Web Crypto: Hybrid KEMs

[twiss]

WebKittens

@annevk

Title of the proposal

Web Crypto: Hybrid KEMs

URL to the spec

WICG/webcrypto-modern-algos#67

URL to the spec's repository

No response

Issue Tracker URL

No response

Explainer URL

No response

TAG Design Review URL

No response

Mozilla standards-positions issue URL

mozilla/standards-positions#1441

WebKit Bugzilla URL

No response

Radar URL

No response

Description

Chromium is interested in shipping a hybrid KEM in Web Crypto, namely X-Wing: https://chromestatus.com/feature/5198951632470016 (cc @hubertchao, @dadrian).

There is an open PR by @panva to the Modern Algorithms in Web Crypto draft (preview, diff), based on draft-irtf-cfrg-concrete-hybrid-kems, which specifies MLKEM768-P256, MLKEM768-X25519 (i.e. X-Wing), and MLKEM1024-P384.

Before we merge that, we would like to know whether you (and other parties) are interested in implementing some or all of those hybrid KEMs in Web Crypto?

[panva]

other parties

Node.js is interested in implementing all three Hybrid KEMs from the proposal.

[pascoej]

I suggest we resolve this as position: support one week from now.

We are looking at implementing X-Wing, which is already supported on our platforms. We also continue to evaluate other hybrid KEMs but don’t have anything more to share at this time.