[TLS] Re: Working Group Last Call for Post-quantum Hybrid ECDHE-MLKEM Key Agreement for TLSv1.3

Bas Westerbaan <bas@cloudflare.com> Tue, 07 October 2025 16:32 UTC

Return-Path: <bas@cloudflare.com>
X-Original-To: tls@mail2.ietf.org
Delivered-To: tls@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id ACE3F6EC23FF for <tls@mail2.ietf.org>; Tue, 7 Oct 2025 09:32:14 -0700 (PDT)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=cloudflare.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cOzTWX_YOjY5 for <tls@mail2.ietf.org>; Tue, 7 Oct 2025 09:32:14 -0700 (PDT)
Received: from mail-lj1-x233.google.com (mail-lj1-x233.google.com [IPv6:2a00:1450:4864:20::233]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id E96F46EC228C for <tls@ietf.org>; Tue, 7 Oct 2025 09:32:07 -0700 (PDT)
Received: by mail-lj1-x233.google.com with SMTP id 38308e7fff4ca-3717780ea70so70567851fa.1 for <tls@ietf.org>; Tue, 07 Oct 2025 09:32:07 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cloudflare.com; s=google09082023; t=1759854727; x=1760459527; darn=ietf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=GF/ZRt+4cNRv3EBpt3HIJbxMcWlUJoJbVyIc/iaEReY=; b=LQg+ayexg2XXMzShKZ4e6+jOxSowETFO1wqW8J/5+EE79keErxIuua6iyWiF4CMopI ev6h5LkEPplC5fY0Wb4feOSz4DATHCJ6ZyImQDz9puXhY1xBizqTeYbgWj5pMio1++SX GYCZHdC3mmro0hE6FgoG8pFdkdQbnu+zc5vpb8dUudFAoiA/J5zTg36qzJ6gQ33e3A2f yaWsMJE7CkK9frfsA0iWCIA2ZW7irIvopmwpzpuanmUyLHRBGYbYmCOh6gDmiKSxIJ/6 maSvzVRQ0ouPchcxD2fezOk53sCxxXHmAwvaaFvMJf00vuptosAmNazCBtP89FMsVC43 kDXw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1759854727; x=1760459527; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=GF/ZRt+4cNRv3EBpt3HIJbxMcWlUJoJbVyIc/iaEReY=; b=nkQV9T0tafVm3mBfIu1axzPIXqEI8KrbtKrX17XGmRT7HCXLodJZ2mzsbnpsFwrX0J sbPp7CqXGX7CefGWKj0gOGIfcOaz9oCs88DUq690gDhfn1rv/cOtAmrViMImjnikcWrL LespA8lcs4QfyAWpNNDTEyILV4HIoQ9p/pteFUk8tvKOp6rnrDuwp0mm/TdXSqLu/ski QqXuwgirF1et5H0bKWsvOYNC9KRfhy6MruHv3M9LWJMs+iyI6hVPFTMWNHvRAAXzHqek 9b2xlZlObnhR3/wk0Np3wgGfGfMTtUsYlS4LLaI90njtkA35qjJYBBCRu3VZNyYxE8Kt DPqA==
X-Forwarded-Encrypted: i=1; AJvYcCU7cSv0bZJADnPkBAamEISp2u46Q+GAo5QDEdmvXxYzhlEX9kR776BxWxvsPr9U8xWvUFQ=@ietf.org
X-Gm-Message-State: AOJu0YzcVkWDvT/6hhqlG55JVDOwJ14B6zPuYMtwGdl/BDnUi/gg5I2p X/5FHRIGCibpbe2KLqGxnydEL4uY4dg0AUTVHkJc6QRmGdFnJ8Wo2idXtsoyAKydognNTs10+rC l56YniB/LtqVRCIYo815T8nrmOaVzU3CX2VrqtOs/F86hX60QBRazvNCilA==
X-Gm-Gg: ASbGnctVD93SSClMjoNEGOnDyHzlQs7qimzuLqXcN5tUTevZcUyqLcrCObW0wUEakxW eM9GzPxjAVgSWoeFpNogRVFpIei/AEeK3oJdOH3fuGbFaCwpdnMnUpHyWjeE7Voi8Hp5TxhCxIe eAhFy62LvP7gJJi2ULFf7mriII0uY7YiNFoDLqVr93nbS3/8zxk2bhtkHEdytqLNcNw64FZ4MuB OAWZxfdgmVKRoxS3XUFrX9Q6+bgC13oJPc8zxnbPp8fVz+lcQ==
X-Google-Smtp-Source: AGHT+IHVHa2Boig0VJHaECMTfix4y53mYkAdP2xWe9148xyxtLNOANxfp2NVpFXpQMJMph8uGzwLAonDobQsF+ZTeEg=
X-Received: by 2002:a2e:beab:0:b0:372:945c:cdbd with SMTP id 38308e7fff4ca-37609e64b54mr221041fa.20.1759854726546; Tue, 07 Oct 2025 09:32:06 -0700 (PDT)
MIME-Version: 1.0
References: <CAOgPGoA+c8kXDizwsvFG5tLz9+Kxk0HqiN1skKp5jMvvpxeu0Q@mail.gmail.com> <CABcZeBO+3u=1=ueNscq+O74Qv=7PC5NedsGsugp=GZjVqtODoQ@mail.gmail.com> <1040fcc9-46e3-197e-1fa7-353c978486fb@nohats.ca>
In-Reply-To: <1040fcc9-46e3-197e-1fa7-353c978486fb@nohats.ca>
From: Bas Westerbaan <bas@cloudflare.com>
Date: Tue, 07 Oct 2025 18:31:52 +0200
X-Gm-Features: AS18NWD1rCAejZNY6zjhU_283BQCr5gehNkNPa-f4T53MntTV2Rw_xGLIvKqfzQ
Message-ID: <CAMjbhoXFv6Q0Nmrv2pCQ4FmRVJfA6KyM17dFirQanpWRyDN7Ug@mail.gmail.com>
To: Paul Wouters <paul=40nohats.ca@dmarc.ietf.org>
Content-Type: multipart/alternative; boundary="000000000000d5288c0640941b2a"
Message-ID-Hash: FREJCR4VFSKFNSM442O5H6ANGMKR6DDW
X-Message-ID-Hash: FREJCR4VFSKFNSM442O5H6ANGMKR6DDW
X-MailFrom: bas@cloudflare.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: "<tls@ietf.org>" <tls@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] Re: Working Group Last Call for Post-quantum Hybrid ECDHE-MLKEM Key Agreement for TLSv1.3
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/D2tMj9bBxYfTiB6LEatg7PCcZ5I>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

>
> I also believe the documentation that such RFCs can describe by talking
> about all other algoritms and comparisions and evaluations in one
> document to provide a much better context with clearer direction and
> advise to implementers.
>
> It also makes the IETF process easier, as one only needs to update 1 RFC
> to revise the guidlines in the future, instead of keep needing to Update:
> a bunch of documents.


Sounds like a good plan to me.

 Bas