Re: [TLS] ML-KEM key agreement for TLS 1.3

Kris Kwiatkowski <kris@amongbytes.com> Tue, 19 March 2024 04:10 UTC

From: Kris Kwiatkowski <kris@amongbytes.com>
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0 (Mac OS X Mail 16.0 \(3774.400.31\))
Message-ID: <9CC33B4D-3EC2-4784-84A0-CE629D5B421C@amongbytes.com>
Date: Tue, 19 Mar 2024 14:10:13 +1000
To: tls@ietf.org
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/H1yeakbPTkal_c8uWTm-adxDDrY>
Subject: Re: [TLS] ML-KEM key agreement for TLS 1.3
Precedence: list

Hello,

I would like to express my support for getting a codepoint for ML-KEM (the queue was closed quicker than I expected, so didn’t have a chance to do it at the meeting). 

The motivation:
* First of all the integration is rather straightforward.
* MLKEM already got a large amount of research from the crypto community, from a large number of various research groups - theorists, designers, implementers as well as experts in side-channel protection. Deirdre mentioned that schemes were studied for the last 7 years, but it is worth remembering that Kyber is a modification of the LPR cryptosystem, introduced already in 2010. 
* There is a cost of 2-step migration (to hybrid and then pure PQ), I don’t believe it’s good to force you to pay the cost.

Additionally, I think I would also get a codepoint for MLKEM-512.

-- 
Kris Kwiatkowski
Cryptography Dev

Re: [TLS] ML-KEM key agreement for TLS 1.3 Kris Kwiatkowski
[TLS] ML-KEM key agreement for TLS 1.3 Deirdre Connolly
Re: [TLS] ML-KEM key agreement for TLS 1.3 D. J. Bernstein
Re: [TLS] ML-KEM key agreement for TLS 1.3 Andrey Jivsov
Re: [TLS] ML-KEM key agreement for TLS 1.3 Eric Rescorla
Re: [TLS] ML-KEM key agreement for TLS 1.3 John Mattsson
Re: [TLS] ML-KEM key agreement for TLS 1.3 Ilari Liusvaara
Re: [TLS] ML-KEM key agreement for TLS 1.3 Deirdre Connolly
Re: [TLS] ML-KEM key agreement for TLS 1.3 Deirdre Connolly
Re: [TLS] ML-KEM key agreement for TLS 1.3 D. J. Bernstein
Re: [TLS] ML-KEM key agreement for TLS 1.3 John Mattsson
Re: [TLS] ML-KEM key agreement for TLS 1.3 Deirdre Connolly
Re: [TLS] ML-KEM key agreement for TLS 1.3 Eric Rescorla
Re: [TLS] ML-KEM key agreement for TLS 1.3 Watson Ladd
Re: [TLS] ML-KEM key agreement for TLS 1.3 Orie Steele
Re: [TLS] ML-KEM key agreement for TLS 1.3 Deirdre Connolly
Re: [TLS] ML-KEM key agreement for TLS 1.3 Bas Westerbaan
Re: [TLS] ML-KEM key agreement for TLS 1.3 John Mattsson
Re: [TLS] ML-KEM key agreement for TLS 1.3 Deirdre Connolly
Re: [TLS] ML-KEM key agreement for TLS 1.3 Rob Sayre
Re: [TLS] ML-KEM key agreement for TLS 1.3 Dennis Jackson
Re: [TLS] ML-KEM key agreement for TLS 1.3 Dennis Jackson
Re: [TLS] ML-KEM key agreement for TLS 1.3 Eric Rescorla
Re: [TLS] ML-KEM key agreement for TLS 1.3 Salz, Rich
Re: [TLS] [EXT] Re: ML-KEM key agreement for TLS … Blumenthal, Uri - 0553 - MITLL
Re: [TLS] ML-KEM key agreement for TLS 1.3 D. J. Bernstein
Re: [TLS] ML-KEM key agreement for TLS 1.3 John Mattsson
Re: [TLS] ML-KEM key agreement for TLS 1.3 D. J. Bernstein
Re: [TLS] ML-KEM key agreement for TLS 1.3 Rebecca Guthrie
Re: [TLS] [EXT] Re: ML-KEM key agreement for TLS … Eric Rescorla
Re: [TLS] ML-KEM key agreement for TLS 1.3 Deirdre Connolly
Re: [TLS] ML-KEM key agreement for TLS 1.3 Deirdre Connolly
Re: [TLS] [EXT] Re: ML-KEM key agreement for TLS … Eric Rescorla
Re: [TLS] [EXT] Re: ML-KEM key agreement for TLS … Blumenthal, Uri - 0553 - MITLL
Re: [TLS] [EXT] Re: ML-KEM key agreement for TLS … Deirdre Connolly
Re: [TLS] ML-KEM key agreement for TLS 1.3 Dennis Jackson
Re: [TLS] [EXT] Re: ML-KEM key agreement for TLS … Blumenthal, Uri - 0553 - MITLL
Re: [TLS] ML-KEM key agreement for TLS 1.3 Deirdre Connolly
Re: [TLS] ML-KEM key agreement for TLS 1.3 Eric Rescorla
Re: [TLS] ML-KEM key agreement for TLS 1.3 Sofía Celi
Re: [TLS] ML-KEM key agreement for TLS 1.3 Deirdre Connolly
Re: [TLS] ML-KEM key agreement for TLS 1.3 David A. Cooper
Re: [TLS] ML-KEM key agreement for TLS 1.3 Deirdre Connolly
Re: [TLS] ML-KEM key agreement for TLS 1.3 D. J. Bernstein
Re: [TLS] ML-KEM key agreement for TLS 1.3 Bas Westerbaan
Re: [TLS] ML-KEM key agreement for TLS 1.3 Deirdre Connolly
Re: [TLS] ML-KEM key agreement for TLS 1.3 Eric Rescorla
Re: [TLS] ML-KEM key agreement for TLS 1.3 Deirdre Connolly
Re: [TLS] ML-KEM key agreement for TLS 1.3 Sophie Schmieg
Re: [TLS] ML-KEM key agreement for TLS 1.3 Stephen Farrell
Re: [TLS] ML-KEM key agreement for TLS 1.3 Watson Ladd
Re: [TLS] ML-KEM key agreement for TLS 1.3 Loganaden Velvindron
Re: [TLS] [EXT] Re: ML-KEM key agreement for TLS … Blumenthal, Uri - 0553 - MITLL