[MLS] New drafts from Rohan
Rohan Mahy <rohan.ietf@gmail.com> Tue, 21 October 2025 14:47 UTC
Return-Path: <rohan.mahy@gmail.com>
X-Original-To: mls@mail2.ietf.org
Delivered-To: mls@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id BE6D67991B5D for <mls@mail2.ietf.org>; Tue, 21 Oct 2025 07:47:12 -0700 (PDT)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XnmJMIt4LDoH for <mls@mail2.ietf.org>; Tue, 21 Oct 2025 07:47:12 -0700 (PDT)
Received: from mail-ed1-x533.google.com (mail-ed1-x533.google.com [IPv6:2a00:1450:4864:20::533]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 3D31E799147E for <mls@ietf.org>; Tue, 21 Oct 2025 07:44:30 -0700 (PDT)
Received: by mail-ed1-x533.google.com with SMTP id 4fb4d7f45d1cf-63c1a0d6315so10215105a12.1 for <mls@ietf.org>; Tue, 21 Oct 2025 07:44:30 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1761057868; x=1761662668; darn=ietf.org; h=to:subject:message-id:date:from:mime-version:from:to:cc:subject :date:message-id:reply-to; bh=dQVW+wZPhSg4ez3rbdQ1bWEeMCteeanw93M/1ScBmLM=; b=J+ICwb+cMJaxjgrsERwdafiETp0XmjhVXqjsFCNww3WTphBoZhA8XUzNoLUOw8MM1u RKRgb7fmzn8viDMRMytpqboOISTYbQvvRlTOMCOOrMjCFbo/m8Tk1qUUDRfsN6MH/ham AM6bVnIUmHLGXRbIzk6dUQXZKEtEQncEqZYVKdyM0MCW9WH7SRMsR4/zlwlct2WB2nfs 26bisCmRrR0d8i55bN0pK1rk0O5Cyl7B5ZnjTth+GonyB6c2L1NxPGX7hmObWS2yE76Z EHQtgeJbZGZby3tPWHC055O3RKF0pv9D3SNmcFDUNZnOlzbWVPoB/0I5pyo//O4Mxb+h 6Y7A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1761057868; x=1761662668; h=to:subject:message-id:date:from:mime-version:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=dQVW+wZPhSg4ez3rbdQ1bWEeMCteeanw93M/1ScBmLM=; b=QhiFdT6Py6J7c+g4OJOwUAnUu25DHXSkGenLnCteIfqJ4d76nHI1WRXZk/bFk7bQqg Ge4+i8qCt8MqSPBalsThAud00PKNXwDo8GszFfi1nog7yNE3tuTL45Hr62O6nBKf/UCE ZW2WfcjUtIqO9bWK3TDvtHyhZnXS8QKlmNVS3pY0Z80b+4kPKb0FDPY4f7R36cZBg/sO OzZY1oI2VfUce+J0ZS4532BrEu1toa+qtXXTolN6DxxB3XjMtRd2c/2em69T6bCtosm6 W3K2eoozkg12Obn1DDAXijykapC3IJU03oxBgTIxB/nLzi7tCXv+Xc0v6R1FI2AlnV8n LlEA==
X-Gm-Message-State: AOJu0YxUn/e76t+bxAddqnLbaGDDLFNfL9BKXPUN+rUYgb9ag7xnNAU0 DoGZNGcvYnDSSpUhrjCGRvyJMcWVKaZxmMTbzr+mi3SbO3L+emvIlwA06EbkCXqWAqCi2dApqlC MqW+flU/MXJoweunSNNYUzoMu4A8WsQFXWdmZTVu1Dg==
X-Gm-Gg: ASbGnctkdZ4y5d6S4EDlys+B93x4x8QBKtGhEMD3PL4qyvzrf3SkVw7qtdWu/GW0Ul5 R/1+cn7AMnVsE0u7wh5Ys7hGOTTWcMnBtwGByE3mflQCOLiholb7cc2Wrwa7tTLpd2Wy4P13cbI DwT+Nr2HEVj9UTnmsIpCDUBw4suecSIvdbHWoLfkO0I6uh6agydt5UokSEpl1Mun8G7DQMXkAhR NalesEHQ7oXHjUNreBo7OgIm0CTEHuunHJjr+SFw0m+fZOHMSYuhRq3iJaC7isySmVOWBfEnBv8 N411pBg=
X-Google-Smtp-Source: AGHT+IHpdSTnMfIZxZ9wQ80yTYXpWaf8SrzR3aZiNNT3ba1vjsYZVv4SiNAdmxmmeAkWHSwPj2oCe1KRESsWIN00H+g=
X-Received: by 2002:a05:6402:3506:b0:63c:11cd:be57 with SMTP id 4fb4d7f45d1cf-63c1f626e7cmr16174770a12.5.1761057868217; Tue, 21 Oct 2025 07:44:28 -0700 (PDT)
MIME-Version: 1.0
From: Rohan Mahy <rohan.ietf@gmail.com>
Date: Tue, 21 Oct 2025 16:44:16 +0200
X-Gm-Features: AS18NWB49XBxo9KSM5JDD4GFI8yfyEcwDWTDxTFz_taoujO9pM7fDv8xelNWGY0
Message-ID: <CAKoiRuaaZHqj6EkEnYVPCXDf6zW0eNn0kM6LszYnr5=qdtgC8w@mail.gmail.com>
To: MLS List <mls@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000aa03550641ac3c66"
Message-ID-Hash: 3CK6ZCZSYA3LA3LVWS4VUHPMXB4FZVZA
X-Message-ID-Hash: 3CK6ZCZSYA3LA3LVWS4VUHPMXB4FZVZA
X-MailFrom: rohan.mahy@gmail.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-mls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [MLS] New drafts from Rohan
List-Id: Messaging Layer Security <mls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/mls/Gx9ntN94gNP0L8EidlsBwEs8C80>
List-Archive: <https://mailarchive.ietf.org/arch/browse/mls>
List-Help: <mailto:mls-request@ietf.org?subject=help>
List-Owner: <mailto:mls-owner@ietf.org>
List-Post: <mailto:mls@ietf.org>
List-Subscribe: <mailto:mls-join@ietf.org>
List-Unsubscribe: <mailto:mls-leave@ietf.org>
Hi Everyone, >From my side I'll give a quick update on new and updated MLS drafts. draft-ietf-mls-pq-ciphersuites has NOT been updated yet, but will be before the meeting. We have special permission to submit this after the draft deadline because it is the last in a chain of 4 other drafts it depends on. Stay tuned. draft-mahy-mls-sd-cwt-credential <https://www.ietf.org/archive/id/draft-mahy-mls-sd-cwt-credential-01.html> defines SD-JWT and SD-CWT credential types for MLS. I updated the document to explain that these could just be otherwise pretty ordinary JWTs or CWTs with key binding. Using the selective disclosure functionality isn't mandatory. Private External Messages (draft-mahy-mls-private-external <https://www.ietf.org/archive/id/draft-mahy-mls-private-external-00.html>) lets you HPKE encrypt an (ex: external proposal) PublicMessage to everyone in the group so the DS can't read your LeafNode/Credential. More efficient FramedContentTBS (draft-mahy-mls-new-framed-content-tbs <https://www.ietf.org/archive/id/draft-mahy-mls-new-framed-content-tbs-00.html>) is a super simple extension that uses the hash of the GroupContext in FramedContentTBS instead of the whole GroupContext. New content types (draft-mahy-mls-new-content-types <https://www.ietf.org/archive/id/draft-mahy-mls-new-content-types-00.html>) explores the idea of having several "application" ratchets split on new content types that can have more aggressive deletion schedules for status updates and completely ephemeral messages (ex: isTyping). Including pending proposals in external commits ( draft-mahy-mls-ext-commit-pp <https://www.ietf.org/archive/id/draft-mahy-mls-ext-commit-pp-00.html>) is an extension that makes all otherwise pending proposals valid inside an external commit, and discusses the security tradeoff. Semiprivate message ( https://www.ietf.org/archive/id/draft-mahy-mls-semiprivatemessage-06.html) has no changes, just a refresh. Likewise, ratchet tree options ( https://www.ietf.org/archive/id/draft-mahy-mls-ratchet-tree-options-03.html ) has no changes. Thanks, -rohan
- [MLS] New drafts from Rohan Rohan Mahy