An ML-KEM key cannot sign, so it cannot sign its own certificate request; CMS encrypts to such keys through KEMRecipientInfo (RFC 9629). In TLS, ML-KEM appears as a key exchange group, not in certificates.
2.16.840.1.101.3.4.4.2
id-alg-ml-kem-768
id-alg-ml-kem-768: the OID of ML-KEM-768 (FIPS 203) public keys in X.509.
2.16.840.1.101.3.4.4.2 identifies id-alg-ml-kem-768, a key encapsulation mechanism. DER: 0609608648016503040402.
- Dotted notation
2.16.840.1.101.3.4.4.2- DER encoding
0609608648016503040402- Category
- a key encapsulation mechanism
- Also known as
ML-KEM-768- OpenSSL short name
id-alg-ml-kem-768- OpenSSL long name
ML-KEM-768- Listed by
- the ecdsa.com catalog