IETF Logo Mail Archive

[TLS] Re: Status of ML-KEM WGLC

Eric Rescorla <ekr@rtfm.com> Sun, 22 March 2026 22:07 UTC

Return-Path: <ekr@rtfm.com>
X-Original-To: tls@mail2.ietf.org
Delivered-To: tls@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 2FDA8CFA0F8D for <tls@mail2.ietf.org>; Sun, 22 Mar 2026 15:07:22 -0700 (PDT)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -1.897
X-Spam-Level:
X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=rtfm-com.20230601.gappssmtp.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4Pz6kCWsgB-c for <tls@mail2.ietf.org>; Sun, 22 Mar 2026 15:07:21 -0700 (PDT)
Received: from mail-yx1-xb12e.google.com (mail-yx1-xb12e.google.com [IPv6:2607:f8b0:4864:20::b12e]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id A6410CFA0F86 for <tls@ietf.org>; Sun, 22 Mar 2026 15:07:21 -0700 (PDT)
Received: by mail-yx1-xb12e.google.com with SMTP id 956f58d0204a3-64d5a7926cfso3605666d50.2 for <tls@ietf.org>; Sun, 22 Mar 2026 15:07:21 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1774217235; cv=none; d=google.com; s=arc-20240605; b=gJbj8c6/GGVjNxRHpiklXqDWQ9PsGAhiGmU8M0ifRem4wxhYewYtMyTO/jQ4xN3dGG Zqka9lu7o/XzSWJo0l2Dv++qyHpBjAHAN4ASkcMxMKMI5rYLvGpCwKkqxjzzsetK25uC xwTnsulWQ9CC+lxm7mpX06MZMO+fQPzgYXodIwF5pEHKcvs5T9YOI6oDM4Mh59Zkg41e +8cjgqX+XUTnTixbTkTRv/n2prOlUgSrn3RqYwHGIXzAIfPSUyF5KWd1pXJoWO8pAD/3 JzGkVZV4vtyrwOMp/9qQUVlhiybGmIT0kJyAxToeroXQnN2yS9CRDD4EPwTIgAmctAiu u1oQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:dkim-signature; bh=5yBFr+pmo5YOQz2tnu5pd5ckizPisPiz3lEqICrCJSY=; fh=i40KDNFfom/p3W7sL3QRyfDgx13ZkKgqWxzT5d3HnPE=; b=QgJAJ8GB7dg0Alw8id5KuBqyl7wKtYBYB+lHaysXbWhgtRHSqSAdoyGaeGNQCagnhF 7XpRFbciFwP25t3ngmBwzPj7cwgHweOi8doTBrCp65eBzt6Oa+c3/DfsE/jgQ3znxpgX IWNwylSMi4EJjHyBycvQU1pPD2g8RjSe+1CP60IUeXlrUghbCVzwZ6ERibBppP5cqceZ TuyjW77nWwfSK+pphe6r05ywY9MLZwq/mmkvEhJ3qNPUJFw0qyuLiOz1iM41Egokzo8n S98BaFwqRqnE3yfF5R29b5fZuHoRUOBYL3qBzP55Uf/o8V1pgaQLiypsei6ItwmAsjIC pgRA==; darn=ietf.org
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rtfm-com.20230601.gappssmtp.com; s=20230601; t=1774217235; x=1774822035; darn=ietf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=5yBFr+pmo5YOQz2tnu5pd5ckizPisPiz3lEqICrCJSY=; b=fh/vwMH16U49GKoxy0zVomdU4v53WQzU763xR/NtzjDgFQpjEAN5U2u9S42EQSoIda sL51Vxfb0hSEbjP27+87oNcp7bOZ5DAnCOndpP6zcjsBpwC8ofOPE2iLoD8QWAjQk2W+ fqFxy/YvFvvKFqJBzs60ow8FjR/pl9oYgMgXDDlKFgLiPsRyO6RhqNYFjzMfDo1A79Hs Ahv77ATfYhS5FlOBVHPdUz60H34BHp0cp0NCRLOqDm7XU8t0Q80ciHvgTRXlWyLiskL+ 2l7vJmWDWZF/zaT4HtG1PEpIVp1EvvooDqpxFRM8GIUk1CQJvvQzEy99PD6d9QhFjSL8 8e2g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1774217235; x=1774822035; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=5yBFr+pmo5YOQz2tnu5pd5ckizPisPiz3lEqICrCJSY=; b=bQ4jOZUE3iv2NgzV69/hlqIzAJ+H5Dgukq+k4wvzBIKknb+bMs3olSC7Zz4QFK2I5E JFl8QryKZTWiYDQRbKvgH1nA0tWr8jI/WebMiYrEcBK22+vipePFqKFXZtlVkmUNMRM3 /3Ag+NOghoy+MXx2EORvQuGLF9ApeHLs0qmYqFYpHlxoFl1uC82LAZIGQuJ1ozYD0APy a7r6NHkNS/YbBZj+s4lY/lu5+f9213OwgNabpItJmjLc/xEuY5L2DtMQL0kl5k4zlkdG tkf52umf8uQU7LzDFI6F+FV0v9JSMiCG8C9VZXD6ly+gFK41uc4scbkEpj0mE6439fXj 1JmQ==
X-Forwarded-Encrypted: i=1; AJvYcCVc1YswAq7CDs1ee1drgCMgS1FD90D42Kihxr28tAA+R5ZvQfyNKeCvikV2eXnBANhmgFQ=@ietf.org
X-Gm-Message-State: AOJu0YzJ6tW0pjlXgirndVsrAzTU1AImlPErdKhumd1SnAxTrko+oBFD /A+SOQy1EeRRQCjzNFykkhLdsrtwtDju5FnGXj++pdfusJpfm+LmFsJpyqteqceTOdaX64QnC4K 0U/x+iP+XdRQsxLx4+MF4FfNIsRv0yEyuGb5s/2jX4UaLeP+C0pidFBg=
X-Gm-Gg: ATEYQzw4h9MQPIwCg/ts+eMwsDNBS5h0juoc17nbzymboK+iFf25+g0FuB+mviScYuA nOMGszFC5maEw5GAkeMT1mtzzAlvxhoq2f9ZxPkXdo9GQqID+D4HEOJMs+SCe4rXtF4CHt/edRN Rb8OBj/T6ptjJ6YBf+Mq8ShmxUsI4FHlRyDzWzEyuYgxIkKaKxvdShDmdxjquwh5kckpRVimn5Y RRthpwvh5xSNsNkV7w4l9LvRc72OYJ8vYGHYcTDzesidMhCCYGq32K5v6EAfN6CdWYtJdjyRxwX BCjInOqjegDvAtMMo1+hHLr2iZ+pW0e62HwH3c13w0xxwGMQe7VbYVSAR5y+An0rHpGpxNsxHHv sZRgg/Y+vGjOZEwFSx35xTQ==
X-Received: by 2002:a53:b6c5:0:b0:646:7062:22ad with SMTP id 956f58d0204a3-64eaa78e7admr8877818d50.46.1774217235144; Sun, 22 Mar 2026 15:07:15 -0700 (PDT)
MIME-Version: 1.0
References: <CAOgPGoDd=qhg-mGzB8mrFOGVKHY_9uz+_EO3P_i0_e8TG6v0Mw@mail.gmail.com> <3256af6a-db98-42c7-839e-e96802cae2dd@cs.tcd.ie> <f03a0f9f-bb6c-4955-8e4b-359b3bad01cc@tu-dresden.de> <7272e373-0e4c-4c66-8f42-e015afaa5d4b@app.fastmail.com>
In-Reply-To: <7272e373-0e4c-4c66-8f42-e015afaa5d4b@app.fastmail.com>
From: Eric Rescorla <ekr@rtfm.com>
Date: Sun, 22 Mar 2026 15:06:38 -0700
X-Gm-Features: AaiRm50XilNY206qBa5NN6TAvZSjvof9Eex4gHLNA3d8FT5WfXIAGoRu1PnSFpA
Message-ID: <CABcZeBMP46dzcTCB5yx=cZLuL6saqYqhDw73mHjMrwGjWgA64w@mail.gmail.com>
To: Filippo Valsorda <filippo@ml.filippo.io>
Content-Type: multipart/alternative; boundary="0000000000000e3253064da42473"
Message-ID-Hash: ZEDJ3Y55OI5FF57SKVEKBSHEP3T4GOMO
X-Message-ID-Hash: ZEDJ3Y55OI5FF57SKVEKBSHEP3T4GOMO
X-MailFrom: ekr@rtfm.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: tls@ietf.org
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] Re: Status of ML-KEM WGLC
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/0-wa7XVNyi6LkShJwYvWp3rEWVQ>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

On Sun, Mar 22, 2026 at 2:56 PM Filippo Valsorda <filippo@ml.filippo.io>
wrote:

> 2026-03-22 22:23 GMT+01:00 Muhammad Usama Sardar <
> muhammad_usama.sardar@tu-dresden.de>:
>
> Hi Joe and Sean,
>
> I have the same concern as Stephen. Please precisely specify the binary
> outcome of the WGLC.
>
> Moreover, please add the following to the list:
>
>    - Bring an attestation of ML-KEM from Crypto Review Panel [0] of CFRG
>
>
> I’m sorry, what is a Crypto Review Panel “attestation,” what is it
> expected to bring over the multi-year, international NIST competition, and
> why would an IRTF opinion be blocking for an IETF document?
>

FWIW, I agree with you in the specific case of ML-KEM.

To the broader question, I think that the IETF should avoid adopting
algorithms
that haven't seen a sufficient level of vetting. This could be provided by
CFRG
or, as you observe, by a multi-year international NIST competition.

-Ekr

v2.46.0 | Report a Bug | By Email | System Status