IETF Logo Mail Archive

[TLS] Re: [EXT] Re: WG Adoption Call for ML-KEM Post-Quantum Key Agreement for TLS 1.3

"Blumenthal, Uri - 0553 - MITLL" <uri@ll.mit.edu> Thu, 17 April 2025 17:23 UTC

Return-Path: <prvs=820212e46d=uri@ll.mit.edu>
X-Original-To: tls@mail2.ietf.org
Delivered-To: tls@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 851B81DB7A17 for <tls@mail2.ietf.org>; Thu, 17 Apr 2025 10:23:32 -0700 (PDT)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -4.197
X-Spam-Level:
X-Spam-Status: No, score=-4.197 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id StsMsjGgQStf for <tls@mail2.ietf.org>; Thu, 17 Apr 2025 10:23:32 -0700 (PDT)
Received: from MX2.LL.MIT.EDU (mx2.ll.mit.edu [129.55.12.51]) by mail2.ietf.org (Postfix) with ESMTP id F1C261DB7A0A for <tls@ietf.org>; Thu, 17 Apr 2025 10:23:31 -0700 (PDT)
Received: from LLEX2019-02.mitll.ad.local ([172.25.4.98]) by MX2.LL.MIT.EDU (8.18.1.2/8.18.1.2) with ESMTPS id 53HHKYh4226976 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=FAIL); Thu, 17 Apr 2025 13:20:34 -0400
ARC-Seal: i=1; a=rsa-sha256; s=arcselector5401; d=microsoft.com; cv=none; b=mPew097kc4k9mlBI1fZ5N25OYBt1buHCWde9nyuH3K53RCrJKy1ay9a49a9RvfJ+CSv06iWZWOyJu/Tnt+KfmPPADakYln11tnK57C9nkRaT/7dwZCbYyCJTaou4Vutv9C9z3IT2QatNIoStQ3XD+LYHfAsGgfEaTGU1ax7y/9j8bdL+jTRMXfHxvIeKj9ieAaf7+RT1I4htRYfd75jwQGc8xgfQEMLRWcpp7/jFudvKVzW3AaoC3Xr2BfzE9VGrQWWO0/sBvQuMl2JfWCFEJuNqoJC4k9KqPve/miJCJ5A5S3fVjUpz7QYqGJLSlprgLo4zJNEGBdY7T59AsuXgmQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector5401; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=U3ykjJjhRAOmI88dWmKacE9t02FHMtD4zBXHg/wT1rc=; b=vzVTgTXfUge1ivRrlJq7Lp0AnuiZuaRiqqhrbxeuRN/pYXPdr8k8OcxciJR+CrCbJurQKcTpiaDLsMi5/J+tQ8uQejLBuIJjsxpAvbDuItnw9dzPQ+KLEj2yB4z4W2Pr27PllAznb9vxdqV5x7Dkqt8SQn3+jJSmZI5r3/O6kZKRGaRAX567X8gkdEC9cvEEWDQH59nukUUWKVTf+jmvSBBb+N3MsZChQSpZHC70LRSzmDj55sz69ypwcFkjBHuwanMM0oziYrp0KVN0OEf6VX2RBM760XHcCY99DRVFGgbAnkWILNlfppCaguGG/MjNhU+o2BDYslNh1ivadbQXMA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ll.mit.edu; dmarc=pass action=none header.from=ll.mit.edu; dkim=pass header.d=ll.mit.edu; arc=none
From: "Blumenthal, Uri - 0553 - MITLL" <uri@ll.mit.edu>
To: Loganaden Velvindron <loganaden@gmail.com>, "Bellebaum, Thomas" <thomas.bellebaum@aisec.fraunhofer.de>
Thread-Topic: [EXT] [TLS] Re: WG Adoption Call for ML-KEM Post-Quantum Key Agreement for TLS 1.3
Thread-Index: AQHbr3/8zba3bhWwtkOR+/9OmAP9q7On/+mAgAAbUuE=
Date: Thu, 17 Apr 2025 17:23:24 +0000
Message-ID: <BN0P110MB1419E8DB9B38B33F41A6234590BCA@BN0P110MB1419.NAMP110.PROD.OUTLOOK.COM>
References: <5dd1e81a-c37a-ceff-b89e-b4335fca07b6@nohats.ca> <56e646395f67e27ff11a092d5989c1c85eba2563.camel@aisec.fraunhofer.de> <CAOp4FwSJpvn6f=3utd4yBE=ftkXQ4h38FT3VQ1XOhrubqgu0ng@mail.gmail.com>
In-Reply-To: <CAOp4FwSJpvn6f=3utd4yBE=ftkXQ4h38FT3VQ1XOhrubqgu0ng@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
x-ms-reactions: allow
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: BN0P110MB1419:EE_|BN0P110MB2097:EE_
x-ms-office365-filtering-correlation-id: e87988a5-bc79-4c78-bba6-08dd7dd48f6e
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;ARA:13230040|1800799024|366016|38070700018|8096899003|4053099003;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:BN0P110MB1419.NAMP110.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(366016)(38070700018)(8096899003)(4053099003);DIR:OUT;SFP:1101;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg="sha256"; boundary="_831F6D6E-DAD5-C34E-8EE5-564CAAC723A7_"
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: BN0P110MB1419.NAMP110.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-Network-Message-Id: e87988a5-bc79-4c78-bba6-08dd7dd48f6e
X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Apr 2025 17:23:24.9051 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 83d1efe3-698e-4819-911b-0a8fbe79d01c
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN0P110MB2097
X-Proofpoint-ORIG-GUID: IKBB_ZwpSFRfeQJjd50FdN_5jE0yx9CE
X-Proofpoint-GUID: IKBB_ZwpSFRfeQJjd50FdN_5jE0yx9CE
X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.293,Aquarius:18.0.1095,Hydra:6.0.680,FMLib:17.12.68.34 definitions=2025-04-17_05,2025-04-17_01,2024-11-22_01
X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 adultscore=0 mlxscore=0 bulkscore=0 phishscore=0 malwarescore=0 mlxlogscore=992 suspectscore=0 spamscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2502280000 definitions=main-2504170126
Message-ID-Hash: AUGQSP7L2VMMB35KDGPAAUJXSTWTJCJB
X-Message-ID-Hash: AUGQSP7L2VMMB35KDGPAAUJXSTWTJCJB
X-MailFrom: prvs=820212e46d=uri@ll.mit.edu
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: "paul.wouters@aiven.io" <paul.wouters@aiven.io>, "tls@ietf.org" <tls@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] Re: [EXT] Re: WG Adoption Call for ML-KEM Post-Quantum Key Agreement for TLS 1.3
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/8stkl0QvEQ235Rlqt9OzEA5uhe8>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

However, the approach of pure PQ carries risks. 

You consider pure-PQ risks – then don’t use it. I consider risks associated with hybrids, so my deployment will not use them. To each his own. 

Don’t try to stuff your perception of risks and correctness into everybody else’s throat.

v2.30.2 | Report a Bug | By Email | System Status