[TLS] Re: Working Group Last Call for Use of ML-DSA in TLS 1.3

Daniel Apon <dapon.crypto@gmail.com> Sun, 03 May 2026 21:33 UTC

Return-Path: <dapon.crypto@gmail.com>
X-Original-To: tls@mail2.ietf.org
Delivered-To: tls@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 613ABE86C53B for <tls@mail2.ietf.org>; Sun, 3 May 2026 14:33:58 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1777844038; bh=H+5itAZriXgBq2JfDJLEd7POvC2gO9Fn82j+C/XuJfs=; h=References:In-Reply-To:From:Date:Subject:To:Cc; b=MBPYl83Hg63YORmeV33wFOAzY2azKjDwTtSTurJFFYQp0AdVXnj9aYQBuzVHPiQb2 wSAHNXxKxareIJPWQCAliDrLBcbCbrKTyiB8sFPGNjzHCiYYqDRS2fzb46ULhR+j4U UfjAYgMF33BN/j9lc5IZ3yREePNRnxYig0lxi+Ao=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BNE4-ukeT4QR for <tls@mail2.ietf.org>; Sun, 3 May 2026 14:33:57 -0700 (PDT)
Received: from mail-lf1-x12d.google.com (mail-lf1-x12d.google.com [IPv6:2a00:1450:4864:20::12d]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id C8BF0E86C534 for <tls@ietf.org>; Sun, 3 May 2026 14:33:57 -0700 (PDT)
Received: by mail-lf1-x12d.google.com with SMTP id 2adb3069b0e04-5a858881ad2so3012212e87.3 for <tls@ietf.org>; Sun, 03 May 2026 14:33:57 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1777844036; cv=none; d=google.com; s=arc-20240605; b=UsT8Y4K++YpsOtJ2B1shTXjEOTMlrFoEuE8hKu6fwShOSsv1lZytw6DnaKJxgT0S1b aifHPwI+E6vEIF0Fr5gBrcCgPfU3ngVM0oqOvMR1rayfqv7E7Q6xIv+ZWCaY2k2A0oj/ EhbzwYdyvPRaZ70zgGS4aBnRwCi/pxl10JpE08F0bg8s4U6zyTCHPvf0NgUUIud8V2ev b+ige69U5PlnbyWv6qceRjbsDjjGL6LoWAN3psOP++NVSOBH0dRX3GEdSCMKwkG1mO00 t+n2zSILlODlerUuuOWBjVrcLh+fVeOIxA7jlku9THglqOXBfx3jqELZeddo9ZiKmJfd /dPw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:dkim-signature; bh=H+5itAZriXgBq2JfDJLEd7POvC2gO9Fn82j+C/XuJfs=; fh=7XEZx34HRYU3gHs1wtsYESLHo6T0sWy4XXBcfaI3C9M=; b=JwrdtVLYelbzTHIgq1meSkbkhN3qMpNq1vMHsYRKWebj6rXdVtj3v2vQySq9i92SQm /92IQh7Ug5CCa1z6pmPBrmLUrbZaAIwHMPj9mEbhhfM9iPoWGHE4uN1IRktq70rggtVY tvBcgQsHQZijsWoELS5jt9r5GDK3YpkKUMv//v/RlrMq2Aida8e8WWLB1Cotet3MR6cR oNmII6LJs6K9h/9dmCVfhEhRl5yHY/8YT92oSXB2Vy8V0LkHFAiS7ND3IigFCFBfCGcJ Is7JBaXL4BEEtaEqkgkypbrifVbBlu+lR6Mm48m7y+ufgFCJaw0DYwISluruajwu82L5 OjGg==; darn=ietf.org
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1777844036; x=1778448836; darn=ietf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=H+5itAZriXgBq2JfDJLEd7POvC2gO9Fn82j+C/XuJfs=; b=JR5a9ysdn3suURCTkaBk3gP/uvFwUk7u0nUAJ3Bi2xFmjFuTJWVmLj0oB/vyXUpPZN wLKtjlXTxkH3a/QnczcC1VHeWuGPxB4U4U3tKQJGhzcEUbQ////JibKXKophZqCJda8e esfwJCZa+GB8gaCGAauXfbkJtye1ux4tGei8jhlHWNp4T9YCmNVxHQU8g+K2GHNfVPX7 Y1FRPd6IFo4nuS8bAuIhGFIdMn8On+U2RPO7pZQlP8En7JP2uhEbgZFNHd0kY5MrFw5I z5T1ZfnVrfXqeZFjcTaH9jiQI14SLWuM4jvAW94l3M5pkhcsvsQaPg5I6TkkHOXROFkW rvtA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1777844036; x=1778448836; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=H+5itAZriXgBq2JfDJLEd7POvC2gO9Fn82j+C/XuJfs=; b=WHv69xjGkLCEI+zkVNuexZlw10jYy/9H2zYf7lUqe0RizXIwCSVh23PCUc13JxhxQI Gz65fgf3zPBXKWIounRI/3UYUFdA0N77XgK77frWIM+NKMyzc2F2ZSgw53a3yB8q4hn4 4m1T+8dUIjBqFZgnC/WjEoUz8gnatIfGv0TSmkqDuNUdpCM5o/fVR+qehVI1xEEgLXEI Tr80HLYFoPliE+9hGYPGcWCYCqZTfdpqk8tQHCeM2qGzYs3AkOB2++x2a+71sQwp62Sl gHX0Rlhkt+UHZjh5Q1OY8uvMSIDl8WVj3x9jWcyIXhPyTq9xDElQhumNvj/KgPvaHO3N tYmg==
X-Gm-Message-State: AOJu0Ywue1GO7qTFiKdOaIsSuVOiR11V7kPJk+ibaypiW2SYM/h6T7Xu AcD97XfNpXrXxtvqwLfOnu3cBdezXq/ni3PmECYtmTcmOZvo/qSRokmApFdfMMX/7/jyjyodS0Z HtP+C+dfACc3kKpbbgicDIiPXfkGCJhz7cgvIeJo=
X-Gm-Gg: AeBDietno5Nzb5HDfGsGSuZsJf9iyt/p1JsTKsgMPoF1Ur1AGEOJAzCA8QG/3rMFOxL b19SSjYI5A5XaUx/MX6LEo241gWx+U9SNF2VFAeoBh1csvVdT9TCbZTkCzkiR/DiOrOESdexq/R BFKQdJTdZuWkjEig0pJXOyWbUSK9qohROPpEYL2XB3EAJhDOdfJ0tpwpZUnBpngEPu6/evi8l5Y JgNG653YcY9TTxKbXnesYcTsRyMhjL69n4FJvdypNmIwjvFnLFNwl9w3aiehUWgLKAWFdGrbkhn Lgj3NLRzp5h+Gfw8VsA9mTFTzmJwKfVlPvWQZ7v/HpGd6f+oRnucyE42UOCv0kQrm7TgK9iCPgD el3TsmtdB3i+XCwBz1aW1vc2YoF3wR3kra2bt1NhNaWL4ozmc2661t+uZl5ahh18Zt3Wsm2qWzr iwsEU=
X-Received: by 2002:a05:6512:3b8d:b0:5a7:46f9:a6be with SMTP id 2adb3069b0e04-5a862ebe397mr1812330e87.2.1777844036117; Sun, 03 May 2026 14:33:56 -0700 (PDT)
MIME-Version: 1.0
References: <16CF0FDA-7263-461A-9F2B-D37DBEAF5DD9@sn3rd.com> <038E2DBD-EE06-4091-8401-9818FB692459@sn3rd.com> <f1dce979-023f-4756-bd8a-58fe6201bf94@cs.tcd.ie> <90f2c421-9398-494a-8940-44fea9e991f4@tu-dresden.de> <CABcZeBOsR05ppKAzB088+KPHRBJAUJr+T3wx8fCo+G+K8BdBmQ@mail.gmail.com> <CAF8qwaCsr5MSLoyS1Y-OzjO_ejZrKqfZMsLRi2_LDs9ddwLf3w@mail.gmail.com> <AS4PR07MB8825348270D422465253B63689342@AS4PR07MB8825.eurprd07.prod.outlook.com> <C3F7BE58-9CAA-4562-B153-AD7F618F6465@vigilsec.com> <CAPxHsSKakNmRzW1OayqcJvB66C1sXaxCgm2-a+=ztAXAqHK8bg@mail.gmail.com> <6acf7e19-c63b-4c1c-91ff-76c032e975e8@tu-dresden.de>
In-Reply-To: <6acf7e19-c63b-4c1c-91ff-76c032e975e8@tu-dresden.de>
From: Daniel Apon <dapon.crypto@gmail.com>
Date: Sun, 03 May 2026 17:33:44 -0400
X-Gm-Features: AVHnY4KwUYZHmk3GnsKxtKGvGPnm_kyKIVvBM1Q0tgTF7jkq8Ynkq4EkzNgUb_U
Message-ID: <CAPxHsSLY4owoBVOTWNaR1=prW_oEaDD1nDdDvAnoE1ZGG6r_Pg@mail.gmail.com>
To: Muhammad Usama Sardar <muhammad_usama.sardar@tu-dresden.de>
Content-Type: multipart/alternative; boundary="0000000000003d28990650f092a2"
Message-ID-Hash: 3CJRA6CEY3BPF6AELEF3D4HOWR4SC3RI
X-Message-ID-Hash: 3CJRA6CEY3BPF6AELEF3D4HOWR4SC3RI
X-MailFrom: dapon.crypto@gmail.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: TLS List <tls@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] Re: Working Group Last Call for Use of ML-DSA in TLS 1.3
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/J7Os4QqnHedZ5YDEe61jCnr4xEw>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

" Was that a typo? Did you mean WG charter?"

No, it was not a typo.

My position is that the discussion in this email thread / working group
chat(ter) (no *h*) should serve as the clearinghouse for comparison issues.
That is, I believe there is no reason "to compare A to B [in writing, in
the document]."
Long-living documents, in my opinion, should just specify schemes. For
example, the ML-KEM specification doesn't belabor comparing itself to Saber
(a NIST Finalist, and a fantastic one).

While I haven't taken a full accounting, I believe I am agreeing with (as
of my message on April 29) at least -- beginning after Sean's message to
this thread 5 days ago on April 28 declaring "The chairs have judged that
there is consensus to progress this I-D." --
i) Eric Rescorla's message on April 28 [dates as of New York City time
zone],
ii) David Benjamin's message on April 28,
iii) John Mattsson's message on April 29,
iv) Ilari Liusvaara's message on April 29,
v) Uri Blumenthal's message on April 29,
vi) Russ Housley's message on April 29.


--Daniel

On Sat, May 2, 2026 at 9:04 AM Muhammad Usama Sardar <
muhammad_usama.sardar@tu-dresden.de> wrote:

> My 0.02 South Sudanese Pound (much lower than cents): contrary to the
> (potential) intention, I find the presented arguments more as opposing
> the declared 'consensus' and hinting towards some procedural burden.
>
> On 29.04.26 20:06, Daniel Apon wrote:
> > I think the comparison should be done in the WG chatter.
>
> Was that a typo? Did you mean WG charter? If so, I don't see anything on
> PQ in our WG charter. So by this argument, you seem to be suggesting
> even more procedural burden to first apply for WG rechartering before
> going forward with this document.
>
> The document being discussed for addition
> (draft-ietf-lamps-pq-composite-sigs-19) has already been approved by
> IESG and is in publication queue. If anything, in the IETF sense, that
> document already has IETF consensus.
>
> > A document intended to be long-living shouldn't carry along ephemeral
> > discussion points, which may or may not age like milk.
>
> About "ephemeral," documents can be "Update"-d, or "Errata" can be
> issued later on, etc.
>
>
> Best regards,
>
> -Usama
>
>
> PS: In Germany, there is ultra-high temperature processed "milk" which
> has shelf life of up to 6 months (cf. [0]; sorry I could not find an
> English page, but you can translate; "Monate" == months), which may be
> sufficient to Update a document, or at least to get an Errata approved.
>
>
> [0] https://unsere-bauern.de/erzeugnisse/haltbarkeit-der-milch/
>
>