[MLS] Re: Fwd: New Version Notification for draft-ietf-mls-pq-ciphersuites-01.txt

[Deirdre Connolly <[e-mail]>]

I would be comfortable with this

On Tue, Nov 4, 2025, 12:54 PM Richard Barnes <[e-mail]> wrote:

> I would like to discuss the symmetric parameters here.  I had a feeling of
> vague unease at the meeting yesterday, which was confirmed by some of the
> meeting chat raising the question of whether we need AES-256 for the
> 128-bit security level.
>
> It seems like we should revert the 128-bit security level suites
> (MLKEM768+P256, MLKEM768+X2519, MLKEM768) to use AES128 and SHA256.  Would
> people have concerns with this?
>
> --Richard
>
> On Tue, Nov 4, 2025 at 12:48 PM Rohan Mahy <[e-mail]> wrote:
>
>> Hi,
>> If you want something different from what is in this draft, please create
>> an issue, explain your motivation in a few sentences, and send to this list.
>>
>> What I heard during the meeting yesterday.
>>
>> - One request to make the ciphersuite with MLKEM768X25519 use AES128
>> instead of AES256
>>
>> - One request to add one more ciphersuite MLS_256_MLKEM1024_AES256GCM_SHA
>> *384*_MLDSA87
>>
>> Thanks,
>> -rohan
>>
>>
>> ---------- Forwarded message ---------
>> From: <[e-mail]>
>> Date: Tue, Nov 4, 2025 at 12:41 PM
>> Subject: New Version Notification for
>> draft-ietf-mls-pq-ciphersuites-01.txt
>> To: Richard L. Barnes <[e-mail]>, Rohan Mahy <[e-mail]>
>>
>>
>> A new version of Internet-Draft draft-ietf-mls-pq-ciphersuites-01.txt has
>> been
>> successfully submitted by Rohan Mahy and posted to the
>> IETF repository.
>>
>> Name:     draft-ietf-mls-pq-ciphersuites
>> Revision: 01
>> Title:    ML-KEM and Hybrid Cipher Suites for Messaging Layer Security
>> Date:     2025-11-04
>> Group:    mls
>> Pages:    8
>> URL:
>> https://www.ietf.org/archive/id/draft-ietf-mls-pq-ciphersuites-01.txt
>> Status:
>> https://datatracker.ietf.org/doc/draft-ietf-mls-pq-ciphersuites/
>> HTML:
>> https://www.ietf.org/archive/id/draft-ietf-mls-pq-ciphersuites-01.html
>> HTMLized:
>> https://datatracker.ietf.org/doc/html/draft-ietf-mls-pq-ciphersuites
>> Diff:
>> https://author-tools.ietf.org/iddiff?url2=draft-ietf-mls-pq-ciphersuites-01
>>
>> Abstract:
>>
>>    This document registers new cipher suites for Messaging Layer
>>    Security (MLS) based on "post-quantum" algorithms, which are intended
>>    to be resilient to attack by quantum computers.  These cipher suites
>>    are constructed using the new Module-Lattice Key Encapsulation
>>    Mechanism (ML-KEM), optionally in combination with traditional
>>    elliptic curve KEMs, together with appropriate authenticated
>>    encryption, hash, and signature algorithms.
>>
>>
>>
>> The IETF Secretariat
>>
>>
>> _______________________________________________
>> MLS mailing list -- [e-mail]
>> To unsubscribe send an email to [e-mail]
>>
> _______________________________________________
> MLS mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
>