[MLS] I-D Action: draft-ietf-mls-combiner-02.txt

[[e-mail]]

Internet-Draft draft-ietf-mls-combiner-02.txt is now available. It is a work
item of the Messaging Layer Security (MLS) WG of the IETF.

   Title:   Amortized PQ MLS Combiner
   Authors: Xisen Tian
            Britta Hale
            Marta Mularczyk
            Joël Alwen
   Name:    draft-ietf-mls-combiner-02.txt
   Pages:   19
   Dates:   2025-10-22

Abstract:

   This document describes a protocol for combining a traditional MLS
   session with a post-quantum (PQ) MLS session to achieve flexible and
   efficient amortized PQ confidentiality and authenticity that
   amortizes the computational cost of PQ Key Encapsulation Mechanisms
   and Digital Signature Algorithms.  Specifically, we describe how to
   use the exporter secret of a PQ MLS session, i.e., an MLS session
   using a PQ ciphersuite, to seed PQ guarantees into an MLS session
   using a traditional ciphersuite.  By supporting on-demand
   traditional-only key updates (a.k.a. PARTIAL updates) or hybrid-PQ
   key updates (a.k.a. FULL updates), we can reduce the bandwidth and
   computational overhead associated with PQ operations while meeting
   the requirement of frequent key rotations.

The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-ietf-mls-combiner/

There is also an HTML version available at:
https://www.ietf.org/archive/id/draft-ietf-mls-combiner-02.html

A diff from the previous version is available at:
https://author-tools.ietf.org/iddiff?url2=draft-ietf-mls-combiner-02

Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts