-
-
Notifications
You must be signed in to change notification settings - Fork 81
Open
Description
Describe the feature
What:
Add HPKE (Hybrid Public Key Encryption, RFC 9180) as a cryptographic algorithm family to the Cryptography Registry.
Why:
HPKE is a widely deployed, standardized construction (KEM+KDF+AEAD). Adding it enables consistent algorithm identification and avoids ad-hoc naming across SBOM/CBOM tooling.
Proposed registry entry:
- Family: HPKE
- Primitive: pke
- Pattern:
HPKE[-{mode}]-{kem}-{kdf}-{aead} - Standard: RFC 9180 (
https://doi.org/10.17487/RFC9180)
Possible solutions
Add an HPKE family entry to schema/cryptography-defs.json and allow HPKE in the family enum in schema/cryptography-defs.schema.json.
Alternatives
Leave it unregistered and rely on inconsistent names across tools.
Additional context
Registry-only addition. No schema/spec behavior changes beyond allowing the new family name in the registry schema.
Metadata
Metadata
Assignees
Labels
No labels