draft-ietf-ipsecme-hybrid-kem-ikev2-frodo

Post-quantum Hybrid Key Exchange in IKEv2 with FrodoKEM

streamIETF groupipsecme stateactive pages16 rev00 expires2026-09-12 canonicalhttps://datatracker.ietf.org/doc/draft-ietf-ipsecme-hybrid-kem-ikev2-frodo/
FrodoKEM is an unstructured lattice based Key Encapsulation Mechanism (KEM). Compared to ML-KEM, it is considered with more conservative security. This draft specifies how to use FrodoKEM by itself or as an additional key exchange in IKEv2 along with a traditional key exchange. These options enable to negotiate IKE and Child SA keys that are safe against a Cryptographically Relevant Quantum Computer (CRQC).