3. Algorithm Identifiers

Dieser Abschnitt bewahrt den RFC-Text fuer ML-KEM in PKIX, einschliesslich algorithm identifiers, SubjectPublicKeyInfo, private key formats, ASN.1 objects, security considerations und examples.

3.  Algorithm Identifiers

   The AlgorithmIdentifier type is defined in [RFC5912] as follows:

    AlgorithmIdentifier{ALGORITHM-TYPE, ALGORITHM-TYPE:AlgorithmSet} ::=
      SEQUENCE {
        algorithm   ALGORITHM-TYPE.&id({AlgorithmSet}),
        parameters  ALGORITHM-TYPE.
                      &Params({AlgorithmSet}{@algorithm}) OPTIONAL
      }

      |  NOTE: The above syntax is from [RFC5912] and is compatible with
      |  the 2021 ASN.1 syntax [X680].  See [RFC5280] for the 1988 ASN.1
      |  syntax.

   The fields in AlgorithmIdentifier have the following meanings:

   *  algorithm identifies the cryptographic algorithm with an OID.

   *  parameters, which are optional, are the associated parameters for
      the algorithm identifier in the algorithm field.

   The AlgorithmIdentifier for an ML-KEM public key MUST use one of the
   id-alg-ml-kem OIDs from NIST [CSOR] listed below, based on the
   security level.  The parameters field of the AlgorithmIdentifier for
   the ML-KEM public key MUST be absent.

     nistAlgorithms OBJECT IDENTIFIER ::= { joint-iso-ccitt(2)
       country(16) us(840) organization(1) gov(101) csor(3)
       nistAlgorithm(4) }

     kems OBJECT IDENTIFIER ::= { nistAlgorithms 4 }

     id-alg-ml-kem-512 OBJECT IDENTIFIER ::= { kems 1 }

     id-alg-ml-kem-768 OBJECT IDENTIFIER ::= { kems 2 }

     id-alg-ml-kem-1024 OBJECT IDENTIFIER ::= { kems 3 }