PSA Certified
Crypto API 1.4 PQC Extension

Document number:	AES 0119
Release Quality:	Final
Issue Number:	0
Confidentiality:	Non-confidential
Date of Issue:	17/11/2025

FINAL RELEASE

This is an extension to the PSA Certified Crypto API [PSA-CRYPT] specification.

This is a FINAL release: the proposed changes and interfaces are complete and finalized, and suitable for product development.

Abstract

This document is part of the PSA Certified API specifications. It defines an extension to the Crypto API, to introduce support for Post-Quantum Cryptography (PQC) algorithms.

Contents

• About this document
  • Release information
  • License
  • References
  • Terms and abbreviations
  • Potential for change
  • Conventions
  • Current status and anticipated changes
  • Feedback

• 1 Introduction
  • 1.1 About Platform Security Architecture
  • 1.2 About the Crypto API PQC Extension
  • 1.3 Objectives for the PQC Extension
    • 1.3.1 Background
    • 1.3.2 Selection of algorithms
• 2 API Reference
  • 2.1 Additional Hash algorithms
    • 2.1.1 SHA-256-based hash algorithms
    • 2.1.2 SHAKE-based hash algorithms
  • 2.2 Module Lattice-based key encapsulation
    • 2.2.1 Module Lattice-based key-encapsulation keys
    • 2.2.2 Module Lattice-based key-encapsulation algorithm
  • 2.3 Module Lattice-based signatures
    • 2.3.1 Module Lattice-based signature keys
    • 2.3.2 Module Lattice-based signature algorithms
  • 2.4 Stateless Hash-based signatures
    • 2.4.1 Stateless Hash-based signature keys
    • 2.4.2 Stateless Hash-based signature algorithms
  • 2.5 Leighton-Micali Signatures
    • 2.5.1 Leighton-Micali Signature keys
    • 2.5.2 Leighton-Micali Signature algorithms
  • 2.6 eXtended Merkle Signature Scheme
    • 2.6.1 XMSS and XMSS^MT keys
    • 2.6.2 XMSS and XMSS^MT algorithms

• A Example header file
  • A.1 psa/crypto.h
• B Algorithm and key type encoding
  • B.1 Algorithm encoding
    • B.1.1 Hash algorithm encoding
    • B.1.2 Asymmetric signature algorithm encoding
    • B.1.3 Key-encapsulation algorithm encoding
  • B.2 Key encoding
    • B.2.1 Non-parameterized asymmetric key encoding
    • B.2.2 SLH-DSA key encoding
• C Example macro implementations
  • C.1 Algorithm macros
    • C.1.1 Updated macros
    • C.1.2 New macros
  • C.2 Key type macros
• D Document change history
  • D.1 Changes between Beta 3 and Final 0
  • D.2 Changes between Beta 2 and Beta 3
  • D.3 Changes between Beta 1 and Beta 2
  • D.4 Changes between Beta 0 and Beta 1
  • D.5 Beta release