Return-Path: X-Original-To: tls@mail2.ietf.org Delivered-To: tls@mail2.ietf.org Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id B6442BFF623A for ; Fri, 27 Feb 2026 14:21:04 -0800 (PST) X-Virus-Scanned: amavisd-new at ietf.org X-Spam-Flag: NO X-Spam-Score: -2.098 X-Spam-Level: X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (1024-bit key) header.d=uni-wuppertal.de Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IpJMqxnc61Po for ; Fri, 27 Feb 2026 14:21:01 -0800 (PST) Received: from smtpout3.uni-wuppertal.de (smtpout3.uni-wuppertal.de [132.195.64.73]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 9F5C1BFF51E2 for ; Fri, 27 Feb 2026 14:20:00 -0800 (PST) Received: from smtpout-intern.uni-wuppertal.de (smtpout-intern.uni-wuppertal.de [132.195.64.33]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by smtpout3.uni-wuppertal.de (Postfix) with ESMTPS id 0EC9F17DE70 for ; Fri, 27 Feb 2026 23:19:52 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=uni-wuppertal.de; s=mail; t=1772230792; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=tdO+Df8L6NvkHjKQUogGO1z6MnmjnU8y6M01gkJ+ExA=; b=Cw2XpuOpX9FjMe3s7b6vXYsRr8PwnlsbvPLLjBMsNqnIjhB9dL523/p66n0bLAePgRbzaw 8PlfU70myr0/YK+qmydhlKx2cilWXRX9i6i0bx+/vOEVK5n9mNb3dx9eBPWpz8Tm4hL56X ELqWzODHN/gMleMlKUdwQ5QZXalBEPw= Received: from mail.uni-wuppertal.de (mail.uni-wuppertal.de [IPv6:2001:638:50a:64::3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (No client certificate requested) by smtpout-intern.uni-wuppertal.de (Postfix) with ESMTPS id 082AB9F4C3 for ; Fri, 27 Feb 2026 23:19:51 +0100 (CET) Received: from smtpclient.apple (p200300c0cf22870044581d224e65eafb.dip0.t-ipconnect.de [IPv6:2003:c0:cf22:8700:4458:1d22:4e65:eafb]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mail.uni-wuppertal.de (Postfix) with ESMTPSA id DA75C1A1A for ; Fri, 27 Feb 2026 23:19:51 +0100 (CET) Content-Type: multipart/signed; boundary=Apple-Mail-C6CB6AAC-DB51-4B1E-B7F6-183CBF18C916; protocol="application/pkcs7-signature"; micalg=sha-256 Content-Transfer-Encoding: 7bit From: Tibor Jager Mime-Version: 1.0 (1.0) Date: Fri, 27 Feb 2026 23:19:41 +0100 Message-Id: <05529422-A5E7-4C0E-B7DF-9C6A98923035@uni-wuppertal.de> References: In-Reply-To: To: tls@ietf.org X-Mailer: iPhone Mail (23D127) X-Spamd-Result: default: False [-0.20 / 100.00]; MIME_GOOD(-0.20)[multipart/signed,text/plain]; SENDER_FROM_WHITELIST_DOMAIN(0.00)[uni-wuppertal.de]; MIME_TRACE(0.00)[0:+,1:+,2:~]; DKIM_SIGNED(0.00)[uni-wuppertal.de:s=mail]; ARC_NA(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; LOCAL_OUTBOUND(0.00)[]; FROM_HAS_DN(0.00)[] X-Rspamd-Pre-Result: action=no action; module=multimap; Matched map: SENDER_FROM_WHITELIST_DOMAIN Message-ID-Hash: NTG6GELNSMPWJ6BNTBRIZFLBKFN4EKNC X-Message-ID-Hash: NTG6GELNSMPWJ6BNTBRIZFLBKFN4EKNC X-MailFrom: jager@uni-wuppertal.de X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header X-Mailman-Version: 3.3.9rc6 Precedence: list Subject: =?utf-8?q?=5BTLS=5D_Re=3A_WG_Last_Call=3A_draft-ietf-tls-mlkem-05_=28Ends_20?= =?utf-8?q?26-02-27=29?= List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." Archived-At: List-Archive: List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: --Apple-Mail-C6CB6AAC-DB51-4B1E-B7F6-183CBF18C916 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable > Am 27.02.2026 um 21:16 schrieb Ilari Liusvaara := > - There does not seem to be any evidence that ML-KEM is weak. I think > that if ML-KEM gets badly broken, it will be for unforeseeable reasons > (which is a risk for any cryptographic algorithm, including prime- > field ECC). Except that for a hybrid mode, both ML-KEM and ECC must be broken simultaneo= usly.=20 I think it is unwise to rely *only* on ML-KEM (or any other scheme based on r= elatively new hardness assumptions), and currently do not support any draft t= hat does not use hybrid cryptography. In particular when the use of hybrid c= rypto comes with negligible overhead, as for ML-KEM + ECC.=20 For almost every broken cryptosystem there was a time when there seemed to b= e no evidence that it is weak. ML-KEM still needs to stand the test of time.= =20 Best regards, Tibor --Apple-Mail-C6CB6AAC-DB51-4B1E-B7F6-183CBF18C916 Content-Type: application/pkcs7-signature; name=smime.p7s Content-Disposition: attachment; filename=smime.p7s Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCCBsIw gga+MIIFJqADAgECAhApVWGENm4+ac8unSuMFO0IMA0GCSqGSIb3DQEBCwUAMGMxCzAJBgNVBAYT AkdSMTcwNQYDVQQKDC5IZWxsZW5pYyBBY2FkZW1pYyBhbmQgUmVzZWFyY2ggSW5zdGl0dXRpb25z IENBMRswGQYDVQQDDBJHRUFOVCBTL01JTUUgUlNBIDEwHhcNMjYwMTA2MDk1NjE2WhcNMjgwMTA2 MDk1NjE2WjCBxjELMAkGA1UEBhMCREUxHDAaBgNVBAgME05vcmRyaGVpbi1XZXN0ZmFsZW4xKTAn BgNVBAoMIEJlcmdpc2NoZSBVbml2ZXJzaXRhZXQgV3VwcGVydGFsMREwDwYDVQRhDAhHT1ZERStO VzEOMAwGA1UEBAwFSmFnZXIxDjAMBgNVBCoMBVRpYm9yMRQwEgYDVQQDDAtUaWJvciBKYWdlcjEl MCMGCSqGSIb3DQEJARYWamFnZXJAdW5pLXd1cHBlcnRhbC5kZTCCAiIwDQYJKoZIhvcNAQEBBQAD ggIPADCCAgoCggIBAIQKiLrFCbwGFDsuwSo0CBb8wDV36om+GvtIvHo30UhEfm0y4HGbqK3ddnPn V47H0575/6ChVQPyA7ESE8J4Fwz7ThTFuF0mL183o1p0QWu+9yQItCjiiyLEcOcM/ABfpPqAE08+ WTJxqMHnxqFJbyGcEpi92KQUjMy0CGyz5XA8OFp7xI3EPYlKLJ24t0Lf+fuWliF91VHo3ytQ/jw5 81A8gBa6WaxoDmj/hymnanwwBLI2xZQokZO1xJl2q/T8KNMa+RTT/LK/qUXj/u06OEVwotttG8Tk PPXhueNjF+0cVmzmKLqvxmcNID9eriEFz8LMTMAmcBTJDfAzzxkqLO5fRXsZoBCUxasFa9ASTrjk mwJ20mXwUM5pfTmZKivSQJMNzB+c51uoS0R4IdfjXpdUpeQdSqWMUgLYPvai5kKl4d6cYhjE4+Zq o1gSgXPI6pBhzDPD28B3HZkKWMOiUGlCUYP2Xl3RXo0fpU9xnjw7eoOTQqUkq6c91INHTxc8Cyzl elTPh/05G/BQR5X90L/4K8H6tbYKHC2vUoFiDOvGc2LvBro4M04Kro4M6JdRYa9Xq9YGJjl2qW4m xNTzX9eajbDKyo5oqWZHcIg5ksN2cBBAkZ6rzlrc5IzEs0ktJt6cj2Hte4PLNEuTk2LFOo+wDrwW ZbIzDO2iC2aA0qGbAgMBAAGjggGIMIIBhDAfBgNVHSMEGDAWgBTrsi87/a4CzCpEBl0lzR0SImiw RzBKBggrBgEFBQcBAQQ+MDwwOgYIKwYBBQUHMAKGLmh0dHA6Ly9jcnQuaGFyaWNhLmdyL0hBUklD QS1HRUFOVC1TTUlNRS1SMS5jZXIwIQYDVR0RBBowGIEWamFnZXJAdW5pLXd1cHBlcnRhbC5kZTBj BgNVHSAEXDBaMAkGB2eBDAEFAwIwCAYGBACPegEDMEMGDSsGAQQBgc8RAQECBAIwMjAwBggrBgEF BQcCARYkaHR0cHM6Ly9yZXBvLmhhcmljYS5nci9kb2N1bWVudHMvQ1BTMB0GA1UdJQQWMBQGCCsG AQUFBwMCBggrBgEFBQcDBDA/BgNVHR8EODA2MDSgMqAwhi5odHRwOi8vY3JsLmhhcmljYS5nci9I QVJJQ0EtR0VBTlQtU01JTUUtUjEuY3JsMB0GA1UdDgQWBBRnX3bx7IVCgIVuqu0u029qrEZpTzAO BgNVHQ8BAf8EBAMCBaAwDQYJKoZIhvcNAQELBQADggGBAFe9ws8olRCaLPlEn+B2mju7hqgHrVNn j3oaDuBloBABA9goh3gnUQt07KS3aJLw4d6QUNemxBqGTXJ2GrOSXbJPhAZMF4ireqDXRUOJV3Qx A1XMK6rc/KZO45lmkNLDGGzp5eRSKYdT9kSUH1j4oIjY/+NXi9hS/ZZn03oC+H4KkxPbjBEeUvcW oAD1enJmFSMEsLN08H2yeglYbYn6XOQ1AsxbR9rfhxJ2G4IbOMLGk+QwppwhhFpHsHx3CcfD2YrA LlWYDIfKKKGYlrU1MkpknmxpfamnBqch080hc5IyfzbK5OE3QJvSpZXrmBqi2fC8Vm07EDThgbG1 sfyyKmt3+rsXLG1x6YtxfLjhXXi1a1/C+ZpTy1KYmuNrai0SAdaGXh0ihNwEdqeIbjnJHK5ZLoQg S4oymCH3DnR1BLrBvjDU5WwPsRsgPIXMHlDO1aTtu9qI2R1AMVRqtWZOHO4Zhm1AP667D3t9v2Y9 mv5gkUCWcJ0epvzXSOqUxLTVmzGCBCMwggQfAgEBMHcwYzELMAkGA1UEBhMCR1IxNzA1BgNVBAoM LkhlbGxlbmljIEFjYWRlbWljIGFuZCBSZXNlYXJjaCBJbnN0aXR1dGlvbnMgQ0ExGzAZBgNVBAMM EkdFQU5UIFMvTUlNRSBSU0EgMQIQKVVhhDZuPmnPLp0rjBTtCDANBglghkgBZQMEAgEFAKCCAX0w GAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMjYwMjI3MjIxOTQxWjAv BgkqhkiG9w0BCQQxIgQg7yy0wp+KHIL9w/1eKB0NYU1smRBPD7AjwT8MXhWaQOgwgYYGCSsGAQQB gjcQBDF5MHcwYzELMAkGA1UEBhMCR1IxNzA1BgNVBAoMLkhlbGxlbmljIEFjYWRlbWljIGFuZCBS ZXNlYXJjaCBJbnN0aXR1dGlvbnMgQ0ExGzAZBgNVBAMMEkdFQU5UIFMvTUlNRSBSU0EgMQIQKVVh hDZuPmnPLp0rjBTtCDCBiAYLKoZIhvcNAQkQAgsxeaB3MGMxCzAJBgNVBAYTAkdSMTcwNQYDVQQK DC5IZWxsZW5pYyBBY2FkZW1pYyBhbmQgUmVzZWFyY2ggSW5zdGl0dXRpb25zIENBMRswGQYDVQQD DBJHRUFOVCBTL01JTUUgUlNBIDECEClVYYQ2bj5pzy6dK4wU7QgwDQYJKoZIhvcNAQELBQAEggIA GyssEykxXxwf3TdD2R0nmHPRgfF0mw5HPWO+TX3uzQ+LEPDo1L/NbYeQss9auKnKmlwuwHaAWSqD EtF7vrU/7vTnTIgYOZ7ANhMXna98hVTA/Xa0nLC7kqSZxET3egdZIXM2W6flqj+xyif9eBMHxuq8 EvQdwItQ9FDvf/o60r7TcKSnB+EzBJ50e6F+iaR3WYPX/04PuvkiWiH3zb3DF3V5vOoY5vb81dW5 RJf9uEbkMs8b95+sW1szWMpw1cVWrMy88GvhyOW56vNAfk/L0bBlzSRoNHU2TLq6hXY+1415063O GvmTbNxkabE/Zbq3JeuRWKcPWgoo++suF8eWXtwyHnXbuhYO0gJSQov2+mLN8TWiIJyCc71+NEvV 0N08HW0gaNmN5A2oVtJT1imBagqJvwPXRAU9nxkO8054hRw9NYV1aj7XBjkgfKVMgWNNKFqBYe/6 5afx7/eu0hM+lr1+A+IHOX1dZ1byXKbQMuhREnyIJ6sHxlotqLofxjSrfK732MJLx21Wc3tBmUkN 3PfUcvqaLb08c6+1Y4qQ9QK8aI2888ETJKlomM76HrlbsdFbWGhKSVNau6yb+E8JxFam9CCm/FlC tsn3b0BIah0sLFDFIB11mY9Ob7jO+eMaSwf8rauLL5ZpH2QCDwKY0Tdcw8EDChX04liNY5iLo80A AAAAAAA= --Apple-Mail-C6CB6AAC-DB51-4B1E-B7F6-183CBF18C916--