IETF Logo Mail Archive

[TLS] Re: [EXT] Re: [EXTERNAL] Re: Working Group Last Call for Post-quantum Hybrid ECDHE-MLKEM Key Agreement for TLSv1.3

"Bellebaum, Thomas" <thomas.bellebaum@aisec.fraunhofer.de> Mon, 13 October 2025 11:02 UTC

Return-Path: <thomas.bellebaum@aisec.fraunhofer.de>
X-Original-To: tls@mail2.ietf.org
Delivered-To: tls@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 48D2D72603A9 for <tls@mail2.ietf.org>; Mon, 13 Oct 2025 04:02:29 -0700 (PDT)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -4.301
X-Spam-Level:
X-Spam-Status: No, score=-4.301 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=aisec.fraunhofer.de header.b="w/n6YJwZ"; dkim=pass (1024-bit key) header.d=fraunhofer.onmicrosoft.com header.b="LQtDUtA9"
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3vB5aoKSQMmR for <tls@mail2.ietf.org>; Mon, 13 Oct 2025 04:02:27 -0700 (PDT)
Received: from mail-edgeka24.fraunhofer.de (mail-edgeka24.fraunhofer.de [IPv6:2a03:db80:4420:b000::25:24]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 4C2D5726038B for <tls@ietf.org>; Mon, 13 Oct 2025 04:02:27 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=aisec.fraunhofer.de; i=@aisec.fraunhofer.de; q=dns/txt; s=emailbd1; t=1760353347; x=1791889347; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=IEd9q9xfTrPFOT2151PnWXBFbTOedciHIIk9rc6Mvlg=; b=w/n6YJwZj7iJQwCNs7pWY4UsspEPspL/7st3QT9QectdiZgUPZIUNh22 XmnJX5yZ/RXo9Z105AZ7BZVFYVEG3qhIFzYM56wsr8YQJtjqHiY+n3AI7 HGjk89eqP6RxmPOWY3IlOq5qJaqZ5wRVx5NmauJ73+BFhPDu1QGr135Rp 3ELOdmGcxAk3RuWaDpjv2S7uR1QaL+IqDKtworoohKRZ3RjI3rnKss2D5 Ql2Yrv48hOBhhnRlT0Fb7kJ2Nx6HwVwLEaDzf1VaulesgyvG4tHXge52C sj3U3uFi2S0H2iZjhOgqrfm38YJHlpOzKiR4hJosUB4pCkqnXeCDCGLC9 Q==;
X-CSE-ConnectionGUID: rbS6THJiTWaEjy1JEEdI4w==
X-CSE-MsgGUID: cfR0hX2BRZi0UtfTVvueoA==
Authentication-Results: mail-edgeka24.fraunhofer.de; dkim=pass (signature verified) header.i=@fraunhofer.onmicrosoft.com
X-ThreatScanner-Verdict: Negative
X-IPAS-Result: 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
IronPort-PHdr: A9a23:l7CXIxR5hISTU6gXdIZ5Z45au9psomyUAWYlg6HPa5pwe6iut67vI FbYra00ygOSBsODt7kd0rWK7OigATVGvc3a9ihZMdRlbFwst4Y/p0QYGsmLCEn2frbBThcRO 4BvcmEg1FyAdXZvJcDlelfJqWez5zNBUj/2NA5yO/inUtWK15f/2O+94YDcbBtVjzShf7xyM A+2rQLMvcUKnIduMKk8xxXHr3dSZ+hbymxkKU+Okxv+6cq9/oNo/yBMt/487cJNXqv3cqoiQ bBEAjkqNn0+6dH2uxXEUQaA6XwQX3kMnBFVGQbF9hb6Xpnwsiv+qOVw3TSRMNP1Q74pRzms9 r9nRhDwhigILjI07m7ZhNFogK1UvByuqRp/w5XJYI6OL/pxYrndfdIBSmVfWMtaSjFMDZm9b 4sLCOoBIPpYoozgrFYAsReyGQ+hD/7pxzRVhHH5wLc63vwhHw/YwgEuAs4OvnrXotX7NqgdT e+6wbLHzTnfdf5bwyvx5JTKfx0nvPqCXahwcc3UyUQ3GQ/Ik0ufqYjhPzyLzesCqXWb7+9lW u63lmUptQFxoj+qxsg2kYnFiJ8ex1fY9SV5x4Y1IMe3SFVhbdG/DpRQsyWaOJVtTcw4XmFov T03xacHuZ6gYicF1I4rxxDFa/OdboiI5BLjVOGfIThmnnJpYq+wiAir/EWm1+bzWdW63kxQo SpZjtnDqGoN1xrL58WDRfZw+lqt1CuA2Q3R9+xIPE85mKTZJpMlxrM+lpkevVrdEyLyhEj7i LGaelgm9+S25Orpbavrq56SOoJ6iQzzNLkllM+nAekgLwQDX2aW9f642bDi50H1Xa9GguMyn 6XBrpzXJNgXq6C8DgNIzoos8ReyAjK739gFnnQKKVdIeByGgoXoPVzFPer2Au2lg1u2lTdm3 /XGPrr8DZrTNnXDi7Lhfapl605b1Qoz0chT55JKBbEFJ/L+Qkrxu8bZDh89KgC0xvrnB8942 I4CR26CBrWVMK3IsVCS++IvJemMZIgbuDnjMfgp/ePhgmEhlV8ce6mmw4cXZWilEvlmLUiVe 37hj9YbHWsXpAYyUujnhEWHUTFJZnayW6w85is8CIKjFYrDWoCtgLuE3CihBZ1afHtJBU6IE XfsaYqLQO0DaD+XIsJ6iDMEVKOhRJE92h20ug/60aBoLvfS+i0YspLj2sZ65/fJmR4v6zN4F 96d3H2VT2FogmMIQCc73Lx/oUx6z1eMy7N4j+ZDGtNN4/NJVhk1OoXGwOxnDtD/Qg3McsuTR 1anWdWpHy0+Qsg/w98UeUl9BtOijhDE3yqkHbAVjaaHC4Eq/a/HwnfxItxyy2za26U7jlkpX NdPNWO8iq547QjTCJbFk1+FmKayaaQcwCnN+X+fwGqIoU5YShB/UaTfUX4FYUvWtdP55l3aQ rKhFbgnNwpBxtKYKqtNcd3piltGROv5NNvCZGKxnny9CguNxryWdorlZ38R3CTDB0gYnQAf5 3GGNRIxBiu5uWLRECRuFU7zY0Pr6eR+tWm7Tk4vwgGOa01tzb+1+h8JhfCGVfwcw68EtD87q zpoBFa9w87WC92Yqgp9eKVcesgw4FZZ2mLFuQxxJJugL7pthlIGaQR4o1vu1wlrCoVHicUls W4qzBBvKaKdzFxBbS6Y3YvsOr3KLmny4RWvZrXZ2lHbytmW+6MP5O4kpFXkuQGlDlAi/Gl/0 9lJz3uc4Y3HAxcQUZ3qSUs46wJ6q6vaYykl/Y/UyXpsPbGysjDZw90pHvcqyg68f9dDN6OJD A7/H9UAB8ewNuwkmEKnYwoBPO9I9a40O9qqd/6a2KGxP+ZvhiyqgGBd7IBzyEKD7Td8SujI3 5YCzfGXwBGHWy3hg1i/4YjLntUOeTEVG2OkjyLpAIpcbKRveNNXUW6vOMC8gNtkjoPrW3lW+ UTlC14u1MqgYxHUblHh00tXz0td6Si7mSy9xicymTwtqqeV1THLlri6fRscN2UNSnNrkFHsJ oa5lZYWUWCkagEzn12k6Fr0ga9Bq/I7ZyPfXF1VeiPsMnp+T6+ts5KNZsdO7NUjtiAdGLCwf EqHT7XnvgAGzif+GkNRwTk6c3ehvZCv21QwlXicBHJ36n/YZYd9yQqVrIjBX/952j5AQShkz zTbGw7vEcOu+IDevZrHtu20Xn+kEtVvcS7uxJjK/H+n5WpvCAb5lf23ntDtGBU/+Sb6zNRhE yvSpQv6Yo7l2r78Pe8xLRogP0P198cvQtI2qYA3npxFgRDy+72LqCNU2W6mK85SnLn+ZSBQG 21DyIvP7QzsyEBvaWiEw4vpW3nOp6kpa4y0eGoL3CI64c1QTqCS6b1PhyxupVSk6wnWZKs1h WIGxP8j42IdmbtMthAk0yOdBb4fBwxfOyntnA6P9NewsOBcY2P8FNr41B9Qh9ekXp2LvgwOY 2vzeJopAX1V495kOV3BlVzfuKrjfsXda85WigyMnkXlrs14baw8jOELgiw1CSfYhjgI2+U7h Bph0NSBsY6LJn9E0Im5DxVbZViXL8kTrxDAgfdHz9aY45qXMLJdQGxWBaPucsKCPjgukvnrP AeuMRw/+22QR5/BGQDKuyIE53iaN6m3G0yLDSge3/p4QRedFhdA3wc5dQgkoLcaGwqhmZP5L WUkugIV327ZgD9jktk5axj+YHzGvVaPZiVrU5yHLDtr4gNEtkLJNuyfx7xuByVjop+9rBCRA Wi6Xz9aMmQQAkKkHXH+DJKN7IDj9Ku4OMmEaOThWKfV+bJCfK3VhrSki4dPxjrdK/+1BnZpD ecZi1BDRVohO8jhpDUeUi1IhS7BbvCkgg+SpwIr+5P34LHqQgXp/YyVF/5IPM5y/wzjma6YL L34bEdRLD9Z0tYByXDFy7FFgBgckShzcTmqH7ka8yLAH+rcma5SWgYScDg7dNBJ4KQ1whRXN IbFh8n02L91gr99C1pMWVH73MD8TcIQKny7NFTJCVzNM7KDJDbRxNrwb7/6QrpV5Ng=
X-Talos-CUID: 9a23:1G/QfWDDpOgeVUT6EzNtzxAoOuIkTkLU4XXBem2VJGpIFKLAHA==
X-Talos-MUID: 9a23:W4+HggbvMDQ4z+BTvDHW3DFSbu1S0aX2NVwDrasYpsSDHHkl
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-AV: E=Sophos;i="6.19,225,1754949600"; d="p7s'346?scan'346,208,346";a="32637721"
Received: from mail-mtaka29.fraunhofer.de ([153.96.1.29]) by mail-edgeka24.fraunhofer.de with ESMTP/TLS/TLS_AES_256_GCM_SHA384; 13 Oct 2025 13:02:25 +0200
X-CSE-ConnectionGUID: R/IZ9j8aRTyImdEexsCI/g==
X-CSE-MsgGUID: MJmNHRfTS+eb9jIf/iN65g==
IronPort-SDR: 68ecdc40_5lOcTsJD5DJ+zJJI6yM5tPn1hoiFzH3eU3hJd3b3m+CL99T 6bn39hJFc/6hjCuK9Eg9/viS+/7vHBQTtGYddeQ==
X-IPAS-Result: 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
IronPort-PHdr: A9a23:HHxgSRTIZzGvMQfAWTL9Wp/7QtpsovKeAWYlg6HP9ppQJ/3wt523J lfWoO5thQWUA9aT4Kdehu7fo63sHnYN5Z+RvXxRFf4EW0oLk8wLmQwnDsOfT0r9Kf/hdSshG 8peElRi+iLzKh1OFcLzbEHVuCf34yQbBxP/MgR4PKHyHIvThN6wzOe859jYZAAb4Vj1YeZcN hKz/ynYqsREupZoKKs61knsr2BTcutbgEJEd3mUmQrx4Nv1wI97/nZ1mtcMsvBNS777eKJqf fl9N3ELI2s17cvkuFz4QA2D62E1fk4WnxFLUG2npBv6C7bcvnrj5/pz5DOiE+rKF+lpAAyk0 JdBZhXUryoLPD8Z0UDU29Z70odFpB309Hkdi4SBRLiJGMdiV/Lab/wAQGRBbJ1OCCtsK76iU aIsAuAKYLlA8qug+2kKlCufLy2DXNi+lj5JtGTvxPwd3/Z+CgXe3C0dE9AI4XHIq/X0HfkPS eSOkKvUzSnfRPd34Qzv143RKh4Bu9CRb5lTeJPyzgoPKSD/yUq/kJ6+b22J/b5Q8E6QtuZJb O7+llQdkw56oCKNl90skqORpo4t9VDV7CQm0oo5JOOHblZVPPH4RcgYp2SbLYxwWsQ4XyRyt T0nzqFToZegZ3tiIPUPwhfeb7mCb4Gry0iyEuiLKCp+hHVrdaj5ixvhuUSjy+ipTsCvyx4Kt StKlNDQq2oAnwLe8MmJS/Zxvw+h1D+D2hqV67RsL1o9iKzbLJAs2Pg3kJ8Sul7EBSj4hAP9i 6r+Sw==
IronPort-Data: A9a23:K6QD7q7CV3HljKlQfNvgSgxRtHbDchMFZxGqfqrLsTDasY5as4F+v mRKUD+FM/6CYGumc9BxOt+2oE9Tv5fXxtMwHAQ+/H00Zn8b8sCt6fZ1gavT04N+CuWZESqLO u1HMoGowPgcFyGa/lH0dOC4/BGQ7InQLpLkEunIJyttcgFtTSYlmHpLlvUw6mJSqYHR7zil5 5Wr/KUzBHf/g2QpajJNt/rawP9SlK2aVA0w7gRWic9j4Qe2e0k9VPo3Oay3Jn3kdYhYdsbSb /rD1ryw4lTC9B4rDN6/+p6jGqHdauePVeQmoiM+t5mK2nCulARrukoIHKZ0hXNsttm8t4sZJ OOhF3CHYVxB0qXkwIzxWvTDes10FfUuFLTveRBTvSEPpqHLWyOE/hlgMK05Fbdf29QmAzFHz 8AJCTUBQx2TnMmXh73uH4GAhux7RCXqFJgapmkmwCHSDbAoW5neRaXN69JCmjs97ixMNa+DP IxINnw2M0WGOkcQUrsUIMpWcOOAmnn4djRD7liYoa466WHOySR40aPgO5zbYNWXQ8VSkEuC4 G7Ll4j8Kk1BaoTAlmHfmp6qrsrtmAXbYowuL/61/K9ooVPUx0pNVRJDADNXptH80CZSQel3N 0wT/yM166I/8EimRNDgWkjk+HeFpRMXHdRKGvA86AaDx7CS7wuxCm0NVDUHadE6uokxXzNC/ lOUhc7sDiZyq6GITW+Y3riRpDK2fyMSKAcqeDUFZQ8BpdzivMc+gg+nZtphGoa+lJvkAXfsx FiisCwlr7QekcBN0L+0lXjuhT62q5mPdgkt4RuCAjqg7whjY5WiaZDu4l/exfpFJZySCFiMo HZCnNKRhN3iFrmAhCvIQPQHBrClovyEdjTQmhhhBZA88TSq9XO5O4xdiN1jGHpU3g8/UWaBS GfdowpM4p9UMnawK6hxZoO6EcMxyqb8U9/iU5jpghBmPvCdrSfepH4+N32DlXvgilYtmqwZM JKWO5TkR3UDBKgtiHL8S+4B2PV5jmoz1EHCd6Ddlh6H6Lu5YGLKaLEnNFDVUPs1wpnZqyro8 vFeFfCw9TNhbMPEbBPqrLEjdWIxESBjBLTdidBmSeqYEw83REAjE6DwxJ0iSaxEnoNUtL/B0 SCha3991Wv6u2bNBjuLW0BddIrAc45090w5GSkeLGeY5WUqTteq3pc+aqkYQLgD385gxM5SU PMqVZihAPNOazKf4BUbT8D3g7JDfSSRpzClHnSacglkWqV/Vir1+tPAVSn+xhkkVyaYm5M3n Oy961n9X5EGeTVHMO/XT/Cel3WKonkXnbNJbXvie9V8Vh3lz9l3FnbXkPQyHsArLCfDzBu80 yK9I08RhcvJkr8P3Oj5v4K2hKb3LLImBWtfJXfR0piuPyqD/maD/55JYNzVQR/jDlHL6IeQT sQL6crjMc83vkdA6Kt9NLdJ8ZgQxfXSo51i8wA1O0mTMnqKDOt7L2ikzPt/kPRH5oVktDucX mON/dhnOou1Bv71LW5JJCcYarWs6PJFvBjT8vU/H2vi7gBV4rescBtfLjuMugNnPZp3N4Ip7 uc/svE4+Si6qB4gHcaCvyV6rm6xBHwJY4Mjh4BHBYTupFMhz1FcU5niGwvz2pWuaspNAGYuM DS7lKrPvJUC50ngd3AcBXz82MQEj68Rty5lzEEIGHqbu9ydnd4x/kRb3goWRzRv7Cds8rxMK FkwEnZqNIOy/ztMr+pSbVCGQg1uKkWQxR3s9gEvimbccXiNakXMC28MYcC240ET9jNnTAhxp b235j7sbmf3QZvXwCA3ZE9Crs7jR/xX8inpupiuP+aBLqkATQvVuI2cTktWlEK/GuI0vlPNm sdy9uUpaaHbCz8Zk5dmN6akj4YvWDK2D00cZ8p+/ZE5P3DWIxCz/jmsF3qfWO1wI97yzEvpL PA2e+xuUUyl2TesvwIrI/cGA4VJkc4D4PsAfbLWJlA6jYaPkwoxsLzs23j/oEQJX+RRld0ML 9KNVjCaTU2Vq3hmu07Mi8hmKGCIW8YgYTOg7bq67dcPNZIPj7xrexsA1rC14nanCyp83heup AiYTbTn/+9j7oVNnoXXDaRIATuvG+7zTOil9AOSscxES9HEIePilloyhAH8HgJ0ObAxZYxGp Y6VuoSq4HKf7acEbW/JvrKgSY9L3JyWd8hKOJvVKHJ6o3OzaPX06UFex1HieI17q/ID1MyJX ADiVdCRc+QSUNJjxHF4TShSPhIeKqbvZJfbuiKPgKWQOycZzDD4AourxV3xYUFfUx04CZn0J wv3mvSpv/RzjoBHAj0aDPBHXb58BnLeWpUdSt6gjgnAU1GUgW6DtIW7xFBkoXvOB2KfGcn33 YPdS1KsPF6usaXP15dCv5Y0ohQTC21njPItel4GveR7kC2+EHVMONF13U/q0X2IuneaOEnEW Qzw
IronPort-HdrOrdr: A9a23:eGmV46CQWYHb75LlHenP55DYdb4zR+YMi2TDsHoQdfU1SK2lfq +V8sjzuSWetN9zYh4dcLK7VJVoKEm0naKdirN9AV7NZmPbhFc=
X-Talos-CUID: 9a23:tcCzBmuQkPlSvGCDQE7T8g3/6IsfNVzvnXWAKnWEGEdsRJCYWUS72eRrxp8=
X-Talos-MUID: 9a23:9QgOngZ7Sp7ZSuBTkh3pohFYOvtToKmkWUIsn9IHnZfZOnkl
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-AV: E=Sophos;i="6.17,290,1747692000"; d="p7s'346?scan'346,208,346";a="43607732"
Received: from exo-hybrid-bi.ads.fraunhofer.de (HELO smtp.exch.fraunhofer.de) ([153.97.179.127]) by mail-mtaKA29.fraunhofer.de with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 13 Oct 2025 13:02:24 +0200
Received: from XCH-HYBRID-04.ads.fraunhofer.de (10.225.9.46) by XCH-HYBRID-04.ads.fraunhofer.de (10.225.9.46) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.20; Mon, 13 Oct 2025 13:02:23 +0200
Received: from FR6P281CU001.outbound.protection.outlook.com (40.93.78.7) by XCH-HYBRID-04.ads.fraunhofer.de (10.225.9.46) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.20 via Frontend Transport; Mon, 13 Oct 2025 13:02:23 +0200
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=ciufczbZMFTwRYOJ6r8bvxOdS0y2ILYWWv9HrxRSJReaEfrI/PLI2rFgGCXqMNF2Vf1RzyoQ7rR03cN9ZdLtQjicrRm79+qQ9DsCFvzM7Y3lxV98TxWLYd4gr7IXOrrXM6ryW5P/fRMYlS53IoSrOp/H4NgvCcxxQyCa1Kdfc5C8gCNCPJZmOXG/ofmDy0Zvs6uspaaGwN0+VnuOwXElKNVazAPomZo1qI+NbuMN30fqZ59n1E6zHhpJHBWt8Up7J524Ypm1J8EIfvrmhZnHHClpNpjIdopc4bbEWWmUQrpFs189EROXR4+pgsz6MpGVkERl9zeL8YOSlrKE8p1nlQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=IEd9q9xfTrPFOT2151PnWXBFbTOedciHIIk9rc6Mvlg=; b=SbLebEbQ7+2R3Ecn10I5JLFUSd5lekC/Zn2/F1Rqayw2rA/+Gkzb3+fJjeBfStXv9IXY2knZPc63sRo0WIgHotXDnHr0qxzN9lmdijzm6z3zIuFsz1vXEFTtZL9dNqLvT9r9C+9KBAib6lQRIclJ7E+iGg/r6P1C8VdJnat49hAHOUxfxCk5RWtXMIlbxNvkQpO0Ym3z8Y8IU/cyEcIgs5fxsSfrdvgM8HW/sijc3zMX8AUe7VyD/GxoAoLHlSE7Wd4QZ/1H55w2Xu3gYn08DfByTdG6B5ABYgxexHPNlg6NaQNkUatrj6i5cgo5hFNmNw9ujKdX4Jb44TcUhgMhsA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=aisec.fraunhofer.de; dmarc=pass action=none header.from=aisec.fraunhofer.de; dkim=pass header.d=aisec.fraunhofer.de; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fraunhofer.onmicrosoft.com; s=selector2-fraunhofer-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=IEd9q9xfTrPFOT2151PnWXBFbTOedciHIIk9rc6Mvlg=; b=LQtDUtA9ozGrmfhZ3w7oEAUvVAKebc57p5J54ZlQXIBLG0S94iiZsqq9Odz7slphIUdjn9mtoHiA6uplS4jthttClIPSzWmq0fHrIuZCKa1Ko+HVKR/wGQz386tC25+Nc1dAQd9uRRPgcjrJ9rhpB0HdPWhyqi7zddiVWNpF5G4=
Received: from FR1PPF809320EF6.DEUP281.PROD.OUTLOOK.COM (2603:10a6:d18::f66) by BE1P281MB2403.DEUP281.PROD.OUTLOOK.COM (2603:10a6:b10:32::14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9203.12; Mon, 13 Oct 2025 11:02:22 +0000
Received: from FR1PPF809320EF6.DEUP281.PROD.OUTLOOK.COM ([fe80::8d96:d427:50b0:8ad6]) by FR1PPF809320EF6.DEUP281.PROD.OUTLOOK.COM ([fe80::8d96:d427:50b0:8ad6%3]) with mapi id 15.20.9203.009; Mon, 13 Oct 2025 11:02:22 +0000
From: "Bellebaum, Thomas" <thomas.bellebaum@aisec.fraunhofer.de>
To: "thomas.bellebaum=40aisec.fraunhofer.de@dmarc.ietf.org" <thomas.bellebaum=40aisec.fraunhofer.de@dmarc.ietf.org>, "durumcrustulum@gmail.com" <durumcrustulum@gmail.com>, "uri@ll.mit.edu" <uri@ll.mit.edu>
Thread-Topic: [TLS] Re: [EXT] Re: [EXTERNAL] Re: Working Group Last Call for Post-quantum Hybrid ECDHE-MLKEM Key Agreement for TLSv1.3
Thread-Index: AQHcOiWue4JrfcwleEiApQ2TQGUlRbS/7B2AgAABSYA=
Date: Mon, 13 Oct 2025 11:02:22 +0000
Message-ID: <e5af9e29ff68eace8a2f87b51a2f7e8d79b866cf.camel@aisec.fraunhofer.de>
References: <CAFR824wG_3h3P0cM_oe4sAA2T9si2KteZRvi3UbzC7gs6hV7hQ@mail.gmail.com> <551EC460-8C2F-4FB5-B95C-D11DCD84BB61@ll.mit.edu> <3f2a02b66e77b648e008962493a956568e4e22a7.camel@aisec.fraunhofer.de>
In-Reply-To: <3f2a02b66e77b648e008962493a956568e4e22a7.camel@aisec.fraunhofer.de>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: FR1PPF809320EF6:EE_|BE1P281MB2403:EE_
x-ms-office365-filtering-correlation-id: ca2e7404-e535-4f1a-50b4-08de0a47fc76
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;ARA:13230040|1800799024|366016|376014|38070700021|4053099003;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:FR1PPF809320EF6.DEUP281.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(366016)(376014)(38070700021)(4053099003);DIR:OUT;SFP:1101;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: multipart/signed; micalg="sha-256"; protocol="application/pkcs7-signature"; boundary="=-PRf1RYJadMI3pxzGtH26"
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: FR1PPF809320EF6.DEUP281.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-Network-Message-Id: ca2e7404-e535-4f1a-50b4-08de0a47fc76
X-MS-Exchange-CrossTenant-originalarrivaltime: 13 Oct 2025 11:02:22.7260 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: f930300c-c97d-4019-be03-add650a171c4
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: h5mSNIj7Jv4YS31l2ZUtNKgIpyBTfB/mH7/TOwPauDYMc8qz1HDocws1mVOXAay39x/BImqRNSsXhm5bHYskJEcx/hgHuazh9s06M6Agev1O0NzbX4SXLKKyoWRW0VXo
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BE1P281MB2403
X-OriginatorOrg: aisec.fraunhofer.de
Message-ID-Hash: HRWWGIF7PACIM7DV5KCCC2L7KXQGOM66
X-Message-ID-Hash: HRWWGIF7PACIM7DV5KCCC2L7KXQGOM66
X-MailFrom: thomas.bellebaum@aisec.fraunhofer.de
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: "djb@cr.yp.to" <djb@cr.yp.to>, "tls@ietf.org" <tls@ietf.org>, "Andrei.Popov=40microsoft.com@dmarc.ietf.org" <Andrei.Popov=40microsoft.com@dmarc.ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] Re: [EXT] Re: [EXTERNAL] Re: Working Group Last Call for Post-quantum Hybrid ECDHE-MLKEM Key Agreement for TLSv1.3
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/BctValyAYTrdUz-I5cipePKTUJI>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

> On a more technical level, the primary use of a KEM in TLS is to derive a secret key, and as long as the PQ-KEM spits out anything at all during normal program flow, whatever output this is could be treated as part of the nonce, as far as security goes. So the additional attack surface is basically nonexistent.

Correction: I meant to write "as long as the DH spits out anything" of course, since that is the "extra" part being questioned :)

-- TBB

v2.35.0 | Report a Bug | By Email | System Status