draft-bradleylundberg-cfrg-arkg

The Asynchronous Remote Key Generation (ARKG) algorithm

groupnone stateactive pages47 rev10 expires2026-08-31 canonicalhttps://datatracker.ietf.org/doc/draft-bradleylundberg-cfrg-arkg/
Asynchronous Remote Key Generation (ARKG) is an abstract algorithm that enables delegation of asymmetric public key generation without giving access to the corresponding private keys. This capability enables a variety of applications: a user agent can generate pseudonymous public keys to prevent tracking; a message sender can generate ephemeral recipient public keys to enhance forward secrecy; two paired authentication devices can each have their own private keys while each can register public keys on behalf of the other. This document provides three main contributions: a specification of the generic ARKG algorithm using abstract primitives; a set of formulae for instantiating the abstract primitives using concrete primitives; and an initial set of fully specified concrete ARKG instances. We expect that additional instances will be defined in the future.