IETF Logo Mail Archive

[TLS] Re: [EXT] Re: forwarding draft-ietf-tls-mlkem-05 use case

"Blumenthal, Uri - 0553 - MITLL" <uri@ll.mit.edu> Tue, 17 February 2026 17:33 UTC

Return-Path: <prvs=8508c98113=uri@ll.mit.edu>
X-Original-To: tls@mail2.ietf.org
Delivered-To: tls@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 1016FB8E6D9B; Tue, 17 Feb 2026 09:33:55 -0800 (PST)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -4.297
X-Spam-Level:
X-Spam-Status: No, score=-4.297 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=ll.mit.edu
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4Ub9XiGtDlt9; Tue, 17 Feb 2026 09:33:54 -0800 (PST)
Received: from MX2.LL.MIT.EDU (mx2.ll.mit.edu [129.55.12.51]) by mail2.ietf.org (Postfix) with ESMTP id E86B1B8E659D; Tue, 17 Feb 2026 09:32:34 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ll.mit.edu; h=cc : content-type : date : from : in-reply-to : message-id : mime-version : references : subject : to; s=dkim1; bh=0swRGRnmqA2qyL+rWbjuLRo4GP9COTA7852oHPmr2Wc=; b=iAA2RT3DlB6V+pm/9D1eBfThwAPHPDbPUl1KSMgdAR4z/aVBJU3cpT8W1AvvUvBGW8zA 6DxJricAYE7cFxHjuovnlnxbRYBM4Jxxm4vUAq6hdxM3pAHICTZT0J2da+VkarT6YBzl tXQDlDLcareqeKMi6Ug2pbRXf00QIn3Is8OWX1+k632VXfLoHoh3Ob4/wRo2+k5ZwMvk vg07JuD97deF6bX8Jb4/DPSvUxd+noUG3jjpKc65zngnNXk8dT1tl3rO7FGTJ5cJ5xE9 fzAfgsMK00CK3mYcGL0xZISNnsUFshlPBtheiTUGifuUXxGgAcXLWmwuSQNfKkHP5zQm GA==
Received: from LLEX2019-01.mitll.ad.local (llex2019-01.llan.ll.mit.edu [172.25.4.97]) by MX2.LL.MIT.EDU (8.18.1.2/8.18.1.2) with ESMTPS id 61HHWSkP195842 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=FAIL); Tue, 17 Feb 2026 12:32:28 -0500
ARC-Seal: i=1; a=rsa-sha256; s=arcselector5401; d=microsoft.com; cv=none; b=jBY/6JxeGiU/MbzmfQ9oi1B9Vc15pnt66KQLJm++FxnxbD5p49XOc9JlD2T90z+5kPvidzAQJLhKY+z3/Q4SI6yF3BK5vQ2BYYbEkRDjnyE9ol/F2Kpcw7yZGuVqzXqvLcXT2S/Tgo+8iJObxgrhTMeudNB8ZBpW0zG70uNNmkxkDwuL+ljgHW8Qi9TgqZ8pOoGZEGMsJmwENa/zGo3id38GKOsm2rA99IF2ef+KUd9m1kAbKGr4HczWpZPMSOqMG53TjTS7RSC3r2zJY7xfquxTYp+/th8vf5fkx6dh8j9SzrKZxOb/aHXqSXEWZMGuxnJssaOr8A/zjS6BsMVF/w==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector5401; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=NUpooasYXUyBm/dVLc31x+CDK8XvszYOyxY3y6coZY4=; b=B0ao5EyUyQh5xg+Ar2s6tx9NHM0PlqwOYiCT7pwyxpAENxJSo/cRDCQlkCeqOYFzZCzxBFUvfCPaT5x8NUTKvsMw/E6dpHlm+vhxcdQ8NT1kvd2R0bd2yMUP4oGppcvFoPEmRR3RiFFj73Eud3j2O4kImq/720GHfmG5tE2AbNKOj0EuCoVWoPQheK9kb/kCazF1RmZJCb6g5GaroIXvxrqJ4oHakocTvNKfvuWubp+YSI3pGXovT/2S1zwEqQmkAxCPw4sQWq98dK7I7LD19SMw8w36QK1r8SlpZJdFv8lUfSJrJendJJ3Ubt/GMen9s1Ok1yBOL3WLJ5n5+7wrbQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ll.mit.edu; dmarc=pass action=none header.from=ll.mit.edu; dkim=pass header.d=ll.mit.edu; arc=none
From: "Blumenthal, Uri - 0553 - MITLL" <uri@ll.mit.edu>
To: Bas Westerbaan <bas=40cloudflare.com@dmarc.ietf.org>, Paul Wouters <paul=40nohats.ca@dmarc.ietf.org>
Thread-Topic: [EXT] [TLS] Re: forwarding draft-ietf-tls-mlkem-05 use case
Thread-Index: AQHcoDI8+VQ0uydMaEeSz9UxXeXaCbWHJaNn
Date: Tue, 17 Feb 2026 17:32:10 +0000
Message-ID: <BN0P110MB1419C4E86CA5E058EA3F24AB906DA@BN0P110MB1419.NAMP110.PROD.OUTLOOK.COM>
References: <350ec383-ae75-cadf-ab47-41811d5d9cec@nohats.ca> <CAMjbhoXmEispTS10WLi2Q6t2jAgU=Tbh3pLvD=rrb3+b4qowaQ@mail.gmail.com>
In-Reply-To: <CAMjbhoXmEispTS10WLi2Q6t2jAgU=Tbh3pLvD=rrb3+b4qowaQ@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
x-ms-reactions: allow
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: BN0P110MB1419:EE_|PH1P110MB1100:EE_
x-ms-office365-filtering-correlation-id: 0043861b-3452-4159-abe1-08de6e4a810c
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;ARA:13230040|1800799024|366016|6049299003|38070700021|4053099003|8096899003;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:BN0P110MB1419.NAMP110.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(366016)(6049299003)(38070700021)(4053099003)(8096899003);DIR:OUT;SFP:1101;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg="sha256"; boundary="_EE397FE2-66C4-2348-8677-66D45E6EFF8C_"
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: BN0P110MB1419.NAMP110.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-Network-Message-Id: 0043861b-3452-4159-abe1-08de6e4a810c
X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Feb 2026 17:32:20.4442 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 83d1efe3-698e-4819-911b-0a8fbe79d01c
X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH1P110MB1100
X-Proofpoint-ORIG-GUID: 9rL8yg7kg2G_wDlzHIpEMYt_cr8RkvDX
X-Proofpoint-Spam-Details-Enc: AW1haW4tMjYwMjE3MDE0MSBTYWx0ZWRfXwBGIm9OFCtz4 J0XntgqnSicTd/z7IovXE8gH+02VLpK4HUKkA0F5Rk2BxOd0VS4S1rIw0ybNgKed3FNkO+E/Orn 60dFQObvWL2o2rG9Xaova06oUVH6LQMBnjBPDR3HIzqCPIoDnPU1XPlkt8dKqUck5WXxa8WzHf4 F3IMt7fM4qI7voIHOXQeCqe5h94tMIvT90JuyfBgkpdf8bjhEGz7jyxF+OfqbEnMWxrM5kLoYpB SG+sbTFnl8lgdt4bjGysj8uBYuSjwrIP1JmixSrfcAn7EANsUm5w==
X-Proofpoint-GUID: 9rL8yg7kg2G_wDlzHIpEMYt_cr8RkvDX
X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.293,Aquarius:18.0.1121,Hydra:6.1.51,FMLib:17.12.100.49 definitions=2026-02-17_02,2026-02-16_04,2025-10-01_01
X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 adultscore=0 mlxlogscore=999 phishscore=0 malwarescore=0 mlxscore=0 spamscore=0 suspectscore=0 bulkscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2602130000 definitions=main-2602170141
Message-ID-Hash: CE2OU64DYSPYPAYYMSNUO5UYKDZEMLUH
X-Message-ID-Hash: CE2OU64DYSPYPAYYMSNUO5UYKDZEMLUH
X-MailFrom: prvs=8508c98113=uri@ll.mit.edu
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: "tls@ietf.org" <tls@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] Re: [EXT] Re: forwarding draft-ietf-tls-mlkem-05 use case
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/7NEPEdkYlmqUECncqfBhBv8UkSQ>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

> I encourage them to try it out. In many use cases hybrid PQ TLS 1.3 outperforms non-PQ TLS 1.2.


For several users, this is not a matter of performance [between “pure” and “hybrid” PQ].


>> There is a use case for MLKEM in the market of high-frequency
>> trading. Apparently there were complaints from those users (eg
>> traders) in the past about the performane impact of migrating
>> to TLS 1.2. If there is a performance drop with TLS 1.3 with an
>> MLKEM hybrid, then migration to PQ (or TLS 1.3) would stall. If
>> they can offer a (even tiny) performance gain of TLS 1.3 MLKEM
>> over TLS 1.2 ECDHE, then this individual would have a strong
>> case to deploy PQ security. Otherwise, the traders will insist
>> on waiting until a CRQC is publicly known to exist.
>
> The individual stated they are in favour of adoption the pure mlkem
> document along with the hybrid document so people can pick either,
> depending in their use cases.


I personally fully support this position.

v2.46.0 | Report a Bug | By Email | System Status