ID  Algorithm  Requirement  Definition 

TBD (105 for testing)  MLKEM768 + X25519  MUST 

TBD (106 for testing)  MLKEM1024 + X448  SHOULD 

TBD  MLKEM768 + ECDHNISTP256  MAY 

TBD  MLKEM1024 + ECDHNISTP384  MAY 

TBD  MLKEM768 + ECDHbrainpoolP256r1  MAY 

TBD  MLKEM1024 + ECDHbrainpoolP384r1  MAY 

ID  Algorithm  Requirement  Definition 

TBD (107 for testing)  MLDSA65 + Ed25519  MUST 

TBD (108 for testing)  MLDSA87 + Ed448  SHOULD 

TBD  MLDSA65 + ECDSANISTP256  MAY 

TBD  MLDSA87 + ECDSANISTP384  MAY 

TBD  MLDSA65 + ECDSAbrainpoolP256r1  MAY 

TBD  MLDSA87 + ECDSAbrainpoolP384r1  MAY 

TBD (109 for testing)  SLHDSASHA2  SHOULD 

TBD  SLHDSASHAKE  MAY 

Parameter ID  Parameter 

1  SLHDSASHA2128s 
2  SLHDSASHA2128f 
3  SLHDSASHA2192s 
4  SLHDSASHA2192f 
5  SLHDSASHA2256s 
6  SLHDSASHA2256f 
Parameter ID  Parameter 

1  SLHDSASHAKE128s 
2  SLHDSASHAKE128f 
3  SLHDSASHAKE192s 
4  SLHDSASHAKE192f 
5  SLHDSASHAKE256s 
6  SLHDSASHAKE256f 
X25519  X448  

Algorithm ID reference  TBD (105 for testing)  TBD (106 for testing) 
Field size  32 octets  56 octets 
ECCKEM  x25519Kem ( 
x448Kem ( 
ECDH public key  32 octets 
56 octets 
ECDH secret key  32 octets 
56 octets 
ECDH ephemeral  32 octets 
56 octets 
ECDH share  32 octets 
56 octets 
Key share  32 octets  64 octets 
Hash  SHA3256  SHA3512 
NIST P256  NIST P384  

Algorithm ID reference  TBD (MLKEM768 + ECDHNISTP256)  TBD (MLKEM1024 + ECDHNISTP384) 
Field size  32 octets  48 octets 
ECCKEM  ecdhKem ( 
ecdhKem ( 
ECDH public key  65 octets of SEC1encoded public point  97 octets of SEC1encoded public point 
ECDH secret key  32 octets bigendian encoded secret scalar  48 octets bigendian encoded secret scalar 
ECDH ephemeral  65 octets of SEC1encoded ephemeral point  97 octets of SEC1encoded ephemeral point 
ECDH share  65 octets of SEC1encoded shared point  97 octets of SEC1encoded shared point 
Key share  32 octets  64 octets 
Hash  SHA3256  SHA3512 
brainpoolP256r1  brainpoolP384r1  

Algorithm ID reference  TBD (MLKEM768 + ECDHbrainpoolP256r1)  TBD (MLKEM1024 + ECDHbrainpoolP384r1) 
Field size  32 octets  48 octets 
ECCKEM  ecdhKem ( 
ecdhKem ( 
ECDH public key  65 octets of SEC1encoded public point  97 octets of SEC1encoded public point 
ECDH secret key  32 octets bigendian encoded secret scalar  48 octets bigendian encoded secret scalar 
ECDH ephemeral  65 octets of SEC1encoded ephemeral point  97 octets of SEC1encoded ephemeral point 
ECDH share  65 octets of SEC1encoded shared point  97 octets of SEC1encoded shared point 
Key share  32 octets  64 octets 
Hash  SHA3256  SHA3512 
Algorithm ID reference  MLKEM  Public key  Secret key  Ciphertext  Key share 

TBD  MLKEM768  1184  2400  1088  32 
TBD  MLKEM1024  1568  3168  1568  32 
Algorithm ID reference  MLKEM  ECCKEM  ECCKEM curve 

TBD (105 for testing)  MLKEM768  x25519Kem  Curve25519 
TBD (106 for testing)  MLKEM1024  x448Kem  Curve448 
TBD (MLKEM768 + ECDHNISTP256)  MLKEM768  ecdhKem  NIST P256 
TBD (MLKEM1024 + ECDHNISTP384)  MLKEM1024  ecdhKem  NIST P384 
TBD (MLKEM768 + ECDHbrainpoolP256r1)  MLKEM768  ecdhKem  brainpoolP256r1 
TBD (MLKEM1024 + ECDHbrainpoolP384r1)  MLKEM1024  ecdhKem  brainpoolP384r1 
Algorithm ID reference  Curve  Field size  Public key  Secret key  Signature 

TBD (107 for testing)  Ed25519  32  32  32  64 
TBD (108 for testing)  Ed448  57  57  57  114 
Algorithm ID reference  Curve  Field size  Public key  Secret key  Signature value R  Signature value S 

TBD (MLDSA65 + ECDSANISTP256)  NIST P256  32  65  32  32  32 
TBD (MLDSA87 + ECDSANISTP384)  NIST P384  48  97  48  48  48 
TBD (MLDSA65 + ECDSAbrainpoolP256r1)  brainpoolP256r1  32  65  32  32  32 
TBD (MLDSA87 + ECDSAbrainpoolP384r1)  brainpoolP384r1  48  97  48  48  48 
Algorithm ID reference  MLDSA  Public key  Secret key  Signature value 

TBD  MLDSA65  1952  4032  3293 
TBD  MLDSA87  2592  4896  4595 
Algorithm ID reference  Hash function  Hash function ID reference 

TBD (MLDSA65 IDs)  SHA3256  12 
TBD (MLDSA87 IDs)  SHA3512  14 
Parameter ID reference  Parameter name suffix  SLHDSA public key  SLHDSA secret key  SLHDSA signature 

1  128s  32  64  7856 
2  128f  32  64  17088 
3  192s  48  96  16224 
4  192f  48  96  35664 
5  256s  64  128  29792 
6  256f  64  128  49856 
Algorithm ID reference  Parameter ID reference  Hash function  Hash function ID reference 

TBD (109 for testing)  1, 2  SHA256  8 
TBD (109 for testing)  3, 4, 5, 6  SHA512  10 
TBD (SLHDSASHAKE)  1, 2  SHA3256  12 
TBD (SLHDSASHAKE)  3, 4, 5, 6  SHA3512  14 
ID  Algorithm  Public Key Format  Secret Key Format  Signature Format  PKESK Format  Reference 

TBD  MLKEM768 + X25519  32 octets X25519 public key ( 
32 octets X25519 secret key ( 
N/A  32 octets X25519 ciphertext, 1088 octets MLKEM768 ciphertext [, 1 octet algorithm ID in case of v3 PKESK], 1 octet length field of value n, n octets wrapped session key ( 

TBD  MLKEM1024 + X448  56 octets X448 public key ( 
56 octets X448 secret key ( 
N/A  56 octets X448 ciphertext, 1568 octets MLKEM1024 ciphertext [, 1 octet algorithm ID in case of v3 PKESK], 1 octet length field of value n, n octets wrapped session key ( 

TBD  MLDSA65 + Ed25519  32 octets Ed25519 public key ( 
32 octets Ed25519 secret key ( 
64 octets Ed25519 signature ( 
N/A 

TBD  MLDSA87 + Ed448  57 octets Ed448 public key ( 
57 octets Ed448 secret key ( 
114 octets Ed448 signature ( 
N/A 

TBD  SLHDSASHA2  1 octet parameter ID, per parameter fixedlength octet string ( 
per parameter fixedlength octet string ( 
1 octet parameter ID, per parameter fixedlength octet string ( 
N/A 

TBD  SLHDSASHAKE  1 octet parameter ID, per parameter fixedlength octet string ( 
per parameter fixedlength octet string ( 
1 octet parameter ID, per parameter fixedlength octet string ( 
N/A 
