Was wondering the same. Some more motivation can be found in this[1] referenced article. From what I can gather it seems to me this work tries to unify and gen

Was wondering the same. Some more motivation can be found in this[1] referenced article. From what I can gather it seems to me this work tries to unify and generalize several existing hybrid public key encryption standards, which all apparently have various issues, mostly stemming from using outdated primitives and no extensibility. So this work tries to introduce extesibility in a secure way, while also ensuring interoperability. The motivation seems to be able to use HPKE in IETF standards. Another benefit over previous standards seems to be the addition of authenticated modes, where the sender authenticates itself to the recipient. [1]: https://eprint.iacr.org/2020/243 https://eprint.iacr.org/2020/243