From: ma bing <bingmatv@outlook.com>
To: "tls@ietf.org" <tls@ietf.org>
Thread-Topic: Concerns about the current draft.
Thread-Index: AQHcATD03sWs2BJdtE+pJgVO7rWscg==
Message-ID: 
 <PH0PR07MB9683AED41B66451E26CBC84AD024A@PH0PR07MB9683.namprd07.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 
 =?iso-8859-1?Q?+4POO/hyTV/VzC3A/4tYlHviXAyqnVXEPWHDC4BHAHaN13Flhj2lrCF3h5?=
 =?iso-8859-1?Q?Bxl8S2wSt6S9auqbo58/X49NpS5+KG++WYwlhIki0gvuZGsCOIQezUOgxz?=
 =?iso-8859-1?Q?KcwhI3YPdnHoMJTmjkCct63kve3VhDrmY00cukH7mE7hH8HcM0J2MUYsVR?=
 =?iso-8859-1?Q?BnEKOYFD0/tk5njk4jI+v+JPtVW18wGYTCigcpwfthu/tyWmtb5CnvqcmH?=
 =?iso-8859-1?Q?2G/5Vw9DB/W1I15hcwVp4umOqtpRfUuuRog1hpQRHNlzoLTbS8JGoB+sSz?=
 =?iso-8859-1?Q?v8H7XJQqKLD8yZksfyslEhIqNokfKT5BAwwgZgQZRaXuJU/r3kD9dsOSc7?=
 =?iso-8859-1?Q?/i4ZZNgcu1riMKB5xkp1FbVuM8TIapNI5dLb4/QYw9gLADTM/KZ8K03m1f?=
 =?iso-8859-1?Q?65ny3LYMNPu47KL6QpY9NqX5jeFC4bgP8eZtYLnLgQsO33M3qHJ81FzRQ9?=
 =?iso-8859-1?Q?nvc1iI0DfRHasiBSwcTcB96w2tEYydtlF5bMgwsPkRIDq9IEIUz7N+UpZk?=
 =?iso-8859-1?Q?YNnpx7cpa0X/C4Qdyff6BK+8zI5Z+wWFBz1c8brtIHGDajK0BiJIL9zlg9?=
 =?iso-8859-1?Q?jjr2+0HhDB5y13ORaShGlP9AMZRPDyH1CPoRjl1Ov70pgEOe1xJoL1oOv6?=
 =?iso-8859-1?Q?Fu9Ttb9GnMk8oQ5jL26lLvY6cAWEx+Bw9/U4e3wTLN/Ro0Xyyqat7cFvdf?=
 =?iso-8859-1?Q?HeQCa04raK7MtejXJ2D6Y7CgN1DzPy/RoM/rHamCd6GW4Wp6BcXMPOWEUj?=
 =?iso-8859-1?Q?hRldJaJownyFTFpLaXWrJhmQzZtLUa3FbqzuztsLBME2O2RYBLN6J1eKDF?=
 =?iso-8859-1?Q?ebbEHB4bvorsln2ZdOa+Gnu2pFSa5kLkZK5NyQNNgaD2ts6p3kcNJTzLHO?=
 =?iso-8859-1?Q?co2ATeVUmxnbfvWS7WLmHsr1NuopFjO1+6MU2mOZLxtx9bOuzTzar3tUaN?=
 =?iso-8859-1?Q?RvaHQoyuF/g05ekEJZ/c6Np+ASf6qxxSKPki966CQYNfnDDc+3/JCK0wpf?=
 =?iso-8859-1?Q?NV8z9G77/z2LOduUpg/5SN3IGRIMyho9tSs+lGcKQlIqRiVgfG6mRNbi4T?=
 =?iso-8859-1?Q?mkAceg5pN1i97uON88A+9X01bP1Ru3CZN6REHrsj4U7AFjW2EQKgFECUyU?=
 =?iso-8859-1?Q?PoRxOInmLWX0Xnyp7tv5/Z3SdH7FsGi25emjIEWYkrz2hT0wGiHAN8GJlW?=
 =?iso-8859-1?Q?TKRJ66KS7w131aLkivio7v/RE/QepfDkLYgo5DmPhCavRU+T9AnJEexTYT?=
 =?iso-8859-1?Q?L5CYNcPQ2+cSP5KLkg8w=3D=3D?=
Content-Type: multipart/alternative;
	boundary="_000_PH0PR07MB9683AED41B66451E26CBC84AD024APH0PR07MB9683namp_"
MIME-Version: 1.0
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: PH0PR07MB9683.namprd07.prod.outlook.com
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 
 00000000-0000-0000-0000-000000000000
X-MS-Exchange-CrossTenant-Network-Message-Id: 
 1e7225c1-d7d8-40f0-8733-08ddcf49e1e4
X-MS-Exchange-CrossTenant-originalarrivaltime: 30 Jul 2025 09:17:18.5744
 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 
 00000000-0000-0000-0000-000000000000
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SA1PR07MB9085
X-MailFrom: bingmatv@outlook.com
X-Mailman-Rule-Hits: nonmember-moderation
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency;
 loop; banned-address; member-moderation; header-match-tls.ietf.org-0
Message-ID-Hash: 6HYDEWY6L7SCROSNVSYRJ26ZXXQFKNGX
X-Message-ID-Hash: 6HYDEWY6L7SCROSNVSYRJ26ZXXQFKNGX
X-Mailman-Approved-At: Sun, 24 Aug 2025 13:35:20 -0700
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: =?utf-8?q?=5BTLS=5D_Concerns_about_the_current_draft=2E?=
List-Id: "This is the mailing list for the Transport Layer Security working
 group of the IETF." <tls.ietf.org>
Archived-At: 
 <https://mailarchive.ietf.org/arch/msg/tls/5oxsGvvCu6HsWipRiLwCCPG4dlk>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>
Date: Wed, 30 Jul 2025 09:19:44 
X-Original-Date: Wed, 30 Jul 2025 09:17:18 +0000

--_000_PH0PR07MB9683AED41B66451E26CBC84AD024APH0PR07MB9683namp_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Some websites including Google is using the experimental ECC+Kyber hybrid s=
olution, but Google and others  still use AES-128, quantum computer can wea=
ken 128-bit symmetric encryption to 64-bit security, it's the 1st concern. =
So the draft should only use AES-256. And NSA suggests 1024-dimensional MLK=
EM, the 2nd concern is that Google and others use MLKEM768. The 3rd concern=
 is that the draft uses ECC in addition to Kyber. NIST has approved HQC (Ha=
mming Quasi-Cyclic) in addition to the already approved ciphers, I suggest =
to switch from ECC+Kyber to HQC+Kyber; Since ECC is vulnerable to quantum c=
omputer, using ECC+Kyber is likely a false positive, so I think HQC+Kyber i=
s better. In conclusion, I think there are 3 concerns.

--_000_PH0PR07MB9683AED41B66451E26CBC84AD024APH0PR07MB9683namp_
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-=
1">
</head>
<body>
<div>Some websites including Google is using the experimental ECC+Kyber hyb=
rid solution, but Google and others&nbsp; still use AES-128, quantum comput=
er can weaken 128-bit symmetric encryption to 64-bit security, it's the 1st=
 concern. So the draft should only use
 AES-256. And NSA suggests 1024-dimensional MLKEM, the 2nd concern is that =
Google and others use MLKEM768. The 3rd concern is that the draft uses ECC =
in addition to Kyber. NIST has approved HQC (Hamming Quasi-Cyclic) in addit=
ion to the already approved ciphers,
 I suggest to switch from ECC+Kyber to HQC+Kyber; Since ECC is vulnerable t=
o quantum computer, using ECC+Kyber is likely a false positive, so I think =
HQC+Kyber is better. In conclusion, I think there are 3 concerns.</div>
</body>
</html>

--_000_PH0PR07MB9683AED41B66451E26CBC84AD024APH0PR07MB9683namp_--