Hybrid Public Key Encryption

Metadata

Publisher: IETF
Doc Type: Informational
Pages: 107
Abstract: This document describes a scheme for hybrid public key encryption (HPKE). This scheme provides a variant of public key encryption of arbitrary-sized plaintexts for a recipient public key. It also includes three authenticated variants, including one that authenticates possession of a pre-shared key and two optional ones that authenticate possession of a key encapsulation mechanism (KEM) private key. HPKE works for any combination of an asymmetric KEM, key derivation function (KDF), and authenticated encryption with additional data (AEAD) encryption function. Some authenticated variants may not be supported by all KEMs. We provide instantiations of the scheme using widely used and efficient primitives, such as Elliptic Curve Diffie-Hellman (ECDH) key agreement, HMAC-based key derivation function (HKDF), and SHA2. This document is a product of the Crypto Forum Research Group (CFRG) in the IRTF.
Publication Date: 2022-02-01
Status Note: Informational
DOI: 10.17487/RFC9180
Link: https://doi.org/10.17487/RFC9180
Author(s): Richard Barnes
Karthikeyan Bhargavan
Benjamin Lipp
Christopher A. Wood
Keyword(s): Public Key Encryption, KEM, Post-quantum Cryptography

Latest version of IETF RFC 9180

Document Versions — IETF RFC 9180

▶ IETF RFC 9180 (2022-02-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

IETF RFC 2119 [Active*]
IETF RFC 5116 [Active*]
IETF RFC 8017 [Active*]
IETF RFC 8126 [Active*]
IETF RFC 8174 [Active*]

Bibliographic Reference(s)

10.1007-3-540-44586-2_8.pdf — GAP EXTERNAL
10.1007-978-3-030-26948-7_9 — NAN EXTERNAL
10.1007-978-3-540-89411-7 — SigncryptionDZ10 EXTERNAL
10.1007-BF00124891 — DOW92 EXTERNAL
10.1007-BFb0024447 — BJM97 EXTERNAL
ANSI.X9.63 — ANSI EXTERNAL
CACE.NaCl.201207 — NaCl EXTERNAL
IEEE.STD1363A.2004 — P1363A EXTERNAL
IETF.draft-ietf-mls-protocol-12 — I-D.ietf-mls-protocol EXTERNAL
IETF.draft-ietf-tls-esni-14 — TLS-ECH EXTERNAL
IETF.draft-irtf-cfrg-hpke — TestVectors EXTERNAL
ISO.18033-2.2006 — ISO18033 EXTERNAL
NIST FIPS 186-4 [Active]
NIST.SP.800-38D — GCM EXTERNAL
NIST.SP.800-56Ar3 — KEYAGREEMENT EXTERNAL
Lipp, B., "An Analysis of Hybrid Public Key Encryption", February 2020, <https://eprint.iacr.org/2020/243>. EXTERNAL
Alwen, J., Blanchet, B., Hauck, E., Kiltz, E., Lipp, B., and D. Riepel, "Analysing the HPKE Standard", November 2020, <https://eprint.iacr.org/2020/1499>. EXTERNAL
Gayoso Martinez, V., Hernandez Alvarez, F., Hernandez Encinas, L., and C. Sanchez Avila, "A comparison of the standardized versions of ECIES", October 2010, <https://ieeexplore.ieee.org/abstract/document/5604194/>. EXTERNAL
Herranz, J., Hofheinz, D., and E. Kiltz, "Some (in)sufficient conditions for secure hybrid encryption.", August 2006, <https://eprint.iacr.org/2006/265>. EXTERNAL
Bellare, M., Hofheinz, D., and E. Kiltz, "Subtleties in the Definition of IND-CCA: When and How Should Challenge-Decryption be Disallowed?", August 2009, <https://eprint.iacr.org/2009/418>. EXTERNAL
Len, J., Grubbs, P., and T. Ristenpart, "Partitioning Oracle Attacks". EXTERNAL
Cramer, R. and V. Shoup, "Design and Analysis of Practical Public-Key Encryption Schemes Secure against Adaptive Chosen Ciphertext Attack", December 2001, <https://eprint.iacr.org/2001/108>. EXTERNAL
IETF RFC 1421 [Active*]
IETF RFC 5869 [Active*]
IETF RFC 7748 [Active*]
IETF RFC 8439 [Active*]
IETF RFC 8446 [Superseded*]
IETF RFC 8467 [Active*]
IETF RFC 8696 [Active*]
IETF RFC 8937 [Active*]
SECG.SEC1.v2.2009-05 — SEC1 EXTERNAL

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC9180.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 9180, Hybrid Public Key Encryption. Available at https://doi.org/10.17487/RFC9180

Snippet:

IETF RFC 9180, Hybrid Public Key Encryption. Available at https://doi.org/10.17487/RFC9180

HTML (ISO 690 compliant)

Preview:

IETF RFC 9180, Hybrid Public Key Encryption. Available at https://doi.org/10.17487/RFC9180

Snippet:

<span class="citation"><cite>IETF RFC 9180</cite>, Hybrid Public Key Encryption. Available at <a href="https://doi.org/10.17487/RFC9180" target="_blank" rel="noopener">https://doi.org/10.17487/RFC9180</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 9180, Hybrid Public Key Encryption
doi: 10.17487/RFC9180
url: https://doi.org/10.17487/RFC9180

Snippet:

<li>
<cite id="bib-rfc9180">IETF RFC 9180</cite>, Hybrid Public Key Encryption
<span class="doi">10.17487/RFC9180</span>
</li>

Referenced By

IETF RFC 9230 [Active*]
IETF RFC 9794 [Active*]
IETF RFC 9849 [Active*]
IETF RFC 9954 [Active*]
IETF RFC 9958 [Active*]