PSA Certified
Crypto API 1.3 PQC Extension

Document number:	AES 0119
Release Quality:	Beta
Issue Number:	2
Confidentiality:	Non-confidential
Date of Issue:	29/07/2025

BETA RELEASE

This is a proposed update to the PSA Certified Crypto API [PSA-CRYPT] specification.

This is a BETA release in order to enable wider review and feedback on the changes proposed to be included in a future version of the specification.

At this quality level, the proposed changes and interfaces are complete, and suitable for initial product development. However, the specification is still subject to change.

Abstract

This document is part of the PSA Certified API specifications. It defines an extension to the Crypto API, to introduce support for Post-Quantum Cryptography (PQC) algorithms.

Contents

• About this document
  • Release information
  • License
  • References
  • Terms and abbreviations
  • Conventions
  • Current status and anticipated changes
  • Feedback

• 1 Introduction
  • 1.1 About Platform Security Architecture
  • 1.2 About the Crypto API PQC Extension
  • 1.3 Objectives for the PQC Extension
    • 1.3.1 Background
    • 1.3.2 Selection of algorithms
• 2 API Reference
  • 2.1 Additional Hash algorithms
    • 2.1.1 SHA-256-based hash algorithms
    • 2.1.2 SHAKE-based hash algorithms
  • 2.2 Module Lattice-based key encapsulation
    • 2.2.1 Module Lattice-based key-encapsulation keys
    • 2.2.2 Module Lattice-based key-encapsulation algorithm
  • 2.3 Module Lattice-based signatures
    • 2.3.1 Module Lattice-based signature keys
    • 2.3.2 Module Lattice-based signature algorithms
  • 2.4 Stateless Hash-based signatures
    • 2.4.1 Stateless Hash-based signature keys
    • 2.4.2 Stateless Hash-based signature algorithms
  • 2.5 Leighton-Micali Signatures
    • 2.5.1 Leighton-Micali Signature keys
    • 2.5.2 Leighton-Micali Signature algorithms
  • 2.6 eXtended Merkle Signature Scheme
    • 2.6.1 XMSS and XMSS^MT keys
    • 2.6.2 XMSS and XMSS^MT algorithms

• A Example header file
  • A.1 psa/crypto.h
• B Algorithm and key type encoding
  • B.1 Algorithm encoding
    • B.1.1 Hash algorithm encoding
    • B.1.2 Asymmetric signature algorithm encoding
    • B.1.3 Key-encapsulation algorithm encoding
  • B.2 Key encoding
    • B.2.1 Non-parameterized asymmetric key encoding
    • B.2.2 SLH-DSA key encoding
• C Example macro implementations
  • C.1 Algorithm macros
    • C.1.1 Updated macros
    • C.1.2 New macros
  • C.2 Key type macros
• D Changes to the API
  • D.1 Document change history
    • D.1.1 Changes between Beta 1 and Beta 2
    • D.1.2 Changes between Beta 0 and Beta 1
    • D.1.3 Beta release