IETF Logo Mail Archive

Re: [TLS] [EXT] Re: ML-KEM key agreement for TLS 1.3

"Blumenthal, Uri - 0553 - MITLL" <uri@ll.mit.edu> Tue, 19 March 2024 15:52 UTC

Return-Path: <prvs=5808ebb859=uri@ll.mit.edu>
X-Original-To: tls@ietfa.amsl.com
Delivered-To: tls@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 70ADCC14F6EA for <tls@ietfa.amsl.com>; Tue, 19 Mar 2024 08:52:05 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.206
X-Spam-Level:
X-Spam-Status: No, score=-4.206 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7eXMBFJ4r6xv for <tls@ietfa.amsl.com>; Tue, 19 Mar 2024 08:52:04 -0700 (PDT)
Received: from MX2.LL.MIT.EDU (mx2.ll.mit.edu [129.55.12.51]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7E33AC14F5E8 for <tls@ietf.org>; Tue, 19 Mar 2024 08:52:04 -0700 (PDT)
Received: from LLEX2019-3.mitll.ad.local ([172.25.4.125]) by MX2.LL.MIT.EDU (8.17.1.19/8.17.1.19) with ESMTPS id 42JFofJv229339 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=FAIL) for <tls@ietf.org>; Tue, 19 Mar 2024 11:50:41 -0400
ARC-Seal: i=1; a=rsa-sha256; s=arcselector5401; d=microsoft.com; cv=none; b=XuryIsBZFLAzolZZut1/99cWeBsrmuLG5IzV5oKM6t6dOoVqAXEieXI6Y2vn08OqmAZ2g12ohQFE7L3e+cG1BRh7VstFxWSvI7//yuMWhxpX5UaWVpvKOIGQ4C8G+P1+OQqT/Ibmlzb+cPVGzDxdWv9goQaiu2mg5n1QvIFiip456HAYey/WJflainPQxGYARxLKRbKwWt5MJNFJ/WsRE6HrWfFTb4r8MRVEGC1SfW/MrK4mVC7P0fUGjE6KxqDuiv7HOwu3EBwGj+EQJvCpOOeYdo0YWjt5SZngOW3ebgF7IvB2M0rK6GRWp+4oAEw23qZ8Lq0ogk31RsujMTKctA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector5401; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=Attl5PSLz9oEhLxQ92+sDJildBU8ykPpQKB6FVejK28=; b=VH7GFIdszfPkrU9OcIBbo17PMCERzjVgKxX4VdOVp7O9JaMaMCBAMylEJbRHMx9goMKec4bGtjEmHJAj7lRP5kSpwgD998qhy1UFY7SMo+tE/uTOXY1xp9h4iQLCluGeY4smZrVO1EmKyW9JXf1jyOVuFwBrZ27W4285409eO+7qkm+J6OBHe9cREfqmJ2/aZ8WIyYYAaef/dRejsv7f9oxnRr7UOAfs1uxcImBa9rcTrBin4y7jyTQAGnKxuRtzs19cAy1YXc6SkhdcIiEDEYvKodFegNgkLcgKFgyW0Tn+fk8Rzg3iRl+pkg0FS2bz0EuxIVxgNXZp//qNrZW94g==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ll.mit.edu; dmarc=pass action=none header.from=ll.mit.edu; dkim=pass header.d=ll.mit.edu; arc=none
From: "Blumenthal, Uri - 0553 - MITLL" <uri@ll.mit.edu>
To: "tls@ietf.org" <tls@ietf.org>
Thread-Topic: [EXT] Re: [TLS] ML-KEM key agreement for TLS 1.3
Thread-Index: AQHaebOKQQ/XQAkIVEuyrRM6N6OtT7E+9EoA
Date: Tue, 19 Mar 2024 15:51:59 +0000
Message-ID: <0C7AFFD7-38C4-418B-8446-18A9D28AE5D6@ll.mit.edu>
References: <9CC33B4D-3EC2-4784-84A0-CE629D5B421C@amongbytes.com>
In-Reply-To: <9CC33B4D-3EC2-4784-84A0-CE629D5B421C@amongbytes.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/16.83.24031120
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: BN0P110MB1419:EE_|BN0P110MB2275:EE_
x-ms-office365-filtering-correlation-id: 19619d0e-90f6-4df9-25b5-08dc482c835f
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BN0P110MB1419.NAMP110.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFS:(13230031)(366007)(1800799015)(38070700009); DIR:OUT; SFP:1101;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg="sha256"; boundary="B_3793693919_822864447"
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: BN0P110MB1419.NAMP110.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-Network-Message-Id: 19619d0e-90f6-4df9-25b5-08dc482c835f
X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Mar 2024 15:51:59.9559 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 83d1efe3-698e-4819-911b-0a8fbe79d01c
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN0P110MB2275
X-Proofpoint-ORIG-GUID: AbgSRh2K2FS3q7lyzs1hzIEgZWcWst0h
X-Proofpoint-GUID: AbgSRh2K2FS3q7lyzs1hzIEgZWcWst0h
X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.272,Aquarius:18.0.1011,Hydra:6.0.619,FMLib:17.11.176.26 definitions=2024-03-19_05,2024-03-18_03,2023-05-22_02
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 bulkscore=0 mlxscore=0 adultscore=0 malwarescore=0 spamscore=0 phishscore=0 suspectscore=0 mlxlogscore=999 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2403140000 definitions=main-2403190120
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/0_4XLGs5OEXi2PoM5cdWriOmSoA>
Subject: Re: [TLS] [EXT] Re: ML-KEM key agreement for TLS 1.3
X-BeenThere: tls@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tls>, <mailto:tls-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls/>
List-Post: <mailto:tls@ietf.org>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 19 Mar 2024 15:52:05 -0000

I support Kris, and would like to see codepoints added for MLKEM-512, MLKEM-768, and MLKEM-1024.

-- 
V/R, 
Uri 




On 3/19/24, 00:11, "TLS on behalf of Kris Kwiatkowski" <tls-bounces@ietf.org <mailto:tls-bounces@ietf.org> on behalf of kris@amongbytes.com <mailto:kris@amongbytes.com>> wrote:


!-------------------------------------------------------------------|
This Message Is From an External Sender
This message came from outside the Laboratory.
|-------------------------------------------------------------------!


Hello,


I would like to express my support for getting a codepoint for ML-KEM (the queue was closed quicker than I expected, so didn’t have a chance to do it at the meeting). 


The motivation:
* First of all the integration is rather straightforward.
* MLKEM already got a large amount of research from the crypto community, from a large number of various research groups - theorists, designers, implementers as well as experts in side-channel protection. Deirdre mentioned that schemes were studied for the last 7 years, but it is worth remembering that Kyber is a modification of the LPR cryptosystem, introduced already in 2010. 
* There is a cost of 2-step migration (to hybrid and then pure PQ), I don’t believe it’s good to force you to pay the cost.


Additionally, I think I would also get a codepoint for MLKEM-512.


-- 
Kris Kwiatkowski
Cryptography Dev








_______________________________________________
TLS mailing list
TLS@ietf.org <mailto:TLS@ietf.org>
https://www.ietf.org/mailman/listinfo/tls <https://www.ietf.org/mailman/listinfo/tls>

v2.46.0 | Report a Bug | By Email | System Status