Hybrid Public Key Encryption (HPKE)

E873495

cryptographic framework public-key encryption scheme

Hybrid Public Key Encryption (HPKE) is a cryptographic framework that combines public-key and symmetric-key techniques to provide flexible, interoperable encryption for modern protocols such as TLS, QUIC, and MLS.

Try in SPARQL Jump to: Surface forms Disambiguation Statements Elicitation Referenced by

All labels observed (2)

Label	Occurrences
Hybrid Public Key Encryption (HPKE) canonical	1
Key Encapsulation Mechanisms	1

How this entity was disambiguated

This entity first appeared as the object of triple T10595204 — resolving that mention is where its identity was fixed. The disambiguator weighed these candidate entities and picked the highlighted one (or “None”, minting a new entity). This is how homonymy is resolved: the same surface form can point to different entities.

NED1 Entity disambiguation (via context triple) gpt-5-mini-2025-08-07

Target entity: Hybrid Public Key Encryption (HPKE)
Context triple: [CFRG, standardized, Hybrid Public Key Encryption (HPKE)]

A. Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for Transport Layer Security (TLS)
"Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for Transport Layer Security (TLS)" is an IETF standard (RFC 7919) that defines secure, standardized finite-field Diffie-Hellman parameter sets for use in TLS to improve cryptographic security and interoperability.
B. Curve25519-based schemes
Curve25519-based schemes are cryptographic protocols and algorithms that use the Curve25519 elliptic curve to provide efficient, high-security public-key operations such as key exchange and digital signatures.
C. Diffie–Hellman key exchange
Diffie–Hellman key exchange is a foundational cryptographic protocol that enables two parties to securely establish a shared secret over an insecure communication channel.
D. XChaCha20-Poly1305 AEAD construction
XChaCha20-Poly1305 AEAD construction is an authenticated encryption scheme that extends ChaCha20-Poly1305 with a longer nonce for improved security and robustness against nonce reuse.
E. XSalsa20-Poly1305
XSalsa20-Poly1305 is an authenticated encryption scheme that combines the XSalsa20 stream cipher with the Poly1305 message authentication code to provide both confidentiality and integrity for messages.
F. None of above. chosen
G. Unsure - the case is ambiguous/there is not enough information to decide.

NED2 Entity disambiguation (via description) gpt-5-mini-2025-08-07

Target entity: Hybrid Public Key Encryption (HPKE)
Target entity description: Hybrid Public Key Encryption (HPKE) is a cryptographic framework that combines public-key and symmetric-key techniques to provide flexible, interoperable encryption for modern protocols such as TLS, QUIC, and MLS.

A. Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for Transport Layer Security (TLS)
"Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for Transport Layer Security (TLS)" is an IETF standard (RFC 7919) that defines secure, standardized finite-field Diffie-Hellman parameter sets for use in TLS to improve cryptographic security and interoperability.
B. Curve25519-based schemes
Curve25519-based schemes are cryptographic protocols and algorithms that use the Curve25519 elliptic curve to provide efficient, high-security public-key operations such as key exchange and digital signatures.
C. Diffie–Hellman key exchange
Diffie–Hellman key exchange is a foundational cryptographic protocol that enables two parties to securely establish a shared secret over an insecure communication channel.
D. XChaCha20-Poly1305 AEAD construction
XChaCha20-Poly1305 AEAD construction is an authenticated encryption scheme that extends ChaCha20-Poly1305 with a longer nonce for improved security and robustness against nonce reuse.
E. XSalsa20-Poly1305
XSalsa20-Poly1305 is an authenticated encryption scheme that combines the XSalsa20 stream cipher with the Poly1305 message authentication code to provide both confidentiality and integrity for messages.
F. None of above. chosen

Statements (50)

Predicate	Object
instanceOf	cryptographic framework ⓘ public-key encryption scheme ⓘ
abbreviation	HPKE ⓘ
basedOn	Diffie-Hellman key exchange ⓘ linked to: Diffie–Hellman key exchange Key Encapsulation Mechanisms ⓘ linked to: Hybrid Public Key Encryption (HPKE)
canUseAEAD	AES-128-GCM ⓘ ChaCha20-Poly1305 ⓘ linked to: AEAD_CHACHA20_POLY1305
canUseKDF	HKDF-SHA256 ⓘ
canUseKEM	DHKE on NIST P-256 ⓘ DHKEM(X25519) ⓘ
component	AEAD cipher ⓘ Authenticated Encryption with Associated Data ⓘ KDF ⓘ KEM private key ⓘ KEM public key ⓘ Key Encapsulation Mechanism ⓘ Key Schedule ⓘ
definedIn	RFC 9180 ⓘ
designGoal	avoid protocol-specific assumptions ⓘ be reusable across protocols ⓘ be simple to implement ⓘ
property	sender can be anonymous or authenticated ⓘ supports export of secret material ⓘ supports multiple AEAD algorithms ⓘ supports multiple KDFs ⓘ supports multiple KEMs ⓘ supports multiple ciphersuites ⓘ supports pre-shared keys ⓘ
purpose	provide authenticated encryption ⓘ provide forward secrecy ⓘ provide hybrid public-key encryption ⓘ provide interoperability for modern protocols ⓘ
securityGoal	IND-CCA2 security for ciphertexts ⓘ confidentiality of application data ⓘ forward secrecy in some modes ⓘ integrity of application data ⓘ
standardizedBy	IETF ⓘ linked to: Internet Engineering Task Force
supports	Messaging Layer Security ⓘ Oblivious HTTP ⓘ QUIC ⓘ TLS ⓘ general-purpose application-layer encryption ⓘ
supportsMode	Authenticated PSK mode ⓘ Authenticated mode ⓘ Base mode ⓘ PSK mode ⓘ
usedIn	Oblivious HTTP deployments ⓘ TLS Encrypted ClientHello experiments ⓘ
uses	public-key cryptography ⓘ symmetric-key cryptography ⓘ