[CFRG] New labels in draft-irtf-cfrg-concrete-hybrid-kems-01

Mike Ounsworth <ounsworth+ietf@gmail.com> Wed, 29 October 2025 17:35 UTC

Return-Path: <ounsworth@gmail.com>
X-Original-To: cfrg@mail2.ietf.org
Delivered-To: cfrg@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 0F7247E32A0B for <cfrg@mail2.ietf.org>; Wed, 29 Oct 2025 10:35:19 -0700 (PDT)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SCDEq0quY9QM for <cfrg@mail2.ietf.org>; Wed, 29 Oct 2025 10:35:18 -0700 (PDT)
Received: from mail-ed1-x535.google.com (mail-ed1-x535.google.com [IPv6:2a00:1450:4864:20::535]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id B61F17E325F8 for <cfrg@irtf.org>; Wed, 29 Oct 2025 10:34:59 -0700 (PDT)
Received: by mail-ed1-x535.google.com with SMTP id 4fb4d7f45d1cf-63bdfd73e6eso2404005a12.0 for <cfrg@irtf.org>; Wed, 29 Oct 2025 10:34:59 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1761759292; x=1762364092; darn=irtf.org; h=to:subject:message-id:date:from:mime-version:from:to:cc:subject :date:message-id:reply-to; bh=gdc43jSQQKk0/BvpD38GbpFsPDclxAwecmBKQ2ICy60=; b=PUhT5dgo/5OIrX75Jr8cm9rLv50CbaJSmfRKajFQUjXHWgRgBhXbFoHMCeW3sqyIy4 hehEmVV5wNalTpu9yEMl3ZQZrtwkgfd6wv1uzgspbHj1JM32r7ifxV2KbihqROIfVr5g 8r31O6Mou5Kf5HzyUd12vRTcLxpVsKJ/dKoouPY79FqMjioWcvPzKBKG+oIxoQd3UnpE g2sY3iuQMnHZK+pbzoaQ27FOgg3ei4JgSY8WnU/iG0g1wQJC0jr3ZdNJ6lP0AkYI3Lzg zdgaf6W4KXAZNXccIxNXo5PAKlRBRRcJ0BWPioWGcsM27xHZ5YLS90za1iYA28fRYwbR 0cEQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1761759292; x=1762364092; h=to:subject:message-id:date:from:mime-version:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=gdc43jSQQKk0/BvpD38GbpFsPDclxAwecmBKQ2ICy60=; b=fUDM72A/LsfLJJxHT5qzEzDscax0RwRxSOYSH7oEqpIHzVYdaLodG3w+2kioHzRpd4 f0aqzqt9YKSzZWbCMIyViPc0QNrSGjnj9dJq8GBHKAfX308JeL9uCcsLsbosdq0c35eL zakXc+Q19AxzbAtDQBYXru4LeNKNgOvYlEffZkqxdIiDilqI2D61tMlvz9Iw3l37LDjg GFSje0x2L8Xu21M8GCQOwOCYMzynBkYnuzBzEYgx3AjSXaNUM2Qpcy1wENHUWA4efePF Y2tJhDx4fDc9GotVXs1yA1CS01ZY15gD9hetDRCYPDH9H10fbxQ+aWEBk37QrhcS36SZ 4Q5w==
X-Forwarded-Encrypted: i=1; AJvYcCV+NEXD/yWxhyupHzkitBt+UnccV7a1xYfxJtUIgiqcPXwptjRsPnFDOFYIbEBs1ffzP5BW@irtf.org
X-Gm-Message-State: AOJu0YzRPBhCF0GgcL+3PVL/j/SAIC8A2Xk0B9cdf/IzjHfvUG7I7srY 063ZJwwbZwJ5dbElh3qt9YubE2XM0mlP+BM6kymNx67XlrXwIFWnW1lCRWOVZLNKaef/JwCu+kY idZpEv8T1a4GQTN7a7kc1LqioRzgdY5xa94rO
X-Gm-Gg: ASbGncvZb8MOEizuBA9dSOOI8Gz2gR5zpQtPGXoKsHfDa08gJytrrSPkVmto3ljNwnA AevRKGd2567juei1qfyTSnFboY5rvjydtFR4YcR5g4iSq0FaT2cZCKFAvClD0gasdTFQzWhbiS0 XW/8fDjmMQZYkHLFdicyk+mERimL0yX6/z/YHTACyVRFxDx7Zo6eChWov2G4QG5dBy0//rj9Imb IJwaeytcqzDccVKb3DdQ8GW/pFEIhlEStuzDgZ5bRVlt9pKqbXETMx7IedZxOI=
X-Google-Smtp-Source: AGHT+IGBvAKEf5gtl8G5Hht8Vi9EDa/T67dvMSzFYRY9DL9UBk3asRjcY3+ygY0kj7H2rwbL3VvkyGNr78UwMSBToBc=
X-Received: by 2002:a05:6402:5cb:b0:640:4c6f:d65d with SMTP id 4fb4d7f45d1cf-6405efc0f25mr336959a12.12.1761759292059; Wed, 29 Oct 2025 10:34:52 -0700 (PDT)
MIME-Version: 1.0
From: Mike Ounsworth <ounsworth+ietf@gmail.com>
Date: Wed, 29 Oct 2025 12:34:39 -0500
X-Gm-Features: AWmQ_bkn82Ce2t_ZogpEFHt6GfwTVSXXqh2c31G33cq1qs45fNmOQA9UeBrznNo
Message-ID: <CAKZgXHpQH7PcGiz9FxFCmr1hE29EGx9WuPDP-RFfem-2Bjyh6w@mail.gmail.com>
To: LAMPS WG <spasm@ietf.org>, CFRG <cfrg@irtf.org>, hpke@ietf.org
Content-Type: multipart/alternative; boundary="000000000000c873ea06424f8c0f"
Message-ID-Hash: RMQGO4OPBQ223HQQDOPZD3WDYYMINCOA
X-Message-ID-Hash: RMQGO4OPBQ223HQQDOPZD3WDYYMINCOA
X-MailFrom: ounsworth@gmail.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-cfrg.irtf.org-0; header-match-cfrg.irtf.org-1; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [CFRG] New labels in draft-irtf-cfrg-concrete-hybrid-kems-01
List-Id: Crypto Forum Research Group <cfrg.irtf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/cfrg/arwZRrgGid3AaMgTUNbGXJLJk_8>
List-Archive: <https://mailarchive.ietf.org/arch/browse/cfrg>
List-Help: <mailto:cfrg-request@irtf.org?subject=help>
List-Owner: <mailto:cfrg-owner@irtf.org>
List-Post: <mailto:cfrg@irtf.org>
List-Subscribe: <mailto:cfrg-join@irtf.org>
List-Unsubscribe: <mailto:cfrg-leave@irtf.org>

draft-irtf-cfrg-concrete-hybrid-kems-01 publish on Oct 20 and made the
following label changes:


"QSF-P256-MLKEM768-SHAKE256-SHA3256" -->  "|-()-|"
"QSF-P384-MLKEM1024-SHAKE256-SHA3256" --> " | /-"


Please tell me this is a joke. Then please remove this from the draft and
put the labels back to sane alphanumeric. I'm sorry for strong language
below, but this makes me mad.

I have been bending over backwards to make the LAMPS thing match the HPKE
thing, including multiple rounds of interop-testing against your test
vectors and changing the LAMPS draft, reference impl, and test vectors to
match yours. This has resulted in delayed publication of the LAMPS draft by
several months to accommodate interop with the HPKE draft. The LAMPS
Composite-KEM doc went into WGLC on Oct 17 now using HPKE-style labels of
the form "QSF-MLKEM768-P256-SHA3256" that we pulled FROM YOUR DRAFT instead
of the OID-based labels we had before. Then on Oct 20 you publish a new
version that goes and changes the labels to this nonsense. Can you guys
please at least pretend like you care about interop between these two docs?

My specific objections to more ASCII art labels:

1. We're already having interop problems at the PQC hackathon group because
of the backslash in the xwing label -- for example, in python you have to
put the constant in your source code as "\\.//^\\" to prevent it from
interpreting that as an escaped dot and double-quote. We've also had
similar problems representing this label properly in HTML and markdown
docs. Now you want more labels that have both backslashes and now spaces.
This is GOING to lead to at least incompatibilities if not CVEs.

2. The label is not human-readable; it doesn't tell my anything useful
about the content, nor will it be easy to debug mistakes in source code or
config files. At this point, assigning a numeric codepoint would be
preferable.

3. This does not establish a naming convention that is easily extensible to
other hybrid combinations.

I have been doing everything in my power to work behind the scenes to get
interop between these two documents, and it feels like you guys are doing
everything in your power to obstruct it.

Can you please put your labels back so that they match the LAMPS draft
using the pattern "QSF-MLKEM768-P256-SHA3256".

(PS this is a re-send from the correct email address)

-Mike