Skip to content

[FEATURE]: Add HPKE (RFC 9180) to Cryptography Registry #765

@Mehrn0ush

Description

@Mehrn0ush

Describe the feature

What:
Add HPKE (Hybrid Public Key Encryption, RFC 9180) as a cryptographic algorithm family to the Cryptography Registry.

Why:
HPKE is a widely deployed, standardized construction (KEM+KDF+AEAD). Adding it enables consistent algorithm identification and avoids ad-hoc naming across SBOM/CBOM tooling.

Proposed registry entry:

  • Family: HPKE
  • Primitive: pke
  • Pattern: HPKE[-{mode}]-{kem}-{kdf}-{aead}
  • Standard: RFC 9180 (https://doi.org/10.17487/RFC9180)

Possible solutions

Add an HPKE family entry to schema/cryptography-defs.json and allow HPKE in the family enum in schema/cryptography-defs.schema.json.

Alternatives

Leave it unregistered and rely on inconsistent names across tools.

Additional context

Registry-only addition. No schema/spec behavior changes beyond allowing the new family name in the registry schema.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions