



LAMPS                                                       M. Ounsworth
Internet-Draft                                                   J. Gray
Intended status: Standards Track                                 Entrust
Expires: 19 April 2026                                           M. Pala
                                                             OpenCA Labs
                                                            J. Klaussner
                                                    Bundesdruckerei GmbH
                                                              S. Fluhrer
                                                           Cisco Systems
                                                         16 October 2025


      Composite ML-KEM for use in X.509 Public Key Infrastructure
                  draft-ietf-lamps-pq-composite-kem-08

Abstract

   This document defines combinations of ML-KEM [FIPS.203] in hybrid
   with traditional algorithms RSA-OAEP, ECDH, X25519, and X448.  These
   combinations are tailored to meet security best practices and
   regulatory guidelines.  Composite ML-KEM is applicable in any
   application that uses X.509 or PKIX data structures that accept ML-
   KEM, but where the operator wants extra protection against breaks or
   catastrophic bugs in ML-KEM.

About This Document

   This note is to be removed before publishing as an RFC.

   The latest revision of this draft can be found at https://lamps-
   wg.github.io/draft-composite-kem/draft-ietf-lamps-pq-composite-
   kem.html.  Status information for this document may be found at
   https://datatracker.ietf.org/doc/draft-ietf-lamps-pq-composite-kem/.

   Discussion of this document takes place on the LAMPS Working Group
   mailing list (mailto:spams@ietf.org), which is archived at
   https://datatracker.ietf.org/wg/lamps/about/.  Subscribe at
   https://www.ietf.org/mailman/listinfo/spams/.

   Source for this draft and an issue tracker can be found at
   https://github.com/lamps-wg/draft-composite-kem.

Status of This Memo

   This Internet-Draft is submitted in full conformance with the
   provisions of BCP 78 and BCP 79.





Ounsworth, et al.         Expires 19 April 2026                 [Page 1]

Internet-Draft              Composite ML-KEM                October 2025


   Internet-Drafts are working documents of the Internet Engineering
   Task Force (IETF).  Note that other groups may also distribute
   working documents as Internet-Drafts.  The list of current Internet-
   Drafts is at https://datatracker.ietf.org/drafts/current/.

   Internet-Drafts are draft documents valid for a maximum of six months
   and may be updated, replaced, or obsoleted by other documents at any
   time.  It is inappropriate to use Internet-Drafts as reference
   material or to cite them other than as "work in progress."

   This Internet-Draft will expire on 19 April 2026.

Copyright Notice

   Copyright (c) 2025 IETF Trust and the persons identified as the
   document authors.  All rights reserved.

   This document is subject to BCP 78 and the IETF Trust's Legal
   Provisions Relating to IETF Documents (https://trustee.ietf.org/
   license-info) in effect on the date of publication of this document.
   Please review these documents carefully, as they describe your rights
   and restrictions with respect to this document.  Code Components
   extracted from this document must include Revised BSD License text as
   described in Section 4.e of the Trust Legal Provisions and are
   provided without warranty as described in the Revised BSD License.

Table of Contents

   1.  Changes in version -08  . . . . . . . . . . . . . . . . . . .   3
   2.  Introduction  . . . . . . . . . . . . . . . . . . . . . . . .   5
     2.1.  Conventions and Terminology . . . . . . . . . . . . . . .   6
     2.2.  Composite Design Philosophy . . . . . . . . . . . . . . .   7
   3.  Overview of the Composite ML-KEM Scheme . . . . . . . . . . .   8
     3.1.  Promotion of RSA-OAEP into a KEM  . . . . . . . . . . . .  10
     3.2.  Promotion of ECDH into a KEM  . . . . . . . . . . . . . .  11
   4.  Composite ML-KEM Functions  . . . . . . . . . . . . . . . . .  12
     4.1.  Key Generation  . . . . . . . . . . . . . . . . . . . . .  12
     4.2.  Encapsulation . . . . . . . . . . . . . . . . . . . . . .  14
     4.3.  Decapsulation . . . . . . . . . . . . . . . . . . . . . .  16
     4.4.  KEM Combiner Function . . . . . . . . . . . . . . . . . .  19
     4.5.  Error Handling and Explicit Rejection . . . . . . . . . .  19
   5.  Serialization . . . . . . . . . . . . . . . . . . . . . . . .  20
     5.1.  SerializePublicKey and DeserializePublicKey . . . . . . .  21
     5.2.  SerializePrivateKey and DeserializePrivateKey . . . . . .  23
     5.3.  SerializeCiphertext and DeserializeCiphertext . . . . . .  26
   6.  Use within X.509 and PKIX . . . . . . . . . . . . . . . . . .  27
     6.1.  Encoding to DER . . . . . . . . . . . . . . . . . . . . .  28
     6.2.  Key Usage Bits  . . . . . . . . . . . . . . . . . . . . .  28



Ounsworth, et al.         Expires 19 April 2026                 [Page 2]

Internet-Draft              Composite ML-KEM                October 2025


     6.3.  ASN.1 Definitions . . . . . . . . . . . . . . . . . . . .  28
   7.  Algorithm Identifiers and Parameters  . . . . . . . . . . . .  30
     7.1.  RSA-OAEP Parameters . . . . . . . . . . . . . . . . . . .  35
     7.2.  Rationale for choices . . . . . . . . . . . . . . . . . .  36
   8.  ASN.1 Module  . . . . . . . . . . . . . . . . . . . . . . . .  37
   9.  IANA Considerations . . . . . . . . . . . . . . . . . . . . .  42
     9.1.  Object Identifier Allocations . . . . . . . . . . . . . .  42
       9.1.1.  Module Registration . . . . . . . . . . . . . . . . .  42
       9.1.2.  Object Identifier Registrations . . . . . . . . . . .  43
   10. Security Considerations . . . . . . . . . . . . . . . . . . .  45
     10.1.  Why Hybrids? . . . . . . . . . . . . . . . . . . . . . .  45
     10.2.  KEM Combiner . . . . . . . . . . . . . . . . . . . . . .  45
       10.2.1.  IND-CCA Security of the hybrid scheme  . . . . . . .  46
       10.2.2.  Second pre-image resistance of component KEMs  . . .  47
       10.2.3.  Generifying this construction  . . . . . . . . . . .  48
     10.3.  Key Reuse  . . . . . . . . . . . . . . . . . . . . . . .  48
     10.4.  Decapsulation failure  . . . . . . . . . . . . . . . . .  49
     10.5.  Policy for Deprecated and Acceptable Algorithms  . . . .  50
   11. Implementation Considerations . . . . . . . . . . . . . . . .  50
     11.1.  FIPS Certification . . . . . . . . . . . . . . . . . . .  50
       11.1.1.  Combiner Function  . . . . . . . . . . . . . . . . .  51
       11.1.2.  Order of KDF inputs with Non-Approved Algorithms . .  51
     11.2.  Backwards Compatibility  . . . . . . . . . . . . . . . .  52
     11.3.  Profiling down the number of options . . . . . . . . . .  53
     11.4.  Decapsulation Requires the Public Key  . . . . . . . . .  53
   12. References  . . . . . . . . . . . . . . . . . . . . . . . . .  54
     12.1.  Normative References . . . . . . . . . . . . . . . . . .  54
     12.2.  Informative References . . . . . . . . . . . . . . . . .  57
   Appendix A.  Maximum Key and Ciphertext Sizes . . . . . . . . . .  60
   Appendix B.  Component Algorithm Reference  . . . . . . . . . . .  62
   Appendix C.  Fixed Component Algorithm Identifiers  . . . . . . .  63
   Appendix D.  Comparison with other Hybrid KEMs  . . . . . . . . .  66
     D.1.  X-Wing  . . . . . . . . . . . . . . . . . . . . . . . . .  66
     D.2.  ETSI CatKDF . . . . . . . . . . . . . . . . . . . . . . .  67
   Appendix E.  Examples of KEM Combiner Intermediate Values . . . .  67
   Appendix F.  Test Vectors . . . . . . . . . . . . . . . . . . . .  72
   Appendix G.  Contributors and Acknowledgments . . . . . . . . . . 133
   Authors' Addresses  . . . . . . . . . . . . . . . . . . . . . . . 134

1.  Changes in version -08

   Interop-affecting changes:

   *  Changed the private key serialization to carry the TradPK.







Ounsworth, et al.         Expires 19 April 2026                 [Page 3]

Internet-Draft              Composite ML-KEM                October 2025


   *  Fixed the ASN.1 module for the pk-CompositeKEM and kema-
      CompositeKEM to indicate no ASN.1 wrapping is used.  This simply
      clarifies the intended encoding but could be an interop-affecting
      change for implementations that built encoders / decoders from the
      ASN.1 and ended up with a non-intended encoding.

   *  Changed the domain separator strings to match draft-irtf-cfrg-
      concrete-hybrid-kems-00, but no reference to it because I don't
      want this to get stuck in MISREF.

   *  Added a normative section saying that the composite MUST forward
      any errors produced by the component primitives.

   *  Fully removed SHA2; changed all HMACSHA2 to SHA3.

   Editorial changes:

   *  Clarified that the ECDSA public key is raw X9.62 with no OCTET
      STRING wrapping.  Test vectors were already correct.

   A full review was performed of the encoding of each component:

   *  ML-KEM:

      -  pub key, priv key, ct value: Raw, according to FIPS 203.  Test
         vectors appear to match.

   *  RSA:

      -  pub key: ASN.1 RSAPublicKey.  Test vectors appear to match
         (manually inspected "id-MLKEM768-RSA2048-HMAC-SHA256")

      -  priv key: RSAPrivateKey (CRT).  Test vectors appear to match
         (manually inspected "id-MLKEM768-RSA2048-HMAC-SHA256")

      -  ct value: length of ct for "id-MLKEM768-RSA2048-HMAC-SHA256"
         verified to be 256 bytes, format hard to manually inspect.

   *  ECDH: Inspected test vector for "id-MLKEM768-ECDH-P256-HMAC-
      SHA256".

      -  pub key: The wording of the pub key format in Section 2.2 of
         RFC5480 is extremely confusing in how it would apply outside of
         a SubjectPublicKeyInfo.  The Composite author's interpretation
         was for it to be raw X9.62, which is what is already in the
         test vectors: verified to be raw X9.62 with a leading byte of
         0x04 (uncompressed).  Normative text in Section 5 is incorrect
         and has been changed.



Ounsworth, et al.         Expires 19 April 2026                 [Page 4]

Internet-Draft              Composite ML-KEM                October 2025


   *  priv key: This is the ASN.1 structure ECPrivateKey [RFC5915] as
      intended, however, as Dan Van Geest points out, the parameters
      field, while marked OPTIONAL is actually required by Section 3 of
      RFC5915.  That means the private keys here are invalid.  This has
      been corrected in the test vectors.

      -  ct value: A raw X9.62 public key, as intended.

   *  XDH:

      -  pub key: 32 byte raw.

      -  priv key: Had been wrapped in OCTET STRING to match
         CurvePrivateKey (RFC8410).  This has been changed to 32/57 byte
         raw.

      -  ct value: 32 byte raw.

2.  Introduction

   The advent of quantum computing poses a significant threat to current
   cryptographic systems.  Traditional cryptographic key establishment
   algorithms such as RSA-OAEP, Diffie-Hellman and its elliptic curve
   variants are vulnerable to quantum attacks.  During the transition to
   post-quantum cryptography (PQC), there is considerable uncertainty
   regarding the robustness of both existing and new cryptographic
   algorithms.  While we can no longer fully trust traditional
   cryptography, we also cannot immediately place complete trust in
   post-quantum replacements until they have undergone extensive
   scrutiny and real-world testing to uncover and rectify both
   algorithmic weaknesses as well as implementation flaws across all the
   new implementations.

   Unlike previous migrations between cryptographic algorithms, the
   decision of when to migrate and which algorithms to adopt is far from
   straightforward.  For instance, the aggressive migration timelines
   may require deploying PQC algorithms before their implementations
   have been fully hardened or certified, and dual-algorithm data
   protection may be desirable over a longer time period to hedge
   against CVEs and other implementation flaws in the new
   implementations.

   Cautious implementers may opt to combine cryptographic algorithms in
   such a way that an attacker would need to break all of them
   simultaneously to compromise the protected data.  These mechanisms
   are referred to as Post-Quantum/Traditional (PQ/T) Hybrids
   [I-D.ietf-pquip-pqt-hybrid-terminology].




Ounsworth, et al.         Expires 19 April 2026                 [Page 5]

Internet-Draft              Composite ML-KEM                October 2025


   Certain jurisdictions are already recommending or mandating that PQC
   lattice schemes be used exclusively within a PQ/T hybrid framework.
   The use of a composite scheme provides a straightforward
   implementation of hybrid solutions compatible with (and advocated by)
   some governments and cybersecurity agencies [BSI2021], [ANSSI2024].

   This specification defines a specific instantiation of the PQ/T
   Hybrid paradigm called "composite" where multiple cryptographic
   algorithms are combined to form a single key encapsulation mechanism
   (KEM) presenting a single public key and ciphertext such that it can
   be treated as a single atomic algorithm at the protocol level; a
   property referred to as "protocol backwards compatibility" since it
   can be applied to protocols that are not explicitly hybrid-aware.
   Composite algorithms retain some security even if one of their
   component algorithms is broken.  Concrete instantiations of composite
   ML-KEM algorithms are provided based on ML-KEM, RSA-OAEP and ECDH.
   Backwards compatibility in the sense of upgraded systems continuing
   to inter-operate with legacy systems is not directly covered in this
   specification, but is the subject of Section 11.2.  The idea of a
   composite was first presented in [Bindel2017].

   Composite ML-KEM is applicable in any PKIX-related application that
   would otherwise use ML-KEM.

2.1.  Conventions and Terminology

   The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT",
   "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and
   "OPTIONAL" in this document are to be interpreted as described in
   BCP 14 [RFC2119] [RFC8174] when, and only when, they appear in all
   capitals, as shown here.  These words may also appear in this
   document in lower case as plain English words, absent their normative
   meanings.

   This specification is consistent with all terminology from
   [I-D.ietf-pquip-pqt-hybrid-terminology].  In addition, the following
   terms are used in this specification:

   *ALGORITHM*: The usage of the term "algorithm" within this
   specification generally refers to any function which has a registered
   Object Identifier (OID) for use within an ASN.1 AlgorithmIdentifier.
   This loosely, but not precisely, aligns with the definitions of
   "cryptographic algorithm" and "cryptographic scheme" given in
   [I-D.ietf-pquip-pqt-hybrid-terminology].

   *COMBINER*: A combiner specifies how multiple shared secret keys are
   combined into a single shared secret key.




Ounsworth, et al.         Expires 19 April 2026                 [Page 6]

Internet-Draft              Composite ML-KEM                October 2025


   *COMPONENT / PRIMITIVE*: The words "component" or "primitive" are
   used interchangeably to refer to a cryptographic algorithm that is
   used internally within a composite algorithm.  For example this could
   be an asymmetric algorithm such as "ML-KEM-768" or "RSA-OAEP".

   *DER:* Distinguished Encoding Rules as defined in [X.690].

   *KEM:* A key encapsulation mechanism as defined in Section 3.

   *PKI:* Public Key Infrastructure, as defined in [RFC5280].

   *SHARED SECRET KEY:* A value established between two communicating
   parties for use as cryptographic key material suitable for direct use
   by symmetric cryptographic algorithms.  This specification is
   concerned with shared secrets established via public key
   cryptographic operations.

   Notation: The algorithm descriptions use python-like syntax.  The
   following symbols deserve special mention:

   *  || represents concatenation of two byte arrays.

   *  [:] represents byte array slicing.

   *  (a, b) represents a pair of values a and b.  Typically this
      indicates that a function returns multiple values; the exact
      conveyance mechanism -- tuple, struct, output parameters, etc --
      is left to the implementer.

   *  (a, _): represents a pair of values where one -- the second one in
      this case -- is ignored.

   *  Func<TYPE>(): represents a function that is parametrized by <TYPE>
      meaning that the function's implementation will have minor
      differences depending on the underlying TYPE.  Typically this
      means that a function will need to look up different constants or
      use different underlying cryptographic primitives depending on
      which composite algorithm it is implementing.

2.2.  Composite Design Philosophy

   [I-D.ietf-pquip-pqt-hybrid-terminology] defines composites as:

      _Composite Cryptographic Element_: A cryptographic element that
      incorporates multiple component cryptographic elements of the same
      type in a multi-algorithm scheme.





Ounsworth, et al.         Expires 19 April 2026                 [Page 7]

Internet-Draft              Composite ML-KEM                October 2025


   Composite algorithms, as defined in this specification, follow this
   definition and should be regarded as a single key that performs a
   single cryptographic operation typical of a key establishment
   mechanism such as key generation, encapsulating, or decapsulating --
   using its internal concatenation of component keys as if they form a
   single key.  This generally means that the complexity of combining
   algorithms can and should be handled by the cryptographic library or
   cryptographic module, and the single composite public key, private
   key, and ciphertext can be carried in existing fields in protocols
   such as PKCS#10 [RFC2986], CMP [RFC4210], X.509 [RFC5280], CMS
   [RFC5652], and the Trust Anchor Format [RFC5914].  In this way,
   composites achieve "protocol backwards-compatibility" in that they
   will drop cleanly into any protocol that accepts an analogous single-
   algorithm cryptographic scheme without requiring any modification of
   the protocol to handle multiple algorithms.

   Discussion of the specific choices of algorithm pairings can be found
   in Section 7.2.

3.  Overview of the Composite ML-KEM Scheme

   Composite ML-KEM is a PQ/T hybrid Key Encapsulation Mechanism (KEM)
   which combines ML-KEM as specified in [FIPS.203] and
   [I-D.ietf-lamps-kyber-certificates] with one of RSA-OAEP defined in
   [RFC8017], the Elliptic Curve Diffie-Hellman key agreement schemes
   ECDH defined in section 5.7.1.2 of [SP.800-56Ar3], and X25519 / X448
   defined in [RFC8410].  A KEM combiner function is used to combine the
   two component shared secret keys into a single shared secret key.

   Composite Key Encapsulation Mechanisms are defined as cryptographic
   primitives that consist of three algorithms.  These definitions are
   borrowed from [RFC9180].

   *  KeyGen() -> (pk, sk): A probabilistic key generation algorithm,
      which generates a public key pk and a secret key sk.  Some
      cryptographic modules may also expose a KeyGen(seed) -> (pk, sk),
      which generates pk and sk deterministically from a seed.  This
      specification assumes a seed-based keygen for ML-KEM.

   *  Encap(pk) -> (ss, ct): A probabilistic encapsulation algorithm,
      which takes as input a public key pk and outputs a ciphertext ct
      and shared secret key ss.  Note: this specification uses Encap()
      to conform to [RFC9180], but [FIPS.203] uses Encaps().








Ounsworth, et al.         Expires 19 April 2026                 [Page 8]

Internet-Draft              Composite ML-KEM                October 2025


   *  Decap(sk, ct) -> ss: A decapsulation algorithm, which takes as
      input a secret key sk and ciphertext ct and outputs a shared
      secret ss, or in some cases a distinguished error value.  Note:
      this specification uses Decap() to conform to [RFC9180], but
      [FIPS.203] uses Decaps().

   The KEM interface defined above differs from both traditional key
   transport mechanism (for example for use with KeyTransRecipientInfo
   defined in [RFC5652]), and key agreement (for example for use with
   KeyAgreeRecipientInfo defined in [RFC5652]) and thus Composite ML-KEM
   MUST be used with KEMRecipientInfo defined in [RFC9629], however full
   conventions for use of Composite ML-KEM within the Cryptographic
   Message Syntax will be included in a separate specification.

   The KEM interface was chosen as the interface for a composite key
   establishment because it allows for arbitrary combinations of
   component algorithm types since both key transport and key agreement
   mechanisms can be promoted into KEMs as described in Section 3.1 and
   Section 3.2 below.

   The following algorithms are defined for serializing and
   deserializing component values.  These algorithms are inspired by
   similar algorithms in [RFC9180].

   *  SerializePublicKey(mlkemPK, tradPK) -> bytes: Produce a byte
      string encoding of the component public keys.

   *  DeserializePublicKey(bytes) -> (mlkemPK, tradPK): Parse a byte
      string to recover the component public keys.

   *  SerializeCiphertext(mlkemCT, tradCT) -> bytes: Produce a byte
      string encoding of the component ciphertexts.

   *  DeserializeCiphertext(bytes) -> (mlkemCT, tradCT): Parse a byte
      string to recover the component ciphertexts.

   *  SerializePrivateKey(mlkemSeed, tradPK, tradSK) -> bytes: Produce a
      byte string encoding of the component private keys.

   *  DeserializePrivateKey(bytes) -> (mlkemSeed, tradPK, tradSK): Parse
      a byte string to recover the component private keys.

   Full definitions of serialization and deserialization algorithms can
   be found in Section 5.







Ounsworth, et al.         Expires 19 April 2026                 [Page 9]

Internet-Draft              Composite ML-KEM                October 2025


3.1.  Promotion of RSA-OAEP into a KEM

   The RSA Optimal Asymmetric Encryption Padding (OAEP), as defined in
   section 7.1 of [RFC8017] is a public key encryption algorithm used to
   transport key material from a sender to a receiver.  A "key
   transport" type algorithm has the following API:

   *  Encrypt(pk, ss) -> ct: Take an existing shared secret key ss and
      encrypt it for pk.

   *  Decrypt(sk, ct) -> ss: Decrypt the ciphertext ct to recover ss.

   Note the difference between the API of RSA.Encrypt(pk, ss) -> ct and
   KEM.Encap(pk) -> (ss, ct) presented above.  For this reason, RSA-OAEP
   cannot be directly combined with ML-KEM.  Fortunately, a key
   transport mechanism such as RSA-OAEP can be easily promoted into a
   KEM by having the sender generate a random 256 bit shared secret key
   and encrypt it.

   RSAOAEPKEM.Encap(pkR):
     shared_secret = SecureRandom(ss_len)
     enc = RSAES-OAEP-ENCRYPT(pkR, shared_secret)

     return shared_secret, enc

   Acceptable public key encodings for pkR are described in Section 5.

   Note that the OAEP label L is left to its default value, which is the
   empty string as per [RFC8017].  The shared secret key output by the
   overall Composite ML-KEM already binds a composite KEM Combiner
   Label, so there is no need to also use the component Label.

   The value of ss_len as well as concrete values for all the RSA-OAEP
   parameters used within this specification can be found in
   Section 7.1.

   Decap(sk, ct) -> ss is accomplished by direct use of OAEP Decrypt.

   RSAOAEPKEM.Decap(skR, enc):
     shared_secret = RSAES-OAEP-DECRYPT(skR, enc)

     return shared_secret

   A quick note on the choice of RSA-OAEP as the supported RSA
   encryption primitive.  RSA-KEM [RFC5990] is cryptographically robust
   and is more straightforward to work with, but it has fairly limited
   adoption and therefore is of limited value as a PQ migration
   mechanism.  Also, while RSA-PKCS#1v1.5 [RFC8017] is still widely



Ounsworth, et al.         Expires 19 April 2026                [Page 10]

Internet-Draft              Composite ML-KEM                October 2025


   used, it is hard to make secure and no longer FIPS-approved as of the
   end of 2023 [SP800-131Ar2], so it is of limited forwards value.  This
   leaves RSA-OAEP [RFC8017] as the remaining choice.  See Section 7.2
   for further discussion of algorithm choices.

   Note that, at least at the time of writing, the algorithm RSAOAEPKEM
   is not defined as a standalone algorithm within PKIX standards and it
   does not have an assigned algorithm OID, so it cannot be used
   directly with CMS KEMRecipientInfo [RFC9629]; it is merely a building
   block for the composite algorithm.

3.2.  Promotion of ECDH into a KEM

   The elliptic curve Diffie-Hellman algorithm identified by the OID id-
   ecDH as defined in [RFC5480] and [SEC1] is a key agreement algorithm
   requiring both parties to contribute an asymmetric keypair to the
   derivation of the shared secret key.  A "key agreement" type
   algorithm has the following API:

   *  DH(skX, pkY) -> ss: Each party combines their secret key skX with
      the other party's public key pkY.

   Note the difference between the API of DH(skX, pkY) -> ss and
   KEM.Encap(pk) -> (ss, ct) presented above.  For this reason, a
   Diffie-Hellman key exchange cannot be directly combined with ML-KEM.
   Fortunately, a Diffie-Hellman key agreement can be easily promoted
   into a KEM Encap(pk) -> (ss, ct) by having the sender generate an
   ephemeral keypair for themself and sending their public key as the
   ciphertext ct.  Composite ML-KEM uses a simplified version of the
   DHKEM definition from [RFC9180]:

   DHKEM.Encap(pkR):
     (skE, pkE) = GenerateKeyPair()
     ss = DH(skE, pkR)
     ct = SerializePublicKey(pkE)

     return ss, ct

   Decap(sk, ct) -> ss is accomplished in the analogous way.

   DHKEM.Decap(skR, ct):
     pkE = DeserializePublicKey(ct)
     ss = DH(skR, pkE)

     return ss

   This construction applies for all variants of elliptic curve Diffie-
   Hellman used in this specification: ECDH, X25519, and X448.



Ounsworth, et al.         Expires 19 April 2026                [Page 11]

Internet-Draft              Composite ML-KEM                October 2025


   For ECDH, DH() yields the value Z as described in section 5.7.1.2 of
   [SP.800-56Ar3].  Acceptable public key encodings for enc and pkE are
   described in Section 5.

   For X25519 and X448, DH() yields the value K as described in section
   6 of [RFC7748].  Acceptable public key encodings for enc and pkE are
   described in Section 5.

   The promotion of DH to a KEM is similar to the DHKEM functions in
   [RFC9180], but it is simplified in the following ways:

   1.  Notation has been aligned to the notation used in this
       specification.

   2.  Since a KEM Combiner Label is included explicitly in the
       Composite ML-KEM combiner, there is no need to perform the
       labeled steps of ExtractAndExpand().

   3.  Since the ciphertext and receiver's public key are included
       explicitly in the Composite ML-KEM combiner, there is no need to
       construct the kem_context object.

   Note that here, SerializePublicKey() and DeserializePublicKey() refer
   to the underlying encoding of the DH primitive, and not to the
   composite serialization functions defined in Section 5.  Acceptable
   serializations for the underlying DH primitives are described in
   Section 5.

   Note that, at least at the time of writing, the algorithm DHKEM is
   not defined as a standalone algorithm within PKIX standards and it
   does not have an assigned algorithm OID, so it cannot be used
   directly with CMS KEMRecipientInfo [RFC9629]; it is merely a building
   block for the composite algorithm.

4.  Composite ML-KEM Functions

   This section describes the composite ML-KEM functions needed to
   instantiate the public API of a Key Encapsulation Mechanism as
   defined in Section 3.

4.1.  Key Generation

   In order to maintain security properties of the composite,
   applications that use composite keys MUST always perform fresh key
   generations of both component keys and MUST NOT reuse existing key
   material.  See Section 10.3 for a discussion.





Ounsworth, et al.         Expires 19 April 2026                [Page 12]

Internet-Draft              Composite ML-KEM                October 2025


   To generate a new keypair for composite schemes, the KeyGen() -> (pk,
   sk) function is used.  The KeyGen() function calls the two key
   generation functions of the component algorithms independently.
   Multi-threaded, multi-process, or multi-module applications might
   choose to execute the key generation functions in parallel for better
   key generation performance or architectural modularity.

   The following describes how to instantiate a KeyGen() function for a
   given composite algorithm represented by <OID>.

   Composite-ML-KEM<OID>.KeyGen() -> (pk, sk)

   Explicit Inputs:
        None

   Implicit Inputs mapped from <OID>:

     ML-KEM     The underlying ML-KEM algorithm and
                parameter set, for example, could be "ML-KEM-768".

     Trad       The underlying traditional algorithm and
                parameter, for example "RSA-OAEP"
                or "X25519".

   Output:
     (pk, sk)  The composite keypair.

   Key Generation Process:

     1. Generate component keys

       mlkemSeed = Random(64)
       (mlkemPK, mlkemSK) = ML-KEM.KeyGen(mlkemSeed)
       (tradPK, tradSK) = Trad.KeyGen()

     2. Check for component key gen failure
       if NOT (mlkemPK, mlkemSK) or NOT (tradPK, tradSK):
         output "Key generation error"

     3. Output the composite public and private keys

       pk = SerializePublicKey(mlkemPK, tradPK)
       sk = SerializePrivateKey(mlkemSeed, tradPK, tradSK)
       return (pk, sk)

   In order to ensure fresh keys, the key generation functions MUST be
   executed for both component algorithms.  Compliant parties MUST NOT
   use, import or export component keys that are used in other contexts,



Ounsworth, et al.         Expires 19 April 2026                [Page 13]

Internet-Draft              Composite ML-KEM                October 2025


   combinations, or by themselves as keys for standalone algorithm use.
   For more details on the security considerations around key reuse, see
   Section 10.3.

   Note that this keygen routine outputs a serialized composite key,
   which contains only the ML-KEM seed.  Implementations should feel
   free to modify this routine to output the expanded mlkemSK or to make
   free use of ML-KEM.KeyGen(mldsaSeed) as needed to expand the ML-KEM
   seed into an expanded prior to performing a decapsulation operation.

   Variations in the keygen process above and decapsulation processes
   below to accommodate particular private key storage mechanisms or
   alternate interfaces to the underlying cryptographic modules are
   considered to be conformant to this specification so long as they
   produce the same output and error handling.

   For example, component private keys stored in separate software or
   hardware modules where it is not possible to do a joint simultaneous
   keygen would be considered compliant so long as both keys are freshly
   generated.  It is also possible that the underlying cryptographic
   module does not expose a ML-KEM.KeyGen(seed) that accepts an
   externally-generated seed, and instead an alternate keygen interface
   must be used.  Note however that cryptographic modules that do not
   support seed-based ML-KEM key generation will be incapable of
   importing or exporting composite keys in the standard format since
   the private key serialization routines defined in Section 5.2 only
   support ML-KEM keys as seeds.

   Errors produced by the component KeyGen() routines MUST be forwarded
   on to the calling application.  Further discussion can be found below
   in Section 4.5.

4.2.  Encapsulation

   The Encap(pk) of a Composite ML-KEM algorithm is designed to behave
   exactly the same as ML-KEM.Encaps(ek) defined in Algorithm 20 in
   Section 7.2 of [FIPS.203].  Specifically, Composite-ML-KEM.Encap(pk)
   produces a 256-bit shared secret key that can be used directly with
   any symmetric-key cryptographic algorithm.  In this way, Composite
   ML-KEM can be used as a direct drop-in replacement anywhere that ML-
   KEM is used.

   The following describes how to instantiate a Encap(pk) function for a
   given composite algorithm represented by <OID>.







Ounsworth, et al.         Expires 19 April 2026                [Page 14]

Internet-Draft              Composite ML-KEM                October 2025


   Composite-ML-KEM<OID>.Encap(pk) -> (ss, ct)

   Explicit Inputs:

     pk      Composite public key consisting of encryption public keys
             for each component.

   Implicit inputs mapped from <OID>:

     ML-KEM  The underlying ML-KEM algorithm and
             parameter set, for example "ML-KEM-768".

     Trad    The underlying ML-KEM algorithm and
             parameter set, for example "RSA-OAEP"
             or "X25519".

     KDF     The KDF specified for the given Composite ML-KEM algorithm.
             See algorithm specifications below.

     Label   KEM Combiner Label value for binding the ciphertext to the
             Composite OID. See section on KEM Combiner Labels below.

   Output:

     ss      The shared secret key, a 256-bit key suitable for use with
             symmetric cryptographic algorithms.

     ct      The ciphertext, a byte string.

   Encap Process:

     1. Separate the public keys.

         (mlkemPK, tradPK) = DeserializePublicKey(pk)

     2.  Perform the respective component Encap operations according to
         their algorithm specifications.

         (mlkemCT, mlkemSS) = ML-KEM.Encaps(mlkemPK)
         (tradCT, tradSS) = TradKEM.Encap(tradPK)

     3. If either ML-KEM.Encaps() or TradKEM.Encap() return an error,
        then this process must return an error.

         if NOT (mlkemCT, mlkemSS) or NOT (tradCT, tradSS):
           output "Encapsulation error"

     4. Encode the ciphertext



Ounsworth, et al.         Expires 19 April 2026                [Page 15]

Internet-Draft              Composite ML-KEM                October 2025


         ct = SerializeCiphertext(mlkemCT, tradCT)

     5. Combine the KEM secrets and additional context to yield the
        composite shared secret key.

           ss = KemCombiner<KDF>(mlkemSS, tradSS, tradCT, tradPK, Label)

     6. Output composite shared secret key and ciphertext.

        return (ss, ct)

   Depending on the security needs of the application, it MAY be
   advantageous to perform steps 2, 3, and 5 in a timing-invariant way
   to prevent side-channel attackers from learning which component
   algorithm failed and from learning any of the inputs or output of the
   KEM combiner.

   The specific values for KDF and the specific values for Label are
   defined per Composite ML-KEM algorithm in Section 7.

   Errors produced by the component Encaps() routines MUST be forwarded
   on to the calling application.  Further discussion can be found below
   in Section 4.5.

4.3.  Decapsulation

   The Decap(sk, ct) -> ss of a Composite ML-KEM algorithm is designed
   to behave exactly the same as ML-KEM.Decaps(dk, c) defined in
   Algorithm 21 in Section 7.3 of [FIPS.203].  Specifically, Composite-
   ML-KEM.Decap(sk, ct) produces a 256-bit shared secret key that can be
   used directly with any symmetric-key cryptographic algorithm.  In
   this way, Composite ML-KEM can be used as a direct drop-in
   replacement anywhere that ML-KEM is used.

   The following describes how to instantiate a Decap(sk, ct) function
   for a given composite algorithm represented by <OID>.

   Composite-ML-KEM<OID>.Decap(sk, ct) -> ss

   Explicit inputs

     sk      Composite private key consisting of decryption private
             keys for each component.

     ct      The ciphertext, a byte string.

   Implicit inputs mapped from <OID>:




Ounsworth, et al.         Expires 19 April 2026                [Page 16]

Internet-Draft              Composite ML-KEM                October 2025


     ML-KEM  The underlying ML-KEM algorithm and
             parameter set, for example, could be "ML-KEM-768".

     Trad    The underlying traditional algorithm and
             parameter set, for example "RSA-OAEP"
             or "X25519".

     tradPK  The traditional public key is required for the KEM
             combiner.
             The suggested algorithm below extracts the tradPK
             from sk, however implementations that use a non-standard
             private key encoding will need to obtain the traditional
             public key some other way.

     KDF     The KDF specified for the given Composite ML-KEM
             algorithm. See algorithm specifications below.

     Label   KEM Combiner Label value for binding the ciphertext to
             the Composite ML-KEM OID.
             See section on KEM Combiner Labels below.

   Output:

     ss      The shared secret key, a 256-bit key suitable for use
             with symmetric cryptographic algorithms.

   Decap Process:

     1. Separate the private keys and ciphertexts

         (mlkemSeed, tradPK, tradSK) = DeserializePrivateKey(sk)
         (_, mlkemSK) = ML-KEM.KeyGen(mlkemSeed)
         (mlkemCT, tradCT) = DeserializeCiphertext(ct)

     2.  Perform the respective component Encap operations according
         to their algorithm specifications.

         mlkemSS = ML-KEM.Decaps(mlkemSK, mlkemCT)
         tradSS  = TradKEM.Decap(tradSK, tradCT)

     3. If either ML-KEM.Decaps() or TradKEM.Decap() return an error,
        then this process must return an error.

         if NOT mlkemSS or NOT tradSS:
           output "Encapsulation error"

     4. Combine the KEM secrets and additional context to yield the
        composite shared secret key.



Ounsworth, et al.         Expires 19 April 2026                [Page 17]

Internet-Draft              Composite ML-KEM                October 2025


         ss = KemCombiner<KDF>(mlkemSS, tradSS, tradCT, tradPK, Label)

     5. Output composite shared secret key.

        return ss

   Steps 2, 3, and 4 SHOULD be performed in a timing-invariant way to
   prevent side-channel attackers from learning which component
   algorithm failed and from learning any of the inputs or output of the
   KEM combiner.

   It is possible to use component private keys stored in separate
   software or hardware keystores.  Variations in the process to
   accommodate particular private key storage mechanisms are considered
   to be conformant to this specification so long as it produces the
   same output and error handling as the process sketched above.

   In order to properly achieve its security properties, the KEM
   combiner requires that all inputs are fixed-length.  Since each
   Composite ML-KEM algorithm fully specifies its component algorithms,
   including key sizes, all inputs should be fixed-length in non-error
   scenarios except for minor variations introduced by encoding.
   However some implementations may choose to perform additional
   checking to handle certain error conditions.  In particular, the KEM
   combiner step should not be performed if either of the component
   decapsulations returned an error condition indicating malformed
   inputs.  For timing-invariance reasons, it is RECOMMENDED to perform
   both decapsulation operations and check for errors afterwards to
   prevent an attacker from using a timing channel to tell which
   component failed decapsulation.  Also, RSA-based composites MUST
   ensure that the modulus size (i.e. the size of tradCT and tradPK)
   matches that specified for the given Composite ML-KEM algorithm in
   Section 7; depending on the cryptographic library used, this check
   may be done by the library or may require an explicit check as part
   of the Composite-ML-KEM.Decap() routine.  Implementers should keep in
   mind that some instances of tradCT and tradPK will be DER-encoded
   which could introduce minor length variations such as dropping
   leading zeroes; since these variations are not attacker-controlled
   they are considered benign.

   Errors produced by the component Decaps() routines MUST be forwarded
   on to the calling application.  Further discussion can be found below
   in Section 4.5.








Ounsworth, et al.         Expires 19 April 2026                [Page 18]

Internet-Draft              Composite ML-KEM                October 2025


4.4.  KEM Combiner Function

   As noted in the Encapsulation and Decapsulation procedures above, the
   KEM combiner is parameterized by the choice of underlying KDF.  This
   specification provides a combiner construction with SHA3-256 for all
   combinations of algorithms.

   KemCombiner(mlkemSS, tradSS, tradCT, tradPK, Label) -> ss

   Explicit inputs:

     The list of input values to be combined.

   Output:

     ss      The shared secret key, a 256-bit key suitable for use with
             symmetric cryptographic algorithms.


   Process:

     ss = SHA3-256(mlkemSS || tradSS || tradCT || tradPK || Label)

     return ss

4.5.  Error Handling and Explicit Rejection

   ML-KEM, particularly its Decaps() defined in Algorithms 18 and 21 of
   [FIPS.203], is designed to be implicitly rejecting, meaning that a
   failure within the underlying PKE scheme due to a mangled ciphertext
   will not cause ML-KEM.Decaps() to return an error, but instead any
   errors encountered during decapsulation are handled by producing a
   pseudo-randomized shared secret that does not match the intended
   shared secret.  ML-KEM.Decaps() can, however return errors for
   example if the provided ciphertext or decapsulation private key is
   the wrong size.

   In Composite ML-KEM, not all component algorithms will be implicitly
   rejecting, for example RSA-OAEP's Decrypt() can return an error if
   the padding is incorrect.  In general, in the case that one of the
   component primitives generates an error during Composite ML-KEM
   KeyGen, Encaps, or Decaps, if a component primitive returns an error,
   Composite ML-KEM MUST clear all buffers containing key material and
   forward the error to its caller; I.E.  Composite ML-KEM MUST be
   explicitly rejecting whenever one of its components is.  The same
   applies to Composite ML-KEM KeyGen() and Encaps(): Composite KEM MUST
   forward any errors produced by component algorithms.




Ounsworth, et al.         Expires 19 April 2026                [Page 19]

Internet-Draft              Composite ML-KEM                October 2025


5.  Serialization

   This section presents routines for serializing and deserializing
   composite public keys, private keys, and ciphertext values to bytes
   via simple concatenation of the underlying encodings of the component
   algorithms.  The functions defined in this section are considered
   internal implementation detail and are referenced from within the
   public API definitions in Section 4.

   Deserialization is possible because ML-KEM has fixed-length public
   keys, private keys (seeds), and ciphertext values as shown in the
   following table.

          +=============+============+=============+============+
          | Algorithm   | Public Key | Private Key | Ciphertext |
          +=============+============+=============+============+
          | ML-KEM-768  | 1184       | 64          | 1088       |
          +-------------+------------+-------------+------------+
          | ML-KEM-1024 | 1568       | 64          | 1568       |
          +-------------+------------+-------------+------------+

                           Table 1: ML-KEM Sizes

   For all serialization routines below, when these values are required
   to be carried in an ASN.1 structure, they are wrapped as described in
   Section 6.1.

   While ML-KEM has a single fixed-size representation for each of
   public key, private key, and ciphertext, the traditional component
   might allow multiple valid encodings; for example an elliptic curve
   public key, and therefore also ciphertext, might be validly encoded
   as either compressed or uncompressed [SEC1], or an RSA private key
   could be encoded in Chinese Remainder Theorem form [RFC8017].  In
   order to obtain interoperability, composite algorithms MUST use the
   following encodings of the underlying components:

   *  *ML-KEM*: MUST be encoded as specified in sections 7.1 and 7.2 of
      [FIPS.203], using a 64-byte seed as the private key.

   *  *RSA*: the public key MUST be encoded as RSAPublicKey with the
      (n,e) public key representation as specified in A.1.1 of [RFC8017]
      and the private key representation as RSAPrivateKey specified in
      A.1.2 of [RFC8017] with version 0 and 'otherPrimeInfos' absent.
      An RSA-OAEP ciphertext MUST be encoded as specified in section
      7.1.1 of [RFC8017]






Ounsworth, et al.         Expires 19 April 2026                [Page 20]

Internet-Draft              Composite ML-KEM                October 2025


   *  *ECDH*: public key MUST be encoded as an uncompressed X9.62
      [X9.62–2005], including the leading byte 0x04 indicating
      uncompressed.  This is consistent with the encoding of ECPoint as
      specified in section 2.2 of [RFC5480] when no ASN.1 OCTET STRING
      wrapping is present.  The private key MUST be encoded as
      ECPrivateKey specified in [RFC5915] with 'NamedCurve' parameter
      set to the OID of the curve, but without the 'publicKey' field.

   *  *X25519 and X448*: the public key MUST be encoded as per section 5
      of [RFC7748] and the private key is a 32 or 57 byte raw value for
      Ed25519 and Ed448 respectively, which can be converted to a
      CurvePrivateKey specified in [RFC8410] by the addition of an OCTET
      STRING wrapper.

   All ASN.1 objects SHALL be encoded using DER on serialization.

   Even with fixed encodings for the traditional component, there may be
   slight differences in size of the encoded value due to, for example,
   encoding rules that drop leading zeroes.  See Appendix A for further
   discussion of encoded size of each composite algorithm.

   The deserialization routines described below do not check for well-
   formedness of the cryptographic material they are recovering.  It is
   assumed that underlying cryptographic primitives will catch malformed
   values and raise an appropriate error.

5.1.  SerializePublicKey and DeserializePublicKey

   The serialization routine for keys simply concatenates the public
   keys of the component algorithms, as defined below:





















Ounsworth, et al.         Expires 19 April 2026                [Page 21]

Internet-Draft              Composite ML-KEM                October 2025


   Composite-ML-KEM.SerializePublicKey(mlkemPK, tradPK) -> bytes

   Explicit inputs:

     mlkemPK The ML-KEM public key, which is bytes.

     tradPK  The traditional public key in the appropriate
             encoding for the underlying component algorithm.

   Implicit inputs:

     None

   Output:

     bytes   The encoded composite public key.


   Serialization Process:

     1. Combine and output the encoded public key

        output mlkemPK || tradPK

   Deserialization reverses this process.  Each component key is
   deserialized according to their respective specification as shown in
   Appendix B.

   The following describes how to instantiate a
   DeserializePublicKey(bytes) function for a given composite algorithm
   represented by <OID>.




















Ounsworth, et al.         Expires 19 April 2026                [Page 22]

Internet-Draft              Composite ML-KEM                October 2025


  Composite-ML-KEM<OID>.DeserializePublicKey(bytes) -> (mlkemPK, tradPK)

  Explicit inputs:

    bytes   An encoded composite public key.

  Implicit inputs mapped from <OID>:

    ML-KEM   The underlying ML-KEM algorithm and
             parameter, for example, could be "ML-KEM-768".

  Output:

    mlkemPK  The ML-KEM public key, which is bytes.

    tradPK   The traditional public key in the appropriate
             encoding for the underlying component algorithm.


  Deserialization Process:

    1. Parse each constituent encoded public key.
         The length of the mlkemPK is known based on the size of
         the ML-KEM component key length specified by the Object ID.

       switch ML-KEM do
          case ML-KEM-768:
            mlkemPK = bytes[:1184]
            tradPK  = bytes[1184:]
          case ML-KEM-1024:
            mlkemPK = bytes[:1568]
            tradPK  = bytes[1568:]

       Note that while ML-KEM has fixed-length keys, RSA and ECDH
       may not, depending on encoding, so rigorous length-checking
       of the overall composite key is not always possible.

    2. Output the component public keys

       output (mlkemPK, tradPK)

5.2.  SerializePrivateKey and DeserializePrivateKey

   The serialization routine for keys simply concatenates the private
   keys of the component algorithms, as defined below:






Ounsworth, et al.         Expires 19 April 2026                [Page 23]

Internet-Draft              Composite ML-KEM                October 2025


   Composite-ML-KEM.SerializePrivateKey(mlkemSeed, tradPK, tradSK)
                                     -> bytes

   Explicit inputs:

     mlkemSeed  The ML-KEM private key, which is the bytes of the seed.

     tradPK     The traditional public key in the appropriate
                encoding for the underlying component algorithm.
                This is required by the decapsulater for inclusion
                in the KEM combiner.

     tradSK     The traditional private key in the appropriate
                encoding for the underlying component algorithm.

   Implicit inputs:

     None

   Output:

     bytes   The encoded composite private key.

   Serialization Process:

     1. Compute the length of tradPK

        lenTradPK = IntegerToBytes( len(tradPK), 2 )

     2. Combine and output the encoded private key.

        output mlkemSeed || lenTradPK || tradPK || tradSK

   The function IntegerToBytes(x, a) is defined in Algorithm 11 of
   [FIPS.204], which is the usual little-endian encoding of an integer.
   Encoding to 2 bytes allows for traditional public keys up to 65 kb.

   Deserialization reverses this process.  Each component key is
   deserialized according to their respective specification as shown in
   Appendix B.

   The following describes how to instantiate a
   DeserializePrivateKey(bytes) function.  Since ML-KEM private keys are
   64 bytes for all parameter sets, this function does not need to be
   parametrized.






Ounsworth, et al.         Expires 19 April 2026                [Page 24]

Internet-Draft              Composite ML-KEM                October 2025


   Composite-ML-KEM.DeserializePrivateKey(bytes)
                                       -> (mlkemSeed, tradPK, tradSK)

   Explicit inputs:

     bytes   An encoded composite private key.

   Implicit inputs:

     That an ML-KEM private key is 64 bytes for all parameter sets.

   Output:

     mlkemSeed  The ML-KEM private key, which is the bytes of the seed.

     tradSK    The traditional private key in the appropriate
                encoding for the underlying component algorithm.


   Deserialization Process:

     1. Parse the ML-DSA seed, which is always a 64 byte seed
        for all parameter sets.

        mlkemSeed = bytes[:64]


     2. Parse the traditional public and private key

        lenTradPK = BytesToInteger( bytes[64:66] )
        tradPK = bytes[66: 66+lenTradPK]

        tradSK  = bytes[66+lenTradPK:]

        Note that while ML-KEM has fixed-length keys, RSA and ECDH
        may not, depending on encoding, so rigorous length-checking
        of the overall composite key is not always possible.

     2. Output the component private keys

        output (mlkemSeed, tradPK, tradSK)

   The function BytesToInteger(x) is not defined in [FIPS.204], but is
   the obvious inverse of the defined IntegerToBytes() which is the
   usual little-endian encoding of an integer.






Ounsworth, et al.         Expires 19 April 2026                [Page 25]

Internet-Draft              Composite ML-KEM                October 2025


5.3.  SerializeCiphertext and DeserializeCiphertext

   The serialization routine for the composite ciphertext value simply
   concatenates the fixed-length ML-KEM ciphertext with the ciphertext
   from the traditional algorithm, as defined below:

   Composite-ML-KEM.SerializeCiphertext(mlkemCT, tradCT) -> bytes

   Explicit inputs:

     mlkemCT  The ML-KEM ciphertext, which is bytes.

     tradCT   The traditional ciphertext in the appropriate
              encoding for the underlying component algorithm.

   Implicit inputs:

     None

   Output:

     bytes   The encoded composite ciphertext value.


   Serialization Process:

     1. Combine and output the encoded composite ciphertext

        output mlkemCT || tradCT

   Deserialization reverses this process.  Each component ciphertext is
   deserialized according to their respective specification as shown in
   Appendix B.

   The following describes how to instantiate a
   DeserializeCiphertext(bytes) function for a given composite algorithm
   represented by <OID>.














Ounsworth, et al.         Expires 19 April 2026                [Page 26]

Internet-Draft              Composite ML-KEM                October 2025


   Composite-ML-KEM<OID>.DeserializeCiphertext(bytes)
                                             -> (mldkemCT, tradCT)

   Explicit inputs:

     bytes   An encoded composite ciphertext value.

   Implicit inputs mapped from <OID>:

     ML-KEM   The underlying ML-KEM algorithm and
              parameter, for example, could be "ML-KEM-768".

   Output:

     mlkemCT  The ML-KEM ciphertext, which is bytes.

     tradCT   The traditional ciphertext in the appropriate
              encoding for the underlying component algorithm.


   Deserialization Process:

     1. Parse each constituent encoded ciphertext.
        The length of the mlkemCT is known based on the size of the
        ML-KEM component ciphertext length specified by the Object ID.

        switch ML-KEM do
           case ML-KEM-768:
             mlkemCT = bytes[:1088]
             tradCT  = bytes[1088:]
           case ML-KEM-1024:
             mlkemCT= bytes[:1568]
             tradCT  = bytes[1568:]

        Note that while ML-KEM has fixed-length ciphertexts, RSA and
        ECDH may not, depending on encoding, so rigorous length-checking
        is not always possible here.

     2. Output the component ciphertext values

        output (mlkemCT, tradCT)

6.  Use within X.509 and PKIX

   The following sections provide processing logic and the necessary
   ASN.1 modules necessary to use composite ML-KEM within X.509 and PKIX
   protocols.  Use within the Cryptographic Message Syntax (CMS) will be
   covered in a separate specification.



Ounsworth, et al.         Expires 19 April 2026                [Page 27]

Internet-Draft              Composite ML-KEM                October 2025


   While composite ML-KEM keys and ciphertext values MAY be used raw,
   the following sections provide conventions for using them within
   X.509 and other PKIX protocols such that Composite ML-KEM can be used
   as a drop-in replacement for KEM algorithms in PKCS#10 [RFC2986], CMP
   [RFC4210], X.509 [RFC5280], and related protocols.

6.1.  Encoding to DER

   The serialization routines presented in Section 5 produce raw binary
   values.  When these values are required to be carried within a DER-
   encoded message format such as an X.509's subjectPublicKey and
   signatureValue BIT STRING [RFC5280] or a OneAsymmetricKey.privateKey
   OCTET STRING [RFC5958], then the BIT STRING or OCTET STRING contains
   this raw byte string encoding of the public key.

   When a Composite ML-KEM public key appears outside of a
   SubjectPublicKeyInfo type in an environment that uses ASN.1 encoding,
   it could be encoded as an OCTET STRING by using the Composite-ML-KEM-
   PublicKey type defined below.

   Composite-ML-KEM-PublicKey ::= OCTET STRING

   Size constraints MAY be enforced, as appropriate as per Appendix A.

6.2.  Key Usage Bits

   When any Composite ML-KEM Object Identifier appears within the
   SubjectPublicKeyInfo.AlgorithmIdentifier field of an X.509
   certificate [RFC5280], the key usage certificate extension MUST only
   contain:

   keyEncipherment

   Composite ML-KEM keys MUST NOT be used in a "dual usage" mode because
   even if the traditional component key supports both signing and
   encryption, the post-quantum algorithms do not and therefore the
   overall composite algorithm does not.  Implementations MUST NOT use
   one component of the composite for the purposes of digital signature
   and the other component for the purposes of encryption or key
   establishment.

6.3.  ASN.1 Definitions

   Composite ML-KEM uses a substantially non-ASN.1 based encoding, as
   specified in Section 5.  However, as composite algorithms will be
   used within ASN.1-based X.509 and PKIX protocols, some conventions
   for ASN.1 wrapping are necessary.




Ounsworth, et al.         Expires 19 April 2026                [Page 28]

Internet-Draft              Composite ML-KEM                October 2025


   The following ASN.1 Information Object Classes are defined to allow
   for compact definitions of each composite algorithm, leading to a
   smaller overall ASN.1 module.

   pk-CompositeKEM {OBJECT IDENTIFIER:id}
     PUBLIC-KEY ::= {
       IDENTIFIER id
       -- KEY without ASN.1 wrapping --
       PARAMS ARE absent
       CERT-KEY-USAGE { keyEncipherment }
     }

   kema-CompositeKEM {
     OBJECT IDENTIFIER:id,
       PUBLIC-KEY:publicKeyType }
       KEM-ALGORITHM ::= {
            IDENTIFIER id
            -- VALUE without ASN.1 wrapping --
            PARAMS ARE absent
            PUBLIC-KEYS { publicKeyType }
            SMIME-CAPS { IDENTIFIED BY id }
           }

      Figure 1: ASN.1 Object Information Classes for Composite ML-KEM

   As an example, the public key and KEM algorithm types associated with
   id-MLKEM768-ECDH-P256-SHA3-256 are defined as:

   pk-MLKEM768-ECDH-P256-SHA3-256 PUBLIC-KEY ::=
     pk-CompositeKEM {
       id-MLKEM768-ECDH-P256-SHA3-256 }

   kema-MLKEM768-ECDH-P256-SHA3-256 KEM-ALGORITHM ::=
       kema-CompositeKEM{
         id-MLKEM768-ECDH-P256-SHA3-256,
         pk-MLKEM768-ECDH-P256-SHA3-256 }

   The full set of key types defined by this specification can be found
   in the ASN.1 Module in Section 8.

   Use cases that require an interoperable encoding for composite
   private keys will often need to place a composite private key inside
   a OneAsymmetricKey structure defined in [RFC5958], such as when
   private keys are carried in PKCS #12 [RFC7292], CMP [RFC4210] or CRMF
   [RFC4211].  The definition of OneAsymmetricKey is copied here for
   convenience:





Ounsworth, et al.         Expires 19 April 2026                [Page 29]

Internet-Draft              Composite ML-KEM                October 2025


    OneAsymmetricKey ::= SEQUENCE {
          version                   Version,
          privateKeyAlgorithm       PrivateKeyAlgorithmIdentifier,
          privateKey                PrivateKey,
          attributes            [0] Attributes OPTIONAL,
          ...,
          [[2: publicKey        [1] PublicKey OPTIONAL ]],
          ...
        }

     ...
     PrivateKey ::= OCTET STRING
                           -- Content varies based on type of key.  The
                           -- algorithm identifier dictates the format of
                           -- the key.

             Figure 2: OneAsymmetricKey as defined in [RFC5958]

   When a composite private key is conveyed inside a OneAsymmetricKey
   structure (version 1 of which is also known as PrivateKeyInfo)
   [RFC5958], the privateKeyAlgorithm field SHALL be set to the
   corresponding composite algorithm identifier defined according to
   Section 7 and its parameters field MUST be absent.  The privateKey
   field SHALL contain the OCTET STRING representation of the serialized
   composite private key as per Section 5.2.  The publicKey field
   remains OPTIONAL.  If the publicKey field is present, it MUST be a
   composite public key as per Section 5.1.

   Some applications might need to reconstruct the SubjectPublicKeyInfo
   or OneAsymmetricKey objects corresponding to each component key
   individually, for example if this is required for invoking the
   underlying primitive.  Section 7 provides the necessary mapping
   between composite and their component algorithms for doing this
   reconstruction.

   Component keys of a composite private key MUST NOT be used in any
   other type of key or as a standalone key.  For more details on the
   security considerations around key reuse, see Section 10.3.

7.  Algorithm Identifiers and Parameters

   This section lists the algorithm identifiers and parameters for all
   Composite ML-KEM algorithms.

   Full specifications for the referenced algorithms can be found in
   Appendix B.





Ounsworth, et al.         Expires 19 April 2026                [Page 30]

Internet-Draft              Composite ML-KEM                October 2025


   As the number of algorithms can be daunting to implementers, see
   Section 11.3 for a discussion of choosing a subset to support.

   Each Composite ML-KEM algorithm has a unique Label which is used in
   constructing the KEM combiner in (Section 4.4).  This helps protect
   against a different algorithm arriving at the same shared secret key
   even if all inputs are the same.

   Label values are provided as ASCII strings, but MUST be converted
   into binary strings in the obvious way.  For example:

   *  ".//^" in hexadecimal is "5c2e2f2f5e5c"

   *  "QSF-MLKEM768-P256-SHA3-256" in hexadecimal is
      "5153462d4d4c4b454d3736382d503235362d534841332d323536"

   EDNOTE: the OIDs listed below are prototyping OIDs defined in
   Entrust's 2.16.840.1.114027.80.9.1 arc but will be replaced by IANA.

   Composite KEM algorithm list:

   *  id-MLKEM768-RSA2048-SHA3-256

      -  OID: 2.16.840.1.114027.80.5.2.62

      -  Label: "QSF-MLKEM768-RSAOAEP2048-SHA3256"

      -  Key Derivation Function (KDF): SHA3-256

      -  ML-KEM variant: ML-KEM-768

      -  Traditional Algorithm: RSA

         o  Traditional KEM Algorithm: id-RSAES-OAEP

         o  RSA size: 2048

         o  RSAES-OAEP parameters: See Table 2

   *  id-MLKEM768-RSA3072-SHA3-256

      -  OID: 2.16.840.1.114027.80.5.2.63

      -  Label: "QSF-MLKEM768-RSAOAEP3072-SHA3256"

      -  Key Derivation Function (KDF): SHA3-256

      -  ML-KEM variant: ML-KEM-768



Ounsworth, et al.         Expires 19 April 2026                [Page 31]

Internet-Draft              Composite ML-KEM                October 2025


      -  Traditional Algorithm: RSA

         o  Traditional KEM Algorithm: id-RSAES-OAEP

         o  RSA size: 3072

         o  RSAES-OAEP parameters: See Table 2

   *  id-MLKEM768-RSA4096-SHA3-256

      -  OID: 2.16.840.1.114027.80.5.2.64

      -  Label: "QSF-MLKEM768-RSAOAEP4096-SHA3256"

      -  Key Derivation Function (KDF): SHA3-256

      -  ML-KEM variant: ML-KEM-768

      -  Traditional Algorithm: RSA

         o  Traditional KEM Algorithm: id-RSAES-OAEP

         o  RSA size: 4096

         o  RSAES-OAEP parameters: See Table 2

   *  id-MLKEM768-X25519-SHA3-256

      -  OID: 2.16.840.1.114027.80.5.2.65

      -  Label: "\.//^\"

      -  Key Derivation Function (KDF): SHA3-256

      -  ML-KEM variant: ML-KEM-768

      -  Traditional Algorithm: X25519

         o  Traditional KEM Algorithm: id-X25519

   *  id-MLKEM768-ECDH-P256-SHA3-256

      -  OID: 2.16.840.1.114027.80.5.2.66

      -  Label: "QSF-MLKEM768-P256-SHA3256"

      -  Key Derivation Function (KDF): SHA3-256




Ounsworth, et al.         Expires 19 April 2026                [Page 32]

Internet-Draft              Composite ML-KEM                October 2025


      -  ML-KEM variant: ML-KEM-768

      -  Traditional Algorithm: ECDH

         o  Traditional KEM Algorithm: id-ecDH

         o  ECDH curve: secp256r1

   *  id-MLKEM768-ECDH-P384-SHA3-256

      -  OID: 2.16.840.1.114027.80.5.2.67

      -  Label: "QSF-MLKEM768-P384-SHA3256"

      -  Key Derivation Function (KDF): SHA3-256

      -  ML-KEM variant: ML-KEM-768

      -  Traditional Algorithm: ECDH

         o  Traditional KEM Algorithm: id-ecDH

         o  ECDH curve: secp384r1

   *  id-MLKEM768-ECDH-brainpoolP256r1-SHA3-256

      -  OID: 2.16.840.1.114027.80.5.2.68

      -  Label: "QSF-MLKEM768-BP256-SHA3256"

      -  Key Derivation Function (KDF): SHA3-256

      -  ML-KEM variant: ML-KEM-768

      -  Traditional Algorithm: ECDH

         o  Traditional KEM Algorithm: id-ecDH

         o  ECDH curve: brainpoolP256r1

   *  id-MLKEM1024-RSA3072-SHA3-256

      -  OID: 2.16.840.1.114027.80.5.2.69

      -  Label: "QSF-MLKEM1024-RSAOAEP3072-SHA3256"

      -  Key Derivation Function (KDF): SHA3-256




Ounsworth, et al.         Expires 19 April 2026                [Page 33]

Internet-Draft              Composite ML-KEM                October 2025


      -  ML-KEM variant: ML-KEM-1024

      -  Traditional Algorithm: RSA

         o  Traditional KEM Algorithm: id-RSAES-OAEP

         o  RSA size: 3072

         o  RSAES-OAEP parameters: See Table 2

   *  id-MLKEM1024-ECDH-P384-SHA3-256

      -  OID: 2.16.840.1.114027.80.5.2.70

      -  Label: "QSF-MLKEM1024-P384-SHA3256"

      -  Key Derivation Function (KDF): SHA3-256

      -  ML-KEM variant: ML-KEM-1024

      -  Traditional Algorithm: ECDH

         o  Traditional KEM Algorithm: id-ecDH

         o  ECDH curve: secp384r1

   *  id-MLKEM1024-ECDH-brainpoolP384r1-SHA3-256

      -  OID: 2.16.840.1.114027.80.5.2.71

      -  Label: "QSF-MLKEM1024-BP384-SHA3256"

      -  Key Derivation Function (KDF): SHA3-256

      -  ML-KEM variant: ML-KEM-1024

      -  Traditional Algorithm: ECDH

         o  Traditional KEM Algorithm: id-ecDH

         o  ECDH curve: brainpoolP384r1

   *  id-MLKEM1024-X448-SHA3-256

      -  OID: 2.16.840.1.114027.80.5.2.72

      -  Label: "QSF-MLKEM1024-X448-SHA3256"




Ounsworth, et al.         Expires 19 April 2026                [Page 34]

Internet-Draft              Composite ML-KEM                October 2025


      -  Key Derivation Function (KDF): SHA3-256

      -  ML-KEM variant: ML-KEM-1024

      -  Traditional Algorithm: X448

         o  Traditional KEM Algorithm: id-X448

   *  id-MLKEM1024-ECDH-P521-SHA3-256

      -  OID: 2.16.840.1.114027.80.5.2.73

      -  Label: "QSF-MLKEM1024-P521-SHA3256"

      -  Key Derivation Function (KDF): SHA3-256

      -  ML-KEM variant: ML-KEM-1024

      -  Traditional Algorithm: ECDH

         o  Traditional KEM Algorithm: id-ecDH

         o  ECDH curve: secp521r1

   In alignment with ML-KEM [FIPS.203], Composite KEM algorithms output
   a 256-bit shared secret key at all security levels, truncating is
   necessary as described in Section 4.4.

   For all RSA key types and sizes, the exponent is RECOMMENDED to be
   65537.  Implementations MAY support only 65537 and reject other
   exponent values.  Legacy RSA implementations that use other values
   for the exponent MAY be used to within a composite, but need to be
   careful when interoperating with other implementations.

   The KDFs were chosen to roughly match the security level of the
   stronger component.  In the case of X25519 and X448 SHA3-256 is used
   to match the construction in [X-Wing].

7.1.  RSA-OAEP Parameters

   Use of RSA-OAEP [RFC8017] requires additional parameters to be
   specified.

   The RSA component keys MUST be generated at the specified 2048-bit,
   3072-bit, 4096-bit key sizes respectively (up to small differences
   such as dropping leading zeros); intermediate sizes are not
   acceptable.




Ounsworth, et al.         Expires 19 April 2026                [Page 35]

Internet-Draft              Composite ML-KEM                October 2025


   As with the other Composite ML-KEM algorithms, AlgorithmIdentifier
   parameters MUST be absent.  The RSA-OAEP primitive SHALL be
   instantiated with the following hard-coded parameters which are the
   same for the 2048, 3072 and 4096 bit security levels since the
   objective is to carry and output a 256-bit shared secret key at all
   security levels.

             +=============================+=================+
             | RSAES-OAEP-params           | Value           |
             +=============================+=================+
             | hashAlgorithm               | id-sha256       |
             +-----------------------------+-----------------+
             | MaskGenAlgorithm.algorithm  | id-mgf1         |
             +-----------------------------+-----------------+
             | maskGenAlgorithm.parameters | id-sha256       |
             +-----------------------------+-----------------+
             | pSourceAlgorithm            | pSpecifiedEmpty |
             +-----------------------------+-----------------+
             | ss_len                      | 256 bits        |
             +-----------------------------+-----------------+

                        Table 2: RSA-OAEP Parameters

   Full specifications for the referenced algorithms can be found in
   Appendix B.

   Note: The mask length, according to [RFC8017], is k - hLen - 1, where
   k is the size of the RSA modulus.  Since the choice of hash function
   and the RSA key size is fixed for each composite algorithm,
   implementations could choose to pre-compute and hard-code the mask
   length.

7.2.  Rationale for choices

   In generating the list of composite algorithms, the idea was to
   provide composite algorithms at various security levels with varying
   performance characteristics.














Ounsworth, et al.         Expires 19 April 2026                [Page 36]

Internet-Draft              Composite ML-KEM                October 2025


   The main design consideration in choosing pairings is to prioritize
   providing pairings of each ML-KEM security level with commonly-
   deployed traditional algorithms.  This supports the design goal of
   using composites as a stepping stone to efficiently deploy post-
   quantum on top of existing hardened and certified traditional
   algorithm implementations.  This was prioritized rather than
   attempting to exactly match the security level of the post-quantum
   and traditional components -- which in general is difficult to do
   since there is no academic consensus on how to compare the "bits of
   security" against classical attackers and "qubits of security"
   against quantum attackers.

   While it may seem odd to use 256-bit outputs at all security levels,
   this aligns with ML-KEM [FIPS.203] which produces a 256-bit shared
   secret key at all security levels.  All hash functions used have >=
   256 bits of (2nd) pre-image resistance, which is the required
   property for a KDF to provide 128 bits of security, as allowed in
   Table 3 of [SP.800-57pt1r5].  Composite algorithms at higher security
   levels use a larger hash function in order to preserve internal
   collision resistance of the hash function at a comparable strength to
   the underlying component algorithms up to the point where truncation
   to a 256-bit output is performed.

8.  ASN.1 Module

   <CODE STARTS>

   Composite-MLKEM-2025
         { iso(1) identified-organization(3) dod(6) internet(1)
           security(5) mechanisms(5) pkix(7) id-mod(0)
           id-mod-composite-mlkem-2025(TBDMOD) }

   DEFINITIONS IMPLICIT TAGS ::= BEGIN

   EXPORTS ALL;

   IMPORTS

   PUBLIC-KEY, AlgorithmIdentifier{}, SMIME-CAPS
     FROM AlgorithmInformation-2009  -- RFC 5912 [X509ASN1]
         { iso(1) identified-organization(3) dod(6) internet(1)
           security(5) mechanisms(5) pkix(7) id-mod(0)
           id-mod-algorithmInformation-02(58) }

   KEM-ALGORITHM
     FROM KEMAlgorithmInformation-2023
         { iso(1) identified-organization(3) dod(6) internet(1)
           security(5) mechanisms(5) pkix(7) id-mod(0)



Ounsworth, et al.         Expires 19 April 2026                [Page 37]

Internet-Draft              Composite ML-KEM                October 2025


           id-mod-kemAlgorithmInformation-2023(109) }
   ;


   --
   -- Object Identifiers
   --

   --
   -- Information Object Classes
   --

   pk-CompositeKEM {OBJECT IDENTIFIER:id}
     PUBLIC-KEY ::= {
       IDENTIFIER id
       -- KEY without ASN.1 wrapping --
       PARAMS ARE absent
       CERT-KEY-USAGE { keyEncipherment }
     }

   kema-CompositeKEM {
     OBJECT IDENTIFIER:id,
       PUBLIC-KEY:publicKeyType }
       KEM-ALGORITHM ::= {
            IDENTIFIER id
            -- VALUE without ASN.1 wrapping --
            PARAMS ARE absent
            PUBLIC-KEYS { publicKeyType }
            SMIME-CAPS { IDENTIFIED BY id }
           }



   --
   -- Composite KEM Algorithms
   --


   -- TODO: OID to be replaced by IANA
   id-MLKEM768-RSA2048-SHA3-256 OBJECT IDENTIFIER ::= {
     joint-iso-itu-t(2) country(16) us(840) organization(1)
     entrust(114027) algorithm(80) explicitcomposite(5) kem(2) 62 }

   pk-MLKEM768-RSA2048-SHA3-256 PUBLIC-KEY ::=
     pk-CompositeKEM {
       id-MLKEM768-RSA2048-SHA3-256 }

   kema-MLKEM768-RSA2048-SHA3-256 KEM-ALGORITHM ::=



Ounsworth, et al.         Expires 19 April 2026                [Page 38]

Internet-Draft              Composite ML-KEM                October 2025


       kema-CompositeKEM{
         id-MLKEM768-RSA2048-SHA3-256,
         pk-MLKEM768-RSA2048-SHA3-256 }



   -- TODO: OID to be replaced by IANA
   id-MLKEM768-RSA3072-SHA3-256 OBJECT IDENTIFIER ::= {
     joint-iso-itu-t(2) country(16) us(840) organization(1)
     entrust(114027) algorithm(80) explicitcomposite(5) kem(2) 63 }

   pk-MLKEM768-RSA3072-SHA3-256 PUBLIC-KEY ::=
     pk-CompositeKEM {
       id-MLKEM768-RSA3072-SHA3-256 }

   kema-MLKEM768-RSA3072-SHA3-256 KEM-ALGORITHM ::=
       kema-CompositeKEM{
         id-MLKEM768-RSA3072-SHA3-256,
         pk-MLKEM768-RSA3072-SHA3-256 }



   -- TODO: OID to be replaced by IANA
   id-MLKEM768-RSA4096-SHA3-256 OBJECT IDENTIFIER ::= {
     joint-iso-itu-t(2) country(16) us(840) organization(1)
     entrust(114027) algorithm(80) explicitcomposite(5) kem(2) 64 }

   pk-MLKEM768-RSA4096-SHA3-256 PUBLIC-KEY ::=
     pk-CompositeKEM {
       id-MLKEM768-RSA4096-SHA3-256 }

   kema-MLKEM768-RSA4096-SHA3-256 KEM-ALGORITHM ::=
       kema-CompositeKEM{
         id-MLKEM768-RSA4096-SHA3-256,
         pk-MLKEM768-RSA4096-SHA3-256 }



   -- TODO: OID to be replaced by IANA
   id-MLKEM768-X25519-SHA3-256 OBJECT IDENTIFIER ::= {
     joint-iso-itu-t(2) country(16) us(840) organization(1)
     entrust(114027) algorithm(80) explicitcomposite(5) kem(2) 65 }

   pk-MLKEM768-X25519-SHA3-256 PUBLIC-KEY ::=
     pk-CompositeKEM {
       id-MLKEM768-X25519-SHA3-256 }

   kema-MLKEM768-X25519-SHA3-256 KEM-ALGORITHM ::=



Ounsworth, et al.         Expires 19 April 2026                [Page 39]

Internet-Draft              Composite ML-KEM                October 2025


       kema-CompositeKEM{
         id-MLKEM768-X25519-SHA3-256,
         pk-MLKEM768-X25519-SHA3-256 }


   -- TODO: OID to be replaced by IANA
   id-MLKEM768-ECDH-P256-SHA3-256 OBJECT IDENTIFIER ::= {
     joint-iso-itu-t(2) country(16) us(840) organization(1)
     entrust(114027) algorithm(80) explicitcomposite(5) kem(2) 66 }

   pk-MLKEM768-ECDH-P256-SHA3-256 PUBLIC-KEY ::=
     pk-CompositeKEM {
       id-MLKEM768-ECDH-P256-SHA3-256 }

   kema-MLKEM768-ECDH-P256-SHA3-256 KEM-ALGORITHM ::=
       kema-CompositeKEM{
         id-MLKEM768-ECDH-P256-SHA3-256,
         pk-MLKEM768-ECDH-P256-SHA3-256 }



   -- TODO: OID to be replaced by IANA
   id-MLKEM768-ECDH-P384-SHA3-256 OBJECT IDENTIFIER ::= {
     joint-iso-itu-t(2) country(16) us(840) organization(1)
     entrust(114027) algorithm(80) explicitcomposite(5) kem(2) 67 }

   pk-MLKEM768-ECDH-P384-SHA3-256 PUBLIC-KEY ::=
     pk-CompositeKEM {
       id-MLKEM768-ECDH-P384-SHA3-256 }

   kema-MLKEM768-ECDH-P384-SHA3-256 KEM-ALGORITHM ::=
       kema-CompositeKEM{
         id-MLKEM768-ECDH-P384-SHA3-256,
         pk-MLKEM768-ECDH-P384-SHA3-256 }



   -- TODO: OID to be replaced by IANA
   id-MLKEM768-ECDH-brainpoolP256r1-SHA3-256 OBJECT IDENTIFIER ::= {
     joint-iso-itu-t(2) country(16) us(840) organization(1)
     entrust(114027) algorithm(80) explicitcomposite(5) kem(2) 68 }

   pk-MLKEM768-ECDH-brainpoolP256r1-SHA3-256 PUBLIC-KEY ::=
     pk-CompositeKEM {
       id-MLKEM768-ECDH-brainpoolP256r1-SHA3-256 }

   kema-MLKEM768-ECDH-brainpoolP256r1-SHA3-256 KEM-ALGORITHM ::=
       kema-CompositeKEM{



Ounsworth, et al.         Expires 19 April 2026                [Page 40]

Internet-Draft              Composite ML-KEM                October 2025


         id-MLKEM768-ECDH-brainpoolP256r1-SHA3-256,
         pk-MLKEM768-ECDH-brainpoolP256r1-SHA3-256 }


   -- TODO: OID to be replaced by IANA
   id-MLKEM1024-RSA3072-SHA3-256 OBJECT IDENTIFIER ::= {
     joint-iso-itu-t(2) country(16) us(840) organization(1)
     entrust(114027) algorithm(80) explicitcomposite(5) kem(2) 69 }

   pk-MLKEM1024-RSA3072-SHA3-256 PUBLIC-KEY ::=
     pk-CompositeKEM {
       id-MLKEM1024-RSA3072-SHA3-256 }

   kema-MLKEM1024-RSA3072-SHA3-256 KEM-ALGORITHM ::=
       kema-CompositeKEM{
         id-MLKEM1024-RSA3072-SHA3-256,
         pk-MLKEM1024-RSA3072-SHA3-256 }


   -- TODO: OID to be replaced by IANA
   id-MLKEM1024-ECDH-P384-SHA3-256 OBJECT IDENTIFIER ::= {
     joint-iso-itu-t(2) country(16) us(840) organization(1)
     entrust(114027) algorithm(80) explicitcomposite(5) kem(2) 70 }

   pk-MLKEM1024-ECDH-P384-SHA3-256 PUBLIC-KEY ::=
     pk-CompositeKEM {
       id-MLKEM1024-ECDH-P384-SHA3-256 }

   kema-MLKEM1024-ECDH-P384-SHA3-256 KEM-ALGORITHM ::=
       kema-CompositeKEM{
         id-MLKEM1024-ECDH-P384-SHA3-256,
         pk-MLKEM1024-ECDH-P384-SHA3-256 }


   -- TODO: OID to be replaced by IANA
   id-MLKEM1024-ECDH-brainpoolP384r1-SHA3-256 OBJECT IDENTIFIER ::= {
     joint-iso-itu-t(2) country(16) us(840) organization(1)
     entrust(114027) algorithm(80) explicitcomposite(5) kem(2) 71 }

   pk-MLKEM1024-ECDH-brainpoolP384r1-SHA3-256 PUBLIC-KEY ::=
     pk-CompositeKEM{
       id-MLKEM1024-ECDH-brainpoolP384r1-SHA3-256 }

   kema-MLKEM1024-ECDH-brainpoolP384r1-SHA3-256 KEM-ALGORITHM ::=
       kema-CompositeKEM{
         id-MLKEM1024-ECDH-brainpoolP384r1-SHA3-256,
         pk-MLKEM1024-ECDH-brainpoolP384r1-SHA3-256 }




Ounsworth, et al.         Expires 19 April 2026                [Page 41]

Internet-Draft              Composite ML-KEM                October 2025


   -- TODO: OID to be replaced by IANA
   id-MLKEM1024-X448-SHA3-256 OBJECT IDENTIFIER ::= {
     joint-iso-itu-t(2) country(16) us(840) organization(1)
     entrust(114027) algorithm(80) explicitcomposite(5) kem(2) 72 }

   pk-MLKEM1024-X448-SHA3-256 PUBLIC-KEY ::=
     pk-CompositeKEM {
       id-MLKEM1024-X448-SHA3-256 }

   kema-MLKEM1024-X448 KEM-ALGORITHM ::=
       kema-CompositeKEM{
         id-MLKEM1024-X448-SHA3-256,
         pk-MLKEM1024-X448-SHA3-256 }


   -- TODO: OID to be replaced by IANA
   id-MLKEM1024-ECDH-P521-SHA3-256 OBJECT IDENTIFIER ::= {
     joint-iso-itu-t(2) country(16) us(840) organization(1)
     entrust(114027) algorithm(80) explicitcomposite(5) kem(2) 73 }

   pk-MLKEM1024-ECDH-P521-SHA3-256 PUBLIC-KEY ::=
     pk-CompositeKEM {
       id-MLKEM1024-ECDH-P521-SHA3-256 }

   kema-MLKEM1024-ECDH-P521-SHA3-256 KEM-ALGORITHM ::=
       kema-CompositeKEM{
         id-MLKEM1024-ECDH-P521-SHA3-256,
         pk-MLKEM1024-ECDH-P521-SHA3-256 }

   END

   <CODE ENDS>

9.  IANA Considerations

9.1.  Object Identifier Allocations

   EDNOTE to IANA: OIDs will need to be replaced in both the ASN.1
   module and in Section 7.

9.1.1.  Module Registration

   The following is to be registered in "SMI Security for PKIX Module
   Identifier":

   *  Decimal: IANA Assigned - *Replace TBDMOD*

   *  Description: Composite-KEM-2023 - id-mod-composite-kems



Ounsworth, et al.         Expires 19 April 2026                [Page 42]

Internet-Draft              Composite ML-KEM                October 2025


   *  References: This Document

9.1.2.  Object Identifier Registrations

   The following is to be registered in "SMI Security for PKIX
   Algorithms":

   *  id-MLKEM768-RSA2048-SHA3-256

      -  Decimal: IANA Assigned

      -  Description: id-MLKEM768-RSA2048-SHA3-256

      -  References: This Document

   *  id-MLKEM768-RSA3072-SHA3-256

      -  Decimal: IANA Assigned

      -  Description: id-MLKEM768-RSA3072-SHA3-256

      -  References: This Document

   *  id-MLKEM768-RSA4096-SHA3-256

      -  Decimal: IANA Assigned

      -  Description: id-MLKEM768-RSA4096-SHA3-256

      -  References: This Document

   *  id-MLKEM768-ECDH-P256-SHA3-256

      -  Decimal: IANA Assigned

      -  Description: id-MLKEM768-ECDH-P256-SHA3-256

      -  References: This Document

   *  id-MLKEM768-ECDH-P384-SHA3-256

      -  Decimal: IANA Assigned

      -  Description: id-MLKEM768-ECDH-P384-SHA3-256

      -  References: This Document

   *  id-MLKEM768-ECDH-brainpoolP256r1-SHA3-256



Ounsworth, et al.         Expires 19 April 2026                [Page 43]

Internet-Draft              Composite ML-KEM                October 2025


      -  Decimal: IANA Assigned

      -  Description: id-MLKEM768-ECDH-brainpoolP256r1-SHA3-256

      -  References: This Document

   *  id-MLKEM768-X25519-SHA3-256

      -  Decimal: IANA Assigned

      -  Description: id-MLKEM768-X25519-SHA3-256

      -  References: This Document

   *  id-MLKEM1024-RSA3072-SHA3-256

      -  Decimal: IANA Assigned

      -  Description: id-MLKEM1024-RSA3072-SHA3-256

      -  References: This Document

   *  id-MLKEM1024-ECDH-P384-SHA3-256

      -  Decimal: IANA Assigned

      -  Description: id-MLKEM1024-ECDH-P384-SHA3-256

      -  References: This Document

   *  id-MLKEM1024-ECDH-brainpoolP384r1-SHA3-256

      -  Decimal: IANA Assigned

      -  Description: id-MLKEM1024-ECDH-brainpoolP384r1-SHA3-256

      -  References: This Document

   *  id-MLKEM1024-X448-SHA3-256

      -  Decimal: IANA Assigned

      -  Description: id-MLKEM1024-X448-SHA3-256

      -  References: This Document

   *  id-MLKEM1024-ECDH-P521-SHA3-256




Ounsworth, et al.         Expires 19 April 2026                [Page 44]

Internet-Draft              Composite ML-KEM                October 2025


      -  Decimal: IANA Assigned

      -  Description: id-MLKEM1024-ECDH-P521-SHA3-256

      -  References: This Document

10.  Security Considerations

10.1.  Why Hybrids?

   In broad terms, a PQ/T Hybrid can be used either to provide dual-
   algorithm security or to provide migration flexibility.  Let's
   quickly explore both.

   Dual-algorithm security.  The general idea is that the data is
   protected by two algorithms such that an attacker would need to break
   both in order to compromise the data.  As with most of cryptography,
   this property is easy to state in general terms, but becomes more
   complicated when expressed in formalisms.  The following sections go
   into more detail here.

   Migration flexibility.  Some PQ/T hybrids exist to provide a sort of
   "OR" mode where the application can choose to use one algorithm or
   the other or both.  The intention is that the PQ/T hybrid mechanism
   builds in backwards compatibility to allow legacy and upgraded
   applications to co-exist and communicate.  The composite algorithms
   presented in this specification do not provide this since they
   operate in a strict "AND" mode.  They do, however, provide codebase
   migration flexibility.  Consider that an organization has today a
   mature, validated, certified, hardened implementation of RSA or ECC;
   composites allow them to add an ML-KEM implementation which
   immediately starts providing benefits against harvest-now-decrypt-
   later attacks even if that ML-KEM implementation is still an
   experimental, non-validated, non-certified, non-hardened
   implementation.  More details of obtaining FIPS certification of a
   composite algorithm can be found in Section 11.1.

10.2.  KEM Combiner

   The KEM combiner from Section 4.4 is reproduced here for reference.

     KDF(mlkemSS || tradSS || tradCT || tradPK || Label)

                    Figure 3: KEM combiner construction

   The primary security property of the KEM combiner is that it
   preserves IND-CCA2 of the overall Composite ML-KEM so long as at
   least one component is IND-CCA2 [X-Wing] [GHP18].  Additionally, we



Ounsworth, et al.         Expires 19 April 2026                [Page 45]

Internet-Draft              Composite ML-KEM                October 2025


   also need to consider the case where one of the component algorithms
   is completely broken; that the private key is known to an attacker,
   or worse that the public key, private key, and ciphertext are
   manipulated by the attacker.  In this case, we rely on the
   construction of the KEM combiner to ensure that the value of the
   other shared secret key cannot be leaked or the combined shared
   secret key predicted via manipulation of the broken algorithm.

   Each registered Composite ML-KEM algorithm specifies the choice of
   KDF and Label -- see Section 7.  Given that each Composite ML-KEM
   algorithm fully specifies the component algorithms, including for
   example the size of the RSA modulus, all inputs to the KEM combiner
   are fixed-size and thus do not require length-prefixing.

   *  mlkemSS is always 32 bytes.

   *  tradSS in the case of DH this is derived by the decapsulator and
      therefore the length is not controlled by the attacker, however in
      the case of RSA-OAEP this value is directly chosen by the sender
      and both the length and content could be freely chosen by an
      attacker.

   *  tradCT is either an elliptic curve public key or an RSA-OAEP
      ciphertext which is required to have its length checked by step 1b
      of RSAES-OAEP-DECRYPT in [RFC8017].

   *  tradPK is the public key of the traditional component (elliptic
      curve or RSA) and therefore fixed-length.

   *  Label is a fixed value specified in this document.

10.2.1.  IND-CCA Security of the hybrid scheme

   Informally, a Composite ML-KEM algorithm is secure if the combiner
   (SHA3) is secure, and either ML-KEM is secure or the traditional
   component (RSA-OAEP, ECDH, X25519 or X448) is secure.

   The security of ML-KEM and DH hybrids is covered in [X-Wing] and
   requires that the first KEM component (ML-KEM in this construction)
   is IND-CCA and second ciphertext preimage resistant (C2PRI) and that
   the second traditional component is IND-CCA.  This design choice
   improves performance by not including the large ML-KEM public key and
   ciphertext, but means that an implementation error in the ML-KEM
   component that affects the ciphertext check step of the FO transform
   could result in the overall composite no longer achieving IND-CCA2
   security.  Note that ciphertext collisions exist in the traditional
   component by the composite design choice to support any underlying
   encoding of the traditional component, such as compressed vs



Ounsworth, et al.         Expires 19 April 2026                [Page 46]

Internet-Draft              Composite ML-KEM                October 2025


   uncompressed EC points as the DH KEM ciphertext.  This solution
   remains IND-CCA due to binding the tradPK and tradCT in the KEM
   combiner.

   The QSF framework presented in [X-Wing] is extended to cover RSA-OAEP
   as the traditional algorithm in place of DH by noting that RSA-OAEP
   is also IND-CCA secure [RFC8017].

   The composite combiner cannot be assumed to be secure when used with
   different KEMs and a more cautious approach would bind the public key
   and ciphertext of the first KEM as well.

10.2.2.  Second pre-image resistance of component KEMs

   The notion of a "ciphertext second pre-image resistant KEM" is
   defined in [X-Wing] as being the property that it is computationally
   difficult to find two different ciphertexts c != c' that will
   decapsulate to the same shared secret key under the same public key.
   For the purposes of a hybrid KEM combiner, this property means that
   given two composite ciphertexts (c1, c2) and (c1', c2'), we must
   obtain a unique overall shared secret key so long as either c1 != c1'
   or c2 != c2' -- i.e. the overall Composite ML-KEM is ciphertext
   second pre-image resistant, and therefore secure so long as one of
   the component KEMs is secure.

   In [X-Wing] it is proven that ML-KEM is a second pre-image resistant
   KEM and therefore the ML-KEM ciphertext can safely be omitted from
   the KEM combiner.  Note that this makes a fundamental assumption on
   ML-KEM remaining ciphertext second pre-image resistant, and therefore
   this formulation of KEM combiner does not fully protect against
   implementation errors in the ML-KEM component -- particularly around
   the ciphertext check step of the Fujisaki-Okamoto transform -- which
   could trivially lead to second ciphertext pre-image attacks that
   break the IND-CCA2 security of the ML-KEM component and of the
   overall Composite ML-KEM.  This could be more fully mitigated by
   binding the ML-KEM ciphertext in the combiner, but a design decision
   was made to settle for protection against algorithmic attacks and not
   implementation attacks against ML-KEM in order to increase
   performance.

   However, since neither RSA-OAEP nor DH guarantee second pre-image
   resistance at all, even in a correct implementation, these
   ciphertexts are bound to the key derivation in order to guarantee
   that c != c' will yield a unique ciphertext, and thus restoring
   second pre-image resistance to the overall Composite ML-KEM.






Ounsworth, et al.         Expires 19 April 2026                [Page 47]

Internet-Draft              Composite ML-KEM                October 2025


10.2.3.  Generifying this construction

   It should be clear that the security analysis of the presented KEM
   combiner construction relies heavily on the specific choices of
   component algorithms and combiner KDF, and this combiner construction
   SHOULD NOT by applied to any other combination of ciphers without
   performing the appropriate security analysis.

10.3.  Key Reuse

   While conformance with this specification requires that both
   components of a composite key MUST be freshly generated, the
   designers are aware that some implementers may be forced to break
   this rule due to operational constraints.  This section documents the
   implications of doing so.

   When using single-algorithm cryptography, the best practice is to
   always generate fresh keying material for each purpose, for example
   when renewing a certificate, or obtaining both a TLS and S/MIME
   certificate for the same device.  However, in practice key reuse in
   such scenarios is not always catastrophic to security and therefore
   often tolerated.  However this reasoning does not hold in the PQ/T
   hybrid setting.

   Within the broader context of PQ/T hybrids, we need to consider new
   attack surfaces that arise due to the hybrid constructions and did
   not exist in single-algorithm contexts.  One of these is key reuse
   where the component keys within a hybrid are also used by themselves
   within a single-algorithm context.  For example, it might be tempting
   for an operator to take already-deployed RSA keys and add an ML-KEM
   key to them to form a hybrid.  Within a hybrid signature context this
   leads to a class of attacks referred to as "stripping attacks" where
   one component signature can be extracted and presented as a single-
   algorithm signature.  Hybrid KEMs using a concatenation-style KEM
   combiner, as is done in this specification, do not have the analogous
   attack surface because even if an attacker is able to extract and
   decrypt one of the component ciphertexts, this will yield a different
   shared secret key than the overall shared secret key derived from the
   composite, so any subsequent symmetric cryptographic operations will
   fail.

   In addition, there is a further implication to key reuse regarding
   certificate revocation.  Upon receiving a new certificate enrolment
   request, many certification authorities will check if the requested
   public key has been previously revoked due to key compromise.  Often
   a CA will perform this check by using the public key hash.
   Therefore, if one, or even both, components of a composite have been
   previously revoked, the CA may only check the hash of the combined



Ounsworth, et al.         Expires 19 April 2026                [Page 48]

Internet-Draft              Composite ML-KEM                October 2025


   composite key and not find the revocations.  Therefore, because the
   possibility of key reuse exists even though forbidden in this
   specification, CAs performing revocation checks on a composite key
   SHOULD also check both component keys independently to verify that
   the component keys have not been revoked.

10.4.  Decapsulation failure

   Provided all inputs are well-formed, the key establishment procedure
   of ML-KEM will never explicitly fail.  Specifically, the ML-
   KEM.Encaps() and ML-KEM.Decaps() algorithms from [FIPS.203] will
   always output a value with the same data type as a shared secret key,
   and will never output an error or failure symbol.  However, it is
   possible (though extremely unlikely) that the process will fail in
   the sense that ML-KEM.Encaps() and ML-KEM.Decaps() will produce
   different outputs, even though both of them are behaving honestly and
   no adversarial interference is present.  This is due to the lattice
   arithmetic for decapsulation with the secret key having hit an
   unrecoverable degenerate case that could not have been predicted by
   the encapsulator without knowledge of the secret key.  In this case,
   the sender and recipient clearly did not succeed in producing a
   shared secret key.  This event is called a decapsulation failure.
   Estimates for the decapsulation failure probability (or rate) for
   each of the ML-KEM parameter sets are provided in Table 1 of
   [FIPS.203] and reproduced here in Table 3.

              +===============+============================+
              | Parameter set | Decapsulation failure rate |
              +===============+============================+
              | ML-KEM-512    | 2^(-139)                   |
              +---------------+----------------------------+
              | ML-KEM-768    | 2^(-164)                   |
              +---------------+----------------------------+
              | ML-KEM-1024   | 2^(-174)                   |
              +---------------+----------------------------+

               Table 3: ML-KEM decapsulation failure rates

   In the case of ML-KEM decapsulation failure, Composite ML-KEM MUST
   preserve the same behavior and return a well-formed output shared
   secret key.










Ounsworth, et al.         Expires 19 April 2026                [Page 49]

Internet-Draft              Composite ML-KEM                October 2025


10.5.  Policy for Deprecated and Acceptable Algorithms

   Traditionally, a public key or certificate contains a single
   cryptographic algorithm.  If and when an algorithm becomes deprecated
   (for example, RSA-512, or SHA1), the path to deprecating it through
   policy and removing it from operational environments is, at least is
   principle, straightforward.

   In the composite model this is less obvious since a PQ/T hybrid is
   expected to still be considered valid after the traditional component
   is deprecated for individual use.  As such, a single composite public
   key or certificate may contain a mixture of deprecated and non-
   deprecated algorithms.  In general this should be manageable through
   policy by removing OIDs for the standalone component algorithms while
   still allowing OIDs for composite algorithms.  However, complications
   may arise when the composite implementation needs to invoke the
   cryptographic module for a deprecated component algorithm.  In
   particular, this could lead to complex Cryptographic Bills of
   Materials that show implementations of deprecated algorithms still
   present and being used.

11.  Implementation Considerations

11.1.  FIPS Certification

   The following sections give guidance to implementers wishing to FIPS-
   certify a composite implementation.

   This guidance is not authoritative and has not been endorsed by NIST.

   Implementers seeking FIPS certification of a composite KEM algorithm
   where only one of the component algorithms has been FIPS-validated or
   FIPS-approved should credit the FIPS-validated component algorithm
   with full security strength, the non-FIPS-validated component
   algorithm with zero security, and the overall composite should be
   considered at least as strong and thus FIPS-approved.

   The composite algorithm has been designed to treat the underlying
   primitives as "black-box implementations" and not impose any
   additional requirements on them that could require an existing
   implementation of an underlying primitive to run in a mode different
   from the one under which it was certified.  For example, the KeyGen
   defined in Section 4.1 invokes ML-KEM.KeyGen(seed) which might not be
   available in a cryptographic module running in FIPS-mode, but
   Section 4.1 is only a suggested implementation and the composite
   KeyGen MAY be implemented using a different available interface for
   ML-KEM.KeyGen.




Ounsworth, et al.         Expires 19 April 2026                [Page 50]

Internet-Draft              Composite ML-KEM                October 2025


   The authors wish to note that composite algorithms provide a design
   pattern to provide utility in future situations that require care to
   remain FIPS-compliant, such as future cryptographic migrations as
   well as bridging across jurisdictions with non-intersecting
   cryptographic requirements.

   The following sections go into further detail on specific issues that
   relate to FIPS certification.

11.1.1.  Combiner Function

   For reference, the KEM combiner used in Composite ML-KEM is:

   ss = SHA3-256(mlkemSS || tradSS || tradCT || tradPK || Label)

   NIST SP 800-227 [SP-800-227] allows hybrid key combiners of the
   following form:

   K <- KDM((S1,S2,...,St), OtherInput)           (14)

   Composite ML-KEM maps cleanly into this since it places the two
   shared secret keys mlkemSS || tradSS at the beginning of the KDF
   input such that all other inputs tradCT || tradPK || Label can be
   considered part of OtherInput for the purposes of FIPS certification.

   For the detailed steps of the Key Derivation Mechanism KDM,
   [SP-800-227] refers to [SP.800-56Cr2].

   Compliance of the Composite ML-KEM variants is achieved in the
   following way:

   The Composite ML-KEM algorithms use SHA3, and so can be certified
   under [SP.800-56Cr2] One-Step Key Derivation Option 1: H(x) =
   hash(x).

   [SP.800-56Cr2] section 4 "One-Step Key Derivation" requires a counter
   which begins at the 4-byte value 0x00000001.  However, the counter is
   allowed to be omitted when the hash function is executed only once,
   as specified on page 159 of the FIPS 140-3 Implementation Guidance
   [FIPS-140-3-IG].

11.1.2.  Order of KDF inputs with Non-Approved Algorithms

   [SP-800-227] adds an important stipulation that was not present in
   earlier NIST specifications:






Ounsworth, et al.         Expires 19 April 2026                [Page 51]

Internet-Draft              Composite ML-KEM                October 2025


      This publication approves the use of the key combiner (14) for any
      t > 1, so long as at least one shared secret (i.e., S_j for some
      j) is a shared secret generated from the key- establishment
      methods of SP 800-56A or SP 800-56B, or an approved KEM.

   This means that although Composite ML-KEM always places the shared
   secret key from ML-KEM in the first slot, a Composite ML-KEM can be
   FIPS certified so long as either component is FIPS certified.  This
   is important for several reasons.  First, in the early stages of PQC
   migration, composites allow for a non-FIPS certified ML-KEM
   implementation to be added to a module that already has a FIPS
   certified traditional component, and the resulting composite can be
   FIPS certified.  Second, when eventually RSA and Elliptic Curve are
   no longer FIPS-allowed, the composite can retain its FIPS certified
   status on the strength of the ML-KEM component.  Third, while this is
   outside the scope of this specification, the general composite
   construction could be used to create FIPS certified algorithms that
   contain a component algorithm from a different jurisdiction.  Third,
   a composite where both components are FIPS-certified could allow an
   implementer to patch one component algorithm while awaiting re-
   certification while continuing to use the overall composite in FIPS
   mode.

   At the time of writing, [SP-800-227] is in its public draft period
   and not yet in force.  A Composite ML-KEM implementation using a
   FIPS-certified traditional component and a non-FIPS certified ML-KEM
   is not believed to be certifiable under [SP.800-56Cr2] since this
   requires the shared secret key from the certified algorithm to be in
   the first slot.

11.2.  Backwards Compatibility

   The term "backwards compatibility" is used here to mean that existing
   systems as they are deployed today can interoperate with the upgraded
   systems of the future.  This draft explicitly does not provide
   backwards compatibility, only upgraded systems will understand the
   OIDs defined in this specification.

   These migration and interoperability concerns need to be thought
   about in the context of various types of protocols that make use of
   X.509 and PKIX with relation to key establishment and content
   encryption, from online negotiated protocols such as TLS 1.3
   [RFC8446] and IKEv2 [RFC7296], to non-negotiated asynchronous
   protocols such as S/MIME signed email [RFC8551], as well as myriad
   other standardized and proprietary protocols and applications that
   leverage CMS [RFC5652] encrypted structures.





Ounsworth, et al.         Expires 19 April 2026                [Page 52]

Internet-Draft              Composite ML-KEM                October 2025


11.3.  Profiling down the number of options

   One daunting aspect of this specification is the number of composite
   algorithm combinations.  Each option has been specified because there
   is a community that has a direct application for it; typically
   because the traditional component is already deployed in a change-
   managed environment, or because that specific traditional component
   is required for regulatory reasons.

   However, this large number of combinations leads either to fracturing
   of the ecosystem into non-interoperable sub-groups when different
   communities choose non-overlapping subsets to support, or on the
   other hand it leads to spreading development resources too thin when
   trying to support all options.

   This specification does not list any particular composite algorithm
   as mandatory-to-implement, however organizations that operate within
   specific application domains are encouraged to define profiles that
   select a small number of composites appropriate for that application
   domain.  For applications that do not have any regulatory
   requirements or legacy implementations to consider, it is RECOMMENDED
   to focus implementation effort on:

   id-MLKEM768-X25519-SHA3-256  (aka "X-Wing")
   id-MLKEM768-ECDH-P256-SHA3-256

   In applications that only allow NIST PQC Level 5, it is RECOMMENDED
   to focus implementation effort on:

   id-MLKEM1024-ECDH-P384-SHA3-256

11.4.  Decapsulation Requires the Public Key

   ML-KEM always requires the public key in order to perform various
   steps of the Fujisaki-Okamoto decapsulation [FIPS.203], and for this
   reason the private key encoding specified in FIPS 203 includes the
   public key.

   Moreover, the KEM combiner as specified in Section 4.4 requires the
   public key of the traditional component in order to achieve the
   public-key binding property and ciphertext collision resistance as
   described in Section 10.2.  For this reason, the private key
   serialization defined in Section 5.2 carries the traditional public
   key so that it is easily available to the decapsulater.

   Implementers who choose to use a different private key encoding than
   the one specified in this document MUST consider how to provide the
   component public keys to the decapsulate routine.  This includes, for



Ounsworth, et al.         Expires 19 April 2026                [Page 53]

Internet-Draft              Composite ML-KEM                October 2025


   example, implementations that use a hardware security module to hold
   the private key.  While some implementations might contain routines
   to computationally derive the public key from the private key, it is
   not guaranteed that all implementations will support this.  In some
   implementations, the application might be required to cache the
   public key or certificate associated with the private key so that the
   public key can be retrieved for the purposes of decapsulation.

12.  References

12.1.  Normative References

   [FIPS.202] National Institute of Standards and Technology (NIST),
              "SHA-3 Standard: Permutation-Based Hash and Extendable-
              Output Functions", August 2015,
              <https://nvlpubs.nist.gov/nistpubs/FIPS/
              NIST.FIPS.202.pdf>.

   [FIPS.203] National Institute of Standards and Technology (NIST),
              "Module-Lattice-based Key-Encapsulation Mechanism
              Standard", August 2024,
              <https://nvlpubs.nist.gov/nistpubs/FIPS/
              NIST.FIPS.203.pdf>.

   [FIPS.204] National Institute of Standards and Technology (NIST),
              "Module-Lattice-Based Digital Signature Standard", August
              2024, <https://nvlpubs.nist.gov/nistpubs/FIPS/
              NIST.FIPS.204.pdf>.

   [RFC2104]  Krawczyk, H., Bellare, M., and R. Canetti, "HMAC: Keyed-
              Hashing for Message Authentication", RFC 2104,
              DOI 10.17487/RFC2104, February 1997,
              <https://www.rfc-editor.org/info/rfc2104>.

   [RFC2119]  Bradner, S., "Key words for use in RFCs to Indicate
              Requirement Levels", BCP 14, RFC 2119,
              DOI 10.17487/RFC2119, March 1997,
              <https://www.rfc-editor.org/info/rfc2119>.

   [RFC5280]  Cooper, D., Santesson, S., Farrell, S., Boeyen, S.,
              Housley, R., and W. Polk, "Internet X.509 Public Key
              Infrastructure Certificate and Certificate Revocation List
              (CRL) Profile", RFC 5280, DOI 10.17487/RFC5280, May 2008,
              <https://www.rfc-editor.org/info/rfc5280>.







Ounsworth, et al.         Expires 19 April 2026                [Page 54]

Internet-Draft              Composite ML-KEM                October 2025


   [RFC5480]  Turner, S., Brown, D., Yiu, K., Housley, R., and T. Polk,
              "Elliptic Curve Cryptography Subject Public Key
              Information", RFC 5480, DOI 10.17487/RFC5480, March 2009,
              <https://www.rfc-editor.org/info/rfc5480>.

   [RFC5652]  Housley, R., "Cryptographic Message Syntax (CMS)", STD 70,
              RFC 5652, DOI 10.17487/RFC5652, September 2009,
              <https://www.rfc-editor.org/info/rfc5652>.

   [RFC5869]  Krawczyk, H. and P. Eronen, "HMAC-based Extract-and-Expand
              Key Derivation Function (HKDF)", RFC 5869,
              DOI 10.17487/RFC5869, May 2010,
              <https://www.rfc-editor.org/info/rfc5869>.

   [RFC5915]  Turner, S. and D. Brown, "Elliptic Curve Private Key
              Structure", RFC 5915, DOI 10.17487/RFC5915, June 2010,
              <https://www.rfc-editor.org/info/rfc5915>.

   [RFC5958]  Turner, S., "Asymmetric Key Packages", RFC 5958,
              DOI 10.17487/RFC5958, August 2010,
              <https://www.rfc-editor.org/info/rfc5958>.

   [RFC6234]  Eastlake 3rd, D. and T. Hansen, "US Secure Hash Algorithms
              (SHA and SHA-based HMAC and HKDF)", RFC 6234,
              DOI 10.17487/RFC6234, May 2011,
              <https://www.rfc-editor.org/info/rfc6234>.

   [RFC7748]  Langley, A., Hamburg, M., and S. Turner, "Elliptic Curves
              for Security", RFC 7748, DOI 10.17487/RFC7748, January
              2016, <https://www.rfc-editor.org/info/rfc7748>.

   [RFC8017]  Moriarty, K., Ed., Kaliski, B., Jonsson, J., and A. Rusch,
              "PKCS #1: RSA Cryptography Specifications Version 2.2",
              RFC 8017, DOI 10.17487/RFC8017, November 2016,
              <https://www.rfc-editor.org/info/rfc8017>.

   [RFC8174]  Leiba, B., "Ambiguity of Uppercase vs Lowercase in RFC
              2119 Key Words", BCP 14, RFC 8174, DOI 10.17487/RFC8174,
              May 2017, <https://www.rfc-editor.org/info/rfc8174>.

   [RFC8410]  Josefsson, S. and J. Schaad, "Algorithm Identifiers for
              Ed25519, Ed448, X25519, and X448 for Use in the Internet
              X.509 Public Key Infrastructure", RFC 8410,
              DOI 10.17487/RFC8410, August 2018,
              <https://www.rfc-editor.org/info/rfc8410>.






Ounsworth, et al.         Expires 19 April 2026                [Page 55]

Internet-Draft              Composite ML-KEM                October 2025


   [RFC8411]  Schaad, J. and R. Andrews, "IANA Registration for the
              Cryptographic Algorithm Object Identifier Range",
              RFC 8411, DOI 10.17487/RFC8411, August 2018,
              <https://www.rfc-editor.org/info/rfc8411>.

   [RFC9629]  Housley, R., Gray, J., and T. Okubo, "Using Key
              Encapsulation Mechanism (KEM) Algorithms in the
              Cryptographic Message Syntax (CMS)", RFC 9629,
              DOI 10.17487/RFC9629, August 2024,
              <https://www.rfc-editor.org/info/rfc9629>.

   [SEC1]     Certicom Research, "SEC 1: Elliptic Curve Cryptography",
              May 2009, <https://www.secg.org/sec1-v2.pdf>.

   [SEC2]     Certicom Research, "SEC 2: Recommended Elliptic Curve
              Domain Parameters", January 2010,
              <https://www.secg.org/sec2-v2.pdf>.

   [SP.800-185]
              National Institute of Standards and Technology (NIST),
              "SHA-3 Derived Functions: cSHAKE, KMAC, TupleHash, and
              ParallelHash", December 2016,
              <https://nvlpubs.nist.gov/nistpubs/SpecialPublications/
              NIST.SP.800-185.pdf>.

   [SP.800-56Ar3]
              National Institute of Standards and Technology (NIST),
              "Recommendation for Pair-Wise Key-Establishment Schemes
              Using Discrete Logarithm Cryptography", April 2018,
              <https://nvlpubs.nist.gov/nistpubs/SpecialPublications/
              NIST.SP.800-56Ar3.pdf>.

   [SP.800-56Cr2]
              National Institute of Standards and Technology (NIST),
              "Recommendation for Key-Derivation Methods in Key-
              Establishment Schemes", August 2020,
              <https://nvlpubs.nist.gov/nistpubs/SpecialPublications/
              NIST.SP.800-56Cr2.pdf>.

   [SP.800-57pt1r5]
              National Institute of Standards and Technology (NIST),
              "Recommendation for Key Management: Part 1 – General", May
              2020,
              <https://nvlpubs.nist.gov/nistpubs/SpecialPublications/
              NIST.SP.800-57pt1r5.pdf>.






Ounsworth, et al.         Expires 19 April 2026                [Page 56]

Internet-Draft              Composite ML-KEM                October 2025


   [X.690]    ITU-T, "Information technology - ASN.1 encoding Rules:
              Specification of Basic Encoding Rules (BER), Canonical
              Encoding Rules (CER) and Distinguished Encoding Rules
              (DER)", ISO/IEC 8825-1:2015, November 2015.

12.2.  Informative References

   [ANSSI2024]
              French Cybersecurity Agency (ANSSI), Federal Office for
              Information Security (BSI), Netherlands National
              Communications Security Agency (NLNCSA), and Swedish
              National Communications Security Authority, Swedish Armed
              Forces, "Position Paper on Quantum Key Distribution",
              n.d., <https://cyber.gouv.fr/sites/default/files/document/
              Quantum_Key_Distribution_Position_Paper.pdf>.

   [Aviram22] Aviram, N., Dowling, B., Komargodski, I., Paterson, K. G.,
              Ronen, E., and E. Yogev, "Practical (Post-Quantum) Key
              Combiners from One-Wayness and Applications to TLS", n.d.,
              <https://eprint.iacr.org/2022/065>.

   [Bindel2017]
              Bindel, N., Herath, U., McKague, M., and D. Stebila,
              "Transitioning to a quantum-resistant public key
              infrastructure", 2017, <https://link.springer.com/
              chapter/10.1007/978-3-319-59879-6_22>.

   [BSI2021]  Federal Office for Information Security (BSI), "Quantum-
              safe cryptography - fundamentals, current developments and
              recommendations", October 2021,
              <https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/
              Publications/Brochure/quantum-safe-cryptography.pdf>.

   [ETSI.TS.103.744]
              ETSI, "ETSI TS 103 744 V1.2.1 CYBER-QSC; Quantum-safe
              Hybrid Key Establishment", March 2025,
              <https://www.etsi.org/deliver/
              etsi_ts/103700_103799/103744/01.02.01_60/
              ts_103744v010201p.pdf>.

   [FIPS-140-3-IG]
              National Institute of Standards and Technology (NIST),
              "Implementation Guidance for FIPS 140-3 and the
              Cryptographic Module Validation Program", July 2024,
              <https://csrc.nist.gov/csrc/media/Projects/cryptographic-
              module-validation-program/documents/fips%20140-3/
              FIPS%20140-3%20IG.pdf>.




Ounsworth, et al.         Expires 19 April 2026                [Page 57]

Internet-Draft              Composite ML-KEM                October 2025


   [GHP18]    Giacon, F., Heuer, F., and B. Poettering, "KEM Combiners",
              2018, <https://eprint.iacr.org/2018/024>.

   [I-D.ietf-lamps-kyber-certificates]
              Turner, S., Kampanakis, P., Massimo, J., and B.
              Westerbaan, "Internet X.509 Public Key Infrastructure -
              Algorithm Identifiers for the Module-Lattice-Based Key-
              Encapsulation Mechanism (ML-KEM)", Work in Progress,
              Internet-Draft, draft-ietf-lamps-kyber-certificates-10, 16
              April 2025, <https://datatracker.ietf.org/doc/html/draft-
              ietf-lamps-kyber-certificates-10>.

   [I-D.ietf-pquip-pqt-hybrid-terminology]
              D, F., P, M., and B. Hale, "Terminology for Post-Quantum
              Traditional Hybrid Schemes", Work in Progress, Internet-
              Draft, draft-ietf-pquip-pqt-hybrid-terminology-06, 10
              January 2025, <https://datatracker.ietf.org/doc/html/
              draft-ietf-pquip-pqt-hybrid-terminology-06>.

   [RFC2986]  Nystrom, M. and B. Kaliski, "PKCS #10: Certification
              Request Syntax Specification Version 1.7", RFC 2986,
              DOI 10.17487/RFC2986, November 2000,
              <https://www.rfc-editor.org/info/rfc2986>.

   [RFC4210]  Adams, C., Farrell, S., Kause, T., and T. Mononen,
              "Internet X.509 Public Key Infrastructure Certificate
              Management Protocol (CMP)", RFC 4210,
              DOI 10.17487/RFC4210, September 2005,
              <https://www.rfc-editor.org/info/rfc4210>.

   [RFC4211]  Schaad, J., "Internet X.509 Public Key Infrastructure
              Certificate Request Message Format (CRMF)", RFC 4211,
              DOI 10.17487/RFC4211, September 2005,
              <https://www.rfc-editor.org/info/rfc4211>.

   [RFC5639]  Lochter, M. and J. Merkle, "Elliptic Curve Cryptography
              (ECC) Brainpool Standard Curves and Curve Generation",
              RFC 5639, DOI 10.17487/RFC5639, March 2010,
              <https://www.rfc-editor.org/info/rfc5639>.

   [RFC5914]  Housley, R., Ashmore, S., and C. Wallace, "Trust Anchor
              Format", RFC 5914, DOI 10.17487/RFC5914, June 2010,
              <https://www.rfc-editor.org/info/rfc5914>.








Ounsworth, et al.         Expires 19 April 2026                [Page 58]

Internet-Draft              Composite ML-KEM                October 2025


   [RFC5990]  Randall, J., Kaliski, B., Brainard, J., and S. Turner,
              "Use of the RSA-KEM Key Transport Algorithm in the
              Cryptographic Message Syntax (CMS)", RFC 5990,
              DOI 10.17487/RFC5990, September 2010,
              <https://www.rfc-editor.org/info/rfc5990>.

   [RFC6090]  McGrew, D., Igoe, K., and M. Salter, "Fundamental Elliptic
              Curve Cryptography Algorithms", RFC 6090,
              DOI 10.17487/RFC6090, February 2011,
              <https://www.rfc-editor.org/info/rfc6090>.

   [RFC7292]  Moriarty, K., Ed., Nystrom, M., Parkinson, S., Rusch, A.,
              and M. Scott, "PKCS #12: Personal Information Exchange
              Syntax v1.1", RFC 7292, DOI 10.17487/RFC7292, July 2014,
              <https://www.rfc-editor.org/info/rfc7292>.

   [RFC7296]  Kaufman, C., Hoffman, P., Nir, Y., Eronen, P., and T.
              Kivinen, "Internet Key Exchange Protocol Version 2
              (IKEv2)", STD 79, RFC 7296, DOI 10.17487/RFC7296, October
              2014, <https://www.rfc-editor.org/info/rfc7296>.

   [RFC8446]  Rescorla, E., "The Transport Layer Security (TLS) Protocol
              Version 1.3", RFC 8446, DOI 10.17487/RFC8446, August 2018,
              <https://www.rfc-editor.org/info/rfc8446>.

   [RFC8551]  Schaad, J., Ramsdell, B., and S. Turner, "Secure/
              Multipurpose Internet Mail Extensions (S/MIME) Version 4.0
              Message Specification", RFC 8551, DOI 10.17487/RFC8551,
              April 2019, <https://www.rfc-editor.org/info/rfc8551>.

   [RFC9180]  Barnes, R., Bhargavan, K., Lipp, B., and C. Wood, "Hybrid
              Public Key Encryption", RFC 9180, DOI 10.17487/RFC9180,
              February 2022, <https://www.rfc-editor.org/info/rfc9180>.

   [SP-800-227]
              Alagic, G., Barker, E., Chen, L., Moody, D., Robinson, A.,
              Silberg, H., Waller, N., and National Institute of
              Standards and Technology (NIST), "Recommendations for Key-
              Encapsulation Mechanisms", September 2025,
              <https://csrc.nist.gov/pubs/sp/800/227/final>.

   [SP800-131Ar2]
              Barker, E., Roginksy, A., and National Institute of
              Standards and Technology (NIST), "Transitioning the Use of
              Cryptographic Algorithms and Key Lengths", n.d.,
              <https://nvlpubs.nist.gov/nistpubs/specialpublications/
              nist.sp.800-131ar2.pdf>.




Ounsworth, et al.         Expires 19 April 2026                [Page 59]

Internet-Draft              Composite ML-KEM                October 2025


   [X-Wing]   Barbosa, M., Connolly, D., Duarte, J., Kaiser, A.,
              Schwabe, P., Varner, K., and B. Westerbaan, "X-Wing The
              Hybrid KEM You’ve Been Looking For", 9 January 2024,
              <https://eprint.iacr.org/2024/039.pdf>.

Appendix A.  Maximum Key and Ciphertext Sizes

   The sizes listed below are maximum values: several factors could
   cause fluctuations in the size of the traditional component.  For
   example, this could be due to:

   *  Compressed vs uncompressed EC point.

   *  The RSA public key (n, e) allows e to vary is size between 3 and n
      - 1 [RFC8017].  Note that the size table below assumes the
      recommended value of e = 65537, so for RSA combinations it is in
      fact not a true maximum.

   *  When the underlying RSA or EC value is itself DER-encoded, integer
      values could occasionally be shorter than expected due to leading
      zeros being dropped from the encoding.

   By contrast, ML-KEM values are always fixed size, so composite values
   can always be correctly de-serialized based on the size of the ML-KEM
   component.

   Size values marked with an asterisk in the table are not fixed but
   maximum possible values for the composite key or ciphertext.
   Implementations MUST NOT perform strict length checking based on such
   values.

   Non-hybrid ML-KEM is included for reference.



















Ounsworth, et al.         Expires 19 April 2026                [Page 60]

Internet-Draft              Composite ML-KEM                October 2025


    +============================+========+=========+============+====+
    | Algorithm                  | Public | Private | Ciphertext | SS |
    |                            | key    | key     |            |    |
    +============================+========+=========+============+====+
    | id-alg-ml-kem-768          | 1184   | 64      | 1088       | 32 |
    +----------------------------+--------+---------+------------+----+
    | id-alg-ml-kem-1024         | 1568   | 64      | 1568       | 32 |
    +----------------------------+--------+---------+------------+----+
    | id-                        | 1454*  | 1530*   | 1344       | 32 |
    | MLKEM768-RSA2048-SHA3-256  |        |         |            |    |
    +----------------------------+--------+---------+------------+----+
    | id-                        | 1582*  | 2234*   | 1472       | 32 |
    | MLKEM768-RSA3072-SHA3-256  |        |         |            |    |
    +----------------------------+--------+---------+------------+----+
    | id-                        | 1710*  | 2943*   | 1600       | 32 |
    | MLKEM768-RSA4096-SHA3-256  |        |         |            |    |
    +----------------------------+--------+---------+------------+----+
    | id-                        | 1216   | 130     | 1120       | 32 |
    | MLKEM768-X25519-SHA3-256   |        |         |            |    |
    +----------------------------+--------+---------+------------+----+
    | id-MLKEM768-ECDH-          | 1249   | 182     | 1153       | 32 |
    | P256-SHA3-256              |        |         |            |    |
    +----------------------------+--------+---------+------------+----+
    | id-MLKEM768-ECDH-          | 1281   | 227     | 1185       | 32 |
    | P384-SHA3-256              |        |         |            |    |
    +----------------------------+--------+---------+------------+----+
    | id-MLKEM768-ECDH-          | 1249   | 183     | 1153       | 32 |
    | brainpoolP256r1-SHA3-256   |        |         |            |    |
    +----------------------------+--------+---------+------------+----+
    | id-                        | 1966*  | 2234*   | 1952       | 32 |
    | MLKEM1024-RSA3072-SHA3-256 |        |         |            |    |
    +----------------------------+--------+---------+------------+----+
    | id-MLKEM1024-ECDH-         | 1665   | 227     | 1665       | 32 |
    | P384-SHA3-256              |        |         |            |    |
    +----------------------------+--------+---------+------------+----+
    | id-MLKEM1024-ECDH-         | 1665   | 231     | 1665       | 32 |
    | brainpoolP384r1-SHA3-256   |        |         |            |    |
    +----------------------------+--------+---------+------------+----+
    | id-MLKEM1024-X448-SHA3-256 | 1624   | 178     | 1624       | 32 |
    +----------------------------+--------+---------+------------+----+
    | id-MLKEM1024-ECDH-         | 1701   | 281     | 1701       | 32 |
    | P521-SHA3-256              |        |         |            |    |
    +----------------------------+--------+---------+------------+----+

              Table 4: Maximum size values of composite ML-KEM






Ounsworth, et al.         Expires 19 April 2026                [Page 61]

Internet-Draft              Composite ML-KEM                October 2025


Appendix B.  Component Algorithm Reference

   This section provides references to the full specification of the
   algorithms used in the composite constructions.

      +================+========================+===================+
      | Component KEM  | OID                    | Specification     |
      | Algorithm ID   |                        |                   |
      +================+========================+===================+
      | id-ML-KEM-768  | 2.16.840.1.101.3.4.4.2 | [FIPS.203]        |
      +----------------+------------------------+-------------------+
      | id-ML-KEM-1024 | 2.16.840.1.101.3.4.4.3 | [FIPS.203]        |
      +----------------+------------------------+-------------------+
      | id-X25519      | 1.3.101.110            | [RFC7748],        |
      |                |                        | [RFC8410]         |
      +----------------+------------------------+-------------------+
      | id-X448        | 1.3.101.111            | [RFC7748],        |
      |                |                        | [RFC8410]         |
      +----------------+------------------------+-------------------+
      | id-ecDH        | 1.3.132.1.12           | [RFC5480],        |
      |                |                        | [RFC5915], [SEC1] |
      +----------------+------------------------+-------------------+
      | id-RSAES-OAEP  | 1.2.840.113549.1.1.7   | [RFC8017]         |
      +----------------+------------------------+-------------------+

         Table 5: Component Encryption Algorithms used in Composite
                               Constructions

     +==================+=======================+===================+
     | Elliptic CurveID | OID                   | Specification     |
     +==================+=======================+===================+
     | secp256r1        | 1.2.840.10045.3.1.7   | [RFC6090], [SEC2] |
     +------------------+-----------------------+-------------------+
     | secp384r1        | 1.3.132.0.34          | [RFC6090], [SEC2] |
     +------------------+-----------------------+-------------------+
     | secp521r1        | 1.3.132.0.35          | [RFC6090], [SEC2] |
     +------------------+-----------------------+-------------------+
     | brainpoolP256r1  | 1.3.36.3.3.2.8.1.1.7  | [RFC5639]         |
     +------------------+-----------------------+-------------------+
     | brainpoolP384r1  | 1.3.36.3.3.2.8.1.1.11 | [RFC5639]         |
     +------------------+-----------------------+-------------------+

         Table 6: Elliptic Curves used in Composite Constructions








Ounsworth, et al.         Expires 19 April 2026                [Page 62]

Internet-Draft              Composite ML-KEM                October 2025


         +=============+========================+===============+
         | HashID      | OID                    | Specification |
         +=============+========================+===============+
         | id-sha256   | 2.16.840.1.101.3.4.2.1 | [RFC6234]     |
         +-------------+------------------------+---------------+
         | id-sha512   | 2.16.840.1.101.3.4.2.3 | [RFC6234]     |
         +-------------+------------------------+---------------+
         | id-sha3-256 | 2.16.840.1.101.3.4.2.8 | [FIPS.202]    |
         +-------------+------------------------+---------------+

         Table 7: Hash algorithms used in Composite Constructions

Appendix C.  Fixed Component Algorithm Identifiers

   Many cryptographic libraries are X.509-focused and do not expose
   interfaces to instantiate a public key from raw bytes, but only from
   a SubjectPublicKeyInfo structure as you would find in an X.509
   certificate, therefore implementing composite in those libraries
   requires reconstructing the SPKI for each component algorithm.  In
   order to aid implementers and reduce interoperability issues, this
   section lists out the full public key and signature
   AlgorithmIdentifiers for each component algorithm.

   *ML-KEM-768*

   ASN.1:
     algorithm AlgorithmIdentifier ::= {
       algorithm id-alg-ml-kem-768   -- (2.16.840.1.101.3.4.4.2)
       }

   DER:
     30 0B 06 07 60 86 48 01 65 03 04 04 02

   *ML-KEM-1024*

   ASN.1:

   ASN.1:
     algorithm AlgorithmIdentifier ::= {
       algorithm id-alg-ml-kem-1024   -- (2.16.840.1.101.3.4.4.3)
       }

   DER:
     30 0B 06 07 60 86 48 01 65 03 04 04 03

   *RSA-OAEP - all sizes*





Ounsworth, et al.         Expires 19 April 2026                [Page 63]

Internet-Draft              Composite ML-KEM                October 2025


 ASN.1:
   algorithm AlgorithmIdentifier ::= {
     algorithm id-RSAES-OAEP,   -- (1.2.840.113549.1.1.7)
     parameters RSAES-OAEP-params {
          hashFunc      [0] id-sha256,  -- (2.16.840.1.101.3.4.2.1)
          maskGenFunc   [1] mgf1SHA256Identifier,
          pSourceFunc   [2] pSpecifiedEmpty  }
     }


 where
       mgf1SHA256Identifier  AlgorithmIdentifier  ::=  {
                           algorithm id-mgf1,  -- (1.2.840.113549.1.1.8)
                           parameters sha256Identifier }


       sha256Identifier  AlgorithmIdentifier  ::=  { id-sha256, NULL }

 DER:
  30 4D 06 09 2A 86 48 86 F7 0D 01 01 07 30 40 A0 0F 30 0D 06 09 60 86
  48 01 65 03 04 02 01 05 00 A1 1C 30 1A 06 09 2A 86 48 86 F7 0D 01 01
  08 30 0D 06 09 60 86 48 01 65 03 04 02 01 05 00 A2 0F 30 0D 06 09 2A
  86 48 86 F7 0D 01 01 09 04 00

   *ECDH NIST-P-256*

   ASN.1:
     algorithm AlgorithmIdentifier ::= {
       algorithm id-ecPublicKey   -- (1.2.840.10045.2.1)
       parameters ANY ::= {
         AlgorithmIdentifier ::= {
           algorithm secp256r1    -- (1.2.840.10045.3.1.7)
           }
         }
       }

   DER:
     30 13 06 07 2A 86 48 CE 3D 02 01 06 08 2A 86 48 CE 3D 03 01 07

   *ECDH NIST-P-384*











Ounsworth, et al.         Expires 19 April 2026                [Page 64]

Internet-Draft              Composite ML-KEM                October 2025


   ASN.1:
     algorithm AlgorithmIdentifier ::= {
       algorithm id-ecPublicKey   -- (1.2.840.10045.2.1)
       parameters ANY ::= {
         AlgorithmIdentifier ::= {
           algorithm secp384r1    -- (1.3.132.0.34)
           }
         }
       }

   DER:
     30 10 06 07 2A 86 48 CE 3D 02 01 06 05 2B 81 04 00 22

   *ECDH NIST-P-521*

   ASN.1:
     algorithm AlgorithmIdentifier ::= {
       algorithm id-ecPublicKey   -- (1.2.840.10045.2.1)
       parameters ANY ::= {
         AlgorithmIdentifier ::= {
           algorithm secp521r1    -- (1.3.132.0.35)
           }
         }
       }

   DER:
     30 10 06 07 2A 86 48 CE 3D 02 01 06 05 2B 81 04 00 23

   *ECDH Brainpool-256*

   ASN.1:
     algorithm AlgorithmIdentifier ::= {
       algorithm id-ecPublicKey   -- (1.2.840.10045.2.1)
       parameters ANY ::= {
         AlgorithmIdentifier ::= {
           algorithm brainpoolP256r1   -- (1.3.36.3.3.2.8.1.1.7)
           }
         }
       }

   DER:
     30 14 06 07 2A 86 48 CE 3D 02 01 06 09 2B 24 03 03 02 08 01 01 07

   *ECDH Brainpool-384*







Ounsworth, et al.         Expires 19 April 2026                [Page 65]

Internet-Draft              Composite ML-KEM                October 2025


   ASN.1:
     algorithm AlgorithmIdentifier ::= {
       algorithm id-ecPublicKey   -- (1.2.840.10045.2.1)
       parameters ANY ::= {
         AlgorithmIdentifier ::= {
           algorithm brainpoolP384r1   -- (1.3.36.3.3.2.8.1.1.11)
           }
         }
       }

   DER:
     30 14 06 07 2A 86 48 CE 3D 02 01 06 09 2B 24 03 03 02 08 01 01 0B

   *X25519*

   ASN.1:
     algorithm AlgorithmIdentifier ::= {
       algorithm id-X25519   -- (1.3.101.110)
       }

   DER:
     30 05 06 03 2B 65 6E

   *X448*

   ASN.1:
     algorithm AlgorithmIdentifier ::= {
       algorithm id-X448   -- (1.3.101.111)
       }

   DER:
     30 05 06 03 2B 65 6F

Appendix D.  Comparison with other Hybrid KEMs

D.1.  X-Wing

   This specification borrows extensively from the analysis and KEM
   combiner construction presented in [X-Wing].  In particular, X-Wing
   and id-MLKEM768-X25519-SHA3-256 are largely interchangeable.  The one
   difference is that X-Wing uses a combined KeyGen function to generate
   the two component private keys from the same seed, which gives some
   additional binding properties.  However, using a derived value as the
   seed for ML-KEM.KeyGen_internal() is, at time of writing, explicitly
   disallowed by [FIPS.203] which makes it impossible to create a FIPS-
   compliant implementation of X-Wing's KeyGen or private key import
   functionality.  For this reason, this specification keeps the key
   generation for both components separate and only loosely-specified so



Ounsworth, et al.         Expires 19 April 2026                [Page 66]

Internet-Draft              Composite ML-KEM                October 2025


   that implementers are free to use an existing certified hardware or
   software module for one or both components.

   Due to the difference in key generation and security properties,
   X-Wing and id-MLKEM768-X25519-SHA3-256 have been registered as
   separate algorithms with separate OIDs, and they use a different KEM
   Combiner Label in order to ensure that their ciphertexts are not
   inter-compatible.

D.2.  ETSI CatKDF

   [ETSI.TS.103.744] section 8.2.3 defines CatKDF as:

  1) Form secret = psk || k1 || k 2.
  2) Set context = f(info, MA, MB), where f is a context formatting
     function.
  3) key_material = KDF(secret, label, context, length).
  4) Return key_material.

  MA shall contain all of the public keys.
  MB shall contain all of the corresponding public keys and ciphertexts.

   The main difference between the Composite ML-KEM combiner and the
   ETSI CatKDF combiner is that CatKDF makes the more conservative
   choice to bind the public keys and ciphertexts of both components,
   while Composite ML-KEM follows the analysis presented in [X-Wing]
   that while preserving the security properties of the traditional
   component requires binding the public key and ciphertext of the
   traditional component, it is not necessary to do so for ML-KEM thanks
   to the rejection sampling step of the Fujisaki-Okamoto transform.

   Additionally, ETSI CatKDF can be instantiated with either HMAC
   [RFC2104], KMAC [SP.800-185] or HKDF [RFC5869] as KDF.  Since this
   specification uses SHA3-256 as the KDF for all variants, there is no
   equivalent construction of CatKDF.

Appendix E.  Examples of KEM Combiner Intermediate Values

   This section provides examples of constructing the input for the KEM
   Combiner, showing all intermediate values.  This is intended to be
   useful for debugging purposes.  See Section 4.4 for additional
   information.

   Each input component is shown.  Note that values are shown hex-
   encoded for display purposes only, they are actually raw binary
   values.





Ounsworth, et al.         Expires 19 April 2026                [Page 67]

Internet-Draft              Composite ML-KEM                October 2025


   *  mlkemSS is the shared secret produced by the ML-KEM encapsulate or
      decapsulate function which is always 32 bytes.

   *  tradSS is the shared secret produce by the traditional algorithm.

   *  tradCT is either an elliptic curve public key or an RSA-OAEP
      ciphertext depending on the algorithm chosen.

   *  tradPK is the public key of the traditional component (elliptic
      curve or RSA) and therefore fixed-length.

   *  Label is the specific KEM Combiner Label for this composite
      algorithm.  See Section 7

   Next, the Combined KDF Input is given, which is simply the
   concatenation of the above values.

   Finally, the KDF Function and the ss Output are shown as outputs.
   The ss is the Composite ML-KEM shared-secret generated by applying
   the KDF to the Combined KDF Input.

   Examples are given for each recommended Composite ML-KEM algorithm
   from Section 11.3, which happens to demonstrate all three combiner
   functions.

   Example 1:

























Ounsworth, et al.         Expires 19 April 2026                [Page 68]

Internet-Draft              Composite ML-KEM                October 2025


   Example of id-MLKEM768-ECDH-P256-SHA3-256 Combiner function output.

   # Inputs
   mlkemSS:
   8e85b00024a24039c5da29c22772d11bb4759e14345c0d0ff7a41502ffe26d68

   tradSS:
   124b95eff40dbe5e109d934593935cbfcaad65068cba7363a0c57b3a41b59651

   tradCT:  04bf0749b0989f902446576b10282c29b2dde656a47e4380ebda4b215c
   0185caf4b65ddc3d407757fb7d12f01fb3a95de13588c2949c8c48c039732192223
   1e5d4

   tradPK:  0468e89465c288edbac25623e558f9be99d15380ffec9442b0aeb3abf0
   67b2234fc410a2e81a464441fc2e83b4152192ab60796542168b2c599348432ef6a
   d5b2d

   Label:  5153462d4d4c4b454d3736382d503235362d53484133323536

           (ascii: "QSF-MLKEM768-P256-SHA3256")


   # Combined KDF Input:
   #  mlkemSS || tradSS || tradCT || tradPK || Label

   Combined KDF Input: 8e85b00024a24039c5da29c22772d11bb4759e14345c0d0
   ff7a41502ffe26d68124b95eff40dbe5e109d934593935cbfcaad65068cba7363a0
   c57b3a41b5965104bf0749b0989f902446576b10282c29b2dde656a47e4380ebda4
   b215c0185caf4b65ddc3d407757fb7d12f01fb3a95de13588c2949c8c48c0397321
   922231e5d40468e89465c288edbac25623e558f9be99d15380ffec9442b0aeb3abf
   067b2234fc410a2e81a464441fc2e83b4152192ab60796542168b2c599348432ef6
   ad5b2d5153462d4d4c4b454d3736382d503235362d53484133323536


   # Outputs
   # ss = SHA3-256(Combined KDF Input)

   ss:
   87c945015f267ca3a96f794c9dfce00b4bdb4596030e034d0c04cdc5dcf50065

   Example 2:










Ounsworth, et al.         Expires 19 April 2026                [Page 69]

Internet-Draft              Composite ML-KEM                October 2025


   Example of id-MLKEM768-X25519-SHA3-256 Combiner function output.

   # Inputs
   mlkemSS:
   b191c0384d3a5c3921fd2fe63fdb87a9156d3e73efb9c5ebf0e2cc00a2087643

   tradSS:
   e8247eb791cc06cb8e50d404058c820ad1b44e02d39b855c041a03cf03ebe44a

   tradCT:
   6da0261f94959c4da892dbaf5680af92d962b0b59befae895f44b95bdcbbae1e

   tradPK:
   c5c26f76e6232e48aa2d1a87ced73f275a4031cdf83aff90c26d036d12611977

   Label:  5c2e2f2f5e5c

           (ascii: "\.//^\")


   # Combined KDF Input:
   #  mlkemSS || tradSS || tradCT || tradPK || Label

   Combined KDF Input: b191c0384d3a5c3921fd2fe63fdb87a9156d3e73efb9c5e
   bf0e2cc00a2087643e8247eb791cc06cb8e50d404058c820ad1b44e02d39b855c04
   1a03cf03ebe44a6da0261f94959c4da892dbaf5680af92d962b0b59befae895f44b
   95bdcbbae1ec5c26f76e6232e48aa2d1a87ced73f275a4031cdf83aff90c26d036d
   126119775c2e2f2f5e5c


   # Outputs
   # ss = SHA3-256(Combined KDF Input)

   ss:
   ff15da0b25b55c8971b5e088cd4fba3e6f90c848cb9c068c24ac701e487eb9c4

   Example 3:














Ounsworth, et al.         Expires 19 April 2026                [Page 70]

Internet-Draft              Composite ML-KEM                October 2025


   Example of id-MLKEM1024-ECDH-P384-SHA3-256 Combiner function output.

   # Inputs
   mlkemSS:
   27ee13466bb4c2b72bb0dbac9fb9f8cd17425218eb52ec6a92490196bfacb90e

   tradSS:  6d9358552851d7681a2ba7f6d266bc5ddc89308496545a29462b15f645
   9638572705f43f01d902447a83702a7a91dc19

   tradCT:  0494a8920eb2b023ddf72f5f04d49a6b9e2af047578bfac37b097f2ba8
   19cb3e35634595ee95b909e556a3ebc90d658814f714a71fa89bcd99e6ebc31414b
   3b7bc9625c2f5fd8a4ced073759bc0fa21a2e5bb9914d2ca28ef6e6b12bff0901ce
   f1

   tradPK:  043d8dd898d42b7787278c8affb0148cc158f577b9ff67d4a43f4edfb4
   a685bfe23efebef57501fecf4098a0db033a0a58f9b8f62ed88379318486070b0aa
   624c8de78dbfd746d21aa4c8582364ed969a854ec423ebc5b9fae9912611fddea83
   2e

   Label:  5153462d4d4c4b454d313032342d503338342d53484133323536

           (ascii: "QSF-MLKEM1024-P384-SHA3256")


   # Combined KDF Input:
   #  mlkemSS || tradSS || tradCT || tradPK || Label

   Combined KDF Input: 27ee13466bb4c2b72bb0dbac9fb9f8cd17425218eb52ec6
   a92490196bfacb90e6d9358552851d7681a2ba7f6d266bc5ddc89308496545a2946
   2b15f6459638572705f43f01d902447a83702a7a91dc190494a8920eb2b023ddf72
   f5f04d49a6b9e2af047578bfac37b097f2ba819cb3e35634595ee95b909e556a3eb
   c90d658814f714a71fa89bcd99e6ebc31414b3b7bc9625c2f5fd8a4ced073759bc0
   fa21a2e5bb9914d2ca28ef6e6b12bff0901cef1043d8dd898d42b7787278c8affb0
   148cc158f577b9ff67d4a43f4edfb4a685bfe23efebef57501fecf4098a0db033a0
   a58f9b8f62ed88379318486070b0aa624c8de78dbfd746d21aa4c8582364ed969a8
   54ec423ebc5b9fae9912611fddea832e5153462d4d4c4b454d313032342d5033383
   42d53484133323536


   # Outputs
   # ss = SHA3-256(Combined KDF Input)

   ss:
   d776982891626f4e4804969ff858120b87d8f8abda7d21ee241b3589d23f8ac4







Ounsworth, et al.         Expires 19 April 2026                [Page 71]

Internet-Draft              Composite ML-KEM                October 2025


Appendix F.  Test Vectors

   The following test vectors are provided in a format similar to the
   NIST ACVP Known-Answer-Tests (KATs).

   The structure is that a global cacert is provided which is used to
   sign each KEM certificate.

   Within each test case there are the following values:

   *  tcId the name of the algorithm.

   *  ek the encapsulation public key.

   *  x5c the X.509 certificate of the encapsulation key, signed by the
      cacert.

   *  dk the raw decapsulation private key.

   *  dk_pkcs8 the decapsulation private key in a PKCS#8 object.

   *  c the ciphertext.

   *  k the derived shared secret key.

   Implementers should be able to perform the following tests using the
   test vectors below:

   1.  Load the public key ek or certificate x5c and perform an
       encapsulation for it (you should obtain valid ct and k values,
       but they will not match the ones in the test vector since Encap()
       is randomized.)

   2.  Load the decapsulation private key dk or dk_pkcs8 and the
       ciphertext c and perform a Decaps() operation to ensure that the
       same shared secret key k is derived.

   Test vectors are provided for each underlying ML-KEM algorithm in
   isolation for the purposes of debugging.

   Due to the length of the test vectors, some readers will prefer to
   retrieve the non-word-wrapped copy from GitHub.  The reference
   implementation written in python that generated them is also
   available.

   https://github.com/lamps-wg/draft-composite-kem/tree/main/src





Ounsworth, et al.         Expires 19 April 2026                [Page 72]

Internet-Draft              Composite ML-KEM                October 2025


   {
   "cacert": "MIIVpzCCCKSgAwIBAgIULtrNBeQEwwJaM4oDWYvBU60jS3owCwYJYIZ
   IAWUDBAMSMD0xDTALBgNVBAoMBElFVEYxDjAMBgNVBAsMBUxBTVBTMRwwGgYDVQQDDBN
   Db21wb3NpdGUgTUwtS0VNIENBMB4XDTI1MTAxNDE4MjQ1OFoXDTM1MTAxNTE4MjQ1OFo
   wPTENMAsGA1UECgwESUVURjEOMAwGA1UECwwFTEFNUFMxHDAaBgNVBAMME0NvbXBvc2l
   0ZSBNTC1LRU0gQ0EwggeyMAsGCWCGSAFlAwQDEgOCB6EAKmaxA4q4zdx6xWBKYGqIdvr
   Nl7urRYp6KtiEibS95s/Y4+TI77XKJQsq/xIJmJvSHWgxrPELvMaH3wC742AJ45kL6OY
   rTG3HnHrA875AshE4pJPGM2aNzHD+RqTT8DWIPF0bhEpUhVVd6ENn9clM43fYkfBuoUI
   yzXcr43YmSAlEuXFcJ5cAqU7y8PiIj/UYjFKY/qXwFVGMkdNPXlu5nbq6dyODIj/StCu
   ykQJwaXFTc97OVcqKelnIV0Av0EYUyjgbWbfBloLkBVKAAfaIdJi+pJZI7p7K9gjia3r
   s/Z+8qT04z1KBlMJIfojWgpuXcITZ0iXO9Xi84EVQmLZ5bu14NgRKsVSxolcvd6Hp5rp
   Q8Dhbe01PVSl0cIuX/cZi2vz3Eoe3gynn5vHfpqcCradWQKVk5lZS3mtQGZAIxaUO99v
   OjjxlfKj/tH7h0+13RisfV5vUBWCW1omv+xLgpBWEEmYMUXbpIXwHmPRfPWVYBRdpNEs
   325UX8ZjpbMGjspED6gXU+Uvesw8ZdyadisIu8H90y2+XPxa4Uj4idt4V7GSVmjbKCKI
   f3WddGIag4fueAxjhg8JX4J/9u9zHDbUtuwiLFa0vFCkHEF45JiFQ9OxGItT+3kJzKTf
   1QjxJjpvnFoAYyJ5lQfmVuZ/w/hiCSzhWSNjgfZbsVCeL5R4FdEmmn/bK0BqZWF+PF/3
   2xXhBSYCFpJTHQTNLtST1/0kNnuKD8epEiY7wrS4Gkx7H+fugSnEhV4H+7ELdYlXn1nH
   z1a3fGVT+J7pxKcEB8BBSigOStXaAgKZCj8OUTnFKIJv42NnxkzH7OZ8HQAnKQoVXif6
   z6l/iRfmBVrneIwE+3kgImuLNP+k8fLI1GhWOJLG5YCUxlmEAdwRvrkSFMdHWtbP8eHN
   vtrrwnPhbnC6V9cTQT40AIge3GvLkO3v51jR9rH2GGXJ3j/XXet36tpLe03NourHhudl
   YsICYxU/RACgUsNOh82PpP/ACLgbNUawhBmUiEGWZ0AJEhQw2JooYl2NfDE11VxdKsaO
   OooS1/9cLTN5jGAES3WtJGu5AYfXJHfqCSNkIUxrnx1YDxBdJzR/uI4Il0r3aql+6YDL
   mG3EiUneWO7yC9KQQ3g6K3OLxcr0pRFdF+ga5/YmoN6Q+nvd7wgEZQLPFmVfq7PouOIu
   ZJbtg97dxa6OpM8il/5mLouh6CqIReMqwAqHTrlnq6Q0FxjfSsCF5kAPtpHm5TCmgnxL
   UU07COUNjAev6rtx2FWaZVB+FzEFDFHqknRYx+TvoFWgxsKeULGn7pjGQ8xhQ/LoAqyL
   uhH8e0i3qp09ZOOnhYxwxhSZqx23b/em74/E1PIlmxOqwXDhrnuNmHQUi2Zwdxh9voGw
   /WA4hcghaED3zHVDoTcy11UVIyDu6LciNupr6kbjJugLl0j9qxbT8zBEVmK0pZqdQDu4
   6s9X0M7u2Pa2HeN3oxDWfhL47PKZqf46+Jp4DB8ykCp6QHeb13HBehaNXvQdCCBDBhts
   Xyodr8VYZh5br+Uubjnk3PfrYBabnOZz9WJz1ZxbkBez9yD50pNjBq0fOVx3Z4bTRekh
   yxlCMucJTzE1ZB6cGB5GxeX0A9BUKfL2Amkf0cKwaB+eBhb454TlwVAT5EAufEHm+kav
   SYQdyJPQfDThDJEaeE1/jZbZUwVxMLV/xfMvrZ/JBDcX45KeCL0QQDBAh7tof50KQ8r2
   0Ihrz+07HrtaGPZZx0qGgWCzcwgtMkfXQQVkiy5uiYOw3zd1IbdI3QDwsigIqUSL/zsK
   AHe0OYp0yokYOIbxcJ2Kn+DkG3wkXWRmi9vk3BBFIvF1kGDlzfl22zN0FDIsWpeiJ2PJ
   Me79yU3vjquWCYMRs/XrQ49AiG/io0IGqngA+xP/7nj7pu8miBrmJQhz7oDxk4tIB2XU
   BGTaPdpPRUgDiuk1ji8zF0mOs1SWcbPRmIPBhwO/Nom1jvs20CWbA7LDNrdK6JaGWoaW
   xrKZgXZGe35ElOySGgqc4GI6H+0NK6Dde/h18ahmi2Ww8t5ZiCjG4ZXh+Wc5ZA6q+AvT
   DSBHrSDM3+z1kM7Qywl/Fky/G8HXrzQleZldEzEWWGm21TOzdzkUCtBMSpwG9ViO4y8e
   2F0597GRY5H6kEAo+7GFL54lAcKi090/xmnySZt2/2kDLj4z1nixkP6GF+BfIkfV9IAc
   bMYCjL0GHPLIQxFhWBWkdH9lSiOqBRETgENKmmFOLC/c3zz0imvN3YW0EhMGUz87Ebwm
   yqU+aqTEoEyYSub1W6tHAy5lCQFNZEAuszzllGlZsR2cXH+2Dtt06/wjxxOnxKLgvKIA
   xMyqN3bpUHIZoq+q1qqzeOVN13mpgzKPchXu8+9NZW4wVllsc+CdsK6KICM0Nq/vxCUK
   rpUJBBYv4hUkJC2KjqdXxZ8GM7hWm15Ny3MOWfxyMpP5Z7o4grM8w5rsDBPpwhk5fjmW
   LUGlEV0Km8/5tLdTDdNLT+4v/xCFw06nzgqRqzrhMrk4XQvA+8aAf+FMccEXS33cIvSW
   pJNUQaia4LfNuEuD/MuzPUFYwOdXJNgKMgQ7DfKP/kVR+DT8LPQxmb2aGa3+b/1ujJjA
   kMA4GA1UdDwEB/wQEAwICBDASBgNVHRMBAf8ECDAGAQH/AgECMAsGCWCGSAFlAwQDEgO
   CDO4A0csrCai+0P6kIwb6BKEPAYsCgRaXhfl6sG6vozgjCEtnQKxvKCBGShymwmhsd7C
   giLKEl1XmDSWkEZ0ed2GC/cqG311NTmtWABjiiW65t3aANZxNxxp7yS2GQtG3laGxfRh
   Ph+NpEuhIrdaAyPX6cbTO25dJOaoJ2Xb+3veymErNUZl7N3rl22HY3Qww0fquQQIo0+r



Ounsworth, et al.         Expires 19 April 2026                [Page 73]

Internet-Draft              Composite ML-KEM                October 2025


   LR62ihSrEd8iErdwKMKxpJDzUV36hMOCWBKNXw4HzaeBHizdtNbaP4tw7wJovxAgMSXP
   HoNcGFf5E4VEX8KDg8NnR2YCJJTy5Z6RWo5aeYuAn/2Xcr5NuBgnRN/LNO6G/IfCE45i
   qa2bLfWwpCLd6T3Y8RbQh1hDqV4ieMyTHHnm9JwjDRW+C/ggHUntvO/mrnzdFJDt93vg
   6XGub8e2mv0lW3l/pqmTe5m3W0xSy3TiyV+fRSENG/H5BvqiS1XlNl/pCX9b2oncExrQ
   MBv5gGhnmrmKysco4VUJODQj04iLlpwPQGmKsg72aBprPOCVOl4CJ9PSSRYwgZvXit18
   WzLXZ/NCF6LbPsIhYXN5hOxWFqwYFoPZy+DYcoXpPRFRANBvtRg2ABbAbOAlkCybttF2
   aMK6iyQkdMktvafLSb5d7nZ+jb70ua5Hvt/paw9hf8hN5BzCJ+dMaoPURCM1DNDZPZcA
   8tW0YhaIOzKgYa1UaUGcMGCdj21SqiTJJmGhwJbXeoCteWlIwBo2UFdi2iwHHvzp1/CT
   bEXIvlWi4cwg3AGkmWL5mnxnjsb5DzSmUU+Lz9ezFhl3BuA+gXzAPX72aSZNqU8Ddcl7
   h2mLcjwRk1hLw7oqWfdxtg6IaomdRlDE+WYmey3GEUeG/pXd2MQJLSPjMmEx5imLy5R0
   9aylEViv5dji75VmEn2Ts8toWPgRUY5RR4Q9sBHGL2wO6SqTgeBvM5QTFh8wtrcukgHz
   Sfnunq3UEuwJAse+wWAbbohKOqipmajbneNl4zlAjnGtlrLKRvcVbFWKsInxwhcadoCs
   npw5xMw1GDOQBUyF48FFVgKvxUkVHt3KpfuciWwvjRcGsgAM9IPxqFbSATTUiytMcjQF
   LtNCZk2PCsFeGzpTnU+I8jPy3zdfPBBDzrtm40qoO9S9xMuplMq4oyA1G/8DX4z+J3IT
   uH3Pdrxz/a8c1vTktjUDU/uOXK8pPTK73faacsTUurr38e8ErjZI6pn89hmgP1zVDcvz
   Wy9o+454uObIPYqES2VpkeQPnQHA5vR822E8Rqcza9xItzCqvWLwBsi/kVkdJGgYtDQo
   ks/l0rGjwEz7uo/QiwkKPiXlJ/gM7e2rUnPg9xRLk6k5cXHhPcp5CcXxVnrVE0cmlO97
   qSx/KET5nu9cp6HZp0fmmbZhpfP/qOi/cFxysxaAND9gLfte5rjut58OVS2TY6WFKxHD
   Z2X2oXmeerrpLikwKGW5wO6chwlqr42lq50xXt81GgjWpcGVd8D0qcU/QWSlbRbLkagk
   VSx/ZQwLY9CR64UK6Y7tCg76STMvENh+9RLxVaZgmjGWPT7NHyMSg2xjRHMo8c2mbwFI
   rAQotz2ITsdAnd3H+fXcd/ciY4zQNP61/1PY5GRDyY/voK7FD5Wn0Hlz12S1Ha+0tAo8
   g7sLibyx4tRxb8htJyhkV445NGqUmjmHTYWWfhcn+zCUs8Zhp8nKDFWrT/s1j8BglcKg
   M1BYLBOsI9RBiWX8Qrj2QfFMd+quCug3zM+LDY2Go1onE208uA2lFfS7mcZukjQkcUXf
   u7qZ8AkrAN8H4YfhqSJ/HqUH5B+9I/bTg1AvUgiXR+iaFHwVoLfxa9Cw1y4rYfEpmfFN
   KwNgzi3uPC2q+DFlBmEJxU54eeHctcBCsWjDvPX4CeYqlLv876l8E8cHVT1P0771wFId
   Ilc/kMJ7g9IekRjeC2DmzhQtjL0exhYFbEaQjlC3MHzD4DqrWKOozoON7JKhMUeEb5Ai
   NxOpoAbvVRXq4wCRXNT7Npox2qlNUFNsqQah8ZAj/qykCX4AadZf5YEo3FPhuANqvQxd
   Q0emJkX5bUib6o9VijsTXeodFkfuSr/xq2TaqREbwoHCMlbdUxPO/0nalId/gKNAdSLj
   jzVT+YZlLtU9MPbi+pSMTHWQ/9j3DrS3nGbZrFvYG2ObpXGkoZVYUZ2DG/z89lw9CYSw
   8piG9w/Xx1qmH6BYbiU7Fhj63Bcit6MGNCHa5K/nlP5JlvS2mUJ6H+8eGWHYe391MfJa
   fG7ztUdhmPfwL2f5iwO4j5i6VsTusxooueFgSezeQ4xGX3Dpi/d7/xZvxepN+qm8HrX/
   Nsekgif6zURSbw4mHh5EuePo4hYz8BVZboimDsNTadPB8wikFByj6EguO3tj7L+g48n6
   SUwUK4upBMDn5zmHjvUZwb6CUlYhtM5hJ1aEnoeEaioGzG0UdD1yzO2IBK2QOv4iPvkU
   McNAaR4SkWcAclsnv+pIlILpriIMxbksj5tWmsusUd1lRuTzuTDllYj35cjP5RUW6/Lz
   K8JMZu5EndxpQwZRrdeOCv9Sl+qWtfD3PSBEnlptTsve4P+vZn2h0/5i5Vw00Pz25Npy
   zS9PCQ+WKSNetq2sUXOubvVkb8s9kieJYJSNXa2SJV+mSRZheBY2dMJPckVJvauVUbjD
   q/LNlIOwHUk5Rkd/+hVhcDHJYG1vrn6v3edxmb+yWWHaGLqWfmyNhq/cwhhl8KfgBU/u
   mzxlbTApuxw29wKMloMxEsGeXn2Dg1PRmS85uiOa8FmBE1JnmUlCV2JUmddC7viSpPgp
   Ffn0oxwWFXUNHVFGm7p5FlxwrisEGhoUeEuEP5IP+UjZyPFDZeHZoegEBK5QZZ6cWuxc
   t0+yh3afmW36bgwn2dB/ATya6vpffOxpIcoQxHTU3d/OvCq+fSbYI2r29leQV7hSVdlc
   YQqBE1NBYxbDpj4IOaNKQkn0ZX44twnXVUIdAjCxnrv1nYjbWcObpXEwa0DZtFIxRUOQ
   5sopS0h5YF2qsqKN7Ugrke3/mPFgFX18gqZWoK5yB7WhhSomDsF5IBI9I9T619R1JPTL
   xI8UrZ/1+NVSicCc8utcCI8cqAlgfM83B+96P/+pORHmqOA+wuFO8Dk8ksO3dXmheQDW
   gAbGmK66ONGGTg03v2ZugTAs56+CzwPf2N6b+T7nUJG9tYhgyeja8bx/STvLE6PiNFGo
   T2YekUSlfwBIC9ACCZk7d+M3gVehwk7U7Gdn+fXKyoSjzX9YAavsvPuZ3c7aTppAhVHv
   0Uu5vobALZpdnWTVoOU9ftpyIp0GRbiB9cpZJxT38HhV+yXHpYFilpVre0dS81fPtbSa
   RpOX4hzXnAEq/wYW10XGp2LmCEI5UvnC5Gb4z8jhiayGFzxXPvhLK7cLoWP2vhIuh9nh
   C1+KDpX1rW1Sq2EvWdKUNgQTbrJFdj0r1dtmiWXJye96Ex7+pl4Au5ityZ5qK1HnYLUE



Ounsworth, et al.         Expires 19 April 2026                [Page 74]

Internet-Draft              Composite ML-KEM                October 2025


   awdZtvgjfmSB8yMzat7JX6kESI5rTNj5GbaMVhPLhm1gI3gtwZjjONZp7BgBsS+8jHgp
   qxPyyZet3vtYR7hqI2XncGob/RzrsT1BlLWKezPBirMx7VmPtB1INnzBSXZ1m0w70CT4
   6gIKiDDr6o0hYnGWInjmIGQ+jHSIlZLKfWDmjIrRHX7WCFMYQHhzhHmYDQ/01+a/csvp
   3NcM+jM6OSbqRqA424qgg0eUqvazTMu68O7gmmedRhvqROxrbZ9cYeMdmwS1DdxiCwNa
   HwPzvAo6S+sCrvvWELzhPIg/sBunIYgtfYxPhwZd/e8pp1geNr6BYkTcvLIwIfK4C0CU
   oq4B104VwSsFEOA7tFMMYDqkGcSU7rTWs3/YasGYzs1iCoCMrGK9pqfBZTuOSl5M36FK
   PbLXSvo7/4Baq1ONb0L9l6AE1aiDByNVgw9tLFcg33wo7sK8uZsfdMpYrUfwJ7ADQEoV
   J9rtzAqWyi6MkmSei8wdJo8Va1/aMRSiGnnLS09YPMVwbtQTWX+dREIrXkg9TrE5H2lG
   7TTGYY7TU7RddKysxbJq2HCJL3+rLDbu82xx7V25o0Jxd6Pm54Q3nhaBfGW6lTKid6lB
   Ij3SYgJ6JkWXDrM/RnE8WevchsGIKNvIsOOnydH+S7+Fys+C0jlIefG3x0ZjgZUdW1lc
   Mw5ZMmGmNQXhK4aV5AIQkJ67/pZA73FLl+BDwO8skGVGFTweqI/+m0jds2KEr7pA6Qda
   oNEPYvpCnPYxxKfsIE1v5oYBQfcXw2dnZs6PSsciISKJMzg/UKdtCBx6d6AKqWfPFTz6
   GYcdzmC4E2nkLLo2qiedg7SKUv95awDL3ywnqRWF3sRjmW24XM/AuNlStwd4JDhVcZnH
   o+AEHTrcjYXqM6hMg9VZrdHeg4vEAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg4SFxoh",

   "tests": [
   {
   "tcId": "id-alg-ml-kem-768",
   "ek": "Mjhp5qZ4FTCQ7DE/DNw
   3dLJVQFteczc0DBa5TLUhpcQtr1u0B/wYn4jP3qjF59hB+gSlFVa3+GPIjZKvyyQ0HBQ
   gO7rLdltmcaByJvOlqIgTDkKiVyRxuEowfJuOxURsA8rIPKse3DOAXGonoDRMtfKjAGp
   2rekJ12Z5EgwbZ/qbLkjBaBnFGWieRlpng4d3HKJUUvcZLlAIBVNUCzE+zQwO9oZdpiE
   X4OVOTSlfA1vDM+CmXzQmJCMDZMMpTbWX/5vODpWHxPhXnBEKZtgAhgSG8mp9UKMbkIc
   iFmBl69QvJNVvZXOgFlSF3pxWviuEvHhtg9pqqRWqd2N7OFoxOThcszmlCQh2TIsmJlu
   lI4JbuNBJxEi8XIqVSdcQR5hcpdDBQKKq3OAkUzECyIdIkynPiVmxzERHGRh2sglGvuE
   y6RsuguqkxkCzNLTLGwoAlxqTGra0CniIqFjOi6dkOSVerNIHAEjLKNlKvpkcdSHC75C
   PEGhTFzGGTkgNSkGF7JELpkzAUJzE88TGpTMzehtIqDlG2+Qi1nkUTFIOttgtvRdJbqk
   QmwagM9OF+zvPjAEKL3ChuMFp4RQca4Nrgliacplb5rxh49YFhuVFDshkY7FZpLyXIDy
   NaPJAQhUEj6QKwQIucTQDW0FgHRRsC4dk/LxkmIMfeSavb9RmGOO0FSXDchuqrjDF/IA
   gkFYdjloFX7m+pPEe6vNYvjcBsNWrWtGs4fsxd8ApFnEnWQa1IJaVNIuNrMQJ+iS3EVy
   Rm7atVWbNPMddS4O/esM2bwN3MGoYJ7yuCStLmFSSLrUEKHslsmzC+MYOZwKoIkQS7wc
   BcgIq7EV4jdJKIIwdPNwHetu80ZBaKhYyBuhP8+Fu3kNU3LEWJRUndIYkKtpkQDmZZRk
   60mGvmUfES5RlUTqXSoG1BRcmh8khZ4jC2MZ/xKuJDiy1OMuL7RNeRxAoURq3FmcqzzG
   BH/EDL4SUL9a/hrlYotnFqTILgQG9tLyNMTUzPVSlLFye5pe8tAJszcbJBQMbpteTK5g
   GapEbHHfFWvAaB1xcTdcMDGiktwnPFOUXaCkix+Ri+SsXjUyQGhdSgcaN2zERQ7qjo7K
   5CPy8XwIAGYVF3gWb/LkBVxsJdnMTTDsvtkc3LWHPXtVRjuUO6ZOifYu//KFz9PsKwhG
   /VXqIpjQt9YcTNYjCl1g7PCp9MqsFjrpjtVuBQmBUngsGX2OcZfd+C3Wl91Qp+/Y0yFF
   0IIlU5LaWRJmkaFRrjHpPIOIDemeMThixW2K1F3kdiel2IPoTl5BVnsNLA2bOZTRhszU
   QQgc8z9ZzOVantPknEioUY1TCa2UMiTesq0Q97IC1dikRbLkl/MGB88WK+VQSxreAJep
   R3qVAL/HEEtsVU8dls4BHJiBTTlZPblqnVAYAyUJ53UJX2RmeGEIGKTRJsUssetMLD5L
   AYxRz5umdmqBVteq8xoG/z+q3+thDeZxPE6XCqnsILZc1o2puhIFV6oSUP7mAyeUciTp
   OY+SDxbNGQLuen5xRVaQtUlC8hHFAbXFDLelglqHBKs18x8JKpz8mBKwnhjkkskE=",

   "x5c": "MIISkTCCBY6gAwIBAgIUItykdFOUldqt8QYdbVNg/yfe94EwCwYJYIZIAWUD
   BAMSMD0xDTALBgNVBAoMBElFVEYxDjAMBgNVBAsMBUxBTVBTMRwwGgYDVQQDDBNDb21w
   b3NpdGUgTUwtS0VNIENBMB4XDTI1MTAxNDE4MjQ1OFoXDTM1MTAxNTE4MjQ1OFowOzEN
   MAsGA1UECgwESUVURjEOMAwGA1UECwwFTEFNUFMxGjAYBgNVBAMMEWlkLWFsZy1tbC1r
   ZW0tNzY4MIIEsjALBglghkgBZQMEBAIDggShADI4aeameBUwkOwxPwzcN3SyVUBbXnM3



Ounsworth, et al.         Expires 19 April 2026                [Page 75]

Internet-Draft              Composite ML-KEM                October 2025


   NAwWuUy1IaXELa9btAf8GJ+Iz96oxefYQfoEpRVWt/hjyI2Sr8skNBwUIDu6y3ZbZnGg
   cibzpaiIEw5ColckcbhKMHybjsVEbAPKyDyrHtwzgFxqJ6A0TLXyowBqdq3pCddmeRIM
   G2f6my5IwWgZxRlonkZaZ4OHdxyiVFL3GS5QCAVTVAsxPs0MDvaGXaYhF+DlTk0pXwNb
   wzPgpl80JiQjA2TDKU21l/+bzg6Vh8T4V5wRCmbYAIYEhvJqfVCjG5CHIhZgZevULyTV
   b2VzoBZUhd6cVr4rhLx4bYPaaqkVqndjezhaMTk4XLM5pQkIdkyLJiZbpSOCW7jQScRI
   vFyKlUnXEEeYXKXQwUCiqtzgJFMxAsiHSJMpz4lZscxERxkYdrIJRr7hMukbLoLqpMZA
   szS0yxsKAJcakxq2tAp4iKhYzounZDklXqzSBwBIyyjZSr6ZHHUhwu+QjxBoUxcxhk5I
   DUpBheyRC6ZMwFCcxPPExqUzM3obSKg5RtvkItZ5FExSDrbYLb0XSW6pEJsGoDPThfs7
   z4wBCi9wobjBaeEUHGuDa4JYmnKZW+a8YePWBYblRQ7IZGOxWaS8lyA8jWjyQEIVBI+k
   CsECLnE0A1tBYB0UbAuHZPy8ZJiDH3kmr2/UZhjjtBUlw3Ibqq4wxfyAIJBWHY5aBV+5
   vqTxHurzWL43AbDVq1rRrOH7MXfAKRZxJ1kGtSCWlTSLjazECfoktxFckZu2rVVmzTzH
   XUuDv3rDNm8DdzBqGCe8rgkrS5hUki61BCh7JbJswvjGDmcCqCJEEu8HAXICKuxFeI3S
   SiCMHTzcB3rbvNGQWioWMgboT/Phbt5DVNyxFiUVJ3SGJCraZEA5mWUZOtJhr5lHxEuU
   ZVE6l0qBtQUXJofJIWeIwtjGf8SriQ4stTjLi+0TXkcQKFEatxZnKs8xgR/xAy+ElC/W
   v4a5WKLZxakyC4EBvbS8jTE1Mz1UpSxcnuaXvLQCbM3GyQUDG6bXkyuYBmqRGxx3xVrw
   GgdcXE3XDAxopLcJzxTlF2gpIsfkYvkrF41MkBoXUoHGjdsxEUO6o6OyuQj8vF8CABmF
   Rd4Fm/y5AVcbCXZzE0w7L7ZHNy1hz17VUY7lDumTon2Lv/yhc/T7CsIRv1V6iKY0LfWH
   EzWIwpdYOzwqfTKrBY66Y7VbgUJgVJ4LBl9jnGX3fgt1pfdUKfv2NMhRdCCJVOS2lkSZ
   pGhUa4x6TyDiA3pnjE4YsVtitRd5HYnpdiD6E5eQVZ7DSwNmzmU0YbM1EEIHPM/WczlW
   p7T5JxIqFGNUwmtlDIk3rKtEPeyAtXYpEWy5JfzBgfPFivlUEsa3gCXqUd6lQC/xxBLb
   FVPHZbOARyYgU05WT25ap1QGAMlCed1CV9kZnhhCBik0SbFLLHrTCw+SwGMUc+bpnZqg
   VbXqvMaBv8/qt/rYQ3mcTxOlwqp7CC2XNaNqboSBVeqElD+5gMnlHIk6TmPkg8WzRkC7
   np+cUVWkLVJQvIRxQG1xQy3pYJahwSrNfMfCSqc/JgSsJ4Y5JLJBoxIwEDAOBgNVHQ8B
   Af8EBAMCBSAwCwYJYIZIAWUDBAMSA4IM7gD39yIpTZakPoJoZjt1Qi4RAnE1oekUE6wI
   XeHhIJG5x4eB20ofysWEsq59xA39kYfYE2h+9dCTu0G6oseE97lLhFACQGT0W2UCnFf0
   lnTP0csWONHhnlkNMwe9invKZ4qHxAqEneVu+Tknzt7AcNobokY8kiXzyTDaycU7OitM
   FmzEy5ayskZ0DUoH2zC6o+60QVoUEug14hurc56Arx0fVhTbfa3B4B1p4WdxahPJXFHh
   RTmEsEhr8yfUwwcbLzrR+aRFaFjbrLYtU2AmOFpqRNN5Gs6XgP8gHmBefJ7RDt0WVXPr
   a70CzaoBB2cKnZJpv2XmzncgJlkqYHzBD60wX3cx3zFfsSRSOxFlXErxuyxVAYH4jnas
   vGVl143hzow2TnqNmo9rkP9gQD8v0+8wTnB+qVXpZ9wo4aSS4dGgRYSj86PfeEEQma/8
   GD/ODL0hK24mFI8Xrfx3rc4f0N5N9cVR0RyzPJbMvkLLS64iLV9JWg31yHZ+6GcTE97T
   htqs5fvvn2BV7hL2Kx4XhucHrt6x5GfHvgqXa60ihVVN/+r3U9G7KPL6qQ8/Im3Z26Jn
   i7luiECm8nm6foqKvNiUg+AR0R3diiKrtucJ7yCkoeiXySGa4WyP2g6N71Q1pmBKj8ue
   A4995mE9uEF2PIoEn9c067yBtfd/Bp+iF/zL+rZka0qim7ZJMc+txIgzy4leGl3jkvzh
   202Bhu0gp/wdmUhTmkSBfyF/WTKEbaFzIKmAd+DA8HpOrXQIeioJi+G64O3Ax/TzNYNj
   n2cZsbAQSAOkclWV166oTLj1S6+TCyj0bK3wJWmXAB3Gqz4W4qn/DQIC7aWM9MO3klzz
   VQQjJ6kkzEJRjCHLpjzsPWlEz9ns9YiAsDDMSrMp7/Zxh7VGDSiL0RGWJV/p0xGuI8yG
   jFzFcEnm4gLQ+mqmAiTFZMU6fyYxozkGgQ2IgU0CujyjxcIx9rCevZ876bKuWxc/7JPV
   /G4g1GfiehP/EfUWxVPAZli64VilA2kpJByh16mFrMYuZqWlzbpy5DdcLZYH7GgygOJy
   fR3ayFkBmRJID2y1BfmmnsfyEpMMexNfdIkj680WutRLQ8/ZDMtdohh/YC6ZtiKyfIye
   SMLMQYou29/E7wKFlUG+LKDqR2CM79q7T4uWTKc1NzqzgEQaHzQs4raxXcx309EQbB0j
   voJ6P4UZpiMaHcGYJJmaYqeW//wkg9rbxZNLa+AhheOjZD9/iz1KcxVpzzpWzyFzQvwg
   eUjikXzCtZqOix02JnCEYhsS2SQyfPbmvwpQAJH0L0s13/j6Z/O4w7k97JnHsWHQGGL9
   tNeA0zS+O75snBt6Fdl5Gvwpnw2YP3sx0hAdORu1r7Ns+IBHKvjsZraRQqNOpExOZnHt
   zGHJKiU4EpUcjKu7uptBMLhujaYA1ux4PuvC8S/tU9fgk1XfJczIriDt/Qk6GpVDqwPQ
   de/8CyQnaoiNEBzqzDiVJuOQicZj8K73oSR6VpcXDk275/nmoJrC4JjKUCFYnSqJw9Em
   KaWP+tnEORpTW6mjxcIT1pOt/rNpoGlJYOWlyKpamp2um6svGNp92+/DbKc/kaxLm9kR
   5GYE9/U/x/LvmFZME7I+n8f6c4rqX73AHwJKiGqs1Sj/wgMbLUxf2yV3IFzDVgworbSz



Ounsworth, et al.         Expires 19 April 2026                [Page 76]

Internet-Draft              Composite ML-KEM                October 2025


   WdFwVNrDbr9IQe1PXetGqs0126kKdYSZ6lfQgtpHk9loyB6SfmVkCM4XId16vdk0CV1d
   yBHvUOwUIR7FUVUETHUM/cPrAk8OsgAV65QiNMaH9yAMKpi2z8zp3oeTq/OzfuW87NIv
   0qVeckkfCo30GFFuHg1o24I3lqcIXx8+g/wE5OY5h+/RVMUVUtBdZ6lrI6yjule0lBC6
   I3a5JFXBsNQaKZLDKiMB+4OE3dWX0j7gWQMecVnNS1FbEVdURKJrSiMLqupsHJK+EpUw
   7enoUoJKUyRdRhUDUVvydrIrnwXvDbU7QGX3JAjSA+9rhsxkqBAJzUfN0bSEYUv5eyM0
   EcKhOW4B3E6PdJU95Lek9oAQ7bFovoA8YWYA9vQgU+GKjLt7tupvVOOPcSI0r5TIt5/U
   C0sHt08/bixCwuWSwBBT+OB4cSW6H3xSQzzkJBOtdpHUpEHHi9JsQQhhWiCWEG2gTnOi
   UeXWkIAL6Xr4RoPpVLRQJ9X6eeoElorDrHEvKyIGeGE69TCBTK5ltUHcQ5J1SaZ/ZZis
   bqB9qKdl79s73H318DDoxu0Q+cfXcI10hfiLLummAllcvpJjpTGeL4GN+7AW2cHA/shQ
   AYN/zhSSV4Qh4mW58Gr8Hqoedlw5GwfQU2cSWLEzhZcU7wYYKGqmiN/DziV7K54FBSIQ
   dJysu91akFPl44p1VT4oRcAHHtuXNfxqeT9Xqpowuj19elUOQlUNv3A4vMr+OhAXHNPZ
   5J4v4VmSlkAod7bP/YGY4+zIb1q5v2eC/qUW7UTL9RbETQS/YuFC/CPkM8MASVzFF/F6
   3w+SxyZmskWOu3g/F5vv6F6wWzVhg/u8XMewG4KB4DsoPl1LM0IdMRxHfSHBr5Vn9CC6
   nw4RhTKod3qMsTVaREHFwUfcTzVytw7Ux1Cy0xDi944gqpYcOHeHqzqE1wxzdc5LubZ0
   vVM5uc8HGM4ay20DDMLTeLDlcDPN3ZG5IOPo/GFuoaqcSJLzH4l8ZB+y17KYlzlOdQyf
   ElXKdnUTO5h3vq0ggrjm/7cdEDXiizFSzeivAntv8mVOydTURKYfGhT14uPz0lXmKaRl
   1WOTluiD05ZjKyp/XuwjnqU3fUiGKFsGqTEz4RLVPlk4iKfy9eC9kLgbIaDaZtXlXQWi
   /VgqOl7NSSUiIHSZv1joWU7sUp/5u8L4pn+rPgh37NH5x0+Kj5/W7wcUTakdQS0J2bMK
   jn1LbToWv9UoQbT8wEsG75IdZ8HqN0MHmMCQuD8nK6f5KkjQ970jkbrlLASlspLZKoQ0
   BPTxxE0CCf7JEcnefcdebmQFy6El96TAH9EUC3d8SXRIn4GQRkXSJGZMDuqok2DwDS9R
   HdNfQS+hPlixuC8bYfpJzKDS9eKWypbRRZxSwBlqsYbFKXpE6J1Vb+P/Swj77Hpcktyi
   WYLh6dV2rojt8EOSLXw4ELUPpiKySjQk1+RAcWwIcg6L6Wtwq7wTPbOpjEvpDYZHxniK
   AxWUEaAYSfK/0QBJhAZgR/LAWL/zCMEIFL6Q2Euc9wT7m+DzHfW0VtdGqX7WvkoP0wA+
   n1HMyuIOpR9SNMzLuaipCn7C4yNm82RS3rNQYDzAFvi91Ene2M2WKUKtS9ezOqo1CQmw
   u25L6DVJZKRgto4Z379kluERfFoRGWhS8Bya5v4K/xE9M9NwRYHOFJzATtVFFDzi6wcy
   eTJCAyVHAzxqirfny4N0kAzvsj8Lylv6lti5hlqUtKClyw85jkJizqbbVlFIaADUecXb
   lhcp9L30uRXEUBpc7VzhIpHjnvMXtmYHJuTgoHqcWQx6MMnY6146owww5sAvBzs8qntT
   p/ph8/ROqjxw/CzO0M66OcUdRVLOiMGyYFqeMzrFpD3IhaoUK+iyec7mE9WZuHz5YvBw
   GPUhxEU3lbDr3VGIVbE24FRi1UpjB9kJMrmOr2wyaVFOR3wTmMj01ep6N9gh9VYPAiaK
   J/nVnyd2bBHdObSi5i63nrcT/oFKvgSWgvVGlSYn26Znjl5J2ekrzImsSMfHIEMbKPgg
   iRaQ/zFR3/gfuEUsTT23voEVk6ZqXtz3lk2oIpj1xVP5uP/Fk6pLj/ib77nkrX2o9uP6
   otOef+Ubnat3qaCSAVIM2pgdKsAKKUOgYspWKPeHx5i/VPjQ6J8fzQE+9JNDPxl8K0ND
   iJALkRswrZryOOOTiH2nuDuBSRurZLZngPZj6ok7UfH3RRpmJ2q0rEnkZnB6uA7y+t31
   J4UMUFZOHD6aK+gYTuC7Arim4VWAZTVLXm3ZBjgQsh5d0Y3xWSioVYvJ9XXAFeGJgFpv
   znLMZYONasvqpckdqN0wgah0KnuqCbnabAng11H8YZu3rv0RN9yvcl0htMqDIewuKgE1
   H1lOEN723tKxMaUWNfq2g4Gp80UBV+w4lpaqq7mOtWDtnxbawFfkD1qe3Ph1wMrfRoSQ
   Oi3BZk/Op1IyqDTDcRaSOpz+fX7aZWNCrCunnVP5VTUW1CHAmSBWmS634gVoRGW1i1Ov
   WvQ9X8Kz5nEUm+K4qfnD1TtvA+xE2Y3OdJWYIjal8QamLY/mZLnvrGcUF3jGKRQiFn0F
   1/1PgYOAAUPN4Jwp5+MVpXpPwUxlvfh8+nlHkGCUseMnBhJEYKh3r1G21wmN4DMz+FvS
   jd4O3ZnkU3pqpB8pV15il7nYP3SlCXV42B1KgJ8fJCotg9kFXnOVlp6s1N4AAAAAAAAA
   AAAAAAAAAAAAAAAAAAAICw8TGSI=",
   "dk": "hP2PltonRxKLGGnJLobLFoQPU4WGjl
   4hN4ZZo6WNau7S7IhpExGHBM8C7cT7jCZBT9yT7bKyPLiBHvtJe+xIhQ==",

   "dk_pkcs8": "MFQCAQAwCwYJYIZIAWUDBAQCBEKAQIT9j5baJ0cSixhpyS6GyxaED1O
   Fho5eITeGWaOljWru0uyIaRMRhwTPAu3E+4wmQU/ck+2ysjy4gR77SXvsSIU=",
   "c":
    "Qt1bep2bdWf4tOJg9WF26FC+IRVWK11ebP3/I14cMcWBsUT3MIw6w5FCowtn1Rvrim



Ounsworth, et al.         Expires 19 April 2026                [Page 77]

Internet-Draft              Composite ML-KEM                October 2025


   gs2N3CMubQYM8JclS+umYHELilBm5i7FRDsqsdOXosLCPHENAuyeNsdrsJ9XjAXGIAlS
   7iTXvGFy9K9chb8/41YLviKAW8yV+Ehsfubul8KAlJfOUbzTSE2f+zKUFzp36iHgMiof
   98t4+AlapJXKDSaNHSeSQxczFyxPRcdPP+TBdkW6t/aeu9G9lnmtIARqLtg+tcCmtfNU
   LCLTROAMtHHFVqaqXhd+EAFfZhd/g0jpMmkT7GalbeyAsjY7r968fEIDj/pmUewrbR1J
   fcTH8eUG0bCxhnU8GeyYcen+ZWFFMYuoPC1UAdyZWiw34KfouTAaliD8De8JbWfKB6bU
   4EDtBD0amnyAhJri/17cV6c98Xl28LKLN31o93s3w+RZTl7hUlbR+qnAM0zmklaACAV7
   xqflLr0/31derh1q3UkjEDCL3Jz7DOldgYmcCiau4MnHvNqNwU+qHflT2p6bO4P9n1TI
   iXabnQjW+CzD2Omr3cFrwLI0RP2Xq+Dn9GpY08c+sxmf4OYRHX5hsTAORl79kwJ+1DTK
   XGul8V5Z2XAbtw4BbffdsNnTSK7ejIMj6uF/ksyr1HmyhwQ9htNPXZwVcy8NpIDSy7mE
   RsXvkrXizujtKl7z35denv2HYjOD2qb0Xy4NpODOByuPwh7/4yPU3xffo73JLF3ZWVvG
   /I5vZ3pm3xabxmioYxYdY0GQQ4CRhQ6jPDGB5SWf+dG/EwyyZZq6fDpGvnlVUw2gzAXo
   jO9kYrbD4XC7Ts4RnbLgxcabgNE6g6dEaBubu5I60wjOe3lM79vgm16ZJb9MGYrqE71I
   nmeAUkc1igm9e71za2Q2QJSI9nq3plYcoWTcKLCuLoqgiKbdqmRFftXg0y+yT1uRZ4Z9
   sEyd7YZPg8kXm1b39g5zruFvy5/RnGR+JKVztLwLG0bOrMLb/jlaGKOv7kJFwWHBp21m
   GO4G8qDojPJp3r3DU9yCOgC4UQmbHeEUTLGkI5jcNkPxe/cQBJLElCLetKPqWz3udx8c
   qYqHeyh4mgzBiFeB5UqWWJfHzOq914fiLvOL7KLrU726yxidQ5FESoJ0+GooUIBllDm6
   OxiBACTw+e6Ia4gTldox8/ql9kI3k85dozAi/bNXY5vyLmex8uc5ZqAB+32g+vIbYrOh
   0T6t04Nt9kjFOWqTF9qezeVUvotUPte1JR9D7OJ+k+WLAhSmXM+fCfGkkyF9adp2g9zo
   UHleAfQvE32+3MUinYSq8K/HLEVnADoD+LXPmSsPrHsgxa496A3Zs/IHVf5KZ1uljh4J
   QktvbPRBjK2RipElQXlDwIR9sW3aWfgWOqpyhFm5a1cMSeJccEukev+jlWFwp3vHXl+i
   7o6FHTGWkiumWcj7BS2em+D1Y=",
   "k":
   "RNGEvblTNQhd69u/liCEv++YCedWGKoNALkjE51lzSE="
   },
   {
   "tcId": "id-alg-
   ml-kem-1024",
   "ek": "IqQwCYm6x/C9iuMRYkw4/OAHApdB52tDc7ci26SzHJoatRE
   IB+xZ0qq7aosyk4kKmEa28SnE6qoBpMgmajG9L7MGBdgzRJamfWZrN6qu9um0uNdFg3I
   ApTm3spxu3+JG/qck2mcOjxxziOdklGuTKjEXnYu3Q4x1rVCsgbnHblOSvZJ5G7eMz4M
   h5UcO9fNl5jIuyhEkeDZx/rYbDuwnxHoc7JzFYrhhOlMcoOaQn5HMoDdyhCkhPqS07rt
   fgPJyybEAIgHJRJEVc3qRnfFaDpZlIlt30pdREugkQhNuk4c33Qx6NXduaRQJ+PgTxEa
   rCokZyOu0WJaMfJEu0xYkS9KQI2JWWdiwUKZwKWJvPCaYbacqLIQE2ConhWhPuxkEbSF
   WXCgVMGzNuHy4+biBzZuNN+i2e8x0ChbL2DaFHlFDvKueu4VkSLdHXldEQJFwLiI1ULG
   1OARBdDpaCyehk8B2boEt77Ii9nUm+shrCzaxnKUuesJYJTTK7xeDWAsgcLsT4yqWIaM
   XbOmmPoq0WvMYAJsE7ZwOmhauO/aOHGci6AWdJ6GYHQIdjkYTP9S1S/ZlfUMgoktgeOy
   nN/eYAGwJ4GPNxfaf+iSAu2C+NxtyzziSdIcgyBt/YnaTz3xSgmoDphmmvnEssvJ6X4n
   PbIl/p4eGTbYiUlRxPYVg8ZGbPWoKCTplc4yfVxthp+fDXXeEuuhic+p59RMNyyhQdJs
   7nMEYZBUzwcWTcmV+d/hRAmw6WYaVwDVhABpzVnRDtlgwWyuy5Ohu1gSt16ESt6E1u2l
   reNLAVdoDPbsDZacUN9gvPUEU3OfB7JIHvNqNB2dlRsBi2VcJe2sMWbQnPomoHMOO77Y
   JpDXB2axFqaoR80YG+Vt8bGREl9wob2A1tEB7e6AiMgBTjzEzMGcUWHmLPVJjzGdLA6l
   7xPhhQ2t1/lORZIeR7LCEf0orN3abVFt+KQCAWHePK3IAUtQ6H9IHrjtTj7YWrWcBm/s
   5FFC/mQhKFhmEIZAXGbDD/JJDDDgy4QvKoKUtcTVh2uqJTCZkmeptDYOTvWOVbSMbW/W
   7HIGweyAk0ebMkjBM0FOKwhZ3zPtfyao+MsYmvXADRAAQJ3wuK8U0b3azCiA7QCEZqTm
   GtxBoPrzB+XtKnWR5y5XFqVAyJZyTCDK1q8GENWMEFAM0fHN81Blul9ELwoE1HUNminx
   IzxXPOFpGRVJVhALEKqvGqgp+9LK1PKuJJKkdcUhKx1VewaMQCrEkDFI6fbh6fBk3mgS
   vmCqg/uSYPVhdgAawVDFNKHS8H+k+HoV0FeTFGcuqq4UTfhpmvrZRVZkMSTgcRPUZHhM
   8kkIqQGfCI2OTZujOAdsAUQCdq9mfHYRG7aC2B4QeWQdsjrIheddkoaml9hUP38E7+Pl



Ounsworth, et al.         Expires 19 April 2026                [Page 78]

Internet-Draft              Composite ML-KEM                October 2025


   qVbV624wbfWpYYBrFzym9EAA+0YaK9SNf+ahL+YGpSIYqmFQrBQUxqRtW7vG8SWStF5u
   lIMsvGZhgc+Qjdgk5XFtcgKLG4aN3+Khnk6l01zKpWENjf0tRd7M2AUxoe6I52Wd6vsp
   k6YdtF0sETpaM37ZSGVoEqpSQzjyZ2znDPpGPFNwXeYqLBBugLshYLhmUKnZV52hNeKt
   ulGw4LsuqmhM2v6JOk/gknjKt1OdXaVFfOpGff+QpIFFnA2ezoNJKZzjGdOunuWE1E/U
   ebRKMKGs9Fisb4sbERukpMFLAebc7ozh+hNUpi9NF1wNYjDo5lUSbPQOWWjqhYJa5DzJ
   gc0PHiUYRoSnEnsLLq6KoFYGBmgJcJ7qTU/kIzYqDmvdnOzJtmnl89AaxqDJyZQlFGMX
   JrvtUvYiuC3cimhduwlpyXupSlPtXo0UsX8q6ysqpA+N9U+pNxGkn/xixt6cjVhKuiAq
   pqTcXXYC3B4Ql0+WQukpiZillqslVcxPFRIUKEQhRCmRpZiaF4PMsPIwGwphgVJBfrsj
   KJ8AMonRle9WnmdNjvyFR4kq4pnwnQwdvGPkSO9aSjpEjShxQ5BNEYjlTEUlvP7ZDEbi
   KjjgZazplcxYu9SlhHTnPu/CKBTs9ijUHd5lqQp08mogUSZLu8h0zIKWWlz/prMRym+9
   Yzho=",
   "x5c": "MIIUEjCCBw+gAwIBAgIUf+XQdi5oF8+ILs5qD7ddtbD2XwwwCwYJ
   YIZIAWUDBAMSMD0xDTALBgNVBAoMBElFVEYxDjAMBgNVBAsMBUxBTVBTMRwwGgYDVQQD
   DBNDb21wb3NpdGUgTUwtS0VNIENBMB4XDTI1MTAxNDE4MjQ1OFoXDTM1MTAxNTE4MjQ1
   OFowPDENMAsGA1UECgwESUVURjEOMAwGA1UECwwFTEFNUFMxGzAZBgNVBAMMEmlkLWFs
   Zy1tbC1rZW0tMTAyNDCCBjIwCwYJYIZIAWUDBAQDA4IGIQAipDAJibrH8L2K4xFiTDj8
   4AcCl0Hna0NztyLbpLMcmhq1EQgH7FnSqrtqizKTiQqYRrbxKcTqqgGkyCZqMb0vswYF
   2DNElqZ9Zms3qq726bS410WDcgClObeynG7f4kb+pyTaZw6PHHOI52SUa5MqMRedi7dD
   jHWtUKyBucduU5K9knkbt4zPgyHlRw7182XmMi7KESR4NnH+thsO7CfEehzsnMViuGE6
   Uxyg5pCfkcygN3KEKSE+pLTuu1+A8nLJsQAiAclEkRVzepGd8VoOlmUiW3fSl1ES6CRC
   E26ThzfdDHo1d25pFAn4+BPERqsKiRnI67RYlox8kS7TFiRL0pAjYlZZ2LBQpnApYm88
   JphtpyoshATYKieFaE+7GQRtIVZcKBUwbM24fLj5uIHNm4036LZ7zHQKFsvYNoUeUUO8
   q567hWRIt0deV0RAkXAuIjVQsbU4BEF0OloLJ6GTwHZugS3vsiL2dSb6yGsLNrGcpS56
   wlglNMrvF4NYCyBwuxPjKpYhoxds6aY+irRa8xgAmwTtnA6aFq479o4cZyLoBZ0noZgd
   Ah2ORhM/1LVL9mV9QyCiS2B47Kc395gAbAngY83F9p/6JIC7YL43G3LPOJJ0hyDIG39i
   dpPPfFKCagOmGaa+cSyy8npfic9siX+nh4ZNtiJSVHE9hWDxkZs9agoJOmVzjJ9XG2Gn
   58Ndd4S66GJz6nn1Ew3LKFB0mzucwRhkFTPBxZNyZX53+FECbDpZhpXANWEAGnNWdEO2
   WDBbK7Lk6G7WBK3XoRK3oTW7aWt40sBV2gM9uwNlpxQ32C89QRTc58Hskge82o0HZ2VG
   wGLZVwl7awxZtCc+iagcw47vtgmkNcHZrEWpqhHzRgb5W3xsZESX3ChvYDW0QHt7oCIy
   AFOPMTMwZxRYeYs9UmPMZ0sDqXvE+GFDa3X+U5Fkh5HssIR/Sis3dptUW34pAIBYd48r
   cgBS1Dof0geuO1OPthatZwGb+zkUUL+ZCEoWGYQhkBcZsMP8kkMMODLhC8qgpS1xNWHa
   6olMJmSZ6m0Ng5O9Y5VtIxtb9bscgbB7ICTR5sySMEzQU4rCFnfM+1/Jqj4yxia9cANE
   ABAnfC4rxTRvdrMKIDtAIRmpOYa3EGg+vMH5e0qdZHnLlcWpUDIlnJMIMrWrwYQ1YwQU
   AzR8c3zUGW6X0QvCgTUdQ2aKfEjPFc84WkZFUlWEAsQqq8aqCn70srU8q4kkqR1xSErH
   VV7BoxAKsSQMUjp9uHp8GTeaBK+YKqD+5Jg9WF2ABrBUMU0odLwf6T4ehXQV5MUZy6qr
   hRN+Gma+tlFVmQxJOBxE9RkeEzySQipAZ8IjY5Nm6M4B2wBRAJ2r2Z8dhEbtoLYHhB5Z
   B2yOsiF512ShqaX2FQ/fwTv4+WpVtXrbjBt9alhgGsXPKb0QAD7Rhor1I1/5qEv5galI
   hiqYVCsFBTGpG1bu8bxJZK0Xm6Ugyy8ZmGBz5CN2CTlcW1yAosbho3f4qGeTqXTXMqlY
   Q2N/S1F3szYBTGh7ojnZZ3q+ymTph20XSwROlozftlIZWgSqlJDOPJnbOcM+kY8U3Bd5
   iosEG6AuyFguGZQqdlXnaE14q26UbDguy6qaEza/ok6T+CSeMq3U51dpUV86kZ9/5Ckg
   UWcDZ7Og0kpnOMZ066e5YTUT9R5tEowoaz0WKxvixsRG6SkwUsB5tzujOH6E1SmL00XX
   A1iMOjmVRJs9A5ZaOqFglrkPMmBzQ8eJRhGhKcSewsuroqgVgYGaAlwnupNT+QjNioOa
   92c7Mm2aeXz0BrGoMnJlCUUYxcmu+1S9iK4LdyKaF27CWnJe6lKU+1ejRSxfyrrKyqkD
   431T6k3EaSf/GLG3pyNWEq6ICqmpNxddgLcHhCXT5ZC6SmJmKWWqyVVzE8VEhQoRCFEK
   ZGlmJoXg8yw8jAbCmGBUkF+uyMonwAyidGV71aeZ02O/IVHiSrimfCdDB28Y+RI71pKO
   kSNKHFDkE0RiOVMRSW8/tkMRuIqOOBlrOmVzFi71KWEdOc+78IoFOz2KNQd3mWpCnTya
   iBRJku7yHTMgpZaXP+msxHKb71jOGqMSMBAwDgYDVR0PAQH/BAQDAgUgMAsGCWCGSAFl
   AwQDEgOCDO4A8tTS+6xvehVdUIVweIrR1w5ApSAz2wgKU8VjQ30cw+7RL7GobxUckZY6



Ounsworth, et al.         Expires 19 April 2026                [Page 79]

Internet-Draft              Composite ML-KEM                October 2025


   R57UoFUO10Z9gLOsu3ZfRmBLBYqYZ8Wi4/GWg1qhV+0a+n1taJ17V5ymmKL6GNpWD59n
   jKJUTVvP/VoRzCGjCEMxvre6N+zhLmqzvf+7YHlixXOcwgNIUtQzAKnWYMeyZRNKM3ni
   xgozo/n0vheoVxtB10STWLwkwphnwmDnVWFra2PdIsghvaQxy0K6R2/93fih/WpnOm4n
   fAKbdMBKkLO0tVaaawp8kFGOazuNEKR+rCvwQh7PXK6JkXxznYSHha39LQNCE67rjkyC
   YbJcEE8TT06Sm2cuBMSyiLkzX/kOTRQTe3MDty4xrMX5J0xDPviZJc/hDXLoU8ZHv/zN
   0u+j4LNhCl9jlSRTy1IWZY2BWmHf2cbxWNi/Dhvs3zIb92Ddwl+QJZQqfG1SgMpr+puN
   vtsab7x+X7i1Fw/hApuiGpFQRGx3Wyp2vjVeDM/7zc2tOW38HpjlEvblPxcXtoeXYwtw
   +U4Ffm5orFHwqI+C0CTI2xWYY+oM6iYPdRYzRa2NC2jzNjhlt99i8CG45PYcJg0K60nr
   fi24xRNBTp22jEv3kCuS7bQle6XRHgsUSztrzNAcdCb2FzulGg74awQXGcJNuRW2oidi
   LBLKN3DdVKnrW4VGLSFpvwB7o3EXd+dvKiPXYMOpkU7JwN79mlmqaV9bHEbgRJIRIVPF
   74N1eKKfPZvoSHvcfSN+xUIJBojccmGXWjFDPyArQMuMQRHQsIbnK8b4c+VHgj7XCc3J
   HkLG6qtAvxBlWKopJ59yQK7Uh/tgT6wGZNksWV1aSks65V89iXNeRd3pcOIOK/AGG8dm
   aUNARgb/P49g7aG2RYnBADyrVaCMtwQgIKdndy1Oy/Qf+aRLHDXNGvvV99MyH6mG52bY
   Dv8T0dAXegRDxP7XSn8uVp6/AeqxuI0i+vVH3tMkSHTeYaAfWda3y4vcW3/TM3R1ReBR
   83tizGWd/6t17efR7yyDsYXrJffJOqh8UIy63Hcj3q3278ZOCalaN33ZEpoaBKXz5Utj
   XejQX+ZG5DOO4oDyUewovmLdDsSfZfD6u8hTVD5kyIW36nDV993LXs3x/LShmeS02hXb
   TTd53dLt5kITQ1KC9IrOWyI5KIroQF2i/c9hG9fjB7XaWmJcP77Y/s56eyuZksjwFdBD
   uU4YZ4H152zKQFagtuXH1+fNmQ3dK9SkfS2wEOdQRoUS0ky8G9rDmOjD2tIEv6S0mUTb
   R3T40P51Sf+Kw8sbRS2lIPurvxTeE6go2GlCQZ18N11a4sOIEwo5Z+WMdvSwTUrd3veB
   NTBx7uMM1Nc1+v6GtazND9E3EIlZR2Dgk6ByD3WhDTBHQIk0johWsMF2XTPnMR8NGafT
   S0Yk8aW7VXC82n5yxwfhmt3bFE+ZL4PQym/Kav3T6SLQnP3X6IZfSrAl2wqOVMYOl5DH
   Is5+kLrjx6sIm3v4t0t/KPtfFDPKUUMkjuQ4xzZF0s8TV0+pecrN82bpZtJ5gBM59HKj
   kc//nXDGYVbwPITjJBD00G2sBaBr/zGUbt/byPhGMKqUNKdQdm/0QGU2P86xbbCg2nPI
   8ci/YDieoEIkX7oolonvl4B1vAlMtRwHZekB1hwRExPYuhFNvFfSpMSGANEKgss5p3ww
   lMievr2pbj0iUsGyldF10IHUJvrY/vyNVOlNsIPxzFjbR2wxPMCE3unXWm/T+I+SUz3Q
   erc/Q/5SlP5lxic4DityCpUKacz/xMBhztRMf0ltCsNzSloTrHwlv1PiQ1ke5yvBhVRq
   BAuCA/bNrvLU4ck/aWqvjDGkjyLp0QFAubtNKZ4dSGEx6+unJrtsuZm9N42l9GkLTf8Y
   tJoBGmdkIW0S9NEUY1SbkjXkfr3KFBsja+j6vCVwRZNPnfAhqny+I++vSztlMZ0mj1Nl
   l+QVfDTYAv3yLrbCNDNbC7PMUTVqW/J/+my/z4det9tQ87Zf/PD+0yfXH1skElNgowGY
   C2gYrCxhjv6xe6ztlpN9eUrwuPFpW9La0IQJ13tzwuajdwJPbFx8fE5znN0uDs1C6+CW
   tmib1xFwPlFcMOJKTkZPCbZJWjYGkJl9adcWN4CzQCVe8jo6fZnVu9rXY/SH1MZHsgGK
   AdRIx1BSuiSFOD1IwERBOJbqnQOCYstGy+075LkFS60cV8aM3B4GdCSNkM3ZzQtnpDvT
   4XJZdzgW9JpMcssdx2HPt25jhq04jCj7GUjl5wRJO9Z9DOJja9bWT2W7pHB9XFRYEB/u
   7K1ce3qehmMU7BLvu62QhBT+7qSWTnugmLWCnLSEgKUcMnxy5Ux1Z8RoV0+n6yM2odCE
   0vGsPHos4rM6spY66rEF6y+Yarm6Gs/bUNur8hW8Uj8OHiJEO0wlJiNgCNUioZ2mPeUV
   1PPFmMu5UYw60zZOAydelv7yWAuEE95uzGw6grR0yr6hpr0RV9NahkB5lx1rf16YVDgk
   K8aldZYZ3/dCOLGytZnD3ESNZW6YElassmDSERXhhDZYb+7/xVy5JJk1GuD2Q+2fQ2VR
   j3+h/mEXfKHgpijXU0dFd54hNk5UyYGaNgSLWMi+f5eF+CyZQ8Zc2y5nYy1a7j49tHSS
   U/UzcSCX2SXjYnGkpR5DC2ocAJBPFzR1N1PSYjdl0eGIST1LZNQpzlzlpdavmt8WKvIf
   ur0fYhfdIlDIjxB2XAQamdh5s4j5C014nM6c1Zy/Y5gtMPmiMqzN3qFDj4Qed8lkv4ba
   IxALiUmaejWr29GLtpey8dvm0Mrtef4ZaDGjWUDrMSLLB3v0Tnnr3fFNYNEg0Y2vdxzC
   yeGGioOCYVdVPLBt41iZrQeC9Ohk5hfI0cNvIGvXsVHgxzmG2CAdhECsE+zZ2EKlYz1Z
   EqBXhYwOlkO6IMwSxVLg0STYxwkb2EdX9XVwMs3l8qZk2pP9Uzlpk+p/PpcQrn57mF1t
   qE6zp6XEjmL+wqAKaUb+fGy+QRAcc7zt7kS0PcJVN9y2MdC8aLowbndbEIQtcGJxrSnl
   MykFwjuD/sex+XqiqYOOVV07+vHYsl1ac02yMV2U5a0WyCmIZWwXRL/M6huW33ZDKzos
   I5/LDRZNcgxJ/Kj4TQvHbgY1E8gL9ol+1ojmsnOT0rvk3kMMHhS2FL4VJXPbsZLI5UTt
   abrrv8hRMl5v3FzIDOJ1F5JFvuEpEmjvrSTOTd91CMbPXHZVpuLAktVoDIWxZDo8V41u
   zRo3MK4zNcMg4p13kCyB99y8850CuTxAVdaFF7sSD0VxbSoe8mfXi1W11NOy/NvQwUiY



Ounsworth, et al.         Expires 19 April 2026                [Page 80]

Internet-Draft              Composite ML-KEM                October 2025


   8WWBsEkdLc4GsTJN1oeycTm/WDnP4UF6k1Hca2wQ3W7jrz1bWilrnZPahDMQkB/drJLP
   0MsNVMqTcSjZkKGcy6UhDSywhCqGu3GKXHgom2TInmj8+3F+Yzu0JWNwpYm2dVXhZ+Ci
   hjOUimVUdqDltl4dtIzb5hYtn+t3wT1ufpGXQ6hVUKOgvFCwjum4Q5kcfBfD6x0mZCO/
   ZeUYhxsKZT6Db4vRchLcAe5a2KFd62jEz8DDNdp5EebuBbSY6jgfQWP5i1eEx5+UyRUg
   G+5pdqoC0DgOgc6ByYX1waIw3IKMENHYd6pwT4HJgoXHxtdN+xJ94GxJQq0lOhScJQKl
   9qi3SZni/d67MCw+4508GNp2RCz0GUXhU5Kdxs8QtBmHmeW1SanD/snWEqaRZRHx3gin
   dJTEFNlTkCDyih8gqlKpdBseJ9NX6JlJr/dd/pkBzOfFeQxiyNFdmxhZtwcrqoUnbWAI
   KXoCs/vURDxKg1IbB7lEHqPl6TQGXY5AJIMvIGC1ySUo1n40LYT4zaYf52AmkHHRCuMX
   FBNom3dZdZ+A1fGwh1+ywXLWN3rMUaPLL+MheWiAfEA2Ng2FZqiKBjPZ4sJwzVmIIETB
   67d1XrtnCEWPCF/bLQYJeaR4lY3Tsqi+Y0EvoHWz7DmdaYFpFX3r2r/jS4th8dZDYfo9
   uInX0+Zv+/auKbregSOvezZ6NM+7w25tKgj6usr6j6o1YpRgC+AG3AyjrVZVKhwxxsjW
   xxASh+Ex12MF9SbB3N1lOZdNmO7XYY+NIsn75tV9xMFR4lBPeAAW6IvogcpPIVvTgeHL
   xCmmfbZx6P2Wcs/W+ICr3OKzxdUZxk7HrgKQ7EnbczK4c0zg+UyL0veF3F0a+Aj6BPIE
   1X+RW2xIRYb3QeJs9Mg8oJTH9KLzs1hSZQRQaB+G2Pdk3vGYxrwy3gkHQR4uw6+ad/g9
   nw/HX9wOzeOju4tAyoL7QfpPUO9Gh2TvLIu94pAq3JzEDbfAhcVdDjCJofgCEFmA3+gR
   LkSCs7XyHzeaoSqAh9YaRWWCx9cnKIuYzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg0R
   FRsg",
   "dk": "xUMGOS3t5rpA0PGuFqTrA0K9fR7Fa0AiI30ZnLCkDYeTvqBEHyZ1oz
   /IIEDuvC6omY9qTFYl//G6hMnLxYunZQ==",
   "dk_pkcs8": "MFQCAQAwCwYJYIZIAW
   UDBAQDBEKAQMVDBjkt7ea6QNDxrhak6wNCvX0exWtAIiN9GZywpA2Hk76gRB8mdaM/yC
   BA7rwuqJmPakxWJf/xuoTJy8WLp2U=",
   "c": "IDZBYtfLgvohE8YC8IRJeISq1Gzvb
   nczlo1A9w51CZO8iZxgubS2bDceCJmWXvSz5Vx4pBKY5dcoZS6IbqipGdUH87IuzQM8X
   5bbG3zG6w5U3ej/Y7TRe9GgYXDdvsfQSgk1KF2l77PbQzxCODf5G20zoyY5mc0wL6x14
   t/bj3XOGBVPcS44Em8vhFSsParjKgb8NqXzuL2B7lBuT9wb78tsqL+BQNTPC7LdnyhoP
   o4Rij2Wxurx15nFikQpzcIxebJCzFBr777zHq+R7gsNG15BiEEF++bCMBYSb7w38KqVU
   MpoZqWb+Y7DavTpwbYxeIAVeBNXhl+EKkT5lSRiLtP2t44lMmK7/+algoBVVHhXgedNG
   mARhoxnWtD1blSZrxqd3cQOzAoww5IhFklpcSm1C8WWVHtND2PVqrDr79BpEic0RrgHi
   OwXJJlgbLJ+pKRTfqvu72VRPihNhHq9o+4DkEe3TXgs0XfgDRFsRQ7G2jArJsKNKRquU
   p792a+tlik2sxVZ8hmJP9oPZSe0HNRDlzrCpZPmyr9yDm3pVoqcDt0NCJ9rEzdZvX2bm
   kJIOoESzmnddnBNX6jsFHWlq7PScT8iOLLfMe9DCzzaIkQxGLVn6rUCjcothd4K+UOkq
   Iqlu0MLBdMXVSGg+A7DHA59WDT96wajtyvswGgFRN8fHf0U4eW6CHdUskDdIEUc/rZAd
   lZQBgqZ6grUsT6XPXcgVUb+w97fF6LmO+wSIvAkQPzcfHDnS59vRrvJPsoncp0TuPL3j
   4/LN512XJqsPz+drct9SVm31okvnQ0NmHaiwy03Qz5lrWAUOZ8+F25XS0XEn0eFwjBlN
   s2kEmZNfVjYSCHw+7zllDJ0eSXRs0/NtJKM08wHlTdDG4eLTIPMVbGIuHG+klf0Sh9vp
   rASD7Ujjbdqrpe82Iw/DKS5QHMCCe5X8s5tSVyslUDLAECv4bu9ZddTgJ7kHroCOxtxi
   cj7KiQKvsaClpzMxhfIgTJdWZDwTOxSgjP381NaOSs2sEJpxHMwCqX6/sTp9c0cBqQem
   Vqoue9dgzSc/QE+6WkWolYkXpzGdekM4aBpwN0x38fgDNZgTzOtX+aoeHJuh4lKf/qe2
   oxt+9hpaPv0iX6W1IOBDu+I8pW3XNyYDikTkgBkYJSdwuzwQSYRIHU2Ginlklkz1evhu
   QEmPeLLJ95Oj8PcKxfYmax2TuQhZMTv32qEa3Zxt/Fbl21Gr/f8Tle4uD9E8t2EKHs5P
   7bOu307iL7P+IyXn/sVv93YhICVA+XTpyT0WlvH7kE876LtRKfIyREgZlXMr67dfT4DB
   4TmQpyBT//aQZ7SvPRRfHBnI3IBM3ddtX+J0oqqknxW8/1pgrUGyEqFfFjcHwVbyCz/U
   /kulE9cMSolHZu+aaJs9J2MSe16S1TFly1VhmtJSNaZ/K4QNWGpVWIcXptrspogi2RLq
   xSvLjbXYk3vofMQV/kUIEr0CygF863MJtuoUu8uBRMLjcq83K+wbZ6oe6ZJm5QEcXQwo
   wBzIRBYK0sqXASvqoYyfSe73Q0HIeoENhpvnq75X1mk+oRpeRq0mvMk+K3zw2LXFwp5h
   x/Di/shl0yk5SvJMfzHoWD25XYI+/oIY8iBNyh2Vki2jlTjwcNB954L/uijp8/r2BKLD
   ug8SnD/PYwP/EFVuVOYCel54D4VwknDxFTJ35F8XUqp61Iey1DTk2x2QFEAw+VCv7qW5



Ounsworth, et al.         Expires 19 April 2026                [Page 81]

Internet-Draft              Composite ML-KEM                October 2025


   jROPJW2AmRwxopI7ZyrEzZ0t05yaKe5a8VlKnnNFToJNUvIkoslx5Ai9razvSy4vVvD1
   LM3kEyj1nD8tc0Ees29EIXhXe0A3WBFBYSmBMe1xe/IIR3fgbED00wFSriX+QuAF6FoF
   9vTD3N2juKU0wIB0eZVQMhx761czqsgINplpIN2T3gmpL/O5YvBZJTxvugv8pqIYEWOT
   vvf8+R+3tGPlnhZhlbPsTEPSZVZP2WxeYsEGjQfBO4D5Vg19Kk9JuiWQEA51waxNJ0FK
   +f1Crzo8gcsTNkLwa76rC9co5Jumn1LDUOgAFDnuA40jIz2CCrOGbuWpiv3Th1arxwV5
   ecRddhdgm0P+8gOyxKQQ44=",
   "k":
   "9Wc6+Jqol9XjhMIAZqshyorNaBsKFPs+4iIN4wOjrPQ="
   },
   {
   "tcId": "id-
   MLKEM768-RSA2048-SHA3-256",
   "ek": "sPAGBaC+u2WNR6YI94EqYnBfUhYo8Lctt
   eGTKKYcisMoRkzASnp1Q1R3kisNSjjFy3aB/KDJchGzeZLMYiJAsRkjzOZO2xFYFMyAd
   +gTRHbN+/pwO2VVhGlWMMGpp6GQJ/tpPblOQ7qc/Bk3cvOuu5pwdAVh0KZ6eJSFVzBpm
   YcOInNY/Ol1qbYcFFCdR7NhErYC3+iWqSwxOEum/boxEFEPPXahAO3LKvq90Cito4BPQ
   IGCjkjJy4tyGbZb+EHOzJxuqodi6wguK6VKyBSvFUhA4SWRB2NbaNeCMksAZlzJDWNZ7
   9i/MTWU6WZnfzqjDYGOS7oBhJqzFYMqkXWaz0kd6mqB4uBvvpYwzFxBnnV3TTF/vmiZ1
   cQq5YQ/1mWLe8uE9jlaF8IcVHJ21vRP14GAv0p/2JLPqJqsgmxK/FXJ06iYJtxhQ2VJr
   NGTnTKsKhqK5IVhxQqReddRVZt/VWlieEEZEHWffad5rFppRKd+msmwRUYMQUup1ZwB/
   ChwqWkFGPY9JGBmkzpjoZi2aSmUWvEIb7RXT5hiMQwsl6eKhFdGRINq8pye4AkhLdq4u
   tqJX5manuVvaZCIJHiGIzGSWrFKf9EBmiqN26ZIDmyr1gnPTtpSAzOXZsOJQdrHIvOEd
   IOTGdeITOAGg/ouZdG1PztCXvyV96xbYkCMKpeVNxE2uWkGSOQymAKavmGLKpePFkGfI
   bxwWZpnm/Y2LOqZtsN/C1kI1nsWPLPJdrBxGxfE6AMpUpFWK9scJyS2roBrpcW7FgoR9
   MMPyZYu1bAVVfJJAyd7emOvEbyDG+om9xyum+wS0hEU01e7H7gR15EV9KbJOuICX7EXL
   vOAxSDLojdVB5R7xAZGwLxbacF+DFY0FhNsPSCe8xpNkMfNrRANs9zMXWdDFid69sOeU
   CqNJDZxW5R6t+Fbu/RkJYCxcwKqWRhtCwxXBkBDV3aCsvo6s5BeF7LAdqmXiwkgqUA3g
   DRi+KIdPshr21O5/JYJtWQJuTNY4GerElc2g4Q14gpc25JetlKRtYQXkWewbXObHhlbf
   jcB10XLbIHMcbmswuHBA/EUZ3dEOQofXKkBhXWO+ZdUQYEtY+tGBjp3fNYLmcyqbIc4s
   lRrcHQo1xcRIYqyBYVg/xQeqXaMJJR2pVXNVDlJ2+I1RAhnsqnBQXlBikMBaxJBesYZm
   jIYMYo1ZSHKFxpm8BZ+2nKOWjaj1flRPpRy2SuRkekOF0eOXUMRGaKvs4CWUropcepYE
   UgEUrapZfRKsXwv8/Epy2VOr5yx9xgrpBpoOdtmkJTPxLmbhfUfNPTAIqRFvaCd2cZL2
   cQ04lEzYiCEClll8gDQDjJ6j3uOm3Ot+Uc0dzAscfUhlRJgMIV9/YmyQjtmWcBlFmm1n
   eqLLICpfBUWsKRuDRmcOdUGZxE+KymDl6CvSpmRKJEwsUoTIaNAmowzg2Yg1dxr6BhiE
   GW8Q5UiFMKHJtvPW/ItuxusHgWtF7h3lCTBw2mG8PQcMiw3LjCSIvgDJSQ1WTrEN1MWQ
   Isd8CezzLxgLClINhPNtS+76jVLO0iqjqKxSTPPjw+6N3PM8MswggEKAoIBAQC3iMIRt
   aA9QegQyhyARAe5lIksKuWdR+egtN5RCh+cmeYIpmkF58qVwhdjn2GGBe1UWvCEtF07X
   +9ZZgkmiRcZR7f1kJj32QCI5VtyxQkYfIkuSyawWVLhPMpJizBQfx3A92BNURHsR9luy
   BmHcOVu4HodMIY+01ZocOmEim5asHARRAcMECdnZMhI37yPfHe9JpXqHuvAGcUxaV+tC
   lX7sqZC2QisQ4jPIVgtzYZCHAj9o95VJf2hdcIPKFKFBaoBbsKcW4JtxfKx2T16NKEsr
   Ds3JvICTF7jsTeeIIPTbPbdNF8OeaoaAGpVP7i4FxjANRrcbA43H/JxVoIgKB1DAgMBA
   AE=",
   "x5c": "MIITrDCCBqmgAwIBAgIUHfEJ1V9kEC91lu+EwG0Hdj6YpPswCwYJYI
   ZIAWUDBAMSMD0xDTALBgNVBAoMBElFVEYxDjAMBgNVBAsMBUxBTVBTMRwwGgYDVQQDDB
   NDb21wb3NpdGUgTUwtS0VNIENBMB4XDTI1MTAxNDE4MjQ1OFoXDTM1MTAxNTE4MjQ1OF
   owRjENMAsGA1UECgwESUVURjEOMAwGA1UECwwFTEFNUFMxJTAjBgNVBAMMHGlkLU1MS0
   VNNzY4LVJTQTIwNDgtU0hBMy0yNTYwggXCMA0GC2CGSAGG+mtQBQI+A4IFrwCw8AYFoL
   67ZY1Hpgj3gSpicF9SFijwty214ZMophyKwyhGTMBKenVDVHeSKw1KOMXLdoH8oMlyEb



Ounsworth, et al.         Expires 19 April 2026                [Page 82]

Internet-Draft              Composite ML-KEM                October 2025


   N5ksxiIkCxGSPM5k7bEVgUzIB36BNEds37+nA7ZVWEaVYwwamnoZAn+2k9uU5Dupz8GT
   dy8667mnB0BWHQpnp4lIVXMGmZhw4ic1j86XWpthwUUJ1Hs2EStgLf6JapLDE4S6b9uj
   EQUQ89dqEA7csq+r3QKK2jgE9AgYKOSMnLi3IZtlv4Qc7MnG6qh2LrCC4rpUrIFK8VSE
   DhJZEHY1to14IySwBmXMkNY1nv2L8xNZTpZmd/OqMNgY5LugGEmrMVgyqRdZrPSR3qao
   Hi4G++ljDMXEGedXdNMX++aJnVxCrlhD/WZYt7y4T2OVoXwhxUcnbW9E/XgYC/Sn/Yks
   +omqyCbEr8VcnTqJgm3GFDZUms0ZOdMqwqGorkhWHFCpF511FVm39VaWJ4QRkQdZ99p3
   msWmlEp36aybBFRgxBS6nVnAH8KHCpaQUY9j0kYGaTOmOhmLZpKZRa8QhvtFdPmGIxDC
   yXp4qEV0ZEg2rynJ7gCSEt2ri62olfmZqe5W9pkIgkeIYjMZJasUp/0QGaKo3bpkgObK
   vWCc9O2lIDM5dmw4lB2sci84R0g5MZ14hM4AaD+i5l0bU/O0Je/JX3rFtiQIwql5U3ET
   a5aQZI5DKYApq+YYsql48WQZ8hvHBZmmeb9jYs6pm2w38LWQjWexY8s8l2sHEbF8ToAy
   lSkVYr2xwnJLaugGulxbsWChH0ww/Jli7VsBVV8kkDJ3t6Y68RvIMb6ib3HK6b7BLSER
   TTV7sfuBHXkRX0psk64gJfsRcu84DFIMuiN1UHlHvEBkbAvFtpwX4MVjQWE2w9IJ7zGk
   2Qx82tEA2z3MxdZ0MWJ3r2w55QKo0kNnFblHq34Vu79GQlgLFzAqpZGG0LDFcGQENXdo
   Ky+jqzkF4XssB2qZeLCSCpQDeANGL4oh0+yGvbU7n8lgm1ZAm5M1jgZ6sSVzaDhDXiCl
   zbkl62UpG1hBeRZ7Btc5seGVt+NwHXRctsgcxxuazC4cED8RRnd0Q5Ch9cqQGFdY75l1
   RBgS1j60YGOnd81guZzKpshziyVGtwdCjXFxEhirIFhWD/FB6pdowklHalVc1UOUnb4j
   VECGeyqcFBeUGKQwFrEkF6xhmaMhgxijVlIcoXGmbwFn7aco5aNqPV+VE+lHLZK5GR6Q
   4XR45dQxEZoq+zgJZSuilx6lgRSARStqll9EqxfC/z8SnLZU6vnLH3GCukGmg522aQlM
   /EuZuF9R809MAipEW9oJ3ZxkvZxDTiUTNiIIQKWWXyANAOMnqPe46bc635RzR3MCxx9S
   GVEmAwhX39ibJCO2ZZwGUWabWd6ossgKl8FRawpG4NGZw51QZnET4rKYOXoK9KmZEokT
   CxShMho0CajDODZiDV3GvoGGIQZbxDlSIUwocm289b8i27G6weBa0XuHeUJMHDaYbw9B
   wyLDcuMJIi+AMlJDVZOsQ3UxZAix3wJ7PMvGAsKUg2E821L7vqNUs7SKqOorFJM8+PD7
   o3c8zwyzCCAQoCggEBALeIwhG1oD1B6BDKHIBEB7mUiSwq5Z1H56C03lEKH5yZ5gimaQ
   XnypXCF2OfYYYF7VRa8IS0XTtf71lmCSaJFxlHt/WQmPfZAIjlW3LFCRh8iS5LJrBZUu
   E8ykmLMFB/HcD3YE1REexH2W7IGYdw5W7geh0whj7TVmhw6YSKblqwcBFEBwwQJ2dkyE
   jfvI98d70mleoe68AZxTFpX60KVfuypkLZCKxDiM8hWC3NhkIcCP2j3lUl/aF1wg8oUo
   UFqgFuwpxbgm3F8rHZPXo0oSysOzcm8gJMXuOxN54gg9Ns9t00Xw55qhoAalU/uLgXGM
   A1GtxsDjcf8nFWgiAoHUMCAwEAAaMSMBAwDgYDVR0PAQH/BAQDAgUgMAsGCWCGSAFlAw
   QDEgOCDO4AnT50SWEz/BXCv9i1TsSiBRtyEJqMjGqGScqXkGRRrGh72xQDovf+Bc967Y
   njuvSQ1DmS3zCUGq4k7IFfwctSVgUKM6w9SbV25EOnHVnh9vqyRyF4NvkKqiVuiEsXhp
   SUH8xGRkLuGnMHVMHW7oxDWfnWAh83T/DFAPLBo74U7luoAZVCs2DA6Rtce5QwoTOMHK
   pJO/Ou0RLl5pqI9Jyg2d+i3maeiogkkaUWQigQCGuCRhJlevjygs7CL1/fRR1p46aEBj
   vVCSABFX53XgjeWUzNzXABGQzmGsberngUeKPVXxGgOcckULG0cv1UmS5uXrUQdR50Gq
   rvOqTZ8w3p2qHLOJows6X7T+XrNM/oGBNqXD2hgUP/hZg9PTCxsNzJ7PaFrTu6bsbdlP
   9kdH1o+5KbIxc6JIXU1p+E9HGH9pmL/ZYjscwVucpHdgOdjnNVfBLFm8rpKlvlRjmSV/
   BuYNpqX8Rt6VS6W6O32vPWK9Ey6bx2Zn9Q2JbUSkf92zqPCH/TLyGmFWdj7HRKWyrfbM
   VrjeGqA2TEmFvVpshilS55qw/oSzaQR7iZruba9MMPfajIchXfwcQuY6yGfN7QVTWvdt
   8sH7mLa1C9Twtexw+5IRrOqvK+zaz9oTpLgKBKTCIch0djLqnXyS5gSYcQD9YZqns+UJ
   hekQQke5crWgygfct6SGAsd2pC9JLtOkcL9J1/oGeOiqeRVpoPpnVRIeQsMpGBMrHLPK
   9UNnvge3fMMajbkVdhhuqJun44SkWRS5P1PhZmHpFxk94OL4lcwwBkgb7K+L4tMjdR2b
   ikj2yJb9Z7v4Wb5aQLyH2NFygmQIpn+U28+gCTHaDrPH1UnG0fjApHzRIui8CNf8hMer
   mSItVFLntlqvPFyCOpbey+B7A5y4N/JTmJgpi6aRvvgjmLeC/LwvmhhY9R/xbiJx9cCs
   h85JUIMqloilVo/GXrve8lr89oJDzuw506epnGQ8lhOebMdkFDpJZbJrSJ5lpSW3BjRU
   kfcNgFKOeqSfqWvfMoE2H40Pi3hGleTqY6rlmB0GQz8BvBXG7tXrK0vJiOIIBcFgJ6MP
   E1OlS4L0aFtIuK1eomV2QBcKls7kUrZnOtG9TVnzlL2OLXwD6oG3daT9uTBQtVN759Oa
   yzQKYy9B3HHGnRzhYoJemxD6SYS7972rlhJe1GagXj3XPSAyCKp9nsLSww7/sQ6mR4UJ
   n0v1ur+0qeE43xW6IudE/GKAL6rSPC6XjuGZFi1ntCya/4zC0lMc6ASRzwbt11ZhPIGw
   Mi99IAYr7OBW1yeDxD++dxX0OWh3ZMUAu8xnHMvi/SjmnWSxzjqtWFHPnyQ/fOiLQjgV



Ounsworth, et al.         Expires 19 April 2026                [Page 83]

Internet-Draft              Composite ML-KEM                October 2025


   AddPCfiqLSLS4Tw5VIjAmsPOt+9ZExlsikD7RHJ49T8MijWrCNHsB3cUQMccdf+jFJTc
   JKeTj+Cwi7Z26vlh178sbg07jvrB6eFiItHYL8ZNNWAJPh+ejoc8VsV5ld6XgPW2Jpcl
   d0JF0bCj5OAJ/TfI0coF/LEcV7Z3tReGkLXvL08A13aW+2Jtw3VsnA0Mrjt7fQrabW+T
   hGFUDKayFHn6GSwA891A9hEK529bPdkEPY88Yfke/shHpOuvVkhVZiCu3/hy9tNQl3fa
   O3q7bXUvbO972fBN7j6i1/WWKra7T8PYQPzDldaMafSmutPgv2T37Pef8HTByiil9o6c
   D/ZMeYQp8M9aG1+u/tfewW7SxzQKtcOdGu/9w2E+hwDhOF4VXdavcW1O4TVR6wsMk219
   Yq16LTOZz+Sm171DjDg4gfRVY2AsECs3JUMOrZQzwpawXsRhrIl33j8jEdO6bNeU/PpP
   FVg2d6TCuhM4M4zeGefi8U4+CiXlMwspc6Ln99YkW3d/Wmzre3WSu72G4UU+rmyZqdY8
   UGUKtBLvPhEKOIyf60LoKP6OqrIFkUSJ7Sg6WXJKQgx7PDjd+MG9Z7yJ5p/ikNZyy6YV
   W9Sk7bPAAfLG2X1Qk0zKkvqrZBW7ePeueX6diIQhxlk/2Epb/UwS5CPtpyufZh4jGCKQ
   t3pK8Yt9ZqWttwpVkqkzKVpaABGj4riD9CkgTwx0aI3mfTfyDrUPtxN9tAY+BsQIvm7H
   XUjMksLWqhmik57yjo+PBA1I4Z7iipp8AecRw1KX+V2J3ujWKHwSOfydTwDniLLN0f9p
   W210N6sz5DT69AAZnTBv0QJc/npb9q0U3q7CBXA2C3E0d951yNM+CBuDxBO6NN/B29TA
   WUG4zv96IDFuvVcYFYwYQKljPI/+z1/5Q2TNY4nGDOPOgz6fkNY+5lCgJRcb2QX+SVKJ
   O9U4nN/+0E0RhUpNYoj0HN/wTyi6kbo/1luIAQcPmEsPIXmGRPbQ9W9tAxuEtKm0uA04
   0GdUSpu5tvIefiaJTYEpFnqW5eVfxQLtN7LYr3yFXXfTPMF/Vba7eIgYFxZTtknDyExK
   TOE7WMJ1rmSCxBeBFRBYqtCHTRgA8KK9M00JvaPDrzA0VHGqc1hQzbC27NKhA4rU9j1O
   pI+X0UYLe4O4SnjF9ZZtWiErt/yXjCeTzfN85Vl289VYVqwgezkykiXSc3394wGATamR
   eGNYT82brYsUvednwj3zOrQ+5I7uW0W5oJxz84BaAt3BQC3He9GAgoXsqd2tk5ts416M
   vhMUkopAUPQTg0X/h02x+iJYSjN5/o0S1X+Occ7KtbKQwUIDGgvk3hYaB3pGCQly7raR
   O49Dd2IO6tpHeGX0yamDeDw6wlaMCNPiCi112C/GKpBVyttrIqAWNh/GvTBTn6JTERof
   gnsqtHqln+to2AQ1xMLY0/MDGUOPQQXIYAqp+DlB6P5XH5NUi1ZmHG+kdu7pkdUyOZ7K
   PGbId/LlF62VsLzhjZQRWCcUM0hTt1Ey+HrfKOQaJkaxPR2n+mk2lf9hBQBxdHi5Gl6+
   ptnqhVa1RPJdyd64pM/X2LOahcctsYapMsxic2rh2WEHueq0x+70c7aJoTyohaaNGN5E
   FgM0uqfPt5f8LzJeskYfazwOaHMkXxBZfvj6rExGX44i+TdHPdJoNBQ9xC6sPGrydX64
   4r1QdLTkVR7S9TkjAy8KwqIAtvHGykPjJmLe8pWBxaT+Wks3kayTW+IRsIpZmI3pOiRd
   SboAIRDmO7pUuaqAXEuNy6HPe6CqoeJ83RRrLlSPO1dLlacinYUIyAH037GOEwKz/dM4
   FnWeUdlhJbnSzzWnTnlMRqeTv2inpMN5ji+tOZ5Nzx4mjUtjAODl+0XwNusFdp3uonzZ
   RBte8XgMqklPFxvyy5njEkxnl6IztykXXczBfVLeWKyqQnhjdZcvESC7tI7X6u5PDfCQ
   9eeBHZc8ANB7FO0yM4z8jSI8L6LmYFFN5gMp/8aNswt1+H/Cr4b47IoHXMzCCpHqXHuB
   HBo+XSTU3nmS/XZyExCn0Q1nvjulcmRNC4sA6PsQadzClf0G+a9WnTT8Ohnld5Qe4Hke
   oAQgoPSezZOu4zOeLePPoYQ3h6siVEATdyH5LQNHGpYXZdnQJ9xoloLxebdxemis/Y6n
   k9dw+FMqC8yF320SQstnZPxpJCM1Qmezq+jHbVag2BYbOxlkm47WW0qWCwoIyCgVO4uw
   g3cmuKX3Y1vN8b/VxJ03I1fuQ8FYQSt4+4ht0ZYuW3o2RV9yKQsLJh7XCmeLslXL3vAW
   Y26RD2VRbxk8ZhrJxs/tDgk700xMTFFfVWSBIfr86yNfLMPj98jDwe+fNTbq+Zh0HOA5
   DYdzt2YIQkHUQh1Pp4n5+D5Q2tjl3FvwxPhXC3przEjguIpN3zXU6BSifA+JHXZ3sh1u
   q/z+nXfZKdGTyacPQLUJG+3kbqSt3vFA7F8D5Bj0874JX7BRBXnoKyqbvupScajS+JT9
   SesSkMAUnevsPSAwVs/oEhAzKFagvsjlWXByWZ8AUHaykXZu3/o9wkQSxCrW+0tNlr1T
   fx0V0Kr2Lnz8n8S6WJxOCjeRTtLqFUEqi3KVOsljsXB0FB3q+BJNY6dkcAKRCaOKup9i
   vP7ByXRkHS138jzPK8LpZiyM2eiTUcxxQq92qa25/NrIzcT7+hgkAoDXfqiLKC/z/26B
   JcN3BsFA7k9p2z3Gn11VW8g3ABCZC1zff1TagdbClW37dGnlP3C/81kKyckJyc6MoszU
   di3sy9DPfGoiM21IEr7Zeqnvfqi8lIeJBqRhTxFEvWyheM7+dBfUoMPPJyFQKTm10t7P
   1J6qP7KSnFitmJ4fFr1q6X3oLkGwhgv581y45ZWCtxveIbAJLK4l0eISI8mYBuP0Ntif
   LmSRd44R6AB4LEaC4C2iLt2SrSYj2yhO06A2Q2fDlqdN8U6H0j2Wqc0VItL2N1j8jo8B
   hzdJm9Z5PYgaPA2hseIid5kJXkOmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA0QFB
   we",
   "dk": "1EoVINpHLz1rNIDSLsKDNN3qhTeG/KxQlI0k8yHaPzP9tOIQh6TLskAe
   QlmGGvA3DPq7mc/LVTTZ8CoQLeV7Iw4BMIIBCgKCAQEAt4jCEbWgPUHoEMocgEQHuZSJ



Ounsworth, et al.         Expires 19 April 2026                [Page 84]

Internet-Draft              Composite ML-KEM                October 2025


   LCrlnUfnoLTeUQofnJnmCKZpBefKlcIXY59hhgXtVFrwhLRdO1/vWWYJJokXGUe39ZCY
   99kAiOVbcsUJGHyJLksmsFlS4TzKSYswUH8dwPdgTVER7EfZbsgZh3DlbuB6HTCGPtNW
   aHDphIpuWrBwEUQHDBAnZ2TISN+8j3x3vSaV6h7rwBnFMWlfrQpV+7KmQtkIrEOIzyFY
   Lc2GQhwI/aPeVSX9oXXCDyhShQWqAW7CnFuCbcXysdk9ejShLKw7NybyAkxe47E3niCD
   02z23TRfDnmqGgBqVT+4uBcYwDUa3GwONx/ycVaCICgdQwIDAQABMIIEpAIBAAKCAQEA
   t4jCEbWgPUHoEMocgEQHuZSJLCrlnUfnoLTeUQofnJnmCKZpBefKlcIXY59hhgXtVFrw
   hLRdO1/vWWYJJokXGUe39ZCY99kAiOVbcsUJGHyJLksmsFlS4TzKSYswUH8dwPdgTVER
   7EfZbsgZh3DlbuB6HTCGPtNWaHDphIpuWrBwEUQHDBAnZ2TISN+8j3x3vSaV6h7rwBnF
   MWlfrQpV+7KmQtkIrEOIzyFYLc2GQhwI/aPeVSX9oXXCDyhShQWqAW7CnFuCbcXysdk9
   ejShLKw7NybyAkxe47E3niCD02z23TRfDnmqGgBqVT+4uBcYwDUa3GwONx/ycVaCICgd
   QwIDAQABAoIBAAfj/hphnKOfLPYyOkqpbuUwcm7ofG0bckuBrmBj9wf2KRWmHrQwsV0C
   HM9QdhKB0e186DcZKgj4Qh1HbcB7+sPZ3+bTpXMo0tHcsOacrs9tGAvz3y3yj5JvcqL6
   APgoMh2uhQCaw6wZsRdtZh7HxvvSJ6EQCc8ZqiIpxWBiMzkvpuC9zy1HpCsw/2QE99Yo
   eV6nb5WjHeJt1HstmRGl9GfMAQ4qElSVZtqMhGab+vvBPqHELsPUhF073CsVdkmBeiEB
   SiyOpDvlRC2mJeva6Wj7LUVMqZM7LP8WI7h2287++GdP14kj/avEuQfR3nwmhf27a70T
   JrZLMGhbnNgbxcECgYEA4dl81EbykUWM0kMYncXa/doBwn/M1oivqG6XF+h86CjfpDpC
   swHAskL6WinB1rKhhSD6pFXTk+qqEOOFpiUWL/Oqfiq9WUYa9TefqOttbNn+WM2gSR+K
   5H42FFNS+K33qhp6ts2mcOlYBrxNubWeiEsE8AYSTYHjRYy5/z5/hgUCgYEA0AkfvLzv
   ztxSkNLwDjjP5IYtkBVSx8+SermelALcQIbB7Afd9ULindtdT7i1VePYpQYgh1WFIU4b
   hO2PEaW8RC+eU8IUa/DfLAW3Sxu2lveyHRllU4/l8h9q5FPfU6nuKJLgI+AfgZtvHNMf
   EfFMUm70SSzNal8BC6TdKk138KcCgYEAuBtC1wi+1A2OLhjkCDkxu53rsVHc+UWTbAo6
   wRKUP+yR4p5boPDc1HQlATro+MvFP3ES4MPWJc41tG7ElBvHam+HnDHbCNtNPniJfnns
   Sb+qx1lYQEOmRX1dOFR0XqPyMIhFYJ9j/sc5KsR1191lzlTZQZCxet1XF2sQdDHOYsEC
   gYAxXSjhwTdqL4+L+/GofkSeZlRjbxvge9m3M1p0pqUazp8vYcKCUyew63+dzieBRPqA
   Vg7b7igT+hO/nBspxdkBmQcJuvDbmCFsscKHmQDfm9Dw5LjNdkTLCjd0DI7erGDt0cRL
   3v+64mYgQdyKhmZk3R0sS+xGRFrcJ3evdQhz2wKBgQCkilhlHuc9ZdjrdJlvSxBuaVbw
   mVE8VWPs22+WCQCG9Q7bQURldxwAcjLRtpAukZc6M5FfV4yOa7IXm6nItt2idpfTje5c
   EHbwoxBEYYYsS9jea91Mt7iDAwdGItxM6wRlcHrZWinfqYE9O35IY7WmF8FoFKZ8bbrc
   n4aVulZBbQ==",
   "dk_pkcs8": "MIIGDgIBADANBgtghkgBhvprUAUCPgSCBfjUShUg
   2kcvPWs0gNIuwoM03eqFN4b8rFCUjSTzIdo/M/204hCHpMuyQB5CWYYa8DcM+ruZz8tV
   NNnwKhAt5XsjDgEwggEKAoIBAQC3iMIRtaA9QegQyhyARAe5lIksKuWdR+egtN5RCh+c
   meYIpmkF58qVwhdjn2GGBe1UWvCEtF07X+9ZZgkmiRcZR7f1kJj32QCI5VtyxQkYfIku
   SyawWVLhPMpJizBQfx3A92BNURHsR9luyBmHcOVu4HodMIY+01ZocOmEim5asHARRAcM
   ECdnZMhI37yPfHe9JpXqHuvAGcUxaV+tClX7sqZC2QisQ4jPIVgtzYZCHAj9o95VJf2h
   dcIPKFKFBaoBbsKcW4JtxfKx2T16NKEsrDs3JvICTF7jsTeeIIPTbPbdNF8OeaoaAGpV
   P7i4FxjANRrcbA43H/JxVoIgKB1DAgMBAAEwggSkAgEAAoIBAQC3iMIRtaA9QegQyhyA
   RAe5lIksKuWdR+egtN5RCh+cmeYIpmkF58qVwhdjn2GGBe1UWvCEtF07X+9ZZgkmiRcZ
   R7f1kJj32QCI5VtyxQkYfIkuSyawWVLhPMpJizBQfx3A92BNURHsR9luyBmHcOVu4Hod
   MIY+01ZocOmEim5asHARRAcMECdnZMhI37yPfHe9JpXqHuvAGcUxaV+tClX7sqZC2Qis
   Q4jPIVgtzYZCHAj9o95VJf2hdcIPKFKFBaoBbsKcW4JtxfKx2T16NKEsrDs3JvICTF7j
   sTeeIIPTbPbdNF8OeaoaAGpVP7i4FxjANRrcbA43H/JxVoIgKB1DAgMBAAECggEAB+P+
   GmGco58s9jI6Sqlu5TBybuh8bRtyS4GuYGP3B/YpFaYetDCxXQIcz1B2EoHR7XzoNxkq
   CPhCHUdtwHv6w9nf5tOlcyjS0dyw5pyuz20YC/PfLfKPkm9yovoA+CgyHa6FAJrDrBmx
   F21mHsfG+9InoRAJzxmqIinFYGIzOS+m4L3PLUekKzD/ZAT31ih5XqdvlaMd4m3Uey2Z
   EaX0Z8wBDioSVJVm2oyEZpv6+8E+ocQuw9SEXTvcKxV2SYF6IQFKLI6kO+VELaYl69rp
   aPstRUypkzss/xYjuHbbzv74Z0/XiSP9q8S5B9HefCaF/btrvRMmtkswaFuc2BvFwQKB
   gQDh2XzURvKRRYzSQxidxdr92gHCf8zWiK+obpcX6HzoKN+kOkKzAcCyQvpaKcHWsqGF



Ounsworth, et al.         Expires 19 April 2026                [Page 85]

Internet-Draft              Composite ML-KEM                October 2025


   IPqkVdOT6qoQ44WmJRYv86p+Kr1ZRhr1N5+o621s2f5YzaBJH4rkfjYUU1L4rfeqGnq2
   zaZw6VgGvE25tZ6ISwTwBhJNgeNFjLn/Pn+GBQKBgQDQCR+8vO/O3FKQ0vAOOM/khi2Q
   FVLHz5J6uZ6UAtxAhsHsB931QuKd211PuLVV49ilBiCHVYUhThuE7Y8RpbxEL55TwhRr
   8N8sBbdLG7aW97IdGWVTj+XyH2rkU99Tqe4okuAj4B+Bm28c0x8R8UxSbvRJLM1qXwEL
   pN0qTXfwpwKBgQC4G0LXCL7UDY4uGOQIOTG7neuxUdz5RZNsCjrBEpQ/7JHinlug8NzU
   dCUBOuj4y8U/cRLgw9YlzjW0bsSUG8dqb4ecMdsI200+eIl+eexJv6rHWVhAQ6ZFfV04
   VHReo/IwiEVgn2P+xzkqxHXX3WXOVNlBkLF63VcXaxB0Mc5iwQKBgDFdKOHBN2ovj4v7
   8ah+RJ5mVGNvG+B72bczWnSmpRrOny9hwoJTJ7Drf53OJ4FE+oBWDtvuKBP6E7+cGynF
   2QGZBwm68NuYIWyxwoeZAN+b0PDkuM12RMsKN3QMjt6sYO3RxEve/7riZiBB3IqGZmTd
   HSxL7EZEWtwnd691CHPbAoGBAKSKWGUe5z1l2Ot0mW9LEG5pVvCZUTxVY+zbb5YJAIb1
   DttBRGV3HAByMtG2kC6RlzozkV9XjI5rshebqci23aJ2l9ON7lwQdvCjEERhhixL2N5r
   3Uy3uIMDB0Yi3EzrBGVwetlaKd+pgT07fkhjtaYXwWgUpnxtutyfhpW6VkFt",
   "c":
   "2ikTmdI4Kq+HGYKGJgXLTAXTioyTcuV/1W9ng1pjDGUEzsrCYC9hZepUzn43JlMys1e
   3+T1kys7c/Kcbiwb2X2Is4XptM19BN3Su/4e+LIVKRSsfqA7+iyRD3BO9RkB3Xgp+rAU
   Dkcgzbhpya1DjT6vIT70fIIu1RcbVFn+bZKLGOEtOLXyggA1bmurTAyVKWWrNGmFryeX
   SPzh9YdYLk0oqT0yODcsKemUD64n6kJwFnOQdl5yTaUYz0S3owW6/Qh0mW8ZLVUvEs0d
   Yb3H7VoMGBCF2IwYV4OW4Tm3nhSCr9bdfgWDSosHqL4AULrDYiDyMxootOcvm4+sbf6n
   zN1DHQS2fpiujDNSVDWHLR7fTmM7D8j0t197753gFqgDq0tQF7a//z4AdumN0Cvs5Y/3
   2Dd2lY/FSBE6DjTce3M18SMXJVbJMFMFBgDS9D/HhbZTS1pbhXMw+mGzJM2F98TtUcS1
   2Iw+aCjxhvA4nOGgNjHiM2IVc7JV8kibnZ7bmV4L19bmoTVzYvZg9HTuW9Tgm2oRfL62
   0X/Y9dlLLQjZTJ+3qD38kWI3UORnRUCj3UmBHumreEiru5F3bHMevcxzKcZiDmh8UqCr
   TPnu5y8MB5nOYdsREEhd+w6TGJZXdSkwXkbE88ezzy6khxPXQ8uor9MEaW4jl97zlsh9
   guEirsh9Ppkq3xB+AD1w7fy/6bHiirJzMWPNyNF53yH86dijE13jTqA3yajmcUlxvARB
   7ZqaNMOt248CFNFjG5L1x6YX9zp7kkszYu+BN9N0WheLJpIPM0oZIxac0nosmD89J2RC
   eCQc+99d9fEu4d/zzCXb/yAObPsBgpahMNUL0Coo7/EkB6UUP9qlW/DhQw5AWcHVTnPj
   vOIeRImlqpQYAwlkeQdxhQyGItWompYjls6iOkdshGOk7I8s4W57/2rTxaSNxS8xWKXE
   Ju7q8PJBYv0apMIFXoi0BV5fDCuMauG8MrpvEopL8BHvHRnSr86PZklHRsmR9t1TAFNS
   1lMMU7dQc+piDlaILqHF+q1NWEvitlOUwhQ/rxOPFgN09uchLFtvqDpmwAFXXZR+8Mtp
   siVnjtUEtEoZBmuA5X3TpfjQSBSxFPp9hk6tZJf4uFwHunlElJChixnXoRFr7Ae4Em/4
   LkxKRMpqoQzM3rIF3f0IJQh9IgxloumEhXv3wIXErERfRY5uLFM5Ozz6sZFryX75l9Hv
   y4fpAvWA7S/oqEEoip5fczW7ZQpFcSYsf++vvOsOcKQccF3daIjCyADslJu9HMP/4ekW
   kmJgyk6AjOyf8SVmwr/ql8dgEt4r101ykeadijn//bs37BVRuZajU/QQBqO5DRjXVq4N
   Ph+8DiIgstgfTzQlr7QaxXzuwbd1pvXXv4ezd+0TnmqruxgXPrstHvlgAV/ywB8fd+De
   V9DaJSCTWozFP1WGuifoeOcmB7c8L0Jc7Ovg5pIpZydj16Bcu5kA/sVvo6c+FxHI2L9m
   36/5TLQlcZGEHbmpeL9q8hlfepEP9BFncxXdR9nUvhK72hk7qgXCv4wFbax1wFiJi5/Z
   wZydNTsLwc4na1+LpTqeMrAMYOmZz3zr+34dQIkBvjLIzRv3EVCE0xi8tdZMKsBhaNSQ
   tMyKmGaidPbFfmy9oeqi/8UOrIvI4P++6nnIVQHz3Me1nJz7ZIirrVlROqKKmS9KK9lS
   q17rrYmGiI9yCazb0knHHLOsfE8/TjIFLJuMMqD56yd8VkgXgtcdA/x1s30xw7rcJL2o
   xp8UCCrjFXetn3xrzOXCh3Vr4",
   "k":
   "hjQ8dihH3GzK1fAnMWTTogcVtAhjzVb/L7hDT1xWPuk="
   },
   {
   "tcId": "id-
   MLKEM768-RSA3072-SHA3-256",
   "ek": "JSJmH0fI5tWA9CyeFJBf2qG9oOPDCtuOx
   JgyWcRRZwlSpBKuaxs2JGkpXEkTh2IYopldK0V+ZpNS7rKFhuBiOBNEnMYykEuRN+B+X



Ounsworth, et al.         Expires 19 April 2026                [Page 86]

Internet-Draft              Composite ML-KEM                October 2025


   KqIaExGqpszxDEGdxUsQUNMywOAUZaBWKktSeQ8qlAR6ukhZePELQAWc1KBG+KZcGeIF
   dBlMpdroaG0VTp6P6CD4UQGrsaNd0SWTkGvimuNuDccoJM1K0y0r1C2jFUYmarB67lib
   LYAP+lUeoFtx6S9EqpAOHNL3dpGw4uwJ0pjT+phv0Gp3YODJrhXo6dEsmFEx0aT5qKIH
   PAo/nkX3twasmti6YttQymk+mDEr2UC3bZ4v8LOd1OkwGzOOAVzwknOI8esE0WqmOKAp
   NaHvBe+D7B1z/GigWwitcNC3IEXgtAAicNLndlKbaUgLNE8O2N6A9vKCusN04lCDwigr
   GqA2MsgdEO023tyO6pTQDWoupSTVvdk/pm99epS2LSCNyzAD3mkUhHLFfk4azBHEcRga
   ZYnkLMERoBW0Hy48QUH3cZ1cNiMM7VWflkVPoaaCNSL8jdASLyVVIE2MFMi+TI6roNHH
   BtRkpZcNic/45du6srEMop18VocquCxmbhs1DjGxTrA7NRmLGgr0QlhbJXEk9S3bigKN
   YO6xQCU96skLZCZnWEbjIRYPDS8zOA/70bD8jhEXGGahIF/sapmCnodOKgarfu1hZVeV
   yFuU2AcfUSdaNZe9MOB4QImPeFzvCtHa8eHZ5s9FAO0RVxOEEecc1PMwfJuWfqjRmHBl
   RBK0nUqLWtRNSRBbuOabzCD3ogy8XayIFpeZbZbpvFl1EYyDKpQ1hGsZNQ8xsZVy6gbc
   DocZfB4b3JjMPpBLxbH7Yks1CcP9FxJB4RchLbDUVyPIYWqA7Q9I8Qc3ydh1tFNxaW7g
   yZZnFdVNZyUcfp/wzFNvzsWgAQiR5A0b8w7sRYCzoY8aAh3tCDBQDZ8HjkevRY3b/FPZ
   Zed1bd0OHspJxAbspYrBPE5GVEUhWww52ozOIGbEKBC54SkHWRCuqYyRjGFmXp2rHtPM
   AEG7mHCvgc3bANQZla9mIijZzRVbOVDcven1WPIHlicJwGxYeEcOsF6xbWeDiAZ91G8F
   biOqOBJQGd3WtZh/sPGnNCzDYhZWOm/tuN2XbyFS2u+VZxmg+k+MuKmn1emnMtZn/FYA
   WCtidplJlZcGBXMMEg8m8JDgsR3FqgGrOfLNXbOVtOdoIcl4+N9UJt8R7aAfPiOOCBxj
   1YqlYMoVaJabzt0HfmGOCFBAjoU/GJ9KDgW02gV9SAAoHqWvEoyL5kOHuqZftdLqMrOI
   EY4L1rEvhZPFyGzbgwxKkVrIkBLQwaMa1Z9wTG8EmjF2mlEcmcqU+VYWgEGIruZCZAOG
   rp3pgZjRirM1qthCCU8qBcIn0AjBhBMbpekiFx+pAS7MZGNWzuT/jKeeysVKwIDRHWet
   GrMsTWknINrg+dpCfGMY8xPsVpb8YmZMsiCMlaDReJ1sRBU/FJwf5Uol5pan2ABK1XBl
   ea/BvFawac/eawT9D7V7unsbIYex9CLmDsTm+ZY06QF8cJwlAowggGKAoIBgQDOoi51b
   bwDJ/9dtgckFsYGAEt/kvIQ3Ov2hyAYEU/mwnIyxjvV993qRlyknA9WUwHD/M/ScBUNw
   HMJltjd5qIdmNxHa8xdvSDLEsYXqERqrLxtNbm2x0c6Q2GHQc1HYuD5jIMhpspB70Lp1
   jbpNO1wrR0Bf2u/cklsNBjH1RVmP5BWt25S6EWvAc2fBF/SWhNE3o8zM6NaX5Lo5ood5
   hrd1sOLdfdTkzjKmcUn+7/aGVGS3zQ33/iLaFo95LgngmTjl0/UylsHlqUpRTE1kIRgj
   343YpOe0/8DapmorLQHFc5+O2ihmLZZL8PfkHlfO9C2XjeIPvDJuod9yCBv/+PO6Of+A
   AjcywSSVIu0cRDln7YXBXmgr2J+CpJA2Tet8xow+hzyO1/LkmnqUT9uyIZHnDmnqWama
   I5z/qmBxt4u207/3+/prFh+bdR4eMekJ8B3aoybnzv5RZ0Wi7vYnv5h7kRts+zE6b/nl
   YfnwmgfCxc9r7E4xCLuBLxCMiA8Q2sCAwEAAQ==",
   "x5c": "MIIULDCCBymgAwIBAg
   IUY9WpbDq6v/vmMvh79Em3nL5j/AswCwYJYIZIAWUDBAMSMD0xDTALBgNVBAoMBElFVE
   YxDjAMBgNVBAsMBUxBTVBTMRwwGgYDVQQDDBNDb21wb3NpdGUgTUwtS0VNIENBMB4XDT
   I1MTAxNDE4MjQ1OFoXDTM1MTAxNTE4MjQ1OFowRjENMAsGA1UECgwESUVURjEOMAwGA1
   UECwwFTEFNUFMxJTAjBgNVBAMMHGlkLU1MS0VNNzY4LVJTQTMwNzItU0hBMy0yNTYwgg
   ZCMA0GC2CGSAGG+mtQBQI/A4IGLwAlImYfR8jm1YD0LJ4UkF/aob2g48MK247EmDJZxF
   FnCVKkEq5rGzYkaSlcSROHYhiimV0rRX5mk1LusoWG4GI4E0ScxjKQS5E34H5cqohoTE
   aqmzPEMQZ3FSxBQ0zLA4BRloFYqS1J5DyqUBHq6SFl48QtABZzUoEb4plwZ4gV0GUyl2
   uhobRVOno/oIPhRAauxo13RJZOQa+Ka424NxygkzUrTLSvULaMVRiZqsHruWJstgA/6V
   R6gW3HpL0SqkA4c0vd2kbDi7AnSmNP6mG/Qandg4MmuFejp0SyYUTHRpPmoogc8Cj+eR
   fe3Bqya2Lpi21DKaT6YMSvZQLdtni/ws53U6TAbM44BXPCSc4jx6wTRaqY4oCk1oe8F7
   4PsHXP8aKBbCK1w0LcgReC0ACJw0ud2UptpSAs0Tw7Y3oD28oK6w3TiUIPCKCsaoDYyy
   B0Q7Tbe3I7qlNANai6lJNW92T+mb316lLYtII3LMAPeaRSEcsV+ThrMEcRxGBplieQsw
   RGgFbQfLjxBQfdxnVw2IwztVZ+WRU+hpoI1IvyN0BIvJVUgTYwUyL5Mjqug0ccG1GSll
   w2Jz/jl27qysQyinXxWhyq4LGZuGzUOMbFOsDs1GYsaCvRCWFslcST1LduKAo1g7rFAJ
   T3qyQtkJmdYRuMhFg8NLzM4D/vRsPyOERcYZqEgX+xqmYKeh04qBqt+7WFlV5XIW5TYB
   x9RJ1o1l70w4HhAiY94XO8K0drx4dnmz0UA7RFXE4QR5xzU8zB8m5Z+qNGYcGVEErSdS
   ota1E1JEFu45pvMIPeiDLxdrIgWl5ltlum8WXURjIMqlDWEaxk1DzGxlXLqBtwOhxl8H



Ounsworth, et al.         Expires 19 April 2026                [Page 87]

Internet-Draft              Composite ML-KEM                October 2025


   hvcmMw+kEvFsftiSzUJw/0XEkHhFyEtsNRXI8hhaoDtD0jxBzfJ2HW0U3FpbuDJlmcV1
   U1nJRx+n/DMU2/OxaABCJHkDRvzDuxFgLOhjxoCHe0IMFANnweOR69Fjdv8U9ll53Vt3
   Q4eyknEBuylisE8TkZURSFbDDnajM4gZsQoELnhKQdZEK6pjJGMYWZenase08wAQbuYc
   K+BzdsA1BmVr2YiKNnNFVs5UNy96fVY8geWJwnAbFh4Rw6wXrFtZ4OIBn3UbwVuI6o4E
   lAZ3da1mH+w8ac0LMNiFlY6b+243ZdvIVLa75VnGaD6T4y4qafV6acy1mf8VgBYK2J2m
   UmVlwYFcwwSDybwkOCxHcWqAas58s1ds5W052ghyXj431Qm3xHtoB8+I44IHGPViqVgy
   hVolpvO3Qd+YY4IUECOhT8Yn0oOBbTaBX1IACgepa8SjIvmQ4e6pl+10uoys4gRjgvWs
   S+Fk8XIbNuDDEqRWsiQEtDBoxrVn3BMbwSaMXaaURyZypT5VhaAQYiu5kJkA4aunemBm
   NGKszWq2EIJTyoFwifQCMGEExul6SIXH6kBLsxkY1bO5P+Mp57KxUrAgNEdZ60asyxNa
   Scg2uD52kJ8YxjzE+xWlvxiZkyyIIyVoNF4nWxEFT8UnB/lSiXmlqfYAErVcGV5r8G8V
   rBpz95rBP0PtXu6exshh7H0IuYOxOb5ljTpAXxwnCUCjCCAYoCggGBAM6iLnVtvAMn/1
   22ByQWxgYAS3+S8hDc6/aHIBgRT+bCcjLGO9X33epGXKScD1ZTAcP8z9JwFQ3AcwmW2N
   3moh2Y3EdrzF29IMsSxheoRGqsvG01ubbHRzpDYYdBzUdi4PmMgyGmykHvQunWNuk07X
   CtHQF/a79ySWw0GMfVFWY/kFa3blLoRa8BzZ8EX9JaE0TejzMzo1pfkujmih3mGt3Ww4
   t191OTOMqZxSf7v9oZUZLfNDff+ItoWj3kuCeCZOOXT9TKWweWpSlFMTWQhGCPfjdik5
   7T/wNqmaistAcVzn47aKGYtlkvw9+QeV870LZeN4g+8Mm6h33IIG//487o5/4ACNzLBJ
   JUi7RxEOWfthcFeaCvYn4KkkDZN63zGjD6HPI7X8uSaepRP27IhkecOaepZqZojnP+qY
   HG3i7bTv/f7+msWH5t1Hh4x6QnwHdqjJufO/lFnRaLu9ie/mHuRG2z7MTpv+eVh+fCaB
   8LFz2vsTjEIu4EvEIyIDxDawIDAQABoxIwEDAOBgNVHQ8BAf8EBAMCBSAwCwYJYIZIAW
   UDBAMSA4IM7gAglGnqDONDZE6xsv+jaIiPpFMaG4cu9eMWIvShaF5YqgIOh2Co7+K5WN
   H9QLjGmj25RlgaHkmIdpcLQ5WKWpsMA1gP5f6YLi1ppkYmseAPf/9rcqdhKbGX+rrXA0
   EFj3xTxVpY7XRRDinSJRB9pFJDW8Rb3bkDgXnDKjbtEGrs+HoIyp9CiHXdCh/0V+i7Op
   WNQ7wBBJKaxzCCviFdRYnvp+5dnBVzNT0hE2yR4bnrxpEeja0y2HBz61rszbz4UJS+XG
   0cL9mpmdXBVa44YxgUMXdnNkyzqFrWVlT2QLGI34YRWRNWcu1HxS34oenULkA5H8FIdP
   9OKBtfocJmXX6Ar/kUvBz3RZ0d1IjYwry7+CjrnovS37bGRGyvliVQT3A3UFXPv1qiSc
   Y5McyUcDai7uYRXu8jxFE8bAuAkcWPpt7ieRGpZdv311i+5U8yLyOYQh0hpR/l7Sy7XS
   l3U4X0y+vOy4XcAMzgNdJ2UzTUabw6ZGGNA3Mu/8hDuI4pLoTzRC8q98DhjpY9Ak4Hd1
   2H11S+PdpHCwofGIdU6IZ8xKnxYcPk1717hfjXITuGjqEmebdd+xkZGOXb2m4738AeE4
   BcazNddeovSSjSiscetQIEkVYdJsWpPOEvnsx607OdyIWYBjb9aJ+k5cBCeh3EdylOWB
   nLRTzXRE6H/GNO52jxORPweIE1YfFZLMcAiQKYWWNnId2hyyBc7qo/aTdZ9b0H50ZD7L
   2LAkz0hB6YtIVD5BQk7KvNJPHFIuw5O1ligBZw6lZGeWUSxOgSeSwCpp2da4DvDdUxOp
   9vRYoZLkVGt70A2nidvZiiHpz4g6SKmR+JkvdxwvT8wb7A8OaNG72NIBZ/b6++HduIDr
   Wwk0cHLdTxKMRyWIYvgGW77TT/CHeG5Orqtfy7wPhIjBdSYClj8YQxPMM9A6T3wp2kTV
   dacAEe85L6oS3mXtLkag7as84JSyLdMRuSkZuVjCAsRyRJEU5Lc/36jM6Selsx9yjMnW
   AwLqzB/mx4GZYD44sQzZHQDNEHb+0axKL3QU2lnVI69HCscb5SmITT1rF3bRm13HtqFK
   ZQt8W3frsEcrWjcv/onb+MAYMM346sMuk4yHxcXx7AigmFCkN85TLgeIqRw/rmT9nO4P
   CaNkl9iJByUJDjlMWIAwXtq+LLmSmtoDOKIV6GF4dmDF9t6rO/b4704ZdgxIDj99FVlR
   TLI9Z8Tbf7UPdCDfj11dMDl9ir3WBASYr1d22p5XlspIQuIJGIKIV7xLfZgyyioyqa50
   MscWlzu9/OUTz7tFLEth0Ybl6OruOc1QqxQpKti4N+aSYLpwWCymF6V0fAAwhpjqpuml
   2xN9mJQrpMZMxLphmPtCo8Y4xyGlfMHn+KjWMa5FS4DbKk6/9yvcA89pJHI5u+QwQO3p
   WjFuoZ6Z4oB1tdpn1rtYnEzkL0/I5ak5KvXWqfmezPyURc83ih7ucFPxM92lCNf3iPJ2
   zrqhOsURNgHSUTBAEyjA2j+KoCnTTAUzPNnZCSq61Uu7wJ37MdwIPemAaTiDMVWXch5x
   mEF2Sn2TrPez9SfgwWiG5dREK035rCRM9/wuIDcAuIIPoQgmJ+UBkEM9mvxk+chENra6
   yeuUSka4rwSUy06GHCW1Rs+NgMCI93TNEdJVFuhXssqD39UwJdM4cV9IBzebJXYfqXoy
   WYiPuRHWKKJTB0WxNwyC2GGVE2Fbf2wadfLrn+TmG4Yt8UHqAxIcmfLAUkEd3O7p/mBR
   CAx7G1qBIFkjXrYvRUfkmb07V8vpgqU93+CIMo7HBa8fkGI/FX2s2kYiYGwIpmspFDYr
   thRMHf0dpP/3Kx6feSEL8dFv9JrVdEADqDQShBIP+HLutJHeQ+jljDZ+gUr/Zbsq6vdU
   9wQc9T43yxjSq2Jz2EMd+GoQv5AQ0ziyN5fZL4OKWIFI93/sDtCOhvNAZ9QljfibpoOV



Ounsworth, et al.         Expires 19 April 2026                [Page 88]

Internet-Draft              Composite ML-KEM                October 2025


   a3JcfoHFZMIG7uagS/2lSgJGL4JDWtgYVXpZorjcmHw1U6SA0jmAOFV2O5npFYi2J8Bf
   i/t1t+DxKak83DLedHGX2/a7xqKGus/QwMrLYR/BDMdG6S3xehZDQlaCAduPrD5u74//
   iHZESLjk36d+KFA4r6RCjFKciXN1DVMYMxDiHJYW6VX83H8uBOjoMNix3ebBB7NeKwf1
   gSArz8mgUpIuTnH8nOSRkyJ00j6p3rJaT6/kZ4uF804QsBVemJK79d1JTEODSfDk2/e7
   /hveHjDHh1DvtbE5iZrjt6UDs+w272qOs7NJrUA4m7i+P+HvKkV4SaTJGwVcPypGrOmw
   yuB0qFJpi5yRzDH4UxtIub78rruLO9QzJaKGecPmrUv1HfWgG8l0gejOS1KkVPc6NjME
   O7QrWyEXOFZNgu8FkvFkPjmX2n7PDN9MQfzthMFSRED+alNjiR9Xdt2orxW4WYqP9QaV
   JJqO55hYtZXlOrtqEyV75sydwrEVTwX4unjE+tZQdFH+UsoIoELjb2bXiOw0blrxF1xJ
   +ZcXsZOdo+w/qrybymeb/KnSudqZX/aTAcWuAhyKHJA65OebGMF5EVWYtE6FsrT0Lrs0
   dH40g8W1TzqlIwJjZ49Xq+8PQtsSEWI4aPw/6NqIx7/+pdhtIiibtmBa5Wl4EPFlMqxN
   TNB6Tlvc96Wp7zMlQg/y1ELMUIS4BDOlddfSpE6dzBIG5xNnnxLCOe/73h+LWGWJf6wb
   Ag1tg9pCoRRFgkmp9pkA4LD5Wb28ycuspVMNL+cs13TW5drHGJAHOOksWjiscIpt/Gzc
   YcIsnMObZKNKaoVmhBN+vahkLnk5ws5QP4OuQhHGL3lYnrqZt26kJ1gCrRkKhaZOVBwT
   FLVvTimpM5u6bXNVkF1Fjz826eJk4W801UNbOgABFX98A9DA9Ly7yGGmPKnm8LhbLriX
   SH7V0aVTCshaVPOMPXdomHp+zrpbWB2CwOhMRILETp7y2uEWvtNyJni/EulXfiisVD3j
   HfhbxHa/Uoq+2TMeAUeK/6BTGUeH6hoFG7JqKgUL7ywU01jZmiZxh2XdEkjziWpzIqOh
   df/R3ROHrd44VMWX6kSj6UYxLE5RVtYWTqGD02SKsdMyDzJ+Xv7rzOArcrEMPgvWn6WD
   T+4coxQWzRgsyndj3pbIaHs5qPElRwiqmWvsKPsUCJLEMBRD9apGz7APrUvmyft+ATus
   IyoW70IMa5Sa1CWsmnc4JgluG9GBu3gS+nxyz420MpyRaLJDBW1QcKpLMbCST7qHaYUJ
   Z/EwHWUuB0aENSrMBZUv5g/EjmnvKyJwOhiGMhfzz3aOxSPVDqRBN2AipYzFM8Xb4QB+
   Ed5Mt4TvL7RwFlfx5djsexEnafweDP8lpWi4vngyg0mhQyMT5abdDWjrPy0KIQDP8rfj
   9zxzZEoh8+brHJegyGq1MxvUGPzvMcczKXKpF8SseK5Zs0V0dFQNNo2IPK+9W6fW0Cjq
   Cwm/upRQUy4UdhZDoALkwBCpgYDzZ/8P37T68PCsJk5VMhHF/e8MefcN7AEPE25SN/z2
   wP4yF7xseGZApdBVF6UmJp5DMpXqZPLkY0zM7JUylNhZxYeuuc54dZqf6rfzqHLXy9Iy
   3kalhQ6D7TrV5+jcRiYH/AukuO+52YOE/U14RUlH8iMom/VTtwO4QU6bQ6nZSKOkRYRo
   VIpVomcUwZiMCPEK3hRJQHTJwfXHnbPllpTwByfwIOBC4UtopzfGFqyi70h2kOfkd1Zw
   3tvsoU/d0XSEEIRBXrFUzZ1AHnzHW2LXLOy2qmNS0SfwoEYoH9q+HOoqXJQqUaaYZPam
   SjcufMiK/HBenPHj6c6mAbEWuFOzNFrT7FxET0eOhjA63pb0SNPzPhEbyGI3CaBheCX8
   lAtvnSvFPzWG9fnerSeLd2gd9MXSw8dYIboBxZITek5fmBv3uc3jVviTG5MySgbHvhKI
   t2skhVnCx0RQktG/l7jttIBoQdFv9uqPG4FZ9QPFF1ZxLIWEm4UVVa9IE/mg8Xon0PAp
   LZZwLOuzOX/UO71RW8uZAV8kf6BHQwOSRaln83VpFGatWgPsPE7I4Rwn//8wiiStKm8F
   Mpusk8ijtr1MrgzfFUQ0ecEkl7rubXHXpZ3BPqpzFAmlXKw1s16qN7uOk46yWN/SEbIz
   /1XeZj3d6SnWV01JfHbWBlRlv/NmFPZX9jXA+NBdZvh0pYIzTnXbOTmHURv1afiKj7QR
   Zxaca8uuViCKv5IZYki3v4BDC3O8Xx8zUQ0o0xAusF8uYiFRw6UsQklbJ1quYZG9kT6O
   DlM5KvUXBo0ABx73zoYlzX/e/CkkcOCCIsrAh03BuCQsfmKC3sj/bCoCqi5wgWv+ALE1
   H/IiMylZ/N3uYJGRsqcqiwu+QrMDNWA1lteIOXp+3xAAAAAAAAAAAAAAAAAAAAAAAECB
   AZHSY=",
   "dk": "GFhg0mQWwaA6K7ArFXG9/AXyUYlvJDuPqsQehDkkHaaKcfCz4qGH
   UJH0KKqGR5PB5zZvIIyIoenY9SIP0JBcv44BMIIBigKCAYEAzqIudW28Ayf/XbYHJBbG
   BgBLf5LyENzr9ocgGBFP5sJyMsY71ffd6kZcpJwPVlMBw/zP0nAVDcBzCZbY3eaiHZjc
   R2vMXb0gyxLGF6hEaqy8bTW5tsdHOkNhh0HNR2Lg+YyDIabKQe9C6dY26TTtcK0dAX9r
   v3JJbDQYx9UVZj+QVrduUuhFrwHNnwRf0loTRN6PMzOjWl+S6OaKHeYa3dbDi3X3U5M4
   ypnFJ/u/2hlRkt80N9/4i2haPeS4J4Jk45dP1MpbB5alKUUxNZCEYI9+N2KTntP/A2qZ
   qKy0BxXOfjtooZi2WS/D35B5XzvQtl43iD7wybqHfcggb//jzujn/gAI3MsEklSLtHEQ
   5Z+2FwV5oK9ifgqSQNk3rfMaMPoc8jtfy5Jp6lE/bsiGR5w5p6lmpmiOc/6pgcbeLttO
   /9/v6axYfm3UeHjHpCfAd2qMm587+UWdFou72J7+Ye5EbbPsxOm/55WH58JoHwsXPa+x
   OMQi7gS8QjIgPENrAgMBAAEwggbjAgEAAoIBgQDOoi51bbwDJ/9dtgckFsYGAEt/kvIQ
   3Ov2hyAYEU/mwnIyxjvV993qRlyknA9WUwHD/M/ScBUNwHMJltjd5qIdmNxHa8xdvSDL



Ounsworth, et al.         Expires 19 April 2026                [Page 89]

Internet-Draft              Composite ML-KEM                October 2025


   EsYXqERqrLxtNbm2x0c6Q2GHQc1HYuD5jIMhpspB70Lp1jbpNO1wrR0Bf2u/cklsNBjH
   1RVmP5BWt25S6EWvAc2fBF/SWhNE3o8zM6NaX5Lo5ood5hrd1sOLdfdTkzjKmcUn+7/a
   GVGS3zQ33/iLaFo95LgngmTjl0/UylsHlqUpRTE1kIRgj343YpOe0/8DapmorLQHFc5+
   O2ihmLZZL8PfkHlfO9C2XjeIPvDJuod9yCBv/+PO6Of+AAjcywSSVIu0cRDln7YXBXmg
   r2J+CpJA2Tet8xow+hzyO1/LkmnqUT9uyIZHnDmnqWamaI5z/qmBxt4u207/3+/prFh+
   bdR4eMekJ8B3aoybnzv5RZ0Wi7vYnv5h7kRts+zE6b/nlYfnwmgfCxc9r7E4xCLuBLxC
   MiA8Q2sCAwEAAQKCAYBKp0qMr3QtWb6Hn1OuJLIvidy8/xyIniB8JW6hc2PANcEnefo1
   QEODOB+RczaRVBT/t29oEolwufZ14POCHCi287ql7RrdRQ67f5FlC6yIM9cxx6bMk+u2
   b5ClWs8s+trYHf1kY4uQTb6JmBSnpbEhM9IWb/BALyy6tIm9bM057z4ZLlVkC7ndVBPz
   XxO1fkiW6aen8oCSjpQXo+8DhVZwjn6AfMK6BacPf4W8/9XdGKehnhWSGE+GIlH0KZWk
   5JUjbehGcWfsuTvOm8/NTefiIVYPZlXGF83zNUHKsEUb6DGLVSHu/Uh8gbiPoRBiLsu6
   y1RCGNbB6/hDGUeqPa23ZGMHELHg8PG/ELT8psYpBq9PvVzOoHM6jDDXkwF4vnIi8Law
   eoaTCZElsRPf6d6IiU9DqJ0yqijW3ayIXkJcxnHlFMi8q5yGVej1GPygYrM4GI6kEa1o
   WUrh6z37DlYI1LfF1Vw2EULbyhx+JpdDTfX0qf7MyzZzCiQFTiaU+nkCgcEA643Fr86v
   8iyTftxcoaRDTjxzJS1BlItjQimLCOXgDreRwbT2gw4Z2PRl8y1+R9KCALOCXErk4RlR
   KgCeIoRrH+GqwdGX201rsQyJ+5/8f9Fauaon1Awv3di96bcLmeecvxuS4BNjcnffpMC1
   QRiX9rAqvYtY7fN1F3oYu+jOj7ajVOyoVmIc69SQbuuaVhIY+u6neacVHnxD/ipxxmQw
   4maJc0UHpzKcjU94HrBaDcr0KdK9wN9js8Zj1iizV2pzAoHBAOCRxf7inO9PsWMOAs2W
   DyyNQ3gYiYRfEHsInmWK9uQQvjx+WEF7u/40gummXb4QmgvdTpw9YrRJX7m5iuG4pVo+
   x/P0hbx8ONe9f+jmaef6bv6dd2+WSNE7rip4kIjsSFk5nimxBXCzALxJyR7OrkGdNBS5
   JExcbnpsbc5+AVErZjCcc2WNOLEcWMIiO8iaIyqYvoLTJIkCFi7lAy9Q2kw2xPUGmNVH
   8B6hPyIv6F4DUoenex4LzBBg8WgEsOItKQKBwBuh3fbpwCogoIzZPOSZaGvdG4TY8kCC
   uXohdXXtwYL4ddjLab+l/9I7mVoVlCLIxwdeB4TcJE1jsunCeMqDzi1HQ8jI1Y+cXW2/
   ktA5zF0SKhpto450f4j+zAiGuI2tZe3lRi2TGK9s8IdbM+gXAnyl3d2uYxhG3w2J/SzN
   +q1RN4fW20iG6e2gWfEpIknGhbeqF2tl9kxFN5SxVfd3+WQVszoadvNeNI8/K1AuT+Ie
   VNYzKp9dlUyZkUymKaOvkQKBwFS+TcQoieY44Yyqrd4c4W8Dg9FfGQ3Nve9fyj4xWYeo
   1dEIMI/NfJyp/jjjof5mT2towRBujb/Q7IGuhb02K5fJlzT1Mj51dhHbndgqkw6KT7Zf
   f8GpKaNjbQ7z3j79QzQAbTH4bkAgHIfxJCcvAU0bYJrtXsg+HSavoiRJIoAZ638umtFY
   oGsdclUYDA1gNSMO7t15hhD5q5tYqoIBdc9K37pDGgtqES/N04A4KezIPi2YwvoMo54O
   pyqEkqdXOQKBwQC1fnGe4A3FZdN2b70cSDjCPSYu0lp7kl0/irvr1Z1SgSHEntabaVZF
   2oE4CIzfMT2gq41GXHVi4RaJ0DzYiQGwGFQgonC/HR6n6GSr/2mNrhATaYp5jIjVU1jW
   QBuYQoW+mDf/mqdUPVWDPpTFkJsmVgWsMkxYcINFhpbNCCwl4fcC/xd9FdpgjXKr7psl
   zMM5jFPQQAUzXd4f1VWIyA/TRlWvb34LwS/SjjUFYVjUMsFEk9GBk7NpJQ91vpIGrtI=
   ",
   "dk_pkcs8": "MIIIzQIBADANBgtghkgBhvprUAUCPwSCCLcYWGDSZBbBoDorsCsV
   cb38BfJRiW8kO4+qxB6EOSQdpopx8LPioYdQkfQoqoZHk8HnNm8gjIih6dj1Ig/QkFy/
   jgEwggGKAoIBgQDOoi51bbwDJ/9dtgckFsYGAEt/kvIQ3Ov2hyAYEU/mwnIyxjvV993q
   RlyknA9WUwHD/M/ScBUNwHMJltjd5qIdmNxHa8xdvSDLEsYXqERqrLxtNbm2x0c6Q2GH
   Qc1HYuD5jIMhpspB70Lp1jbpNO1wrR0Bf2u/cklsNBjH1RVmP5BWt25S6EWvAc2fBF/S
   WhNE3o8zM6NaX5Lo5ood5hrd1sOLdfdTkzjKmcUn+7/aGVGS3zQ33/iLaFo95LgngmTj
   l0/UylsHlqUpRTE1kIRgj343YpOe0/8DapmorLQHFc5+O2ihmLZZL8PfkHlfO9C2XjeI
   PvDJuod9yCBv/+PO6Of+AAjcywSSVIu0cRDln7YXBXmgr2J+CpJA2Tet8xow+hzyO1/L
   kmnqUT9uyIZHnDmnqWamaI5z/qmBxt4u207/3+/prFh+bdR4eMekJ8B3aoybnzv5RZ0W
   i7vYnv5h7kRts+zE6b/nlYfnwmgfCxc9r7E4xCLuBLxCMiA8Q2sCAwEAATCCBuMCAQAC
   ggGBAM6iLnVtvAMn/122ByQWxgYAS3+S8hDc6/aHIBgRT+bCcjLGO9X33epGXKScD1ZT
   AcP8z9JwFQ3AcwmW2N3moh2Y3EdrzF29IMsSxheoRGqsvG01ubbHRzpDYYdBzUdi4PmM
   gyGmykHvQunWNuk07XCtHQF/a79ySWw0GMfVFWY/kFa3blLoRa8BzZ8EX9JaE0TejzMz
   o1pfkujmih3mGt3Ww4t191OTOMqZxSf7v9oZUZLfNDff+ItoWj3kuCeCZOOXT9TKWweW



Ounsworth, et al.         Expires 19 April 2026                [Page 90]

Internet-Draft              Composite ML-KEM                October 2025


   pSlFMTWQhGCPfjdik57T/wNqmaistAcVzn47aKGYtlkvw9+QeV870LZeN4g+8Mm6h33I
   IG//487o5/4ACNzLBJJUi7RxEOWfthcFeaCvYn4KkkDZN63zGjD6HPI7X8uSaepRP27I
   hkecOaepZqZojnP+qYHG3i7bTv/f7+msWH5t1Hh4x6QnwHdqjJufO/lFnRaLu9ie/mHu
   RG2z7MTpv+eVh+fCaB8LFz2vsTjEIu4EvEIyIDxDawIDAQABAoIBgEqnSoyvdC1Zvoef
   U64ksi+J3Lz/HIieIHwlbqFzY8A1wSd5+jVAQ4M4H5FzNpFUFP+3b2gSiXC59nXg84Ic
   KLbzuqXtGt1FDrt/kWULrIgz1zHHpsyT67ZvkKVazyz62tgd/WRji5BNvomYFKelsSEz
   0hZv8EAvLLq0ib1szTnvPhkuVWQLud1UE/NfE7V+SJbpp6fygJKOlBej7wOFVnCOfoB8
   wroFpw9/hbz/1d0Yp6GeFZIYT4YiUfQplaTklSNt6EZxZ+y5O86bz81N5+IhVg9mVcYX
   zfM1QcqwRRvoMYtVIe79SHyBuI+hEGIuy7rLVEIY1sHr+EMZR6o9rbdkYwcQseDw8b8Q
   tPymxikGr0+9XM6gczqMMNeTAXi+ciLwtrB6hpMJkSWxE9/p3oiJT0OonTKqKNbdrIhe
   QlzGceUUyLyrnIZV6PUY/KBiszgYjqQRrWhZSuHrPfsOVgjUt8XVXDYRQtvKHH4ml0NN
   9fSp/szLNnMKJAVOJpT6eQKBwQDrjcWvzq/yLJN+3FyhpENOPHMlLUGUi2NCKYsI5eAO
   t5HBtPaDDhnY9GXzLX5H0oIAs4JcSuThGVEqAJ4ihGsf4arB0ZfbTWuxDIn7n/x/0Vq5
   qifUDC/d2L3ptwuZ55y/G5LgE2Nyd9+kwLVBGJf2sCq9i1jt83UXehi76M6PtqNU7KhW
   Yhzr1JBu65pWEhj67qd5pxUefEP+KnHGZDDiZolzRQenMpyNT3gesFoNyvQp0r3A32Oz
   xmPWKLNXanMCgcEA4JHF/uKc70+xYw4CzZYPLI1DeBiJhF8QewieZYr25BC+PH5YQXu7
   /jSC6aZdvhCaC91OnD1itElfubmK4bilWj7H8/SFvHw4171/6OZp5/pu/p13b5ZI0Tuu
   KniQiOxIWTmeKbEFcLMAvEnJHs6uQZ00FLkkTFxuemxtzn4BUStmMJxzZY04sRxYwiI7
   yJojKpi+gtMkiQIWLuUDL1DaTDbE9QaY1UfwHqE/Ii/oXgNSh6d7HgvMEGDxaASw4i0p
   AoHAG6Hd9unAKiCgjNk85Jloa90bhNjyQIK5eiF1de3Bgvh12Mtpv6X/0juZWhWUIsjH
   B14HhNwkTWOy6cJ4yoPOLUdDyMjVj5xdbb+S0DnMXRIqGm2jjnR/iP7MCIa4ja1l7eVG
   LZMYr2zwh1sz6BcCfKXd3a5jGEbfDYn9LM36rVE3h9bbSIbp7aBZ8SkiScaFt6oXa2X2
   TEU3lLFV93f5ZBWzOhp28140jz8rUC5P4h5U1jMqn12VTJmRTKYpo6+RAoHAVL5NxCiJ
   5jjhjKqt3hzhbwOD0V8ZDc2971/KPjFZh6jV0Qgwj818nKn+OOOh/mZPa2jBEG6Nv9Ds
   ga6FvTYrl8mXNPUyPnV2Edud2CqTDopPtl9/wakpo2NtDvPePv1DNABtMfhuQCAch/Ek
   Jy8BTRtgmu1eyD4dJq+iJEkigBnrfy6a0Vigax1yVRgMDWA1Iw7u3XmGEPmrm1iqggF1
   z0rfukMaC2oRL83TgDgp7Mg+LZjC+gyjng6nKoSSp1c5AoHBALV+cZ7gDcVl03ZvvRxI
   OMI9Ji7SWnuSXT+Ku+vVnVKBIcSe1ptpVkXagTgIjN8xPaCrjUZcdWLhFonQPNiJAbAY
   VCCicL8dHqfoZKv/aY2uEBNpinmMiNVTWNZAG5hChb6YN/+ap1Q9VYM+lMWQmyZWBawy
   TFhwg0WGls0ILCXh9wL/F30V2mCNcqvumyXMwzmMU9BABTNd3h/VVYjID9NGVa9vfgvB
   L9KONQVhWNQywUST0YGTs2klD3W+kgau0g==",
   "c": "Rak8O6smHfxvuycb/21+Bem
   VtX0XNUJikcA86aDgmZAmsWDiPaeP9muqLdQnKuTeLbA3vK1NIZ/f9Bv9EekXyRHIzAj
   evO7Ihvf97MeucGuhvup9M12ufibDKAJax9OjBYebqdvM+zdP5XLSEqINyvTwe47VUFi
   QwdvkxiiFtLXHjEthM8Wzd9jErEXNEpxDdOGCwMPlm8RMEiSzPCr3tcbxKHTMhFtTVUX
   cfWglBNhJQdZQOatekZ4bZ6Z3GwjZZvF6Lm7L3KsthF/nFLwfwzRh1Y0f1pLa0mHC+M0
   gMov1WNLBBnG8eSk0ODfTSp8dErEnCPlRL56W9sy5iD9jAA7nYIG1woQ4ctuBUUWWAZH
   jFmBUcxVnQE6Ee04ggsNpLEmiMjcbUW4gtWrc7UlNHP0P0/FPg2sqnFBE9UtXzqMekGP
   DFtZ3F2k0inZoWjnrbG+cUqGOsKWILOIUHVjieMBISGOhujjS9TYnrGTM9OQOWaU0gLd
   Ikz/9Usb4NUdH/Qgzk6zCTmTD3VCXOMbcNID2TRBBVAKp8vPFGbJE6M67zhZBB6Um7br
   EJBRCIS28pnw/vTL4bRd5cMpsd7EeRbE4XjpqQhgx3b3cqYC3LQ3hhTak/o/dtXmVf4X
   MzR0E90z6oCHJQL5g6utLCCKg9VMl/PAXbplfHWGN102JC+Z1XKNUux67b420+xXKM4R
   NeWQkmBXCO62NsbaXhIm5ZDx2FOC6gE3sCvPSyEbRqWZN0TgxrZDJlyAqHBI7jFpkpYN
   LXxIRIMyYAKs0HXPNPwafsNbLSOVO3W+segR0IoZNv1aMf2Lp225pTEzdUcpEea6qoK9
   S+bnZCzJSRIUmtfUsoEeNXVZ/IdhZa53LdmeL7kBFWlummQGi6MhHe8GP5GRL8iAmDH1
   4GizmyWszeDduj15hc2DVH47vCJjRsN7MEB1Eo/2/vS8T0MDjBB/NJUuqw8y2xU/jGwZ
   xjoyIJU1jPGIKZEKJhgsrZ3bdZRpw+XXEjEK8XtrQVqD5U4HFDbIzNbhmVXsDk+ciZhC
   IxiGEu3YGIQeoQ/YCEYb3AjoiYp9z1ijx+ZL7YMtZgUiVMth+F0OuCKSQjcdoPqYKnwP



Ounsworth, et al.         Expires 19 April 2026                [Page 91]

Internet-Draft              Composite ML-KEM                October 2025


   Q6QzCK3wZIhxGbm12lJ3U0ljKA2ASvtMAlzvjjTWR/lMospcDPf6F0OfyiptYmPXliKG
   Jy3fLW5bfbYQ+XWn3Sp9oicN29leDdKQHePAMy8OQyhAsnF94g4w9qM/bEU3ns55SC7l
   Ej0r8uR+uhCHtx3ZNp3gVXEBuz7HIlpSZXWjQx+G7zeVDrtIY5aY+/d1iiHW09FOpsez
   PD+TUjlacFdhw+HCgG4xoG9NWYAa6DNPLdcMPw3IlD1uK9gIzNGEOg7Gp/yUSFJHAEqX
   +NDf8jAaNzFhQG5LjEFSzZZh4tplPpb9zX3YXmq0FRPTv0d4AQYyi6C1XCRNtjgAY65s
   8NNaLQolnEH55+3RP2yjo2DlE5HWp6azA1Ud6vWfPkae0P0inNkG54E4PlcHPjA4jsRe
   DJ9x0wmV81Zn9c/2+PsbyYv5Np0/NfJjvB5ePu8mRJC2oeGhseOOpOyrgS58KGUFq2d5
   BYvfcwej5IuYGUrljA4EVQT1JoZvNYiMO2Emp02FaZNfwxQRdKtGUr5j70V24miA6FM9
   cEf6NwkeU03sCVtui4z0ztawbM6TVaME/K5HN8zMcO/Kq9Zp1+W8NEAx48q/iwLfcZYf
   ziinmqf0RbxHmzCCbfO7/TJeJEw5VEPrx1LqsCAfspeck6Tg0/7FJYoclB//7NAXyDhi
   pc6ixRivHuGI6uTybxmzebaCIIJd4l7JzuXd5MPVR62fHiWv6pxmg+JWdo++pmjXEQSu
   tC8pyIEyZodRdc7AIya13x75LCjV9y9ZhMWGMTwevT21mVciSe8EJIdzecnbbioIhder
   nS2LLoMUAjjgkYaiKYFIDRCyGlPOndV2+mPE=",
   "k":
   "7rr72e5NuTMg33EyUADsG6+dCKF5gPg7zxz1y/YOqXw="
   },
   {
   "tcId": "id-
   MLKEM768-RSA4096-SHA3-256",
   "ek": "+OEnMolj88QwiGi3TtdTCiEOyZMhmaJKX
   gUWFnMZOgOouYAvXPCdJsiz6chGeJl3kAQIQKkDCewn5XKe/jWGaVKAj1LBAjBnDYkKR
   LIm8BUyM/WoeXafVVeXK7g1akE8dtpW2qbD9xaIZMfL77FKxrqAKqRkOYjLt5OUxGZTk
   8UR1izKL3o7SWGV6QmKz8W8fMNS9tKE0hsQa1Y1/4y27sNLzQtPgfZy4meo9aNFCyTM0
   dI3icBFO9I7EEwr9ThZDNgB6Kk8KsokrqaqyIex2RiF5ELIMkq4Bas5wzOKhbY376LNA
   7q/viIcu6HCEwpt2IiQUckvxFhu8KEBmHR1Diy03CRh8HYfzZCC2stSzfLIHfZNvrxLf
   8AAt9yt39gDwlR65vuMuERtJSoa3Rtwg/g0aDmgRSkHWhobMKiJc7hE/HmxLPCcTmeMq
   7KTQEpIUglKPrllTeVSxKsqthaLX2gwBLC1ztiUtmYxY0yxQLqNEEyPFZMnMHyIJRXOz
   LkE+va4Gih2DOk2WdKMPqzNZrmCkoquX8c+MyLBEDg2diU5rLQlQMprCxxsKWC9HdlF6
   yN84HQeiEl+bpZ8KbFyfdgylSe+GyYxm7RfR+otsePIYGwxhWtrTUmN36w0JOtNoYTB3
   dI/zJWGu6GR1zYRi3dyWrEshZqsace6URVpWnvB37CIFoHAJhtaeLuGRlW7rCUmZWWmo
   5rJlVJZj+ljKbmo7TcDKip5ZAFEVASt0uZVDTMHryUKVdK7WJhy5sI6bAoN/LjKfipKf
   hhsQDUfxswiBluo14cEx8FA0IZHTvUSeJsKMVTG1DFk2WVAsAVREBKW6HpJEgY7o1OgY
   ClxllBRwsDOVLKb7ls6otAbDyqowvgf2GSpCLi/H1QMBayhLnQSI5gVKHte36EJkPVNC
   zMV6ehsxUlc7cwW9ihOSNZrcsoxmOV8NMy9u6K5k1U9t7CAqbZMvVRk46jCTdoPdtC3u
   8tUBEENkhdJ1zmHFrdQhspGXXXLY1slgfyaJiRPumyrfQtlgLoSvzwKqOfBWtxhL8Ir2
   2IqWAGqc9W3bBJuLlAzZusESaQ+xQCjwKaUfBix1/dWD5Cd3DIzgve46Mx0mwolWVtPc
   ObK86cjhjpy7gB6KPaLAdZOqXhMYxRRuEkhfBQzcMxW7dWpVndx0gi2L8AhEmkTKkeUk
   NPM2Sl0rRzNBOWwGod2juGRMuMyX9ZJLEeMc6mJwqiyKJGQe/Q0JJBP8nx8n0JMusQU8
   phGPsmz3TTGa2vJ6goUwjaJhFNovQuW4wy5HaeP7+w9GkqdrMUBzURupXkcOwI5V5BLi
   JSBgytYaRppdTdwZZNbwlkHY/qyGWmlhoILcLYd6zxRmJNiagCZDJVHrBtdGazP7oY2n
   jWxHVFBixKf2dZNYpttP5yBsVs9YQtC6KMPc0RXgrmpUuoSAzYt0trHfYKXtXKe0UVyp
   Uy3S9izdksPR+GjHAkK0nUgz6VKLHNDBkezPbVs+YNCE0iJeOw6Z9tLldrOJBWpsXvPa
   UkLdqE9myd+6oDEQKbwpFBZf8DbjxtZ6a2CThWHGDt1d/hU7HwwggIKAoICAQCluvkww
   bqBL8X7u6eUW1Rokh8xAPusVd3UtUUL0BGKo11tClqWnAz4f5hXUSSv9klDpwmVjMTSY
   IZTb5lkAfo+x3wZ7Mzi5BVd1cBo02zQK/pd1L3EORTsQ2FQodvvtQCHuHsompQUji5V1
   UNseeRjfIQtTwynyJWInrGCA1YL8tuu+97FDQJo5GKSbG3/rTbdiac2eeKNbPssnQIWR
   zwq+taTGXZ5t2oWLPyJqZHKKKH6iNQdgec5cUxbPnzc6cDEu+MN0y+GUiMaj14H4z8Vg
   VLWiAK1Qf4P5syzMiPE9zswhI3Gfi10kXzUJgMLZC9lfz9BeDJB52RTy8LKRzQo06ZMv



Ounsworth, et al.         Expires 19 April 2026                [Page 92]

Internet-Draft              Composite ML-KEM                October 2025


   cIrQW2dDCTD4FCqMTF4ex28cE//q577dSldQ5+5/8gnR/RmRGXjh9fpTReonKNSEkcyx
   jFkcREmuRYRNCMLN9JhbPFXdPSxViasx+e6pZSjS/kWXao5w8tHHPddTyqhvkPo9VWjh
   uhdFf43RWgoCZLL4jBOVabVRs1YnSFz6S3VGHPL1rYQ3MNlaUyKY0+58RFKk3uU/0VZB
   CJ4uZ9cZWMEAK9wSKBRlpCwBEvHuXnMMI3I9hIb7CabpnIfQeC/G7/gBzUjDicopVxoK
   1x5yk03EAJMXkSlz5dUZCUw0oOLz4Bh1jcJD3F0W1cIzNgiWtPtHberkLZbo4pwNQIDA
   QAB",
   "x5c": "MIIUrDCCB6mgAwIBAgIUVOzbXH4WMXavzPvM/rIGQN9ZYj8wCwYJYI
   ZIAWUDBAMSMD0xDTALBgNVBAoMBElFVEYxDjAMBgNVBAsMBUxBTVBTMRwwGgYDVQQDDB
   NDb21wb3NpdGUgTUwtS0VNIENBMB4XDTI1MTAxNDE4MjQ1OVoXDTM1MTAxNTE4MjQ1OV
   owRjENMAsGA1UECgwESUVURjEOMAwGA1UECwwFTEFNUFMxJTAjBgNVBAMMHGlkLU1MS0
   VNNzY4LVJTQTQwOTYtU0hBMy0yNTYwggbCMA0GC2CGSAGG+mtQBQJAA4IGrwD44ScyiW
   PzxDCIaLdO11MKIQ7JkyGZokpeBRYWcxk6A6i5gC9c8J0myLPpyEZ4mXeQBAhAqQMJ7C
   flcp7+NYZpUoCPUsECMGcNiQpEsibwFTIz9ah5dp9VV5cruDVqQTx22lbapsP3Fohkx8
   vvsUrGuoAqpGQ5iMu3k5TEZlOTxRHWLMovejtJYZXpCYrPxbx8w1L20oTSGxBrVjX/jL
   buw0vNC0+B9nLiZ6j1o0ULJMzR0jeJwEU70jsQTCv1OFkM2AHoqTwqyiSupqrIh7HZGI
   XkQsgySrgFqznDM4qFtjfvos0Dur++Ihy7ocITCm3YiJBRyS/EWG7woQGYdHUOLLTcJG
   Hwdh/NkILay1LN8sgd9k2+vEt/wAC33K3f2APCVHrm+4y4RG0lKhrdG3CD+DRoOaBFKQ
   daGhswqIlzuET8ebEs8JxOZ4yrspNASkhSCUo+uWVN5VLEqyq2FotfaDAEsLXO2JS2Zj
   FjTLFAuo0QTI8VkycwfIglFc7MuQT69rgaKHYM6TZZ0ow+rM1muYKSiq5fxz4zIsEQOD
   Z2JTmstCVAymsLHGwpYL0d2UXrI3zgdB6ISX5ulnwpsXJ92DKVJ74bJjGbtF9H6i2x48
   hgbDGFa2tNSY3frDQk602hhMHd0j/MlYa7oZHXNhGLd3JasSyFmqxpx7pRFWlae8HfsI
   gWgcAmG1p4u4ZGVbusJSZlZaajmsmVUlmP6WMpuajtNwMqKnlkAURUBK3S5lUNMwevJQ
   pV0rtYmHLmwjpsCg38uMp+Kkp+GGxANR/GzCIGW6jXhwTHwUDQhkdO9RJ4mwoxVMbUMW
   TZZUCwBVEQEpboekkSBjujU6BgKXGWUFHCwM5UspvuWzqi0BsPKqjC+B/YZKkIuL8fVA
   wFrKEudBIjmBUoe17foQmQ9U0LMxXp6GzFSVztzBb2KE5I1mtyyjGY5Xw0zL27ormTVT
   23sICptky9VGTjqMJN2g920Le7y1QEQQ2SF0nXOYcWt1CGykZddctjWyWB/JomJE+6bK
   t9C2WAuhK/PAqo58Fa3GEvwivbYipYAapz1bdsEm4uUDNm6wRJpD7FAKPAppR8GLHX91
   YPkJ3cMjOC97jozHSbCiVZW09w5srzpyOGOnLuAHoo9osB1k6peExjFFG4SSF8FDNwzF
   bt1alWd3HSCLYvwCESaRMqR5SQ08zZKXStHM0E5bAah3aO4ZEy4zJf1kksR4xzqYnCqL
   IokZB79DQkkE/yfHyfQky6xBTymEY+ybPdNMZra8nqChTCNomEU2i9C5bjDLkdp4/v7D
   0aSp2sxQHNRG6leRw7AjlXkEuIlIGDK1hpGml1N3Blk1vCWQdj+rIZaaWGggtwth3rPF
   GYk2JqAJkMlUesG10ZrM/uhjaeNbEdUUGLEp/Z1k1im20/nIGxWz1hC0Loow9zRFeCua
   lS6hIDNi3S2sd9gpe1cp7RRXKlTLdL2LN2Sw9H4aMcCQrSdSDPpUosc0MGR7M9tWz5g0
   ITSIl47Dpn20uV2s4kFamxe89pSQt2oT2bJ37qgMRApvCkUFl/wNuPG1nprYJOFYcYO3
   V3+FTsfDCCAgoCggIBAKW6+TDBuoEvxfu7p5RbVGiSHzEA+6xV3dS1RQvQEYqjXW0KWp
   acDPh/mFdRJK/2SUOnCZWMxNJghlNvmWQB+j7HfBnszOLkFV3VwGjTbNAr+l3UvcQ5FO
   xDYVCh2++1AIe4eyialBSOLlXVQ2x55GN8hC1PDKfIlYiesYIDVgvy26773sUNAmjkYp
   Jsbf+tNt2JpzZ54o1s+yydAhZHPCr61pMZdnm3ahYs/ImpkcooofqI1B2B5zlxTFs+fN
   zpwMS74w3TL4ZSIxqPXgfjPxWBUtaIArVB/g/mzLMyI8T3OzCEjcZ+LXSRfNQmAwtkL2
   V/P0F4MkHnZFPLwspHNCjTpky9witBbZ0MJMPgUKoxMXh7HbxwT/+rnvt1KV1Dn7n/yC
   dH9GZEZeOH1+lNF6ico1ISRzLGMWRxESa5FhE0Iws30mFs8Vd09LFWJqzH57qllKNL+R
   ZdqjnDy0cc911PKqG+Q+j1VaOG6F0V/jdFaCgJksviME5VptVGzVidIXPpLdUYc8vWth
   Dcw2VpTIpjT7nxEUqTe5T/RVkEIni5n1xlYwQAr3BIoFGWkLAES8e5ecwwjcj2EhvsJp
   umch9B4L8bv+AHNSMOJyilXGgrXHnKTTcQAkxeRKXPl1RkJTDSg4vPgGHWNwkPcXRbVw
   jM2CJa0+0dt6uQtlujinA1AgMBAAGjEjAQMA4GA1UdDwEB/wQEAwIFIDALBglghkgBZQ
   MEAxIDggzuALty4yD1bxUzYVXiunr+q8oOi5U1siLZM3eO9zZDqWDn5qL8QSvY4ODFop
   B2dBWMLL1Rlx8dMrG2gr7KgTlINy+wGGRKf4iVHYiyRrQFf5QwUrUNEjHDKpPgsmD0Uy
   FUOyGc1VrO6jiCtB+OasWdxkmYNyiuZdzFZCRpJcb//jxPn2Dkki409UldjpdtK+gPOm



Ounsworth, et al.         Expires 19 April 2026                [Page 93]

Internet-Draft              Composite ML-KEM                October 2025


   QZcBwVVtNt20hSWTOAVHVAXzdFIDlmxE0n15/Bk1cFst6+/L2D7Wg12U/tbJxyQn5Q3O
   9dEmb8fzeExXsMsokJ/HCZY6er9vA2tRsUV6BTY8tO9V+SF4XCtQJlBZP5KbFVpmci8h
   HNPKVLhw+QC4bcxqCFMdH2LckUaNF7EgAfyFgB3sS3klBayddY2B7e1Y7gfWIzwP590/
   voqCpReyLdtJxxuXwYRyCDIdPmrhqP/bpaUvt99g5jLmUQ4w3meP+NvMpnzlo5MAEWk5
   DAyCawdszZab2yLj+2tD6hqlm9OaeXItYJjBxpx6D902yV2Xwoe3sdoZTxnzHyQO5Q48
   zYwi4Bcybh1gJeoP1zvmObHOZ9g3LsM3Zp197Kl3LH4YkikqP1zudP1wAfdFaK2rJzpc
   0lb3IIDZuH/UBlmP9xmmaJkAZ36fON6j9fuFJ4Iec+/Wb3Bv3QLFNEEfDb12OghQmmSc
   IYRdKnfcJkfZuhvlgeui1/mNkVAvOa1hQR8VWW8jv4O9sZdNCWfqBIgjpPepEc2GSapA
   rmwhkSy0k3PHZubss6ox/V5/Ne88yNSiHwZOigSjFpDSFlEfurMZT1b7OlJS6Y0GZtVx
   RN5OQe45SKY7EBAE7EKN1dn3D6QZnhkU11tf3CfDCVr5eK2++QaiTGPGhtWO/PSx6Fxx
   n/eu1rXJYlQJpPnuoOACYBtFcGMLo/64oXI67lIVKPwvBlk8F/XCbrcEIDMjG7FocF9a
   TskGvv8kEQwBhbHDoSeEKGUHqvfdIcPfGI5MRji7eS35x6E/0leVmva7MfZJBAcYzuR1
   E/Cd8iFYBKOOlJa02wrIW+cyhK7PwM5jvZtCmpkxIwmni+yg4InaqqhgLvz48kdjnArz
   BJ/m6enHrSz1ZKqLLL9lQfH6lFeH2wF6uSyGT1F2fz9+pGSZYwdeDg9C8+Exk+OrVk2X
   R6jcR4nmQgCFtRHBxeQGlxnV55Jy2qiSeUNrp2pe376Z0bBYTIUIPCUPIiUBftCBRhgV
   DkU5XXyxHoti04EXzHM5Mpkc+PtvMBw2tnCgpT64r/CxdQ+ghvd/3PecHkiZqujLeYOi
   g2xohTHyvDvUZYJUOvvwN8xhlLh9+oQSg0SF3FbbRoqOSjtGks/wOqpHr/aSLjerPe0Z
   iDlORQ7f184xzE1b7BpZxLZiZjDeK3r/BZ7xmY2VgRVRbJrQrDVWpnO7/4oDvUy0L9x2
   BfaYfrS7iiGAKHXL9p/QSvVBIYWGjfrJmj+Q9mssc+zq9mv40w/kGbDREWhh5cz0Ljgr
   d9+S6zZD62GlmOPx8t9gQCtX0+GrjHNK8PJBYqnK4r1xP507uvJj0/TKt2/9YxaPcTOM
   hUtPrCeNborR7R+akoajo+57TTjqZ4FlohrQuF+JPBG5sr8C05GLmBUd+DWkRI0IUnu0
   nWuAE8WJwre50gRhDMDVgZapWUmsKeYMgp6BEJS/UFjaRG2NFS4I0Pejhi7n/wh2zCg3
   m9+QfCU5pNw8TxFrzRBcgC6CIvuNMcaPlE5EPu/yF7KiRoUpMvkoNC7CxEjtS82fcGw/
   K//Au2H7SrUNU/XCvStUxnxvpjg83ERrJYdTMWXk0RTtBccKwiMHKTznhc4sNijjPZYJ
   i8q0YQuHEwfJq52V1ZH/69d1HszeRCuhtPXjmC3uhpNsYMaIAs2s2gFrqryTJLYQE6a4
   S4z9jSzQiH0aXX91ZoCZtcJX/1fnkaXBWt/uzC5Upw8/8sPXDlooPcs1Q9PuP4/0Ruv9
   0i1O6g+o6WoomnzJ2GEMTIfj8QBjExcd7OSoq3rc9NQby27mVzypYPv73VGxjJpS2VIf
   rA6exjc+rxP3FS+SmaSkEZ3z6Ecnv0gsy9xlVZcSUBdxR2QL/+4dXURU1VQvUAe+4QiR
   5pTBs297YW+v42v7RtRMZfBoiYuCTmnVCguoYKDNzzHR56rXAUMg7YVV3im0HAVXmKeT
   jCW3ln+TMuGmfYVIxDJ65MMmYLnVIW8hGCf1z+cqapbRXnPD73XfPNKTHjD1sTeD0hqH
   1eUnBJbm8C8uLwICv7atIykPf1mp9WQsdHfGRJkbqcCb6KyA7AUK/P5dnh2xrnj+q4MQ
   jMIK+M7Op3dGRGgGlne1VCf/w+bXRr7eK5+7Of2g6aihTT28YSiSDZdaLBPcm6C2U70m
   gh7dSUoqzvVM0HcAgpmfykBbDTYbFiwNIV5HTKTYrj93QUVcPEyksZo058LWRbNYIDdl
   LkoCdUaBXGv+rIkZsY0yov5REEV5rqWcdEatylotbPLGcZS3Rxo3/UHZoxkjTDL7InLW
   EvhX9jxuSRuqgdMXnXzyl/mb6guxaG9yy4S+xc+ea3XMNCVYzuWRFIj0bMfRw9LQHm8C
   Qv3JkIPcHCsZXljqFmaoJqPNOLiAi1fZ0wEUQHrBf0fdHiwpB+v4QDhqEtgwt2tdrxye
   GKb+0wejTqi/8RQCHRggLoeUYmXnZCA7Ug3xBlEult93NHbk9GiPYmeyd8sc7faA5PkS
   16+8bU6fxA3c3DY6d14+eF3OfSLa895k0bX7rHkZ4/aF1JWSQRC8EhVltNEawV5KfA5r
   TWBqVvAk/XkF7bh1t/ABour/jmP0rNGhUNkuI/3ZjRq1+Nh0no7aKqXy3pV3WuFa3n+Q
   7LMcRc6dEMMsoUIlmkQ0NOMMMM3RqBiibjWnLyTJ9eh/wGD92nS3Ba/phwvpXQEY9llD
   kulVkndM75sbRWBW7BPFKLisMYBgoq6QOyJMEF8Janp1SlGdeXGy3AxG9aQrgzyifaeQ
   qn/DprcWmOwUQH3h0B11mHvCHBM9kl6NDRXyhdftng9UcRecnIBq+efRX45ZvTpc9rlO
   f1sB4urFIPA8mNSktU5zdMbLS798yd+nnM0yu1zr2vEhIUP1MznQ5kbvYIMeQg6F/Q3u
   4sGtjkQ9nza8I7BPy+JPk5AlA5vhJM0qrqGPSSrShlYQuLlADqNPyN5H4LlslksE2aOr
   UFDtMWRdntth2Sz3A0Y24asXxfyi6LRl4woaMD7b/zMj8O7g+B4fhCTai32BEUbBtXrA
   YQMW/m2hWVmNIxm+QCcU85xwDXtEEzFDhJy5/Bhwne9OqEM8y5w+Z6K2SEYx8MFlYhWo
   6FztcMYLNL/iQf9GNln2YtzzBZuWX0ULUAl0tbU6sUa8Pd5kPCtW5Ar1LC3ixp0Gb2yS
   elD+H0nrYAGS2eQnd3+k/oY8qMlJH25Levp4EHJldMsZI52ME7jmb7z+CNJR4BitwMGz



Ounsworth, et al.         Expires 19 April 2026                [Page 94]

Internet-Draft              Composite ML-KEM                October 2025


   +GxT0Ri+UnhigdZUbJfdpf52G2UtQP9CC9hkeyX/20nCOWl2MOAE0A9Aunw+B7HInL71
   5WD86disozQVC4FtONkB8XPOyarDF4hk5LlIhG8/6murVEGABBg9KK4p1K3LJKiZPrBd
   6RTezPmEjHkAqGdlDRUO4E8oKAKbgF9iktgbNdM1BT7Fa9iVf2Ss88MqbIG7h7zyXNb0
   UqfkikfngWN18UimDBBE1UhK6+jkmgquMVWLAtzSLRDpGGoz3wgou8ojbPFBR8+S1auz
   Bs6oi6xfU+jSmxB1YK2ZJXqXEFLYvSbuJR6svuuRilhHIhyFd0168YEhg8Tr6bA6Ptqr
   ZrH4q/neCexyn4ytq1HQ1ik60/wbCnOf5wUZO0A/VOcvRuTIC6TcC6YD2Oi8xfmem6kA
   TVbrA9oOgE/Aegr0mWnEDkOEL+xKP+s0n9usJyr53iLzrsUe/TKr52M3MP4qFWKJhdzs
   sMKubfTPoRtOZUUyojMKP3oAaOQfmCNpaRdL79SeD3VaOmdI0Wh92vrDocqyBosmuYKz
   6ewdzoS86XhuUh/u3QqiVti/ne0zM6AJYJ1sYC69Sut4wteiC9JXGMelECnfSF8KWBfb
   FtSvo13UpwPmpaEizHitIYfp7qs42UtlSRg4VJB7SumJqdZCDSAtEAMwF+EUtFinuDTv
   fjeIaVrA+e5ZuIDqdVuM/auo3Q1nvMIcgXnUMH1TaBsqnpL7k17eQWYfNJ+d6txCa1wc
   L9PR6DYWiIlH31wlLrL/mx96zfde4vbXwYTp4ZN+obhB+mriLhumS8IQJQrYUqtHadkf
   j4Hww+fDJG22YMx6tWz3uMM8hz0a4mehAGqZA4e1Lxr1IEt11LNyiyr+V5UGKqH1thbb
   YiM1togpy97/gBQU9fttUSSFJWXV6ur+w9sPoAAAAAAAAAAAAAAAAAAAAAAAAAAAMIER
   cgIw==",
   "dk": "I1aOiyNL4u9RxKOoXuilm/hu+nWe2gZBV4UlDMZxwuWBVM6kJ6Vh
   bXRJfrzaaThca0RPFwTQJuMWKDubFKtqWQ4CMIICCgKCAgEApbr5MMG6gS/F+7unlFtU
   aJIfMQD7rFXd1LVFC9ARiqNdbQpalpwM+H+YV1Ekr/ZJQ6cJlYzE0mCGU2+ZZAH6Psd8
   GezM4uQVXdXAaNNs0Cv6XdS9xDkU7ENhUKHb77UAh7h7KJqUFI4uVdVDbHnkY3yELU8M
   p8iViJ6xggNWC/LbrvvexQ0CaORikmxt/6023YmnNnnijWz7LJ0CFkc8KvrWkxl2ebdq
   Fiz8iamRyiih+ojUHYHnOXFMWz583OnAxLvjDdMvhlIjGo9eB+M/FYFS1ogCtUH+D+bM
   szIjxPc7MISNxn4tdJF81CYDC2QvZX8/QXgyQedkU8vCykc0KNOmTL3CK0FtnQwkw+BQ
   qjExeHsdvHBP/6ue+3UpXUOfuf/IJ0f0ZkRl44fX6U0XqJyjUhJHMsYxZHERJrkWETQj
   CzfSYWzxV3T0sVYmrMfnuqWUo0v5Fl2qOcPLRxz3XU8qob5D6PVVo4boXRX+N0VoKAmS
   y+IwTlWm1UbNWJ0hc+kt1Rhzy9a2ENzDZWlMimNPufERSpN7lP9FWQQieLmfXGVjBACv
   cEigUZaQsARLx7l5zDCNyPYSG+wmm6ZyH0Hgvxu/4Ac1Iw4nKKVcaCtcecpNNxACTF5E
   pc+XVGQlMNKDi8+AYdY3CQ9xdFtXCMzYIlrT7R23q5C2W6OKcDUCAwEAATCCCSgCAQAC
   ggIBAKW6+TDBuoEvxfu7p5RbVGiSHzEA+6xV3dS1RQvQEYqjXW0KWpacDPh/mFdRJK/2
   SUOnCZWMxNJghlNvmWQB+j7HfBnszOLkFV3VwGjTbNAr+l3UvcQ5FOxDYVCh2++1AIe4
   eyialBSOLlXVQ2x55GN8hC1PDKfIlYiesYIDVgvy26773sUNAmjkYpJsbf+tNt2JpzZ5
   4o1s+yydAhZHPCr61pMZdnm3ahYs/ImpkcooofqI1B2B5zlxTFs+fNzpwMS74w3TL4ZS
   IxqPXgfjPxWBUtaIArVB/g/mzLMyI8T3OzCEjcZ+LXSRfNQmAwtkL2V/P0F4MkHnZFPL
   wspHNCjTpky9witBbZ0MJMPgUKoxMXh7HbxwT/+rnvt1KV1Dn7n/yCdH9GZEZeOH1+lN
   F6ico1ISRzLGMWRxESa5FhE0Iws30mFs8Vd09LFWJqzH57qllKNL+RZdqjnDy0cc911P
   KqG+Q+j1VaOG6F0V/jdFaCgJksviME5VptVGzVidIXPpLdUYc8vWthDcw2VpTIpjT7nx
   EUqTe5T/RVkEIni5n1xlYwQAr3BIoFGWkLAES8e5ecwwjcj2EhvsJpumch9B4L8bv+AH
   NSMOJyilXGgrXHnKTTcQAkxeRKXPl1RkJTDSg4vPgGHWNwkPcXRbVwjM2CJa0+0dt6uQ
   tlujinA1AgMBAAECggIAKG44pIBec22oKwVYmIS/TtN28ImA3EYGXAHs2jjkTqIUBKnl
   96ASOf1GuOZ+wL6gmPSDDgzNZ1VM78Xl8dPZrL8Vs21lfmSOIdonmmsZvJ898O4ZbWlP
   hWPatcUG1q+ddX637Ovo/CrDewUP8cK6yNpzlGoYeEYi1LWCMGmH8FpK5aFkc0X9NIGi
   2n3BSAKFw/304QFTF5VioTucarruHr4a4r/vezoXk1leMmc/vcWz3l7LAHfUZNsS+Z+A
   7pPIBzae6Zx/l5EqJyyaj+oMVb666sM7heSXimGPxpeQylhWBDwSKj5V8H4dqdOsIndK
   aMRmNh6QhCti+l5XIunD+1yIwWU6OB4TGPR6jhoyvABUlPx9zJ6yCBp3gpwJzGuSRi93
   ntv4hPgl5DhsVN3vE1s637PU1/xfVjod451UEEb2k6NmD91AF/6I1WweoLDOdgJq4CLl
   y/ydofJHpqhbMxPcBZ+xGZAb04yyGBRGUdcMEvCF2uRudHIHV8i7QuKhXcF10MIQvzi4
   exBZrS52wMegfRxz2mfKh3ppOaYbPtDtUzDRsBogqFR7Gn18EYMvdKRk6Tl0g+jwrGuf
   iXY2R7LC7GHGXhD5ozZYhFkT5gxrA2MD14afOfabGtpDF+dS21SH26W+4Q/N68oBfpo/
   GBZkjZy/BDGHoVIJH9lfivECggEBAOiWKBUYwEFrk93wRnj18qQovxhsE+IEbf6ceuIF



Ounsworth, et al.         Expires 19 April 2026                [Page 95]

Internet-Draft              Composite ML-KEM                October 2025


   YakPHhVfYMQdF/DnZ0bJJiMW8c8e7uB/Q3g3q8mAxz2k3L7m4dT/Y6/m4aos/vpc5r9F
   HmnASQ+8cCbWNK/19iu0sHE/9rrtz3Wrl60fIl8s06FB9vtMSo5wPLNsv1Cxz3BLTx3D
   2WGaG++fCrvpi78DLTAM1qsscZmJsqP3921xPCjQ7v+dHsmXmAiqQ8XeBWNyzCuItbk+
   8BIEC3XDulsWiXlgqbwc3ah74fXlTtxD3yLReeEtWyDz8h/jl6xRjzJFqGNkUhISr+Ue
   rNjjyhCdVdFwcNi01fbP/mSkrJTTZisCggEBALZp6FueQIgO/TXVqE3JKiXX5gKDZd+4
   yklLDSrdI2tySUQMMFQzAfhfOVnV3fbD6W2Jl6un2YI/4FdPViTKVYW2tTw9c2fbjpnF
   Iq78W8l/Vro/A/+NboSOfJeuvodLlkXhjKiqLLGZdpxGC+vPsKtKuzKkWEy/Wa4URLcZ
   fhCF8wxNMK8TkOFELma3LP1LO8sI6ZlE37UDoyBNgiLARen1fqf8ELTvdIJCizY8tMKF
   d31kefV0a+v80EgUiCzwZvKJtFRiYyg5OCDYEHT/L65pDqxa700I1cNTY7+EwkYh2B6g
   aFdcCXPVX1pFiZFHdtEv6FAGm+owtanyyFEDsx8CggEAUrf0kWw4FAw6jphBuAtgvFlx
   fTIS8DM7G25zlabsUL/7pwZA1/6w4RCrflVTpu8mGM+bjWQ1jq/d/NA8DARyLcLXVnVt
   8sVeRLO0Cz63Ihdm9Z1ZXqtaB7XvDxWe83RTvDNPgLPLMMJSM1P7WXYL3jIjsMQ1T+tC
   610lvYE/kWR3QtLAoSG6BcK+go5RESIEFC68uiwYSs7aJc6uxNGc37dPCMHMjU3I2GwV
   pm2L5Q6S5ni8iKGFqCKgIMX3pSWixvRF6Y0qmB1XA6kGHvhUh4GQozEKU/HujsDW1IY9
   M1fqx06Kkbrrq8T5HDoHR1ltiAtBVxEZd6oJg6m9Z0C3+QKCAQB1xGReGgphjQPO6NTS
   +2f5rKxzvO9dg8kdjpW+sax3Zv6ELzZYdeH0v02ggSHfedZPgMBp82DK5YBp/e+IqxSR
   0kap0KacS7SB9DMTNBvyOAL/FUX4jA/pBrDLoOajJJqtHRQZpFxcgM6Bz/tMT/cob4Py
   CwZy7irw52cBqzSnaENlEsS2k3Q66zDl4abrFNJSn7to131yORns9f1pgCbjCDqwK12B
   4wKeQmXsKz8sQszFKMRQQsyWO88gahkMolxkg6Dnxelsg5yIH9ZoIoRfHrZ5cfADFQwl
   IcZJVGW0r47/HuKeW+5CWWRJPJG3OKMuJLbgS5QHm1D9mp/XJgNTAoIBAQCAgM8w1CrQ
   TSAfmB+TMNMn28rSjmn5bcTsfAlJ3vTGtHHLuD6QQY1hfymp/bkiN2mB7w8d2jcEjIpz
   tJj9+6Wz8VpeeoEJamyoGWmT7UCKu0L2qnJcr3284Rkw5Wpg0CPm34xWqYeybrvhFFSB
   J2lnDQXK00jBfKIMMDc8lapVk2RJRsLvQvpmNMS8PSvP/g/1yIFg2PP+lkkG/cXyzQe2
   83k12vXqGAXzfRSZRzqFzNtuKQ8L0qqHMjd3wFfbzDQzFm1cDyKKYbUz6FlzVR4wSGtn
   sSAWILYy6QOnAxTNXsJTMD5fZJapVsbzz4JpTGZFEAmqMy9B5Y7Nn1yjbe7z",

   "dk_pkcs8": "MIILkgIBADANBgtghkgBhvprUAUCQASCC3wjVo6LI0vi71HEo6he6KW
   b+G76dZ7aBkFXhSUMxnHC5YFUzqQnpWFtdEl+vNppOFxrRE8XBNAm4xYoO5sUq2pZDgI
   wggIKAoICAQCluvkwwbqBL8X7u6eUW1Rokh8xAPusVd3UtUUL0BGKo11tClqWnAz4f5h
   XUSSv9klDpwmVjMTSYIZTb5lkAfo+x3wZ7Mzi5BVd1cBo02zQK/pd1L3EORTsQ2FQodv
   vtQCHuHsompQUji5V1UNseeRjfIQtTwynyJWInrGCA1YL8tuu+97FDQJo5GKSbG3/rTb
   diac2eeKNbPssnQIWRzwq+taTGXZ5t2oWLPyJqZHKKKH6iNQdgec5cUxbPnzc6cDEu+M
   N0y+GUiMaj14H4z8VgVLWiAK1Qf4P5syzMiPE9zswhI3Gfi10kXzUJgMLZC9lfz9BeDJ
   B52RTy8LKRzQo06ZMvcIrQW2dDCTD4FCqMTF4ex28cE//q577dSldQ5+5/8gnR/RmRGX
   jh9fpTReonKNSEkcyxjFkcREmuRYRNCMLN9JhbPFXdPSxViasx+e6pZSjS/kWXao5w8t
   HHPddTyqhvkPo9VWjhuhdFf43RWgoCZLL4jBOVabVRs1YnSFz6S3VGHPL1rYQ3MNlaUy
   KY0+58RFKk3uU/0VZBCJ4uZ9cZWMEAK9wSKBRlpCwBEvHuXnMMI3I9hIb7CabpnIfQeC
   /G7/gBzUjDicopVxoK1x5yk03EAJMXkSlz5dUZCUw0oOLz4Bh1jcJD3F0W1cIzNgiWtP
   tHberkLZbo4pwNQIDAQABMIIJKAIBAAKCAgEApbr5MMG6gS/F+7unlFtUaJIfMQD7rFX
   d1LVFC9ARiqNdbQpalpwM+H+YV1Ekr/ZJQ6cJlYzE0mCGU2+ZZAH6Psd8GezM4uQVXdX
   AaNNs0Cv6XdS9xDkU7ENhUKHb77UAh7h7KJqUFI4uVdVDbHnkY3yELU8Mp8iViJ6xggN
   WC/LbrvvexQ0CaORikmxt/6023YmnNnnijWz7LJ0CFkc8KvrWkxl2ebdqFiz8iamRyii
   h+ojUHYHnOXFMWz583OnAxLvjDdMvhlIjGo9eB+M/FYFS1ogCtUH+D+bMszIjxPc7MIS
   Nxn4tdJF81CYDC2QvZX8/QXgyQedkU8vCykc0KNOmTL3CK0FtnQwkw+BQqjExeHsdvHB
   P/6ue+3UpXUOfuf/IJ0f0ZkRl44fX6U0XqJyjUhJHMsYxZHERJrkWETQjCzfSYWzxV3T
   0sVYmrMfnuqWUo0v5Fl2qOcPLRxz3XU8qob5D6PVVo4boXRX+N0VoKAmSy+IwTlWm1Ub
   NWJ0hc+kt1Rhzy9a2ENzDZWlMimNPufERSpN7lP9FWQQieLmfXGVjBACvcEigUZaQsAR
   Lx7l5zDCNyPYSG+wmm6ZyH0Hgvxu/4Ac1Iw4nKKVcaCtcecpNNxACTF5Epc+XVGQlMNK



Ounsworth, et al.         Expires 19 April 2026                [Page 96]

Internet-Draft              Composite ML-KEM                October 2025


   Di8+AYdY3CQ9xdFtXCMzYIlrT7R23q5C2W6OKcDUCAwEAAQKCAgAobjikgF5zbagrBVi
   YhL9O03bwiYDcRgZcAezaOOROohQEqeX3oBI5/Ua45n7AvqCY9IMODM1nVUzvxeXx09m
   svxWzbWV+ZI4h2ieaaxm8nz3w7hltaU+FY9q1xQbWr511frfs6+j8KsN7BQ/xwrrI2nO
   Uahh4RiLUtYIwaYfwWkrloWRzRf00gaLafcFIAoXD/fThAVMXlWKhO5xquu4evhriv+9
   7OheTWV4yZz+9xbPeXssAd9Rk2xL5n4Duk8gHNp7pnH+XkSonLJqP6gxVvrrqwzuF5Je
   KYY/Gl5DKWFYEPBIqPlXwfh2p06wid0poxGY2HpCEK2L6Xlci6cP7XIjBZTo4HhMY9Hq
   OGjK8AFSU/H3MnrIIGneCnAnMa5JGL3ee2/iE+CXkOGxU3e8TWzrfs9TX/F9WOh3jnVQ
   QRvaTo2YP3UAX/ojVbB6gsM52AmrgIuXL/J2h8kemqFszE9wFn7EZkBvTjLIYFEZR1ww
   S8IXa5G50cgdXyLtC4qFdwXXQwhC/OLh7EFmtLnbAx6B9HHPaZ8qHemk5phs+0O1TMNG
   wGiCoVHsafXwRgy90pGTpOXSD6PCsa5+JdjZHssLsYcZeEPmjNliEWRPmDGsDYwPXhp8
   59psa2kMX51LbVIfbpb7hD83rygF+mj8YFmSNnL8EMYehUgkf2V+K8QKCAQEA6JYoFRj
   AQWuT3fBGePXypCi/GGwT4gRt/px64gVhqQ8eFV9gxB0X8OdnRskmIxbxzx7u4H9DeDe
   ryYDHPaTcvubh1P9jr+bhqiz++lzmv0UeacBJD7xwJtY0r/X2K7SwcT/2uu3PdauXrR8
   iXyzToUH2+0xKjnA8s2y/ULHPcEtPHcPZYZob758Ku+mLvwMtMAzWqyxxmYmyo/f3bXE
   8KNDu/50eyZeYCKpDxd4FY3LMK4i1uT7wEgQLdcO6WxaJeWCpvBzdqHvh9eVO3EPfItF
   54S1bIPPyH+OXrFGPMkWoY2RSEhKv5R6s2OPKEJ1V0XBw2LTV9s/+ZKSslNNmKwKCAQE
   AtmnoW55AiA79NdWoTckqJdfmAoNl37jKSUsNKt0ja3JJRAwwVDMB+F85WdXd9sPpbYm
   Xq6fZgj/gV09WJMpVhba1PD1zZ9uOmcUirvxbyX9Wuj8D/41uhI58l66+h0uWReGMqKo
   ssZl2nEYL68+wq0q7MqRYTL9ZrhREtxl+EIXzDE0wrxOQ4UQuZrcs/Us7ywjpmUTftQO
   jIE2CIsBF6fV+p/wQtO90gkKLNjy0woV3fWR59XRr6/zQSBSILPBm8om0VGJjKDk4INg
   QdP8vrmkOrFrvTQjVw1Njv4TCRiHYHqBoV1wJc9VfWkWJkUd20S/oUAab6jC1qfLIUQO
   zHwKCAQBSt/SRbDgUDDqOmEG4C2C8WXF9MhLwMzsbbnOVpuxQv/unBkDX/rDhEKt+VVO
   m7yYYz5uNZDWOr9380DwMBHItwtdWdW3yxV5Es7QLPrciF2b1nVleq1oHte8PFZ7zdFO
   8M0+As8swwlIzU/tZdgveMiOwxDVP60LrXSW9gT+RZHdC0sChIboFwr6CjlERIgQULry
   6LBhKztolzq7E0Zzft08IwcyNTcjYbBWmbYvlDpLmeLyIoYWoIqAgxfelJaLG9EXpjSq
   YHVcDqQYe+FSHgZCjMQpT8e6OwNbUhj0zV+rHToqRuuurxPkcOgdHWW2IC0FXERl3qgm
   Dqb1nQLf5AoIBAHXEZF4aCmGNA87o1NL7Z/msrHO8712DyR2Olb6xrHdm/oQvNlh14fS
   /TaCBId951k+AwGnzYMrlgGn974irFJHSRqnQppxLtIH0MxM0G/I4Av8VRfiMD+kGsMu
   g5qMkmq0dFBmkXFyAzoHP+0xP9yhvg/ILBnLuKvDnZwGrNKdoQ2USxLaTdDrrMOXhpus
   U0lKfu2jXfXI5Gez1/WmAJuMIOrArXYHjAp5CZewrPyxCzMUoxFBCzJY7zyBqGQyiXGS
   DoOfF6WyDnIgf1mgihF8etnlx8AMVDCUhxklUZbSvjv8e4p5b7kJZZEk8kbc4oy4ktuB
   LlAebUP2an9cmA1MCggEBAICAzzDUKtBNIB+YH5Mw0yfbytKOafltxOx8CUne9Ma0ccu
   4PpBBjWF/Kan9uSI3aYHvDx3aNwSMinO0mP37pbPxWl56gQlqbKgZaZPtQIq7Qvaqcly
   vfbzhGTDlamDQI+bfjFaph7Juu+EUVIEnaWcNBcrTSMF8ogwwNzyVqlWTZElGwu9C+mY
   0xLw9K8/+D/XIgWDY8/6WSQb9xfLNB7bzeTXa9eoYBfN9FJlHOoXM224pDwvSqocyN3f
   AV9vMNDMWbVwPIophtTPoWXNVHjBIa2exIBYgtjLpA6cDFM1ewlMwPl9klqlWxvPPgml
   MZkUQCaozL0Hljs2fXKNt7vM=",
   "c": "wEir612Wfw0ChFPm8mg2Zdsrr8k2DuADGR
   VVLsbxqSZbwRteuzjUEDxzRldCXhI3M9SYKOr68jYNtYvtsd0fTylCw8O48cbUh695dO
   B96wnXpgymu6j04Qfdo4hvm6y3J6KuJqGjn64YFxdYIjnnVS/XO8gsqAacQDw+NSkWgB
   dqXSN6CSggbFwiGq7tNno29Yg6HxJCTcRP5KOq14CrLOICxroLUuQBPAOqoxnyaKcyyS
   vQGVTrDBi8ZmhafUldSn8NsCqQycxZWwvMqEoFBKbpMsXUf1GBRPiqCHOuZNZ4LKriLu
   lb/4vUKMB1JaUGd7oxFwD4S1CQ+niW/I23MFz/ZdJyQqueG1kdUmigejDkck4Ci0CkVc
   JeADGmiYhBikrqDyNTUcKo5kQ/lmwbu0nc+AYDg5RhrLDUgOGZ+qkrMU8geaUkwyjFIs
   bwn63T/zJIQYfUPqFM3LnAtDjqyY3bfB8DYOPN5zZKTjexDz2TYmlSbkQXKD9rxrntII
   4IZcMP9qU4M1elWFIiGJNgtdG6DRTYoZ+2KpCzwlbiv//KV/ew12lcCnLSoi5fr36N2D
   gdJ08VG6ZZW98ED3pYJnrGlqtt7hKha78Hw1jvSShY//aTy8rlIWmX9SDgQZ74PGEb51
   45GCKNffQ+VPT2tFd3JhNoxbeuENRR2lKDs0WjEIofJpA8iJ3wUI6BfPdRTcog3+aWBj



Ounsworth, et al.         Expires 19 April 2026                [Page 97]

Internet-Draft              Composite ML-KEM                October 2025


   pG1udx8TyERPV0jdKEeufigjn1cqTKBBWoOCHatD2awAUANoagCbpRjWTewOzgLkPQEv
   ST4emZ7CzOUbWoqd2vxHmal2vqIKNnq2QlI9qO4umE/hLBA2qt9JI9Y9iqaQz2UWxd3X
   fiPAEIILm1/VkitAKXu6YRVIq9F3PonrLs6J7LKiJGkkysBoVZUxT6rIwUw1gU1/vuN6
   KHnb7D0MV7NJyaG+cks7jXLxy58GxBcMaAQnNQSV+2O1ShugZikoFgEggTR9Zyz9L6RC
   r/8XpsTBtaWkopw9nHQrDW/Bpn3yzkC+A2K5GoCPLjP345ihIdu/gVqKAxeqvVIHa2lQ
   JT1tBn4JVArtoRPJRvUPNB/i0zXnS5rMcm7c3cbmt1IqoGNPYgSy3PKfDXwdMvBL8s8a
   8dNq4t/Bi08eIXP9dDtvMzR1sFWDjug8w17o04QPdVDx+NxHsgyYXxURh7/OjUqQR9R6
   K7Bzgg8yPaWMGpihFPsUZDdKDeId7HDLRGWCeJR0c4oDuzShOA2kvRzGy3wlHVq10luI
   2wfLk0cOUf4CWclulMFKWOUZ+yCtrjJEjo6ZV3USaaCaQGeGDd2NQvqiIlAH/jM5Nl1n
   vr42qmdzTJV7HuRUfI93clt4JHS8e1g/NtI65C81YHwERsJy94Tb3qNDmYmW+Ks12bWr
   F2YokvJl1lb6nN6Z3I1pJ8Y6i6nchXaZnh89UjJfCeSKkjHt1I+NLrH1Z0T0wvHyeBjv
   k9IlR4nmJFpYyIGyeybhuSh0q5VN8RTv0ujxjHvwyighR9vqgoOV9feaVoVFRzDWH6Dk
   6+bLng+A+hUtEhNs5pxgLl9WWZnTPVCNX5VNVNOq6LxvpQiNwI7iCSwHRPegZ6VwyJsL
   R/gQqli0BTzj+0FzO+8Isy8ieRgAUq8+117KYHC2Z4/+BkkEAE4C3+eg3glz/dP4FK2V
   S1pPLSFo6OBZQjMQOK15xq94TZPx7XRbT34aroMft+wYCjnoNcAWrS2MmoqnwbdEdWib
   7vHlUITj1Fso9P776nnzhmCl9/K8nu/o+/kPmvUfBG839t+qy6vfoqzdmzm/LhIPhUOT
   oMk9PvcK9zTpAlLBcJDLCA6WvlECKX6HWRSuATevUgfjk3Je2l+91Y3Qf9egp4m/P56S
   PdKcctS0Ue7zYew2K4yTxBnaO6YF8UzjCZZeQh07UuSH/zRimBsk5sGAJK9GZndVJ25l
   IKPKtE+p2LJL6z8RsU4Oa/m+TA3mDWHv+bPfy/Q29YKIv4K8ZJ/NtzDOMCzM3A3W9izp
   2rV2J/kH58/9sD/0HbPqj0U/BPmluvU7r9Le7EY7KcIAaYiOoYcLGINCbgCdAlHjiYeg
   oHI+gEvD1Ew8ZLVhG2kE7kCXRbFDfXbATGai8slf86c+ftIksZMP0kQhryNA==",

   "k": "0/FgWL8KgcARSagjud/Bj+qimdtdzbLC00w2j1d8qVA="
   },
   {
   "tcId":
   "id-MLKEM768-X25519-SHA3-256",
   "ek": "tWilh8N6ILorcah07Ec+4QwdvRu2nv
   qSVPSyaIqSowEqGmFth0xt7DEwarwRTpmRkNCJyNlLftNPDDxoA7qrn0mjUBGhthw6Xm
   yzDlqOpuikCEKMQxMM46g34pI6oKFMdVAD5QM5ZSE6tNq12tS7GaEL+ugMDrQUtCJhnr
   qFJhkI8iPCcKk3yCxgsTGR/nq8pPSI8URCeYBMYUdqWKLEmgMlfgsQ1uAUMuVKdvEjCz
   CsGdZUFgWnxqY8dsbKvqF+tZRMPDwQ+DNBKFHHRct0PzkiTjYg5+RYPdQxHLBa+AusYK
   d7NZZL/1uwuRXOCrpR8/kIJsMJ+pOzA/wpfiSrIzaWohtqhfpNkhmt45jAvVVGjBFANe
   pKt7eWYLKBxMaZCzq2EBB2MBHBmXsrj+FgjbKEduKUPuKWU5U4kZVzu4VL4aAkhFk2nb
   xWRwqABoxSDTxdtLtR1dBK/JhSg3itiFVDpTCJfskmj3JrT8Ref5JocExJzNolUElhEv
   XHa1dxFZmzLpu1OzbBTzzPSSSfH6k7WYTHCdE9WOmKv7JvBDrJG1QzuTKXxJKrbzzLL8
   RwhKZAU9hMZVswo7nOhQipwPWTb0x4wyxcoud9SpQ42ApbzhBAvArBccd1ykyJBOgRKn
   rAp9Aeu7kjpvwpB/eQl7xriJoTatd/L4VSjfEngFBJQTUe4HstlXyVSjNxZbCT6FeUq6
   G5pkWjm9VxNUZFdasrSgWtPtQycrJpx8kCGGErhDEJ/6ZhLwnJyKwcaTlgostkZpnPM/
   kpEOEjgaUnXJtQy2iju0E8uEPF3PASz0fAjwPBToouWpUZNSN2vsk1RxYnWEB7CAkc7G
   C+XzNsQwJVfciDaNyD1wdwqtp5UoZsHAYId5RNsdimcRADeWeUMiygFkDFi9in99lOmZ
   QNbWsC41w4QVAnC3GbehW0JtsgvTpkoIbA8QaowHduZ4ZXsHCo2qoeYARoOuOOI7u2De
   U2CZAR/TcvdLYGlqpHn+ZifCuf29Q2IreadnyAKCgF+2iBH+lD2FyuQRSu07TKFVV2mj
   gCY3eppLyTb8gOVrmdaszIg/wECSSMDCc/QISBR1KBF6IluZxLljg5C5N3x0Em7lt+45
   vGI7x2YaBsHSqryinMPBE0Y5GXW4WxVHgdX5Re/dUFRkgy0vwnuyl6zmRZELVjy8pt27
   ULp+S2qodinYIrHCSaYXpmuLJXlWSHTIee8PubytdsGZegg3kseqESDLY0ZoZ/G4kl9p
   IdujfJ1ms+lJut/OiooHtdxmlld9HLY4EuTTdVhiiCmSwWEiQj33s74lA3RRpQBdJIKV
   g3fIAJxpNh2BcDuGaJ8ata01ofKIlm11XECrXGFmIPbquIU0xahiOBVWlGvNECqmkyEy



Ounsworth, et al.         Expires 19 April 2026                [Page 98]

Internet-Draft              Composite ML-KEM                October 2025


   GWwBKyZGNv1ooAMIFXGltxQnOA9ryQ7jyOwSyOiEibd6xVFGO36ht2l2lLjaaFJTcMn1
   xgf4AhIiMvZxpowQKYZ8PDGnimfeZVbfGiSvZF/sxqQaWSH/WAQcQq67uVuGwPR2gwHt
   qd9hYJAesYNZaJr5Z4suCh9kGm9cro2KvthpVz/SpAReqM7yPLIcXequwcZYHybknf0l
   aW0Upl2ZXcH8m5nas2uCyJwe6QMg==",
   "x5c": "MIISvTCCBbqgAwIBAgIULGj0L52
   /VdBx4nu26iNmVlwua4cwCwYJYIZIAWUDBAMSMD0xDTALBgNVBAoMBElFVEYxDjAMBgN
   VBAsMBUxBTVBTMRwwGgYDVQQDDBNDb21wb3NpdGUgTUwtS0VNIENBMB4XDTI1MTAxNDE
   4MjQ1OVoXDTM1MTAxNTE4MjQ1OVowRTENMAsGA1UECgwESUVURjEOMAwGA1UECwwFTEF
   NUFMxJDAiBgNVBAMMG2lkLU1MS0VNNzY4LVgyNTUxOS1TSEEzLTI1NjCCBNQwDQYLYIZ
   IAYb6a1AFAkEDggTBALVopYfDeiC6K3GodOxHPuEMHb0btp76klT0smiKkqMBKhphbYd
   MbewxMGq8EU6ZkZDQicjZS37TTww8aAO6q59Jo1ARobYcOl5ssw5ajqbopAhCjEMTDOO
   oN+KSOqChTHVQA+UDOWUhOrTatdrUuxmhC/roDA60FLQiYZ66hSYZCPIjwnCpN8gsYLE
   xkf56vKT0iPFEQnmATGFHaliixJoDJX4LENbgFDLlSnbxIwswrBnWVBYFp8amPHbGyr6
   hfrWUTDw8EPgzQShRx0XLdD85Ik42IOfkWD3UMRywWvgLrGCnezWWS/9bsLkVzgq6UfP
   5CCbDCfqTswP8KX4kqyM2lqIbaoX6TZIZreOYwL1VRowRQDXqSre3lmCygcTGmQs6thA
   QdjARwZl7K4/hYI2yhHbilD7illOVOJGVc7uFS+GgJIRZNp28VkcKgAaMUg08XbS7UdX
   QSvyYUoN4rYhVQ6UwiX7JJo9ya0/EXn+SaHBMSczaJVBJYRL1x2tXcRWZsy6btTs2wU8
   8z0kknx+pO1mExwnRPVjpir+ybwQ6yRtUM7kyl8SSq288yy/EcISmQFPYTGVbMKO5zoU
   IqcD1k29MeMMsXKLnfUqUONgKW84QQLwKwXHHdcpMiQToESp6wKfQHru5I6b8KQf3kJe
   8a4iaE2rXfy+FUo3xJ4BQSUE1HuB7LZV8lUozcWWwk+hXlKuhuaZFo5vVcTVGRXWrK0o
   FrT7UMnKyacfJAhhhK4QxCf+mYS8JycisHGk5YKLLZGaZzzP5KRDhI4GlJ1ybUMtoo7t
   BPLhDxdzwEs9HwI8DwU6KLlqVGTUjdr7JNUcWJ1hAewgJHOxgvl8zbEMCVX3Ig2jcg9c
   HcKraeVKGbBwGCHeUTbHYpnEQA3lnlDIsoBZAxYvYp/fZTpmUDW1rAuNcOEFQJwtxm3o
   VtCbbIL06ZKCGwPEGqMB3bmeGV7BwqNqqHmAEaDrjjiO7tg3lNgmQEf03L3S2BpaqR5/
   mYnwrn9vUNiK3mnZ8gCgoBftogR/pQ9hcrkEUrtO0yhVVdpo4AmN3qaS8k2/IDla5nWr
   MyIP8BAkkjAwnP0CEgUdSgReiJbmcS5Y4OQuTd8dBJu5bfuObxiO8dmGgbB0qq8opzDw
   RNGORl1uFsVR4HV+UXv3VBUZIMtL8J7spes5kWRC1Y8vKbdu1C6fktqqHYp2CKxwkmmF
   6ZriyV5Vkh0yHnvD7m8rXbBmXoIN5LHqhEgy2NGaGfxuJJfaSHbo3ydZrPpSbrfzoqKB
   7XcZpZXfRy2OBLk03VYYogpksFhIkI997O+JQN0UaUAXSSClYN3yACcaTYdgXA7hmifG
   rWtNaHyiJZtdVxAq1xhZiD26riFNMWoYjgVVpRrzRAqppMhMhlsASsmRjb9aKADCBVxp
   bcUJzgPa8kO48jsEsjohIm3esVRRjt+obdpdpS42mhSU3DJ9cYH+AISIjL2caaMECmGf
   Dwxp4pn3mVW3xokr2Rf7MakGlkh/1gEHEKuu7lbhsD0doMB7anfYWCQHrGDWWia+WeLL
   gofZBpvXK6Nir7YaVc/0qQEXqjO8jyyHF3qrsHGWB8m5J39JWltFKZdmV3B/JuZ2rNrg
   sicHukDKjEjAQMA4GA1UdDwEB/wQEAwIFIDALBglghkgBZQMEAxIDggzuABw5Aq6H5gb
   47PwidL/8h0vKQeRVPisn9RfGEo9Nm/40AVvSZGdC1n27FUGb2/tRRC+mg578/Hx6gOD
   uykS5OUgXi7opqRJuPChdpWQHQM6pTEgOVVKqKPClxtNHtwzprklT4oiZ/0Ph/vYULTN
   o790ymrp0Mm0bZfHt9J5QES7s7u5zYhUBt9Bjtm16iyTaJ7Jn0tOEKJgFv0N3yPzs3BI
   aOeChOPnHGu4bqyJ5Ex7RqFlO4Q5OD6QmtPYLtYlf1rZB4zjWcQrTwf/EHkqoV4UDmnp
   z7EHaA5L0G6gdwo+X2p3I78n/js/9ptVXokpWjyGhoggkK2prRAMQSKxs3/UE+/gVR+Q
   PRyeg0PbV0kpDAvgzhscOe3Sa5k/NK7VkPGBYjRaegXdYVBQOMqkuIzBH4P7DI/RTn+y
   jaYF5idezbFS+hg1p4zJeHvZPc7gW9/JJ9z/0p0Uy1hGo+WxBQIvnZeQYXC4vEcAsgKv
   e9w5g3RWHeiDJu8tQRobDHdqLWhUe0InACOVqwiR/P3YXOjEfBm6sODBuHyZcWPP6mAe
   xzFrOtQDdhBB8clWS4pjQnjuL6FNiLC7bsRFXpFz4zgOmyPUTQt6HQlRKLVdF/5bVZbf
   R5HIw5x7wfeHg10Q6HFfxmdSiwyzVAys+IUNO5Xdhyazzy9wMG+yPCdPLpO+sOt4aVht
   5z32FbxSfE0R8h8m4zZdczDJxnM5xWMgo3KlmNiVYy7uS0ypb5xf3moZdhQtPtX8nSsF
   qr1S4s1hAi5TvmF2bryxc7EE6yxnKySpqZOkfgSlFPo4gUeDAlhf/vdnD7d6rSr8P/Fi
   2X7fS9t4EyrWvDa98cwVybKJK2jI3jxLQFA2zS4w/zVPlO9tQpJVqiDjYMIhLsBi1vuz
   IEjyQYttpBz9KwhVFhmZs+dIybT43vU0Wi6fjBR7IDssDutuB6LPpAEUv2etkjUsBbZz



Ounsworth, et al.         Expires 19 April 2026                [Page 99]

Internet-Draft              Composite ML-KEM                October 2025


   t8x0cbcw9+wJ78A2iJTFqEi8a1Up0Y22pjmjq0c1Svz9EK8LGFCMJ0gx6YkFnJiGEnjp
   716/9UDS5NpzZjWrDEC48OrMY02NASfy3JzD0Q/ZgOTZ7rjAeszBqL40Ho6tMfJUqSUc
   jPWwHydIx7ty5r+xzsU7vwqSxZbhKKwCOfDikLARA9YJ7djEW5ckcsXi6yiWE24ElGb2
   0MuhlwoUhHVQXLU2DNsgq4GUXE+RZesaTQhJyEJtJaBUr7BxkMAvz4to2m1LtF8Ricvy
   HmHfX96kbRU5YtWPGKDLCxLYyuyqWnv2KHrclhdizZ98q6LwNe+bX5MB+Un1llxGztWy
   7XSRch/JT1SDjUynJ+W1Mbv4nmZjWvsJXT+mvZDz79hJcwo2PxiDrp3ccX6IU4OZjBvu
   mqVYZhsCSR6AyjljJNwdPc14r6dDRdBnab96XMbEbngdQXwkupAdutvcGrDuC6XDeNjz
   VzzGCIv3IMk2tLhTOrp4qVm/cc02O9+h+OwIVgnP6FfswubzXPRXILIuJdBysYvj46Z4
   mHBipeffQfMC4SHQ9yKYFmwa8gKk56xxmkYjFHioQn7kpr5/KZBOF4/Jroyz74O0eVDD
   tNPaenh0jhOOpJG1cnBrwdc14PivvmcljIgwB+uWIg5PUxS8bS8scfYEUlqZDgOlPqmD
   Vb78JnoPWxJ/uwWC1OIOOXH8sgSCZBMzjmpc6CX/UixV1rJKelBCxp+Ece1NeIxiJZd+
   UMJGgFik3gcDABnlh4TYIA47ATYfUzqMdaY5E/TQejzUaUwWTd2Fuq5X4GDyHx0AbQcQ
   cmevcRvYsbXWqWE2qMix4v5C+/1MxmTSTixoeT29UBa5txiWOm3xNbZ1B3kas0+sS5fr
   39r5xspjkXbw0brObJgmdFA/hKBll7dOUs3rsfgsmrjt6XrXDNDT8mF0XUCpxa6SPH90
   KP3GLLop9YM5aI4ayO3fZBIcDnm8hg+7ucBLTI78OCrEPpRZ+gyoMBrIYJ1SlTzvRryb
   28GI/0aj9XqEgMXWsCNeOLwdShjbFmet8fAaxboLSoU8PyAYhQ/mopBBEsxJ6y1Pw3Zo
   GAKWl/hSSpO3oByGFvkMaCyP2cX4LTgmJyEBEck2cfJ6cE3VWZy4tVKgwhq2GmqYjpBP
   MYExZHjKbQ2orRt4LAEJb/SNRUSReKkjx4qZPKofxRA6dZNhduKK5/D1d/EafUnGppXt
   /mXFpqVfyVa/TbOUYfgtx2d1kntJ6h7Dy9Tx4KjegKdy2OCXYLnQ6xiB5B04c9gW4gPU
   c2yt4+QFHQhUFrqORnhGCzOiKByN+TKE0x10ZwW3ClgBmvU9gpZwIetINW/2wqwSUhoU
   JIKodWQKk9wPNqupry80mBBv53VpJ1KITwPlcH5Vm/LYmuR8h5ul1IKpAnGv7LrBEcal
   NxHVsGPDJGGxy8PYBzAex/2uHlzAoYyviIFkvuaJhJauSnlp7amRgvFE5l03ZGW4wKlp
   LuOCDT/ufzzH3haZouVE7zo8/LOMTMDL7lhR8P+jA99JCIlxRIdkZ/5BaXDMgnhtTJIJ
   Ws39er83I3RsErN2ZgUFJMurAmCEi+UH+kl3ljaoBXAGNBnx5jF8XoipFqHiKasry2KP
   gS1M7QmB1d/oKG65NlRdcNLyStkbJ3goig10W40dVP/7N2BTh5alyVYr03/GIv+K/Xln
   rTWZ3huaJzuaoMbr90pQr4x1W6Wc+GHQcQ7wG3L2egc4LLBLq8x24IA70EsPosqInGeO
   h/wPmOjOpO1OKMIOzUg27MH6ZQ+HUt1o8zzk99mhueZF/DRVzXnFiN4LlptBBfIkbJ3k
   ktaYF0S/D9f8kLntD52UDnSvR+3uBCQWKFKgAiPwflQ55Dk2687SJFPlM5Xbwvk6CDtv
   9/Jhram+vXTettERL9KbR/fY3Znksa+2BBbvFAc6zFhrSP7kKnzcgn5M9OrSzZ0i/z9e
   5Rbws5+5Dyc90BX9OEmLkUTALlvnVKvpSxFp2LlIs2pRj5T4L3bCvDSz+p4d63vUfSre
   V7ylhJVlaj/hsO3oGqdeZHvE4AqGLGmaHZPlG4CJfKk5aF4j75a6Mjuy4bPA4cm1/ZEB
   V9GwhlbVhJT+uguaJ/TMvFMxWQA4yv7W/VTKpkr9RYauQs1ViRHOcM21UXF6RyTNztrC
   JS0SWsrTVEniaO8HZ145ry9jxx1r2d+74twnDQpQBXAd5LqWgkOj2nqkwj+Awevc+0zB
   9S+QJvybYH3IDiLlJnuw1FLew/jkkRWEtE0yrRlyR48QRLh+GGU7c5FQGjbDuoZvUVWv
   ii8g+KYwnLjABz2yLEDmPRFFd4K1tILo818mF8bm3sCadEHOSgBguD6C4socdXw9rvY7
   O8jtXeUX6naoY9mU6GxqaZk16PYZu4okNQP8Dmmxt/9JtP+hNpdC0To9m3xGF9RcD2Rm
   0dT/28LA1v64FKaGCEO+1eTI+ngEM9s98zxc1T5nX49jXQqy5lEtr5oX1z2OFkIQfreg
   ZwL887dsVfy2NKqWRWyLSijItDUpNLRBJ96Fgx5kR2uRDhlu4V6c+zVOirul8PycMxiI
   kg2h+yDxB2FpE8wMfYIcgLrrpgeLKTxHTG1BNtz15Wg2ZQTDoJf7D+4bWqGmBWsb7XZ/
   QrEE/PxrejszpyFkPtg8XOr/xQnCQ/1+3t78YQvpfVqEZRwcnW28B75QQaw+/S08je90
   taXi7zxd8Z3pL6LjUUMM/EYZLkSZLOogZ6Po3EU/kvpWh4JcDs7nh65URYH/HO6k9jAx
   PSYizyRU18cQWBKoaRFpniIrNSFCQuBLfVagDEF/DshvOMFAbDVwkutjAX5lP33Jyavd
   Nm9XG50xF0RcSgUma8SpaZ2gn5k0sdKwqMNmXdOVpazmMBn/7u5b3K04yB5yuAd0CVuz
   Oru3QTcOlt1/3t2MmNqTzi4kWYKxhqAj6JZmFuElyYH37lkSmrAk5vB6KQENh0bLETHd
   8NRr/0pA753guoExjjYKQrElyFPD8Z2ooU38qhaIsfOMSlZx1iyLSQuytE9ZbRN3VDma
   rF/aqZQIuAOC6sYpYpO7bL61BOG6o7Bie49vyH0FNY18x6KJoG/5E3RJ/wa9OPWPHiI6
   1yW06/zDQSm2vt6fiWLzU3483sRqW84hg/paMSh3vpodc87OlXd6c3JWgLcd557xGi1a
   /JzUnC5Eq+IPtLRsWlkcFfTxUi/rIWtMvfda10KnCQ59ELvQ90C4iGkk1UX6wo1uXL8J



Ounsworth, et al.         Expires 19 April 2026               [Page 100]

Internet-Draft              Composite ML-KEM                October 2025


   NgpVqidoVD00UkrLnSXQJdAWviQCT8IhIiKf3VXscyGVyBsq0tQUoijRTBBs+HjJ+l21
   X4Lml7tiy9JkhBksxbt439fSBu8Ie45tmsQ4PGCg4OTpTs/cbIkZITWyKnaWw2AINDxJ
   LhZ+zRE9hdZCzFxoidokUMnaxvPwAAAAAAAAAAAAAAAgTGyEmLA==",
   "dk": "TraA1
   I7btTEvy0R6rIjMdOH69hgIGi6UDC3Ozh5f/F6Y2g9nJC8t2RBeTEY7HDWMImoQlJau+
   I716mwiApbwXCAA3qrsHGWB8m5J39JWltFKZdmV3B/JuZ2rNrgsicHukDKwJ5gbQezdU
   3IdUvJ9121TYGcklFSPamyrwiOpWW33bA==",
   "dk_pkcs8": "MIGXAgEAMA0GC2CGS
   AGG+mtQBQJBBIGCTraA1I7btTEvy0R6rIjMdOH69hgIGi6UDC3Ozh5f/F6Y2g9nJC8t2
   RBeTEY7HDWMImoQlJau+I716mwiApbwXCAA3qrsHGWB8m5J39JWltFKZdmV3B/JuZ2rN
   rgsicHukDKwJ5gbQezdU3IdUvJ9121TYGcklFSPamyrwiOpWW33bA==",
   "c": "1yON
   bff1++SBGeXQ+P+9WAW5BY3E7CEYtcCMbETwxW0TTgXv0hPI1xJsDdsjBG6NccEWXRZ6
   sYlFlzi1Z4j+rCal/0CUhH8AtNoBXRKFW4qouiA8v0y3LaOlDglIIwKyPpzWc+SLsE+U
   Ni7lEWSidvk6spW/fD240MrgKob5/FB+J2ei3RnXtGLwbkuV2slESHF29pdlZfifjDYG
   ZNTJj3iEtpO8OfG+sjHERKa7qfF5CVQVJuH4CcKbPSDFAVPIGmuUO7Mxb7srlX2ogR1Y
   JAx34SG5Y0SlEsMEtgysjDu8ZI1qCvPPvZ5Af8BPV7MWAwP90AlRSD9TW3iZ73ChI8YC
   9vQrvgR8kAnqKwhuaLiba4xWEOwf7D6nUC8sW5PNnYpNTRMaOUQqOto9wRb9ZpnXmfvC
   cdR3d3HMJ5neiMUzR9Zpa9Nvezb1iX3SIzgNsSP5jkUeOdgU5X+oi/vyg7AJYXyoPtvd
   K/sqk4bjBeosqzIlKtagvGHLQ5uYbvvcVmltvUjOqFFYnrgo6MWOYaRwcIxJ5MTwNjpj
   5XJfIII0gJja1eJNALSE7Tf2zRiUrmxQK9//kgntsYzr9RwZrscUUU3VqiCoE1fp+u8W
   Q/ZumBG9AZ+PBmddAnieDNsL6YCaz6eKQ62mBzbrqn0rrRHpHsSjnkwUIFmX0WF3/kYj
   0nyeoxIZJ6T08kGg4jkOJf+GGxAquz7ncSM2KAJnNPnaHoCk6/k0E8CEArv1KVAbBzaL
   fAMl9T3RIvYWjmdLqEVtoEM3ZF8q8zt+wd3G/s5rMwCiRke3AUOA5Mi+hcmIovZeVV5/
   RZz6qdQu51ynpRrNbawQIqNIwRivqUrhbPNjLo2m2N5yklkHNUj4r6EjI44tCMG8PUR2
   V+rjWUzO5oVFjLNI516/PQrF/JyCvhvBqnjnahJx+7C71AjPl7kvTd98i1/+/0epOLXp
   9UkUiWQD+s0V8q+a7XXg84v3MjioAgjdu8BtSkCpWcfiRYAg19ubZrKQcCGBl68FYzH2
   FK83FqGXYrd6MxualmGtr/MtRBiKTvzv/XkjObmgxMzf/oD9NpPmxTvCRnORvRLF61me
   efYNqruBW0IO9+HuaxHEHfSAuK1fvAuPfDCWoukJcAYV5+SmGAR6kKM+jwYjGQQoLIOw
   Z5yZ5j3RkjMJaxHkJTPxRkoRPhk30blVwS53x3b6UPIUmktsQ05mCrk6Wj6KXh+v66ua
   /G/GcbEES3jz6Pkhnbuy6IkUcMHvSufFqx4yu80zX4ISv1CbEDF8VqGzh/XPDHOfK8vI
   VYsEeiniYdkznM8udsdhAQDYGlrI25mVZ4BkVALU3yj7enE2GPLJGoPQ/7D6WojJBG+S
   7Y1juhlDO+af3/u1UcliVIszFJFnKswpHIXPBZ1J1Rg1Xz44QsWu2z0gZBifbWN7/wUW
   6WRyh4LIgfgPid5nXmTzpkiAO0UlZTkLq9HGxCGKgNv7pvGT+SXnAwZqytNOFg==",

   "k": "8+g1qPexoY4S4ergOmDWu6AJptSSQRP09X0HJzA8O3U="
   },
   {
   "tcId":
   "id-MLKEM768-ECDH-P256-SHA3-256",
   "ek": "keZN8RVQHsAN8RdsaMWKfaV/TIc
   r8uIpBPtwcNKI+onEYXzMQTVRyZMS80hp46dnmuaynPEYbVB+lxi2KcfHXTeWrBsnOoa
   0cvW59jAeh2hc02Br9ao4SPdcNLhrhdND25OgesqnkWtiZEq5THHCwRu8YorFJmgV6gu
   uqqJRa2eVy1UKqpNXWiooy1aOsUx7LcNEnVgo+cUepNyyYgCeXOIXvnZ3qxScRQwklUy
   jJVBmuXO72/pHWSayTQIdTmsXkpUIv3nHDEZHIVhuIDJEktaFEhFFissALzVHoeo0xeR
   OwpYvG/hCTyMXOUZY9xdvfAAlvYqi1iWScDHOuNcWk6eeNBgeDBiAHLCHtDzIIVatKVE
   s3ZtL6jI5UUGloscPIZdIXela7zIVjOh5+REI58GrS8Jx5UOlFYQJ01Y5yRNhATdnbjo
   j1stpajOoa7UJxYpeyJqJbkqiRpOV0Np/G/kt3DVuvXozcoCzv8WbwsUU0aVFquhhb3s



Ounsworth, et al.         Expires 19 April 2026               [Page 101]

Internet-Draft              Composite ML-KEM                October 2025


   IxxJJxOxBO3SBULWbIrOPUdRqCcbNbLd45QAdQ/h0SiQdQMySjZx0rNUOS7BAAykqIyU
   0H+AQicWl0raUlbUJoRysJ2ElULiIyQbN6FgcRXN3fvoVxbZc04GMvtZbE3YKqeTBScu
   nySWPAORNiCkwQbYkq0PAt8TAGSpDIFWJUwgz4KjIXtMOHrMwrEcZfKBMl5ReGEtDU4o
   lITZSGqE757NHQVOpf+qmLKwcNlm9/jEKO4y+ylCTgyxAtxw0zWhHjbKnIidq0pLLjbF
   OGMdQMPYpFuq6XCIupRO95lUhjhwWjUBc0HAgDYLOcfUWyrrHtvCJ2qKqUvQslrrEqfM
   KMIYbyIho9LIVE8pkzoyTEfFO5EMtijiafkE3j2lUxdHCAZHLveeRIuxVGIBOm1yXqad
   dj+mFGJtkEggs27yLgWZe5aAwUgcX7RSkeuMvc9EO5xlkgFJ6WsalrpY/9HN25ASatNI
   oZ7ulYikGpmUPkWkki2VQ0qQD3YpuEYfLOrujaDI0QOK5LwASoUdyJ3zH6/eFGCi56mL
   EtEs7J1Roa+hZCxyGOtNGaKh4WRqtlRYD0csgY1B5t1kT9RIp52Cnc3CjijnOGTUwv0a
   t7BKzD9EjVudPb9aG2TLJIHSgSkNvtAKanFMIvqqICyuyDBY/akpE3utH8durU0dJkKw
   YWsMZ7ly/9EodOcCf/IKhT5WmNplupHPC2jDCImyZk7bO+dcu4EurgUkQMBU/PGgEE3h
   WK5dc/sO07NNpoLMijaNkQVEF63PJBwcu56YREJGh5kwLe4Ccu1A4EzA0wGheCsCY1+l
   6gyIkUTWlGoaWh7Gi8mQt8VBRLNGc6EQQsqSzlpCkZyKVPkqa5AseOvUT88JALpoIqwI
   R0mlxhXYOayxWbMiZQVssfbB9L1uiRrR0tfbJ3bEVtgAYHHF/Lqc3Xscc4+ZQB+mLtWe
   Ql0gnYAAf60VFVZklpWCjLEk2smW0N/dsRFUm4INSS6BwLsloVAIgXAbLSKYoAecj1wl
   rHmcPa+qMd1Mnbp9MR8Me16I94fcKIH7oLZpg4RX7ju4OchJomJODbqoEdZcv+QaixFh
   NfCDrF0n2sGzPXQzU4O2qnPOJO2xNp93uR8Ub0xLe1YHOugmplbKwY+0x3wIi0cVTX+a
   8pMruGg==",
   "x5c": "MIIS4TCCBd6gAwIBAgIUZNgX9JGFd2+2wknbYqRDQze5gBEw
   CwYJYIZIAWUDBAMSMD0xDTALBgNVBAoMBElFVEYxDjAMBgNVBAsMBUxBTVBTMRwwGgYD
   VQQDDBNDb21wb3NpdGUgTUwtS0VNIENBMB4XDTI1MTAxNDE4MjQ1OVoXDTM1MTAxNTE4
   MjQ1OVowSDENMAsGA1UECgwESUVURjEOMAwGA1UECwwFTEFNUFMxJzAlBgNVBAMMHmlk
   LU1MS0VNNzY4LUVDREgtUDI1Ni1TSEEzLTI1NjCCBPUwDQYLYIZIAYb6a1AFAkIDggTi
   AJHmTfEVUB7ADfEXbGjFin2lf0yHK/LiKQT7cHDSiPqJxGF8zEE1UcmTEvNIaeOnZ5rm
   spzxGG1QfpcYtinHx103lqwbJzqGtHL1ufYwHodoXNNga/WqOEj3XDS4a4XTQ9uToHrK
   p5FrYmRKuUxxwsEbvGKKxSZoFeoLrqqiUWtnlctVCqqTV1oqKMtWjrFMey3DRJ1YKPnF
   HqTcsmIAnlziF752d6sUnEUMJJVMoyVQZrlzu9v6R1kmsk0CHU5rF5KVCL95xwxGRyFY
   biAyRJLWhRIRRYrLAC81R6HqNMXkTsKWLxv4Qk8jFzlGWPcXb3wAJb2KotYlknAxzrjX
   FpOnnjQYHgwYgBywh7Q8yCFWrSlRLN2bS+oyOVFBpaLHDyGXSF3pWu8yFYzoefkRCOfB
   q0vCceVDpRWECdNWOckTYQE3Z246I9bLaWozqGu1CcWKXsiaiW5KokaTldDafxv5Ldw1
   br16M3KAs7/Fm8LFFNGlRaroYW97CMcSScTsQTt0gVC1myKzj1HUagnGzWy3eOUAHUP4
   dEokHUDMko2cdKzVDkuwQAMpKiMlNB/gEInFpdK2lJW1CaEcrCdhJVC4iMkGzehYHEVz
   d376FcW2XNOBjL7WWxN2CqnkwUnLp8kljwDkTYgpMEG2JKtDwLfEwBkqQyBViVMIM+Co
   yF7TDh6zMKxHGXygTJeUXhhLQ1OKJSE2UhqhO+ezR0FTqX/qpiysHDZZvf4xCjuMvspQ
   k4MsQLccNM1oR42ypyInatKSy42xThjHUDD2KRbqulwiLqUTveZVIY4cFo1AXNBwIA2C
   znH1Fsq6x7bwidqiqlL0LJa6xKnzCjCGG8iIaPSyFRPKZM6MkxHxTuRDLYo4mn5BN49p
   VMXRwgGRy73nkSLsVRiATptcl6mnXY/phRibZBIILNu8i4FmXuWgMFIHF+0UpHrjL3PR
   DucZZIBSelrGpa6WP/RzduQEmrTSKGe7pWIpBqZlD5FpJItlUNKkA92KbhGHyzq7o2gy
   NEDiuS8AEqFHcid8x+v3hRgouepixLRLOydUaGvoWQschjrTRmioeFkarZUWA9HLIGNQ
   ebdZE/USKedgp3Nwo4o5zhk1ML9GrewSsw/RI1bnT2/WhtkyySB0oEpDb7QCmpxTCL6q
   iAsrsgwWP2pKRN7rR/Hbq1NHSZCsGFrDGe5cv/RKHTnAn/yCoU+VpjaZbqRzwtowwiJs
   mZO2zvnXLuBLq4FJEDAVPzxoBBN4ViuXXP7DtOzTaaCzIo2jZEFRBetzyQcHLuemERCR
   oeZMC3uAnLtQOBMwNMBoXgrAmNfpeoMiJFE1pRqGloexovJkLfFQUSzRnOhEELKks5aQ
   pGcilT5KmuQLHjr1E/PCQC6aCKsCEdJpcYV2DmssVmzImUFbLH2wfS9boka0dLX2yd2x
   FbYAGBxxfy6nN17HHOPmUAfpi7VnkJdIJ2AAH+tFRVWZJaVgoyxJNrJltDf3bERVJuCD
   UkugcC7JaFQCIFwGy0imKAHnI9cJax5nD2vqjHdTJ26fTEfDHteiPeH3CiB+6C2aYOEV
   +47uDnISaJiTg26qBHWXL/kGosRYTXwg6xdJ9rBsz10M1ODtqpzziTtsTafd7kfFG9MS
   3tWBzroJqZWysGPtMd8CItHFU1/mvKTK7hqjEjAQMA4GA1UdDwEB/wQEAwIFIDALBglg



Ounsworth, et al.         Expires 19 April 2026               [Page 102]

Internet-Draft              Composite ML-KEM                October 2025


   hkgBZQMEAxIDggzuAJBhMQxngk94eZ2BfMGSWGt7gX91rMg4qe1ixTnVrNP+2u+KXFLb
   9KG+jhEVMhL4G4uFIR7A3BT3dVaEwBLHAD/UBzjpuO9pmg8OhUorNwud7uf7hAvi7Yf8
   Q2vnPsT5kVg2xn0wPp51+0fH6CV8B+zxDlTScFNBFuVZrImJ+s0UZ6jp7N0JSAYD8osU
   pagWLF+0f3X6KM/0MMpu2NE39jiRviDvE66o+7pLWwGhTmHxdVhUqMeLNN/bnCI3Sc2R
   yMbYx3Tz4pOb6OOmXpC5Zxtm3zGukzpF7CovGo0vL5K15GEOhr8Jo/IYyFXg/iDzpMXW
   IzzyWkOnPRDaZg4euwhn+exdFAxn0wFyTaJEKn56O+oLOoRWIVzSiKIEIB7EdfH0imh8
   ifs8Scmepgy+hGlGG+ryakUR1Ln1Qxab2qGK0N16xnyOble7vM6kgVDuXGpMYVC5k/Ms
   f2lryCEF6ie+KBjKo2Kfvb2llMGg9SbEZ1guEdb+C/S2U+sS2INMjEOpL+0MTOQchv8y
   bx2g2z8uKX1KoTUp9JZFX7d+KoimR7C6S5hn+wGD9IErUFKYGL3AxL9YosrI9mYueNSY
   zYQrJjU7h6hwIsBDvX/HGLT7XeuzCV+rKKWNL1LC12JfiF6hkAA5/vUeDV7T4IO1699V
   h2D2NKrMsUd+wd2ulhMXq0vUfTVYf6bc4WOnjmwheYq6RqaWQBdlUrBx8IWWUPbYD73m
   YeqQ6VR3uE/6DFJmhX3sTo4aK428UPcLeLn2wlGHygmyzdbjh2ROyC0qqPjOTfZOEUZD
   5FS+WMqryKDkn/d9OJhoG/fYVqtrzVdLqJulVze3l8YcILZgrVkjDegsGUKailUhnop+
   BvnvPxhcP9sK5DiHRPoWNoq4f7HLgirVDGQYI7iomrKoxHrS55BOdIKtZM6rUFnVqbli
   iqMMgGdnCf7vKCtxY/3/SVA2MG4dPyIjxBKuixXN/TdSEvwmPmJEmi+QI2DWRxgiaa+u
   CnuzEV4zaYYnxuTKusHAfb30xtKSi0YwHUrI25JFPg2+L1wvPxHe/AM3X78n6/GWiSiA
   YiPFJm8C6Wx8cUItcIXeRSUGWEn0zv5Ddzmz5uxJtPGeYBc6SUamRxTf3mWPuff1ZuxQ
   0ZeruZRA9r6FTfZhLh+isuKqYBUUR4iV3vBTiaYxjHrLcBxDjLADGw1LU7RWQAd93CiG
   BkudH6rl3Ored66gdxMvwe3kmzBIu4osltI+mtVXNY1WGy4f3WYnG7E9Y6C0ITLZICMv
   CJIaXTUH1BFcVAJf3Or0Sqg0mtAgIYTODQ2rtsL4o42LBsPNltJLFS4Kvr9kqTrN/tdF
   3PX0Zab6fZEp807RxmjtKbKA8yVuVMiwYtJTKWvX92R7s6wYzi3JjMTHJQasXNJSgn6c
   zfOHzeaoqXM2IYcXAdoW8zi5o8qOd+iIKj4EagSaIUJjeyG79BHRPftQudR7yz286Fie
   HS+CKV7pxOu5jKZpifeMxBJ6qn+8Rn54hOgJhkItdygibQpK2ss9izyy2lonaE6yv/eQ
   rRU/e/T+00u4KN4IwE9Nr2dpjBmbjrF99QZxKikljY5to8hKtySzXf5sQWIZ66505wRM
   k1vQ/TfaZvogtADEdvsdGbgOuzO9/AJkuTejGRZqezl/YVTYJIoa+6DyKZ1PBQ2Igx8W
   l95htoZQDXJwR3WbMCrWrMMd7o7lV0pX+TNV1hiHy2yXSj9jvnZaqbKHJn6IR1fKN4bT
   RzBGqHnXAkDDN7ekEhOa+RRApFGk60+W9cP5WkxupDu0ksonIgb6Dbv+go57xZqsICkt
   qxShhuT3kjSyu7obcMEom/Gluaq+w4RznO5K1Aut7qIrSWlan3/5ESvXlXFm0d4W8f1W
   X8+IKk3xDR3/eemNLMvxwRS5Q5KQ/ZEOeAj4GnDNRQhylUUxAMDm6JK6vqP0Krb8YPto
   ji99E+dkqxFwn4s0e3LOq8SaVoAKbzOkZ1j0ulFMyNRWh2GWSVpH5VFbwyhuXP05p9BO
   iGy6o7FtJqNrkhAoMhrq05eXZYPvRsfAb2Yxe9uvxDPJGKTk0oqwml5v1yh0fGgHTofV
   uLJYRj7hvrQYaO/JoKeu43CrqMDIyU6SokjSGezofMiaITdh7MHDQYzIBDuIQe0dLt8U
   q2nWQ87t6s5ZrnshGo9EYqUcl7jEUEF6C0t/EjLcQfnc+wVW8nlght6YRSXUHcAt6lCq
   CBDA2WFIrBYk1i9bAHMu0lhvq0GjPrljFLFJYdUlHinefub78UUk0UM5OzpA0qIHRegy
   hIi0IFJ2j8xW6Eig7lysACF8PBMvwmQrSChgXjsyViwlWH9agP2P81wfOsEARdX8zLMx
   X6M8NKJu6T0E5RJryXeoZlYJ1pgyeXSz9G7yLBuwuloPBXlv71wnoxpUdeafHdAkmsUq
   ZXpr7hUqxLd13liEP4mVxHF34Kp7bDb6YbI+MmD1r2Kh2W21kVu4NvHiyBkROtrKSyuS
   mD09Nm3OKelAKxyBzn1K6MOvRRkpR2A+Tpx7Jn+G20Vovtfx/qxmJQESOQ5w/AQgZqzx
   vD8ekk3qL92wyCqTgFdxEkP2yKa5+N1ja4c8wBZpreulqUkDQApY8j6pYvyP9woOI4Nb
   triQ4z5UI/v71JEOkI6FLyPGeteDndF/8/Isu5AyRvRJWd6k+qfSM42wH88kEeHKhldD
   pjQpoJrhDWmpV+Ogu9KctEEFwpxsKipBkqDvIufucpU5c1Nn+XcIdcu1o27idlGHBLlG
   HTuEGbCUxlV5DHmw0t50oBwUCZmlBStAX24ffspF9tljvHfFBXQYiwfDj9YyOnrv86oP
   9YZiko53zwlmK69EECpAoCMnQlLpwmzHZmEV1rVPs0K2PjInD7MilNBCy0RvvWAvKE/G
   0E9M2iNua1Dz59H7JBwvTSRk2xAz0PU5ATVBCk2inbUWIyVWvAM1qvvXyAoCkH1v7oVg
   BUcgyODDaVPI/b6r9E7v85kE9KHvFszUCN2PP4bWVtqdmjPoaD4iaesc5PUrkyMzBkOt
   xbriNdIMtQ+41IJchhQgigLI/9e/czSE2laKNJ7xCeU8pu9P/o1oyCSEGCKcaMq6liAb
   8BikJfLS5pHmGqgkNJWvK10QDDCyTAd8q6dh+3ZqZ07GxMD3hfYHy2Vb1H4J64J3zeCn
   ZByug4tC/3AwVC6l2msDS/nmrybTtZiEL4HeGDj+I9F/DEpf2VYRrIEwn7Rh9t38SOh/



Ounsworth, et al.         Expires 19 April 2026               [Page 103]

Internet-Draft              Composite ML-KEM                October 2025


   pq9SReNyt8tUNz2kBmFnMYuRohhhFigAFxaoXLQ/FJeWmls3aNSB4ADusyd9BRPzLvVM
   cU8d3JtDD9T1u/IXeDcikmG/xkCO51bRzdOSqDr1T1d51JzxMluPzQydzO9qRxMyBC3d
   n5xJcTNfyo/0s/KtrZP9BCop4BuEG/d+iAOIU8en9Cly3vhM0SN9w9lZZ6txf7miLfKF
   0VQxYvzxDR50nOUEzkoy+CojLUu+alneZUy1n0VScNKH0cJD9CyOYAFUL6u2wmISrCVM
   NNpRYgkV8dekm8CXkukk3PuZXCR9df9772BjzX5QA4JU3grGDv5hog7nPYP1pN7KmSuJ
   xNrOJS44hvp2qXBTf5KuiWIPWlqBt/SmtvmfeoVudOSLoknebDsexFyd7BD2/nwghWDH
   MuiXYphe5GnToAUDnzV6OzZ4qiE3f62mWREY43h9AMr+/z5yVzKDwNizAnYfSv7S5HYC
   kvfUKCV3N1z4NVuu25noZVSp1i84e7+JsM9BVo+0JynnANkg88JNMAGaBOX00aTnFCeS
   OH09JekC/7SkMOpERjsPyreFpanREKiPG4u3EZ5stZNyjyRU6wz5ZRAPVQMDoZBMMRZQ
   8gd2r3aK9XS9HEvihGOl+x7dix652Oe1P+9Ks6bPUrOFRq7G8hRk+ISWPNR2rR3+2Gjm
   yYnS7OJOlItUp0/KZ1Ko6KIMwMd03tmACz2r9bjSjQTcJjgzrpEau/2SD2dMr65Bo4pH
   3spwn+Hif38BVvwPwGHd3ptZfWw9eYzbvCklzJRSNa7wGejbC7a1B0bU+fnHDiTgrfCM
   l9O33i0Jd1W9Ib1H49biBwEHGRRcywFSvY29K29KAPYM+G9BvIlbEK/5fVsimL7tcZsB
   pnCWvgJPxPHyXd4KG3d7F+9z5BXUdvxsvEZ6YFY6ObalutMq38PdFNW5tXxGpoqAMgb+
   B+P718nSZ2BVLjujsB6uZV3JA2SBLX1k1sQHfvZZGVrfuf3xIgJ+cMP7tUDONByYgB47
   m5I80EQFajpLd5wJp31qlYXgnhG0q827H5VothJzKru4CQHp/OIjTG5gYJnSH1YMHy4w
   RnyChqawxmGd0fcdMmSb2OQvT5ngBQ0PMjdwuPIueJjo/wAAAAAAAAAAAAAAAAAAAAAA
   AAoOFBggJQ==",
   "dk": "w2fuirnhvmB2+y0VCklaTCRlrlO+R9Rgi4e7Nto6IAbKej
   Cv8StF5vA7jSVYOXvR9Vyz3M/kXTugKIN0MMFBrUEABHWXL/kGosRYTXwg6xdJ9rBsz1
   0M1ODtqpzziTtsTafd7kfFG9MS3tWBzroJqZWysGPtMd8CItHFU1/mvKTK7howMQIBAQ
   Qgbgr1+e9mf8apIHggQUE7trxgL5au1LOmbqFL+p0MdfCgCgYIKoZIzj0DAQc=",

   "dk_pkcs8": "MIHLAgEAMA0GC2CGSAGG+mtQBQJCBIG2w2fuirnhvmB2+y0VCklaTCR
   lrlO+R9Rgi4e7Nto6IAbKejCv8StF5vA7jSVYOXvR9Vyz3M/kXTugKIN0MMFBrUEABHW
   XL/kGosRYTXwg6xdJ9rBsz10M1ODtqpzziTtsTafd7kfFG9MS3tWBzroJqZWysGPtMd8
   CItHFU1/mvKTK7howMQIBAQQgbgr1+e9mf8apIHggQUE7trxgL5au1LOmbqFL+p0MdfC
   gCgYIKoZIzj0DAQc=",
   "c": "iedf1smosFzQplu7NY5GQ8zL2eiF1hEB5BZdCvxb3N
   /nEBSbu1JdQUER2Fp7mHNlbA8EesBcS2z9WFEgejh6pZ0T2I6+NZMPsa3CQwLc/iK8Da
   g4tYUhhZe1cU78zN88PiknApSm5IERdosMV1BVAZzK009U5QVP+yzI2ecwDbTDHUiiZT
   3OQIJTxhdR24wfppVNkttu0GbCC/v7angchcYjmf7y/GNC+Va81smh/oRlhIVZtPTmwS
   kxZUd160LUE4cJf0fkU4UAg9UO28Oozevv+0ZbZGlphhWMO1gfnJrFkBOY00cuREZoSk
   i+EpPmkrP07L9KKQaW6Qlz48GYXQzFdIlPKlww1Z8J6WoP9wX9Xo5Lz00lbdwAMyvJUu
   MZ+YEdNa3909xQlapmfdK3Vocsim4vKTS5sAffg/h29qG1jXgV867x2qgjluv70imtyX
   Z6wQNekZjnVhcqShedR/juYIO2Bx47txmVGxGLHfPDUfrxkBilJ4xrw65LThYyO6Gwbe
   q6NYEIZ52yNrRIUCtWTHhfyWZjvyexoiO/QtQwGUjuVC5e46x6dmpNTD1mD9kujvxsQY
   6aa13AUP/myFwxt84MBlblFPutpZovGiG0n98oCthg7J/FTpsuVsix49baefcZk7V0Pp
   Wc04wImZ+EROh9GXBGoXEF9r3V3lEQRFLRaMaQHbF16bvkGL5g2af10a+RHVq4H8DYr9
   R9TR18oonY78YLm2rgZ7PpM729pm9+4E0w9GoFXyP9/ydR4yqCfcbosJA59qhjKng/Ll
   6KWluui1Tv9AC24MUGwacxWZiKPzHVtHk3qKzkQpdC8U3vU4lvaQ/Dltrm9ZVOfBJMGO
   cU/2QnEvwph4O9+gLNSAa5f6c18Z008pgu6UKDb8B+yLvldgTWyFZefZkiZ1IJcs4BcC
   ba6yrxu8uZwV+YDhsPLgdwKY+4Y8WseVCFhYIJgR0a9rcLFh+QcbGfudPouOJSYJEvaa
   Av1Id24hr8bpT5BgrNotWOhGY1iZBDRuKk50R1BMRz4xiQHVqkkJsvn7TPoslQkqPqAK
   mkEQVYesl2RO7xAlqGnUqns5sMdWkOILltZUTD4sw+xtn8uPQeZcJs69cQ4TOFDJk2+c
   NWSXCutjmVQ4uZH3YZj2tpNmlZMTq8kMf0wgbRq043jGC8VW/FeVfUpxOG6XH6xqV2jT
   ELfaNhqsGGO9O2t5kT+xh73zPmM5sENVmSRNNq1O6/2gBNuk+L7s01x+K/uJlfoqKamN
   MaqWCKEqNfwocfKtSuratGveAEEevH7HqlHO4Mn0vsdRQmf+zdzLPXVPoxSwpFgWoVgX



Ounsworth, et al.         Expires 19 April 2026               [Page 104]

Internet-Draft              Composite ML-KEM                October 2025


   HHX8fvffDzFBunsYreecBMaBH58d2cNz+vOBEo48ne2Lv2Szav7CjMF/01iPLBdlosJV
   NWRcDhU9kMwVnnNWy75rguLB/ufpRP8PT6v+UoxW+rXhxxlr0Ebt7wR1vCE02172o7WD
   OFsfoiGditW880pVm91D7f8XjrzPqp66EPLjyVNE+1WQTL9lNPr9Q2UwUECfxDX/NHlg
   ==",
   "k": "2ANHGeM3MtX4m/QH3SZrI+Ig0Vr4FWnXQOwykLuVyEo="
   },
   {

   "tcId": "id-MLKEM768-ECDH-P384-SHA3-256",
   "ek": "9XvNu6Ro/lkdENyOlbS
   z5PrIb4ey9kde+RUoezHNiiI7Hig1QRl4qJJaIJl9jcmzeMFStZhzThhLH+Y9+5NHb7o
   nZaA2flxbBONMbMRKiZSlsWPJDAWPXVfKxbcXx/gavEouCBF3g2GjDOhKm9AUstiN9KA
   yetA9iaUbWTK9e3K/EXd5EFgetxANB4W4HLEztmBH7DEDndGUgygN+zAhwXvFWkcHZNQ
   WRBjAELKx4bYCIgGZehgpg+ytCcbDM6hmQsSDeFtdnbE3qOmzCYhBhPVvYCaoFrdSTLe
   ZKmGjbfBac9zIguuEeMgZo2K1X5vMQdS9bIvPxhEPjhDI7rmJ93hd5wMH3NUpraViyOE
   o9PC95PBpUkhWpAmgP1l3cPbJ/yc7H2NwcgtMc8iOxIJKGUutvaGuXVi7AygiMTGGeqa
   6AGZ1P7ca7sVwfVwQ5UMdInhXccJ3BfvO03sn6/WeA/VAK5NqmOOtxNI1IPJLE7u4+ck
   5v4RoTdaJbAq7GLccgxigHNVbJRgclROtlbQetgyjRzSNCUQNXZRD43e7+PzOVZrP31I
   nn2esHsM7b7iCZZdBxnBIuxm0ofyRi+QIpoIbAyg206avdWiuAabG32Ug6Hw/UWleP0k
   l95VbYUxiqzydXhaeJGYNOPB4RlQnXuVZh3JAnSUEVxWIr/Er1zS48tFYf1QtoQBwHSB
   K04dm8AtaaKB11xGitTUpG1R51kywi5e3QSoTp+e8lgNiKOVFGFC15Nk/miG5PeSmYfs
   buHAD+vFqMaxUy7Rx0qIVbdQWicBZiHM54vwxugwLQdBZ6VsADnR47iwEWkQcdKVeUhY
   PAvEbyKtUwfwi8XuwrPiOubiKMcK53lZ8EkQmHVetBwrJRnGSpVBW3kSfOzNl+9a1CtR
   9Y9EQPsIStgYeiGEruwYnfOR+g6aqkEkZAFyQvPpLZIbFdTheo2BSjSoULumbrYJJ9sN
   oQpsFrFNNEPHEjjeUt3MsGepzvqemA+cnIPc3nuQ/jRpUt/ZuuxRU/4fNn/o7coQxCot
   7OlAzY7Ci6boHU3mpbjnNqLKTSKEepdx5BqWctzyp/3SJnSoZnSYAFUxNAqeCTQAnBdi
   MUHFlsKqndHKUD5afb8xpPXKqVpi867gg/yULQpucGaFLljwNrSrDr+REZxLHEXESFrh
   6wzaxQ1t3mas1MDRIL0pEvEYwj1gh4pMWNAByHTx+34JbIlMyXAeVVJgLfNADboQDQyB
   HMQvK7sqW96JCgglFEoiEt9C1zOxotuxqetNLUnSpSPJosOMVOOIBz3AwogM8OkQMQzw
   k2lhVr6YD5cGlPVrIEZV947Jd5juz7Hpuo1webVkiFDscIYSfMCsidPhGrqayeuVa/YB
   jlVNVgcWvtAaikzXEUnwhWbwCRaMoRLZbssqKjUgStKzG+nIFdCwdNiRbONx1+xqVPeh
   27fd0d5Gb1sZ+xHBkkcIrPktPdpwO6hFEcSEbSVt1vTcpGRRlj2xTLrNI63ZhyIOqzfq
   eXrihUNmc92LGpiGDmqds9c4wr9TnXqYwXpi3kt/9SU6H6YvgBp8CipcQSlRcMJIEZBi
   z3WzPL1flZtRfbQSQDnMeL7XiIpIEJ96EDqzG67rPWnqpAyHCGm9ygEUZrYfRYHhatmw
   3JFAIun0dZto7d7VoUd5wk5JBH4x1t0GI3m+1nzbRQb6Qa9axKrXdsWwy",
   "x5c": "
   MIITATCCBf6gAwIBAgIUTJbSXhxFtLEeBrOBVGyWEAP1S3gwCwYJYIZIAWUDBAMSMD0x
   DTALBgNVBAoMBElFVEYxDjAMBgNVBAsMBUxBTVBTMRwwGgYDVQQDDBNDb21wb3NpdGUg
   TUwtS0VNIENBMB4XDTI1MTAxNDE4MjQ1OVoXDTM1MTAxNTE4MjQ1OVowSDENMAsGA1UE
   CgwESUVURjEOMAwGA1UECwwFTEFNUFMxJzAlBgNVBAMMHmlkLU1MS0VNNzY4LUVDREgt
   UDM4NC1TSEEzLTI1NjCCBRUwDQYLYIZIAYb6a1AFAkMDggUCAPV7zbukaP5ZHRDcjpW0
   s+T6yG+HsvZHXvkVKHsxzYoiOx4oNUEZeKiSWiCZfY3Js3jBUrWYc04YSx/mPfuTR2+6
   J2WgNn5cWwTjTGzESomUpbFjyQwFj11XysW3F8f4GrxKLggRd4NhowzoSpvQFLLYjfSg
   MnrQPYmlG1kyvXtyvxF3eRBYHrcQDQeFuByxM7ZgR+wxA53RlIMoDfswIcF7xVpHB2TU
   FkQYwBCyseG2AiIBmXoYKYPsrQnGwzOoZkLEg3hbXZ2xN6jpswmIQYT1b2AmqBa3Uky3
   mSpho23wWnPcyILrhHjIGaNitV+bzEHUvWyLz8YRD44QyO65ifd4XecDB9zVKa2lYsjh
   KPTwveTwaVJIVqQJoD9Zd3D2yf8nOx9jcHILTHPIjsSCShlLrb2hrl1YuwMoIjExhnqm
   ugBmdT+3Gu7FcH1cEOVDHSJ4V3HCdwX7ztN7J+v1ngP1QCuTapjjrcTSNSDySxO7uPnJ



Ounsworth, et al.         Expires 19 April 2026               [Page 105]

Internet-Draft              Composite ML-KEM                October 2025


   Ob+EaE3WiWwKuxi3HIMYoBzVWyUYHJUTrZW0HrYMo0c0jQlEDV2UQ+N3u/j8zlWaz99S
   J59nrB7DO2+4gmWXQcZwSLsZtKH8kYvkCKaCGwMoNtOmr3VorgGmxt9lIOh8P1FpXj9J
   JfeVW2FMYqs8nV4WniRmDTjweEZUJ17lWYdyQJ0lBFcViK/xK9c0uPLRWH9ULaEAcB0g
   StOHZvALWmigddcRorU1KRtUedZMsIuXt0EqE6fnvJYDYijlRRhQteTZP5ohuT3kpmH7
   G7hwA/rxajGsVMu0cdKiFW3UFonAWYhzOeL8MboMC0HQWelbAA50eO4sBFpEHHSlXlIW
   DwLxG8irVMH8IvF7sKz4jrm4ijHCud5WfBJEJh1XrQcKyUZxkqVQVt5EnzszZfvWtQrU
   fWPRED7CErYGHohhK7sGJ3zkfoOmqpBJGQBckLz6S2SGxXU4XqNgUo0qFC7pm62CSfbD
   aEKbBaxTTRDxxI43lLdzLBnqc76npgPnJyD3N57kP40aVLf2brsUVP+HzZ/6O3KEMQqL
   ezpQM2Owoum6B1N5qW45zaiyk0ihHqXceQalnLc8qf90iZ0qGZ0mABVMTQKngk0AJwXY
   jFBxZbCqp3RylA+Wn2/MaT1yqlaYvOu4IP8lC0KbnBmhS5Y8Da0qw6/kRGcSxxFxEha4
   esM2sUNbd5mrNTA0SC9KRLxGMI9YIeKTFjQAch08ft+CWyJTMlwHlVSYC3zQA26EA0Mg
   RzELyu7KlveiQoIJRRKIhLfQtczsaLbsanrTS1J0qUjyaLDjFTjiAc9wMKIDPDpEDEM8
   JNpYVa+mA+XBpT1ayBGVfeOyXeY7s+x6bqNcHm1ZIhQ7HCGEnzArInT4Rq6msnrlWv2A
   Y5VTVYHFr7QGopM1xFJ8IVm8AkWjKES2W7LKio1IErSsxvpyBXQsHTYkWzjcdfsalT3o
   du33dHeRm9bGfsRwZJHCKz5LT3acDuoRRHEhG0lbdb03KRkUZY9sUy6zSOt2YciDqs36
   nl64oVDZnPdixqYhg5qnbPXOMK/U516mMF6Yt5Lf/UlOh+mL4AafAoqXEEpUXDCSBGQY
   s91szy9X5WbUX20EkA5zHi+14iKSBCfehA6sxuu6z1p6qQMhwhpvcoBFGa2H0WB4WrZs
   NyRQCLp9HWbaO3e1aFHecJOSQR+MdbdBiN5vtZ820UG+kGvWsSq13bFsMqMSMBAwDgYD
   VR0PAQH/BAQDAgUgMAsGCWCGSAFlAwQDEgOCDO4ATn2Ue05XLnoWAu6srCwtpD8jOe97
   JvaM0BPNX40ug0QUhGUm7ZkMeaOmMEhHuS8M65advLlDitKGMW1Ka963BsgxZEaFHnrK
   UM1bSck9kQblzphT+uA0iFUooKhJjNG7+TvuehZA53TYnsVmf/5GEZK+VACKgVJoZgCG
   Dgnq0LgukGVc3IpKpDebZjSo+XtbhpDhWP6j6xoiNNaRbQD2QiuI7ZyHeFhvaQgpHp/j
   bt3up0wg+HA90BcuH/U8YIylX9gfBSTBTN31yLXZPTY0qFIBK9ZRHZNyVyjS8DKwqmWI
   0gMB1mvJO2OmgndSqaLz7PkMsn6G1HkQRXGhmJFxBFd13eueecb2rOlWerBuABG6Qxji
   3+o/MOjXWqAEPzb9cREOcoQydqiqPInqz7j+yLdKfqKWj6OsnZf6vMLp+fzMtNtf7D4+
   vasz72jrvVruDbUReJATOlhL8J/nOjRSxIDkQogethOPDnfIC1ILtCx/PRGpDLYri5P/
   yzB80hqJTDReu7pbPnsPgtfBIMhwF+w81yefbd3cwuqx/sc3ZMk6DL+Kqw85NJCyyllc
   820xZNOtWSoeNse1XBc3QVm5wZ7trzeB1dY8HE98NWMI37ExpN5UygQOl1EdMSdMscoM
   gZb0VsuKOCIR5IEjZpMHHDyE9QJUF/+wY0e/SeEj26iJdGpC2AouUaEgmjJeYJGMFZCB
   9dLJ7VuvaKeyMNwnJjRzpipqm4zxQa5U4HyeeAR2SCdCEdyu/GALwk1Rw8mZrAsVb9MV
   Pi9xnq7RPEUvZ9IBg9bLaBZHeiEuwnDZh5+wIWZ2i1v3E3FFvegYtXw7q6r4qmUTQOGB
   8TL7+Xj8LMf/cy2alhzONJ2LBMd4WBb367RPJFDwuSQrrXnes9QtAwYWO3VKZpImunAO
   Wkw934LEbz35cf9dUIdPlesDVZerJdt3zh2YuB91gMfIq2/GNCdqqQZX/lNwzSDn2HXl
   TKif1fee7aIkFGcFdFUjjzLg9yvcrQ5KiZPcKEWdz6mZmfhxLg9zXvx3Ls7XwPr1PTmA
   7fztqBMJcsegh7ifgkdcu82LNcKJNrQINWkq8n6z5P9PFOTdqiy9+bcr73h2qEpv4a/I
   s6X+iFEtKZd3EEyLPpEuQPKeeM/ES6Qmnd/74Qk7sG6afToD2yYBaE5YTblIMBmA46SK
   76CI57M9E0y3v9WjEPlFy5cMaYOHdlbid3726acvULDD/b7jmc5Bzxb0ZQmZLnK5hT+F
   yPu9Wy140cXy52yUCxmx+jeG3dWuvRKjggwMn2Uz16fvjsf/WHw0ucFcIVVelYXmXM7E
   etAJ8dtiRDyIdIhngV8Uw11VJzly8Nc5JI/rfawqZbrnTRqAlqldZykb0HrbZ3s9XwEj
   6XGH3HJ6NypiFxC6V36nzBiSdr5sdtq05Ce1qSBB4r1vnTBphYC3DwNRlgUACJAjtPgI
   GcNi9JcJrHrWdtmdRvPOkFDuUnT3HXxeAqbYTCoD6gsET5z7KqXn+UuqMUs6guyqp02X
   4YrYWFGHDQpIXJxd+v7aiEZJzqb0t7Tz3bcmimAdHWLUX/lMyvIDlev7MvYRekxOn/Oz
   zZT0gKQIJIIvvy7jU+YnrU+BekQE+6QSVATfGyBbS26c2oNZpf1JltYZz3agEdcH85Zg
   X+6Vsyzs7DZvcV0jUtJL2mvxAeY14NylkiAYpGL5WLR2oSWCH0/l2SDxmH0jkyquOl8T
   UELMtVgpQ0u5j6tiYyxiZqPWin2e5oJXSFoBZ2kmnqHFm9ohCCHYQDKa9e3KEljUs+He
   VKpmkmeq4Vj48PPbgcklrx6GxWo/mljDvfZjLnP4fzEf0s0xvMbrF3iJKgSP7vRikijV
   OYi+MZJXW4OZ6sKiEHM3tF5uX8vkseoCeGb4Jgm8Krn4WRwvzi/xYpLHELx05uI/abVs
   8SG1C+KHJkVoM6Kvdp6wZvnz/s9HvPBs8F8P6Pa1LTYF7Ec/FHzN+kzOAgz7/O0LCWDG



Ounsworth, et al.         Expires 19 April 2026               [Page 106]

Internet-Draft              Composite ML-KEM                October 2025


   FjSgDkAV9ow1N8gxf2xi6XVH5ic8XZ5VF3ltvWX0iTJvNQ3iwifmjK41REvMbJCD1BCu
   HCsHOm15xgYSIfTW0j3xMkurl0dhpyzIELZHeO8F+QLahgTs74ITTDEXYfmff4xriPcj
   RxeZ/h9j88zQyUel17p+Z45GVzgZ7o2XUx83NTyxL9Xw1nYE923U2xXpaSaDoK9eY6HW
   PvYjoFATv5/g+HqMdloAAlChV7C1rH2YaKbIPuppUAGQv+oO5K7a1rb+CxLgn3xEu0/x
   eVgChp57iOgxoivczvv823HQZLLkFO5pVAfxZLfsAe8g0ZyF5t5LYZAInVgbKmohe9x3
   fuZZM2mcC7ocAEcGyvuGjgaxFW50Sz1SPy4tcr9175177YaQpmYKZbbfmsGxOvCZYnaj
   bfkuffgy84uxoBsTjenh0xc9iCR8wV8bQLdb8Rhidt3slSEukPtoJj6iehkW/uNf8fyU
   43UoQwocYN+MIPuNuClRR6rrckc7j9/gKzgUG0hP4x7GFaPWwXTcOF8XQrD8Z5LpXUV5
   FNPPKXWW90K6waa3518XUK/bFkXpOJ2OUABAZzAp4fMNodIMD8mMXZjPLhB6ox/uQ1J/
   Pq82Xq1Gg9VO8GPnQ8biLIZTQn6xknHY/4KCCN2S2//XrefKtCcLacsz2U7sFouWyYk+
   5GEyHX7A09uAoz22+AgSFrzgDAMV2ADkBR8JldLQMvxqg9PCnCSusxv0HiYpfjI5DCor
   P+71mnuzj4ow1GzZkCqvBC2udp/apulro81luK59O8IULdZyN42OfswXbWqDD49sHToI
   BSy2ZXPxYc1B9fYFQqlbqhzkcHaGK1c8VTTGl9X/fC4inBHXeKazi6Cuw4d6o8TTnIth
   GLjmW6z0jjR+G33GCuN0AST8JZA4tLGkhxmvZtgf33s5rlmyxMfFwvuXp3cDRyDLtxPD
   Pe1SjMPF32/ATbwEl8ULM7cYg7tzZ5Cx4t8omGYxU5RAIGC87DhHjjabb2qdN63SPD0K
   A83ZKEc15RqalKqMaj7ERsP6TMVyQBr2PxQSwO4NH9NEspTIdumFTTz7Pqe01UV43tn1
   oqWCKe0S7doiKtUW2WVYrW7riUqY9YHdAnzSh79USkVTbiIb8al9KcJX0BFUlqn10xSp
   M97N73ifln04Cl1hDV8wpkAOdZBQk4TaUIk5PwHnOZHhrbgJZgQLe/kDQJUyNWSKM9F2
   w9iBOylkcQc6EA5rhyTNN2R0zH5Z0J7kR34euDGgtH6efgBrsLlsDy/Q+Pl4p9y/doKi
   4ZfBlXl4lBxjkpU8vT7RdaNt3zZCyNjylrN+82FH+Z/E+3ehWAvfZ01DeK+aAkRv7XCJ
   rFGjloSQhS8LmuTMFwyX+rY/EABrebM/45PffS5QMr+ziTLJas/R65WN8DtFJqX/Nozr
   ALW07F2V99lJt+13PJmcyVQmRyurOUsEb9SeWUKeJUzB0moIUzreuIn5Tl2BGG933iZB
   kmOmurZdoJB+m5JfT6GHNSqr6h4U76D+fmc4n/ABEb/WMYZuLrWFqjFR48uc8yZXINtb
   Ppj+mgQkoBjvVoIritVk5SShaDG9BMmgWMWHM6U+vE0zrkzWt545RWnujadPih8EdOf1
   CDViM5KRPSW46LdMQSNHaWER1KTQ3LasPo0vnBp9lnhR4R0dzo/Ef1YpAIXjwsTv4IMe
   Tnhr5OpT5UxsswuTFQnTmyV/pd6BSC0qj49R97gScHQlmcWfV5vOHvUw7V1f/HIvtJT0
   14E2EiIU29cxEFLQfovkLeSYY29K2ORSY3Ske5XLDAObcRbabhg3NTP47kV8HSKsWRKj
   G1Oiq7HwqFX9y/LWzWlhxcO8WOPYsF1Wh7EeRDEGcNJqTy7ZLKoRlbk4bosc0X+tqwh9
   Ok7ewIpKHBgu7YqelLikPbjNdj7c2j6IbIN4VKVYqCGlCBusHIAyGai+WNQB2z+LQDjl
   pqslGGMiZh37vyjAyhquNFxrbeMjW1o/1052GryNzbc77hPmW8we9xxA/+XgXRGVBrGV
   MioYLoFacbXLQeFvhQrRvPwdvXD3ldrlPqxBLYp0nLorq19tEZ/EzDE3OZ3AYYyR5QR6
   mBrLUJtJOckJA9aa800gkzbMxTOOB5fbOwmXC5QCPajsWd9iISeImjWQCCk7IfNCZ8zX
   zb4uSTj68w8S8WwaQdTaHQHfEhZeUerqMJ/Kh+mjslcmeQFWVqosV9rS9UZWgYxvxDQu
   opof/Zqf2GkcRlrHW467MLuaOl5ahfc0DIX4vZwl18MT4GHFMKDrleID8r7dB2jP1GJK
   SkLcBjn+zhIhw0mTF1IWJEhKbHqBuxtHT5Wgoae3xt3zNFh36iFFZXSj+g0dRLS7DkNT
   d4KUpa681dsAAAAAAAAAAAAACBMXHSIt",
   "dk": "zHzkAVmZF08OhtSgTgU521OvlT
   30jiHvkNSYUdq0zUivvs1jSmVtElaY8nlzf3IE5dt8KtON25MoSNPUgiEyoGEABGQYs9
   1szy9X5WbUX20EkA5zHi+14iKSBCfehA6sxuu6z1p6qQMhwhpvcoBFGa2H0WB4WrZsNy
   RQCLp9HWbaO3e1aFHecJOSQR+MdbdBiN5vtZ820UG+kGvWsSq13bFsMjA+AgEBBDD2sB
   tBodduLkHhMDmGINL92Xv59pb6lnUs9Nj8UgCwUmItf4i2KilRKyCZIyHA4cmgBwYFK4
   EEACI=",
   "dk_pkcs8": "MIH4AgEAMA0GC2CGSAGG+mtQBQJDBIHjzHzkAVmZF08Oht
   SgTgU521OvlT30jiHvkNSYUdq0zUivvs1jSmVtElaY8nlzf3IE5dt8KtON25MoSNPUgi
   EyoGEABGQYs91szy9X5WbUX20EkA5zHi+14iKSBCfehA6sxuu6z1p6qQMhwhpvcoBFGa
   2H0WB4WrZsNyRQCLp9HWbaO3e1aFHecJOSQR+MdbdBiN5vtZ820UG+kGvWsSq13bFsMj
   A+AgEBBDD2sBtBodduLkHhMDmGINL92Xv59pb6lnUs9Nj8UgCwUmItf4i2KilRKyCZIy
   HA4cmgBwYFK4EEACI=",



Ounsworth, et al.         Expires 19 April 2026               [Page 107]

Internet-Draft              Composite ML-KEM                October 2025


   "c": "qwQ0Wgc3SgbgscOQaidcxDOnJX1OpPtIEiUnNqpFJ
   YWIbs96VFAmAziSQuolJbxdMmUgF4AKmBiCUWqm4/htVV1OEQAClEhXUtZ99iv2RqE2o
   A0O/tM+bKnPZnCG8fFFQUOXf7UdTRsRgGT3Uybx+8u8DWD6qOJd3BjWmgx5NSUS4vd19
   YxA2dqYPW1rc4Eig8qVr51cF0rZk/Rn5zgqqk1vcM/+ixmebE5oOtXj1DWUYEozwaQj8
   JBabsDrWKmHtLYcJ6sRARsyT3NfItEthBPRoCIy+qkSRxWR9k6PQIKCESYy1qjyyUo+o
   c4wOBT9BBxqlN1NF+b9oyrwlUXBCrvdHqQJSN1ziW+LxbsP6odT+zCBjMOuYPCV3HgZ0
   5qAXZ12v/f7bpXVAeFVutEFpzVNIqKaNoq6ePCCJCRv1ZtuoPsicUUKz0PtZyEfE2kzk
   k5f0ns67Pw2YAnwUu0hCgsmPDbOoOZJrwNvIvuqyJ+QSSfMTeQAcyN//p8tgD3c9gGmn
   8kFKtiiUKOA/jHRIGUUXpVqk07TVX670uoSgYSpnMhIpOMMsHVJBIY87oW9kUVavCrix
   b8lzJW2OEoWpNf7E0dVVqg/8f+oBG8bOLweVKzS7noBncYpiU9CZZKM/YnXrLoc+qw+e
   94Xum+gnvFqJRAETNB3wp9BEytYKuUIqkqeF3mZMaDkgdgS88WPMtePv7OSjQC5b1pWZ
   MJ23JrZKm44UU2huAec3VlofZnOqhcYqEFQI6+sW9Ft29CI+XyElKIZ+Sg2HO2rFe7Y8
   n91c4jS1MyRfJresn7seCAuHW4Rq3FDLVDpB6p0P9JvA+/78KFDqIBmxLoXLtHSp3iT3
   Z3CBMKpUSJhsmqnVNQs7B8xRohMGL3x5M6cXUyNIzZB0ldU+MiFfLTozwhTkno9kzhom
   OCT2pLU3X9Bais9aTfQvEb62g3TmuDtKvSbLF08Kxe0Zin/14ck0YxutPZtNfQQA2LnV
   BvGOijEKWhQ79Ou633J5wO1ZIeMNulFuIuf0CLDuPwDFxj09Oa+xduCfeNY5MQhjrCRY
   kQEOGhHw7in+QYOWE0JA2tK1BdIV4/utpcXyAd13ueheWAU92pNGo/V8huwkmQWv8Ngw
   8ud+eaaxqPXmEXBvtDowPxouzg+cDr3VkBkmNXMbS0IQqGOjZo309tHXNe+ZAxF8mPc5
   VZA7r+vXo8+R9taJfIP8zIfKWvetjfxBbVS4YpbwceiQDgYP646it2KDLDNIWFCBz28a
   HLFU4hhD1pcgJql1tPjB0bRmtjyCjBShVgKRrY09Js/vhYg78Do6ig863HzumaRBaJuO
   Y8Iu6TDgxq7raK2BWGbcan3cJOmea9B+2jb6GWvmSf67NqaomXVXDFVRFgWSCrXAEtAn
   Ai5/3dT8zJz9jRPD7/xJJY9kNyeG750oUls43zimwAHg/IgZrEEIoQFR8OADpETprZY8
   TljoUcIfeTLIPZ1PMdOK++pOfyUgMH1neOlHcYYS6FqBP509KVKuHgVFMCJERQKNRKsZ
   sgWBZYEeAn0lc5hnnQr3xED8vL6Ux2InuHp2fR9TX7h",
   "k":
   "sPgOmIQAGsyCurKH+d1jvNJqKru0LdWVwHPT6pEllmw="
   },
   {
   "tcId": "id-
   MLKEM768-ECDH-brainpoolP256r1-SHA3-256",
   "ek": "ytWzWuGMJICid7an5NJW
   tgQkwdMgGEDIo1RdF7scttMmB8W3DNo25HcJDRAzEVaP9eKSGLB5i0YgmzFowULPwkQH
   Oexj6LJINRwmdZFPbViK7JUzDVMzYvcN4eFhwcvB0CPMYwONb6tYJFlNOQk84gB9iGUP
   psm5KdMBMWTFvBNmZKd+GtODrLzF3DCg9AMKs0l7yCrFowdCcUEnnPcE4puXr4IO5VUQ
   QLdc4vVYgFsBjrgr0FFZ6tCLa6uT/KWYWVWVGaJ/OFEgF9d/UmEplpV58LmEq1WPtxtE
   B7E3mFwVfOqvuDEIB4u5G9h0n5qh8yEi5chDT+mZYjQ3+PEdnjyqv4h2VvODiYWaSrqX
   kuMveElCe6rCa2xFhnNlF5hwrDYoCYC5h5Wwv+xDGFgRj0XKwEwBsVUMUemjgroZHRCn
   tylYAimpe0upzeAMhQC1C0R/eii3eBawZ0FJCgebb0huUtuiQDwJxEI0bITLQtV25pUg
   XRMsIRiTTTps6JsW1AmLjOqxSXcweKu9kVelNkKsJUqLhDFlxfNdl2qkF7OcWDZiMohN
   LwRbFZkW2wtbR9GTEQxys4WYsyGeD8uOe2sOk6sML8oJqfOH4vmLIYW5HxO3cIE/QxSS
   jaFNewE5YGRhWYRMtPeKjFQcyFUC8PQIWkW6w2GDtHRE6bR8VQRuE0st4+VnGSKWx4YD
   HIFc/CZAv7eLZbuJUvuqq3KChNWeHPI0gMN/D2qRKSbE+hqPcnE+N9uOfkev47JObfDO
   VDKju/Mb6LULR0gAIYpbJuaQjQojLCGfxKHPimaF2ZJlJJSZcvghgidCtlvDg7U6EwFZ
   CKcNhkGiRLPMGYQZ6MBAoImU6ykoznB4IPhH2bYvCkyqdNIN55uJdpkWykIwL0Z5nPO0
   NkNYznBqkclwVhg6YuZgSVcljuy8Vjtr5uNP9IJF9+NpnTODoAw9ZzkaxxyxYWw8bbpo
   X1BxvLltFHxiGPxbTnMYRSAVPOiNQpAFIVYxGXKT3QQU/XZdREV024g7MUDN3cFOFAMY
   VYFQCUNIQeWK9PAdXvuPdvizcKSchmXP1AxYPvGJ4moSfSAkjNDLQjk8pXdFE7B0aHDK
   v4yXLTSOv7NTV/WqZPlf/tZ1rQBTvEZZGRAajtmufrR6DcN6WKOo4TTA/gxHqPEtf4VS



Ounsworth, et al.         Expires 19 April 2026               [Page 108]

Internet-Draft              Composite ML-KEM                October 2025


   dVFWfFxl5eYZK/mItTS956aWBgy1slGJS9mixLgzVimklxOTO7C2oeDP6OU4bFlK1UGt
   Makg06U/1RyOilLOr2pHrJN+9TmpH2Mf+5q/jXxairm6UkbO0RQRVzIr1plEaueKCeqK
   kgeyMfekuwdUfFZcKhqfzMgAy7eaDSFm55A4UCceYkNBkeKvZoxzl3Io/VBX5CcBL5iz
   SiiK08AwM3yWGJPLsnM1QVkFafBnZhiRSTyycwxdS5ev3xNlaHujFVQb92eupHd4+bw2
   uoA9oKmi9uqgWTePHfkm6Xd+uEt5YducQncrIftq+wgK14ishlMoxFsf0/BzmKp6jmmw
   nJOShdmMqzu7aZBM8MC81fO8b6U5ppqZ6iLp7KPoSdIDHKz5I+tK679MgQuvr/QEmjt9
   o3lpyWH90kyr4Wj+fyCDUKNXNcBXcLeNPRAO6NtWmJWRDd8dum3qYSJgor7IyNpgfJev
   Dygh8QlJKXyl8w==",
   "x5c": "MIIS7DCCBemgAwIBAgIUGn4YLCuMD/R9d/uE4ZmYW
   ZWUDGgwCwYJYIZIAWUDBAMSMD0xDTALBgNVBAoMBElFVEYxDjAMBgNVBAsMBUxBTVBTM
   RwwGgYDVQQDDBNDb21wb3NpdGUgTUwtS0VNIENBMB4XDTI1MTAxNDE4MjQ1OVoXDTM1M
   TAxNTE4MjQ1OVowUzENMAsGA1UECgwESUVURjEOMAwGA1UECwwFTEFNUFMxMjAwBgNVB
   AMMKWlkLU1MS0VNNzY4LUVDREgtYnJhaW5wb29sUDI1NnIxLVNIQTMtMjU2MIIE9TANB
   gtghkgBhvprUAUCRAOCBOIAytWzWuGMJICid7an5NJWtgQkwdMgGEDIo1RdF7scttMmB
   8W3DNo25HcJDRAzEVaP9eKSGLB5i0YgmzFowULPwkQHOexj6LJINRwmdZFPbViK7JUzD
   VMzYvcN4eFhwcvB0CPMYwONb6tYJFlNOQk84gB9iGUPpsm5KdMBMWTFvBNmZKd+GtODr
   LzF3DCg9AMKs0l7yCrFowdCcUEnnPcE4puXr4IO5VUQQLdc4vVYgFsBjrgr0FFZ6tCLa
   6uT/KWYWVWVGaJ/OFEgF9d/UmEplpV58LmEq1WPtxtEB7E3mFwVfOqvuDEIB4u5G9h0n
   5qh8yEi5chDT+mZYjQ3+PEdnjyqv4h2VvODiYWaSrqXkuMveElCe6rCa2xFhnNlF5hwr
   DYoCYC5h5Wwv+xDGFgRj0XKwEwBsVUMUemjgroZHRCntylYAimpe0upzeAMhQC1C0R/e
   ii3eBawZ0FJCgebb0huUtuiQDwJxEI0bITLQtV25pUgXRMsIRiTTTps6JsW1AmLjOqxS
   XcweKu9kVelNkKsJUqLhDFlxfNdl2qkF7OcWDZiMohNLwRbFZkW2wtbR9GTEQxys4WYs
   yGeD8uOe2sOk6sML8oJqfOH4vmLIYW5HxO3cIE/QxSSjaFNewE5YGRhWYRMtPeKjFQcy
   FUC8PQIWkW6w2GDtHRE6bR8VQRuE0st4+VnGSKWx4YDHIFc/CZAv7eLZbuJUvuqq3KCh
   NWeHPI0gMN/D2qRKSbE+hqPcnE+N9uOfkev47JObfDOVDKju/Mb6LULR0gAIYpbJuaQj
   QojLCGfxKHPimaF2ZJlJJSZcvghgidCtlvDg7U6EwFZCKcNhkGiRLPMGYQZ6MBAoImU6
   ykoznB4IPhH2bYvCkyqdNIN55uJdpkWykIwL0Z5nPO0NkNYznBqkclwVhg6YuZgSVclj
   uy8Vjtr5uNP9IJF9+NpnTODoAw9ZzkaxxyxYWw8bbpoX1BxvLltFHxiGPxbTnMYRSAVP
   OiNQpAFIVYxGXKT3QQU/XZdREV024g7MUDN3cFOFAMYVYFQCUNIQeWK9PAdXvuPdvizc
   KSchmXP1AxYPvGJ4moSfSAkjNDLQjk8pXdFE7B0aHDKv4yXLTSOv7NTV/WqZPlf/tZ1r
   QBTvEZZGRAajtmufrR6DcN6WKOo4TTA/gxHqPEtf4VSdVFWfFxl5eYZK/mItTS956aWB
   gy1slGJS9mixLgzVimklxOTO7C2oeDP6OU4bFlK1UGtMakg06U/1RyOilLOr2pHrJN+9
   TmpH2Mf+5q/jXxairm6UkbO0RQRVzIr1plEaueKCeqKkgeyMfekuwdUfFZcKhqfzMgAy
   7eaDSFm55A4UCceYkNBkeKvZoxzl3Io/VBX5CcBL5izSiiK08AwM3yWGJPLsnM1QVkFa
   fBnZhiRSTyycwxdS5ev3xNlaHujFVQb92eupHd4+bw2uoA9oKmi9uqgWTePHfkm6Xd+u
   Et5YducQncrIftq+wgK14ishlMoxFsf0/BzmKp6jmmwnJOShdmMqzu7aZBM8MC81fO8b
   6U5ppqZ6iLp7KPoSdIDHKz5I+tK679MgQuvr/QEmjt9o3lpyWH90kyr4Wj+fyCDUKNXN
   cBXcLeNPRAO6NtWmJWRDd8dum3qYSJgor7IyNpgfJevDygh8QlJKXyl86MSMBAwDgYDV
   R0PAQH/BAQDAgUgMAsGCWCGSAFlAwQDEgOCDO4AmWusz09gt1wjwg/WvRWG5nRupVm3V
   olq9/yQ8UQ85B6MjEKdgbAMPoMzYT5jlkticqbfx8lAz6kMym2xii+YXoZ/XPzCSm+QX
   69ljyFTLkufnPZ8qjQfKF3ZfJ75IAglCWv6ALB/+2Icw4CATzDMizvvhDUBymw+KNx+7
   8YHhgcrsmlMa+BMf/HwOWz/pUx2O3z5CZcB21IiITHPA2QXculTTqW5egptEGiEbucTA
   6P8t02f1L2Lv2O14HK3Mluqtk4ccPLHczaL5Uad4OCLKkos8BTgXXN7uRBvPWXq8K9BQ
   rzW0nHNeUdeAE9x0tKFxRJRqGkJNaromIioT8BZj906Idxzf67wSdbAnskjLEJsvuXxM
   KTBIvKBWji9V4EdwHY5dpxF5duJtcMZ6ybLqnZiQlaR5yqvbJfIv9ofoJyX3tUrNZMKf
   gb7CP0RZ/3lCjWGK1DW2YQ1H5O3ZhQ78aa83G7BHEnWBZrrhkUfkjushL6WbSF3bMSO3
   wlPi+m1w+jp2hZKcIsUQFfBU2V1AQXnEaZ68kv+Q5z0jdHHYNZmUlD4zo2uF3eDUmXMF
   9kJv+7z7MTXuiHom3g0akWN5WuGHvYJdpiKO/u9+nUk4Swc1Zrr3VZjICcTzvsNCMtvp



Ounsworth, et al.         Expires 19 April 2026               [Page 109]

Internet-Draft              Composite ML-KEM                October 2025


   blboqA4M4v7zBeBUrCXrAIEmtIHzmvp1Sa20usKBJIphSN7OTJqtIvjFW1+HunL8wJLV
   oZKgPKcZ4XwVIQrSeDRqcYzOHI/9MC+zajt+OKl6IdLIEjLrbr0pg5rmxrdmm6e5Gh0h
   T8qO2ujyWbmCdKRs4X2AthNwxhYfnvypiKP7BblbNc1ZekTpKKXlNWpwayGvIq63Knxz
   Lzn6DytdskBXSpTCDJkHkyu3be/UfeSQv6ir4wLcGCE1zUE2KQfw4wDdfB8RufvkeQko
   e7IUKP1YehUdCFT0hkDg4pdZNVlLXhzybReTr4ywefpmrrGMc3iz98MH1sSrRugTCRkK
   NvH75bTzfbtkkTo5GNKU6nLXJRL3+HuuiBV4sF9HlIojWfbpnM6CEqCSG5YvylDjrUC2
   3OFpslQW37ptyRLpbsgAsPx88kkrd6oOxKgdWXhLsT9JW4LTyDVonQJProa4g7FbO7d7
   gfSM3MJq34/mgqyZvotwIskPXFGKS8t0LwiseAQaW7hp+anDxY6fo213fOuYMcLGSSlK
   /zTOPCQSGbbP/EYbf2DWERx8sh+jOcyJ47psws4ZRVgwpaUlDgdzKCEZuCpWrtD3OpN6
   0mMccHRmfXTkbb0B+o1b+MKao1NCAX1A+vrMdkNM27yLTJtYRf1JSh0sDci6zqGqNDmF
   fi0yj32z87Ya3r3wFKSfbZMIrfIObgw8JcIas5xLTjelsWj+pod3/zuVfwZV+3IaB9Dh
   qIpUasEAXAGQ9tgDSqSpORGWpmmCsAPoyH0WYs0NJqV/NB/rg5WaRt8aDQm4CXZShYZL
   oAdlP+FrK8837VV8Mohm9F1xY13ep5IXPzQ2jHlKmJJ0v8oU+HKrpIOTqaqYZRVFRI83
   C79NYMnSUh2Ybeg6oBWF8P7G7sGWBOdCvAb0bQortqyqRh04+fsQzcM7FzFFQTOt1kYf
   2Xx7imwIWI4K1EwXAnNt+lLUV3g8U0Mz6FVZXSC26BH04PRCSo3symQ95sfzQNKJTewn
   gwQKjL2mZvk/91lLcj4jRemyhJVP6tK/CTIkYU9l6D66JhMrqBPZXPHkbTeTvuWYuHKg
   vnJj2X9JIpQj2eTcpAW+JUgAg8r6dG4gMONl57Y+GQK85/484dsIJ2Tdvx3had0rJYWd
   yXvaekUACDBEh/vZNfuxXi3g++DvyY1zZMjwDWRTmPbGsRdexEsQ9ZvHHMudtbekt9/n
   9GX/r5kbHYihvqSRLNn6McLYTMewm5RFT4iMdD5PfbuMSkDewMn1cexwQkOZ/p2EXbyo
   rP3XcjeaaodaGPLUq3Jkb77E0biVEivFFdIUCKwF2LeCh3ff8jaofvEtrlYmPa8RW8Os
   CBl2yDLztUyr4RXuu1opVjePPgQsnxDEX1qKFRapBJJBIaDTbgEe57/etRewHmiuKtKF
   DzolbLJIb7wXxXRSALz9hi4qlHAnIiBA6K3SOBSXYa4Z1zZ9fuE20hJj3GRDc9ljMhH+
   EWd55oy3GHENo94ecuqowJzWgpa7T22UzZVAif1SNdNnKZIPhqE7aCEKLLoTGVSNrTMY
   DFYtr9RqokGuCJ4auikFpebO/hOAbZD5pFOQcRWzrA5OXJA1Ja/zG0UO9u4Zy3mZwo/K
   G4VYc+cPZlKOKguyeieCUOA5qBTJSQ8VHaGAD7qLiKulvqfWvWG8z+QTIsb0ymAkQptm
   yCKLWb475dBNVtuRh3rBOSifsvWugpwcmeciQIAyzN568EiZZKxC5vMiYDUSD5hXx/rK
   QqOL3djXPziiHf7BLAENdrLzc0f5v7YIK/APOj67lVKlFeqCQsMIi2CnxUox+JN9em+d
   0j5qBoPdeBy3CWUa5lyogk7xeKxOaIQSGoxY1bNW7YMDDluR2LeiINr1b+ldAbCvtu/a
   gOSZWwVg2OkxfyqEvbetm5XCa04cuRMPJ9+QM0MxTitAFqdKakPCtM/6jgtkAV4irfm5
   d84cMDIAqhIMva2mFRnbNMWtwla21/aRCSCFf/qgqVgzDmKXYqf9+96/Kp89enabIJrk
   Twp1qugdVP+whf1EeA9dWhGEG1MVrEgAJPt1e0q6BYYGRI/FP/cnXvt3PVGl1a3HE9oA
   fpefvGOwx4yneXYffccb0o3h8Go0v9ioLsHH2hBYweKIrONEPIQXfSNz4S9v3jj/lnhL
   TEB078dG1C7JWIlUYnYWLikmaIlSq6Z11IsASpmtntTMORJQVMXuqnfVX/lC7hoce+Ym
   VRl1SPvWGEujXHld2Q4AEFNUWTfSdg+DHYQvFyViu7iQyuifBPitk4V5frXlYMXewzq8
   DZK8T5FzPJDVJvwtjzAFeUId4VKj0boewS5qPEKwMYzgQyA4K0ypNzDh8IdnqxHFCu4J
   x+WNl0HuF7jzM5woIgKW42tcvrp+Szajw1xHRqgPWFh5jlGbCV/iqPOe+B/PbWf7HMN+
   3PNHKA+LsgmjwlJzTjVtKorWQEgORZQJSm+N8VDp5gtln0picqVQPNo0jl/UFZ/qq927
   c0bsY8AqXVUOR+TpC8xGW1bvPye7awpOO7yfSSTiwX+Bo6rOruPW8WMotNK8MvxAp0/A
   hUqFy4BPn5mRwMKXepOKycomZj//RXfjztUHsxuOaPaLpeuI2ulV7ETQpOR09wfwukUu
   uxng0DMjfDKuCwa5ywRSMNI/fKRmYw4jLidVOVEvX2FSYYlXa9OD5DOlUcFS2iZQBDID
   7j6wWsbUmhfHAkqLSKAg48jIqRg2aUKDpk56qInpSM77AqPct9ZiIoX62hKyVjzuMBFQ
   k+okmWsgwWM2GQ7XupjgD+EYvwTGMzPZo77IZXkOZRxPIqYCMENz0//J9DbXsDHTIa3i
   yKEoa0H2oZlZfIpYPK96kHE9GfnJdFyFWGXGsDnCbwprK0zC/z8wtyLX32tjrA8a4aDZ
   WEu1/SOSFBt8UaVKtUwuz4M+jciV6+dSLIbIIcLRxHMsnJRW9WakAds8yjlzGIM4EQHN
   Wue4IyFIMOgMalXyz4BRYa7iSJJ9NPPW4JrWjpyhvr5J3/++t7/ePrDgEeOngEm/bxpe
   PEc6ge0K0uPAQK9E+UDrZD606qrLPt2hYvBO6V2fFfchVkA9NkQZRz+RAxJpH9R9HV5+
   yi1xA3wIxgy8YP9e+r/ecGCiWM5G70geeaDE9QlEfNAHUaHbD5yL3aCBP9D6m72y1zRT
   JGyMeae1O3Byhz6r6KIwzr+u2MgZXW6Wp/aIuFkDF8PdnuMWBw+qrlxG5pahR8NUMKcq



Ounsworth, et al.         Expires 19 April 2026               [Page 110]

Internet-Draft              Composite ML-KEM                October 2025


   Ep2j6MbSkrhY6gaWeEGtOyeQaz+hPlnsuXfKRfcksTkWu6r13dVj0JRsDZ1lKAOT5Krm
   G0a06zQEqJsniF/dI7+/vKqRDQV+TpihwODl1DHLz4VsBNwz04uacnDcOd4QqKQZABFT
   102445LnhXSoA52hPlftGj+Tw9LS0aa7Fkfy1ZKDYq8AoDAq5eAsHTW7aC2zLCSufEhi
   IDRr1rCNWLnXEJYTKCszUiDrzlNWSLzJmklgTuSFyXqVbFsQ6Lry/IIXHHcjfY18kwA5
   tmJqDbw0mcHicStLGMYd44oYZgO8aAMegmZX5/I10+gthBJoEtgp3/ErY3aYqdCbQlYD
   SNeefQWQFqsSzZz5xCnLkemFxHdipetgdaJJD14gCT3jTgm9njXdnLFHr5RV/VS1xNyC
   f9VK+BKMoQ+UovETLkABAU3anXT+TRHfpPDJ02MnObtMlquwg0vMLrT4+3zS215jqa84
   QAAAAAAAAAAAAAAAAAAAAAACA0TFx8m",
   "dk": "6ewhCFclTpU7kUE8dThwAkqLLD8
   GJ6RhyPstl7KVtPfzeY+VTkcOS+MxMp1HqM2zObEEXcA09nG6zdzC0GtPrUEABJo7faN
   5aclh/dJMq+Fo/n8gg1CjVzXAV3C3jT0QDujbVpiVkQ3fHbpt6mEiYKK+yMjaYHyXrw8
   oIfEJSSl8pfMwMgIBAQQgpkS58Vs7cvRKXfbzyR1bKfsqAoSzK6AHGMYgKX7+576gCwY
   JKyQDAwIIAQEH",
   "dk_pkcs8": "MIHMAgEAMA0GC2CGSAGG+mtQBQJEBIG36ewhCFc
   lTpU7kUE8dThwAkqLLD8GJ6RhyPstl7KVtPfzeY+VTkcOS+MxMp1HqM2zObEEXcA09nG
   6zdzC0GtPrUEABJo7faN5aclh/dJMq+Fo/n8gg1CjVzXAV3C3jT0QDujbVpiVkQ3fHbp
   t6mEiYKK+yMjaYHyXrw8oIfEJSSl8pfMwMgIBAQQgpkS58Vs7cvRKXfbzyR1bKfsqAoS
   zK6AHGMYgKX7+576gCwYJKyQDAwIIAQEH",
   "c": "9437mnegOFctHafO3Reg0oUac2
   5k4spUrVS/UKjVwYdj0KCaCA9oAScV1C94Ds5Ge9GNloN8crcx74no41Ns4xYeWnGj3j
   r3Zgd/ef5HnuvZ+8kfuHs79WwjOg4okdXxTmu+CYSJ73AsAZrShPqY51+f/OiQG4b2bT
   sC0L1gZ53bYG1lNWIAOtxVlX3T0EnQWD9xNXOjq89ec7dzAc8QUn1GyhEjCQKKpTl9S2
   FYg38pj+LHF+YN1yw60Zj7ayenUQ/vDTt3R0tvwwPrxQEl2VDbz+hQ9n6Zr+WCxnmgxE
   3uki1Ll/uGFwXv6TTpPeiX59le40kJPu/6kJDJxPNmIWJzhi2lZa0Dx6Egpges/fG37u
   3Tf1xP4V1JuPexSyB9c4oN2G6nVSsOXqwMEKupS3UFAOsVDCU81xDqEck5iUE3LVMLa5
   aRIXGQ9QX06CT/5JQe4zGO0XCKXdIlNFinbUdDPhlDAzVVQjAAwtcEAPaxKe5r4Izg7A
   pA+W9x06Mwo7739Hbqvjpv/MFD5nHrzIS9CResNG9kLbbsQdZZXZD/YgwL/RJ6XlesqH
   VzQlJEiCLJuWGy1fQ1pffiHE9gxBsVBQesebOqVy0aP6rK8S+e5BrMwqTsUkOekKyxKH
   QqmyISiSXuoOB+JjOdhxb9hTo+IOpiWp+QiZe88+zt8jPWCKO8avoQY1Si8MWtIQu4/a
   k3MUyfprrSmjdo0+e1xPH94POVEWq1/OLDu+qxcaH8ThD9ukB4pbmXKir9tBO9goacXs
   i2387EDM8dmYnJQRUIwuYXfnZsvB8wNJWcWMk3a6R1mjiOQ2RJnB1boXVWhcdV3s7WbF
   G53rAwx//d054nNkpFCWpYBPFLcckK8WARnqtk1cZNEzDpBCLG0985OEOqeftEOhvP+/
   ZmSeke/lyglHR0Jm7nprssIak/U/lrv54eNXwwEqiU5M9TbcG08E32gdu+2yLYewm9xr
   FLcOSakgTkhz0oCdPMDubsMUowOZnWyP6tCoXGmThiKsKmlKgxU5bCnLQ2j58Nhn38mD
   cjHaPR2oiglBes7H1Ziablpb20XQfVYiD4Tmg0YLjRXW/NvtxdzoAw8NwwU5B/nWqKA/
   6VYIaZY53b0uXAOZ+eCdMyOK26EuldiyzykeYj3qbaKUI3j9+mj3p8uyH4XgGLhi1k+Q
   pue/LC4p5AVlbEurVaGNbfX4gA8SKPNvqpXxdRjc3J0jf94MEYMreKj0+xXrjroBJMrK
   mZcK7Ys2Y4O7fowfxU1oVl/qQdEqy2unO7S/OM2c7GMaDXBGmpvt6O1+KOToFXlzdGnK
   k2VFwFauOy3f7sODmuwR7OitlWtN4jLZIaASJIqCosp357ZtIQ45p7axpUIcKuijxv3U
   m+CDBLbe8LuAr/8bmB0u4vWloKBQF08Ji9kLhgJ0UEDWVysDH5ZKvs/dkrgIMSsEUEIa
   8xwYW3R3HsQGDadgfxJFsw1f6CWsvIBAej24H207+lWXE6YPjKcEsLz9sR6MbvTQUBlC
   YCT7qpBypEdmrwBg==",
   "k":
   "3GgyuqEU+sRvoMDKYUqcMlu9+sg+nDqlPIo9nunHZM4="
   },
   {
   "tcId": "id-
   MLKEM1024-RSA3072-SHA3-256",



Ounsworth, et al.         Expires 19 April 2026               [Page 111]

Internet-Draft              Composite ML-KEM                October 2025


   "ek": "7aI9+ZYVs2u+PsufRwuRS1FqNkor4xeR
   XsM5NafCKQks+TROANhm1DQsYEG1S4KJmbib6XQXfDGOghrPvsleVWYWFkc7MHumo0Oq
   PuALrGcBllnH28e/XKS1jUxq5cmiHyjHsnOa9TfPlwIr/HMBllu7uUIdWuYMsZM+f2VB
   2KgqdnMpBiO5bco7lIABWAG/osQTMtYj+WrDu4pqHmU/hbUF1IB6udw81/u8dzwHBASt
   EdapzUzHX9UwwLaE75JGJ2Aa7TuiOpKlTTMEgcA+Cuc+getsJMmSR+NGf+YRbJE4IkdA
   S+Gl9sEhoLN7txF6uKQywtM0M3C1dhOLdKZweHCJTnyoe+gC9ue/z6uKMJaTuMKgZPDB
   iuyT1ubNVbttAInIgkZudUXDswgf2tsjDdYBGWOWBBWvNWulhmog5hAFiJaYxeN9nKyF
   2ueWrSdjMWggkkFoe0LN7PdElPCPa1QXfyxRA0cQhiVeAndN8DQUUoGHxTK3AjVWKCpJ
   WXJ0cnCK2IwyNvay0EoD4qK8BiMnbIyyU/xfThNZz0SJEfGX6Ppo+9CaVZia7XSp7PE7
   6eZS15i0U5Zp4XMfDuVDQ6kShranEMTDBNifkNmAVTW5qcyht5hnQgSU3QLITziczOdb
   bqJz0Fu+gUFnG3ITjTzP4Wcb1oUl4GzKJXFjzEx69NZOC8dEaZaX/lUgn8OMQTtsemB+
   u/lAmzvOVNjEAIqqFKteQ8dbIwcpvffKiMyNn2KxPRuYt4Q08QCYIPN6yylVo4zJd+iO
   XTFHlgqZ/zyQYJepUoGEhzqXNrKW0PFRLtfGAnuCfwuYyzskjTM4YPNEzIdmaFM9/udM
   g5ieo5s14dVmTdmaExCOLcNJwWdOfKjCdOiycnKptsqJ49C3a/VK6iFDuJAAWshlx/sm
   Lqkr+DkNAGRX81V5veyQrXdOfbWYjesm76w1LascQMKQIhPDkPIB2phPvANp7IiYo+yO
   EcEFi3EILAFT2VQNcEWSitmFlYNl0dmDP6UtebZGQFyzOolM8lhlzRsn8ep5OLObTfmF
   xuAnIgyXG3qvgOqdIhlYjdMvQFkHFRKvtTAk7sWGUKOMgHWz3nJuvTkVK2c4LVM64xjL
   dqeUuDoOz/OI1hMxS4yTN5hwHMpEQDCUSFBJd3ozGTEZ8NtmcJdJ04CEl1Jz6VEnXLGn
   jis7SPeZaxkFlJggjjosPkUUsNuroZJgs/XBC6oIobeCLwZEl0JSC8g2x2S5uLsxdEt9
   6IcAVlzDyzScqmIrMTqADDdOTqwkXLll2edK6fFe2sAHDvyulxewGqtdPXfKXCou0ofD
   hEIx17U5HllLccWFDODEo5XA40ebSuxgDZm29wPHFMQRXjYi0hwPrWA/iAhsrsOxKjEi
   QAzCNUuRtPtV8gQ4P+euZ5sxctOnc1GjT+WwzOQ3xzVUpGIjE3CurosuG5MNR0E1F1NY
   e6eXd8Z1HwyEzrwCHbNEllgCyju+gLNfoTwx12lq+Dyf3JAk5+vB1GSgCCoAVTfKc1Gt
   hvlGy3SNIBONqSGcMiYnJPEk/iso+MocvWGZFjNfB/Bg+uCsGhNJv0aBaTilMXhKC1DP
   Y2YTj1CmJKVBuxoUdrFkapISizdoG1mFwhgAFLGntwRTFpOdV4iXd7hPcpFnRcPNv0xw
   blVCXiWwEYE2wugQ5/wrFjE29lY16xFGGrpBkUO7uppXM0vFDeQj+tcaAO2JBtQr4IAx
   TkQ0HLYtbtAyRQADHGEW4lI8jksImsNwLtktxgSJUTAbRYIA93Rg5rlJyJZYJ6FW3mNo
   4MWgd2du7uMgLngNemlpeQeg2yCyf4oZTvEXmRPKmPcqTQRtFoAQzKomCuFeGoxWL3rF
   g/GCLBiw7Cc/Apdx4TGQWlaVJ7gOQuFteNw7z5ZyG3RTpiAXWPSSfFqUuvk4rTwON1lr
   O4jPNKqZqHQElLqQnCt1XkG1pzYLuci75fGnxbLOtMWeFHdOSJY7euHKz2cchUKXvRVi
   jGZKPtUNhxci0TWEwFFJMNhALXM4BNvHN1sn7WA7YkteIdhj8fCmrG85EpXLaQcBR6uV
   FAYUOtNAklBGc679/LMwggGKAoIBgQDSSkU8zUEpEJIIi6HY5W5SIfGoJJHGdj8I5j6I
   SIcDm/atY+5T2OKoI1WHJbIXYW8hV9NmTTfvS41QUJScKRtF/vfNXl0ZCOdcG/CaTWz9
   AxIX/TBDYu2oyPPVdKlVPI4ezDS9TGS0JcbGiuxx2HNLNptPhjj7eGfMyvHCZWsZX8kQ
   8AJdo+RW07EgSQhi9NaEQS5rVRd1grFdRa89s6fba0HYsAo7oWtcnIomny1vApt4GmVX
   bR1vn9vflPfDZ87bLbBjMXACMaBsZKnrCRqDc0swbGGo1XsgC8aCStY0OqrPXdJG7psd
   jCZUbJFXrdIJ/G2482MDOCJ4q8QbFS1SFpTtCy7GlGflKa9amtlGwwhxyrdQgGxEk/Ay
   FFage2qHKSaHALJbiZx7H4TeNWzJNFq963gxStYwXraDE6AqWWO8+okez9Ppe0tHAQ3c
   8Jk4IUmrv1gKvkzVPvvvwipsQwzWVHCIHvTTxhywVyCI007nGevRid6I4xYJRRQvYj8C
   AwEAAQ==",
   "x5c": "MIIVrTCCCKqgAwIBAgIUF/0XiXmUqZE5Cu7/8f46so7hIaMwC
   wYJYIZIAWUDBAMSMD0xDTALBgNVBAoMBElFVEYxDjAMBgNVBAsMBUxBTVBTMRwwGgYDV
   QQDDBNDb21wb3NpdGUgTUwtS0VNIENBMB4XDTI1MTAxNDE4MjQ1OVoXDTM1MTAxNTE4M
   jQ1OVowRzENMAsGA1UECgwESUVURjEOMAwGA1UECwwFTEFNUFMxJjAkBgNVBAMMHWlkL
   U1MS0VNMTAyNC1SU0EzMDcyLVNIQTMtMjU2MIIHwjANBgtghkgBhvprUAUCRQOCB68A7
   aI9+ZYVs2u+PsufRwuRS1FqNkor4xeRXsM5NafCKQks+TROANhm1DQsYEG1S4KJmbib6
   XQXfDGOghrPvsleVWYWFkc7MHumo0OqPuALrGcBllnH28e/XKS1jUxq5cmiHyjHsnOa9
   TfPlwIr/HMBllu7uUIdWuYMsZM+f2VB2KgqdnMpBiO5bco7lIABWAG/osQTMtYj+WrDu



Ounsworth, et al.         Expires 19 April 2026               [Page 112]

Internet-Draft              Composite ML-KEM                October 2025


   4pqHmU/hbUF1IB6udw81/u8dzwHBAStEdapzUzHX9UwwLaE75JGJ2Aa7TuiOpKlTTMEg
   cA+Cuc+getsJMmSR+NGf+YRbJE4IkdAS+Gl9sEhoLN7txF6uKQywtM0M3C1dhOLdKZwe
   HCJTnyoe+gC9ue/z6uKMJaTuMKgZPDBiuyT1ubNVbttAInIgkZudUXDswgf2tsjDdYBG
   WOWBBWvNWulhmog5hAFiJaYxeN9nKyF2ueWrSdjMWggkkFoe0LN7PdElPCPa1QXfyxRA
   0cQhiVeAndN8DQUUoGHxTK3AjVWKCpJWXJ0cnCK2IwyNvay0EoD4qK8BiMnbIyyU/xfT
   hNZz0SJEfGX6Ppo+9CaVZia7XSp7PE76eZS15i0U5Zp4XMfDuVDQ6kShranEMTDBNifk
   NmAVTW5qcyht5hnQgSU3QLITziczOdbbqJz0Fu+gUFnG3ITjTzP4Wcb1oUl4GzKJXFjz
   Ex69NZOC8dEaZaX/lUgn8OMQTtsemB+u/lAmzvOVNjEAIqqFKteQ8dbIwcpvffKiMyNn
   2KxPRuYt4Q08QCYIPN6yylVo4zJd+iOXTFHlgqZ/zyQYJepUoGEhzqXNrKW0PFRLtfGA
   nuCfwuYyzskjTM4YPNEzIdmaFM9/udMg5ieo5s14dVmTdmaExCOLcNJwWdOfKjCdOiyc
   nKptsqJ49C3a/VK6iFDuJAAWshlx/smLqkr+DkNAGRX81V5veyQrXdOfbWYjesm76w1L
   ascQMKQIhPDkPIB2phPvANp7IiYo+yOEcEFi3EILAFT2VQNcEWSitmFlYNl0dmDP6Ute
   bZGQFyzOolM8lhlzRsn8ep5OLObTfmFxuAnIgyXG3qvgOqdIhlYjdMvQFkHFRKvtTAk7
   sWGUKOMgHWz3nJuvTkVK2c4LVM64xjLdqeUuDoOz/OI1hMxS4yTN5hwHMpEQDCUSFBJd
   3ozGTEZ8NtmcJdJ04CEl1Jz6VEnXLGnjis7SPeZaxkFlJggjjosPkUUsNuroZJgs/XBC
   6oIobeCLwZEl0JSC8g2x2S5uLsxdEt96IcAVlzDyzScqmIrMTqADDdOTqwkXLll2edK6
   fFe2sAHDvyulxewGqtdPXfKXCou0ofDhEIx17U5HllLccWFDODEo5XA40ebSuxgDZm29
   wPHFMQRXjYi0hwPrWA/iAhsrsOxKjEiQAzCNUuRtPtV8gQ4P+euZ5sxctOnc1GjT+Wwz
   OQ3xzVUpGIjE3CurosuG5MNR0E1F1NYe6eXd8Z1HwyEzrwCHbNEllgCyju+gLNfoTwx1
   2lq+Dyf3JAk5+vB1GSgCCoAVTfKc1GthvlGy3SNIBONqSGcMiYnJPEk/iso+MocvWGZF
   jNfB/Bg+uCsGhNJv0aBaTilMXhKC1DPY2YTj1CmJKVBuxoUdrFkapISizdoG1mFwhgAF
   LGntwRTFpOdV4iXd7hPcpFnRcPNv0xwblVCXiWwEYE2wugQ5/wrFjE29lY16xFGGrpBk
   UO7uppXM0vFDeQj+tcaAO2JBtQr4IAxTkQ0HLYtbtAyRQADHGEW4lI8jksImsNwLtktx
   gSJUTAbRYIA93Rg5rlJyJZYJ6FW3mNo4MWgd2du7uMgLngNemlpeQeg2yCyf4oZTvEXm
   RPKmPcqTQRtFoAQzKomCuFeGoxWL3rFg/GCLBiw7Cc/Apdx4TGQWlaVJ7gOQuFteNw7z
   5ZyG3RTpiAXWPSSfFqUuvk4rTwON1lrO4jPNKqZqHQElLqQnCt1XkG1pzYLuci75fGnx
   bLOtMWeFHdOSJY7euHKz2cchUKXvRVijGZKPtUNhxci0TWEwFFJMNhALXM4BNvHN1sn7
   WA7YkteIdhj8fCmrG85EpXLaQcBR6uVFAYUOtNAklBGc679/LMwggGKAoIBgQDSSkU8z
   UEpEJIIi6HY5W5SIfGoJJHGdj8I5j6ISIcDm/atY+5T2OKoI1WHJbIXYW8hV9NmTTfvS
   41QUJScKRtF/vfNXl0ZCOdcG/CaTWz9AxIX/TBDYu2oyPPVdKlVPI4ezDS9TGS0JcbGi
   uxx2HNLNptPhjj7eGfMyvHCZWsZX8kQ8AJdo+RW07EgSQhi9NaEQS5rVRd1grFdRa89s
   6fba0HYsAo7oWtcnIomny1vApt4GmVXbR1vn9vflPfDZ87bLbBjMXACMaBsZKnrCRqDc
   0swbGGo1XsgC8aCStY0OqrPXdJG7psdjCZUbJFXrdIJ/G2482MDOCJ4q8QbFS1SFpTtC
   y7GlGflKa9amtlGwwhxyrdQgGxEk/AyFFage2qHKSaHALJbiZx7H4TeNWzJNFq963gxS
   tYwXraDE6AqWWO8+okez9Ppe0tHAQ3c8Jk4IUmrv1gKvkzVPvvvwipsQwzWVHCIHvTTx
   hywVyCI007nGevRid6I4xYJRRQvYj8CAwEAAaMSMBAwDgYDVR0PAQH/BAQDAgUgMAsGC
   WCGSAFlAwQDEgOCDO4A+umUJsMoShnlUfvEQi98CiAoHMt5fb+cPMn+G0rD/CZ/jFVWW
   O4W62khx5aW5+J8sbqH+4LBig/xU3UtTEbFpIG5rF2gY3pTv/h8Qb9/op91EM+aAYZcJ
   C9OdsdV3BZFhDRa4DzCntIKHlROJ4isnj9sg+i/FG2Dox9Q/Uw0VM6NA/sywcGYqflta
   IUvuj3WSU2LX/0n/0+HBUeD3NAgT+NyInjwKoOXW84dijzR8+pCn6SZRq+P9Cgynldms
   /lawFy3Kr2HAIzsyhF+iSJ/5fyCrta95okT6NGSAaSoyHz22DP/F6XM47kVgPPkiLwsS
   SjRkpSxXDFzRnFa6k9et/7yijgTgxk9IXnMATbLdi6Vv6vKQv26mDNiSlfPySLu/uZ/I
   3pjLSHwh64+rD6/jmUD5INWl1pHvTEB/bmNdkY+qFhkDbaXz2p6UHGORpLTtV9jhv8bv
   905QUKz9U7tml7GA/TPMN4wQ1Xi/YScejI3733biPuzW8zeniqsu3sIK7SbRGK5nfwcE
   3R8S9n/OvUlmW8B95X6d4erQda7PFC+kM853wZKYHxKD5krs6K5jabP3aD/HZhqCYu8L
   E2HQ0Sc2ENsOm1/jxeaILX1R+lfz2r+j/xJAefTAIIEXRHSMcyDpNxVZ+Etyzff/HM4d
   g2F6K1YYJKuXjXYUwQrgyOI0Rf5DPNzO8omyITF0uwaejEpQ9DlCsHd5CUNJ+v+LHFdU
   OEpneSi+lxAh2Q8AZY+pGF4EcIg04WCDbeOPEf8is2ajZuup6A5V+6sNlnkO6q+pVpWa



Ounsworth, et al.         Expires 19 April 2026               [Page 113]

Internet-Draft              Composite ML-KEM                October 2025


   dofu5mGkxbK7Yqd79AC6aJfHNChlpvUbNGHINR6YkDM3OpKJwJXv06TFmXwgJvwgIK76
   omzpwSn86wC6fLWAjdPxCsmg6AQ9mym6sERQseWhEqsd+7BwVwEc+rchb8LYb3+pLFQR
   AjVR2XO42n4gO2KzNAXFmBPUGLI9HKxuvWjk2B/5v+rCg4/+W5p3IRPqHREd6CiwfF/+
   yG8+482tIhad0ZdVvXMophIu3QYqLKSC2CmiAnEhlHj+O8ZY8IVOE+Ja134ebRrYBgQ9
   rY4MKtWvsEaVKYLXk7eVxhPIyr0dnHZluG1xICnmTpOh+cm89VwDyNmb5D+p9AHRwn4c
   XG+nsgzsVuecKOcws6K0ER2HiFhL3dGwlIHg2AQM44K2cTRUac/sCXTeVLKcrnC6EoAg
   f093+xod2j/v7OFMpBwrQda0kqJ+Dua5H0IaIBPMaZOlTmh02C06w0HheOsotEbcjfe9
   l/br0G4LaQTySFvhfvCp1BHz9xFYIzb+yeaa8Pg5Ytal2ZqSXl5DEhZrw4KIaYge/KtG
   WWSeXJWfrxge8cgLlqiTnNGs3yDrVBa4hN5CkOjxhuGh8y8YLpg0O7kSuWK6Xxu9AG90
   mjRzaSYRd9tTLzXHA9sj45/tG83TrThpK5Wrqr6CngPue1Bw0Wjd+wPtn87+v39flRwl
   EOl4S6WfozJiz3INU1V5oSPoTNQG13JNLxuI2klmX/f5nGhCY2yvbDa/qZnQnmY6Mb0i
   lt5bbWBqYqDcqxS9s3U0xoru5gu1wN4HPZ1DC8OE3YnTOkQlPIDKb9WSVy35JJuTtDB4
   0IhdKu4PpmBi0QdDpXYI7FFuMig9B8lS56OAOXWQvylGSHFL9By4BNyxZATOPACgIQu6
   xpwVAvLesL9OoAkyV2OE5g2pV+IzVjbJ9g+T5KKtPvMpYoFSy+YD3s/iWb5f9UjKDnyZ
   XKIKyomFX0qIBUDAcRsYrJAsyIONsvb80SmJCCpaQtr7TpR1o5NUcP2TdNxG9yqUJEhh
   vypSz3d3YHiYTd5CxYtnHowDroQjj/IV5mQdql2bh5GWsta+2yzo4UDVTDrNewpSqUDI
   YrAuKT+Ydt6OnZTJUqIOB6GW/WM+mTahIQ2Y672NMa4c9+gGQkt8MoVBr7MzOZaOcwgD
   asRk5o2i+HT3WwgznAQNINfWp8nxjm6hmVqj9+LTxpmuvAs6i3/Y+3lXYnT4c6xWJ4If
   d/L3qgXCQ575ZKAcTSH41vqyNw+pomPk9Gd3yVrPtCK5ljpbAKDnG9qI0RBeezA84sgI
   fkDCSYlMgjXizhJUnYet7GWGhtemdqWIaqwlt2YI48SP7MrrOIbCCoHKb/lIx3/TVA24
   y/ZmTLOSnXcJwHzEq/BQk9ZXGWL3v3wC2NAaoyOOXInrGivdsoiKtqlM8unLdJBuOm5c
   9aayJ2HjSUoZVVR2VWCATf15mYGPxB2SfhuGhWF7jZdhsyiFJdqxzcBrdKPRtvPgofIH
   8DT6fmzRJmczFwRij7IWXRKKt/dmRcTvCuyGgydJrboWDJdVBJLMZJZzbLKokdu3aLf5
   94wm0JWobVJrvYEvqx6DIpTb9Y10kc4m3zjvoPhxfiRmeC2gti5JIGw1uzjIaGzOs52U
   wZS3f+B4fdu4ni1jE37D7BXyHEJdkoNfowgpVQgQtmMq5YUen7bpCOAWTUIf/j6YCxed
   ZDbSwm9k757TCmWWfXH6gCQDCVTLY/1rWAByvExt5DvOBIdf0Lw5Pl76yFCFZZa2d+fy
   O8L4ZF+FWUqCR66JdDytvqDqC4bT45jy+BB4Ugd1t7TVqj9W9f9u8fN2lL5OpVEjIm93
   vTcz+ZYMJSC2+8eQzuN2Ch4Zn4wfvUKPno97Km2oqdboC2IQryEkYVdVQT55OETbk80A
   cLsS5q6yUTB8Ud/FCRxo4ej5kPvm9yFrWpDHIizGaZgcSF54u6jZIGKH087vDb7MLtFd
   j6uQFwAtPQPWqi+C3can1eITrV4ypsfRRjZeVbdJ2ttMHYEnzNPIyvwhhz2Js3VtzuLS
   gdi4ObmTUBuroeIrTVtbzylez7eG3QuS8Cy7JMWB967dJkqwiQ/N0uv4zkIzfP+VErz6
   U1nnvTTSYstAnKUvcEWnA7BzqMhP3+4yyoRmN3/v9h7xigIcFLy9xU49DBCYx8WkGnSU
   zgfHi8iZEii9N6/7L+pkSoXsYLnExVc1vGW0mqqqd2K7dZi8YdrVGOMIe9HhzUqRvO/5
   TpsyWAa9kgIuUSVp1fVlSRR9ODMx+ciDPqNoeJM6GvibIUHv8NST7J14jL9E4OcczObN
   lEr/HRvdzf/sZ7r+11//aUm4+Jc/Wqoityp8TrBLTeCESorKlcrl9OgZKbQrEMJJ36MQ
   uvSRIgvK2XDTYDUoDF62xXDeFWKytuVv37It9X/9FUkE6iUw6IuOivPdvfhpuqjAQuPy
   FuohtEGb5DYpEt8lwetTLZyWuGc8rczfix7e7CJDuRQrLPpBlCQ+vfE236euR7IUW9VQ
   BcY7j3g/7SqIC/+FdaMGy06TnsSh1DrCMtTFEX7PppwmMQkW4zLk96H+U+EoerkQzyJs
   8BKJH1gmevJl8SuDFLw39FrMj3SJIRZ2RIzJHp/hja4O1I68qDZrZjeJVLzSiVmTZAFG
   K5lfGM4WJTMKjtf/HeFaJMHDfiHHtfDzZd4uib4Th8rzdaLYXOj/VcIIoB+Ru9FKNfVh
   m8ZidbvPN6OuEVqHiVCS5NrS4lEY29PhXIkrozj4qVyHyAR9bKIpq3u54f26tlA5wW/r
   4R9glDE3/wC8CT03X3BEjf6wtpmKqOnL/Ub54iBMM+GIh3kufs3+8Z7VOoeNjkmsA+su
   Z/yaKNAfbuXwRIH1yG4yY9zrphAZoFU0NmoMZ2yRYYjexfuxBRPWEqbe6C71bJYhz3I0
   sMd8o4N/Yjjs18QEO0EoCg9EzNnAZrh7LkkMi3c4W5fKm3EprsHw3yiV3gT5lhfn8FkH
   MUAv5hwLL5FmwugMMUBJkeNHo+rdjcJWGcC7uycJ99L9pp1q/EWCynOGtqmpsaBmHbjM
   hn/k/jyigEAo8O8esQAuiQbu7eOtebllvypKCwETLs8VHoRnjxI1Bl0tBne8dvgoLESQ
   v6mLW45r46BIxZKVwVHgPquaargI41lHed1nA0gZSesa0HkfVM/ActEnv/LBjOEG1mtT
   GhgCGCUKd2xwtzDzeQzrZuvW9oN9d9K15N6RoKHOsSusciYwWnUE79rDC3P2Z2YwDhvO



Ounsworth, et al.         Expires 19 April 2026               [Page 114]

Internet-Draft              Composite ML-KEM                October 2025


   Xzl+ToP7sOX5FIBZraqEy6+G4YKke1U3SCIuAffKICuOjbIotqYg2ALbw0E8mdOwlJQO
   Peis4uZZnWgItV8KzTtHTiu2YqnupS5omDvRKl41CJRclwX5BeFT56vwGtiA/WGxBb3R
   3tThTdldr9f0hIsv3iijIdCAJ0CP+hf/wUggzKwne90Dn2jyegaO9Og33nfVfV2FF6NB
   ET+1EX6Bh0T1NOvXRim8SxDnOaQ+my/BuUFeHpqgHiLR8do5q3Aq1dYKNChSvJ5Pl1hc
   whjeaPEIpHh8/Qii7nCXcXX2O8bN5nC0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
   AAAAgcMEBUa",
   "dk": "8VTIabi+jnx2yfRUE7KVo4TmTACWVj3tPrdiTBYsw7uFkJw
   9GRVUpMGdyAKnZHvLZciU0kbQVC/BHQPVfc2dAo4BMIIBigKCAYEA0kpFPM1BKRCSCIu
   h2OVuUiHxqCSRxnY/COY+iEiHA5v2rWPuU9jiqCNVhyWyF2FvIVfTZk0370uNUFCUnCk
   bRf73zV5dGQjnXBvwmk1s/QMSF/0wQ2LtqMjz1XSpVTyOHsw0vUxktCXGxorscdhzSza
   bT4Y4+3hnzMrxwmVrGV/JEPACXaPkVtOxIEkIYvTWhEEua1UXdYKxXUWvPbOn22tB2LA
   KO6FrXJyKJp8tbwKbeBplV20db5/b35T3w2fO2y2wYzFwAjGgbGSp6wkag3NLMGxhqNV
   7IAvGgkrWNDqqz13SRu6bHYwmVGyRV63SCfxtuPNjAzgieKvEGxUtUhaU7QsuxpRn5Sm
   vWprZRsMIccq3UIBsRJPwMhRWoHtqhykmhwCyW4mcex+E3jVsyTRavet4MUrWMF62gxO
   gKlljvPqJHs/T6XtLRwEN3PCZOCFJq79YCr5M1T7778IqbEMM1lRwiB7008YcsFcgiNN
   O5xnr0YneiOMWCUUUL2I/AgMBAAEwggbkAgEAAoIBgQDSSkU8zUEpEJIIi6HY5W5SIfG
   oJJHGdj8I5j6ISIcDm/atY+5T2OKoI1WHJbIXYW8hV9NmTTfvS41QUJScKRtF/vfNXl0
   ZCOdcG/CaTWz9AxIX/TBDYu2oyPPVdKlVPI4ezDS9TGS0JcbGiuxx2HNLNptPhjj7eGf
   MyvHCZWsZX8kQ8AJdo+RW07EgSQhi9NaEQS5rVRd1grFdRa89s6fba0HYsAo7oWtcnIo
   mny1vApt4GmVXbR1vn9vflPfDZ87bLbBjMXACMaBsZKnrCRqDc0swbGGo1XsgC8aCStY
   0OqrPXdJG7psdjCZUbJFXrdIJ/G2482MDOCJ4q8QbFS1SFpTtCy7GlGflKa9amtlGwwh
   xyrdQgGxEk/AyFFage2qHKSaHALJbiZx7H4TeNWzJNFq963gxStYwXraDE6AqWWO8+ok
   ez9Ppe0tHAQ3c8Jk4IUmrv1gKvkzVPvvvwipsQwzWVHCIHvTTxhywVyCI007nGevRid6
   I4xYJRRQvYj8CAwEAAQKCAYAOSxMKr27S4jfy0b7V9b46YelBgv7PjQD601+Dtt5KbgL
   lxSmRVGgPgptRHMxOj4ZUr1oElZIMN0frIhb/yEF8z/g64sOULIlBNvrzGfki917293Q
   c2HAL7WC5bP0HeJ62VC3vge5EWl745r9se4hWn+cNkDN2UDhJ8K9fBbKyXlLVzmJyx+2
   Aw1HCPoSN6VNdWOrVS8rU52Wzz8U5/eiWXuNyXYDMjcu010UCnAYkCfrUPoMN3rJGAIk
   a2M7AXuFOUQXO7iujuMa2GV+1qsb/EmAdVB6NumvQC9txi9I5C5rhWLp2nO9HuQiXTMz
   8J+lDRw4+/ZkDqwovw4hZhidt0ooxVN4LwRauAAbiLab4+VggOrrO6JMbZDS078fqPPI
   YyMuICrf3LBo+e2ogr0aET3MjCUdxp1ltaCzAAygKgL2nIBNz0d1uxdxfGFw5K9Lk5DP
   OssnLyWjFhl2wFgbbr2VyCrY9EKTcGqeBXoPueScToIW9Y5dVsqxvg1k5m50CgcEA/vX
   /OTAOXCqw2B7Cb0Nlm7B6xsJQbgeRDlhcMVyg1lAk+CLxfuq1X2klgXzuhZ6kOat2/vq
   z4NKkVS1rLsGGuXjwi5PEgJO5x2UtDXxfSAZOvhvRi+hp2AZnx3uqX/xMcL5CpeL46mh
   8X6u3r93QjaMlDwuOPtPi8ZivlRUIeDlX54PFZeyatDr5nDhtHZ9aFoZ28mI8/wn8oJJ
   0kb9Ph2LgW9U0/n7XqE8NSMO7KF5/M5G71qjAbedMWJPsuO+LAoHBANMlqwR6jYh2sKg
   fwVIxiigFEPfyUFcqz+wTtPJKfWJoncBDter2e/0py53IVsLzXkAFBA6MJtuXIFvjQhN
   ZQbzaNu/COCcTegPAJeCzK+LYl7REJReHmdSkSQwshdxkUTj98AsrdZN+FoFAVLCEbN9
   by11NBZC4WKo8jMQ4He++2wVSwVCA/iZSJ7dxSLOXPcSy8vhudj8Kvqq1mMiMU5GdpQ3
   XSghpNKkmrp+xqldmYi0aoOngwooD2s43GlyunQKBwQCJLlb6sC6pzJaGUlaPgxXipRw
   KYXbhHNUhgM1qCcrIRSr/D94cSbD4+xwhBdVYs7jtBqLqIn4yU2P0KJHpAFu646WZlBJ
   AlDt7W6bYALlLiYlIpLMkshJxF1Ezdgh/yMJgTx6RHwSLK1jwKPaWe6TA8Kz54V/R0jP
   jhiHC9yQte70eZjoJ0zqSCsFPGtUrARh50jOhytXC696vjt2Fpgfmcn8BKkBvRlRGzPH
   62sWSvPV4C8ujffy7pZ3gcwcFom0CgcBNZBAT2yuHKiHD7ae5Dala08iNaMZjvLBrEio
   PaJgeesPfVbIXBfMaLriQA38xg2w3QN9kyZ/weqsEov50AxIiO0VJicF1KSFewI3hlyp
   twf+Qti12O2B53SFdEfCagDZ5EjJqlapJvjxXcZHZBSC2mXmnn/R7P+ZXt0vNG9h1KFo
   00ElEzZLZzuD5zs7b7IJaV1DRGAPFRZXvEhKG51A2HjcCJLfg71a67Q+yPrd1w3QWnhz
   +vD/xwEnxraa+880CgcEA6YjkT5JiLDNzqC7kOD9xFX5yLjjDkQa5E0uJpOHrgCWXds4
   gddaJ8Lg/ev+TnYEcQguElw8TkrjPP+I04oNGaeJwErmGSvPoiJhlgt7+gK+/CE5Giu5



Ounsworth, et al.         Expires 19 April 2026               [Page 115]

Internet-Draft              Composite ML-KEM                October 2025


   TGzi9kgZ6xQ9gYw4AmBkfDC5gHcj+2hlzPuNKSm5Pa976/UiuE9338NcrqJh5gVbnHm/
   thqG3qKZw0Xx7eUEIxJaQcv57OL1JDOf57T6jnWsCZGMmL0W8mLaXvJVuJ9/bwGaQp4u
   NSv6b",
   "dk_pkcs8": "MIIIzgIBADANBgtghkgBhvprUAUCRQSCCLjxVMhpuL6OfHb
   J9FQTspWjhOZMAJZWPe0+t2JMFizDu4WQnD0ZFVSkwZ3IAqdke8tlyJTSRtBUL8EdA9V
   9zZ0CjgEwggGKAoIBgQDSSkU8zUEpEJIIi6HY5W5SIfGoJJHGdj8I5j6ISIcDm/atY+5
   T2OKoI1WHJbIXYW8hV9NmTTfvS41QUJScKRtF/vfNXl0ZCOdcG/CaTWz9AxIX/TBDYu2
   oyPPVdKlVPI4ezDS9TGS0JcbGiuxx2HNLNptPhjj7eGfMyvHCZWsZX8kQ8AJdo+RW07E
   gSQhi9NaEQS5rVRd1grFdRa89s6fba0HYsAo7oWtcnIomny1vApt4GmVXbR1vn9vflPf
   DZ87bLbBjMXACMaBsZKnrCRqDc0swbGGo1XsgC8aCStY0OqrPXdJG7psdjCZUbJFXrdI
   J/G2482MDOCJ4q8QbFS1SFpTtCy7GlGflKa9amtlGwwhxyrdQgGxEk/AyFFage2qHKSa
   HALJbiZx7H4TeNWzJNFq963gxStYwXraDE6AqWWO8+okez9Ppe0tHAQ3c8Jk4IUmrv1g
   KvkzVPvvvwipsQwzWVHCIHvTTxhywVyCI007nGevRid6I4xYJRRQvYj8CAwEAATCCBuQ
   CAQACggGBANJKRTzNQSkQkgiLodjlblIh8agkkcZ2PwjmPohIhwOb9q1j7lPY4qgjVYc
   lshdhbyFX02ZNN+9LjVBQlJwpG0X+981eXRkI51wb8JpNbP0DEhf9MENi7ajI89V0qVU
   8jh7MNL1MZLQlxsaK7HHYc0s2m0+GOPt4Z8zK8cJlaxlfyRDwAl2j5FbTsSBJCGL01oR
   BLmtVF3WCsV1Frz2zp9trQdiwCjuha1yciiafLW8Cm3gaZVdtHW+f29+U98NnztstsGM
   xcAIxoGxkqesJGoNzSzBsYajVeyALxoJK1jQ6qs9d0kbumx2MJlRskVet0gn8bbjzYwM
   4InirxBsVLVIWlO0LLsaUZ+Upr1qa2UbDCHHKt1CAbEST8DIUVqB7aocpJocAsluJnHs
   fhN41bMk0Wr3reDFK1jBetoMToCpZY7z6iR7P0+l7S0cBDdzwmTghSau/WAq+TNU+++/
   CKmxDDNZUcIge9NPGHLBXIIjTTucZ69GJ3ojjFglFFC9iPwIDAQABAoIBgA5LEwqvbtL
   iN/LRvtX1vjph6UGC/s+NAPrTX4O23kpuAuXFKZFUaA+Cm1EczE6PhlSvWgSVkgw3R+s
   iFv/IQXzP+Driw5QsiUE2+vMZ+SL3Xvb3dBzYcAvtYLls/Qd4nrZULe+B7kRaXvjmv2x
   7iFaf5w2QM3ZQOEnwr18FsrJeUtXOYnLH7YDDUcI+hI3pU11Y6tVLytTnZbPPxTn96JZ
   e43JdgMyNy7TXRQKcBiQJ+tQ+gw3eskYAiRrYzsBe4U5RBc7uK6O4xrYZX7Wqxv8SYB1
   UHo26a9AL23GL0jkLmuFYunac70e5CJdMzPwn6UNHDj79mQOrCi/DiFmGJ23SijFU3gv
   BFq4ABuItpvj5WCA6us7okxtkNLTvx+o88hjIy4gKt/csGj57aiCvRoRPcyMJR3GnWW1
   oLMADKAqAvacgE3PR3W7F3F8YXDkr0uTkM86yycvJaMWGXbAWBtuvZXIKtj0QpNwap4F
   eg+55JxOghb1jl1WyrG+DWTmbnQKBwQD+9f85MA5cKrDYHsJvQ2WbsHrGwlBuB5EOWFw
   xXKDWUCT4IvF+6rVfaSWBfO6FnqQ5q3b++rPg0qRVLWsuwYa5ePCLk8SAk7nHZS0NfF9
   IBk6+G9GL6GnYBmfHe6pf/ExwvkKl4vjqaHxfq7ev3dCNoyUPC44+0+LxmK+VFQh4OVf
   ng8Vl7Jq0OvmcOG0dn1oWhnbyYjz/CfygknSRv0+HYuBb1TT+fteoTw1Iw7soXn8zkbv
   WqMBt50xYk+y474sCgcEA0yWrBHqNiHawqB/BUjGKKAUQ9/JQVyrP7BO08kp9YmidwEO
   16vZ7/SnLnchWwvNeQAUEDowm25cgW+NCE1lBvNo278I4JxN6A8Al4LMr4tiXtEQlF4e
   Z1KRJDCyF3GRROP3wCyt1k34WgUBUsIRs31vLXU0FkLhYqjyMxDgd777bBVLBUID+JlI
   nt3FIs5c9xLLy+G52Pwq+qrWYyIxTkZ2lDddKCGk0qSaun7GqV2ZiLRqg6eDCigPazjc
   aXK6dAoHBAIkuVvqwLqnMloZSVo+DFeKlHAphduEc1SGAzWoJyshFKv8P3hxJsPj7HCE
   F1VizuO0GouoifjJTY/QokekAW7rjpZmUEkCUO3tbptgAuUuJiUiksySyEnEXUTN2CH/
   IwmBPHpEfBIsrWPAo9pZ7pMDwrPnhX9HSM+OGIcL3JC17vR5mOgnTOpIKwU8a1SsBGHn
   SM6HK1cLr3q+O3YWmB+ZyfwEqQG9GVEbM8fraxZK89XgLy6N9/LulneBzBwWibQKBwE1
   kEBPbK4cqIcPtp7kNqVrTyI1oxmO8sGsSKg9omB56w99VshcF8xouuJADfzGDbDdA32T
   Jn/B6qwSi/nQDEiI7RUmJwXUpIV7AjeGXKm3B/5C2LXY7YHndIV0R8JqANnkSMmqVqkm
   +PFdxkdkFILaZeaef9Hs/5le3S80b2HUoWjTQSUTNktnO4PnOztvsglpXUNEYA8VFle8
   SEobnUDYeNwIkt+DvVrrtD7I+t3XDdBaeHP68P/HASfGtpr7zzQKBwQDpiORPkmIsM3O
   oLuQ4P3EVfnIuOMORBrkTS4mk4euAJZd2ziB11onwuD96/5OdgRxCC4SXDxOSuM8/4jT
   ig0Zp4nASuYZK8+iImGWC3v6Ar78ITkaK7lMbOL2SBnrFD2BjDgCYGR8MLmAdyP7aGXM
   +40pKbk9r3vr9SK4T3ffw1yuomHmBVuceb+2GobeopnDRfHt5QQjElpBy/ns4vUkM5/n
   tPqOdawJkYyYvRbyYtpe8lW4n39vAZpCni41K/ps=",



Ounsworth, et al.         Expires 19 April 2026               [Page 116]

Internet-Draft              Composite ML-KEM                October 2025


   "c": "g+3Vfab4dNKQPM9W53
   9Y9CWJsMOnRvR41t+u0c0Y7BUqZ0OONiiuBTOwpHsqdOrl4sNall6+F+Y83ZSO2ftMnD
   avjJclpTRkGgvVOEa4FByk86KSOw/jAM3C28n0mWwvzJfU3xintrLJXG4iRpMZeEIQzL
   3r/DhJMazovLkbuWuEPLijT/G7IRW/c1KIjOMMeg2ZyEGIpKHzao9F3H/Owmh6sLaTRI
   lFXMzIuYIJXwlVRG4gAMvmXm7NklS8WcIeld2unYYUJFl1SE9wP+LWLPuP3loshvce2M
   0Vd5n62s7rY9v40usxdVJyryJ4/VYMyByQEwq8BYVKXerT5wf10ivdYIVfpI9mmPnU5V
   NauMYyaJxZFJpnQ4ISn7JxjFwAlQKB85hoOpwgiaN6mFO/YIng1myqSZFPa0g5NbA4N5
   lMDg+gKNOLN3LjJbbvVBSyrQw4wbK+ZC1VDesy7Npb8ccBOTlWH9UYBTUhuFiW3GQPW2
   bQ2GcjeRcFU9ozDizXBxOcY/x5Dpokq4pECGCLaD98MlVMwrAoURKX3L9NtJLbApMSTE
   IVxdCKzLxWGlguxPZ2Ao7hMLdUqIQz+A0QZD6+dsLfXlqoftSysoOxv294veMpnoaLYW
   5k72+ns34xPQT5V15xKdLVTruFGRbFnuFcE4k8ODpCWNgpJ4eDb46iEK8wzfcqr3aS4t
   3zPUH8D9uKVd+FMpuulUF8x+NXCQTb1x8lhKgL9bF6F1rRjRzR2zQ6sEgx1P/jOLttht
   eifb7b692tLZpRHKZ7ojW7V4pD7+7MVXi4ptMEg1BWtT8FXHKQX6TUf7dfWUvW8wSi1S
   kdaMvSOqulKB+vWnp9nfGstqc3iJhThzK6iA4TAc9ZPifUJQiKSetn4eiAXB0/eF6ADS
   xcPAN1jThMRBY+04cTwCsJz4slgPPoLKdMAj/u05Hq9hStfgX6ZOv9+JCv+e4Bng5lZe
   OKnSSwar/V+pAmEONPO1dfl+tlnGv2bE340ZBHAAaFWZi1QVNNZHxj7CatFG6247q4c8
   BJaquD3BkFQZmW3kHaTQWD36CT1L9JKicBFd/CHjrRCPRuN24IO2cgTHjZ8CIoI27sS4
   GwKwkCSWDrVZUah4vAxZS5HgzeLxbAZvTfxfkHLymFX8P3iZYgjgOUrePx30++2wI4uS
   VHJN3ItDJNvVxf5h5uAOhE3lJUKubPAmlxmdciOIXC8wKyEI4w6o98UaRRpsvI4lvvea
   sDV+N+ai6vc6KJZwdYKE0yGPxF9DXhk/d8HiKgY6zQUZAEIcH/CbATUdu9foSKvpLXCD
   gPnmzjB34UEwNWD4JPwNsqjBjqI6yJGz5GmIG0oEHXS+BDhe81sGLO7fnYmXCnks9Fhy
   aL8Z0RJYUppJVod3LBNZvdFe/V3kf/oJV9LCFvm191G4BWfhieSfOgY0GvLkkAs8ZBhU
   2lVUv+CJpJSw4oxWdgY4pLV12/+kL9mjov+xAldIZHZq5kTjOukDv8IBNM17o7YIwLk4
   N9tQr6eVXr6Q14XD7QogG0jt0yo3oYIA14UGG9rgZRqDpNEA0ZzFzGrYuzpj5WftlIzr
   3OVHZrnp+MVRXxUv0a+ogIS/Mh6iHLi1Z3fOAz8e1kn0Ejeeb9hyAMZ7jr72oby/uvNI
   kTjAf+s+aMpN/fsHBiG1Vl7cIFRZ1NhUYurWYmvPjma8Sa7EcfqEHNZbg7hvhWxpYeyc
   efLnNEyCUq71wTq8NdfzK1R6B5fa6CTjdhqPqdi59iYKZ+/7Bz6wnCozS+F6FV/2Y484
   /k4sKPthsz4MzMwyzd/89eltbMw6ASgn6A0kayfZoGK6qc8rY3+MbTIKN0kJq4ASG1zy
   dGGFalWh0oIrwaU3WRFd3DjUN5oy1uJleJyqH9zwN4tSMWaHetzHxKpxFPiItv28WM0O
   0OcpOsc/t85RTWzIgYtWDRX/Whl6DZxs1U/8NXYtTUpcPsQSBX+xAldgagQlsMlVMeLr
   RjfQ+X1Gyo4G+h4V47q1dbJHWLaaB1JQj9MBCwvDHduKK4V61HVVP+xRMn+jWz2sDipd
   BCy0NfmFI2pY5Sp3RVYVUDhZVK6xXMWeuWv4Ahc2J08Z2J3KBeDcSgiASYXkjAlSljTe
   s1/lX7MCNOIGGv+jZU3ynALnbu5OjZr06/L+QPs/3ZxrzLFqkk2i33DnTgAJXZEsXnRK
   E0ICochNIo5siEq1mNhzjhyZ05iS89yqDhpHjX63uJlNcJ5d4Kke49xxjZw9YHSHEHEo
   XCPsf5V6jTByBDgTyOpf/DcSRo44KRtkG3AqnKhxp9j+qjlk1oBEjRMYgfLnowwcTaaX
   VOBkr28CmtjwTT0byAuaiP8NlIpfDhLXf7qxc7D0qEDAT8MBbeNZDqQsDwK37OiB/OUI
   mYv3Tu9mCmDkRXrsHt8wwEJPOnRcEaKWg0XgBw0AaIdxdpTVpVrSuZeVozbqMWdc4AAQ
   0Gx1f4tDWoc/STKH/27MNhFutEzE0PJ5wzyrieuXqHk/6ETX7Sdjf0VTlu9GGT3pUwOv
   iFSW4SWdhwKDmExIriMPcCThjsX3alIpc7ZthqINLhUPbYmRS7dg6Jb4n+jo/4e/D0Bf
   g=",
   "k": "OHYSoYN7Oz6+8u97Z3f8s2UfpAP5vf3VdR9oLuaSSEQ="
   },
   {

   "tcId": "id-MLKEM1024-ECDH-P384-SHA3-256",
   "ek": "ZiS3ODZ724QeeVhXdD
   ERdiApu4pSreE0IzixIzwnYIaor9oaUpWHSPIjSJxRKznKkYSzO2Wr0bQrDZRqDZdr4K
   uuiYg/GTaEdpSa0voRH7cpZSUO2om7fNabgBFtLLMarPNdq+lKPNhJP5vNsXoBEZE//Z



Ounsworth, et al.         Expires 19 April 2026               [Page 117]

Internet-Draft              Composite ML-KEM                October 2025


   wHuSCjL4FgEtwQq0KY/rQn8uCvkkMsNmG+X2lwQ6vDRNzC70o5FGg6PuHIUNoJT3KiNI
   x2qBCO/xkCfEFY+uYKy6pvR/s17hsth8UQGpUKG5CzkEaSvGO2SVMwchZLvGOAqqlnbZ
   EeqXNlcpQXboGBI4tHRLcpgXokgvtEsWVDG4GHPyrMevBHY9GDGMAV1ohLwRhyZnKj2r
   oNIJBmk0m5LaxOTAmfYDmnNhkSI0gLOzWb2WCtN0AlPeqDQoItCAoj4oc7b4SuS7uDUF
   YynpMqRPYzS5HBuusRtChB6ySV79KWqGcCD7yUloo5czgBdKdf+wSo8BKrVQFPy2GARr
   VWNXpcWgpnW4UMbyGK6PehmVRaI5KOv7CZlsYbLmgjtNBFG1SsoCkVovLP9CiDCth+pH
   yxKNRVAOuO35Nwc5OCM8mD6stGsjyPQeAnTgbGY/Mx3TKgCpk/QnOCnNKzlIYO95zCci
   TJbrWzGXNA69pxQei72/WebuahzoWzjstPZNoGvbSv8tgO2TiijDcVdHCqGpB05KlMQ/
   dT2ZyP9OtsgaDCdVqGW+lqdyapjEEEJginCKlHU5HMSLEJ3QJ6kkkeLCBhlken8Taj5d
   Ee/TZ2dttz38snkbeSw9qv6wiaDkaitGTH9tFqlMpHwkK4DzUw5Op4BUWLFCyfGHdvEz
   HF8Mo8CCTIyofD2aOyoKEnl3xoF1JegXWNIsALOGGlYweYl1jCXZFRp7WnjAKW8jGxo8
   FiLaF6+AE2HRQGCVunl1NeDnXOMcBVGMquyyoqaSDNUkmIm4Q3qPetRKNmpENMqTfFuA
   YK+Zk/n5W0MGehyoBuctO6hQPGuaSUYckQ+iVPN8Vl1ADL2ioHvYc1CttPe0DFHFVicU
   HCanWyFIAYXBlCyRvKC7iqv4Y8EOtQfpwXhIkUchpF+yRelpe5s8GfN1bK3kVwv8bLLT
   zEKrUWxRwxwSZjslFdV5k220NJN0QJEYJqDBChj/QBCpC2FMs6cSpsJakIcvpDpbiGGR
   cY2FUnVpwYMouNWhJROmOrLjTCnCVPlTmrEMd79zaZsbLJVQoYSdPPawlqH2Fb4mcMyC
   UEsom85lIUk9knZ2sM6vzAcFakEgRxTJsF5GpKXoR0POpw/Xtmu/EQ4cOlY3apd0Kx8G
   CqiuhO79eh0jCDHQJWkOKExhE4NGBEcQQqlFq6AczHpVkgQRhytOF+4qO0UWg5n9tzN9
   Wy8FmWVEDFnqMX/yRdp4NgQvtlylk514M9OOqxrilv1CxJXogWNEXFl/hGCGPGYtQaOa
   hXxvZLHUNVdyWiAmMkFcFTEDqZLNxrPDaVVKCFkebIzUiq3PF+lUwaDZGXzAyDYFfBfh
   OiDRZ1wCsEChcrUXkJ1kBJaOhuEqed10AA56NX6qZMUzcKAYCOZ3B57IRmPNt2M9hBKd
   GcFQw+GdKXH/ckJpVXPRNQS4hPWwWM0/I44rAUrRmlWdYWaexHGYJuR6nNkyRjiTi9zt
   FknvuW2CZ8HeatFEOjnjikHahNSndSKsFBo5sAC5gp3QqRXwu/4pGTsoxIhNM5pooreD
   BYrDOTbjlxfnpbwiVeq6EXtUkYk5o6I7F3fKAsKDaDNZIKVspN4zBw1Pg3UycJAdYasr
   RbskioQGcD+IKpqdlWTRLO0WZF4CBH+7thIdhi1LB86ii34ozElWxai9q0H6vH8yCDVY
   N6geJEUGBBmqM3r5OuTxcKNGuvBfYS0bQ8u2OZKMVRe2FmcCR8lROY06yuiPFRxwDNuU
   HO0BYgFdmMLTYfFys/O4o9zYuv2deeKdS9eRQc54ic9fsKstepFHZbEJsgm3ak5QWRvF
   WSolCdOZyZLjfBUVJpswWH2GKIk9KfwwNyOUmL2kd1+RZOkYCiFXuWWAkKzEa7aVTq6s
   fuecInl+1xjV5jqIYWIXD0ZQKv5lqkSfcEvKaIEbpFmtGAWKcz5l4sdgmfHl6T292Umk
   SnATdLjw9buMv8WSiq+9oQUlGvR3BwEblatGqodRTnP691aLZDZOhcXgIUP+g6OyZet8
   k1LBgou0VT4Q6nIMbEYBGmVdhU",
   "x5c": "MIIUgjCCB3+gAwIBAgIUYVXaqDIblIM
   2MaJzvs1yUFjt7sYwCwYJYIZIAWUDBAMSMD0xDTALBgNVBAoMBElFVEYxDjAMBgNVBAs
   MBUxBTVBTMRwwGgYDVQQDDBNDb21wb3NpdGUgTUwtS0VNIENBMB4XDTI1MTAxNDE4MjQ
   1OVoXDTM1MTAxNTE4MjQ1OVowSTENMAsGA1UECgwESUVURjEOMAwGA1UECwwFTEFNUFM
   xKDAmBgNVBAMMH2lkLU1MS0VNMTAyNC1FQ0RILVAzODQtU0hBMy0yNTYwggaVMA0GC2C
   GSAGG+mtQBQJGA4IGggBmJLc4NnvbhB55WFd0MRF2ICm7ilKt4TQjOLEjPCdghqiv2hp
   SlYdI8iNInFErOcqRhLM7ZavRtCsNlGoNl2vgq66JiD8ZNoR2lJrS+hEftyllJQ7aibt
   81puAEW0ssxqs812r6Uo82Ek/m82xegERkT/9nAe5IKMvgWAS3BCrQpj+tCfy4K+SQyw
   2Yb5faXBDq8NE3MLvSjkUaDo+4chQ2glPcqI0jHaoEI7/GQJ8QVj65grLqm9H+zXuGy2
   HxRAalQobkLOQRpK8Y7ZJUzByFku8Y4CqqWdtkR6pc2VylBdugYEji0dEtymBeiSC+0S
   xZUMbgYc/Ksx68Edj0YMYwBXWiEvBGHJmcqPaug0gkGaTSbktrE5MCZ9gOac2GRIjSAs
   7NZvZYK03QCU96oNCgi0ICiPihztvhK5Lu4NQVjKekypE9jNLkcG66xG0KEHrJJXv0pa
   oZwIPvJSWijlzOAF0p1/7BKjwEqtVAU/LYYBGtVY1elxaCmdbhQxvIYro96GZVFojko6
   /sJmWxhsuaCO00EUbVKygKRWi8s/0KIMK2H6kfLEo1FUA647fk3Bzk4IzyYPqy0ayPI9
   B4CdOBsZj8zHdMqAKmT9Cc4Kc0rOUhg73nMJyJMlutbMZc0Dr2nFB6Lvb9Z5u5qHOhbO
   Oy09k2ga9tK/y2A7ZOKKMNxV0cKoakHTkqUxD91PZnI/062yBoMJ1WoZb6Wp3JqmMQQQ
   mCKcIqUdTkcxIsQndAnqSSR4sIGGWR6fxNqPl0R79NnZ223PfyyeRt5LD2q/rCJoORqK



Ounsworth, et al.         Expires 19 April 2026               [Page 118]

Internet-Draft              Composite ML-KEM                October 2025


   0ZMf20WqUykfCQrgPNTDk6ngFRYsULJ8Yd28TMcXwyjwIJMjKh8PZo7KgoSeXfGgXUl6
   BdY0iwAs4YaVjB5iXWMJdkVGntaeMApbyMbGjwWItoXr4ATYdFAYJW6eXU14Odc4xwFU
   Yyq7LKippIM1SSYibhDeo961Eo2akQ0ypN8W4Bgr5mT+flbQwZ6HKgG5y07qFA8a5pJR
   hyRD6JU83xWXUAMvaKge9hzUK2097QMUcVWJxQcJqdbIUgBhcGULJG8oLuKq/hjwQ61B
   +nBeEiRRyGkX7JF6Wl7mzwZ83VsreRXC/xsstPMQqtRbFHDHBJmOyUV1XmTbbQ0k3RAk
   RgmoMEKGP9AEKkLYUyzpxKmwlqQhy+kOluIYZFxjYVSdWnBgyi41aElE6Y6suNMKcJU+
   VOasQx3v3NpmxsslVChhJ089rCWofYVviZwzIJQSyibzmUhST2Sdnawzq/MBwVqQSBHF
   MmwXkakpehHQ86nD9e2a78RDhw6Vjdql3QrHwYKqK6E7v16HSMIMdAlaQ4oTGETg0YER
   xBCqUWroBzMelWSBBGHK04X7io7RRaDmf23M31bLwWZZUQMWeoxf/JF2ng2BC+2XKWTn
   Xgz046rGuKW/ULEleiBY0RcWX+EYIY8Zi1Bo5qFfG9ksdQ1V3JaICYyQVwVMQOpks3Gs
   8NpVUoIWR5sjNSKrc8X6VTBoNkZfMDINgV8F+E6INFnXAKwQKFytReQnWQElo6G4Sp53
   XQADno1fqpkxTNwoBgI5ncHnshGY823Yz2EEp0ZwVDD4Z0pcf9yQmlVc9E1BLiE9bBYz
   T8jjisBStGaVZ1hZp7EcZgm5Hqc2TJGOJOL3O0WSe+5bYJnwd5q0UQ6OeOKQdqE1Kd1I
   qwUGjmwALmCndCpFfC7/ikZOyjEiE0zmmiit4MFisM5NuOXF+elvCJV6roRe1SRiTmjo
   jsXd8oCwoNoM1kgpWyk3jMHDU+DdTJwkB1hqytFuySKhAZwP4gqmp2VZNEs7RZkXgIEf
   7u2Eh2GLUsHzqKLfijMSVbFqL2rQfq8fzIINVg3qB4kRQYEGaozevk65PFwo0a68F9hL
   RtDy7Y5koxVF7YWZwJHyVE5jTrK6I8VHHAM25Qc7QFiAV2YwtNh8XKz87ij3Ni6/Z154
   p1L15FBzniJz1+wqy16kUdlsQmyCbdqTlBZG8VZKiUJ05nJkuN8FRUmmzBYfYYoiT0p/
   DA3I5SYvaR3X5Fk6RgKIVe5ZYCQrMRrtpVOrqx+55wieX7XGNXmOohhYhcPRlAq/mWqR
   J9wS8pogRukWa0YBYpzPmXix2CZ8eXpPb3ZSaRKcBN0uPD1u4y/xZKKr72hBSUa9HcHA
   RuVq0aqh1FOc/r3VotkNk6FxeAhQ/6Do7Jl63yTUsGCi7RVPhDqcgxsRgEaZV2FSjEjA
   QMA4GA1UdDwEB/wQEAwIFIDALBglghkgBZQMEAxIDggzuAM7Cp1/PTeIoqPvR63S4Ajo
   0sUQVh0YKfN7q37yA+jzfy1owkLMFclbiXnwEJgYZ4zluQaURI/bs/8FRKHByI+pneIY
   L81EIi11hSJ9yWsT6FGwUsVoGYbER2kAlVNdNXXe/xqY8nTKA3X9r+IqN6OEPwb4uOS9
   jmL79D1c943Qtexg7MMATtSVX13LETbe9T4IxJBXVMJDwbnHVRcmdXezu3KEPdw1i+F3
   ooBVPNk9sbggDfQHmCbJconlPRgINkB5H0+oaSrIuSfP12yn18ZFnCLMcvPo6QwQPJB0
   CXNYVWaWYdoVoYOuqSXIr3vR0zd1tRmQeC5oeQva8MONCUkCfX4SPc39jzq1VeM07RlF
   xhUCDmLljVrtjTSTIYXqHenDWKiPEd84MBmhMYVO9MalTLAUJk0uYAEo3HazKySEJhrO
   riN3czG2xO+Z5oHAmJIdyJeRdQeK/oEQfCHdI2P/XakhhRlFuM8MrlVtJ28RBAcxMgh7
   hgozT0RxPv/NRvduqaRxaRcayOKcbEiPj3ZF63bVv1nUtLwEIYHW+F+BlXDv6pdbxUCK
   NcHMj8MeKKtsSZRf75TzmW5Y+2c58t668sWMTf4fRq3YwsoVcHCLPbMbJHp5Anm4rPIE
   meIuVKpv1Z/bQBpi8PvldFww4mo/acQJOCD0SEO7yxlW0J9e/rZguv/PGUS1Ioe38yWO
   s45M8UeYXRD2QGhzVHg/B4rn2AY8xiGFcZ52u2nPxdk1yIZSBUXoIFrlD7SoHS9cUPnh
   rUcpIdZ1A5YJiezvWfEsubr2DNnu+n8ycftPzRvi3H83NyOMgcIhOZvXD7mOmYEg+Cwd
   bgQi2ylPdy5/kq9Q4cSW83FqA02knsjY8OSr66yqZJWVhUs8NqzGIlvnWWoPKLafDY6A
   3NOJVIMnZPlUZzfWBBGn1WWDOoi+m8QNTBJkc9yJOWrtC3g7o1/mgVgtn7oTqI2X7F4e
   Hnk7BmsTxdj+ZkM8MwD4i81XhmQOs5/zs4qcpQDepKu7nYoFfxGVVHstepZYRjhpi4Qx
   MI9IIXsHDb8nTUmlCA3yT4EeKhpgiA/Ly2JPVbcxuflOiJcMAjYBRHNfcBL9KecfGYEx
   LWQPT0hZbR3+ctBaSuqbt+goobbDTQ7gwmpwVBI8pAoaoTAqQtXB23xB+Xbvc7GcsCdo
   PbuxOh2alw62cBxxKWMFux7fcjNY4A020u7aXFasjKXGMu05IPQIdyr7Jt/+GcO7Gj/3
   pnLQSlNwCsLemQjLBvTgrh7wMw6mB2qOZzGBJpsctk7eXTo993aJbIihJI9toUvZiN31
   sCAyzDhW1sP+hopuV0JUbkjWaPgEdh5KGKBojb7w6RlNENAA+5ZsalzkwTTe1XoQFQI4
   RfooHvhb6hiKSziyv4+uvFS7t2t43sGA71biQ+rG5HXFlg2PZq+W3SW4td8BGCfNH5Fk
   Gw5j7gCkZCwYKmpRGn6GZRINOwu5vsLRQv6F2yygeIaQkobh+Glw0GgZCqhB9RI01//V
   wfG92JziuA2wsUkwakL6IkznYGav7Nk3+3iXLLboxPNA7u4AlTLyyID1s/g6MQ5tLT2E
   p9EUvWt9CuDfYgfiRokS57koAgwkGj8uaq4Z5hznROYkKuwK8CCNMDnpKcgTUxs3Kl5m
   MYp3hbm8bBz8aFPwhHbsbwvFVY9WNWWEEYkz7eon3Utw920q2Ac5izuVs5FzOJV4DYWE
   TQUBgtPzaqTYWPJEzqw5wl4nS8HUqRPC9gIgDxHwi8FPmW4TnwkzUEMkHmoUFhHxe1BU



Ounsworth, et al.         Expires 19 April 2026               [Page 119]

Internet-Draft              Composite ML-KEM                October 2025


   bHVYjlxfTSI2ZIj0z/aGexDKV0rEjlh8Gl304nBBfflUngVlxoumeU9JrNe3/sxTOsXK
   I2GeAMPpD0OVHKBiZgYtnUWqeCPUvLdlUB3aj5zbA2hIB2bIVClmtvYRDxXO1xb0Z0GP
   yMdkoboAwnmaKK8olXmNysxfjNTdY9XvujJzwjaMeUdiYc9p01NtFdD7BhHjjdFb4njG
   HJpyFXlVF2EuX25z5vzUipdcFXnWK+qsXUe66a5vnEWm05J62vA7m1U+N3UfMPUMhQuJ
   VNm4DVWy+l2sw7qRkAfFH8uCA3lUOXrihrcanYl+nK316oNrRQ+BZQKwg8EIxrWRQis+
   a0JXWzUzSCpJa7OMYI/lYJtmI9y33DvSCuhEh2CNfkDa8Moe0lSO8YDZHrwFWvZugz5e
   hdx972sEFbeoOZGKSC7lR3vROS7AYuQrIvEcvmVagCVwWEUdzB6xmccus8C6283TVdmM
   sF0DRfXbI/eKwAioB1HzHprVlP3IAG8lel76chObO7kIbuBXZSaD8KcTtRtdrDAJ9QW7
   fd0xdKUZHXQpe4NS9DogwnB1us76bgsvl2bLroCkXvAAXu7OIRVweNfRlCYANyV8itr2
   X4mam6uNBKpQSs2r6UYsucXcvUkGsnm7M+68MDMqOVeFPNUrIzaA++G9JIBcQVe998P8
   tdKUNmWAOqunuSIUy/j4FTGXcl0EUirQte0ymkOt4l1oTamOrHM+Pt7s2HvtV7sok4D3
   lflmlARkTgLUkIA5mkL9TCwsPjyPxT/qBfNz2ghn/ziiRBSJ4b+ae+IExuGP8F/oX1Ya
   375fvPu8XTYdHfeUDTM+LduAOxHUbfudRLUjdkIzj1wizKG+gVRRtXAGJw22xRdDcz36
   NajJQ/NlYnkFNLf0Vh52YJ1fSPRhG/A3iWT0Z6scwTlBaq754L57mIZe4Zhl8AicK2sI
   1MChxkgcZJg+cbDaAP0qG3M4fqtPwX2mawocorSZ9/+71ITsDvTFOMm4fWH3gD0tJiJ0
   XJ/T0cl98kkCCMUb0DujzlJQCc5hm5FbT8Od5LU9xrWj40guhWGDINsYoK81+075HGhF
   CG1nutd0KRz9tOCsv6tweCjnBI8uSNt0IBCjwzPU+MSzPp+ygXigvFxszwc1RO26OmZM
   mrKWICQAOPfrlMWKNX/cITzLX78a0mMMOT8WBkWs6JVPsLNB4OS9CHx6pitppqgdnXWn
   Dqzwu6t4NWhHJB85VuNu3xdhszO+5SIm32gJQJLKdGaj5nWTJC+9qsXEFJ015rOrGhvx
   4WntcQ/I/Q0URU6MscenmthglG327GvPexa47YhS45E5/zRFSvb1UTdODUvXWmRZCIee
   0YMWwnu5kznvldj4J0U6Dr0Smthj/eJ7oXKDyf2QvYuCDIcIaC91OTSV2PNGTJDgwMjo
   pQ2vf5ttjYWfBikznyiKgsYfb9Ff7KI2NIy962njaaliRxppOyl9dhqBAq4m2KoHe6dK
   Y40IiGA5HHzrvt5mm+89l9wDpjPlKrRkgbJnAoD41rTFRdiuRL4WIJzTrbcpIn3+H5+F
   ljQUSZ1MheptyicpnouL2B0v0CPJVzq+N5cNh7GqAjrXgh0X7DndDEhFRmn2KhfEisS3
   TkT5acS6B5qZAha3VYmK31d62mzXTfsc83hqUq9XmZl5B+VeC5WLhNSCXsG27Qi/V4dB
   d130iQa3hbcpzKBogWgr8R7sqrOxKiM47pHto7RRRJ0B8olMwm5Fqg7oxMuM4bBAmC9K
   E9HI76y+z21CA+cjNOXLKsaU4AuKj9xgLQfXFb3qhlsDw093nEv+HxB+iL0qkASNtOD8
   20z9R8yCoUpmYeCBYGduCBjERHgyws7RADOJXNrSVgLEPvLzqztDaFsEbwHyN7l1Yb47
   /GfRKRFoj9A6vgU/lDjY3+53zYZGH5boNdcyer+dEsLRPw28iuafpabbxE/fj587+q3t
   jjqQk7xE5vUlmF1p7WY/HtznZ541rK9UZlW3mJN/6BpizE8V/NCk75+sXHSiVi5ziwlj
   w+I43DzuaqzJREHH1gzP1oGJAtLtJK7SqyLxH+Y/edT2XXohWnr/fhI8OdzJm8g33s8x
   cfTT/d/tmm5BFNrIFWp10/S6eK2QKFXD6OTkmSLfQGgF0IAS4SFx7QwZ0e6DlnSRKXZU
   THbQKxwnf0Q17Cz33dptBo36Cm9pp4saVd5Bf4K1Z8NTuGZ66g2Zj3/QX41NnHoHYiqf
   bBwsC/qwNR04gpctsCNPlHYLw9qUKWWn3hNG6f/Gli0NSiuY9kKh9jJPH5Ps/UciTjjx
   twOBNEgBe3Xheu30rYiAs8/WkOQPgp1TUI6vv37FqebXk726d09SNN7+6GFwYwNkfvsg
   VcJlXbsYx9OJTxYksavqgDzk9mpFZaSnckkFZFdpzVh82WHgZ7KwftGAQAar0inlhVky
   OajQS8LU0+5pyQQxEays9zMaU4lwR18aRQb8LeyMTVexDXSLvczsOEFy1zpO/xj17zWR
   Y+6dxcXScXImnAbMgEnTxuNLWeIW3Q0hQgc7wC0FCTm95kNsHHDaWpdgjJ4+5u9HV2iZ
   nf8HLAAAAAAAAAAAAAAAAAAAAAAAAAAMJERcfJA==",
   "dk": "lC2pQ4QXpgxraPR70
   AZf74MHnK2Cf4k35l13O3TzHZReQPCl6tUakuuPHlrSE0yAplgJQj12sawG/9VXVLT3Q
   2EABLymiBG6RZrRgFinM+ZeLHYJnx5ek9vdlJpEpwE3S48PW7jL/FkoqvvaEFJRr0dwc
   BG5WrRqqHUU5z+vdWi2Q2ToXF4CFD/oOjsmXrfJNSwYKLtFU+EOpyDGxGARplXYVDA+A
   gEBBDCc6qBtl8xet9h+xtJwygCPyN2+4BbQonm3rW92gO2AuX/mFvD3US8qvVZQIsumf
   SqgBwYFK4EEACI=",
   "dk_pkcs8": "MIH4AgEAMA0GC2CGSAGG+mtQBQJGBIHjlC2pQ
   4QXpgxraPR70AZf74MHnK2Cf4k35l13O3TzHZReQPCl6tUakuuPHlrSE0yAplgJQj12s
   awG/9VXVLT3Q2EABLymiBG6RZrRgFinM+ZeLHYJnx5ek9vdlJpEpwE3S48PW7jL/Fkoq



Ounsworth, et al.         Expires 19 April 2026               [Page 120]

Internet-Draft              Composite ML-KEM                October 2025


   vvaEFJRr0dwcBG5WrRqqHUU5z+vdWi2Q2ToXF4CFD/oOjsmXrfJNSwYKLtFU+EOpyDGx
   GARplXYVDA+AgEBBDCc6qBtl8xet9h+xtJwygCPyN2+4BbQonm3rW92gO2AuX/mFvD3U
   S8qvVZQIsumfSqgBwYFK4EEACI=",
   "c": "nfqptTGcw99X4uYjD7/lbV/HmD+cojvu
   KPf6RH5szPhsza226BDFNSiVOLT6st6uWwkuLrt+te7bSkVmCORaMcPsxorDpUrIcyyn
   g9Dg8uANbQgtYde8qOtNxVqqGIu5Ue3r7MDHx9BpR3Jqjo01K+vo3cSK2DE6sLbHvusx
   DURPJM32FHaXmvOxMSQt4x+4FYRduXxS0MTT1dRY4v/5h7DWw+cj7hTf/X38ld1Bp3Ic
   z4j977a8cyCJ6d8y3PwfT1/gKn4Eu3uId7cVljxgWC42u8uFe8PPSCJLix+5ZWCyVP1X
   lvXRwcrENqR/HtWuT3hu9tJjUMb+4ZtcKQpS/zdhpI8HGNWcQqAp7rQ3tnn+ot8dU9nG
   XS3lSn5OPgG+WhTkpt/Xm3xOSCS/jRINqNRCtz/Qsh87mmrA0pqYvS2PEbUHpeBA7vij
   Yb6DkbVgeKfoeSbnrv/e6/O0Whp2zEh6jZHIyPW3aT6j0/JE1NVofcGAti1Krmf81Wpj
   isBUgBnldq+khmMkV6gyVJc6lFudQz+rsxCKut/ZkzBjEh1dJARfd58Aq0WFrR/tFmg4
   NmdHXINjf9N1eyENfb41IkwSpJCAUp9t7971IexD89gfeP+mrNV9I6F/z8C4viABQNyB
   0HznOCYAmIHWauWdUKXHMyIIy+UN9nZnVsBf6FMSFlSnPP3vcYnRQpNouLNEidKZ0Bay
   dkWmQUlBqIIHgz7Gvr2gRjNroX+2boliz6pywpKy03Fu03BdBU24peDlU92oYN7/X+pO
   2jZvEaAz0GiC0BCkz7lwNeZcJLd4FgvQGjY/4dEqo5V7BSjCYWwwnxGfEGscl2tidKag
   rL+QGljgWG6CdMwUPGxoES8w3Dceue/w/zjYxv4YklHDcppjAx6wW3ciyscWvhy2AA4Y
   4RhjXWdjSq/YQbyrpoyn0Eow00JVuY7nEhbnMQNYec8K5uxG18/xJxvWxlmFqKAswaM4
   Rif8nEfkol4axF4mMsD4Y0qzzc/DqbPZydkxJpljGG3HKRHgXr3he6c1f7+vibCCNOL3
   /36Mywg6vZEue9Yzt1fprojhCoBKK7iYqkEhN/d1H1x1+XS6OjMHP+QfLEnVHnTHHuzN
   ZLD3vjje3xo5AW+/4MUDdN4GiCNcALiGpsDm1urSzdDWr1QuRpsytjSKqdICNPF1VOlT
   GJBgFGR67Ff3s3YjCX8zqXc9FO2fLj6uePIdxSf5zHiPTpeokNOMNRR3yKjlucPZZnfq
   fGzChpvHkhQTHVofK0l80wEl85UG5mBkS0wCmRUjVvk+MfbvDV7UP2JLpkabr7sfetS8
   RaiMRS7sTtZOxazulHCEqvnA8z5xwEgxVWIZ8ASaPacDCtOyNOIkFs3UP5TEYiQXGW3W
   0ip6GH8Qs3ZZXAF7wV/hrHOw9+ADPmTecZ5ZMd65ax3+0ho72kFwVs67e/Ce7ziOCQfx
   MUmd/GVS8YO6ggcrjx5xsSTPuxeB7luQ6W/PAN3YEZ6FL8/3QmDgYo8tz1op60kFw2tL
   edWMxgYys8G2maDO+THs3g/JUFMNeUF372GlOE93JjV8T1G6Ot4pal4sF8/aMOfTaGjB
   c19rRXlt0u1jEqSnGdqbspxDwJ2lCxpewrGiSmZ2VSJSwd/E5z5j2B4QuC12nZpNY5OK
   HQz9cx93RTCnNOWoNh7LIQ9K7N8WM8tO6oAnMgK6VsJLo4a7iOk5f3DYolKeXvzwDZJO
   bhIIL08U0AzlL7zzrhUuEIq5swPzUPLkxnUxy/RmPSRAVITDbyVDuzb7S/pEJHKf556D
   GuAgRLEsETQFHr+n19bx9qt8ILH1eRIdqX/5fcn+YFDUe0VJ/GbxodGje+PGwvpKaVhH
   /EkxlYguQQ317+pZ/6NETVUM5GLGtlNMqDj4EFTdHjDkWnEBB9hreHPMRXWXU5Ufhca+
   a+ULETg8JfQPOLhi+cXi5Ytfy+J46vnxDzxaocltkDeAU4V2tFAC2wLODgtUWYRf094Z
   im8e9oGG6mhJGwSuuXm6ZvPpwTpLacTv332v2ns3SOiiVcIO65QdXla7ecxOfDJGXMeM
   uoqQ8RQdKmVpbJhjGOcEGE6p5j8CbtLI/rQj/X76kdh9eeYtB/n7MBoBwTLc3K9/9YsD
   Nq30KpSq97dA5R+sq+hVMRABrxzQfXh+HTXfZwdnyU6dYbCCUlGE0VBg/1X+McF+K2jC
   BNpqcMJsAjeb",
   "k": "+WEEFxG24D8ohM7Z6sdKBreVPP+X1srLSeRwlRCszDg="

   },
   {
   "tcId": "id-MLKEM1024-ECDH-brainpoolP384r1-SHA3-256",
   "ek": "y0
   MMRzuUS0RC0KhQI2AhcMiwA0dTcuJ3t1aaOwN3SGtNHAxbuAQba2nBHbxIpNkO0bkdth
   RpWcup3RQ5MXZz8bO6ywCsemxePBBpXpefe0tvaheUxjDNDPYXO4rOGuAw7ZApZ9lTPf
   yGQWC5mDudG5wPQfUSjHJiwgV2elIUFLmTD3BChoMPJ+uwuhlsyzZviBWkA2NuL/Mrle
   zKhWM07PZPj8qWaQuytxg+8bCC31e3+LBcQ2VPBXdlPPp7x0cNYZRdBARy7kq/NmSXrO
   RyaWeDKugOavtUDUEClEIdM3Bs+ddzVuTAfIm7gIELmwCwQUmvJJEDgcamNyK43iq4xA



Ounsworth, et al.         Expires 19 April 2026               [Page 121]

Internet-Draft              Composite ML-KEM                October 2025


   p/sLxM4qlK6IpQ93ZSFkNdhAhysCJSdqMP7UFo00hO/SglptNHjEgUPGoCkoy3VwdiVO
   x9m9QDpCMKdiwCxXq+Q+i4wysv1+qBYxuc/1yG68TGRJWM6Jd9ITsL+5lrOGo8FWxkHj
   lizXgXXoodU5cggmdyw+WiUSecbYlvj7K8mHEh0bg83FdCvFqfOZuhTZscbPhh8BQ4fj
   UbKfVHcxnI5jNZxRogVHAJ23jEJzOdJUeRg1Bj67xlO3wp4+hP+zadeWgKtoy1TaKqGk
   y6HiRUtVZT8luXw/q1pgKicBYgsQOYWfmAddds4PowFwI5pEcS9HwS4UcYMXgR2hUtFp
   AKYKFJusmbQ3KrhPagSqlTHebPrwdmRuS8GVtMv7RMMKEIt5Yt1PCLUGKUJOiLFxef0e
   s8R/Ogm3F0HSepG3Asu/qwtxkrUom8p6A86npt5WFeuIQnQrYyTbRjOoKceYOj/cbCxV
   yYYzEa+Dw6/DBqLXkpvluosKZdw0KlG8hZhYl/0miIPDovlByyMJpUXZJduapZ/UsWAO
   BsNIKwutg7JUR4ctguEDA+n2ePmAs5b6VgBGaPdKSbDGxWy/nAkNM76SxIZGim3rMgWn
   VXFvldfoIBIvEAQewuTBQ9QIqNZ+d7sLJlE1c8NalPPXLDxemV+SCgcHcDNlZfl8E3Rg
   yC7AMiRClYXfh4ghEiA3YzKGFaS9ebYPhTmcRMe+CrYOBTPpwsInw3ROyJKUR7jbWi0I
   oBviebezimJ1QpG/dalgSjTEdNqzl8AzxkCGGVIhWIYPoZEMO82RMeN/C091Zn72AJH+
   ON2cEzssOE8JY5Nzu93Iq10xys4ZkMnji1HXWeDcMlI6UjZBGo+HISozLIklvCKZwmBv
   JVWxOZYuWpJAnQxhp+zCJ0qQwI32sfNtZUuyxeBkE7q0NZBQcqtze2HDIKfZyINIQwcK
   QZleNzQSWP3nVHE7I1vYsPUJGcNCcaR5KiF9lpvlF609msrVhr3xOwR1CzVlqw3dtPc3
   JpzOV3yFh2uFSXKyANh7jLjhK0Jcp5FLZdsWFz/keK+cxNsSBl1wRkpgzPskJzD2hzHQ
   UYR9zApcu4R8GX7YYDQHirpluvhBs/XPFMqSgFvvYNyPSOORYXY4ohgtsxuidzX4tNTI
   YfwCarreSgaVF3XTYsXZpVPhd/cdmqjNdyPMAPuvZth7WR2kqO/kVa3Kivpds8XddygF
   ovOoZmV7MpkUotWPk9JierNBarH+tDN9bOajvGxYlF3Ai2KGB6I3fLhxg0Prozu3Y8DF
   kWUANNkFW03sF9EhFb6hgO3LQ2dpe4lNpmMzpQSwFMI1FZtnW7PJp8CpS3XaQhghw5zc
   uMpRoUyhdqMgc1KcwYIvCQkvGUjuvCZ/t5S2WTtlweSauvuQdYR0xh7jIUsZSyRsxbUn
   fDIHsn4RHLKlFOlhWWiqEmXei7gZPOsRgd2fEBlYsU4yVN6lnHfKfJVQCebsVRABSuij
   GNpdeuTPOaUKAFocupRFGJ/VK+y4KMzcE6TyaRR+iK+6SChyxIkPmQu4BF4MdGNOV58z
   AjE1mOSwqtAtyeVfJGJVKK2rkWM5NK+dKEAdKWYpkS3lBzwJQHa9KPf6gTzVy+boiLkI
   mbg+jOJBgXa1wpu8iQHMJVe8a2ccHERbVNG2qfRIxclzN5ePdJmqKxoeZn+ilqgKdShE
   x1MsCidqyYV4gz49Pfu6hVgVJfWffvY/oQQwUIqtPQeRc4UlYEKITA25a1lzHC1V3Uzo
   xdXm41um0SPWhHQfunlvBLWQL26j9TVNtFzPhH1EOaNkC8VotBttB7Ul2o2pIxRv9F6S
   c9MU/hcky4H5WS7IuSjDJwX8L2TE8q1v5RGgKo2Qmt",
   "x5c": "MIIUjTCCB4qgAwI
   BAgIUW59ME08uu8eFGCtPxeOwh2xzR4swCwYJYIZIAWUDBAMSMD0xDTALBgNVBAoMBEl
   FVEYxDjAMBgNVBAsMBUxBTVBTMRwwGgYDVQQDDBNDb21wb3NpdGUgTUwtS0VNIENBMB4
   XDTI1MTAxNDE4MjQ1OVoXDTM1MTAxNTE4MjQ1OVowVDENMAsGA1UECgwESUVURjEOMAw
   GA1UECwwFTEFNUFMxMzAxBgNVBAMMKmlkLU1MS0VNMTAyNC1FQ0RILWJyYWlucG9vbFA
   zODRyMS1TSEEzLTI1NjCCBpUwDQYLYIZIAYb6a1AFAkcDggaCAMtDDEc7lEtEQtCoUCN
   gIXDIsANHU3Lid7dWmjsDd0hrTRwMW7gEG2tpwR28SKTZDtG5HbYUaVnLqd0UOTF2c/G
   zussArHpsXjwQaV6Xn3tLb2oXlMYwzQz2FzuKzhrgMO2QKWfZUz38hkFguZg7nRucD0H
   1EoxyYsIFdnpSFBS5kw9wQoaDDyfrsLoZbMs2b4gVpANjbi/zK5XsyoVjNOz2T4/Klmk
   LsrcYPvGwgt9Xt/iwXENlTwV3ZTz6e8dHDWGUXQQEcu5KvzZkl6zkcmlngyroDmr7VA1
   BApRCHTNwbPnXc1bkwHyJu4CBC5sAsEFJrySRA4HGpjciuN4quMQKf7C8TOKpSuiKUPd
   2UhZDXYQIcrAiUnajD+1BaNNITv0oJabTR4xIFDxqApKMt1cHYlTsfZvUA6QjCnYsAsV
   6vkPouMMrL9fqgWMbnP9chuvExkSVjOiXfSE7C/uZazhqPBVsZB45Ys14F16KHVOXIIJ
   ncsPlolEnnG2Jb4+yvJhxIdG4PNxXQrxanzmboU2bHGz4YfAUOH41Gyn1R3MZyOYzWcU
   aIFRwCdt4xCcznSVHkYNQY+u8ZTt8KePoT/s2nXloCraMtU2iqhpMuh4kVLVWU/Jbl8P
   6taYConAWILEDmFn5gHXXbOD6MBcCOaRHEvR8EuFHGDF4EdoVLRaQCmChSbrJm0Nyq4T
   2oEqpUx3mz68HZkbkvBlbTL+0TDChCLeWLdTwi1BilCToixcXn9HrPEfzoJtxdB0nqRt
   wLLv6sLcZK1KJvKegPOp6beVhXriEJ0K2Mk20YzqCnHmDo/3GwsVcmGMxGvg8Ovwwai1
   5Kb5bqLCmXcNCpRvIWYWJf9JoiDw6L5QcsjCaVF2SXbmqWf1LFgDgbDSCsLrYOyVEeHL
   YLhAwPp9nj5gLOW+lYARmj3SkmwxsVsv5wJDTO+ksSGRopt6zIFp1Vxb5XX6CASLxAEH



Ounsworth, et al.         Expires 19 April 2026               [Page 122]

Internet-Draft              Composite ML-KEM                October 2025


   sLkwUPUCKjWfne7CyZRNXPDWpTz1yw8XplfkgoHB3AzZWX5fBN0YMguwDIkQpWF34eII
   RIgN2MyhhWkvXm2D4U5nETHvgq2DgUz6cLCJ8N0TsiSlEe421otCKAb4nm3s4pidUKRv
   3WpYEo0xHTas5fAM8ZAhhlSIViGD6GRDDvNkTHjfwtPdWZ+9gCR/jjdnBM7LDhPCWOTc
   7vdyKtdMcrOGZDJ44tR11ng3DJSOlI2QRqPhyEqMyyJJbwimcJgbyVVsTmWLlqSQJ0MY
   afswidKkMCN9rHzbWVLssXgZBO6tDWQUHKrc3thwyCn2ciDSEMHCkGZXjc0Elj951RxO
   yNb2LD1CRnDQnGkeSohfZab5RetPZrK1Ya98TsEdQs1ZasN3bT3Nyaczld8hYdrhUlys
   gDYe4y44StCXKeRS2XbFhc/5HivnMTbEgZdcEZKYMz7JCcw9ocx0FGEfcwKXLuEfBl+2
   GA0B4q6Zbr4QbP1zxTKkoBb72Dcj0jjkWF2OKIYLbMbonc1+LTUyGH8Amq63koGlRd10
   2LF2aVT4Xf3HZqozXcjzAD7r2bYe1kdpKjv5FWtyor6XbPF3XcoBaLzqGZlezKZFKLVj
   5PSYnqzQWqx/rQzfWzmo7xsWJRdwItihgeiN3y4cYND66M7t2PAxZFlADTZBVtN7BfRI
   RW+oYDty0NnaXuJTaZjM6UEsBTCNRWbZ1uzyafAqUt12kIYIcOc3LjKUaFMoXajIHNSn
   MGCLwkJLxlI7rwmf7eUtlk7ZcHkmrr7kHWEdMYe4yFLGUskbMW1J3wyB7J+ERyypRTpY
   VloqhJl3ou4GTzrEYHdnxAZWLFOMlTepZx3ynyVUAnm7FUQAUrooxjaXXrkzzmlCgBaH
   LqURRif1SvsuCjM3BOk8mkUfoivukgocsSJD5kLuAReDHRjTlefMwIxNZjksKrQLcnlX
   yRiVSitq5FjOTSvnShAHSlmKZEt5Qc8CUB2vSj3+oE81cvm6Ii5CJm4PoziQYF2tcKbv
   IkBzCVXvGtnHBxEW1TRtqn0SMXJczeXj3SZqisaHmZ/opaoCnUoRMdTLAonasmFeIM+P
   T37uoVYFSX1n372P6EEMFCKrT0HkXOFJWBCiEwNuWtZcxwtVd1M6MXV5uNbptEj1oR0H
   7p5bwS1kC9uo/U1TbRcz4R9RDmjZAvFaLQbbQe1JdqNqSMUb/ReknPTFP4XJMuB+Vkuy
   LkowycF/C9kxPKtb+URoCqNkJraMSMBAwDgYDVR0PAQH/BAQDAgUgMAsGCWCGSAFlAwQ
   DEgOCDO4AwmM53b4PgkihlUNpKgYInHuXnogp8gQoDuD6zZ4zUj/snE7HY6Yy5dHtSQ9
   ppERbf09AZhbvkCg6mNB+Uw5mK49sgcWSh9t0LPHoLQ9hX8TlcGydLLMJ++ijPOg6EHT
   kCTJcFtoQNXC35VTUDs4U3mZlHfJ7pyhjyjNxV45PCW4laq0/fRiuybxwiALYjM7NBkO
   iG3AivLs5PbKWegSCSqcdGb2f6JsuzZUsceemDohTQdN8lLBgTWFAz+agbgEOlH1GCZ+
   rnGwLoP6SV/Mln1q6VC1mXtvMQ17D28EvgofkrnIUpfLRfO/6j5v56OW/aBNeTk6qlpL
   qSC0kgyft/dDwjFQfdSvesAl6KdGRYGPTTEq+y77mWDK+JO5DZ8A8oBtlx+g5nUvzgaR
   ohDtrWTjhy+Pzehp9OHTS13G+PZOg4ZJFmpfEejXYZ22iXw4nHfM31lAk8O0avIs1UoT
   bwmaBo+pJbOpBMpZlUmiztrgokAtcRDAsJ0nf1oCgJaBWCsoVW5gp2yBewyCAI9brZ1+
   kPn4WU91gDs7G25Ew5oBU8loiHNO5gDQrNEgAEp77Izd+Eg2FoztvdYuwe1JI8AWKH4e
   YerCGIxS95Oofh80HULnh58bKLq+gjsBHRjsn+9MlNpNZ18UFDNkY1BL6stDysq4nGz1
   tHSfrLvxg8oirCNa+WaOsgTHQH6y8hpPhh4FO369Dh048Mo1XYW1FpXhl81CBpIzP+/3
   N+rxm+GLOmTCDV1WJzcaM1KAPnXwxkc8StBw9si1g7C5d8KKqJfwPpQ10b8uiAWTeMR/
   biO9E9XxtJ8o2WoGhFeDPnroagb6kAnadM/otJYxcwaiCBz925OSQqP4Au6Ayo2AVEQM
   tnlBXBvJRDoeVuhHy/tj5AEMYqdT8nKBEQI+rn1v8YeR/7nr820kmKj/00J7KJt3kWOI
   6Z/MQP/SGi/u6CXYXLSbdDsUShx54KVqBLE5WwGEoS3beqFL4p+A1SGLfVFMJuq0cqa7
   zbYJK9nBZ9W9n1spaHFinXOIkMhQxdJRa1NSEd4oQe1Mf++/2fvmMU87g1gKnv+9eRJ8
   vBAzQfSbsW3IL/sY7Sa2ptdxkm+s6VZ8cJTo+F0/kmRDyVwwx7XwXpb6yDvNzJKxNbhb
   BxEE4WVISZaXu3NBrVkNGuJtXDK1f7ftRNb/A00QkQCaMoZO11D3iMyaRbGcZRj8JSGx
   Quv/Sz53AGbVoW7NGFKh8cQuPrKTRa16Dsc2RalCBOvXTGTZRfJP1FrqcZX5raAuizqe
   K3hxDJyXY0tjE68I1AsqoKcWuZ9PLl/dxoA+py/7ujh6DZ5iRx6YJS+15P8L1Mfy1AZQ
   OOXgE3QOfg000jattb/NbqtI2F4WL4tLlsfdAdxBDAvqXJsCubzNeU3x8QNvbJ7jKv/L
   NLIlBLcwYUQ6J4pL30jJQgX/iQWoLWIb4cOxGm/oJ0lPR8C5IQFlg1/hvTQQue1NwuE5
   iXmlWx1QYzdKvCEPdDM2yAhGQjwvah8MGBtkC7xdeCzlH69DFIbW0ddwoFhygv6816wt
   1P2b44whQKMcdYO/KL1UCkSM68llf72R1bWUZZo7p81FJ567UHn0A7Sa4n8NX96fNtiH
   cMWlxu8e42mUAhcEjP2zB9V0QeCSh8PrRxzrGLNzZ4sD0X0v3B0p7dmIFppmr0SfeUz6
   Ibq3OtlUm5BYNbbgs4kZZXJ3BdzUfFCiOr4Ej4VImw2OCztJnOipkx4IIEPVHur/jh0F
   iCjo07u95ET9XisCF9cOEJy5Pxht10CGZqBSJN6CsrP9UgkVuts/ASLtbROd2szOqeZo
   +3hMgr1pEqS7T/Wz+4PjDDpMpoAkwIkyPklSG3ifRrmhYwwHuh0vdfNvRk1tJHoiSG9S
   ho/LK1gESpIjDiBfIiGZRo65BH/PNvoM+/3iHcOcoUbJGFO0OQu/GribtfAe0N2gdi8J



Ounsworth, et al.         Expires 19 April 2026               [Page 123]

Internet-Draft              Composite ML-KEM                October 2025


   HlOba0eKe2UMiQ/1vzijt6cSB9M0+NpXO09Lt78smL0N1BnTL3KKw7sq7p24k94RHOad
   SwhnOeKHOJ7BPutzO0Y0jb14iNpIRHSxleugR+VzdKNUKQYN+iRIQ6+/J7eInHrdSYBq
   dzdXg9j02E28Kp2Kpt92QJ89EB8ZnEGZyWj+UtTpWWnWD6OL9enTaN4ncMHMZmH5tDUl
   YLkyiLBchw0TeN6OJ9QcK/eXlepr4kLNQMvW5RUX8uHNgsK31oSASUFMDBBj4WBkfazk
   l3VGrL7D1h2uoqpuw69E2p+HUoYSVVSz5pEny0Tqx++DTytgFZxP7ovO5SGW3SsrQYdU
   7gt7aypQVGpB2q3X+few/dBO4R18vs2ll1lQdkrfHV/DsgI9I2ySRh4LAMoeJqgumdi2
   NsL2wDsFXrRHo3QV+0yBiYeRc62vwb+tTkqwtjR6PQcrr4J+G5fppUQ675j1l7cy58NY
   wpTPqAu4nPBp56Z0De4oYXWUS5RwoAWLeFhG5/apMtKTdSWvwJvjIcRIkz89GuvGwZIv
   z3A3AHyVAeGlK2v7j3JLxFKsBZH2RtEV/q9EsaInubSGKNDXImxQVezS3O2++uktR9I2
   V0jnOzl5IQDKrE6Mj/781fFUnRQ6Rd81w4FC1UZ9sAIGDUbLUHHwH6K5uEW0b4Ha+UKU
   cl9VcxhyCg+ppvUiBU0xMkl8xSIEXVMb5p92YRrkw6F2rEsGLX5uS2S0FtOLNrWTC0fn
   fgm/Fxgp/F/T1+6MaJ4sLVkbF0O/iQQ9m6JSX86OCtm3yk819JziQ6o8JVg+hU/RpU6i
   mn8i3dZWOeXdzo9lor9CmA0/pD6/tvBAaNiw/Rr8/Cae2E/Rpf2zkJK3xxDgnwzhhFd0
   XXk0G8odCVI4FjREd6ckQ58FW4/Qxl9R3WOVQhYz2VPy6JIrerG0VKzll6EUPoT8lPNy
   CsXXIE/T38QZwVjoqjVGHbhz0JvyA26UvqpkPHW0oL0OE5YpSdcts2PcQlbCElMHakPY
   hV3mjyRi3rZwhvtD2zI4P534aD2tBdB+o3tFyUTBmO9zEJwlX8k5G7N1cQsJY7pGqiu6
   vF5F5IMNH64scJomGttCu6PUhwtyCUJDMj2FmhibtRrz4d3mrF+uBFW4j9QczcfYpxRe
   jymWAWcaBCYm20SwYnbovl9ZNa6S2zAe0AalrOF7PmNPw5UhBP11ADokaESHrBsSea6v
   AkUUOxBiSxf6U+gxzbRAjswU12nQiuKnFu2AehW8vOqa+skDf+3KdMMjPqbZPx15I0uC
   EDOfVdDI+LOkLoHZc60wJlGSP8kmzog7Uy9YxlGKenjgAmZNySOtKS5alxMKbnkhhTmt
   zWiTxr/OnnVrAOS6yVte9iRavvT+ej9Cf4yY06AEZixyrrhXKsmqBorvHb2OLXewhE6l
   ChV7qWLT+2taEtHztBevp2uYe7t2fglpOUFavH8QEmvPVzMtFF7z9a64G32xzmvCMwfX
   JqFl+yhxIjxH6+jj2AgLcod48444UvljYeso2TpiwO76Id5omdisDlvzVXHMTFpj9rUB
   OY593Qb/hmvDveERoaI3DeIqHrV1TpsX97cb/eCXkfcHwh/cmjFzayVi4sygiW+Zy679
   Ec5NNC8cEGiAwUHqkJzF6zTLtNzilShGNuB8MmhK23WtJqvyuDunH9QkCGga31oM/NdP
   oM48L/VzC4Zplsy0H5oPeFg3ijia0nJzIyXmV/64T/jCPZ8GmXiawhAnwGKXiLC1yOSQ
   MCtVk4djgeDExB774DYqbKXLUrPoBMjzvqY7O9I/0ktzKuPrL8KtAkpK51kliqN6eKkD
   IfzxYXN4S7gKEg7sdbwJT11TpneNphjnj3TBtOnzoJj1thsLJMX5i2nw6VP8SbJ/flet
   vo75ghYLJ8bAZGU+GHSaBgissouhHO2CZW9zFnBbVPvsVYfGWdlBy+xICSR/IXRbUZ9H
   +0GEr6ArD/Lyb181okphAzp4m4fr5ltl2wkvv2phO6DNbJJZ4wyVdSkzI6+pgcsEvXkE
   x0rbL/GJ7jATIuJNkgsnesgl0LArJn3mjXcigFSTgVUNxYUDS0x85LcgACaymXa7jXWj
   t8A8WujhmUU/1a7n1AEsbU4KWYRwfp2GSmJXwR/yfp1YhcXFVrILIcaV3C8CfdXfOLQD
   logIPBPYzTaXFeCA4ifUegaf9neB26WobkgLL8uEb9OO395HtgOVqS2O7wSUqNyWR5WW
   RKQvFz3kMCK3aNJomf/Dh68w6GrN3Roi/XTqPUrCZ4LBLFtpYKJwGsbhQt4GTFNWHLWW
   Os17E1UW05YPcKm602bkV+fSSfIuVsSvYKc0r1Gj7Mlfl4OdUVygQxeNLapik+05fZZC
   2xMf6+w9ppckKUHeMmLPM0djo7wwTNGRyt+P1/QgNICVGnJ2v9AAAAAAAAAAABQ4SHSY
   v",
   "dk": "k6ahEbUYY3bM3aq8LCcmmaovp0Wm0L/GpxYiYWwW7C4tVb2SxwMkmOXnN
   23dpKJqpr11xWekHPexB6Z5Ggh362EABCiEwNuWtZcxwtVd1M6MXV5uNbptEj1oR0H7p
   5bwS1kC9uo/U1TbRcz4R9RDmjZAvFaLQbbQe1JdqNqSMUb/ReknPTFP4XJMuB+VkuyLk
   owycF/C9kxPKtb+URoCqNkJrTBCAgEBBDBH9FEb9nPYopkq6e+6TM5s8c4eIrwEZrGbr
   WxMhVqgQ+KUfJqvfD61nEtWtveH23ugCwYJKyQDAwIIAQEL",
   "dk_pkcs8": "MIH8A
   gEAMA0GC2CGSAGG+mtQBQJHBIHnk6ahEbUYY3bM3aq8LCcmmaovp0Wm0L/GpxYiYWwW7
   C4tVb2SxwMkmOXnN23dpKJqpr11xWekHPexB6Z5Ggh362EABCiEwNuWtZcxwtVd1M6MX
   V5uNbptEj1oR0H7p5bwS1kC9uo/U1TbRcz4R9RDmjZAvFaLQbbQe1JdqNqSMUb/ReknP
   TFP4XJMuB+VkuyLkowycF/C9kxPKtb+URoCqNkJrTBCAgEBBDBH9FEb9nPYopkq6e+6T
   M5s8c4eIrwEZrGbrWxMhVqgQ+KUfJqvfD61nEtWtveH23ugCwYJKyQDAwIIAQEL",



Ounsworth, et al.         Expires 19 April 2026               [Page 124]

Internet-Draft              Composite ML-KEM                October 2025


   "c": "erzR2eiC30sMTayaUQfLcrFu60ymahUHs6ud8PPRo1gp/tUOLSmtaTGKjX8N91
   AHwYq14kGiefPc4ffHy+B4Lxal/HUowPTHny7dGXhxuSNSdpfz34/174cC0x0j86e550
   S3HAZrPjzWJcx3c7fqk0pNhmhc9wf3LIbmxZYLaGrfmd+lEErniz6+6MrxMIkg5H8jWu
   PK911JdDldQ89+sskbpiXkwPPMeh74EOZAePfS32192MgKnUANVH2ApM7E9boPtkfkwG
   fsNHGHZ/WkltNwpE8SLpKSVZ/y0foQUdWdDkxk3uHoh2OCJCgygKcoxcwpK2s+r10Vwj
   oysJgbh/Lx4pV78vkIUY1rqzkM1wdbFqohHPAoEqE/blcVS23IWtLuQm4AiynA3h96YQ
   YUqCB6pyFBP++XEHGgOuHpqlaL5V4SnnHAXA1822PlLw3WB+1pISUZccKbbi+T9QkF1N
   Rtx9NYleifu3MG+7UFN8jaD/LJiEeD0EdcfSW3R2RhFVkvWMqTo6uG4je3i9pmImUaah
   gSQ3SZo1JpbuIsvMXO9KPcrBiXy3qZIpaA4dj8b4/LQzW8Rjd9ztn1Fi0eghjudZFI6E
   EGpEL8h7u+tfsobYxuGSTfEO3QiuhzOv0vLWQ8zrcppNQQNfUE+lQ1XsQevEF7hjGuy1
   5LtJfQIhPk5zsl+V9DPO6cmlPPllGN01ysT31gZy6ZrEUB193WZwwKbmB2dqGPYKx6g9
   JvZDMmui/nzHcdtG6iNZ2G5JBOFphw3xL4jwZvm4xOnjn20DY1pfYahfEedEjVjRV3w4
   8+0iJbBqd6zDM3I9COE+pgXPga7F39s9yqayy1nQCUxdbOgdylDGM0DMY7BvlxYUeY/g
   U9NVx9aJArPN9SgCyHL0tzVP+wOCd5qBE2Qh7P11GjbZi2iF7j3h08Rrmt7GalCjpGwE
   rceDYy5fnY2sgUtbrAD7qK1aDef15l2bqlPfSiGlV/cDAYONtvan9+vi4gCMYLNK+scZ
   txAugMWev5Uy52cFZ4Kx2U/Fa7afp7pmoQShkxWqZ9u5ctohm2PM7b2AkWbvOVPLtDSi
   EtYuOZ9WwBJKB5nFWPqNt6YCO89NnP/WpefdMYrX5zERlcZIIeKfF/5mBlOdQX5cCUa/
   +JwMrKACAhvjwdBU2ZluG5Ra5qUTvWtNdJdV0spq4Rlgyb6Z3tEQbzlPw4YSt5/FrvgG
   Ui/QATDChCIAzR0i8iTuhIBtxK0b6h+ENHRcfrTFQiXgPG7psmH5JOdDs0QGRB8dd4WE
   rsKwCepMIuOXAQEgkmCH9C3hfoy43NcTYEHDAplVNlZ4emExMGo7Bf8+AfUAY7o+S2S+
   cYwO6y/WVLeRGHrj1IZQYg7Bs8Q5ZA2eBtDDmSpGA0ARuyKTWppDWxADSb8gTgx1YQhM
   QZbN0y0VecQGKiYEu6EWm/8hLH6eppcuRR3lFUIc4sd9dW/p35F/2e51PYYiyAm4FLut
   vEhD7uZqs4gSWfwBDH3c+osIqLbrF9BcHPfZIPMvXj4ylbvrz3vtdRN8Rs03qxCzviwe
   QucMuOZn6zPndN7ewsRwD2g0/ik8AS/QHA9m+RG6y+q1aKp5yHpnD69S0Eu2NgsgDHvd
   sAQV5yjMEZVm8pa97Mhw8f0Lj03ULuGAVre1Cxy0y9nMEBkWc0zbCqlxyT6lwNcaDrBg
   y1ung5bzjsjeZ/7sZFbZjLp0iApDQGL4lWNPmhi8JyafNLVKmmV2UiyyIkZ/oe6HEppO
   3RYJAo9AyAVsUjlmonUnWpdD+m3xSO57nves16yb4DcEZT7BndbjivTcN9YXJ+VxLec3
   hOhhUc6d2Kw/MiW5totj5NRwMsqJBPlrWfBvy29KOEOV/d7imuYoFS67j8AvnJm9VYIb
   sbvYk/UiUZ604fFjYC8g4sidcDEwRUqhoeCyQ9TWfRt4Fb8tRnC+UxP8Blf3p7ZZOHVP
   i5qX7U1ZUkeYUhjrgz6/j0wg7A5lw6jFwbyoizaOvxeBCc1gqLK3FOOrYq7vbLBbT+ZM
   1hg37PHFzaC5v76AEPVvfdFy7C4SrGsNWeezU70Y1OABxaqKNQqjpC7QoEPJbXgPfrc4
   fja12JobuDvsF9W4Yi6azyz4JTU2Bi4nNxuKK2WWEAVMXnTN/92iB0dckDA2o7xfWgY5
   KEDOotG5EosxBSkju7MN9MWEfOU8KW6aF5dfowBQrt6im1AYdN",
   "k":
   "ky3YSNtQCscFlj5YM9ucUoAqVKXLcPq+UoiG71Ljnxc="
   },
   {
   "tcId": "id-
   MLKEM1024-X448-SHA3-256",
   "ek": "8wEIDYmM0Lt4EQFZVfJhriRyAdmtwWBtUjC
   Lbsdcp6sOarCdKRhiNAIHUIK/BjpTpnNDsrtsSXZus8mcPpx462J78Kg0AvEziCd5SAh
   x++qR4dhNNMhD3FA0jiBL6rd8UCEcAHyYuCmjzKhlqkMKYzthSLVrwth2nrVHZXgdgyi
   pmPlZ6nIEfHJMUiCLilEAi+t8ZReMpHcemxtBPzmRP2Kjz1gI5CYbuxt2uWOXHFsY7st
   jsRNwEYgs76p+p9WoA2xr8PnKljNYNTwlw6KTPSXPYNdDXRNg+Ahe+txgDfAeROmFI+W
   igxsxRxoec/UayHAPD7gI2IeScNIauEYnXrym0ilMhrWGiUIPB/wpCOxr93MxdUxIISe
   /PRAnnHXHCUBEZckDcuuAGLmDPUFaLShvDHo5oeYWycEi5UF7DIwmBFaBN6mH9AYfGce
   chZQFYgl9wNaBIVqz7TgwZMS8KZuNGFKEfEqqkrOp3YCLjnuPADBT1LMnzmO1MvBciPE
   F/0hkWUuQLSZAJ6tqY1mm2Skm5gSbE6vGcxU0EGRa22B/ceQkFZR7KFwxvXxL86ySlbA



Ounsworth, et al.         Expires 19 April 2026               [Page 125]

Internet-Draft              Composite ML-KEM                October 2025


   aP/WvGRSFQeUniWwVPBqPC4srWDalILFEXxe8+wtQxQhnHyK4VnKafPuqTIiNjLa3TVV
   uysOrH1BeY8Av90pUnvskb6Va6opiyTKQ0QitsFKduFAWtagIIQZtjoN+KyIUP3JWvBp
   ffMMWVYEAU+NWMSwONsCwlJJGweBmNNiLEjEZf8JqKeAAY9lGvKpI3isctcMdrBemt0i
   kHSVNHJcyRSh9X1McEQcOrsHKQWMxibGmI/o5t5qMjfpv6zKDf0q4DLKRA2V3ncJpRnv
   OmuGHWBXHtdY+WZShUquqoOmstTZ0GuPG8tDDTPBInbCID6a1G2YU25XK/oNp0CUuiXk
   EHYAUYFygI+GHJSmqmQGswuELtLdP1rysvLSJRglBm+yZM4G/QFlWkBuF2sDB9EYt6Ch
   UEbMGleJ7V5ks3qtMILMOClgUjsAY1dpNL8KUUUMXkOhKDDcIyzDK82K1QADE0cMeRGs
   +61MojXnGDUCOCpA7mtAhcjmOvrl81RtjswHHJquDmeU3n4sEvrczVSaDeUtSRPCKxuW
   xVmep6lq0sfdLhEmRNBtcCLhRFtOP1UDM5sN/30uI0DacJYyb6zgwW2FC2oCwNXfOsgk
   R6cI29zqQKVI85fiG+0lfVuF5DTI+P2Rn6DOgOeUFQ5xMjqaPymlkRmkcgOllqgvG9PJ
   +5cG82eV0XItLIEhZCzHHXHaAExU4akIE6EEtnPcFnDAT6ODEiGBtwQiiG3c6R0lLq5k
   7ZUWY6MlfdZOGAUao9FxOLzcRCUPOMJWHVkq6IheuPFcybOeyVXec6mkwoxdt6FYTA+k
   qv5gE9nait+artyBlfnO99pxl8CGZFYBnIVZ2cDFyfQhcsLqzXnVFdsidnNJmm4ZihDS
   qR6d/CZw7peAetYK86wUm+xeoXVRFLGBDomOhq/JFxPmKHHGHE5bLEwMOxwW2aPFRw0u
   pUEGZeUuggYNRMvg8cECj39HCFHUsE7lQ9eea9MweOyEcQlujlMRU30E79hOm+ph3+Jg
   dlMCAjwxRKLF2Eem+whIlR2N+fbWL/JsSXDmWJHxTQEcuFwwf8QIGV2ihbJgWzBg4jJS
   3pPxjmeBtEtx1rLYFxwsEwCi+J4fKn5t6bBtoifI+imhke1zH7/GcP7JUjxgx3UuAEVJ
   bScA8C+sfCYyjmSSUwRDA3Xi/M7uK5ZAWyaG+VdiTXwFjZrBP4Et0zAez7mCgE9pcktB
   4UTWWPzg0myvH58hsdUwRMYahFGKi3RmH7mVUslJ8qzVnEQkO6AFgeXNceywrFKEohvm
   BywKNAjOXVsRrCcKgg2hwGMg3IhgsJrOkkBFVptGlFVd0jBKBHnty7CGT4uyurENGetW
   9sHkk7GyBZzaYr0sQHSJoLIEBVijHktt/8sSQefm3J9fG4xpzN0h5O9pkIPOp+OIT1dh
   OqzLBbsBJkImJ8QOTMwRdGfeOV0WDmdZyoTsz4Fs+SMxuescQfoqItNxPJDs51O/Szsb
   nvcvKjRr6wdEgecsiAOsXD7Q0eQMFr/IR6TTRhaetJMuQN2Cn4mFXzjXdeQmI1oNSdnH
   MH2186lkDSIDvKFzS90RFfA==",
   "x5c": "MIIUVDCCB1GgAwIBAgIUTtTwOLnMtn/t
   v+Uz7B1hiqhoXUQwCwYJYIZIAWUDBAMSMD0xDTALBgNVBAoMBElFVEYxDjAMBgNVBAsM
   BUxBTVBTMRwwGgYDVQQDDBNDb21wb3NpdGUgTUwtS0VNIENBMB4XDTI1MTAxNDE4MjQ1
   OVoXDTM1MTAxNTE4MjQ1OVowRDENMAsGA1UECgwESUVURjEOMAwGA1UECwwFTEFNUFMx
   IzAhBgNVBAMMGmlkLU1MS0VNMTAyNC1YNDQ4LVNIQTMtMjU2MIIGbDANBgtghkgBhvpr
   UAUCSAOCBlkA8wEIDYmM0Lt4EQFZVfJhriRyAdmtwWBtUjCLbsdcp6sOarCdKRhiNAIH
   UIK/BjpTpnNDsrtsSXZus8mcPpx462J78Kg0AvEziCd5SAhx++qR4dhNNMhD3FA0jiBL
   6rd8UCEcAHyYuCmjzKhlqkMKYzthSLVrwth2nrVHZXgdgyipmPlZ6nIEfHJMUiCLilEA
   i+t8ZReMpHcemxtBPzmRP2Kjz1gI5CYbuxt2uWOXHFsY7stjsRNwEYgs76p+p9WoA2xr
   8PnKljNYNTwlw6KTPSXPYNdDXRNg+Ahe+txgDfAeROmFI+WigxsxRxoec/UayHAPD7gI
   2IeScNIauEYnXrym0ilMhrWGiUIPB/wpCOxr93MxdUxIISe/PRAnnHXHCUBEZckDcuuA
   GLmDPUFaLShvDHo5oeYWycEi5UF7DIwmBFaBN6mH9AYfGcechZQFYgl9wNaBIVqz7Tgw
   ZMS8KZuNGFKEfEqqkrOp3YCLjnuPADBT1LMnzmO1MvBciPEF/0hkWUuQLSZAJ6tqY1mm
   2Skm5gSbE6vGcxU0EGRa22B/ceQkFZR7KFwxvXxL86ySlbAaP/WvGRSFQeUniWwVPBqP
   C4srWDalILFEXxe8+wtQxQhnHyK4VnKafPuqTIiNjLa3TVVuysOrH1BeY8Av90pUnvsk
   b6Va6opiyTKQ0QitsFKduFAWtagIIQZtjoN+KyIUP3JWvBpffMMWVYEAU+NWMSwONsCw
   lJJGweBmNNiLEjEZf8JqKeAAY9lGvKpI3isctcMdrBemt0ikHSVNHJcyRSh9X1McEQcO
   rsHKQWMxibGmI/o5t5qMjfpv6zKDf0q4DLKRA2V3ncJpRnvOmuGHWBXHtdY+WZShUquq
   oOmstTZ0GuPG8tDDTPBInbCID6a1G2YU25XK/oNp0CUuiXkEHYAUYFygI+GHJSmqmQGs
   wuELtLdP1rysvLSJRglBm+yZM4G/QFlWkBuF2sDB9EYt6ChUEbMGleJ7V5ks3qtMILMO
   ClgUjsAY1dpNL8KUUUMXkOhKDDcIyzDK82K1QADE0cMeRGs+61MojXnGDUCOCpA7mtAh
   cjmOvrl81RtjswHHJquDmeU3n4sEvrczVSaDeUtSRPCKxuWxVmep6lq0sfdLhEmRNBtc
   CLhRFtOP1UDM5sN/30uI0DacJYyb6zgwW2FC2oCwNXfOsgkR6cI29zqQKVI85fiG+0lf
   VuF5DTI+P2Rn6DOgOeUFQ5xMjqaPymlkRmkcgOllqgvG9PJ+5cG82eV0XItLIEhZCzHH



Ounsworth, et al.         Expires 19 April 2026               [Page 126]

Internet-Draft              Composite ML-KEM                October 2025


   XHaAExU4akIE6EEtnPcFnDAT6ODEiGBtwQiiG3c6R0lLq5k7ZUWY6MlfdZOGAUao9FxO
   LzcRCUPOMJWHVkq6IheuPFcybOeyVXec6mkwoxdt6FYTA+kqv5gE9nait+artyBlfnO9
   9pxl8CGZFYBnIVZ2cDFyfQhcsLqzXnVFdsidnNJmm4ZihDSqR6d/CZw7peAetYK86wUm
   +xeoXVRFLGBDomOhq/JFxPmKHHGHE5bLEwMOxwW2aPFRw0upUEGZeUuggYNRMvg8cECj
   39HCFHUsE7lQ9eea9MweOyEcQlujlMRU30E79hOm+ph3+JgdlMCAjwxRKLF2Eem+whIl
   R2N+fbWL/JsSXDmWJHxTQEcuFwwf8QIGV2ihbJgWzBg4jJS3pPxjmeBtEtx1rLYFxwsE
   wCi+J4fKn5t6bBtoifI+imhke1zH7/GcP7JUjxgx3UuAEVJbScA8C+sfCYyjmSSUwRDA
   3Xi/M7uK5ZAWyaG+VdiTXwFjZrBP4Et0zAez7mCgE9pcktB4UTWWPzg0myvH58hsdUwR
   MYahFGKi3RmH7mVUslJ8qzVnEQkO6AFgeXNceywrFKEohvmBywKNAjOXVsRrCcKgg2hw
   GMg3IhgsJrOkkBFVptGlFVd0jBKBHnty7CGT4uyurENGetW9sHkk7GyBZzaYr0sQHSJo
   LIEBVijHktt/8sSQefm3J9fG4xpzN0h5O9pkIPOp+OIT1dhOqzLBbsBJkImJ8QOTMwRd
   GfeOV0WDmdZyoTsz4Fs+SMxuescQfoqItNxPJDs51O/SzsbnvcvKjRr6wdEgecsiAOsX
   D7Q0eQMFr/IR6TTRhaetJMuQN2Cn4mFXzjXdeQmI1oNSdnHMH2186lkDSIDvKFzS90RF
   fKMSMBAwDgYDVR0PAQH/BAQDAgUgMAsGCWCGSAFlAwQDEgOCDO4ApGy2W6T0pNKnwmD7
   IDL3GENqd1AB4djrMM7tml4WmHo06zvnFylelzN5zUJkWV82NU6jAT5pxP2F/XQ1xE2V
   qVuqoHqM+DCu/xbjkKRDakbBcZuu4IqFVyYi3wT0WAAM6LygPizO4gUr3ExiiMwQQ62D
   2RDTV6VQxTpHB4ucZMZqQD/c947YroHq+flIZbTj4W15XNc11xmK7h984ewCrEOPcTqm
   uTypJ5qiqOfi/SU+T4S54hNatf4d9TUcJHmWpAt51M86BHiXIkZ7w5dyevciRWbJjpai
   R7RtwfhT5Kt+hef7cKjv3EJLWY31hxUtPJQ7g975PnXNSlEV+j8qM474mXIH3ABmwPe4
   3LfEJ2ITmqaFHdODXFHgeeNOiF1qwNx6dvwnHCm+SXlazjyEttP9AQ6ueept9tnF5Xqh
   o5ylQvk9Ksq9UIlHOluIckNMGd/M8WgLUFZ2663flwG8LP40kaRy0IUkbgdoIGUV+Qra
   lMc8glH0MGY69DsRYO+gHqIvQfsIE/6f0WDBf/vivKd0CY2j8mnV59Z8jUIxQlAj/Wli
   XePdgzC/l9TxHk9rn695sK5+mjx2MXEsiMfkD5hYN3fzN+RQOvRHnI92fdhNEoIGdNXo
   7HYtQRBTRjuYu1hoA/9G95aw5vD+0eOngrfj/s2KOsmbeYbLzyNG0FbfFMisk80DLyBq
   8XTB3YCufDPnDzl85nwyidDMeWYWFv6zaG8XsdgagmfpAenPyqCfThkzQ5T4Q0EILKG7
   CdRqx+SPe5T7/Dq5rOXyr33YWnf9Lsx8eTUKUoGHq8LD05NfNYV+Qznrqz21UnyLcADe
   Xq6L/VPIazu3ORwslVRPhPHtMQSoz2JlX+/hcVy9CK6quops/Sc3dqHVK0l8qsN4K6Nq
   ZeVv3iciVRVBqq+v+Iwq6WlFej8/ky2gw5UKkOiel/BawPtF3WSlt+Q72pIotrfgjML3
   fEOyLqM4gvofuFQBiexcp8uhUfrenUbaK24fWUsJYpBfK0qfPHQL6ihBqVdOWFs8XNL4
   bODEDgIrwrkqWAuf+ad0Hl/6FHpbgIxUeJnvPScIjTKb8WoPtbPsQRBfjDb2au1doXrQ
   /C0sv6fgAJHKiOIxWO2fuT1WsMEFxwh7bwlmW1E8pda5waIoG6lUh/TdUCWnEnO3MZd1
   vqNe/KPjCzGmyJQEVD7RGfJewx48/Ppj8kNsOo/xZ610hbr5PEjUErIWauDEWEz6DP4I
   e9YEPJabQQb+zNi45lMtm5YaK7tFZk8yr7FJHBrAYDZBKaa1Kfj/zR2UK4d1hRA8QeIV
   7GVZUWVMxcGYniGaLBjcBy20i2QbCVn1ei2oUOpAx29lj/0Jn83c0iDHllmzWGiS8fV5
   LnFA3BB/fTsSoZ6e6dk0p1TZbx2ZTaRtYqrygdE/298lyMNuC/duxCwulS0980i53ROK
   VLxbDDK1w+2XU9w0CY6hIFTqGoEskmHI4AqDxvfZvrdDBgYwumSm0mFWK5H2ztrBmP/F
   ljRS2bzu7X1SbF6sDj13S2pS88H/x8tipUWHhDLCCJKegGrjKzV9Ik4JnUDEopu/pZxw
   RU1/qZHKoguhDt/KqLagiDQx60C6/MhjL3SbAsesmLvOK4RbwJm2sNiLayOtSzsxCzWb
   p3yq2mHj6qUMnngLtmf600xjO0VaGp/7QYpAzGpEuFW16VEAxZ8T41jDGDxEvUSjOK2F
   hrR2bK/ov5vtCFDQMabeqpFi2srsMPbBjooFTpgZqTmGJcLIL33MyIy08Wv0f3UbNugk
   P74UKBgFgpQQnxUV1GTKSoht7kHNJG2zRvqP8NTEdZLMTL2wf7O+tc6Y32xk5OJFTHMP
   1GRChzvQ5r9n+20OabQpxuXQkxi/LN85HRz30/q4u3szTGj5cSisWP9RjQYVF1Lzp9a/
   a9XKNsMOP9x2lqdjuZQbKgkCyzVzahWreicXnvKb+48zCp81zny651YJ08zugJtr/cOw
   ASEIBCfeNTpqBBQ1cx12WEd016wnKWkVW/R2LmuJwM1AK6EPf2ebVYAE1HU5HdPya1KZ
   ue406WA1BC0jjg8OXSifEGpc1jtk4xumFwEoQl5m4VtpCR1XirlBLcBZvYxcm2166yaF
   +dILxVxUyPyAXuvWFrcRK9U24xb/fc1dxWN8xR8MN1sgG9cI9AHJ5WtLHR3RVlTKq09K
   2zdwo4kjOBnd6uDD3VfgLUXtTLVIU1+S+9IDQyWzl7lWthLCeITdeLTKYiqrEVOYAsTZ
   ++y/Wo3d7GeH7YhTq7HFSwSiM2zEJclLnyGSdCV6aHv0Wuz8uEms6Zyg1+0NZ/ogDD9I



Ounsworth, et al.         Expires 19 April 2026               [Page 127]

Internet-Draft              Composite ML-KEM                October 2025


   NHubEo/IwBn4Lr44xFzYGT7MJ7RiwjtONivwIYyb32BnzlIwJOnO7AE9g5pBMlEji8mJ
   YVFL/xgYXj5NKzt59XegEvFypg8VxrNXoTlWiFmqMtOMSyTszyEX5fe4qL/Bwdi3QMUB
   Or1fgreKRpL74YSwQWXCFqExccB+nE3jUImIgUxlI74aLclmvCLRn7eYxpkhVbpcVLCr
   VHI1or754b5igROSakvF0M9L6krN46OCU409+PfdXSMtouBI4bokuBULowIYCN+i5D1a
   Yt57fiL0pZY8GTXL0O9Rz/01xLz/Llirt7o6LoNbOldDqWpV5kNBuf8ae1CViT9NbxZ7
   gTcVqidYF6fZaR5eDrFkMlmQi9XTVwvGAj++XAT+y6NbQ5JUq/+tv/8JW0SbrvF2oxKp
   8kR2pBQNr4nsyn8t7bL0cE04ctIXETO59FIpqOFlcOTZPrHn2mMiHZbQg4lR/jkCBTY9
   C16DyGSCgmgua+PX1teH5/gczaCfRLPcOl7qiGdpqwgwXELFdgdH8wcoXYjJJNiL+ICf
   mGSo39qGjHg2QEMVVLk15bUUucZpSnrn1znHa6GgKZVgZqhjEa0KdvMQwabKGB0Livgk
   kYqr+tjaK5d0vmPGJ6tJXUVYxVVGWLnqR8Z/ppc8r838IZ2FKKgL93ZkSYs3tbR/1NRb
   vrz9JuCUzGfuI/j77NzPEZV3Qyqmca6iNo0Sj58/fJuYtLwsizxA/uz/A8neOR3VZhzY
   B2ZzCL0ZvBbwAXzsgfqBLTtUVOKNhch4pu2v3XfKYdwh9jTpJVko3WEbiGv4Nl8gu0tM
   kWn/YmcHuGcQhZy7B7YseKh9v4+1LAvQtUBB06CtBqLdnsCo4D1b3hlnibc2xh7e+V4I
   YrGfwPco7f4Oe3ANH8VAKgpzJn1+MPy30nBgyPvTh7xyxgHawACOLkTwp2crNYeWNsbq
   ybBij3QD7e8IfgPzWoiomawfBj0KrrvHnwAsb6qAK0Tj10QadVuMC9DFoBaOiWQ6YNB5
   FXVbieMT01MBofNaiX/Ftq5+iT5Uf2KdrbIoBXpCFVHh4+wIWSPmigor70U/PPlmhT0H
   oFOLygTHwbP0dLK/ZKE5F54+4iU8N/iDzRIPBsehgoiSl3edygncsyc4NlDtIccqGd4j
   PVwaH4Ln128CmNKZSfA6z500cREFYNohz5e3ZVrv5gt/oQJQ36RmIJ8dQNLuTpxV5E88
   crfWGEQq585bQAMMVhpR6DsAsjgtA5UKfztxzttlg78/ygSmtiv/XliLUkm9B1Fq6luw
   CqY6WxZBm/MckqV3Q0fr4UA/2w3ZTZ1ad8P+P2w6vRs3AkpVjaR44+m+bhIpyLfx7hpq
   pp+ZiZh38Yp/r83gQ9TpCW2Ol+IVRdo3HSpHXgVcNueXgIHDACpIdmej/G/ooW7Svbwj
   CHXLDsnpwG8gfhu1RFygB3ahRefAyHTzCMhSfmGCmPNjFN/8DyXVpHv9SQNd+0uJOj3S
   yNlCQ2krRJI5Tp5V4Fjr40WNZwJRsPytl3Ofi6bzsRz02G8g08oPFPxY6IA6mya8GLRB
   dsUASaBznODNKpNWJaDCkcPaV7iUKBegZESKyT1up73tq0YAhUn080SjhSFhVwhpRYM4
   Ir8LZHiuuHLeSKkITic5mZR6Y/0/jBVNyytVvxxAzSj91X3ZWxoqMJJo/cIlQvvDGSfd
   E00iAW9SE9mEi2lNFH1LCZdCtwRiKcvXhHaAFWTK6E9dWtIr0EehqPI0qZr8bQVRA48l
   /ZvB9SmkX63ntT/XhgZtgEFyhv19z9PQ6CB2J4saU9nV7//2rT55GvN6jKUiJ8tjzB1J
   C686Q3L2qwAvR+IDCzhwOidHtWlGMvzc/fwQr6T3d99AhUs8ltVG6PhVFiBZ55rYE7xR
   2g4Yn+XXYqRKBS6JK0rSTrRljnlGsYmDwaGYt4fyQJtfc84kt8zc+jorfpHYzMZ/y9pd
   QxzppqwxE/yUuCX9vLmwIRXJ8EAuzbQCTFFaev4ZHSRYbn3AwQ5IU98TbMQ7RmOArr3E
   BzVca5HS1doAAAAAAAAAAAAAAAAAAAAAAAAABg4SFRwk",
   "dk": "FlXM+wxrbcyr1I
   atJdWG4oP1UWfiCfh8N/tvoR1qaHK5eftq0y20US38U07WjjyH5XCR80qJsClE2ht1vQ
   wVvzgAIgDrFw+0NHkDBa/yEek00YWnrSTLkDdgp+JhV8413XkJiNaDUnZxzB9tfOpZA0
   iA7yhc0vdERXzIkAVf/mOJhuCQtwwd/Pojh3LptDeiUCo2Gf4pvu3VcbSVG3zcxWIHz8
   Gd8NUXHrgW0WKKmOabyg==",
   "dk_pkcs8": "MIHHAgEAMA0GC2CGSAGG+mtQBQJIBI
   GyFlXM+wxrbcyr1IatJdWG4oP1UWfiCfh8N/tvoR1qaHK5eftq0y20US38U07WjjyH5X
   CR80qJsClE2ht1vQwVvzgAIgDrFw+0NHkDBa/yEek00YWnrSTLkDdgp+JhV8413XkJiN
   aDUnZxzB9tfOpZA0iA7yhc0vdERXzIkAVf/mOJhuCQtwwd/Pojh3LptDeiUCo2Gf4pvu
   3VcbSVG3zcxWIHz8Gd8NUXHrgW0WKKmOabyg==",
   "c": "As6IBnbTrxQjc35IWylUI
   PoW0dtm7/OjzX7PhlhkuTy4ZqJYUtWWVIhH0ayAWoI3eSAa5ok1crIIVPPyq5JduSH3J
   /jr/91/tokpr1sAbkZC8/NrZm2XvPKxgv0HI6JafH7eQOrhn2ogWyF2t2DvUtPzUvAOr
   LAdxOcgg/CiP146eZyyhQvApwwnJCrLkBzr9+ZbsGzA82V286at8onJiStJSSnxjpv7i
   CEWnRpwQMZaMsAczjS7W0DPJ2OPTmmd59J2rPfaOyxc9b2iDXjpozhkF1IFp0+/gaK85
   QwJr6F54e1SfAkzJ0ffr/IiDu7WfqZ20NFkA94sElt4nG8Gl+UQDDc1heU7e9dH8PNHA
   ADeq5cCGyRYpqZ8AMdj71OAvIFVu3lzAtBzZmZ+xWAEvtMEA9Rc+FfwC9H+yaWA0fASn



Ounsworth, et al.         Expires 19 April 2026               [Page 128]

Internet-Draft              Composite ML-KEM                October 2025


   vbI3Vv1P83dB3HkmQJt37/hB4Krqldt+/cMjpaJ6nH4Ji9Fyia9vDfaF3S0ifcFwb7uN
   BmK4szlz8uygCkFZE8RgCz8HVo4K2PpomY5OI8Vcl08JRSv3VlY8D6XkYUlmpURJcG1e
   AYjS2RupdmHGjB2csB+qHfWrOhcr3X8pyy12/xmrIOJDbV2zhIkLOwgVEL7BbE3RYwSE
   Mos7ADIFFdlKRlGdC57InUE5NiAAdQrw3srnb+DGCSBAktJBPhy4kAdkkbkIUDr2XWlk
   9jpGymnN9EpgO4Vu38Gdbf9wf8yKFtwpja8yr1i4gq6krBbt2UjoGbmSQ7262Pi+1nXa
   lQWly6INjP7bSIz0JVLJ6U2jVvQcY92+d6Bgoue7e6RtEpYNAoq6fQO2rlt2EUy5bckm
   GVXzcJC5PnSB5fXoASOf/cch5OyFAcB3Jhx/kjQYp+5QlP3vrhsA6Q/uo7cJTHsolJDc
   huPTlF1yFEPvVmEmp3O4JZE8F7Bculx1kkpyVo8+TNTn6Rsh6Ba4gy9gLDXhOp5wKMyf
   fI9U0FVg7g+KI+hZF6miLQqUCaHKiu/xVmboiaRz1g3kI0MvNqhGNnQyno/u4sgG7pRz
   PQNeqm4KBimy691aHZdHKNCQ0x/xDdgDAIpKi8+whjYfagB6bUsL86RCcdhkmSw1GBLa
   9X/u0dZZawK5C6hhHTG//JD8jkA7MhgoE9rnr3+i1yUCfTbCYjItf7P6PpqD32sE5Ib+
   Li8p5pF6mheIcDsqi2PS3j+fjam1oIOPhsRMKDM4g3znxhqumjA8UkVQDsHWqMlEt75C
   /O1RBCP98nkMCeMp7OMxzZWfumh9ftOmKin6RNdCCnrEWLb+dMFLnKAUI6tAlh0o6E2W
   LaO1VuP5aU62/QYyJd3AQ8uPTZQrG2BYIeXmAz4MJDackqbxQa48urfaO8o+xMY34Uf4
   9Gm4bbtGIsMv+I/lsrmSfWTxh6xdWF+MB7E5ERbe28BWArzZKGpQIToZU1L8KXFFmQ7O
   f4UQpTPZkp6bzRXNTxsmKDrLuXwL4QTHDi71AEttD4AzZPS5hvfHqGlIgl0Kuk7tK+to
   mH63dIX4Zv6WI88TwRpjpXybVbgL2zXvYGVTBfbPBF0uAjauBJswkmzE4tv7hML9oXba
   +8STRj9DRXadF4BLKY3ZjxUCDjwQxmWAXrsKwRASeoVHF2rd6MpWNN+NQ6EMxWKBL9f4
   7DG7XNe+XmwSl7pQbLkrM5CWKPekUP+37ZhY90q3H2+8LbInnveYz2pIycPxZ4zYHMAQ
   jeyc4ffOEwJkheNXP0xki4t3gp0AsQ4DayvTQXhueEV85ebUP9NkhjAUmEYGwT9xkpHJ
   s+R0x/9ewNfj/kaQaZdq0Jy0LsuVQ5/l83xugFOC4RgUYrNiwaPn4OitdP7gzB/lRDF/
   zg76H6pLZveyQtcfv5jsmEZyLtswhkZM2uWwbHeDxtR9MFIGlg/HrxJvR6XJNS5SbdF6
   SJkJzF7IL1x+icjUx/dSTE8z9sYi8RC81O1uo79av4G4mq+uHk6h6jNV89E2Z147mZBM
   RjG2EYFYPX+GjE4WojtSX61U86pbIX8odSYu05eQxQc0xEXAmzrtubseoPvYI/Bkp4cC
   s7MXrN12wQJsG7yRPd7e36UcMvKMjlNaBNaU12CZUZxsfzVj2seZR5IWZL/iG9mL6RbT
   xbpiYWWwmNrvjadNW53JwME40OmCLPv3pPy3A==",
   "k":
   "W5JP2hIEghDXHto7fWi/y0f1g2Jw6xOsSiMjCjdhSR8="
   },
   {
   "tcId": "id-
   MLKEM1024-ECDH-P521-SHA3-256",
   "ek": "J1SK1oYzLpO/gPNE/aypnrFFC3NNpv
   Ov1zwPGAEkd9K7TccFY4ebaYRhLUE6Z0y5kqJjmapS92Ue0eAzk/AquAsKH/leajUyqh
   Si+0iZlMctrRQv4QAtIkbHspCskPY4Seg2H7yU+UV2A2vAbvpoaQYf60madKtIDetuam
   scR6peECd4druF+ikNJkFIjIwi5fMtL2O5GAeU3lox1rIpBFLK+PKOjNU0aOV0UHdxIR
   qx8IUUR7nO3ZooD1cgW1vBPNE737QJW5eYMJxbCeIIKsrDCdS2C/aJjajNkUVblPlQc0
   Ab80Jl5Dxpc8gBn3s5Arg3G3x/9vhC0IWHdYMKlwyMFBrFm2tgB/SwAQSHwRK9Gtd0cD
   k7n1Irs/w9g4QyhbZtwKZw3fdPXMqhVzXBEpE5v1dV7lZwm7QUmGmeFgsLvPpmuPk0FK
   TGSFBDKspG7ypZzRA59JA5iwQEAOtbgoKqtDsEnJdWieCM8OJxwjdzDws94diSg6uhjP
   smhflUrHpo/jMTDVeYiPAHWfAQw/sY17FaJTxfB9IC4ikazJOp3Vyrb1ElNKm8kmGQze
   ol2wtnM/VEkgCK2UqmiiZpEnQtdPOY1dVYxKiGpgMfR8GDCAAKncwC1XeDgbTNvbYzKS
   dN/6eB52Ijmkc9xGdaqKFxN4bEcBulEBpiKYpl/sA9EhFvBqalVdyMX7wdxURh37rD2u
   NgQzg9p0c/9GaXsXSKU/BXo7DCf2GQxTMys2IB5nMr3dUzm9BHrVEV5hs6DBViuMYfvR
   vGa+VgWepMulMA6AqeV4JoCSEw93s7QMOgReaatSEP/7AatzDCFeamlxwJaVmJ7se7LI
   ghiPqGIoq3aTINbxyLPTLFJUswRHlOsvC41hu03NIUO1Z1MLoTO4GpAYa/kgqi16K+gi
   lT4YZexIF9JVME8WBwVhBxpUsvUoJbMABatMl3IhuNtoUnSaIqLYWOcjmKong6VVEKk8
   RjyySCydgDxlNPDVyoi4lUd7c7ZSyQCVBxqyoIIFm3kodEVbMkl/pJx1iYS4I3VSA22f



Ounsworth, et al.         Expires 19 April 2026               [Page 129]

Internet-Draft              Composite ML-KEM                October 2025


   zGvgSsirYhqoc4+QYmIasEbBIYN4iXoQSsPyjEN6y1mfRVz6t6JVA8DbQXFikffzALFP
   mg45utPLWHUUcRGvJwsfZDl6AXI/SytzKD1tBWdAk5LPo67aZJutyl+iRft4UiCHjLCS
   mYK8IDjhijRRupWTws0dJr5SMeYzMpSYu7zqAHjoTDv8oLWAG8nAlosjUSVkS1q+s/ra
   BLC8SKc+c+iKDIuvIP3miGb7xWVnnM5qawRqByZlxebNAfB5t9hvUfl8ppFBA9Z6oY6b
   kf7nkV+jGsCqc1dsJWxmSS/9IMkPIe9HYPAA28RRlaB4G7u2rNryYhlOpP5GCBusdPwp
   tPujip5HwnKCCLmPVe1MtWN4VDUBgcNXattuM+QXkcR9yLcrwaUgdBAsY53FpfxSdhEe
   GQ8/cf0dcPXWy3jtcU7+DBmTWQcIq/qOyBh8KU6RHGC3yxbexFhtEhRQPP/YIfKiAo4/
   kmRRN5zcIE4SUFY7O4BDFLEncb4pbEBSgAUbqDvNsAwcqdirGrJsyJTJwWWXpP/0trxG
   JawJQcuxbE4tONxstyjcaz8ats1TlpokoQ6BZpQyoC+/IpUgNnDUAjF8ROTtPIpsa6GC
   NCzxCV0BU0UlQtijtiWRbHRQyqYwq2yVhcLYHFSRgP2hJBM/Ztf5KwQdkrQ2IpXiZx3y
   KyfqBKrfdUjru5/4xlYUhjjUlXFYt4XtZmynm3q4hi4EmOgDsbdZJNy/dlLpB0hbYOtG
   HCAsRxznszdmYiRcJ4MbtG3wC3eDbJ8RJVedvPG7y+mgostXxHHmtQrrhEwVW1+Yx6Ll
   bKa7eCo4zK3Kk50/pENlUYocDLuoS5J4qPrZtlsHGJBNAhxTwpyJU6ZkBEuLHDu1IaVf
   qe5UaWy1dIyCBZqBUD0dBpEjaOB4RPo3ecTQRavwYMrKg6MVEeA+MfrHKQOEDI+GOJv5
   TCmyIM5uhQFhSXp1QS4XspwziMNlW476kdqMrPjhw5euIsyA/s5HzdDhPy+rQq99xrIn
   YMTYaIQOOOik6eqSTeHiYEATKMCGZd6l7r1282F+70LluYPaRCq/BY6gzDDW6+3KcLbX
   sD8uIBWZDB7FTCuOJosxghM+VoLr0lf0Yvzs0irFQQADw7v8lgj3J0zY8sU1um8x57us
   1dOgkFLrYOtyTMKWPq0C2B2Gf3EenlsNfoFtLkKaM75Dc/KW2wg3NmtbEmgxAk",

   "x5c": "MIIUpjCCB6OgAwIBAgIUdaYEJskJDi44P0EU62fFlr6mp3EwCwYJYIZIAWUD
   BAMSMD0xDTALBgNVBAoMBElFVEYxDjAMBgNVBAsMBUxBTVBTMRwwGgYDVQQDDBNDb21w
   b3NpdGUgTUwtS0VNIENBMB4XDTI1MTAxNDE4MjQ1OVoXDTM1MTAxNTE4MjQ1OVowSTEN
   MAsGA1UECgwESUVURjEOMAwGA1UECwwFTEFNUFMxKDAmBgNVBAMMH2lkLU1MS0VNMTAy
   NC1FQ0RILVA1MjEtU0hBMy0yNTYwgga5MA0GC2CGSAGG+mtQBQJJA4IGpgAnVIrWhjMu
   k7+A80T9rKmesUULc02m86/XPA8YASR30rtNxwVjh5tphGEtQTpnTLmSomOZqlL3ZR7R
   4DOT8Cq4Cwof+V5qNTKqFKL7SJmUxy2tFC/hAC0iRseykKyQ9jhJ6DYfvJT5RXYDa8Bu
   +mhpBh/rSZp0q0gN625qaxxHql4QJ3h2u4X6KQ0mQUiMjCLl8y0vY7kYB5TeWjHWsikE
   Usr48o6M1TRo5XRQd3EhGrHwhRRHuc7dmigPVyBbW8E80TvftAlbl5gwnFsJ4ggqysMJ
   1LYL9omNqM2RRVuU+VBzQBvzQmXkPGlzyAGfezkCuDcbfH/2+ELQhYd1gwqXDIwUGsWb
   a2AH9LABBIfBEr0a13RwOTufUiuz/D2DhDKFtm3ApnDd909cyqFXNcESkTm/V1XuVnCb
   tBSYaZ4WCwu8+ma4+TQUpMZIUEMqykbvKlnNEDn0kDmLBAQA61uCgqq0OwScl1aJ4Izw
   4nHCN3MPCz3h2JKDq6GM+yaF+VSsemj+MxMNV5iI8AdZ8BDD+xjXsVolPF8H0gLiKRrM
   k6ndXKtvUSU0qbySYZDN6iXbC2cz9USSAIrZSqaKJmkSdC1085jV1VjEqIamAx9HwYMI
   AAqdzALVd4OBtM29tjMpJ03/p4HnYiOaRz3EZ1qooXE3hsRwG6UQGmIpimX+wD0SEW8G
   pqVV3IxfvB3FRGHfusPa42BDOD2nRz/0ZpexdIpT8FejsMJ/YZDFMzKzYgHmcyvd1TOb
   0EetURXmGzoMFWK4xh+9G8Zr5WBZ6ky6UwDoCp5XgmgJITD3eztAw6BF5pq1IQ//sBq3
   MMIV5qaXHAlpWYnux7ssiCGI+oYiirdpMg1vHIs9MsUlSzBEeU6y8LjWG7Tc0hQ7VnUw
   uhM7gakBhr+SCqLXor6CKVPhhl7EgX0lUwTxYHBWEHGlSy9SglswAFq0yXciG422hSdJ
   oiothY5yOYqieDpVUQqTxGPLJILJ2APGU08NXKiLiVR3tztlLJAJUHGrKgggWbeSh0RV
   sySX+knHWJhLgjdVIDbZ/Ma+BKyKtiGqhzj5BiYhqwRsEhg3iJehBKw/KMQ3rLWZ9FXP
   q3olUDwNtBcWKR9/MAsU+aDjm608tYdRRxEa8nCx9kOXoBcj9LK3MoPW0FZ0CTks+jrt
   pkm63KX6JF+3hSIIeMsJKZgrwgOOGKNFG6lZPCzR0mvlIx5jMylJi7vOoAeOhMO/ygtY
   AbycCWiyNRJWRLWr6z+toEsLxIpz5z6IoMi68g/eaIZvvFZWeczmprBGoHJmXF5s0B8H
   m32G9R+XymkUED1nqhjpuR/ueRX6MawKpzV2wlbGZJL/0gyQ8h70dg8ADbxFGVoHgbu7
   as2vJiGU6k/kYIG6x0/Cm0+6OKnkfCcoIIuY9V7Uy1Y3hUNQGBw1dq224z5BeRxH3Ity
   vBpSB0ECxjncWl/FJ2ER4ZDz9x/R1w9dbLeO1xTv4MGZNZBwir+o7IGHwpTpEcYLfLFt
   7EWG0SFFA8/9gh8qICjj+SZFE3nNwgThJQVjs7gEMUsSdxvilsQFKABRuoO82wDByp2K
   sasmzIlMnBZZek//S2vEYlrAlBy7FsTi043Gy3KNxrPxq2zVOWmiShDoFmlDKgL78ilS



Ounsworth, et al.         Expires 19 April 2026               [Page 130]

Internet-Draft              Composite ML-KEM                October 2025


   A2cNQCMXxE5O08imxroYI0LPEJXQFTRSVC2KO2JZFsdFDKpjCrbJWFwtgcVJGA/aEkEz
   9m1/krBB2StDYileJnHfIrJ+oEqt91SOu7n/jGVhSGONSVcVi3he1mbKeberiGLgSY6A
   Oxt1kk3L92UukHSFtg60YcICxHHOezN2ZiJFwngxu0bfALd4NsnxElV5288bvL6aCiy1
   fEcea1CuuETBVbX5jHouVsprt4KjjMrcqTnT+kQ2VRihwMu6hLknio+tm2WwcYkE0CHF
   PCnIlTpmQES4scO7UhpV+p7lRpbLV0jIIFmoFQPR0GkSNo4HhE+jd5xNBFq/BgysqDox
   UR4D4x+scpA4QMj4Y4m/lMKbIgzm6FAWFJenVBLheynDOIw2VbjvqR2oys+OHDl64izI
   D+zkfN0OE/L6tCr33GsidgxNhohA446KTp6pJN4eJgQBMowIZl3qXuvXbzYX7vQuW5g9
   pEKr8FjqDMMNbr7cpwttewPy4gFZkMHsVMK44mizGCEz5WguvSV/Ri/OzSKsVBAAPDu/
   yWCPcnTNjyxTW6bzHnu6zV06CQUutg63JMwpY+rQLYHYZ/cR6eWw1+gW0uQpozvkNz8p
   bbCDc2a1sSaDECSjEjAQMA4GA1UdDwEB/wQEAwIFIDALBglghkgBZQMEAxIDggzuAJ1h
   yj/VVOAe4iOf+A98RWsjfL4aVDti/1l9p9fdJbQOgBFpudl2lM1iZtWHKbyw5vEHr7zp
   4hKATckRJDjDqPQF3ZBSKEp9BToP+MkuhuUqr+JjIS6otIfJQDfPdEIW0B7xaRUYZ7YL
   uWidRm4+fh8JYRGbKOCga7jk0XxOzxL5Uuj9eO7aZaGQ7A374K3gcHB+ftQ8m1JCg842
   /ENejfG6hTLPgprpxlq1K8pvgGrUGun+//WUnFLyDS5oKCZNbbi2EfslieYc417Wfve6
   YWbcnfvbuYjCmvnfKaIPW0UIgitFXi+dpu/jgYZD5d5pPfHlepI4pKWvrTA6/8AqI7Qz
   DYXhiUjNeDgNgH7jW8KgkN98TFNoDHK0XctkJ0jAFuxkBv/RDgiMX5uakfqXJcwWK17N
   Rt85MH5qpslMf3ovbIgm3xBEb+gq66upfZWugcXTX+MMNgJDhkKslsDDTh0khFFBWYM9
   nq0zufZb3FBMZkEcj+OyzHXofpebK5ljWCl9xfYhXnSom+CSh7SJzQ7JQ2FbnmNl8nnf
   WBFW8J8e5V/ExRnGUlKm5jt4C5EoHkZLeBoGLTzACIu6MQFZ7htxecJn0lQGLhGVMKaY
   SSMool7Cj63ccsRbhFGlDV3ZECpfc4/wB4ma3Gxpjg87UcGpHjorcpAzsXd2LGp3u4Fa
   /vKHPOGt3NV2ZqV7ceME1RLEdgulg9HoFQArmBZgAkw8hrFOIFkellKXdo5pncuRXJA9
   4L1XDRFSx6QbiEEnSnrjP5ZyT/JPP8/km5MoNigj8pp2H8j92D73qHAn1aXxEAU6kWif
   ECkINUI21AwkftQDj1nk+fY4/jN1dRkx7iyfNYFya5pA9EkX6Eaod0/yrl/4Hr+Bv/tt
   yaBH+FWC6uPU/fK1TFbBbab0QjfGD+FXQkpxK7E3FT/tQIfx7hIQ+GH/OiCLKsPxLZsB
   2ch41GEX5/PcC+RhUyjAIH6qASEsWTMAEcABG1QoLneYsq6Kq9QxXMneoIR5m7GUzHMa
   vE9VGBFMkFkadcNTM0P1MbB4FSwyzXg481YedBQoTLeRIQY4OJY7iSlQLugEHewo4JHJ
   kmnxBf3PQTn4uzbLpm7gCLRtQ7DgSJSwGAo4lg81lWMgt9zyTrZBieDFM0KPfvvoP32V
   4E8lzT7eFSIJeGYeIZJESocn29nRX6amjUWtncBlL2jTdgW+47RPsX55b7uW9oig1Xjk
   oVyn7teDKqNgnHHUoWf49eA69SGHezcVUgAH6uDrC08vVYkzOv7Dx3sqc1StdftG4//q
   xYLkOlXJ96KvyE5N55FOW+rUlSBEYQxhF2xkW8Rk6++uut4fPSobfY5/kZrJZkLu4UJW
   EcWhX4oc+DIKHaBO0apGeCrybf5kB05pyrJ69BWwTnKkjJZcD7ytVxgouoU1tqfXzQZs
   TYcW5gIWKXmXSsUMa4ls2ulwBPNN+rTb6YgZxYASDH+HTpgZps7yGlQNgNy5zpWS96ci
   7y+H1nkGr1SMvS1nRdm59Uy8SjeK+8F6ktrvzBYUN8+iRQV9lUgt/f8Wr21e7iO65EPJ
   109zQqyzrJiHsqPDVCRbcz4P9itGS0Sa+EbCKWUqPSEyaUqcgD64qd9/CDKrBNNcMIhM
   JC6SUGwljRyLI09Kb1FLHO54hMmQkCZ0LGZflPuM+owTgx5aDPjUeX8ImpRfhoTFar8y
   RWbwOlr36y6oQIPyXlo/zY5dtwW/3APxNdff1TdUmjLQ2drKTnXsB/MbtrluBwnXJ7Ve
   R99udRv5bxGduRP1OaSw+Yj7+wDcpNwXaR4xWLyVsHO2zjKbX9h2b/g77gHIPjj0q9JW
   vFoMckoZYGvxSFkiuv+li9XDAbdSg85HkI7TGilUhMnLXL9fcCC31tmMYossm0UgOqnS
   Aw0Az4rKaMbx5skyku51MGhjl5z93SxRT+Zu/50ZMr6UosKyLTPkt0wn7KKAa9WbUzjT
   4WfMfd+EtiVoSYdX5ANWOnTdLhxqLB0sM9VPAebog7xVZ4NHyxoUl/EQrxGdGPzGGT+M
   S/ldA3dnW4FGX7MPhSrVygVdCe3Ud0rJbQYptscArPHkL44ifYTFUGP+YLSe8SfeyU/l
   JNQrFxeWD1+sQ+vJHWaaCjSvm8PDobSy7vOyO/rvPfy60HZjeIFpklJEvv5KeAoLOhSP
   1PI6mNCy9YTfWJdIKZz7i3q0cO4c19DmM0xaGT11LFXIVf+z8bFmp848kltaFalXirNa
   F/0hct1piIq02j07kUmbFS1zzPrYn8Ay4O6+K3o7oyJ4h2yF6lIWNbR54fHC36+gyJdq
   wMuVjiMMCekICIbYGIaNNv3ihT7gJbFgZCSICWF0vnPkR0L6W/wQoC3TiNi582k8bsWQ
   ZmAzA+v7OiAtWQacGKYZXV7S2mcG87yycYWTQoSl4gheaoRCsIQkJNQkw8lV63k+Msqm
   Gb8TCzpYP1b+iZ6kZnaJm6j79X6MQVFBMC+mNxcBnO1Rv2uVXBH28Jkcq6P23g2TP61F
   R77Im9xRtZtEaSVvz6xSr3TRUjWv/4OFUqLpMWDwE7mecmN+RBV4OAGF6Xtk6EvU1pb6



Ounsworth, et al.         Expires 19 April 2026               [Page 131]

Internet-Draft              Composite ML-KEM                October 2025


   FInkz0PglCj2+x3/hiSCjwzY9FVSAhrUfwkpqNJF4grK2LwxXvrW4sKpjh2aaMPPWYNG
   SHHLmz4qIu8m8dTaqfmf9ro+o2mX3cyMAOL+p32261Lae17yHyuGclwxW5oEBmRyImeW
   uo8N6ssybBSZEq4PUdUflmTOwX/IeQzHz/fc3vJc6/6jHtj2s4tTPLEFPIeE8gkG35a9
   cY3PeOzJobu/t083MID4quQSQgHha7Z6FwcGcTYyEMBPHn07juCj2dxsEI4inaQ+fYPk
   DWTV5ru9N6En8qrkmYzM6r5drziPmslrZASZBE6XCDsA8LmjK/8nwW/0h7HjnuxVCvR2
   +OMqeUujRyHjpawUdFx+l4Uu3ZeLjv0Lq0rLUz28h/0tKA3357/vGCJOS7crNZ43PnvF
   p+4RQNEca7SASeO25nKLFXku3nZX7FljUxbJw2kU1o0GepRYjTo8IG/PVIMp60gA0K6K
   mtx7W893Cg3DANtucLlYUEkVU7RnDWe1aFG/QdG6A6Up4jo+cxU7a1GxUnb2FD0becvR
   rZNtPI8zxkT+3ZFhbRhGjspZuAphEMaKRP22XJe0sBVuCI4GwRlk+iLrqGMGgTa5QAps
   EwykFNHh4UI+h6T3E7VuKC6h39bJZhAuWsp9RgQlnldavLzR+FzmdirKnItLEPbxRYpn
   7tlCV6k1NqskhBn+nJ9qwONcXfcuFfuSsWAUKzT0LMp4dR5P2JuimxDL8KyG8gP6dlVE
   iL1A8I9L7pfZBKsbqH45FmfSoWAJM29m2JKSS04dyL29ifaGNyCGbALn1P8mZxxGqUx+
   N/oNZuc2emI0rxp77IDS5sD/a3iAiL6FeG2bgZRMoAa17w4T5Kz8oEPwjB0FKLfSzBmr
   T7WKq/poLlwvwpYS5TDvYAL1246p1ZBOw7sqfzU5XBlb4Wjs6/W8NoU6xK4mAagHDVzV
   L3wwp0ZK9HUpDVgfk/3cKZfE1yjouiovwDAcL0iM2znruipRl1c1E+aaKKrCezYFT0cs
   FqXzUVu7ORCsT6Leq4EdtsOT8tW4wUC/giLACYcc7BBmoty4cYeYUB4tR4KEc8Gmnopv
   iHH3ZGlOezIfC/tql1Z4njSt88rQRCZ1MXwBr7eoMN5awsNVcBDOCMVfepKJZ6m+7qxU
   SQFKOvBfY10WtyoBX2P+N7sSSImGU+WGf96KYnAA7dtGW7P0Sx8yZgepdPHJXTjHuuQF
   3WHfW6qADjvex9PxYqWGjlAs5rcplglEbdSgY4ld3MC+Bi5zyb7cPJfdmiAAOKAc0JZK
   R2ZnNEKC1x3fi5L8yCQjbeD3D3zeXE22eBznj4Bp8jh4rDULjpNlyAjQKMtCORvDMxyk
   bkKXWZ4hKz+ykkYR6fcT0PkWTf2zSgEJZxQ2NREAeBqvf1WLQUWuGILcUaoB/HTn9Bby
   UOPvefljFr5NY9/1aQvPl8nK7Ep4/+sC8Rq279SEZfAS8Xn6ELlf9b8QAipG/TBvsi5/
   N7ALGv1KMdV8R/wleCGa/TzMbCNx2A3+B7HIgOvF+PdHJBJYZQaBfhQuZAkauMgkRCac
   8BRMsA17EEanwAM4XxXKMT9IWcC46HP4LKHoiUkT0sybE1R6o6q9fZEWMi0gVH1/NJBi
   SptqrycRyUgLSa04qvJnG5wZiCQ/GEypapq83lAnad/t4aDhuUsTMMFBij+Ql+kjIJlM
   Iareztz8i2MMlqEjtu6lS3qUqrnVz3jVt/KxH9HEnTpJIVhnao+arOkwlezvFy5MUVVm
   ipWlrLLHy+o/S3bLCRAVHGn/EjOPtQAAAAAAAAAAAAAAAAAAAAgMGh4kKA==",
   "dk":
    "2M0E4ZSE4dJP6gyLLlQWYLcpZ3WvA/zYr8vYVkvYxfvkSI7AFtYkXa0ljm3tYoYJwD
   uy2T1vAX5zX/XL1wZ4QYUABAEyjAhmXepe69dvNhfu9C5bmD2kQqvwWOoMww1uvtynC2
   17A/LiAVmQwexUwrjiaLMYITPlaC69JX9GL87NIqxUEAA8O7/JYI9ydM2PLFNbpvMee7
   rNXToJBS62DrckzClj6tAtgdhn9xHp5bDX6BbS5CmjO+Q3PyltsINzZrWxJoMQJDBQAg
   EBBEIAG2lRaxgfz/VHMvtB44mzsGTPbKdciS90nCAeidXqhdB/BA4dBbKucHb/N7Mzco
   6zyhns3WU+zGo9CCH4he7smX+gBwYFK4EEACM=",
   "dk_pkcs8": "MIIBLwIBADANBg
   tghkgBhvprUAUCSQSCARnYzQThlITh0k/qDIsuVBZgtylnda8D/Nivy9hWS9jF++RIjs
   AW1iRdrSWObe1ihgnAO7LZPW8BfnNf9cvXBnhBhQAEATKMCGZd6l7r1282F+70LluYPa
   RCq/BY6gzDDW6+3KcLbXsD8uIBWZDB7FTCuOJosxghM+VoLr0lf0Yvzs0irFQQADw7v8
   lgj3J0zY8sU1um8x57us1dOgkFLrYOtyTMKWPq0C2B2Gf3EenlsNfoFtLkKaM75Dc/KW
   2wg3NmtbEmgxAkMFACAQEEQgAbaVFrGB/P9Ucy+0HjibOwZM9sp1yJL3ScIB6J1eqF0H
   8EDh0Fsq5wdv83szNyjrPKGezdZT7Maj0IIfiF7uyZf6AHBgUrgQQAIw==",
   "c": "8
   +MSSlUq8ZRKj+tz9Cy6QFhi1PlVfk5X2qyKaLmF21Pw5hhaGJyQAfvttCOu849eXNxT8
   LJgVVYH7Csi7oN5zxW85+0iBmNsa+uGl91KFTwc6x+JVWBVxELhmbIXunK+dirobhivt
   0+QH60KhVwHMWpCh3e+MqWNM0mxdTk+t0Iyj7FBGIgnTT5iviBr8lwoW7m7fV0mUS2hn
   uMbGmxJdfSzhHuUcgQkI6b3EQBeBd0ctici7uRy8to8W30hEwSpPNRYPfknJo2HEURLD
   fZoqLpUYlZOicVhxgsoGvouUlpABVrrIKlXKUKzf1eE9S+hrRhs1wTEXBpcGbiugYYrq
   LnnG83Egpn1n4M2ejIixB8oPV3PSiRjtsGE1ZHBZ3g/kPzxZmgupTAqXm7R7T7jpuaYT



Ounsworth, et al.         Expires 19 April 2026               [Page 132]

Internet-Draft              Composite ML-KEM                October 2025


   vuY5OfHhpdXoa8gDpDyOaGQCO+TYxpTu76ETMh8i57e4wk3rd2X7ddJWPwh1ubTWg3md
   p4n7jbARvDZI/58e0gKgaeU1L7rKB248q0v4rikLPjEQH/Ccp0qAoOoX/lnxGbTdltYp
   bxSs6mT1Cqn8OpIsjTgi6JD1Qpu6iTRAScJVyGKzsfEf0RCW0b1oVY7561SUB5PDSeAt
   vsGgaMADFpuYRt1EfGuw764iMnds+1BnWERyGfb319E6ehSml1BKJ7XuC2WZ/GsKGeTE
   XSm6yBU41l/fAnCQD1L0T6poRZ9AwUYVCrXDzJXDIvBk+1P8UUkNPZELwa29wzUpkLNe
   NYry4261DXm9t38r6cl/1+Xl2TNd6uCg7xr/WdJU0RpkzYkoNeRMw5rkDjIXLcqBktIg
   2pKxVuNOMVXqrloikGbMhdXNCvl4GdEEJOZpr3oMmDawvQPmRN62bdonWL0shzDiYSa4
   JIx8f/fn2GmjK69l1lTqUp3UzUp5T6CGY+DtVXwts1oKfsFsl1lAWEMF4bMqtXYxkxja
   6ss2t5FWXR/Qy4dw+rG6WWxi2Qb3KFJRRvH7VgVjoib7OA9gnMtoI7uhZ8TrNoz9f1XT
   jZPdIUQBKpwlaJN1yvY8PwqyROhemm+1tQ9JqCJwYyUmLbzZxX3Yo3+P5/6p7v0elLgk
   jQ/b58OA9+ISHI/l0ZpRWH5URmmhgNuKxvS9b4oMcuA/d8H8vIA2zd7ajX8Vl4mERI8U
   N/jYRz20Zk5xK+KS7oIOGCC4mTaeD6VnYf4VDvtOBlD0i/ZpYDooTSGqIpxCtkojGTEC
   lmCCMmGb6kqUy82X/kLnIgt7sQquWQfnqDt9JO9H688D+cLvtzoZeN95Iedz4tl/OGiC
   tVFmRJOi7rB4Zry9LfGZzjYnevfLRLXgB2gHOY4yI3oY8jVrn4UwNzRYz2JdRDg3rDH1
   VSZfK0KraOC625aU/NkSTJPI2vWrVUBeGcqrDgAZXCuRKT1epkU7x9HC0Go16KPKwpNC
   KBd28YJwrNNwYIktjZ1wCTc1iMUFshHEjsytMTGz0rNeGZivPK3RFAKRi9h3QCQDQ4r2
   AJ0lEPekmGguhQgPMCwAFUY5r/7YUBfeGcy49zThAVyoMIHbl8GwFSfz6AS8yv7vceiR
   kI1BilaTPN6R93YtSVI7/kQmmfJpGxmIaDksHs91YLGI1J2kxSe8tGnvrfvvQiVOUTfo
   H0rOSrGckel7bOyZEKHmwWgRxczs6hGpVfcLRExChGF3d8iKdPrrRoSGZ7P7M1UVya4n
   9TaNZxPwbyla5L1SCvc5NowcArNFUTKtDcwtbw7daS86SiqN95GYGFA5yGzJmQ6DbTtP
   75hl9/Tg5rPvfqfF7Q6rGLsM9P7+jZzmB2CYgJeWtHlAHtPQjNxbTOqWSIOpBgisPn0c
   BF3V39WDPkVV2km1e4dcFLyqYdgbHeX6pkWOe6ZtEDy3U8Z0nL2r/+WXvloH6bk2nnn9
   uhX0XrrI5IwF8kdAKMJIQ7DLXRF+JVs1Q3Of0Z40HNyT+CLSpIsCq9IHihxIXG4rTgZ/
   +jTLvSfoCuB87Hf1LdbFtSEHaBY1Vrug71nJRFo3uI0Vh49Y54LD/7+9uKy6rkfLni5/
   uxgNL385ADvIOgb6l3/bUJSf2X8CuCDnYAwkU++09pkPnZ7kP8EASi+xk/LZw/vWeiZj
   zQeqBBVdHEd62XmapmN/Ql1Q180yK0VRC+cLn76smVDtDHck+RNRTGMfknC6aS3BT+T6
   8+uAZbhhN/q7p+zZxBKBpBidkzE2ECjHT6iBRGwcxem4lHxOvYorQhafVfyVQPyMr9HB
   CqDnEEOv/e6j2ryxry6K1ga",
   "k":
   "aedg+MHhjAmxfCfxCWnu09YCUybTKVCqHfVHKsX6eUw="
   }
   ]
   }

Appendix G.  Contributors and Acknowledgments

   This document represents the results of a many-year effort by the
   LAMPS working group.  Over that time the following working group
   members provided valuable review and commentary on the document:

   Serge Mister (Entrust), Felipe Ventura (Entrust), Richard Kettlewell
   (Entrust), Ali Noman (Entrust), Peter C.  (UK NCSC), Tim Hollebeek
   (Digicert), Sophie Schmieg (Google), Deirdre Connolly (SandboxAQ),
   Chris A.  Wood (Apple), Bas Westerbaan (Cloudflare), Falko Strenzke
   (MTG AG), Piotr Popis (Enigma), Jean-Pierre Fiset (Crypto4A), Carl
   Wallace, Daniel Van Geest (CryptoNext Security), 陳志華 (Abel C.  H.
   Chen, Chunghwa Telecom), 林邦曄 (Austin Lin, Chunghwa Telecom) and
   Douglas Stebila (University of Waterloo).



Ounsworth, et al.         Expires 19 April 2026               [Page 133]

Internet-Draft              Composite ML-KEM                October 2025


   We wish to acknowledge a few people who have made notable
   contributions to specific sections of this document.

   We wish to acknowledge particular effort from Carl Wallace and Daniel
   Van Geest (CryptoNext Security), who have implemented each successive
   version of the draft over multiple years to provide valuable
   implementation experience and hackathon testing.  Thanks to Stepan
   Yakimovich for contributing to the reference implementation to be
   able to provide and verify hackathon artifacts.

   Thanks to Giacomo Pope (github.com/GiacomoPope) whose ML-DSA and ML-
   KEM implementations were used to generate the test vectors.

   We are grateful to all who have given feedback over the years,
   formally or informally, on mailing lists or in person, including any
   contributors who may have been inadvertently omitted from this list.

   Finally, we wish to thank the authors of all the referenced documents
   upon which this specification was built.  "Copying always makes
   things easier and less error prone" - [RFC8411].

Authors' Addresses

   Mike Ounsworth
   Entrust Limited
   2500 Solandt Road – Suite 100
   Ottawa, Ontario  K2K 3G5
   Canada
   Email: mike.ounsworth@entrust.com


   John Gray
   Entrust Limited
   2500 Solandt Road – Suite 100
   Ottawa, Ontario  K2K 3G5
   Canada
   Email: john.gray@entrust.com


   Massimiliano Pala
   OpenCA Labs
   New York City, New York,
   United States of America
   Email: director@openca.org







Ounsworth, et al.         Expires 19 April 2026               [Page 134]

Internet-Draft              Composite ML-KEM                October 2025


   Jan Klaussner
   Bundesdruckerei GmbH
   Kommandantenstr. 18
   10969 Berlin
   Germany
   Email: jan.klaussner@bdr.de


   Scott Fluhrer
   Cisco Systems
   Email: sfluhrer@cisco.com








































Ounsworth, et al.         Expires 19 April 2026               [Page 135]
