IETF Logo Mail Archive

[TLS] Re: Working Group Last Call for Use of ML-DSA in TLS 1.3

Rob Sayre <sayrer@gmail.com> Fri, 10 April 2026 21:52 UTC

Return-Path: <sayrer@gmail.com>
X-Original-To: tls@mail2.ietf.org
Delivered-To: tls@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id DD270DA0AE16 for <tls@mail2.ietf.org>; Fri, 10 Apr 2026 14:52:07 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1775857927; bh=UjFriTjlRDdewfnnROcKrHDWD9FNo5cCxV+WhKy31/w=; h=References:In-Reply-To:From:Date:Subject:To:Cc; b=BLUO7P1/llRj+iZTI7HNBVV51Cc6yv0hi3lVeyClAE71RX5vL/GVquT8Xra5So4PS HxC82qajZE6SX3xohvbG8fRoGZ6wpxJdEQJ+QBg4c3nWV6b91THXXC8RXBWLhjrEtf vZTa0edhIV5KwgynwiXItMVPzvOG/NYvv8jveY9Y=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1nZp9USiZIRw for <tls@mail2.ietf.org>; Fri, 10 Apr 2026 14:52:07 -0700 (PDT)
Received: from mail-pj1-x1033.google.com (mail-pj1-x1033.google.com [IPv6:2607:f8b0:4864:20::1033]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 9749CDA0AE0F for <tls@ietf.org>; Fri, 10 Apr 2026 14:52:07 -0700 (PDT)
Received: by mail-pj1-x1033.google.com with SMTP id 98e67ed59e1d1-35d95017a68so1725169a91.3 for <tls@ietf.org>; Fri, 10 Apr 2026 14:52:07 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1775857927; cv=none; d=google.com; s=arc-20240605; b=IhmEsWkWqJGjsYiJUce19tERhCnSOtbPOrIgHewzasKHVQJeSXzraYUlZ6PKrUrV9/ uzgj74xfROGsf7mF5pSs+0zuYVhLkGbFVStMzqnYNNmVuKWEK+qYPnW9wWIx3ghPctPf rcNBUpQcS1RbWq2YglSSHshFq2Bl2SzZItLnK6q2u9tbUX0VocceR28znPrzAq3YaTMb LMPQY3sicnZcFLbig3Bzcm2RH5vSf3atjHlkLdID8dHZ0TDnArhrMgmMgUgy5uh+qAAA vEFovJWNdXZP6Na4Di+xHimT7E+27OVvQI5P94uLBGx7nbJ8o02CTpX+xXw3TJJMxbSh RCuQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:dkim-signature; bh=op3SiznnebhzsyfKPX5HR6G+J2UGvhkEUTOd1qK7ZNI=; fh=3jQDz6E2GD6J9VinqCOAkXwczUtJ0b5vq4K21TItq4E=; b=JsY7819YVtTRkoU3YoNyWxBgPAw13RzNUUnvuzELeRWymp4F7xlGUDC5Wj3NMMGKcD LOhkXH/cCgDJWGnEJFhAq8LWVdfa6udVZwoijQVapOTqASM30JBn2QuUY7Tq/RbqHIqP fIze+YCtznjWABpiBmXElcn7RGiZUod+Rmq1CdtFSrO0tCXbMJ7XXxe9LU2RCa9U92w0 H9n3lD9ZrHUKub6750s2nmPIbsSr/64mq6Tk22mmSIim5c6MENQynGP31Ny+HhHaowG/ DBecg8G8WhCFnnriWgW1POCYohqqSeMP8ICfMdKwb3h4zOU1TXZmgfMJKO+5C/OmBqNp Kp3Q==; darn=ietf.org
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1775857927; x=1776462727; darn=ietf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=op3SiznnebhzsyfKPX5HR6G+J2UGvhkEUTOd1qK7ZNI=; b=BrZorQhwVS7ixTFMRCPRiMHUs/JCTVq7lECDmwWotGrxFDzkmLluidAqa+WdPvsKB4 a7YvRK1tdGsrnglIFW4+IJTmu2wxv7VIkUOWMXb8QbmdFQ9O4dxmb9WWpZNDSikO9NXn IEwhKrRPgu7bAi04xFGvur7MhYvb/UhCVND/c8xb8hvc5cgCYMlWvd8hNjg1gfWuj+gn 8Bz1q58o4To208busQDqdWxlgKJUzoYJFCUF61fiepdVH6oNHAg6lgj2Dy5mYNdyrC7j F8iGBlHF/fImlwUrKANCP9df14jDU/rvvcGUEl9oDPRJaVIlQGUiXiiSYqhgb2JbRBW9 gKWw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1775857927; x=1776462727; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=op3SiznnebhzsyfKPX5HR6G+J2UGvhkEUTOd1qK7ZNI=; b=nK5xgIzTSgjwsytCNqRIfEc1YxKj/m+XQv3wciY0zILgTFNnM4nBNakBpbWHmijS5w Y0wKiYBYY4u1JgsMrMVIQwGTDu14aB0wKFQ0Q3JGYKL3kiUooJFTny5WQxvatcRavtvT LpbdVcb1kZbWxIw858GXfxx4/DFaPa6dfnY46xee1S0jybWByA9mAgLcHVhsC/d4oWwI V9WSm9zPM8mlweThNTH/O2YueWXtZDcdFWHImNP3FW/cXOaF/hE8407rThxlvDqcO31j ZD6zrUSsVxHEc33mZWEI4v38VA8nq4TGt+JbGiaMREeM7WNM0v3mrkwHCyBVTOcSaOG4 l6aQ==
X-Gm-Message-State: AOJu0Ywy/bXc1CfI1WpoP6yX+nWscjX+eodGuedAQVNojaCziRDhgm1Y 7IS8kzGnjjv7X2w3kMBG4WBjEdxykAseLRbywzeA2tbtgF7xFfhlubI0rPa+IiIR6RCpezI5lX0 Jg/oBhTGi9/14fJLJSE1krEggpehCjLDeYuoa
X-Gm-Gg: AeBDieuCNmEBbaORDS16WprLrtSLwdXOm3EhebXOQRtGkXG6IU6gTpdbHdTWF9OlHzT itEUvkJBoEkqaYR46Pz8tZ/ndT8mQtO4n4wKyCoTYp5g6MLghi6r8+HDrSxi55+M1en5M0qetM3 Ya8Zs5RIMRP2w05gSeeztZ1OEv6SbglUT1edLFu+vX4phc+rGzK2RcaQXhiavZjaWoe9/vV1xHQ naZ73l3h3L3Bdx+kN3obNmQfk97b1YVmur71LsF7vTWNl7qg9TV9WkmncpEfbFnsX6iYSKvfPp3 g1r4kq9xpKqe0Y5Gb84qGvMjNfVMSmHPqwnFTWNBEuDEw6UFK7KtP/asIw==
X-Received: by 2002:a17:90b:1c09:b0:35b:a9f3:62ee with SMTP id 98e67ed59e1d1-35e4284c7camr5120383a91.27.1775857926646; Fri, 10 Apr 2026 14:52:06 -0700 (PDT)
MIME-Version: 1.0
References: <16CF0FDA-7263-461A-9F2B-D37DBEAF5DD9@sn3rd.com> <25c8d414-e4c8-455b-bd64-28132615ba75@cs.tcd.ie> <68f49a81-dd2c-4bea-896a-87da3e6aff68@tu-dresden.de> <CAMjbhoWwvfkfScpbf4-5PBzk__qb+6M4ZzAOba64kk9aXBba5g@mail.gmail.com> <d47a34ab-7fb9-4687-84aa-a5fa6bcf6a6c@tu-dresden.de> <2971d01a-89e3-43d3-a01d-b9c17b178763@amongbytes.com>
In-Reply-To: <2971d01a-89e3-43d3-a01d-b9c17b178763@amongbytes.com>
From: Rob Sayre <sayrer@gmail.com>
Date: Fri, 10 Apr 2026 14:51:53 -0700
X-Gm-Features: AQROBzD-OAQWZdsNaq6ifdv_HR0vP9-xQMUKikYl03Kjau2XarNZ_rpvrCRH3WQ
Message-ID: <CAChr6SxOsskLV1n=aWxwHakd87=2a6EkzXkwDcN8ZuGpdEg-mg@mail.gmail.com>
To: Kris Kwiatkowski <kris@amongbytes.com>
Content-Type: multipart/alternative; boundary="000000000000e3ae10064f2224e7"
Message-ID-Hash: HJG2AJR7NMURPM4PSGPYPNIMEH3NTI72
X-Message-ID-Hash: HJG2AJR7NMURPM4PSGPYPNIMEH3NTI72
X-MailFrom: sayrer@gmail.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: tls@ietf.org
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] Re: Working Group Last Call for Use of ML-DSA in TLS 1.3
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/16kap1dX29LribwDT8k-C_75K4E>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

On Fri, Apr 10, 2026 at 2:45 PM Kris Kwiatkowski <kris@amongbytes.com>
wrote:

> But hedged signing doesn't make software implementations secure against
> side-channel attacks
>

Hi,

I think that's the source of disagreement. It's whether the hybrid schemes
are better at protecting against side-channel attacks.

thanks,
Rob

v2.46.0 | Report a Bug | By Email | System Status