2R4pb9vqsukUfc5eH oM1QtGMl7TNvd0yCz35TjI0Tn7Czg/9+0p2JVK82xBgI60ggeDDmIi8zfHKSpf4x6nSQ 9NJOOII+tA9Lkn1bnjzbKQfd4xDzE7Xz7qgVqbEp95x8Pcezmv4g4wgII5AvS0wimy6O WgPZz5VLjQABJWx03Qe44i8ZPShiXYzD+IVqpn46Rgmso6ngKXgop1QptTnV0pS9snUN Sf/WorMf6rAM5Q/pkYHD7vgK+ApIrqmvrZEqU4qr+mTwpWAPgLOCjW3jlERuctjguYw0 IiVkuYqZoVOPQaYYoi6YWv69RHsT7oOPELiLJLse4kXECqHsmw/4mhcAaUa9sXpD888P 0XM/Hil3PiEmoxiXWrCHPxDMhzbwWiXRU0VX4FCm/LBmz4AHKfnkmcvdaQ8irRer9rKf 8QaIYgqvRhQ+g8X7HzY6W3mF5TdOboCDl8Lc7vwIOIQJEE5gZNL1DhQ/SUqEl5+l/wAA AAAAAAAAAAAAAAAABAsVGB8p", "dk": "GwDBoMtig3sqf7+8yAoQ+9r7q1G1ASzjxFLXE/w5WOHJ8nAu5GPPAJN8FSBVJ Ounsworth, et al. Expires 28 May 2026 [Page 119] Internet-Draft Composite ML-KEM November 2025 Gh+ukIqmZil12Oyp1l6bc7dkzBCAgEBBDCI7DczbmQPu9sQ9so6AJvPZlPE8E4geXDFx AatG7zxjyZLoXdvMG7uZYQk/RmkOVWgCwYJKyQDAwIIAQEL", "dk_pkcs8": "MIGZAgEAMA0GC2CGSAGG+mtQBQJfBIGEGwDBoMtig3sqf7+8yAoQ+9r 7q1G1ASzjxFLXE/w5WOHJ8nAu5GPPAJN8FSBVJGh+ukIqmZil12Oyp1l6bc7dkzBCAgE BBDCI7DczbmQPu9sQ9so6AJvPZlPE8E4geXDFxAatG7zxjyZLoXdvMG7uZYQk/RmkOVW gCwYJKyQDAwIIAQEL", "c": "DcnHu4C19OSQIlhBVBF3hU+oJk1FJIU61KLeAT+g6PMy1Uqt2DBBf8W4SQqwDP FtF3sizs92Yfl5kO2Ckq5PQhyeUO6xXxPePWFxw3iM8R2xkathfCK3pGp4RyUPsW/fgR nMVdXnLvOn7QoGIx8BXnjPFjRKVmx36jKPqwJNT8cnypg6vwm2+qh0h3cAbl1rDv6vQ1 aBnJwfSnSaZXXIUfj1Aa1kTBmQH9FrA4MgS5mVTcOqJo7En6nqEkfjMgfu1N+6lc31BT SyEYx/W/GL5rN5sSUL4l2LgTNpAz9pRu6tY3nxo+5zvmt4PEV3kGaRRAvasaO/2F6oBC jOUG+hFdt3HtKuxEzBkkkEjTsG8Xat8EOvD9qV/z5EWPkUYEDdN2ynaysU0SEWe82cVY m+RRGG/Dpy+GNG3Nf5p3L3Vfz2O1sO+N4rWo5zBQeuBuHqbLoZKzfEFhS/8NYHXQMCZS VjQ2RdF9MPVFQmoMMWJ+Pw/kC8wMootGt3PCcqusA/EhDZn5Fv2hZG/IQpWqpm+oUPzf nlBMvk/j6fcAQ2ccln5NLlOupvi9HuNKZ2565bxV6WuL6Vikkay1mEwLRnn+fpMWmwqA K/vmD6IlM3hy8rfxk0uhx4+lYamKpCFOv0jOyXN9935dewmunGNtsA3RJLPPjFc+UcVO XUjtTJhw5CqQL5FmtgugPxdWiegIQC6c1E8W2T2pV/L4vC0NdRrJPVvp3Kej2MSqjigM 4QHTCcPDer6XCdzGbvOu8lytOreFNXh2fBhOZvzhpVaAJepJMsPrXkZxq2akv3zseRGH e/SN/gMu8+QP3MxJ9Sn1M7pi4eezsXQx7DYclMB55jSh4BWcFt3/ZWwp27775pw4cu2l /gRsRNMi2ZY57cLqUxV46fIKh5pNFn+NVEPdpbvaupoGXpfq3IvYzPZxiJ8PgTR+jOAd sPjTyN8c8Ob+I3BQ0qPw1/Ld7la45hgfJB71WWxBb0dkwWMG9sfTmxH2G/EfZ2XV8vCT 1NA2BTKqN6FdfPS/ewxAnLZUGomJVzobcWp3zPFvBFxTyfA/JTPSmSoJ5dFfK6iXjrd8 eaca82aTlDgdcHj8h0qPtlj/4BMnbUU1IQzB1qo9GqXA9yfzEP3s9yGoP62d8IDxdUif J8+NrFeEpCq7EHXZtPmJJf1HQ3bMPSaNN0fOLcVWLzFD2hPP0rQiwLXen3CbQ0iIQD0J VNHnP57Mw6SiHpc83X6391F3eLmDVAVoeCpPisj/ntPFGRDJd+S3jZI6dLAlEsoBjwy9 17dKwE02OVGjgQOX2oH3sbbQEBmvHrN1UfLMEUjEALSNiqzQyMQ+4IUGXqP9BkaB/jTB i3xiaXr0c1mnn5I/wXha9nx1UaEbCKDnqURQieGm5s+Jg742Ghcn27FpAefQe/3ibwZV kxX2crsxpVurdrBrUTg3JCPt1EWbQ37s+5QOgJtklfKyOHY7zp63MosFy8HNqfogUirL QcYDnDKV/1FdKBzpAyH8PNdAj5IDglxyFJJ2nLMti26M9KFaV/zhR+mea9JRqvngZdN4 g/FcqdVHipnIEDklJ02WED19uWl2ElqNEUY9RlNayW3qH1t+j+Ng2gan3kLTeIi5O9OZ MeoocV8DBTCLeyYJRpzSyy8IR4LM5S6s+zgvvIw9gQdHWnCV9wgEleXp8zFYqXM72S5x vUjSkiP2wDXssmOey85SO1hXQrnywslGUxiM3RPA8MXQEhNZRV1q/hjBKulHbDWN8gUe 7LCH5ExRhPUn5HTKohDS50IO3Px41LBQ95vCmHPTvEtM1KO8hTQ5mZ3fhQTS28ZEF7je 5aIxxHO6ZC4/QBO24nHWneOHaltcw5zgJB4hrQPSnjF/V22yLtanXvcHmphzkAHMvPlR vtNaF5+KqKqZ+mp/FV+4jD8GJpTvRrebyuQi5f0NQSNB3eeFnB7Rak0VdtfQiFCVOq5l XAK/doK3iy7xJbhYhQbAxuBgOvgZvdSG7Iu3VbjwDviWJhaAupGfSpU+WpSPYNYBfL2V wgj1OS4RgSxjl72koK0Df0BENwx3gsoXPygOI64QeLzb3y8NrDLXPxRvwEAPcPxGwU80 ejivlHRmGhFcfqwAMum6GKRGpiUXr7aPryA343Zuo3bS4yJNI6Ri+HOtrYdsSegzH8Sh 63vCRjlG1mkGvN1vEsjXunEAftK0jtoByrniwZhCqC2tuXb/vl", "k": "iamSiVnBBQIrM6RiZF5V5DBvPFjSCXmEm2pyEWtmtO4=" }, { "tcId": "id-MLKEM1024-X448-SHA3-256", "ek": "//TOH1y4fAVKU3KrB0RJ6BhbJkJqXuoZ4NkiBxVn8Gwl5MXNLwhDDSUvmdoQc 6kh2FBTK/dV76aiUPwYWSlZU0ZX/RcKH/RcXMJhcYeyxOyGrTcuUkbDFOcuiJasmig5O EheA/J5t+N/7JJuDvQYgMq249GTjQuEVNM9g9OSAoUOiAYSXTJ4YFYH3anB2lYAcAs84 HRDvbWCxXYffSh0ybIL6YZIXJC/VKG0+2cl5wO621MbDDnAV6c5L6QxZ8g5TojCbgclf LST9rco1iKdG6MXmKAhpesIUWujD2VkhZIyRfQ2bkoxdNVv6xSBddAFxIcydMJsVTd4n Ounsworth, et al. Expires 28 May 2026 [Page 120] Internet-Draft Composite ML-KEM November 2025 jdZD5w2YpMFVeDK74E4K/JaPgZelwBDcbE03TpbNzei3UpxKwu9/VYzFBIDiOOSwbKB+ cC925zEmihAu1qqMnUL8ZXMjkkI01kF2EF2+bgiBJuxxtyH/cGsgdCTvhBQHdG4ZfKwJ 2nOWAeqf2FeffmxfsOJkJNJ7ee2DWaOyZQsGZyA4yJnbkiB5qrL8BVzmLbBpeilBXUZI CcI9/y4oeO305VIDgh1FPWDkfkX2xEBzJGdOERyU0Z3BZWTEtGjbLlghlQCn3K0YdZdu mnCY9ADjkww/KqtqXKCCTlrRSB365Oz1QFRGWEFpChhlSGN9IcyyjPEN6cCYGywkXTLo hyDoDCyr6C807Y5J8ZyoWyUCux75XSI7+d5z9yXohK9/ZxMgLFWC/HI+5MJgGVX6kyHh ORuX4WgjEa4WeGyN2gjFICWiEc+EzvAsWClTbNRTvmuiRBFcFQQULDIQSSliKaqkFV/Y pNc9vanXBAxADAb+OkJVAZomRckw1oMI2qw+kVpW+AWjrh1igiv8ZPPtvA8WMpZlsiRz hapcwib8+Z2N+QgS6DAbBCuWvGE2VRAe6JNm4NhHRXOcTlp7MuLsyYgToSOrPIIPUZEd 8Y5K0mLeKGsoKfDMkJJS2cuRPZEAdRIDXcl4UC73nZ3N8Q11SJKrkczZZdZIaPNTyG1l bAXPuV04BVZIIUNR/iREuufW0kGhBq49zKqNBlXlKHKbqQAV1NMZXFjYNyFqgG+m8tQc lfLd7OT3gQVRKghM6FTT1GVyUkq1kLJZhyG0MhN9gZmXsQ/wisVfPLK//F7A7uCrKZ1i 8t58PdVvgBBGpaMIXVUgdoKxwoaKRFVsBrFLvg7MnBrOosLzYUTX8jEpCCNkxu1oIUKp SAtMxVti0Jb/7OovzAIBMWO5euREGayJOoH9TYRRsVrkFmA04Z0tbXJzldr5/xj0gwdE LRkNfRkYzEcOXRyYGEqVGKcj1MrGWTL2SOtxQFLIEU6/Fm5pYuzEfp/BiLHTpQv+AQWa ItKK2J1G6YsaOeVWEML3YwaL8mrQawaCXkRI2teTxlpKXPOcDEV6vrNlHkLmwGrphIqT AYoFzUrWOMTxbAp+NtViaOdBiSci1KPquZ5jaUeF6Gr7LJvllqELOfMyNEK7WfMsYap4 zxFeylotvh/yGtcfbxo4wNVIFOIyiEfM2SFxJM9VKZfITotrYeElEVadFIMcBF9kcc4C 8KVlDRPtqPE0RO7NGZ6zOw0D6OrJ3RazkTFfUEsBfKns7kc5ZkLPHa6BRrK1Tll2vRD5 yAqsAQYpxpAu9RjHKNugKI9ZbAnJTebQte7exA/26QsmBB5YAx5FdiSEVsptKKDiMMc+ cN958NrsthX8MknhlaNXcaQa9Q+roKnK4upEhAXvpt6xvLIeVGrXzCz4UZrFsxMkAuwS fohD+FxBONIfkZlu3lDFOQPXZAGzBNfF2k0diC7PoBOCkgalPKxPLEvaIBssJBuRnGwX ZGsOzECj1uEFcs034EPKOPK80e+5jdJcdlO0fC34aOsoruNduBtcWnGwEGqTXTL1YgJA /JeVSw7pUHHA6O6QYtSoftktleXqGRKtByPnWnJpPnL87yXS2sduwlFXAfQsmdQ7EjPH ko9wkpeW7oK6JBy3xQClzSAsetM9XsFLoC0HPDJn7iQyPZOxtgt57o3vEZYy6atONUFu Ia6RBKo+yKY6egzUoxIWswuE5b3DLEax73ytW41pEtXP6NP6eWTWGJ4YldyiRXXoXfjK 0YdDSXqckxSULzGa6yjUKF8im3Qg9XezCOTvMMl59AUp9Ce3OVSVXpBR38HP1LPqg==" , "x5c": "MIIUVDCCB1GgAwIBAgIUaP+k29OG/vRrJEbm1l+VbGEZWtkwCwYJYIZIAWUD BAMSMD0xDTALBgNVBAoMBElFVEYxDjAMBgNVBAsMBUxBTVBTMRwwGgYDVQQDDBNDb21w b3NpdGUgTUwtS0VNIENBMB4XDTI1MTEwNjEwMDExMVoXDTM1MTEwNzEwMDExMVowRDEN MAsGA1UECgwESUVURjEOMAwGA1UECwwFTEFNUFMxIzAhBgNVBAMMGmlkLU1MS0VNMTAy NC1YNDQ4LVNIQTMtMjU2MIIGbDANBgtghkgBhvprUAUCYAOCBlkA//TOH1y4fAVKU3Kr B0RJ6BhbJkJqXuoZ4NkiBxVn8Gwl5MXNLwhDDSUvmdoQc6kh2FBTK/dV76aiUPwYWSlZ U0ZX/RcKH/RcXMJhcYeyxOyGrTcuUkbDFOcuiJasmig5OEheA/J5t+N/7JJuDvQYgMq2 49GTjQuEVNM9g9OSAoUOiAYSXTJ4YFYH3anB2lYAcAs84HRDvbWCxXYffSh0ybIL6YZI XJC/VKG0+2cl5wO621MbDDnAV6c5L6QxZ8g5TojCbgclfLST9rco1iKdG6MXmKAhpesI UWujD2VkhZIyRfQ2bkoxdNVv6xSBddAFxIcydMJsVTd4njdZD5w2YpMFVeDK74E4K/Ja PgZelwBDcbE03TpbNzei3UpxKwu9/VYzFBIDiOOSwbKB+cC925zEmihAu1qqMnUL8ZXM jkkI01kF2EF2+bgiBJuxxtyH/cGsgdCTvhBQHdG4ZfKwJ2nOWAeqf2FeffmxfsOJkJNJ 7ee2DWaOyZQsGZyA4yJnbkiB5qrL8BVzmLbBpeilBXUZICcI9/y4oeO305VIDgh1FPWD kfkX2xEBzJGdOERyU0Z3BZWTEtGjbLlghlQCn3K0YdZdumnCY9ADjkww/KqtqXKCCTlr RSB365Oz1QFRGWEFpChhlSGN9IcyyjPEN6cCYGywkXTLohyDoDCyr6C807Y5J8ZyoWyU Cux75XSI7+d5z9yXohK9/ZxMgLFWC/HI+5MJgGVX6kyHhORuX4WgjEa4WeGyN2gjFICW iEc+EzvAsWClTbNRTvmuiRBFcFQQULDIQSSliKaqkFV/YpNc9vanXBAxADAb+OkJVAZo mRckw1oMI2qw+kVpW+AWjrh1igiv8ZPPtvA8WMpZlsiRzhapcwib8+Z2N+QgS6DAbBCu WvGE2VRAe6JNm4NhHRXOcTlp7MuLsyYgToSOrPIIPUZEd8Y5K0mLeKGsoKfDMkJJS2cu RPZEAdRIDXcl4UC73nZ3N8Q11SJKrkczZZdZIaPNTyG1lbAXPuV04BVZIIUNR/iREuuf Ounsworth, et al. Expires 28 May 2026 [Page 121] Internet-Draft Composite ML-KEM November 2025 W0kGhBq49zKqNBlXlKHKbqQAV1NMZXFjYNyFqgG+m8tQclfLd7OT3gQVRKghM6FTT1GV yUkq1kLJZhyG0MhN9gZmXsQ/wisVfPLK//F7A7uCrKZ1i8t58PdVvgBBGpaMIXVUgdoK xwoaKRFVsBrFLvg7MnBrOosLzYUTX8jEpCCNkxu1oIUKpSAtMxVti0Jb/7OovzAIBMWO 5euREGayJOoH9TYRRsVrkFmA04Z0tbXJzldr5/xj0gwdELRkNfRkYzEcOXRyYGEqVGKc j1MrGWTL2SOtxQFLIEU6/Fm5pYuzEfp/BiLHTpQv+AQWaItKK2J1G6YsaOeVWEML3Ywa L8mrQawaCXkRI2teTxlpKXPOcDEV6vrNlHkLmwGrphIqTAYoFzUrWOMTxbAp+NtViaOd BiSci1KPquZ5jaUeF6Gr7LJvllqELOfMyNEK7WfMsYap4zxFeylotvh/yGtcfbxo4wNV IFOIyiEfM2SFxJM9VKZfITotrYeElEVadFIMcBF9kcc4C8KVlDRPtqPE0RO7NGZ6zOw0 D6OrJ3RazkTFfUEsBfKns7kc5ZkLPHa6BRrK1Tll2vRD5yAqsAQYpxpAu9RjHKNugKI9 ZbAnJTebQte7exA/26QsmBB5YAx5FdiSEVsptKKDiMMc+cN958NrsthX8MknhlaNXcaQ a9Q+roKnK4upEhAXvpt6xvLIeVGrXzCz4UZrFsxMkAuwSfohD+FxBONIfkZlu3lDFOQP XZAGzBNfF2k0diC7PoBOCkgalPKxPLEvaIBssJBuRnGwXZGsOzECj1uEFcs034EPKOPK 80e+5jdJcdlO0fC34aOsoruNduBtcWnGwEGqTXTL1YgJA/JeVSw7pUHHA6O6QYtSoftk tleXqGRKtByPnWnJpPnL87yXS2sduwlFXAfQsmdQ7EjPHko9wkpeW7oK6JBy3xQClzSA setM9XsFLoC0HPDJn7iQyPZOxtgt57o3vEZYy6atONUFuIa6RBKo+yKY6egzUoxIWswu E5b3DLEax73ytW41pEtXP6NP6eWTWGJ4YldyiRXXoXfjK0YdDSXqckxSULzGa6yjUKF8 im3Qg9XezCOTvMMl59AUp9Ce3OVSVXpBR38HP1LPqqMSMBAwDgYDVR0PAQH/BAQDAgUg MAsGCWCGSAFlAwQDEgOCDO4AmnVaPF8iUrm+78j+OGdUjS1gB45WgJaxCb9nHWomrXRd /Ic66XwoBl/exAKGHZ5aKaCXZ6HQP1P8xSIXJ9HRVE8x668COZvo2fkZLHKsDPMi/8zr WXLHHWac+kb0PQQ2mHuwvCFa4KD0Aedsa23u2Ws+Y68Tv8sikwZ4Z7WYRcH8nvjc5+FH QaFVzsF4yYK2/GEn35a04c0iWxuePJS4aoakzeTcvI2TPctl1UHgf97joglt1R64q7Hm 1vRqIq81bLK9tRZF0O1j/MIguahihbyxy/0q8BvH083l7h8vC2QLkyIbIalOiTKuVfTf u1TpC4ijEByuZRuj8qVEF9reBP5ZNtoWagpCuEW+2QSMHTLRJMb+VUN48EcsKiYu9stp vy1V7CoqJkDT8eSq5aEjIpbqO9Puxu9RBSaQbrOAZM+AMNS1KnXZRePC2jqw7ADpQpYR KbPe/PmvNKi93FufnNlChC3rk7Y2S6WE3UvXNguM0xZabeVAe/acv37hKUA0MwEJz+Bq kwqKMGnvdICZVGfb6RLjkPWTba6aFCclfk8ogvDn8I9Mak4MqfIZlVWLcB7iQAZWxtcQ kqbBXIdUg+XJESy5RMfkus6MntEfii8UdOdjZfLmmXrYMkkbF3XjaQETjSkMxw1bvwNO aL6CfHzN2DKr8PooR5dJdUu4WMtb5m1qsvoPne8SpjKlriqnM5BymQJQJ78Dn7dU3DyH Hft/MjS4vhRqyahZtL0ky9gkksxket3bLe7XWiv3snS7y/aAWrtH1GGFh583HOkqQqDh /FdjytS07ZZpMrAkETzbgmN3pO9TOKUSaWnOfsgYOESyA3OC2cZGmH4TSO23QYEvoFKQ oItF3Gu2w2+aBDevy16QARkrIygei/SeD3KZZIPf3OZJkuu8y9vpYqbbsYGkjqXNjk8z wBmPI39abkQ9wLqswZtwxz4i2Q/wDanlglQxoEPXqHwLwuT4+5edJ3C17kBS3Lcet3RW olQHl5un/h8O5K9aqe9aSwolMJNoTITWaNQEnDj7b5W4JJMs59feb6zIqeVK7lmKAUY1 nGa9B3SzfBKAoCBofAjifhs+pR5LhxOdk6PqC83sHpiSHszT5oTErdOYnyseD6rePWmG f4rc9bfkZ4XXjcrS0FlQxe3ZkgLHXYXOlXi0npylkzFANyKlp4LOmEktr4xDvBSaZVXw m8Z07sbY9ZLm3EICBLM8AjS2KgLuqLhs/siyGONYGuXCYPfwS+qiTwlTTYfnM/kcOYqY gkJ5N6mtXPnCkBjDf1zfFd5J8HeQFW1W7q/bmzoDdOfdiSATmBAYHt6GKrsrfVoMIP9/ hY8aZi/vuddc6SnWOyB3uVt5mqbCnYM7Spy5R/nvi6513lu0RR+1W6wRt1vxEhgjI+rt TW0oOh9COmu697aIDuGDYl1Zl7jWgTvqa7GjlUgaRGDJYZICe+jMrD+S73AyNAKjo/HG mFLPqJaVmjw/U7ClbWiNdbKa9yRzS6YjtGjwvDBRh/o0IU3ghNWL4uVt6nHFYulmxlbd dG//4wOkHeTD+cQa3UVQmWb3MhOp43lbb1QFnk0VYzg/eGFSLzayvTBTcWnYsfLaSlzc sHZ9wRP32YWymiKGsjerdpaAzBQMMX57nkx8LRk3wnn7GJ2GKObOUhEsQemjy5jD7PvG OD0Gk0qcjj6T78NwxKiMW7NyXacMwGchS6gZA4ODMF4azVmdDbJBrB1YAfBEpMOrK3Ve NyhF8z5HzwOf2IhEv8vrg/xfJ3O5EGplARy3ie8RpyRZwY/4v2awHwnT6KOR69fD5j1S fFSEAt+uqhRyDbsgH5lA0vOYIoRVW6cfI/39FXc+rUI14CCyZEaT5zLFtBa5dDPow2Q4 9brVVmaxhWW96aRBQcBGnIfCfF9ZdQy0rD7GCkW8ac/FgV6dGxCdgLDZWUeN9Qbj3UdK 0lDjGHWJREfxoV1McYTSXiqm9sSYJ37Iqv+xQ7PECU4lFbns/AAWC0pwEIk2IY7AzRDn quhZBxv7XSNVeOFV7o7oaGar35okeHwUNd+kbcaI9ZntGDBv62ZKwpOEHOpT8UOxZOzV Ounsworth, et al. Expires 28 May 2026 [Page 122] Internet-Draft Composite ML-KEM November 2025 /bbZ/CmKlt0HPVqIzzqEw4Q8P85CpPhAKQv8vquo2SnrVT77uhuaeiUU5ivc0XAY1tff 1fWVi7RHHyx7qaKOdeYEfzGzDy7pO6OmTVpIn3k2D8Z5rIH4RCorOouOAOcFdvUN0Uqh /QEUGsNzIm2979jIOZSnCiwI3KDxmvb7/MsW95Q6mZO+0YuKYcgifp3W3DB+2wxqvg/2 qUEsGOwhDwEGbdF7MJK8Htaip9tqeH6yc2pd8gAwB1C0MwSkmnpp5QfEh/pruWtNSdmG MaAwv2CaheC/CDFk8cEMitX+JIkGV+v47dBxQLr13u3Z/jdPr8M1mEwWR/YV9wgMrj7+ 1mXj7XAvA7+cXqWqVqpROee/Y5A6N6Q0BQL51q0d4g/K/3R9cOycBPtaSH71dvhfZEVV lO7cLKW2kwxvb7BOsjjqIoaLXExS7O8b6mu+uPJ3DE5dEBVfSyI5txoAfLjkM1NgAKPo Q89Fim5mP9S1w2ExcQWHUmVlwIaL1AabMzWk64jhF9zSFOFCGuLwPYRDxoRT+oQJI973 /8DtsSBXPVw7szUehzkd93MXgzNxYWztMyKtAF8N400TcUneMgyQR2gKQgIYZnKdDkG6 THEkDKCCb2JnmM3uxpqGzBjvFvUoxsoRse3gK8PsJPcEPa7Wc+Ry1PWDmMdufqYFsorw T8aNfDa1kKKj6ymU1jdcv3QlVdSsgd1mRE5egugHqi55sq56UdPQd7wttUMqbIbTxMlM HQo+fxZ+ZY/dQfNSyyMuHbuaBzv8mut/qJj32xtJZnAM561TC69gCTcQPpo8GViqQJmX j6zKqpNDDJxO+4Oeajcq3llXjs8rpMHK3t4CTeI494OiqfHjzwYh8cuv8WFNkJ1l8Oj8 +d9OxSLv451DuIyHpYyDVh9f0PsDWOxZEN0cSocJnfA5ioTbGMqMEeUXBzgFJ2lVVIbz dqz4Xww2YEJPBXCE1d7VjDCJpAvuG2D/RfXKX1eBX1bhIEnFKY9bUPGK8rMGQyEd31fy X/8oAnpHo34MSapF2vVdXZAHr8dtS3aQstsABJpUulcDTP00/63B3JZT4dSIXKu1dR9K gKkBb8H5dy4C3KECunV5eK6yXTfMmyGp6KmDevpMxcfrj8yhusIRXFiEMpIczvtox0Dn QLo/A761v66eKXBIG+pCYLIS0KvTSUQa/XAMIvdk6tmCVFprwUld/4m+4gbgBy++Llj6 /FC12+0BvO02ZMTecvF4peMDR1e648whUkKvR+k1PGPd53uwdyqSYQum55YGA7ho4QLA 1BifSARQhtw9LWY0iiPZFFWd4qVjZ1gy26TwBaX2UJEYxctzwA1Mk9p4CzZOeT8qjzEa 7F80bhEHgsSEJTcNPsY9lsnZRVMOJxFdCT0FZZNi5qtOM/Q6AVGST/PvJOaHD64T2oic H6ZRXjpuURdul+k5oa3+TGZp2tPqzGyjYfFkmFOq8/M/rBgzs1/r3kBQgpUNaN2Q24Lf +8ZoRzJDFUQ68X4rpFg+hYfmLFg84iZTbaOslvAZvorh2YybyX+V3/hJebX6I5KOKlP7 a3gdCCOuxcaWyN18ZBkckH4SPls6btyWfxdaYYwNBfLSyzXjqDM3DZ6emNpYK4r4wcEI XSCh9Z5dUScMJlIGw+lXO43cIo59jcSAL//asWny9ZgHAbpEdspaAnmCbVMGpACAMWmm BpqBZ9dNh2p0muoxXcObG6hNpK09AfHTo8vsI+eAbxu2JbiN4mdNBeopWp/sEZC3BGYS wambdI2c5h0ike1CoPpN520aOIawSbPywpAEu7zyoPaohGFWefByQ5sK+iqAtgmAFzU5 qADZxeiBOfB11iXvTxyluQnMpEPke1Iia4szggcD7GrMERFQNg4+pLrcPamPvb50vVSX b/7QlJtXSGwrxEMeRdh+mwJopttZcsoxGJiCZyyFa5WIVdZVSkPC5ANJsjVedqih4kV5 /NtneSc1FQn//5Ano4Zb6kdVAtSdknsgS51sQNWoUpHOEAdDq37Jn+iRD7tpgCVr5GQ4 /9ZP85WOVt3W66e55u/AcDHDDHbtFg3/kb7O7CY4cNYRTDkNpZYyr0Ilx/7Slq9cNsux 6K06rhTNtOyrSzyAOx9+Bjwna7XE6oovuLmDc03uGqZPbUNHr3ctBWQFh8ZqhdWelnF1 ecQo5TBc0BF9KAAFXSzunPTtfiQ8xTaMb99sA7o6FswOHrc9Yd1mX/H7i7+xHMSJmdKL cTM4nJ/Lz/wLDBIlSFyCjNjgDxEuMTqLkZ6fo9RBkZq3ydU7RUxNW5Gb3N4iR2hxAAAA AAAAAAAABhAbISou", "dk": "lK0eQYttm2IYFF0inFR3ZuAkmB3rPvLDUv0YDA/PYgDjwH1lcOkbs04qBfQnk 8JOu4I/GI3bY8Ac2ZziItSUz5w8qubZpQa8/Hu8TyjiRr8y7R8vgc+YZ1RnMC8Mu0q4l t8lW0zVC6mxZ2CvSjPpJyquI4fQmo6P", "dk_pkcs8": "MIGMAgEAMA0GC2CGSAGG+mtQBQJgBHiUrR5Bi22bYhgUXSKcVHdm4CS YHes+8sNS/RgMD89iAOPAfWVw6RuzTioF9CeTwk67gj8YjdtjwBzZnOIi1JTPnDyq5tm lBrz8e7xPKOJGvzLtHy+Bz5hnVGcwLwy7SriW3yVbTNULqbFnYK9KM+knKq4jh9Cajo8 =", "c": "6QcjorUEPLxjG6wc+FuuvN8d0R0+HxkoI8zSG1fAFLW/k7oOTET1hwA/AWnem2 VqWV+fkipeg35AzoA5iO2q1Tnof/E1eW6A2H0bmvGv5QyvTuPHVkbtQxrZxZKq6TDSrN PvZhRDlLHpcVCM+B8h319kRMYl4j5x176j5O9VIzlYeo4U80ptBhoLgYX+EWc8CDQDPZ 9hbBSTcB3aa6eeBITCysTMNEm9rN1NFz3u+E5QEyCJyzPnaRc4M4Xs/8z3ioc5Fv3kON JWrIEMGz4MZhNE1FdK5HSTBMeDN37oWrySb77rDzdCrmxh354h8Z5kYbr1JE4E2lOW92 DMQDrLqXOpZDtUWA7Cjp36Ihc4bjN8Gqeobc5o0JlQx/I18efOhAHpCjczqPf3vhTMy8 Ounsworth, et al. Expires 28 May 2026 [Page 123] Internet-Draft Composite ML-KEM November 2025 QiPF7IQv+XX1aEELxgApfJz7L/VXmhqbddAhenbi1MYi8dfc+k+2T2M4saBsag57bcMN ZuWauOxCU5tgZ0/V9s90scZd1/zEuLRRcz4eqifYayS02sSMQXveRcLHhZhP+2omgtj4 BZj4JgwVaJbf5t6E3sbLy36Rj/xoLVJTjTzdPssyEM6TPmpDr6WnKntddR+6ohTwDHra /hEPnm+KwsSXqe8SDQwZSboYBKfFbP2FsstXPekpgtZ3gELQbPn0hGwiQEqZSEvGjoBJ YPVJIdJOVyAR8s1cv6QNeF0huFWFSASNYDFxR3Ap3y3veRzamE8SfvtI45FSpwJPUlL6 DTeWdPM5vPDLH0KsuBOCRZCdVY5HWEIz1EzBbH2nqDz+XbTv5Uf2cyQU8tlbQ4nqM+vh rXU0ldDEOzu5UJ/ZGeyp1aJH5ekBJcfLyQSuVTnZozPXiJSKHdOqSi8zhyyJ9OfJokZQ 9zDv6+8c7ubsVNyoxsmgNPTRrYn76Z1QiyIsWLoTe6mLSlTFHVOWwNuWS/W4DQb2BtXn U3drAJpTpbeGElVTClM+KBxYguqJgRdJE2SeXk26KFUDe4Qu5U+YMPh4RysXygv5B7tp 1nCCBLA+Wzy5+vp84c+UHsGaaDFBhE3ZXHCoT5vCkwkSA+P5gz538yp/E8Cax752kBgQ +O0H/OF1kRwG3EZMNQj9sCcsOngVPK0Bl1RXqOwN1Nnfhg2OwD6reG7Ti6QIcy8Ccl5M wwVqoHDN0y92HxtGFVNkprHQ6HY55RATHcuRFxx0/hW8j8aAvSgAeP9ylGdzuSaomwrz xQ0taUaADLMfOjwnsXcgFeqZxIrlEQPYLCJ7S9CbXHtPgk/p9si9dsheNZX4py/R2LJV +GkN4lLJNIEjzcT+OVZIaztzDAUZgtX3TP2zHohP9MZk7wwtaZR167ruKlNQOyH26JCD cFkxG3w+73PEH+mKltZMLxyNcocWxzm3GJjkpizpRk/c8gM/JGRUx3jMMNfct8r5LFeB jowXHP64Wl1G/gApV6zfXnvcKL5VjRx+JM7TRTagj9wJ2bxiZzOmxq8RmhLHIjkowC6z ObU4bqRNewGg0WiP+IKji5KscgQmTyjOKXvryIm2GfEE/tKAyDGTo9qGSgfnoMtPRfer n12o7Ul0iHBELaJQa3rIzGe1x8HBJFCVcHefyuZqkBNry2ZHdOjzrdCj6m0k4xKn9oEn vLnmqfJir2kbXtTqNlXu1CUV2tDJOcBvbtjfAKThfq3ohKIP1a8jZOw6ScijbbVB5b5L DvdAePBKsasj89e66AkN5vfLNpT0sJUA7v8DzBBugx+8iKpz1D8MNdDO9Gizv659sDDc X9n86gRXyLnmpPu6mxcSkoKrCoVopvjKssJO88sooNBkd9JKdXsRsd428+gMRtZ+zEY8 lizihaxZlvDkyxQi3PIP1ODDLLilmG3vGAgMmEDcImEoOSuUiimJpPKSxV+V1d7xksse i2KO6q3CCfv3HO7QjLUtBVlfYPG4I0xSKBaIwds3O39+kC3QbfVq4o07cJQyQOf73nF+ gVXbMpCWc+96c3nnD8jOZpKnVi3C9hGb+KREhwlnCRnkrGW7+ayY0gP1XjiapNhnBJ0n kYXtJCDw3YjkZ+QqSoqCcu3U4GvSW1Ka4PBTJeT7KtXX9Us0uJnDvJTUT/99ha4iVlZF wOotgowMuqKun3n4jOrjTJLjIq5MLiYM171kGmc8j//Wd6vJ3AbjEn6ngoSlZ+ZA==", "k": "Snw9WglEMAjMqI35CcMCVQ1JbFvlJ0xvepxs2Fok2n0=" }, { "tcId": "id-MLKEM1024-ECDH-P521-SHA3-256", "ek": "Cig5MLAxoraVm5LBPstYtYVftRCkNKsJ+GmY3dJgXMFRywgKshhkJmF0uqMeo zm80Eo66WsuARkmiWlLBRYfj7QBXYAew2JXdPJpmEVNe1aECspwgSatJCy4Mso1AIhX8 TIATeM3QNRPl/en6yU8EzNCdBqmPpQT+yq0CuaWVuJjvRWz5zbKUuBlWfzJVauc0pwCl 8VpVRYIHIB5CqMOR3Co9RSfh1xiK/FhxQQ4HdWp76HBq+FVRkBctOizhjcIc7Y5oUsoA apIsAmqzSFhYXtZtbtIYrWmc3I45xgvAbS7bcolhiNe6YwwuIdWwfMFnOK4wERgnSW/r bKn/De14Twp2hKOXSyyqruXgaxQWcxMR0tTmXtgKadQ5HOwPixG5ANGuys+osMs1SpU6 BuDAXGF+kKl5goS6Cmk1wQUGfE019WIlRdpS6WkTNy83yjL4YgOXwot8oe1BghkY2ykE RR+zedFaDso2YTIaGF37NcnZ3RQnzAew6QcYvxDjCRhfWy6dbAeFWYEkphHQigILrQDx GqVzNEj5WURs5El/iAs+yKnb2EAqWN1TQcPMZAHjMCSf/uVB7ppVFo5b7xu/eg+QEQh9 Duq2go18PxkFwzAKKM4GZFZvzwO36Wp2CVk0Vy1SKbLJQhpctSsUJFE/GFfj0WRLiFgo CAIg3gWHKOvxAt/HaJq+Bk3YtISoYvI/udMrvOPogcQO4Iij+hbBBSdZbxXGbg1wzSSO rZI0vqgbmGa67KB89lhL5NqASfCjoK6BWqXNrRu0udGwzCaNZmyE7Cu/sMT/9hGflCSH GI8aEOF/hMUFqED3iUDZ9ibVgi00WYjGdQKBxh7J2KNDDzGDaqDU+Qf0RGJiTBKTLcmd sMTvLN/HhJVO7OVsuKNnBcKy6okUsKE6AJUXFWHLegKRqw5EIu09hAzsugM2XW1w9VQ1 tFoenXLNrkvNLcMCuZSTeACyDvLZTw5gzgNSTOkNgVdWOaUCrumDAupiHCxeBQSBxZ5C 9Kwi5ujvVCs5BYeIpF+ylCTDvMOhfQbTRuf8BCLrUytldWQ4tRKkVYOPOUKCVa4m/ZZK DctS6s2G1cLMTy8+XZiH3hHdXwSLRmm1hsMB4tdrmY0aHWuXayxcIChkzTBtBNRZXMay RVmR3xfnVse9ywTwhG8rKi6SqOecTKmtPMXkGTDVbmcUohyqGy90rtT/gwLX3ie7QxbR Ounsworth, et al. Expires 28 May 2026 [Page 124] Internet-Draft Composite ML-KEM November 2025 hmvUrjKSOq8wbGAFmBx8QmAGxOkxyqlaPdwhtoytLaDu1suV0qf7+kCp6Kik2mZDiMuS jFjEFpDPiWTSlpgLUMqk+mmXmyXSRHEyfFd/qPP7iChKNICS3VSA3aF/jsSdVsFWSvE/ AeHt1YaKAddi8gRPpQTceoharBBZRJIk9eeS/AA5MuXHnq/atuUoyB/10l6YHQdfuMfT PNMZkUH2MGAZSW5mWN2G7K5xHFRYdeQV8kopkqbXCy9CGEEU7xS2EtfBTwAk0FyMHU0P goMLgyBgRRrW5YHmQePXIEkopZTryxIUJtBWER8MhOllQtd7+i22HR1DBhBymowLrZal Tw69wmog/AuN1UP9rlrtUliZwVJsWQT1DSgsAlaqrqFFGC9NIbG+gOdOhpWSjhuLROIm xgNZRjPCaidl/mIOPd2n9AZ43wjBEcsDFsqMLodZNt9OjlONLMBzRVRk1ul3fcyJbWV7 5Uda+xg7Iqm4WAYlyJHgAsLDLom1nRaJ2auYYJduYKEF/ev86pMrCkVQ5V1l5hwdmHJi NCelGh223lyqRZSjkY8vYRKgkZ94juhiQd8KREPY+cd5kho7YmrQ2PIPhbF+Sp+I9ksi LAgydAtakij7up/ICFHdCd+YMSJRCxJBViZPcy3qbhAJcB+iteG0YXIAmYRNCUvsPm2+ fwh2hK2Z/FzdtWsTAsE39aWUdCdKwNh7uCbY0ce6DZG8TczFXs3e3mtoRMFjHqf2HJ4B PsV7pl5rONKyKPJOrYyOywojnfHiimplaUGTPl4OBGiRSw2iQOHsxXIDkMfsQk4oVK4s UtPriLNpEmNd+sH/T6RMS51PjnUJ2i4h+GQsfWyRaFEG0EB+YcAw2D5hqUEAS7ZOVugH z9V9pv2dgkt1nmn2DqOSyaV8DxK1kFlbM/zaMttEJZYuDXftQDAQlG0RC9W/W8OhdJgg 9a8MIWUfiyJAKSKsjVoJr3RS7O6ZbiGxOcKzX+qc62k4s74g//i8Tr/SG+abFdvONYuO MNFwnG+VjEkZQhVMSDkBzoR+SFvj/b1", "x5c": "MIIUpjCCB6OgAwIBAgIUGGpg0CteQo8Pl8a3dhCQv+ci+8gwCwYJYIZIAWUD BAMSMD0xDTALBgNVBAoMBElFVEYxDjAMBgNVBAsMBUxBTVBTMRwwGgYDVQQDDBNDb21w b3NpdGUgTUwtS0VNIENBMB4XDTI1MTEwNjEwMDExMVoXDTM1MTEwNzEwMDExMVowSTEN MAsGA1UECgwESUVURjEOMAwGA1UECwwFTEFNUFMxKDAmBgNVBAMMH2lkLU1MS0VNMTAy NC1FQ0RILVA1MjEtU0hBMy0yNTYwgga5MA0GC2CGSAGG+mtQBQJhA4IGpgAKKDkwsDGi tpWbksE+y1i1hV+1EKQ0qwn4aZjd0mBcwVHLCAqyGGQmYXS6ox6jObzQSjrpay4BGSaJ aUsFFh+PtAFdgB7DYld08mmYRU17VoQKynCBJq0kLLgyyjUAiFfxMgBN4zdA1E+X96fr JTwTM0J0GqY+lBP7KrQK5pZW4mO9FbPnNspS4GVZ/MlVq5zSnAKXxWlVFggcgHkKow5H cKj1FJ+HXGIr8WHFBDgd1anvocGr4VVGQFy06LOGNwhztjmhSygBqkiwCarNIWFhe1m1 u0hitaZzcjjnGC8BtLttyiWGI17pjDC4h1bB8wWc4rjARGCdJb+tsqf8N7XhPCnaEo5d LLKqu5eBrFBZzExHS1OZe2App1Dkc7A+LEbkA0a7Kz6iwyzVKlToG4MBcYX6QqXmChLo KaTXBBQZ8TTX1YiVF2lLpaRM3LzfKMvhiA5fCi3yh7UGCGRjbKQRFH7N50VoOyjZhMho YXfs1ydndFCfMB7DpBxi/EOMJGF9bLp1sB4VZgSSmEdCKAgutAPEapXM0SPlZRGzkSX+ ICz7IqdvYQCpY3VNBw8xkAeMwJJ/+5UHumlUWjlvvG796D5ARCH0O6raCjXw/GQXDMAo ozgZkVm/PA7fpanYJWTRXLVIpsslCGly1KxQkUT8YV+PRZEuIWCgIAiDeBYco6/EC38d omr4GTdi0hKhi8j+50yu84+iBxA7giKP6FsEFJ1lvFcZuDXDNJI6tkjS+qBuYZrrsoHz 2WEvk2oBJ8KOgroFapc2tG7S50bDMJo1mbITsK7+wxP/2EZ+UJIcYjxoQ4X+ExQWoQPe JQNn2JtWCLTRZiMZ1AoHGHsnYo0MPMYNqoNT5B/REYmJMEpMtyZ2wxO8s38eElU7s5Wy 4o2cFwrLqiRSwoToAlRcVYct6ApGrDkQi7T2EDOy6AzZdbXD1VDW0Wh6dcs2uS80twwK 5lJN4ALIO8tlPDmDOA1JM6Q2BV1Y5pQKu6YMC6mIcLF4FBIHFnkL0rCLm6O9UKzkFh4i kX7KUJMO8w6F9BtNG5/wEIutTK2V1ZDi1EqRVg485QoJVrib9lkoNy1LqzYbVwsxPLz5 dmIfeEd1fBItGabWGwwHi12uZjRoda5drLFwgKGTNMG0E1FlcxrJFWZHfF+dWx73LBPC EbysqLpKo55xMqa08xeQZMNVuZxSiHKobL3Su1P+DAtfeJ7tDFtGGa9SuMpI6rzBsYAW YHHxCYAbE6THKqVo93CG2jK0toO7Wy5XSp/v6QKnoqKTaZkOIy5KMWMQWkM+JZNKWmAt QyqT6aZebJdJEcTJ8V3+o8/uIKEo0gJLdVIDdoX+OxJ1WwVZK8T8B4e3VhooB12LyBE+ lBNx6iFqsEFlEkiT155L8ADky5ceer9q25SjIH/XSXpgdB1+4x9M80xmRQfYwYBlJbmZ Y3YbsrnEcVFh15BXySimSptcLL0IYQRTvFLYS18FPACTQXIwdTQ+CgwuDIGBFGtblgeZ B49cgSSillOvLEhQm0FYRHwyE6WVC13v6LbYdHUMGEHKajAutlqVPDr3CaiD8C43VQ/2 uWu1SWJnBUmxZBPUNKCwCVqquoUUYL00hsb6A506GlZKOG4tE4ibGA1lGM8JqJ2X+Yg4 93af0BnjfCMERywMWyowuh1k2306OU40swHNFVGTW6Xd9zIltZXvlR1r7GDsiqbhYBiX IkeACwsMuibWdFonZq5hgl25goQX96/zqkysKRVDlXWXmHB2YcmI0J6UaHbbeXKpFlKO Rjy9hEqCRn3iO6GJB3wpEQ9j5x3mSGjtiatDY8g+FsX5Kn4j2SyIsCDJ0C1qSKPu6n8g Ounsworth, et al. Expires 28 May 2026 [Page 125] Internet-Draft Composite ML-KEM November 2025 IUd0J35gxIlELEkFWJk9zLepuEAlwH6K14bRhcgCZhE0JS+w+bb5/CHaErZn8XN21axM CwTf1pZR0J0rA2Hu4JtjRx7oNkbxNzMVezd7ea2hEwWMep/YcngE+xXumXms40rIo8k6 tjI7LCiOd8eKKamVpQZM+Xg4EaJFLDaJA4ezFcgOQx+xCTihUrixS0+uIs2kSY136wf9 PpExLnU+OdQnaLiH4ZCx9bJFoUQbQQH5hwDDYPmGpQQBLtk5W6AfP1X2m/Z2CS3WeafY Oo5LJpXwPErWQWVsz/Noy20Qlli4Nd+1AMBCUbREL1b9bw6F0mCD1rwwhZR+LIkApIqy NWgmvdFLs7pluIbE5wrNf6pzraTizviD/+LxOv9Ib5psV2841i44w0XCcb5WMSRlCFUx IOQHOhH5IW+P9vWjEjAQMA4GA1UdDwEB/wQEAwIFIDALBglghkgBZQMEAxIDggzuAMQd NjpIWFAA94DBNddMEzS+nmIfu0b2g5ryyA106JtXpVELqGHVpWFgN2EpR6HJhkCtQ1wO KRUboRFwFSDOlwH3vqXyqxChn3md4Ple4kccf3Ti5BbPUMsnqX0vogdW1R6LL2Azxcb+ HgLWrpcOuXUNiXjLjkmvrbbJvx0mcuYJ3hlF09Y3OyB/W7k1lpk02hqFnPUYcLT5Ykwh 0Rr4qcgV+VrDSSVQWKAN3kzYXqctDqhiryjmcSmlLXR9Amp1wj9WmpGSxIIn6MRz1MFB rn4S2+x29orEsOWSdJi6zMkgjygpTTpy81QKZbGHjsftJx7VILLvzwTJJm05mHHK5Yd0 OpJcb6EikkzRwOG1UYo4f8VmYa0y1D6w9PbqdlXRBmvTtYyjF12gCzwTvsiH88+/wJy+ iaMF5HyzvXCI+IijAGZvFAOPcyLQZt+oYhHeEYun0I6o8paodFBWsTxxJXF/XbWFHruj EWGI0tbd5+im306Ll0gSQn+pJdcPIt1VfgbuQ+FZq0PH3wP9FymQIlSOdI4Pn1r4CPRc QK0QhGtkCvEYI8Rp50w1p+S2mAihMdmkKcPwrn0J7x/FLO493Vx1/6CTWReIhCDJmwOr gFU0cMWH5WC6jCQW/JgtIl2PdwHIw+umNVzxZ6hxPPh2/X8TCdOEWeR1CYwlXeZtCzgK RMHlFZpoyViAU1q4tIFX2QBo9af/lhlmedISPUSOcCh/H+r/bXJoMBti/E7KdU0Q7yTH CQlPtgVAmbfkly9lriAoXO/orl/LJhrfQyJ2V+NOZYIp97cHy0wPf6uNPHkIFqNc+xTv gwpmuzzQ/oJ1Zmp7u6hz+ilNyp6uggol+6OCgjMENmaXL9UC9O16wAozEi6InU1fYaN8 pHtn0RvboPWiibosNO5CS/r+sSZrtTN+uxuU/UjWIdUIR6Ar/dYbmk4x+CUdLky5xbOH 4dHx43XyYJ3Sd0KpSJuHG2FdL6tQtLRhDdHGAlZNkjPZcLj1wq9GPFRHnTKuief4Ni0g lYAr8NCNiUuoEDIq3sfcEW7opHnWdib0zxZUAM+liyN5CL9zdMAk67TOGfnJBoWjPL2S tqksca0fFdDE05ZTb7Nvsb+2gk0IjW2M4pAfK+xPi22u/HWmekdlimGb6JL3rOBv/qvR MaLucYgs76hAatPi/3+i+eTySt8O9YYtIxabgPnw27Ax9WQ2tVk4QAC5oc4vs/KsSzV0 upxqNmAm83ZDYFt6BDj6hsuBjgvNJpwEn6Or3kRxdjYQUwFr55BNrS92nUVbMjDQGOqE 1O4/9mppOacSUKMllmP5RGAIQHzSCtRYHrdMcFbKzEbV3bTaB89b6Vm9VcG8MCmeaPyT REkTBlqFaaNDhLA7C7yDom5mCuEpuLrDUXx+8J9C77YIE+QflFNsWJr298GnpdOHB4zS KwN839Vjc7DX9Y+YpbOFcyp7hh88qBQUpVHM9dznn8q36sAZTHHLlUOIlAqnV4iYncYR KVuLBWdo+PrqMhPYuahIGixtVLGqf3pUvsrBBs7qfK4n0uw/Yw4XWmOwJyy2mbSgnBrH tnq/oavJHc+nt/Wa1WwE5nyPLa0IQcYdtAh/snQcAbT1/dEptjJJktOWO/a6RBk1Lzvp MMbLvcMRyZ0d+Rpwdgrm7fPYHKN+0Aj0456C94nv0AqbvEgTLHckuE9jrE9WFfTwSNoZ NaS1wywlApCaOYZcrQoLjxv2NzmBhMLMrsF/Vfkq8sdf2/7qGP/tXpEHH/nISViPS1I8 Uehy9xg5G3m0IMutB5yrbXRqe+SW+wf2GeDs7pEPHBeX9txkZpFkDba0sExGHKUJzJFo vHQIc1cWjIXwu0ZGmyeLS0/Ip/HabHc3wppAlB2edc/aqsMto/T+VntahxnZp9jXObrE fc9q7hMfUlgv/6KM4nryTjvH960rg/t3mL+MZriP/LwYkn6ZLPHDXj/I2HxVsthT4JMa gIGWoT+LSsckzPXIm/k6vgy3OfzUvhWCbI0d7qZ1OWyPSmwt/eQnd3K2prNou/uO+zbP eYRct8IUGwl46xZT0YlF4UEMHOSOjobZ0ppbjE9Drafk3v+uRuTtB6G2FgEW4Mjy2gIy sK9hE0nc+wTsLlS0NMhvQDMmoQg1Zeq6MjMzKOKfuDUBR2uY5PGHY6P79SJGl6v8P33Y A69OZR2ahL7gYEweXpvojE+nxCGvK55B5IHBe7PuD/Ej7mB729vw1RSgnCwekP8dXugd uqvsR1FkcohZzyh/fWJvpxpszk/bQxDFpvh/6qyENxcm9IgcGCUqnJ/Atc2KPNeul1ls 09t0Hp8zShQmwFvnt23sA8EIn24VM/qyW5wJd1ps4RmmuibUpixr8BaP1xRovAWWAGxF z5UdoTqdewnudB0b2YHKcJMLE0X9v1XZJmbcE7MTEKjDe6QDBhvv1/95WQ1dEY/dGioU 43qo7mWYKyVqRGaXqqUriX9wO0Fw1crJQVHfeDH0zGZtjwSSzrc1uoczHn6dcDeNPMlM breuqk7/awPPes0xD33fS8GlrvHPXAli6aAZ1Ef2zZHM/gLYCaRSJZ6gKxGxHt/Fh99i OC+EttFiDXhyaXGcJfP4nqzRth4BNumDG5mSraY91wSrrh73Wb7j+DfPUCXbIJV17nfc CcRQGoYw31rjXiCWhZbQKGj3f5dedPxIXGcND1HZ6Q9BCQrTVp4ZjP+vjdJT5fBTYMC6 i/oy4ODTVTzLKbKCFtz16UtWkhRz2wu5vruB6Zp7P4/qjdCo4uJM0GPud+lHJBZmdzrh Ounsworth, et al. Expires 28 May 2026 [Page 126] Internet-Draft Composite ML-KEM November 2025 Y/2ZR12OpL5rc9hvAaVy4vaZIzJY0JI0jDZ1UP52CEyZ62mZ8BbDUV17d2+B18KcCDPi Rnwcf9vCE+Ic34++39rGxopQkIay/2pH0Nq9ckSiA08jwOrYJMx44jKMx+TqYkN/UkyI jzRC0B1n5937tEaXshF9nJJLgYR5U81f8ZYnE9Z+t1HexFneYSOD87S9P6jPnGgGqiSY ndGkHXxjb8gshRpKpasQob3uachngYsXdiZCrMBP2a5FjdSj7NPOYqU0xrdYbG1pkIXe T7+rzoZL7Gw2PCVseFDowULltZDyL2K0O/smkwOIvzPa20GQG4nZh5ThUeLaWVBq9C5E dzSwN1MQl2FTcZSGBNDijSEhXgQ5nMYBnOTL0LDC4MWD4CVn1dXgBLJ9D5ns8WsxT216 PW1CUrr0JW7VzEFIQZn4W9PsRb0qI0Qj2cXaE504hiYrML3+CZ5JW87Too6CYHEQ+T2d nYuTd7zBsyGT97tFnBevxwGLwJN/Vt/N1CCcO/rFwZzV4FUHBL4F223bOUpLkWSEqlwH 8XQLgEvwtOl+Kt6r8naWL1wZvqayKcRR92v0E2z65PGCSGeAuU5EDciz0JES7TNY+iks aFtpn7ui2v5qwcaXOIZR3BW0bC31unGrBgNw1G3PeHa77mFX2Xey4IeaxNaCAtTJmUYE x03hDnuYJPqdWZ0+Fg8zNDig5E9G4sKuFbLHNE+SkGhVU2T5KqqvYCxisBG/3U1h48QD riT0PchC+RVNOyaTaB5BebE/1ZJ7Bq2j7BKxE6DvQGCEatGMjCGMcNrXJIfLfshYDgR5 aeq0reV4lMNrwHJx/oyT/PVJKabjMyS+ImEMSgKxNtdQFmxMKOd5somz0hwwgOmt/L2z lG2Nd9KBC+C+D77HHyOPU150L/51Y/7VEctllNXxVdl7Hdvy3wmpQF7PzC9VXgOeSDWV egAzzzoxHNvCQ6JYWStf3XGHGwYuE9A/90+1U0PBSNZibnwKkp2LxuJAV/5HZ9gRgnXj Wlqp4had7oFeGy+h101LQ5ukMGtzlKSXD8LOuLH+zpDbxkmAnolfN5/s+iOkFJOixHDZ 6bgYyAjvcVp5xHIj+umWB8a5s89SG4H67x2ZKN2zCoDWwok9nA4LD1joDyX52g5pxkLb R06r4yDg9xYHOUnB93jMdMb0C1Vh9xRjZrmfJJfaL+m/opkvpb5YvQNIYgxcArRg6/hN A6vYtO3pl2ew99zcixO2slqivn6vWkU9hJEFkltGgYtG5ZNkNfNDxMHYLnQhgonxUD6y fab1Xt+3YOTr/n6QO0tnuek0tY5TsSVETG1PN4dEz30FPNuJ+4T8lnC5xDt38sK0IPb3 W/leFJ0CLSYRmE2cJRyWtN7Fn3ZXoSnhbXuyeDF3QP5W8ZY3qC5nKFLCuG/WSQVXMfdh seSxo7M8cnZK4PcsvIJ0yNdYcEMA4z03D98wgeMBw9DZ0Zis7LHqZHq0PEA1EKBWgdY/ mZ2w2sCDtsXR4k/TTpyf9UTcFYv2zxKGdR4jiygxRxNVMTlXfBQlJ0BkzWNvcXKz2xVC TFhZXWv7FWJ+5PEBBmuBlau3AAAAAAAAAAAAAAAAAAAAAAAAAAQKEBgdJA==", "dk": "ZclNOEDzScuHp6bWOUzm7fS9l10eB8GhF4jGbcpoBwKFposcMwvO+oGZWFiok f8F0jUXsASqyTWqDnS0MjbajDBQAgEBBEIA3bk/J1DjCwqo0S08aJIXwaZSMcq0TINTh pZPsXQ8eOFsDEvcoDbwYzmiSauhiLPaKRNAjgzJi1matynaqZ1h1SSgBwYFK4EEACM=" , "dk_pkcs8": "MIGnAgEAMA0GC2CGSAGG+mtQBQJhBIGSZclNOEDzScuHp6bWOUzm7fS 9l10eB8GhF4jGbcpoBwKFposcMwvO+oGZWFiokf8F0jUXsASqyTWqDnS0MjbajDBQAgE BBEIA3bk/J1DjCwqo0S08aJIXwaZSMcq0TINThpZPsXQ8eOFsDEvcoDbwYzmiSauhiLP aKRNAjgzJi1matynaqZ1h1SSgBwYFK4EEACM=", "c": "rhGfjqRn0YJKw/WiXuip5exVtQmnXDQuQworz8nn/wOxNi0wIGkIofknrJ/nVa doIeRQPqObtM5F5+fAKiQUa/9tpvSDKKe+SxT9OuFBhZsyYPlMvCtf1SGZFIzXqpN2bk TgRhUJRLHJ6qwd03efIwc4kYdM3w2UdwBTwe3tlE8uyIwFaUwmgLkgl0k54aLIXK32Ok wFUXXrfG/91QTbKqPGH1275zHvErlQBs4xgAryVE4UyjWCbyl5htnwl+UNKD6AUsJ16P q84D1rDD9u398ueLU2poHm64QDOqW8LgNyYHu01sGXOdvJWksLm3N9nPMaNg0zO/XQPb gHuBcfV6b/A1tMdNriBcZjEj0ly8rld1ljKLucLcq2l4n8FlicI4fxZj7BYnAzhr7UNh PJgyiweDpaqVmO+gEas98CmCTh+FzF4q7qLbozn6JwoD4jiYN5dfTFngx8QKb5VMBTFe L3o7j+zo/EOw8z/ZkaboJsTY5YU0YcSD+e5pb/HA6zUXBTN8IqTgfCVk4j4BYY/urYVf /apVA5wOZJmDJbxNawP28pUmU8qq+nGn/ImdgIqd9ma6JGGPrkwZNAjD2QwN/UrLXD3d owoB78smTAvTja/eviwk3aX06t9hKbZS6tlmeKdMmULjn6gNkWMVhP3e8LuMCJfgoYZ6 stFCH5z/h8KuU9MZQIGOHB9TB1iU6KUitXtBa29xMYWKdK+1HEubK8LgcEa2WLs5Hpg4 m0nO0zk/NzcGi9EwnaUEpvKk+0AqwXVYUVKDEeWqpJxY7/F1SjeGpopl06Mz365cqaMN 9KqR27JhFHXvHyJTd7ZzgxHAuoDcWcEkREWuZeLBMkbI9qy5ZUSWqGcPnKETXKCcjaND XdV3KHfGxoGOtPpm6R+KEmFELZHFNCguniMSR5c7XWhpIo1nn7eOO4bU54sFHMBbI/CC Kl+jhh+I0CMNntr7xgk8fknsGOh6kJ8UPgcuNdw6UpreVXm7xZDMmG6ckSucyII02dqx sLFCU0SXBp5khqQHKWxraQXtKGRgHeXPg61D5fDNAZyb6w8BC5NvnBU1G+8OkEhfU4QK Ounsworth, et al. Expires 28 May 2026 [Page 127] Internet-Draft Composite ML-KEM November 2025 2NO77OFRMcZgSf3JXJ1xBwi/9Q0UswhDcgkLrk5dIdnmO4PTujyCCG2o5bx3g1nzYlsC RK6OLhpQtFNx6qUAVVgUjwGr2Mm5uVQYmXsdndYadZmKGEP8NYCSfHLnQ7EvZei/CG5R WOt888N8sRFgg/+VdQAGztIZpayCjHglpAW1imlK4WUwM13nGki4fq87x1ojYlvSuYS1 7cO/N/e1M5TdMF9TxpiUngi17BW+CkvYG5tIBNsjb8lEDuL7SgJInBfwzLt32iFVWpqe FpzohcCvrYAqwtJM0eH1xlgPhlybz7tJ0D0SEfio9aiFEJvyb7w1NQuq+LxmtU01yw3G Qd4YmboUioaqC4UyPtqHr8zCVSku4GZX2hpKP6BY0/M9vud9L306EgxtzV6MyGgs/FAu FjC0P2mLGbCNTXn9RxOq6t38ZAZ0bmU6MwztvpmRndTK1GYHLvKLryuQjDqlYefeY3Hm 4owkuwTnSmlz+7EneonyPhTfQXxIF1D2e+USO/NtpaZRiJTG8rPtH2A1yu3yr9x4xwok Y6YrK6vSXTzGqwzx0W9Jhn5WTHsDOF+gIeZrcM6z0cTZywrG5bA/IvlKwG2VnwFHFWCV VAz38t4/mtczBa4UdoHciRLM0ynhGJGL2xWlbqOwNmbwlZbUawLK20dT8D79P6aavMvM M2LDPV89UvNn8Me/wbr3Kl7mST0hAnJGeWugRDo+dHZMGwcx94/rhsCJCJdCMBPMjeHj F/8N5dQQDnWjTRIo8pZU1mrJO6rcYU/5KSh1FX9bI1fjgZod98jhsA4gCl9KMIf2B8wf 6BzCOcJe8R7jh8vrYGMkXcThSxbtuLbzw0ab9SYENJMfwgksfRfcEs4h7PnEA4/oqITk zOgV1dm8NRjBkA24EH9248P49iEq8ShBRix8gMIx74hIhKGyfR4tNwCW6kTuLKRBWhDn OaZ/NsmoAhcaLSaf0gaf75ZrQeGkvEvXQdZ7t7bf+JbTiJOI6+X5J7hY8EAcTvmniQat M+1/3zxgJ33tmf146FkMumKfctxckE2TDNOH+qxZr6zbhuqGZhRhXhjeu1aIxvxwuzVB d5SmxPqnRoAVtIwvMPoK+u3KRGA34HV36SmwvoKfnaDrd0h+b7084OmTJxYG8xkGdAE0 XfUO+GoKBO8Hd2eBanX3A21Jy1rzBE", "k": "+ugl+zSRoMgL166U0orhwk+4QtQKYvT2x0Oe1Yy/TeM=" } ] } Appendix G. Contributors and Acknowledgments This document represents the results of a many-year effort by the LAMPS working group. Over that time the following working group members provided valuable review and commentary on the document: Serge Mister (Entrust), Felipe Ventura (Entrust), Richard Kettlewell (Entrust), Ali Noman (Entrust), Peter C. (UK NCSC), Tim Hollebeek (Digicert), Sophie Schmieg (Google), Deirdre Connolly (SandboxAQ), Chris A. Wood (Apple), Bas Westerbaan (Cloudflare), Falko Strenzke (MTG AG), Piotr Popis (Enigma), Jean-Pierre Fiset (Crypto4A), Carl Wallace, Daniel Van Geest (CryptoNext Security), 陳志華 (Abel C. H. Chen, Chunghwa Telecom), 林邦曄 (Austin Lin, Chunghwa Telecom) and Douglas Stebila (University of Waterloo). We wish to acknowledge a few people who have made notable contributions to specific sections of this document. We wish to acknowledge particular effort from Carl Wallace and Daniel Van Geest (CryptoNext Security), who have implemented each successive version of the draft over multiple years to provide valuable implementation experience and hackathon testing. Thanks to Stepan Yakimovich for contributing to the reference implementation to be able to provide and verify hackathon artifacts. Ounsworth, et al. Expires 28 May 2026 [Page 128] Internet-Draft Composite ML-KEM November 2025 Thanks to Giacomo Pope (github.com/GiacomoPope) whose ML-DSA and ML- KEM implementations were used to generate the test vectors. We are grateful to all who have given feedback over the years, formally or informally, on mailing lists or in person, including any contributors who may have been inadvertently omitted from this list. Finally, we wish to thank the authors of all the referenced documents upon which this specification was built. "Copying always makes things easier and less error prone" - [RFC8411]. Authors' Addresses Mike Ounsworth Entrust Limited 2500 Solandt Road – Suite 100 Ottawa, Ontario K2K 3G5 Canada Email: mike.ounsworth@entrust.com John Gray Entrust Limited 2500 Solandt Road – Suite 100 Ottawa, Ontario K2K 3G5 Canada Email: john.gray@entrust.com Massimiliano Pala OpenCA Labs New York City, New York, United States of America Email: director@openca.org Jan Klaussner Bundesdruckerei GmbH Kommandantenstr. 18 10969 Berlin Germany Email: jan.klaussner@bdr.de Scott Fluhrer Cisco Systems Email: sfluhrer@cisco.com Ounsworth, et al. Expires 28 May 2026 [Page 129]