Ballot SMC013: Enable PQC Algorithms for S/MIME

Ballot outcome

• Ballot SMC013: Enable PQC Algorithms for S/MIME was adopted as of August 22, 2025.
• Voting results state the ballot PASSED.
• Bylaws requirements were MET, including:
  • By-law 2.3(6): two-thirds or more of votes cast in the Certificate Issuer category were in favour.
  • By-law 2.3(6): at least fifty percent plus one of votes cast in the Certificate Consumer category were in favour.
  • At least one voting member in each category voted in favour.
  • By-law 2.3(7): quorum was 10 and the requirement was MET.
• Intellectual Property Review (IPR) period completed with no IPR Exclusion Notices filed.

What the ballot changes

• Introduces specifications for two post-quantum cryptography (PQC) algorithms standardized by NIST for use in the S/MIME Baseline Requirements:
  • ML-DSA (Module-Lattice-Based Digital Signature Algorithm)
  • ML-KEM (Module-Lattice-Based Key-Encapsulation Mechanism)
• Specifies single-key/non-hybrid PQC certificates that do not rely upon pre-quantum algorithms.
• Intended to enable experimentation by Certificate Issuers with PQC certificates, noting that additional requirements on the use of PQC may be imposed by Root programs.
• The ballot modifies the S/MIME Baseline Requirements based on Version 1.0.10.

Key technical requirements described in the evidence

• For ML-DSA keys, the CA SHALL use one of the following parameter sets:
  • ML-DSA-44 (OID: 2.16.840.1.101.3.4.3.17)
  • ML-DSA-65 (OID: 2.16.840.1.101.3.4.3.18)
  • ML-DSA-87 (OID: 2.16.840.1.101.3.4.3.19)
• For ML-KEM keys, the CA SHALL use one of the following parameter sets:
  • ML-KEM-512 (OID: 2.16.840.1.101.3.4.4.1)
  • ML-KEM-768 (OID: 2.16.840.1.101.3.4.4.2)
  • ML-KEM-1024 (OID: 2.16.840.1.101.3.4.4.3)
• The evidence also includes algorithm identifier and encoding requirements for ML-DSA and ML-KEM (including that parameters are absent for ML-DSA and ML-KEM keys, and that specific AlgorithmIdentifier encodings are byte-for-byte identical to provided hex values).

Timeline (as stated on the ballot page)

• Discussion (at least 7 days): July 2, 2025 18:00:00 UTC to July 11, 2025 18:00:00 UTC.
• Voting for Approval: July 14, 2025 17:00:00 UTC to July 21, 2025 17:00:00 UTC.
• IPR Review (30 Days): Start of Review Period 2025-07-21 20:00:00 UTC; End of Review Period 2025-08-20 20:00:00 UTC.
• The ballot is adopted as of August 22, 2025.