Douglas Stebila

Post-quantum/traditional hybrid key exchange with the Module-Lattice-Based Key-Encapsulation Mechanism for use in SSH

Abstract

This document defines Post-Quantum Traditional (PQ/T) Hybrid key exchange methods based on the quantum-resistant Module-Lattice-Based Key-Encapsulation Mechanism (ML-KEM) standard and traditional Elliptic-Curve Diffie-Hellman (ECDH) key exchange schemes. These methods are defined for use in the Secure Shell (SSH) transport layer protocol.

Keywords: key exchange, Secure Shell (SSH), post-quantum cryptography

Reference

Panos Kampanakis, Douglas Stebila, Torben Hansen. Post-quantum/traditional hybrid key exchange with the Module-Lattice-Based Key-Encapsulation Mechanism for use in SSH. RFC 10042. Internet Engineering Task Force, August 2026. © IETF Trust and the authors.

Download

BibTeX

@misc{RFC10042,
 	Author = {Panos Kampanakis and Douglas Stebila and Torben Hansen},
 	Howpublished = {\url{https://www.rfc-editor.org/rfc/rfc10042.txt}},
 	Month = {August},
 	Note = {RFC 10042},
 	Title = {Post-quantum/traditional hybrid key exchange with the {Module-Lattice-Based Key-Encapsulation Mechanism} for use in {SSH}},
 	Year = {2026}
 }