Skip to content

Commit

Permalink
typo
Browse files Browse the repository at this point in the history
  • Loading branch information
ounsworth committed Oct 20, 2024
1 parent a2cce51 commit d9a045d
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion draft-ietf-lamps-pq-composite-kem.md
Original file line number Diff line number Diff line change
Expand Up @@ -574,7 +574,7 @@ EdCompositeKEMPublicKey ::= SEQUENCE {
`id-raw-key` is defined by this document. It signifies that the public key has no ASN.1 wrapping and the raw bits are placed here according to the encoding of the underlying algorithm specification. In some situations and protocols, the key might be wrapped in ASN.1 or
may have some other additional decoration or encoding. If so, such wrapping MUST be removed prior to encoding the key itself as a BIT STRING.

This structure is intentionally generic in the first public key slot since ML-KEM, as defined in {{I-D.draft-ietf-lamps-kyber-certificates}}, does not define any ASN.1 public key structures. For use with this document, the `firstPublicKey` MUST be the BIT STRING representation of an ML-KEM key as specified in {{I-D.draft-ietf-lamps-kyber-certificates}}. Note that here we used BIT STRING rather than OCTET STRING so that these keys can be trivially transcoded into a SubjectPublicKeyInfo as necessary, for example when a crypto library requires this for invoking the component algorithm. The public key for Edwards curve DH component is also encoded as a raw key.
This structure is intentionally generic in the first public key slot since ML-KEM, as defined in {{I-D.ietf-lamps-kyber-certificates}}, does not define any ASN.1 public key structures. For use with this document, the `firstPublicKey` MUST be the BIT STRING representation of an ML-KEM key as specified in {{I-D.ietf-lamps-kyber-certificates}}. Note that here we used BIT STRING rather than OCTET STRING so that these keys can be trivially transcoded into a SubjectPublicKeyInfo as necessary, for example when a crypto library requires this for invoking the component algorithm. The public key for Edwards curve DH component is also encoded as a raw key.

The following ASN.1 Information Object Class is defined to then allow for compact definitions of each composite algorithm.

Expand Down

0 comments on commit d9a045d

Please sign in to comment.