Skip to content

Commit 9d74d4b

Browse files
authored
text to address FIPS confusion (#56)
1 parent a554212 commit 9d74d4b

File tree

1 file changed

+3
-2
lines changed

1 file changed

+3
-2
lines changed

draft-ietf-tls-ecdhe-mlkem.md

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -78,7 +78,8 @@ and specifies code points for the hybrid groups.
7878
# Motivation
7979

8080
This document introduces three new supported groups for hybrid post-quantum key agreements in TLS 1.3: the X25519MLKEM768,
81-
SecP256r1MLKEM768, and SecP384r1MLKEM1024 which combine ML-KEM with ECDH in the manner of {{hybrid}}.
81+
SecP256r1MLKEM768, and SecP384r1MLKEM1024 which combine ML-KEM with ECDH in the manner of {{hybrid}}. Any of the hybrid groups
82+
specified in this document may be implemented in a FIPS approved way as discussed in {{discussion}}.
8283

8384
* The first one uses X25519 {{rfc7748}}, is widely deployed, and often serves as the most practical choice for a single PQ/T hybrid combiner in TLS 1.3.
8485

@@ -183,7 +184,7 @@ shared secret as described in {{Section 7.4.2 of !RFC8446}}, including the
183184
all-zero shared secret check for X25519, and abort the connection with an
184185
illegal_parameter alert if it fails.
185186

186-
# Discussion
187+
# Discussion {#discussion}
187188

188189
* **FIPS-compliance**. All groups defined in this document permit FIPS-approved key derivation as per {{NIST-SP-800-56C}}
189190
and {{NIST-SP-800-135}}. NIST's special publication 800-56Cr2 {{NIST-SP-800-56C}} approves the

0 commit comments

Comments
 (0)