[TLS] wkech draft implementation

Stephen Farrell <stephen.farrell@cs.tcd.ie> Wed, 30 September 2026 16:23 UTC

Received: from DB3PR0202CU003.outbound.protection.outlook.com (mail-northeuropeazlp170100001.outbound.protection.outlook.com [IPv6:2a01:111:f403:c200::1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange secp256r1 server-signature ECDSA (prime256v1) server-digest SHA256) (No client certificate requested) by mx.ietf.org (Postfix) with ESMTPS id 9C5B34B for <tls@ietf.org>; Wed, 30 Sep 2026 16:23:08 +0000 (UTC)
Authentication-Results: mx.ietf.org; dkim=pass header.d=cs.tcd.ie header.s=selector1 header.b=PZzTDEl7; dmarc=pass (policy=quarantine) header.from=cs.tcd.ie; arc=pass ("microsoft.com:s=arcselector10001:i=1"); spf=pass (mx.ietf.org: domain of stephen.farrell@cs.tcd.ie designates 2a01:111:f403:c200::1 as permitted sender) smtp.mailfrom=stephen.farrell@cs.tcd.ie
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=UvdOV5qdtRmFBJk9Capked48Thz57Q2V8pXQPntGO7DVFqeC1bAfKRADfsG8JMEI8x72ckiBLzQEDfgNHQbSVUm7eU4QHo6VxUB+ETdKWUb1WEBbZlPXAEaW6P8RmuqZUyD9Hr3s2FUDvGA2KAaVutr5UC8/UYTMJLSr76OY9T7S/q6HQLHSObRwFFlPn2k4lDKsN/5RrrDxpGtd3sZEK4wkNh6X/DhVKZixwErZItfMqQf//3hctc4SMy00KbFKQ2OFnumbOpXgChrfqBN03uzDtHH9OLT2BYCSpPKEDg1hnAjLDPqQsNOOajF+lLQw86NdF60/QUomjJVNAZkteQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=cy0AT1Vwwm+dGlUeLhNwOS64m1IKLxI7QxXDcjQEI9Q=; b=xKRwFEsIS+L16+bk29m+i7I4oZBeZwolYJILfpnwdc8RGn8KXTMSdhK2G4I6u56jxboyoB9PO6arA6L8X7gi4/Qktos4emYN/NJBsl2rSkgyRPMh0DhLhCZCcL6NVO0KExAKjtboIGUQb4GepVEHtjlSl/aIMAr5NdTyJPWUjSsdINx5w3ZpJxAHKnyUFOjvMi3V4YgeEGnkEcS93k4sdorLDVWGazF7fgxDaKuRcQubdtFFFVFW7mJ0EXkm/WX6urHHqRMAc7p5p1jvTxF9X3QAXx9yEFlJD30NyqfYzKMjMsPBd7oKmSy0e1iHtMl5niD95MzNfHRe9JwycZ4Iew==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cs.tcd.ie; dmarc=pass action=none header.from=cs.tcd.ie; dkim=pass header.d=cs.tcd.ie; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cs.tcd.ie; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=cy0AT1Vwwm+dGlUeLhNwOS64m1IKLxI7QxXDcjQEI9Q=; b=PZzTDEl7rpc5NiRpQmpFz7YD46C9ZN263W1Xzwp9RL0VR9L6ffmFWwVGiM+vuIQP+a3MOmoL1b2zMEzZsVHgIcrY+im/1bEmvSpdufZGwmTKW+I9APDj0Au/X77tOYQTC8RQp5BwuUCWvuhuYBn33BB0aBEu6RSGkQDPNW18F186QJNDGNi07Xn7QzBIm7aYPnlk7a0CuVj3RFVBZ1QPbHGYdsBmCoRRzQtwkXVlKVBB/SIuW56ttfNkxtgmhptVi7LQwk9zkl8uuEoT5YmnRWVvHUrX2uC6k4DECBSmFM2QlZt9z44YvSG6hWFwWbounTZPL9fwv2DV4Cfqr2Irnw==
Received: from PA6PR02MB10897.eurprd02.prod.outlook.com (2603:10a6:102:3ce::12) by GV2PR02MB11707.eurprd02.prod.outlook.com (2603:10a6:150:307::23) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.451.25; Wed, 30 Sep 2026 16:23:05 +0000
Received: from PA6PR02MB10897.eurprd02.prod.outlook.com ([fe80::9e50:19d4:712e:7e0e]) by PA6PR02MB10897.eurprd02.prod.outlook.com ([fe80::9e50:19d4:712e:7e0e%4]) with mapi id 15.21.0472.015; Wed, 30 Sep 2026 16:23:05 +0000
Message-ID: <393b339c-42c5-472e-873c-4b2353aaa8a9@cs.tcd.ie>
Date: Wed, 30 Sep 2026 17:23:04 +0100
User-Agent: Mozilla Thunderbird
Content-Language: en-US, en-GB
To: "tls@ietf.org" <tls@ietf.org>
From: Stephen Farrell <stephen.farrell@cs.tcd.ie>
Autocrypt: addr=stephen.farrell@cs.tcd.ie; keydata= xjMEY9GzphYJKwYBBAHaRw8BAQdAo6JvjmSbxHdQWPZdvciQYsHhM1NxQBU398Mmimoy4p7N M1N0ZXBoZW4gRmFycmVsbCAoMjU1MTkpIDxzdGVwaGVuLmZhcnJlbGxAY3MudGNkLmllPsKQ BBMWCAA4FiEEMG54R8tZDyZFrDOn5Njp+ZeoM90FAmPRs6YCGwMFCwkIBwIGFQoJCAsCBBYC AwECHgECF4AACgkQ5Njp+ZeoM93bogEA25ElRyX0wwg+kGEN1AoL60MoZfvQZ/VtmXY6IC5j +csBAIBpkL5ySuzJK2zLNZn9qQGht8IaUcA7cvDcLvS2uHUEzjgEY9GzphIKKwYBBAGXVQEF AQEHQILCPWOwW36e8D3pY8GmvvtItIT+A5uV80ist+WokVsQAwEIB8J4BBgWCAAgFiEEMG54 R8tZDyZFrDOn5Njp+ZeoM90FAmPRs6YCGwwACgkQ5Njp+ZeoM92bcAEA8R+8cpqRUIS+SoAN iO05xE6O/wEx8/e88BqzAYki3SoBAOQdwiPX+MQrAxkWD8xxOsdMOAtxYKpkD1n8aPJUw6QJ
Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="------------frSpAzM0EcBhxCyO8995W7Uh"
X-ClientProxiedBy: DB9PR02CA0028.eurprd02.prod.outlook.com (2603:10a6:10:1d9::33) To PA6PR02MB10897.eurprd02.prod.outlook.com (2603:10a6:102:3ce::12)
MIME-Version: 1.0
X-MS-Exchange-MessageSentRepresentingType: 1
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: PA6PR02MB10897:EE_|GV2PR02MB11707:EE_
X-MS-Office365-Filtering-Correlation-Id: f14f24b3-1154-40b1-ca2d-08df1f0f1b3c
X-MS-Exchange-SharedMailbox-RoutingAgent-Processed: True
X-TCD-Routed-via-EOP: Routed via EOP
X-TCD-ROUTED: Passed-Transport-Routing-Rules
X-MS-Exchange-SenderADCheck: 1
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam: BCL:0;ARA:13230040|376014|23010399003|19092799006|1800799024|10070799003|786006|366016|10067099003|11063799006|5023799004|56012099006|18002099003|4133799003|6133799003;
X-Microsoft-Antispam-Message-Info: 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
X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:PA6PR02MB10897.eurprd02.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(376014)(23010399003)(19092799006)(1800799024)(10070799003)(786006)(366016)(10067099003)(11063799006)(5023799004)(56012099006)(18002099003)(4133799003)(6133799003);DIR:OUT;SFP:1102;
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 2
X-MS-Exchange-AntiSpam-MessageData-0: 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
X-MS-Exchange-AntiSpam-MessageData-1: 8ofD27OL1Rjybw==
X-OriginatorOrg: cs.tcd.ie
X-MS-Exchange-CrossTenant-Network-Message-Id: f14f24b3-1154-40b1-ca2d-08df1f0f1b3c
X-MS-Exchange-CrossTenant-AuthSource: PA6PR02MB10897.eurprd02.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 30 Sep 2026 16:23:05.4416 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: d595be8d-b306-45f4-8064-9e5b82fbe52b
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: YMVK0MKV6JbO02mS5YPlIZI4vTtimi5wmrdvFdsx7YCJUrTZvqOvet5hOBiqniL1
X-MS-Exchange-Transport-CrossTenantHeadersStamped: GV2PR02MB11707
X-Spamd-Bar: ---
Message-ID-Hash: A42CXNQGTK6OY2Z5YPZOJJN7Z7YUF2E2
X-Message-ID-Hash: A42CXNQGTK6OY2Z5YPZOJJN7Z7YUF2E2
X-MailFrom: stephen.farrell@cs.tcd.ie
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; header-match-tls.ietf.org-0; header-match-tls.ietf.org-1; header-match-tls.ietf.org-2; header-match-tls.ietf.org-3; header-match-tls.ietf.org-4; header-match-tls.ietf.org-5; header-match-tls.ietf.org-6; header-match-tls.ietf.org-7; header-match-tls.ietf.org-8; emergency; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.10
Precedence: list
Subject: [TLS] wkech draft implementation
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/7olAwLegaV-9Gbhlh_eww8sB4G4>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

Hiya,

We did a WGLC for this draft [1] about a year ago and then
(as planned) parked it in the 'waiting for implementation'
state (which is all fine).

I had an implementation then, but so far I'm unaware
of any others so I guess the current state is that this
one will stay parked if nothing changes.

Meanwhile, I've to do a bit of work on my implementation
in the next month, so if someone else has or wants to
implement this, be great if you ping me off-list (or on
the list I guess - I don't see this generating a flood
of messages:-)

I guess if no other implementations show up, then we
should discuss what to do with the draft, maybe at or
around IETF-127? (I'm fine if we leave that to the new
year either if the agenda for 127 is full.)

Cheers,
S.

[1] https://datatracker.ietf.org/doc/draft-ietf-tls-wkech/