[CFRG] Re: RG Last Call on draft-irtf-cfrg-hybrid-kems-12 and draft-irtf-cfrg-concrete-hybrid-kems-04
Richard Barnes <rlb@ipv.sx> Sat, 11 July 2026 02:42 UTC
Return-Path: <rlb@ipv.sx>
X-Original-To: cfrg@mail2.ietf.org
Delivered-To: cfrg@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 0020E114E7BEA for <cfrg@mail2.ietf.org>; Fri, 10 Jul 2026 19:42:12 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1783737732; bh=A3s92OCzhpBmTozwfydj48bze4hoEz2Jkl+GUJXzCZs=; h=References:In-Reply-To:From:Date:Subject:To:Cc; b=Yrn2CQNg+P73YrKNSnams82SG7UK+qJO2dz40dJnu5aNvfbx75SwEr/u61rvo6I5C 2emJRtSmwmGfen/72jgUmDX+XVWOOkZDI6w35tx/NEGZ1/f6cs8FSLhH+MXD8+pigo tKWW9J0xKOFcEq6yTHi7ZHVDqREFmhs3txbADu2E=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -1.897
X-Spam-Level:
X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=ipv-sx.20251104.gappssmtp.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6g57oKXPeiEw for <cfrg@mail2.ietf.org>; Fri, 10 Jul 2026 19:42:11 -0700 (PDT)
Received: from mail-oa1-x2b.google.com (mail-oa1-x2b.google.com [IPv6:2001:4860:4864:20::2b]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 72F21114E7BDE for <cfrg@irtf.org>; Fri, 10 Jul 2026 19:42:11 -0700 (PDT)
Received: by mail-oa1-x2b.google.com with SMTP id 586e51a60fabf-44cd237446cso856626fac.1 for <cfrg@irtf.org>; Fri, 10 Jul 2026 19:42:11 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1783737730; cv=none; d=google.com; s=arc-20260327; b=EpYP9rtcebcrGnD/ew1oDfz8Rc2ryOnvxM28EsVjPmgtnWldGm8ePJOqj79648t2iM ac6hNmlqZ8REcjFMBrzwhGVSOH9Y1GBocvtydYk3skJlXQGQaoBRkGzLNlW8Qc35X6KO 2gp3dxdreMVNkdKqM8w7xUaiNqivpF53LirpzoEtqbcWR8orXiE7mNV5M3Z1x511ljgD uVKzun3XfZPHlWlGZ/XOslQ9PbDJe789VnxkjEIG0dvLxWA3Ui7BjZEN2k33XZG+C+Fg cMzJHA9HBQEWOIts7dOEHMqwFGkUcyzxdmOHmp9FviZ5rc5II3faEijrGTHmB2+MoZOC tnFA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:dkim-signature; bh=1o8TZph/BbDZc7Obvg2BxgKbnxjbCEXGOJE34PpEtlQ=; fh=j+jjzGUV9l0bL3LtRo90BrvhrlZJthW9rutPfYKaLyU=; b=rY2++O9K3lDebXh7+RNBHM0KFmu8yidqhHFEUb931A9mlcyCb2F6yT94/3bMlC6oFy iKUPqOvvXFzIsqOyDfrahMMhoI3vaOn31MarLMRLR/t3/9e4xB66PqFQ3duzr9L8hy2W Y+vJdKcY8cRH28Ta1+O3qPFTgEEGD2IBTJy4t7G0G5fHp/3bmbBLGcdCa7RFb1J9JDMW irbMB0bAjg2e+YouC5n83r1MuJNeJ5PPx9ovVcCyKxzoVp+iYw/DgxkrM+M2b4a5+oA7 +1gz/df3YI2uIJSIwD7CW++qbtqshLcyEZnQDQfl2si70g1/82BN8CbSYZ/aHAvHKzk6 aaYg==; darn=irtf.org
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipv-sx.20251104.gappssmtp.com; s=20251104; t=1783737730; x=1784342530; darn=irtf.org; h=content-type:cc:to:subject:message-id:date:from:in-reply-to :references:mime-version:from:to:cc:subject:date:message-id:reply-to :content-type; bh=1o8TZph/BbDZc7Obvg2BxgKbnxjbCEXGOJE34PpEtlQ=; b=mtfRcP1rNgfV33kLOeJvMC/To1YdF6Y7CToelY9htJx5Zi6hf+FXJGuLQ+OPN6xTkP geiI08h9WNmXpPUEtr6dbmcUo5dQnhSm0WD8SU44UI99PEmwpoA7LREVFOwimK0Vixxq Nca4RysMgFhHW27bS1nVZ7KpAb5dZM5M0FLxONME8EDFxiiRkp86P1XLK2oe2TXc8wTq o8FMWBWnOjos6PbdBaSyy1yavpLOXcShgvasi+Tyu90QNQ8p6Twf7zLaK2aXREeaoIzt VORsq4MhMckdUB3DKlPB/7yxhGkX31wKa9D6AGkO31QXsjUrkhRkMIGcEWFLSwwvjlh1 DrgA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1783737730; x=1784342530; h=content-type:cc:to:subject:message-id:date:from:in-reply-to :references:mime-version:x-gm-gg:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to:content-type; bh=1o8TZph/BbDZc7Obvg2BxgKbnxjbCEXGOJE34PpEtlQ=; b=n40GM5kJsORrJBCawj7eLlkXczxzEU+gaYDBaJirAkhpKTCehPUT5OJwSww0LozUqU NLZEfIyhPraTn+8MI7rnfqO2iKeHF1QZImmeRfgvDWGKKkwiwhvNS8WmJM5dXNweCVg/ 5o3XeJ7DirC5ZYTdVOzf4jSMujQB3zjV3vR63ZWgVU+94Ybn0ADjuvw3NnS4BOj99/of y7OnVMjQdjgEPlPKNXM3gNtqPiGNhIbPtmFpM1EFX3UK8DzL32/5Miya7dIqi6aUSHbU U7ml84N/QbChn6YTASqxLdGxKOoN61NAsGC29xE2C7UNI9MmpHF8H4Tv46F7lmrRLaly ZWcw==
X-Forwarded-Encrypted: i=1; AFNElJ8aScF8PI54uKbP45qg0aaUInxJs2OTbmEGhiRLF6DHVsMtSrOtQqLZWlqhvPzvzBMB5lPk@irtf.org
X-Gm-Message-State: AOJu0YxKHsg6UHr79dUhUtfp5kt8y4D/6jl33+vxanbOxT0T0bbfAjyK ac6cHzOHbL+zS6tmb81Bo1UIYGAvkNM5K+Cy/rsghB2vn9yMqUwPzWhAcPrLuGLjVwqwXFJfySA 5Z4aDHm/PAVBGRx6qgi7y05HA+u5kpiITlbSjZCxWafxd/Y9Zbe5mHWu1Ow==
X-Gm-Gg: AfdE7clYivjZNvuuRzaGE2SzLnsZPK4FfDyDBlc0jGqz/szglndTqskgsSpyubANAzm LLbqqb7nEpnkheRitHU3n3D9p1OfYMMEH7bL+Tv+M70P89lg6iaZKIOrO0yafoyQQmoMUTo1Uf4 nqQQm/AK7Zh82Nz2B1Tx1oMDdsuUN43SZ0cgjs2B1GJAgBpQcnqBXK9LR8vpxWYtgzH0r9Kxvnt WB68ZTOnQh0eiNne+v3z4BXxB+49N68ByuyJ68fyCWG/+iTyVDYExLNru2QJJmEolESY62J248W UcPH5l4=
X-Received: by 2002:a05:6870:a11a:b0:448:558c:d8c5 with SMTP id 586e51a60fabf-451f147dc8dmr674110fac.35.1783737730056; Fri, 10 Jul 2026 19:42:10 -0700 (PDT)
MIME-Version: 1.0
References: <CAOjisRyRbkNif7mGD5TcoEcUsmbfeKE_wVHq+JH8VMySLcC47g@mail.gmail.com> <69214A81-16EB-4A77-9179-E21E06AD23A5@vigilsec.com> <CAL02cgRZVMjkrPKe4N71kArNa3FedbCXpTe4YfA_UZ0d9navPw@mail.gmail.com>
In-Reply-To: <CAL02cgRZVMjkrPKe4N71kArNa3FedbCXpTe4YfA_UZ0d9navPw@mail.gmail.com>
From: Richard Barnes <rlb@ipv.sx>
Date: Fri, 10 Jul 2026 16:41:58 -1000
X-Gm-Features: AUfX_mzA6Lbe26gZJG-lQdSrdTFStzHFnG5p5uYDmxrpDKmgK_DXtZlDsL_DWro
Message-ID: <CAL02cgTDa_AXnbx9XOcNkPcnvgLVghrjsPrq3F0ZNP88rJGO4A@mail.gmail.com>
To: Russ Housley <housley@vigilsec.com>
Content-Type: multipart/alternative; boundary="000000000000c5d42606564ccdd3"
Message-ID-Hash: YXNOWRU3LVXFLNKE5GNKOM4LEUSTYNKO
X-Message-ID-Hash: YXNOWRU3LVXFLNKE5GNKOM4LEUSTYNKO
X-MailFrom: rlb@ipv.sx
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-cfrg.irtf.org-0; header-match-cfrg.irtf.org-1; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: Nick Sullivan <nicholas.sullivan@gmail.com>, CFRG <cfrg@irtf.org>, "cfrg-chairs@ietf.org" <cfrg-chairs@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [CFRG] Re: RG Last Call on draft-irtf-cfrg-hybrid-kems-12 and draft-irtf-cfrg-concrete-hybrid-kems-04
List-Id: Crypto Forum Research Group <cfrg.irtf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/cfrg/BU41Ejiqjcl3vxipSYLscrpT_7w>
List-Archive: <https://mailarchive.ietf.org/arch/browse/cfrg>
List-Help: <mailto:cfrg-request@irtf.org?subject=help>
List-Owner: <mailto:cfrg-owner@irtf.org>
List-Post: <mailto:cfrg@irtf.org>
List-Subscribe: <mailto:cfrg-join@irtf.org>
List-Unsubscribe: <mailto:cfrg-leave@irtf.org>
Also: This question was explicitly put to the RG in a virtual interim last September, and the feedback was to keep the registry: https://youtu.be/6zeqlZjrHRE?t=4442 On Fri, Jul 10, 2026 at 3:12 PM Richard Barnes <rlb@ipv.sx> wrote: > Hi Russ, > > I respectfully disagree. The construction requires a set of suffix-free > labels for security, and the best technology we have to create such a set > is an IANA registry. Between draft-irtf-cfrg-concrete-hybrid-kems > and draft-ietf-lamps-pq-composite-kem, there are more than a dozen variants > currently being defined, so the need is already here. > > BTW, the draft-ietf-lamps-pq-composite-kem author team should update their > IANA considerations to register their labels. > > --Richard > > On Wed, Jul 8, 2026 at 4:47 AM Russ Housley <housley@vigilsec.com> wrote: > >> I do not think the IANA registry is needed. At this point, there seems to >> be a lot of acceptance of draft-ietf-lamps-pq-composite-kem. Thus, It >> seems unlikely that more combinations will be specified that require new >> labels to be registered. Perhaps a registry can be set up in the future >> when new labels are actually needed. >> >> Russ >> >> On Jul 8, 2026, at 6:24 AM, Nick Sullivan <nicholas.sullivan@gmail.com> >> wrote: >> >> Dear CFRG, >> >> This message starts a two-week RG Last Call on two related documents. The >> last >> call ends on Wednesday July 22, 2026: >> >> Hybrid PQ/T Key Encapsulation Mechanisms (generic constructions) >> draft-irtf-cfrg-hybrid-kems-12 >> https://www.ietf.org/archive/id/draft-irtf-cfrg-hybrid-kems-12.html >> >> Concrete Hybrid PQ/T Key Encapsulation Mechanisms >> draft-irtf-cfrg-concrete-hybrid-kems-04 >> >> https://www.ietf.org/archive/id/draft-irtf-cfrg-concrete-hybrid-kems-04.html >> >> Both are intended as Informational RFCs. Please reply on-list with your >> position >> on each document: ready to publish as-is, ready with specific changes, or >> not >> ready, together with the technical reasons. This feedback will help the >> chairs >> judge whether the documents are ready for IRSG review and publication. >> >> The scope and approach of this work were settled when the group adopted >> it well >> over a year ago, and both drafts have developed on the list in the open >> since >> then. This last call is about whether the text is technically correct and >> complete, so please ground any objection in a specific problem with the >> documents. Detailed comments are best filed as issues on the repositories >> (https://github.com/cfrg/draft-irtf-cfrg-hybrid-kems, >> https://github.com/cfrg/draft-irtf-cfrg-concrete-hybrid-kems) positions >> belong >> here on the list. >> >> Both documents were reviewed by the CFRG Crypto Review Panel ahead of >> this last >> call. The reviews are on the CFRG and crypto-panel lists: >> >> Thomas Pornin (NCC Group), 3 June 2026, reviewed the generic framework >> with a >> focus on the constructions and reductions, and concluded that it >> describes a >> secure construction, with editorial and technical comments now >> reflected in -12. >> >> Virendra Kumar (Qualcomm), 8 June 2026, reviewed the generic framework >> for >> clarity, with notational comments now reflected in -12. >> >> Russ Housley (Vigil Security), 2 June 2026, reviewed both drafts and >> found the >> constructions and instantiations as specified. >> >> The current revisions incorporate changes proposed by the panel's >> comments. >> >> Thank you, >> Nick, for the CFRG chairs >> _______________________________________________ >> CFRG mailing list -- cfrg@irtf.org >> To unsubscribe send an email to cfrg-leave@irtf.org >> >> >> _______________________________________________ >> CFRG mailing list -- cfrg@irtf.org >> To unsubscribe send an email to cfrg-leave@irtf.org >> >
- [CFRG] RG Last Call on draft-irtf-cfrg-hybrid-kem… Nick Sullivan
- [CFRG] Re: RG Last Call on draft-irtf-cfrg-hybrid… Thom Wiggers
- [CFRG] Re: RG Last Call on draft-irtf-cfrg-hybrid… Russ Housley
- [CFRG] Re: RG Last Call on draft-irtf-cfrg-hybrid… Richard Barnes
- [CFRG] Re: RG Last Call on draft-irtf-cfrg-hybrid… Richard Barnes
- [CFRG] Re: RG Last Call on draft-irtf-cfrg-hybrid… Russ Housley
- [CFRG] Re: RG Last Call on draft-irtf-cfrg-hybrid… Russ Housley
- [CFRG] Re: RG Last Call on draft-irtf-cfrg-hybrid… D. J. Bernstein
- [CFRG] Re: RG Last Call on draft-irtf-cfrg-hybrid… D. J. Bernstein
- [CFRG] Re: RG Last Call on draft-irtf-cfrg-hybrid… Ilari Liusvaara
- [CFRG] Re: RG Last Call on draft-irtf-cfrg-hybrid… D. J. Bernstein
- [CFRG] Re: RG Last Call on draft-irtf-cfrg-hybrid… Simon Josefsson
- [CFRG] Re: RG Last Call on draft-irtf-cfrg-hybrid… Soatok Dreamseeker
- [CFRG] Re: RG Last Call on draft-irtf-cfrg-hybrid… Richard Barnes
- [CFRG] Re: RG Last Call on draft-irtf-cfrg-hybrid… Soatok Dreamseeker
- [CFRG] Re: RG Last Call on draft-irtf-cfrg-hybrid… D. J. Bernstein
- [CFRG] Re: RG Last Call on draft-irtf-cfrg-hybrid… Soatok Dreamseeker
- [CFRG] Re: RG Last Call on draft-irtf-cfrg-hybrid… D. J. Bernstein
- [CFRG] Re: RG Last Call on draft-irtf-cfrg-hybrid… D. J. Bernstein
- [CFRG] Re: RG Last Call on draft-irtf-cfrg-hybrid… Simon Josefsson
- [CFRG] Re: RG Last Call on draft-irtf-cfrg-hybrid… Richard Barnes
- [CFRG] Re: RG Last Call on draft-irtf-cfrg-hybrid… D. J. Bernstein
- [CFRG] Re: RG Last Call on draft-irtf-cfrg-hybrid… Muhammad Usama Sardar
- [CFRG] Re: RG Last Call on draft-irtf-cfrg-hybrid… Martin Schanzenbach
- [CFRG] Re: RG Last Call on draft-irtf-cfrg-hybrid… Muhammad Usama Sardar
- [CFRG] Re: RG Last Call on draft-irtf-cfrg-hybrid… D. J. Bernstein
- [CFRG] Re: RG Last Call on draft-irtf-cfrg-hybrid… Muhammad Usama Sardar
- [CFRG] Re: RG Last Call on draft-irtf-cfrg-hybrid… D. J. Bernstein
- [CFRG] Re: RG Last Call on draft-irtf-cfrg-hybrid… Muhammad Usama Sardar
- [CFRG] Re: RG Last Call on draft-irtf-cfrg-hybrid… D. J. Bernstein
- [CFRG] Re: RG Last Call on draft-irtf-cfrg-hybrid… Peter Gutmann
- [CFRG] Re: RG Last Call on draft-irtf-cfrg-hybrid… Muhammad Usama Sardar
- [CFRG] Re: RG Last Call on draft-irtf-cfrg-hybrid… Salz, Rich
- [CFRG] Re: RG Last Call on draft-irtf-cfrg-hybrid… Peter Gutmann
- [CFRG] Re: RG Last Call on draft-irtf-cfrg-hybrid… Ilari Liusvaara
- [CFRG] Re: RG Last Call on draft-irtf-cfrg-hybrid… Neil Madden
- [CFRG] Re: RG Last Call on draft-irtf-cfrg-hybrid… John Mattsson
- [CFRG] Re: RG Last Call on draft-irtf-cfrg-hybrid… Ilari Liusvaara
- [CFRG] Re: RG Last Call on draft-irtf-cfrg-hybrid… Wang Guilin
- [CFRG] Re: RG Last Call on draft-irtf-cfrg-hybrid… Neil Madden
- [CFRG] Re: RG Last Call on draft-irtf-cfrg-hybrid… D. J. Bernstein
- [CFRG] Re: RG Last Call on draft-irtf-cfrg-hybrid… Deirdre Connolly
- [CFRG] Re: RG Last Call on draft-irtf-cfrg-hybrid… Wang Guilin
- [CFRG] Re: RG Last Call on draft-irtf-cfrg-hybrid… Deirdre Connolly
- [CFRG] Re: RG Last Call on draft-irtf-cfrg-hybrid… Deirdre Connolly
- [CFRG] Re: RG Last Call on draft-irtf-cfrg-hybrid… Deirdre Connolly
- [CFRG] Re: RG Last Call on draft-irtf-cfrg-hybrid… Deirdre Connolly
- [CFRG] Re: RG Last Call on draft-irtf-cfrg-hybrid… Daniel Van Geest
- [CFRG] Re: RG Last Call on draft-irtf-cfrg-hybrid… Rohan Mahy
- [CFRG] Re: RG Last Call on draft-irtf-cfrg-hybrid… Douglas Stebila