IETF Logo Mail Archive

[TLS] Re: Working Group Last Call for Post-quantum Hybrid ECDHE-MLKEM Key Agreement for TLSv1.3

Andrei Popov <Andrei.Popov@microsoft.com> Fri, 10 October 2025 15:23 UTC

Return-Path: <Andrei.Popov@microsoft.com>
X-Original-To: tls@mail2.ietf.org
Delivered-To: tls@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 9282270C63AC for <tls@mail2.ietf.org>; Fri, 10 Oct 2025 08:23:41 -0700 (PDT)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.096
X-Spam-Level:
X-Spam-Status: No, score=-2.096 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_NONE=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 40hruNxp0FC4 for <tls@mail2.ietf.org>; Fri, 10 Oct 2025 08:23:39 -0700 (PDT)
Received: from CH5PR02CU005.outbound.protection.outlook.com (mail-northcentralusazon11022072.outbound.protection.outlook.com [40.107.200.72]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id DE0BD70C6326 for <tls@ietf.org>; Fri, 10 Oct 2025 08:23:34 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=Z2eFi72Sh6SqdyQyNdrXZ9cvmY5vndFAP4c/QozfFDEI+PSbpVLmPjlUPYo5SrxROy296vCEHsun4s7eEW+fG2Vtf8GV56ckvOk6PzwCQvtA2QlErP7REu7/WJ/TR7T5uq/qFIxvJNBjlXkQrE51p3KPf9l1jY91zmhUCc5rNTSRj5MNXqlvf3tChRx2LdB8vXm9qr/zG0R4RrCZOK9lNgrblZZUGlgv2jCUrfDss3IpNyG0V85smZDrbFA86tEby54cpHnZZsbPbIpkXxjWUeus/ZxWMfF/Gb2Liv+4aPAIS2dyf+SqPg3zW8XXvV8GnI6nJ2iIfjt4FWHayot5Yg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=jodbCdIFY74TJy7NLTG5XAIHdpFwIfjUD4JPd3wX/Pk=; b=wRVbn+iwFZHcccQtCH2TZpcA6zvi7r56UwE08yD2G69n3X3dm64DkCrcR8wrYC4WmP3OgsX0AvyzpMvyd8me7K274DASAoqD4CXtmiAfCWEFRlwAnEU+/HAkLq9lNlq0Z+dN3C3X4oKDocbLfBenap7vFaB5qL3PN5vMhhKkl7W9XFlEBKHC+Z5ZB3e0f7GGWOAr3lNACfrkTbnbXEQdiaItWDzZtoIFNh36ReLI/M9kwgYsA71RGLnj6fZBOSIYcm+7/SrFAIUUbOW2wdcXxaKfFp0aF8XFXuvPc2bapuM+qTVGiYri09Tr150LaBTfr641J5F5t7tTU1jjQTTyZw==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=jodbCdIFY74TJy7NLTG5XAIHdpFwIfjUD4JPd3wX/Pk=; b=cIRmhkzzTq02WpIny6UfOwwDLEd3ffK/lTpBIYtRvixFLxjsBrr5boFz+qKK80xQiaAHYvJnKD4dUZdfyOHb3ArTXfRHxdAfR/91JNLJVMALPKPjHSPjUMeV6L0iVUeDfVWmy1H4/lQtFF0JcLvZ/3i2YrhLWmpw/ZpUEcF/+f4=
Received: from CH8PR21MB5484.namprd21.prod.outlook.com (2603:10b6:610:272::5) by CH2PPF7247630D8.namprd21.prod.outlook.com (2603:10b6:61f:fc00::146) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9228.4; Fri, 10 Oct 2025 15:23:26 +0000
Received: from CH8PR21MB5484.namprd21.prod.outlook.com ([fe80::c4ba:2e6d:2632:cbae]) by CH8PR21MB5484.namprd21.prod.outlook.com ([fe80::c4ba:2e6d:2632:cbae%6]) with mapi id 15.20.9228.005; Fri, 10 Oct 2025 15:23:20 +0000
From: Andrei Popov <Andrei.Popov@microsoft.com>
To: "Salz, Rich" <rsalz=40akamai.com@dmarc.ietf.org>, Kris Kwiatkowski <kris=40amongbytes.com@dmarc.ietf.org>, Bas Westerbaan <bas=40cloudflare.com@dmarc.ietf.org>
Thread-Topic: [TLS] Re: Working Group Last Call for Post-quantum Hybrid ECDHE-MLKEM Key Agreement for TLSv1.3
Thread-Index: AQHcOfIdb7TNkKC9Skuy9tBLy+TPprS7fxzA
Date: Fri, 10 Oct 2025 15:23:20 +0000
Message-ID: <CH8PR21MB5484275C3BC970292001CA5B8CEFA@CH8PR21MB5484.namprd21.prod.outlook.com>
References: <CAOgPGoA+c8kXDizwsvFG5tLz9+Kxk0HqiN1skKp5jMvvpxeu0Q@mail.gmail.com> <CABcZeBO+3u=1=ueNscq+O74Qv=7PC5NedsGsugp=GZjVqtODoQ@mail.gmail.com> <1040fcc9-46e3-197e-1fa7-353c978486fb@nohats.ca> <CABcZeBMZ=0ByGpDzHsfq2m3wO9NhpEoFX+2k0_8NhTiAYekqBw@mail.gmail.com> <aOimWoGkK3_dGOSF@chardros.imrryr.org> <1d14a4f9-ab5c-471f-88cf-e3ca963d7f9e@amongbytes.com> <CAMjbhoVG=Rvm2tMHmXCfmrn4=hj2aiKb_w7VYAbG5THcvs++eQ@mail.gmail.com> <e00950bf-1ce3-494b-a3be-f2ca2ac0d481@amongbytes.com> <MN2PR17MB40315B2595412566101C43F2CDEFA@MN2PR17MB4031.namprd17.prod.outlook.com>
In-Reply-To: <MN2PR17MB40315B2595412566101C43F2CDEFA@MN2PR17MB4031.namprd17.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=8c834c34-3f5d-42ca-9667-a9a3b86cc530;MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ContentBits=0;MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=true;MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Standard;MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=Internal;MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2025-10-10T15:21:08Z;MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47;MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Tag=10, 3, 0, 1;
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=microsoft.com;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: CH8PR21MB5484:EE_|CH2PPF7247630D8:EE_
x-ms-office365-filtering-correlation-id: 68999e89-ff2d-463a-1177-08de0810f1e6
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;ARA:13230040|1800799024|376014|366016|8096899003|38070700021|7053199007;
x-microsoft-antispam-message-info: 98BWQ+hUQS7prvpvRSOl5bSfc+G38vYKR9jT5PA4ttswnkrGgwhOVcS+oP+LbQ1IloNftwPIQuZhGvLybE5a3AKUNhR7jn+M1d88MqGqohpUqM+ytOZ2AngpYlc/YazMKriwzWgnCktZK7I2p4njX1fPBFP98z569A3pXptxTqTiUvxrDULbvD06fSlGKpJpxfW4YCHoijGZ7MZ9QX+nmYdwF3ag43Inszp7mKktCDTRzgJfZtjTsi+JmxNHhI0cBQuq64q02M7GwgkTAhJpd3m7s054QpZ3H1AMaDtqq/A/w00fNR5AHXaWvSh5EjpX9p1VpstJkozAvMPBjCP8v1yN7B1hXNNzLsfiycRsM7iAvIhIOHvB0/d2SYRDCiBATkSF1MWoMfnxj1jO75tp73IAwSp5wRJbQwBEhKpALmU6N9HKWMb+eEWoflEV8q9ZyZc3xWkeeuvF+2MsUKwYaqQOGxZvWaRNjVlGpVAj7ECIDBcoT1Ntn61nhexsGoGThlj0hnxATSnEh5P1UukPyIyYmTeCFnpqwbmMwESZqTsaypmXs6iHVZcpbVxujTcP6nyEjaXecmGP7J5/6TecYsX0glpyzN3JgJdd+E86BDQWmWOXy2CT+kUPnRXoKqy1jlO0chw/TJfAQa7WKd/2lW/s6O+u1eIG6Ym8e7c/FD/oApXSYx9PZBBE3y0wR2zkY7KbXgEyBi4gfKjnsqnPj3Rep2+MigX/QGc5ma4/UdlEx+WaBIk9u/R78zGIUdUEE9bdgjr0fSQvMLUXUgEhqDs8dYlaKsT22/AmLD14yse+ccMOsvG/akbGIv2xn3+/vNYeNI9a2oXWIBjSO9GE2hPoFnmJMjTyE6+sgw+T0DmfXPT2zUNWRI0acUtw+XPgDDatLU5/5ZyLbesdxv1wk5JsUTtFEWuz5lTC88ygOfRMb5YvgBlN+gRfdSHsil1tbJhLgC5tHm/xhAgoGZWI8RltPtVedZF1NrBUw9FAjNVG/j3xE3shbFFHnWvw/ZlcxS08Chwd8LVyWi/E2WEUSNxJQ3ujxb8Vuos56NA1EKKP8IpTvjnSK+csHZ2Ir6DNZYEQ1k1KMIr8CvFCJn19w+C4XVdorlcL6Ufmz4hmJNuHJZ5QWjqr0XS1hPXVqm+1yxYG/Y4b42rWJLWb30gHOji+Vf1nvWhP2IKICpHqNE0rMr6/5x/DxUhE6s2keu6lO8ZWmdhlXGJ+PYMCOYZSeMITp6f30JFmB/VEQr/4Eg6X5pvVah0AxdIX2OPxBLQ3Rj+uQtCPLkk7sd4rWSEwkqWvsNv+sfZckglDKJomtt3r0hICSIE7nE/UEx67Bsj6aFAK2GNXzzLFUF+1fXtrMd7OsL7+1fabnvZSNEpDQuIo2AK7iA8Me76cXfeAFKcDFtpWvyTQch2ixSnH/zTYO8RaTs48uCbxw7tKPcsCtqe+VAdcIjIvVsXeyQUs0ElogAQJ/8dNAsilcTX2f+TnV5GOIBKeDLiD/BaLFkdaV76gMYneETe56vGiZ2BmsAFT
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:CH8PR21MB5484.namprd21.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(376014)(366016)(8096899003)(38070700021)(7053199007);DIR:OUT;SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: multipart/alternative; boundary="_000_CH8PR21MB5484275C3BC970292001CA5B8CEFACH8PR21MB5484namp_"
MIME-Version: 1.0
X-OriginatorOrg: microsoft.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: CH8PR21MB5484.namprd21.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 68999e89-ff2d-463a-1177-08de0810f1e6
X-MS-Exchange-CrossTenant-originalarrivaltime: 10 Oct 2025 15:23:20.3972 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: hCHxCldoOtV94Qj73T8Dt4DpEQTkzl9pOG54iwFFXzUya9nodRgJ1pVBApr6D9mGRspsTILkIM0qEyNd+5N3Dw==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CH2PPF7247630D8
Message-ID-Hash: ZUMTMZ3MQIVEAI5L66HNBLM5W77FAACD
X-Message-ID-Hash: ZUMTMZ3MQIVEAI5L66HNBLM5W77FAACD
X-MailFrom: Andrei.Popov@microsoft.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: "tls@ietf.org" <tls@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] Re: Working Group Last Call for Post-quantum Hybrid ECDHE-MLKEM Key Agreement for TLSv1.3
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/N5PL9yvjPvPxSw9MFf0xNwTTyrw>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

+1 what Rich said. There are regulatory requirements that require NIST curves, whether one likes them or not.

Cheers,

Andrei

From: Salz, Rich <rsalz=40akamai.com@dmarc.ietf.org>
Sent: Friday, October 10, 2025 7:28 AM
To: Kris Kwiatkowski <kris=40amongbytes.com@dmarc.ietf.org>; Bas Westerbaan <bas=40cloudflare.com@dmarc.ietf.org>
Cc: tls@ietf.org
Subject: [EXTERNAL] [TLS] Re: Working Group Last Call for Post-quantum Hybrid ECDHE-MLKEM Key Agreement for TLSv1.3



  *   I also see no reason to delay this document.

Same here. The draft adds things that were asked for, adding more is premature - start a draft and work it through the TLS WG if you want. Removing things opens a whole nasty issue with IANA and only serves to delay. Changing the recommended column might be nice, but the Web/browser market has already spoken, so why waste time stating something that's already a fact; it will waste time as we argue about the other two options.

Publish this.

v2.35.0 | Report a Bug | By Email | System Status