Crypto API 1.3 & PQC Extension : Review of Release Candidates

[athoelke]

PDFs for review:

• IHI0086-PSA_Certified_Crypto_API-1.3.0-rc1.pdf
• AES0119-PSA_Certified_Crypto_API-1.3_PQC_Extension-bet.0-rc1.pdf

Changes in version Crypto API 1.3.0:

• Integrated the PAKE Extension to the primary specification
• Added support for Key encapsulation algorithms
• Added support for additional key generation parameters or methods
• Compatible reworking of asymmetric key encoding to prepare for additional PQC algorithms
• Clarifications, fixes and documentation improvements

New in the Crypto API 1.3 PQC Extension (Beta):

• Support for FIPS 203 ML-KEM key-encapsulation algorithm and keys.
• Support for FIPS 204 ML-DSA signature algorithm and keys.
• Support for FIPS 205 SLH-DSA signature algorithm and keys.
• Support for LMS and HSS stateful hash-based signature verification and public keys.
• Support for XMSS and XMSS^MT stateful hash-based signature verification and public keys.

See the related issues and pull requests in the Crypto API 1.3 Milestone, the Crypto API 1.3 PQC Extension Milestone, or the Change History appendices in the attached PDFs.

Please provide feedback about anything that is unclear, confusing, missing, or incorrect; so we can finalize the document for publication.

[MarcusJGStreets]

Look OK to me.