Back to matrix

K01-LT: No

Rationale

Selected BPSec uses pre-provisioned final-pair symmetric keys. RFC 9173 section 6.1 delegates key management outside the security contexts; no end-to-end PQ KEM or hybrid establishment is selected. K01 requires that establishment mechanism. This No does not claim quantum vulnerability of properly provisioned AES keys or remove the F06 confidentiality positive. Hop-local TLS is not final-pair key establishment.

Assessment method

Specification/source/dependency analysis; no new runtime execution

Source context

Primary documentation and explicitly selected composition; documentary review 2026-10-15

Public sources