IETF Logo Mail Archive

[Last-Call] Re: [TLS] Re: Re: Re: Last Call: <draft-ietf-tls-mldsa-03.txt> (Use of ML-DSA in TLS 1.3) to Informational RFC

Damien Miller <djm@mindrot.org> Thu, 04 June 2026 07:54 UTC

Return-Path: <djm@mindrot.org>
X-Original-To: last-call@mail2.ietf.org
Delivered-To: last-call@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 14A6EFAA227E; Thu, 4 Jun 2026 00:54:03 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1780559643; bh=rbMx9yu6iX5ZXypV4yLe9/VcakwE0byNe1Sq3Ufwfsg=; h=Date:From:To:cc:Subject:In-Reply-To:References; b=aC9YpXS4DJFxR85cljxadyEPU3c+sVvPGFN04/vLo+YiwRpoWXHvwd0DOQpKXqzlf obW2VJB30PUrj5CgPYFBp31UJAaxIGsjVoDE6Rx6sTbVv3HSRYnBWp1EzHlPt6TrvQ JVbbjeSDXNSGgcUWivuSeokxb574w3TU7wii5QpM=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -1.898
X-Spam-Level:
X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ASd34CNTXNSq; Thu, 4 Jun 2026 00:54:02 -0700 (PDT)
Received: from train.compute.dc.uq.edu.au (train.compute.dc.uq.edu.au [130.102.189.35]) (using TLSv1.2 with cipher ECDHE-ECDSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 5A7DAFAA2279; Thu, 4 Jun 2026 00:54:02 -0700 (PDT)
Received: from smtp2.compute.dc.uq.edu.au (smtp2.compute.dc.uq.edu.au [10.208.138.89]) by train.compute.dc.uq.edu.au (8.14.5/8.14.5) with ESMTP id 6547rkgr121938; Thu, 4 Jun 2026 17:53:46 +1000
Received: from mailhub.eait.uq.edu.au (holly.eait.uq.edu.au [130.102.79.58]) by smtp2.compute.dc.uq.edu.au (8.14.5/8.14.5) with ESMTP id 6547rk1p031186 (version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Thu, 4 Jun 2026 17:53:46 +1000
Received: from haru.mindrot.org (haru.mindrot.org [130.102.96.5]) by mailhub.eait.uq.edu.au (8.15.1/8.15.1) with ESMTPS id 6547rktI030962 (version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Thu, 4 Jun 2026 17:53:46 +1000 (AEST)
Received: from localhost (localhost [127.0.0.1]) by haru.mindrot.org (OpenSMTPD) with ESMTP id 416f840c; Thu, 4 Jun 2026 17:53:46 +1000 (AEST)
Date: Thu, 04 Jun 2026 17:53:46 +1000
From: Damien Miller <djm@mindrot.org>
To: Loganaden Velvindron <loganaden@gmail.com>
In-Reply-To: < CAOp4FwRcwoK1+rZWHqxFKwkA-cY3SOqVY2-N77PCHsCXmVk+9g%mail.gmail.com@mailhub.eait.uq.edu.au>
Message-ID: <262368b8-36f6-27a2-3f02-7e3ca8ddb39b@mindrot.org>
References: <20260601204245.2216938.qmail@cr.yp.to> <767067D3-A1FF-452D-B1BE-76B412E75052@vigilsec.com> <85821685-f12a-41e2-a136-3b068647b7f7@app.fastmail.com> <CAEEbLAYUFWndaF8UL+=wV1c3Zv0jjZrdmB1T+40bcYphZYdLuw@mail.gmail.com> <AS4PR07MB8825636233B2380395F9D4B589122@AS4PR07MB8825.eurprd07.prod.outlook.com> < CAOp4FwRcwoK1+rZWHqxFKwkA-cY3SOqVY2-N77PCHsCXmVk+9g%mail.gmail.com@mailhub.eait.uq.edu.au>
MIME-Version: 1.0
Content-Type: multipart/mixed; BOUNDARY="0-1713482515-1780559340=:66595"
Content-ID: <77092231-ce93-a46e-83d9-86bda8237aa9@mindrot.org>
x-ms-reactions: disallow
X-Scanned-By: MIMEDefang 2.75 on 130.102.79.58
Message-ID-Hash: NN526BDWJTKKZCXKE2WBGFHNBPMIWGYE
X-Message-ID-Hash: NN526BDWJTKKZCXKE2WBGFHNBPMIWGYE
X-MailFrom: djm@mindrot.org
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: John Mattsson <john.mattsson=40ericsson.com@dmarc.ietf.org>, Sophie Schmieg <sschmieg=40google.com@dmarc.ietf.org>, IETF TLS <tls@ietf.org>, "last-call@ietf.org" <last-call@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [Last-Call] Re: [TLS] Re: Re: Re: Last Call: <draft-ietf-tls-mldsa-03.txt> (Use of ML-DSA in TLS 1.3) to Informational RFC
List-Id: IETF Last Calls <last-call.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/last-call/2uFM5lbDVUOQ4eAd0Wz-3CE0f_E>
List-Archive: <https://mailarchive.ietf.org/arch/browse/last-call>
List-Help: <mailto:last-call-request@ietf.org?subject=help>
List-Owner: <mailto:last-call-owner@ietf.org>
List-Post: <mailto:last-call@ietf.org>
List-Subscribe: <mailto:last-call-join@ietf.org>
List-Unsubscribe: <mailto:last-call-leave@ietf.org>

On Tue, 2 Jun 2026, Loganaden Velvindron wrote:

> I think that security reviews in hybrid ed25519+mldsa 44  for openssh are
> welcome. 
> 
> What are the security issues you see in this pr ?
> 
> https://github.com/djmdjm/openssh-wip/pull/64

FWIW this is very much my work in progress code that has yet to have
any substantive review. I'm not particularly comfortable with it being
held up as an exemplar of anything. Feedback is of course invited;
Soatok Dreamseeker's commentary was especially welcome.

I don't think choices that make sense for SSH will necessarily apply
to TLS. They operate under different constaints, standardise on
different timescales and should therefore be expected to arrive at
different tradeoffs.

-d

v2.46.0 | Report a Bug | By Email | System Status