[TLS] Re: Working Group Last Call for Use of ML-DSA in TLS 1.3

Peter Gutmann <pgut001@cs.auckland.ac.nz> Tue, 14 April 2026 11:01 UTC

Return-Path: <pgut001@cs.auckland.ac.nz>
X-Original-To: tls@mail2.ietf.org
Delivered-To: tls@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 65546DBECC01 for <tls@mail2.ietf.org>; Tue, 14 Apr 2026 04:01:46 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1776164506; bh=hwFCkVaOkuISYKL8r13mmtlGIkUeufBRFiio02H/ncI=; h=From:To:Subject:Date:References:In-Reply-To; b=XBBBOt+kyCOTzQpNx9gJqioHKAS50/lws+1B3IIs94PxB2Prj9LuQNo0h3ltyQ/CJ cfOA7EIO73OlUCTq0VREfiG0rU3e0Zh/KGGi/anDaikkwl5ozj72FdTpJGmZ9RdJ/a 7sn00pglSExoXh85uj67LD3LvBEeScElO7iwM6Dk=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level:
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=0.001, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=cs.auckland.ac.nz
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cl5ll2tBj5CD for <tls@mail2.ietf.org>; Tue, 14 Apr 2026 04:01:45 -0700 (PDT)
Received: from SY5PR01CU010.outbound.protection.outlook.com (mail-australiaeastazon11022078.outbound.protection.outlook.com [40.107.40.78]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id EE018DBECBFC for <tls@ietf.org>; Tue, 14 Apr 2026 04:01:43 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=XOe86BhUXWwyT3KEL/6mAWaLv3yd+hRLSqax8LijBAX+cf0KaqydAgtgnpsy8ygiGwEnfCDNw+LDNqlOBtxrDAeYfzMYH/Ya0PH+v1EsnzRkiPPVDYR2xkSdNLlGwgoYl3kj9RJz8SG56b4ZhQHkLN8AuKJcI7FTwS9OsU/fia2FCz0doSCO1iySfySti+10oJljpwubpFTk2RqLKc5F63TGOlUISyqv8zb4QWMyzO77LGG///rZrW28/htFOHfFiQjrKf3Nzae2znM73AicySzF1GpxIhbbBhk1syhVKrpeSY7+d3MhSEHUHOhVVethbbLdhaEKqY0aohLGEa+Pag==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=hwFCkVaOkuISYKL8r13mmtlGIkUeufBRFiio02H/ncI=; b=nXM1YoReClOR0CFlYR9+DwjI5xZDCKaDeTfUjA3frYpRUtNe9JFuDGCXwBH0dVqwkT3TE2fWE6H+oQYcVcW/usG8Wc1FXIUqvI4C2ma4/bm0XbncmqHsy5FVpkWbLYXNGkE2Q7OQYXD+c7MGmDUmNPHb+bE6TCTTWQ4TIXUM7AffgNwEFVQ5ku4J38pOLjqAlyzXTqMEcBywe3LSJ6eZapuuAO+lET4eTfVRoU0g1/+RUCEOKR4Cue7WlbIZ79C+EQ0JlYS7Aoq/kjUusF/Z2BfrcCuDsncmTC3BKNTXBVP23Wcx53keBBy0UPUzdh0TrVPJC1k3zQUFRzz6GX0auA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cs.auckland.ac.nz; dmarc=pass action=none header.from=cs.auckland.ac.nz; dkim=pass header.d=cs.auckland.ac.nz; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cs.auckland.ac.nz; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=hwFCkVaOkuISYKL8r13mmtlGIkUeufBRFiio02H/ncI=; b=LJpQtmBFj5vBst6A/03scdGGyWyZwspXChxckuaCTmYeHHvZBOdKGff7gmMkUlZj2cofS7s5B4GNEovgOpVRrR870oHhQpv6imcUMqKKOU0erTSrLwpvNik0/QPS+TZrhjzjhm4GxRZnvOMI3aZKbnnHRK65X2daRNRc5SiGL4mXHsh47exoTGYXQBiPpOwJ6jzH4bItOjH/f3EvVw3ViFux5BqjFO6jIBbOA+ril8dcI8LgQAI5IV3wwBaNLvLVClS90pvQqboWpCwo/kR1qQ01E2PU/N/COg+WftwlwuJztTh90appozhkueCn4GKc3YSd1WOZjBHRsRsq28oAnw==
Received: from MEAPR01MB3654.ausprd01.prod.outlook.com (2603:10c6:201:38::9) by SY9PR01MB10883.ausprd01.prod.outlook.com (2603:10c6:10:320::9) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9769.48; Tue, 14 Apr 2026 11:01:34 +0000
Received: from MEAPR01MB3654.ausprd01.prod.outlook.com ([fe80::e2ae:955b:18b7:3064]) by MEAPR01MB3654.ausprd01.prod.outlook.com ([fe80::e2ae:955b:18b7:3064%5]) with mapi id 15.20.9769.046; Tue, 14 Apr 2026 11:01:34 +0000
From: Peter Gutmann <pgut001@cs.auckland.ac.nz>
To: "tls@ietf.org" <tls@ietf.org>
Thread-Topic: [TLS] Re: Working Group Last Call for Use of ML-DSA in TLS 1.3
Thread-Index: AQHcyF2RTqmgN+zT9EilULa2Kq1e+bXXVOwAgADPDoCAACC/gIAAkRYAgANZwYCAAG5CgIAAlyYAgAAWJYCAASAPYQ==
Date: Tue, 14 Apr 2026 11:01:34 +0000
Message-ID: <MEAPR01MB3654BFB20662D14C6AC2BF9FEE252@MEAPR01MB3654.ausprd01.prod.outlook.com>
References: <16CF0FDA-7263-461A-9F2B-D37DBEAF5DD9@sn3rd.com> <25c8d414-e4c8-455b-bd64-28132615ba75@cs.tcd.ie> <68f49a81-dd2c-4bea-896a-87da3e6aff68@tu-dresden.de> <CAMjbhoWwvfkfScpbf4-5PBzk__qb+6M4ZzAOba64kk9aXBba5g@mail.gmail.com> <d47a34ab-7fb9-4687-84aa-a5fa6bcf6a6c@tu-dresden.de> <2971d01a-89e3-43d3-a01d-b9c17b178763@amongbytes.com> <692bb582-ab7e-4d6b-aa75-ac5d93228bb2@tu-dresden.de> <DS4PPFA08475C7DBE27468E40C672197481C1242@DS4PPFA08475C7D.namprd11.prod.outlook.com> <LV0PR21MB6623B48B1F3A05D745F5A79D8C242@LV0PR21MB6623.namprd21.prod.outlook.com> <ad0svakv_WUM3btz@chardros.imrryr.org>
In-Reply-To: <ad0svakv_WUM3btz@chardros.imrryr.org>
Accept-Language: en-NZ, en-US
Content-Language: en-NZ
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels:
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=cs.auckland.ac.nz;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: MEAPR01MB3654:EE_|SY9PR01MB10883:EE_
x-ms-office365-filtering-correlation-id: 98873e14-93ca-427c-fe6a-08de9a15313e
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;ARA:13230040|1800799024|786006|376014|366016|10070799003|18002099003|56012099003|22082099003|38070700021;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:MEAPR01MB3654.ausprd01.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(786006)(376014)(366016)(10070799003)(18002099003)(56012099003)(22082099003)(38070700021);DIR:OUT;SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 2
x-ms-exchange-antispam-messagedata-0: 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
x-ms-exchange-antispam-messagedata-1: RCDwlIQ4kdOpEw==
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: cs.auckland.ac.nz
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: MEAPR01MB3654.ausprd01.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 98873e14-93ca-427c-fe6a-08de9a15313e
X-MS-Exchange-CrossTenant-originalarrivaltime: 14 Apr 2026 11:01:34.4199 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: d1b36e95-0d50-42e9-958f-b63fa906beaa
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: 8vnVfh77/v0m1q3KkcrDumfxGzY0wGH4agrySckWFnSv7UbeJP3sIbsoZN3qIj4Gxxz58nJs7Wc5P88rSY61u3+a7DYhYnosKXaDAIawzRM=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SY9PR01MB10883
Message-ID-Hash: 4YNVLIJC7FPTSZ4U6HDUBUYLXZVKVZWX
X-Message-ID-Hash: 4YNVLIJC7FPTSZ4U6HDUBUYLXZVKVZWX
X-MailFrom: pgut001@cs.auckland.ac.nz
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] Re: Working Group Last Call for Use of ML-DSA in TLS 1.3
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/-zDBzgJfcpZ1kGTl5vi2Pfo1VLE>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

Viktor Dukhovni <ietf-dane@dukhovni.org> writes:

>It may be harder to fend off their adoption in CMS, but ideally sit that out
>as well

If it's the same as adoption of EdDSA in CMS then we'll have nothing to worry
about for a long time yet.

Peter.