IETF Logo Mail Archive

[Emu] Re: WGLC for draft-ietf-emu-pqc-eapaka and draft-ietf-emu-hybrid-pqc-eapaka

John Mattsson <john.mattsson@ericsson.com> Tue, 21 July 2026 06:32 UTC

Return-Path: <john.mattsson@ericsson.com>
X-Original-To: emu@mail2.ietf.org
Delivered-To: emu@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 6651311B093A5 for <emu@mail2.ietf.org>; Mon, 20 Jul 2026 23:32:16 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1784615536; bh=QRnu/+NvVWI6uUM1yB3jQY6ya1FKg9YBCOPeJCDPFcE=; h=From:To:CC:Subject:Date; b=C6INMm2hoozrCOa507Exe2LIO8ejfzcMuP7lCsDnwygfs7YKODFSW8j4K9NOxt4RD IxsILHAFu/9pq5I7k4lhxpHhZXLgfh1r/q4G685rQgyf9qsQveucm3yWJcEVyPVv8M P999N9e3SIQpk6XwWT8ETluGZOR4LNqBSF7uTGu0=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.096
X-Spam-Level:
X-Spam-Status: No, score=-2.096 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=0.001, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=ericsson.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Zw0IJQELk8aQ for <emu@mail2.ietf.org>; Mon, 20 Jul 2026 23:32:15 -0700 (PDT)
Received: from AM0PR02CU008.outbound.protection.outlook.com (mail-westeuropeazon11013005.outbound.protection.outlook.com [52.101.72.5]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id C4A3511B0939E for <emu@ietf.org>; Mon, 20 Jul 2026 23:32:15 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=yDkfpLx6gxGJitmLGDR2WwZ/c/UGSynYWXGpY6YucQDAlfbLBGTDxIZgMsskFr8VqbJnbapS6RcGC8jiuV/qBxzRbBlTYH0TTaONAvHuw6UF1W4oTiEN1HP9n2lpkz5jhfClrlbK1cvmwPWDGBkmk9eEJDLggtV4Y3yP+RyGveAmF08XXE+klCUdcr1AjJwvjpYDiYT/U3TAnQ58T0fHPdZOz44JL2PAojUWkpQSmzYOzojXsUk6XZcoDpZfCZQzT0AN62veNCrD+jpUy5pw4mMDuEo8C8hXpQOLKG3XSFoltpp2o6XCoyqSZ+yHo0OzA4Iq+lu9mvSFyyVxDqrHGw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=QRnu/+NvVWI6uUM1yB3jQY6ya1FKg9YBCOPeJCDPFcE=; b=P1j/EF4hfyXP7ZwIY/Y3i+s6Yi0QmnWAFAUAJ+b/M7NPjZyBBV+mJCOzZb5QIqVtN/aN+DYfa1zjixAVWggTJLSOoahY2wQTOMVKBJDnrzF9Ozid5ALppk3U/x3+0D4iIu5dSA1u9aBrbG3mOutwThp6bRlMMRzlUlJK9OHKFFdxoTn5vYZSLQkrXGmftPGNxMpMS4/XO0q/hLblrHykXpPd6Tu56ybAI1vxL8NN6+6o8Bjz9FMWmcfEDnGPY4Gzeyhg0Z16uVEg2llfJGDTS8jKL1VaU0vYDmaiaoPd2nx0+fH0yNZO8bo6iZ0qEJbFWi16lIEIPuDf/8xzSv1bvA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=QRnu/+NvVWI6uUM1yB3jQY6ya1FKg9YBCOPeJCDPFcE=; b=fuFEjgZNx+5O59aXl8Az/PnDpuE38Rob7T3cRvK7OX2xWaxbkJHweTUz/3CrKl6yP3ff86qYa6xznnR2KXpWiPvgKWAkGFFxwvhvFegaTP9BOmnKwmi24JT1c2BJWVXJRJDPnTIPHnQe3ioUQMZGCc5AwX2xq+BWhl9RQSXWreaNgHqD9Gb3cxzVJt/Jp3jreVJA3RAxPK5bfR5R5LYyM5P9nBTIb2sSdefyj6HdcjNlPdgUngSwbRsZJHwR6OKHnjcZxp1yVZclrjPggFo8spuuys2JMLJiazxcV81TmPEr4CVw/dfidHmkBIZgfKsEI2tc8gnZcQtzNKiLEc3iCw==
Received: from AS4PR07MB8825.eurprd07.prod.outlook.com (2603:10a6:20b:4f3::15) by VI1PR07MB6672.eurprd07.prod.outlook.com (2603:10a6:800:18f::24) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.245.10; Tue, 21 Jul 2026 06:32:07 +0000
Received: from AS4PR07MB8825.eurprd07.prod.outlook.com ([fe80::11a4:5f37:fa92:f174]) by AS4PR07MB8825.eurprd07.prod.outlook.com ([fe80::11a4:5f37:fa92:f174%6]) with mapi id 15.21.0245.009; Tue, 21 Jul 2026 06:32:07 +0000
From: John Mattsson <john.mattsson@ericsson.com>
To: Wang Guilin <Wang.Guilin@huawei.com>, Peter Yee <peter@akayla.com>, "emu@ietf.org" <emu@ietf.org>
Thread-Topic: [Emu] Re: WGLC for draft-ietf-emu-pqc-eapaka and draft-ietf-emu-hybrid-pqc-eapaka
Thread-Index: AQHdGNlX/FlnUNR/UUCH9OUYVsIuIg==
Date: Tue, 21 Jul 2026 06:32:07 +0000
Message-ID: <AS4PR07MB88253EF503B2227D12C64FC889C22@AS4PR07MB8825.eurprd07.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-GB
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-reactions: allow
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=ericsson.com;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: AS4PR07MB8825:EE_|VI1PR07MB6672:EE_
x-ms-office365-filtering-correlation-id: f76e672b-738e-4126-05aa-08dee6f1c987
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;ARA:13230040|23010399003|376014|1800799024|366016|11063799006|56012099006|10067099003|8096899003|18002099003|38070700021;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AS4PR07MB8825.eurprd07.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(23010399003)(376014)(1800799024)(366016)(11063799006)(56012099006)(10067099003)(8096899003)(18002099003)(38070700021);DIR:OUT;SFP:1101;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: multipart/alternative; boundary="_000_AS4PR07MB88253EF503B2227D12C64FC889C22AS4PR07MB8825eurp_"
MIME-Version: 1.0
X-OriginatorOrg: ericsson.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: AS4PR07MB8825.eurprd07.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: f76e672b-738e-4126-05aa-08dee6f1c987
X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Jul 2026 06:32:07.5311 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: ffwrfjLSzRoo+7skV93b5ysJ7MTEXvPsJqasejTH/fcVBfAQaBK7tIz/k2Wt54lfzmTKupdOvrHP55F94T/W523H+nCwR8Uo0P+tGbxgCtQ=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR07MB6672
Message-ID-Hash: A3U73O67TRYBRWSRZVZZ4DW4E6NYR2N4
X-Message-ID-Hash: A3U73O67TRYBRWSRZVZZ4DW4E6NYR2N4
X-MailFrom: john.mattsson@ericsson.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-emu.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: Wang Guilin <Wang.Guilin@huawei.com>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [Emu] Re: WGLC for draft-ietf-emu-pqc-eapaka and draft-ietf-emu-hybrid-pqc-eapaka
List-Id: "EAP Methods Update (EMU)" <emu.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/emu/cSvBXMvbHWkpY9s0gZlY6gpu4WE>
List-Archive: <https://mailarchive.ietf.org/arch/browse/emu>
List-Help: <mailto:emu-request@ietf.org?subject=help>
List-Owner: <mailto:emu-owner@ietf.org>
List-Post: <mailto:emu@ietf.org>
List-Subscribe: <mailto:emu-join@ietf.org>
List-Unsubscribe: <mailto:emu-leave@ietf.org>

I tend to agree with Wang. The benefit of draft-ietf-emu-hybrid-pqc-eapaka is that you can combine any two algorithms, but I don’t think EAP-AKA-FS' will have an explosion of algorithms registered. Just registering composite PQ KEMs seems more straightforward.

Cheers,
John Preuß Mattsson

On 2026-07-20, 14:56, "Wang Guilin" <Wang.Guilin@huawei.com> wrote:

Hi, all,

Below is my review on [draft-ietf-emu-hybrid-pqc-eapaka]. My suggestion is DISUSS.

The main reason is that there is a simpler way to enable hybrid KEMs in EAP-AKA', by just registering a new hybrid KEM as a new PQ KEM. I think this is also the main purpose of [I-D.ietf-hpke-pq] and [I-D.irtf-cfrg-hybrid-kems]. Namely, by taking a hybrid KEM as a composite PQ KEM, just following [draft-ietf-emu-pqc-eapaka] will be enough to run a hybrid KEM. This is a big issue, and I do think we should choose this approach, without introducing AT_PUB_HYBRID attribute at all, which is done in this document.

...

v2.46.0 | Report a Bug | By Email | System Status