IETF Logo Mail Archive

[TLS] Re: [EXT] Re: WG Adoption Call for ML-KEM Post-Quantum Key Agreement for TLS 1.3

Rob Sayre <sayrer@gmail.com> Thu, 17 April 2025 21:58 UTC

Return-Path: <sayrer@gmail.com>
X-Original-To: tls@mail2.ietf.org
Delivered-To: tls@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 412801DD71BD for <tls@mail2.ietf.org>; Thu, 17 Apr 2025 14:58:06 -0700 (PDT)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8a6MR3GBV5oG for <tls@mail2.ietf.org>; Thu, 17 Apr 2025 14:58:05 -0700 (PDT)
Received: from mail-pg1-x52e.google.com (mail-pg1-x52e.google.com [IPv6:2607:f8b0:4864:20::52e]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id CB8A11DD71B2 for <tls@ietf.org>; Thu, 17 Apr 2025 14:58:05 -0700 (PDT)
Received: by mail-pg1-x52e.google.com with SMTP id 41be03b00d2f7-af28bc68846so1118905a12.1 for <tls@ietf.org>; Thu, 17 Apr 2025 14:58:05 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1744927085; x=1745531885; darn=ietf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=zKS0uqipBHcWrIELe+1nxRYP6F54OrVcNvU0vwF/Zyc=; b=b278azs3MZ3XXxThyH1gXVUrCInLjE9xdxODmzmQtvqugJrrBrlQjd43kOyHWmrjyS m6dhVLgbPDL94vdLnipxZw0htbH1YBUU0YrIOJsJY+yZge+8lhGwDUkugBceUAAkr82m SmdH/kch2Ns2CBYjzaNQH/K14CjpPvTjE0BUabPdrErahe3pA1a+g+SZh50Ja2t1fv5f DjrMtxRYNHUpoTWd7+m4vZZBhvmSciyvCrwhx9HgmWcCQJZ5I5nHbz1mIEdmMaCfOjbw 0VFDLHw2mwFjTc6nXe88+Qj0uC5ikEB7n1tFwAvwvmsdxGg0RCzL/bKocizhQGpwG2UE RU4w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1744927085; x=1745531885; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=zKS0uqipBHcWrIELe+1nxRYP6F54OrVcNvU0vwF/Zyc=; b=gZ5ETecI8FEhvHSE5ewMrOS41HDcD8qFgDSUODJ+y6v7OhRBxjz1WhCp08yR64pO7f JSZ/P40khKFSobE15mgeR0VL19wnxIpxifxKH23RzKjVlCfebHt5xSv369928FsbelAL l4Xs+ZFUnj1vpxsBoEYQSWJScaR3R1g6Zbr5/sYRCUAIBoT9Z6EQMdNyTWhNAaJFSkk7 mqwjp9hT/Q9u/qu5bopZVnnlvtDDz9Axtz0t16IiCimRYAe8vM/F5vC9oy6cHQIF8wl4 nT2pPTenQIMCtiTaP7iX6rbEO+XNj7T+b2ASjDkHEzvXPnxusj5AygIg1jna8bpLWpqW Ez/g==
X-Forwarded-Encrypted: i=1; AJvYcCV5PK9Vk5ZGRPMpc9I+4hJG8l5TimylRfstjWFBaLc8b85SA3SJ1ifxYE9gZk0Zy4bLEC0=@ietf.org
X-Gm-Message-State: AOJu0Yw7OPnN5jpCY2Da9BxbW9QxiS+UBXbmTtFY7d1gkrnOqfA3vYB8 uD6W7TEGpja6wBSEycceaYD/3d7EUfkS3ZrO4AFL5vxF5howCDF05nc0IS8WKfmsgD69Vir0pBK f97pHWEe2IkHVbNQAEo6Aqy9BKIc=
X-Gm-Gg: ASbGncsRermyVOXuOCVwc9A3bElgqPEfJ3Dbxbee7g3H8lZ98iM2vyiL7yvO6XEWA+s lwcWKpwxowr9erdcAxYwDhEmZM8hXTdMFD409CIednyjGWnqhxgqFN0hD6ywys9lHwhr8+AnU/L fEbPSkPMBGybGtjDaXULQVzAo=
X-Google-Smtp-Source: AGHT+IGOAjEotYGDlWdoF8HYoPvSfsGwrApiuHVtKcUReMCZ5f+FDk6z0btmWnioouC2nna26kDZgTqqhzBGX58nTeY=
X-Received: by 2002:a17:90a:c105:b0:2f6:f32e:90ac with SMTP id 98e67ed59e1d1-3087bb52d58mr874772a91.11.1744927084782; Thu, 17 Apr 2025 14:58:04 -0700 (PDT)
MIME-Version: 1.0
References: <ca271cd7-1489-45a5-85b0-35dca4cbdddd@cs.tcd.ie> <CC953DB0-3051-4231-AA65-475638FEAE45@ll.mit.edu> <53e89655-97b5-43fc-a0b2-3f341fbc572c@cs.tcd.ie>
In-Reply-To: <53e89655-97b5-43fc-a0b2-3f341fbc572c@cs.tcd.ie>
From: Rob Sayre <sayrer@gmail.com>
Date: Thu, 17 Apr 2025 14:57:53 -0700
X-Gm-Features: ATxdqUEdGD29LReeC5GNJVPVjYaLcdHEHq-bAAkfTEWjfqgz9f4p98EQSi4r9GU
Message-ID: <CAChr6SwLBcc88AM=12MCFaKO5OwCCNvL3QqEqcXMBjRxhexyVA@mail.gmail.com>
To: Stephen Farrell <stephen.farrell@cs.tcd.ie>
Content-Type: multipart/alternative; boundary="0000000000000c2d060633007ffb"
Message-ID-Hash: 5H4GIRVUBU6YXWQPMVDQJVFXGZAMF3DF
X-Message-ID-Hash: 5H4GIRVUBU6YXWQPMVDQJVFXGZAMF3DF
X-MailFrom: sayrer@gmail.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: Thomas Bellebaum <thomas.bellebaum@aisec.fraunhofer.de>, "paul.wouters@aiven.io" <paul.wouters@aiven.io>, "tls@ietf.org" <tls@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] Re: [EXT] Re: WG Adoption Call for ML-KEM Post-Quantum Key Agreement for TLS 1.3
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/HnJ-kwPwjD43jHIadwIGHV7b6Ys>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

On Thu, Apr 17, 2025 at 11:10 AM Stephen Farrell <stephen.farrell@cs.tcd.ie>
wrote:

>
> Hiya,
>
> On 17/04/2025 18:56, Blumenthal, Uri - 0553 - MITLL wrote:
> > One reason hybrids add risks is the practical implementation/
> > deployment/processes/management/maintenance part, as opposed to
> > treating the issue as a pure mathematical formula - which deployed
> > software apparently is not (some might argue that it should be, I
> > let the reality speak for itself).
>
> I'm relatively confident that the set of implementations that only
> do pure-PQ and don't do hybrid will be so small as to make the
> above an unconvincing argument.
>

Well, it's a typical source of disagreement. I said "do not support"
because the non-hybrid "Supported Groups" are already in the registry. But
I'm not going to run around objecting or appealing.

Some participants care about FIPS, various EU laws, UK laws, etc. Others
don't. It's always better to find common ground in engineering concerns.
Otherwise, you get into entitlement (my laws are the important ones... etc).

thanks,
Rob

v2.30.2 | Report a Bug | By Email | System Status