[MLS] WG Last Call: draft-ietf-mls-combiner-02 (Ends 2025-11-18)

[Nick Sullivan via Datatracker <[e-mail]>]

Subject: WG Last Call: draft-ietf-mls-combiner-02 (Ends 2025-11-18)

This message starts a 2-week WG Last Call for this document.

Abstract:
   This document describes a protocol for combining a traditional MLS
   session with a post-quantum (PQ) MLS session to achieve flexible and
   efficient amortized PQ confidentiality and authenticity that
   amortizes the computational cost of PQ Key Encapsulation Mechanisms
   and Digital Signature Algorithms.  Specifically, we describe how to
   use the exporter secret of a PQ MLS session, i.e., an MLS session
   using a PQ ciphersuite, to seed PQ guarantees into an MLS session
   using a traditional ciphersuite.  By supporting on-demand
   traditional-only key updates (a.k.a. PARTIAL updates) or hybrid-PQ
   key updates (a.k.a. FULL updates), we can reduce the bandwidth and
   computational overhead associated with PQ operations while meeting
   the requirement of frequent key rotations.

File can be retrieved from:
https://datatracker.ietf.org/doc/draft-ietf-mls-combiner/

Please review and indicate your support or objection to proceed with the
publication of this document by replying to this email keeping [e-mail]
in copy. Objections should be motivated and suggestions to resolve them are
highly appreciated.

Authors, and WG participants in general, are reminded again of the
Intellectual Property Rights (IPR) disclosure obligations described in BCP 79
[1]. Appropriate IPR disclosures required for full conformance with the
provisions of BCP 78 [1] and BCP 79 [2] must be filed, if you are aware of
any. Sanctions available for application to violators of IETF IPR Policy can
be found at [3].

Thank you.

[1] https://datatracker.ietf.org/doc/bcp78/
[2] https://datatracker.ietf.org/doc/bcp79/
[3] https://datatracker.ietf.org/doc/rfc6701/