[MLS] Re: Fwd: New Version Notification for draft-ietf-mls-pq-ciphersuites-01.txt

[Richard Barnes <[e-mail]>]

I would like to discuss the symmetric parameters here.  I had a feeling of
vague unease at the meeting yesterday, which was confirmed by some of the
meeting chat raising the question of whether we need AES-256 for the
128-bit security level.

It seems like we should revert the 128-bit security level suites
(MLKEM768+P256, MLKEM768+X2519, MLKEM768) to use AES128 and SHA256.  Would
people have concerns with this?

--Richard

On Tue, Nov 4, 2025 at 12:48 PM Rohan Mahy <[e-mail]> wrote:

> Hi,
> If you want something different from what is in this draft, please create
> an issue, explain your motivation in a few sentences, and send to this list.
>
> What I heard during the meeting yesterday.
>
> - One request to make the ciphersuite with MLKEM768X25519 use AES128
> instead of AES256
>
> - One request to add one more ciphersuite MLS_256_MLKEM1024_AES256GCM_SHA
> *384*_MLDSA87
>
> Thanks,
> -rohan
>
>
> ---------- Forwarded message ---------
> From: <[e-mail]>
> Date: Tue, Nov 4, 2025 at 12:41 PM
> Subject: New Version Notification for draft-ietf-mls-pq-ciphersuites-01.txt
> To: Richard L. Barnes <[e-mail]>, Rohan Mahy <[e-mail]>
>
>
> A new version of Internet-Draft draft-ietf-mls-pq-ciphersuites-01.txt has
> been
> successfully submitted by Rohan Mahy and posted to the
> IETF repository.
>
> Name:     draft-ietf-mls-pq-ciphersuites
> Revision: 01
> Title:    ML-KEM and Hybrid Cipher Suites for Messaging Layer Security
> Date:     2025-11-04
> Group:    mls
> Pages:    8
> URL:
> https://www.ietf.org/archive/id/draft-ietf-mls-pq-ciphersuites-01.txt
> Status:   https://datatracker.ietf.org/doc/draft-ietf-mls-pq-ciphersuites/
> HTML:
> https://www.ietf.org/archive/id/draft-ietf-mls-pq-ciphersuites-01.html
> HTMLized:
> https://datatracker.ietf.org/doc/html/draft-ietf-mls-pq-ciphersuites
> Diff:
> https://author-tools.ietf.org/iddiff?url2=draft-ietf-mls-pq-ciphersuites-01
>
> Abstract:
>
>    This document registers new cipher suites for Messaging Layer
>    Security (MLS) based on "post-quantum" algorithms, which are intended
>    to be resilient to attack by quantum computers.  These cipher suites
>    are constructed using the new Module-Lattice Key Encapsulation
>    Mechanism (ML-KEM), optionally in combination with traditional
>    elliptic curve KEMs, together with appropriate authenticated
>    encryption, hash, and signature algorithms.
>
>
>
> The IETF Secretariat
>
>
> _______________________________________________
> MLS mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
>