RFC 9935 - Internet X.509 Public Key Infrastructure - Algorithm Identifiers for the Module-Lattice-Based Key-Encapsulation Mechanism (ML-KEM)

• Status: Standards Track
• Published: March 2026
• Stream: IETF
• Errata: RFC Editor Errata

Abstract

RFC 9935 is a Standards Track IETF document specifying conventions for using ML-KEM in X.509 Public Key Infrastructure, including subject public keys, private keys, algorithm identifiers, and ASN.1 encodings.

Contents

• 1. Introduction
• 2. Conventions and Definitions
• 3. Algorithm Identifiers
• 4. Subject Public Key Fields
• 5. Key Usage Bits
• 6. Private Key Format
• 7. Implementation Considerations
• 8. Private Key Consistency Testing
• 9. Security Considerations
• 10. IANA Considerations
• 11. References
• Appendix A. ASN.1 Module
• Appendix B. Parameter Set Security and Sizes
• Appendix C. Examples
• Acknowledgments
• Authors' Addresses

Related Resources

• Official Text: RFC 9935
• Official Page: RFC 9935 DataTracker
• Errata: RFC Editor Errata