IETF Logo Mail Archive

[TLS] Re: WG Last Call: draft-ietf-tls-mlkem-08 (Ends 2026-07-08)

Martin Thomson <mt@lowentropy.net> Fri, 26 June 2026 03:03 UTC

Return-Path: <mt@lowentropy.net>
X-Original-To: tls@mail2.ietf.org
Delivered-To: tls@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id C3E6F107AF176; Thu, 25 Jun 2026 20:03:13 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1782442993; bh=g9VmhQqJzbmK5gX7ZoF1YPgDv5ZvU5xWqSIciRHm5O8=; h=Date:From:To:Cc:In-Reply-To:References:Subject; b=CoetzQ2aognlznnfs/kljpOQdxvgK4Z8XQoog8zVDUDIUGOAtf88cxhSMvkGWAt/a F/4mmnje8+l4scviiWt+cSyXjJmdeh2KMq+uTLsWF6zqBp5FezzPd32yFOiJQzSjho ispVfaoJKF47MxT0vlR5/2wWpHDcp2Wq9FWP4Wck=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.799
X-Spam-Level:
X-Spam-Status: No, score=-2.799 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=lowentropy.net header.b="sNNYiDeG"; dkim=pass (2048-bit key) header.d=messagingengine.com header.b="NqmL0IDb"
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZsFGxfbukqzO; Thu, 25 Jun 2026 20:03:13 -0700 (PDT)
Received: from fout-b7-smtp.messagingengine.com (fout-b7-smtp.messagingengine.com [202.12.124.150]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 35FF8107AF16C; Thu, 25 Jun 2026 20:03:13 -0700 (PDT)
Received: from phl-compute-04.internal (phl-compute-04.internal [10.202.2.44]) by mailfout.stl.internal (Postfix) with ESMTP id 90A481D00056; Thu, 25 Jun 2026 23:03:06 -0400 (EDT)
Received: from phl-imap-15 ([10.202.2.104]) by phl-compute-04.internal (MEProxy); Thu, 25 Jun 2026 23:03:06 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lowentropy.net; h=cc:cc:content-transfer-encoding:content-type:content-type :date:date:from:from:in-reply-to:in-reply-to:message-id :mime-version:references:reply-to:subject:subject:to:to; s=fm2; t=1782442986; x=1782529386; bh=9HulhIVsLoxVyvzfXZQgKKaQHCYDICGC GZ+43Ljw9SE=; b=sNNYiDeGKsYh+xVviArszKTkAiVdUK2Md62KujOx6EUTC9JO vpAPi1INN+Hlc7HjeunbJGXZftng7wwiNn4HMn6yH3Ndvpd2Gt3/svJPQvAQzp7U GVUcHsffXY6+1jhwnu2fWSJflEiAEbGOCUwX+Hz2v0OVHRDPNrrLn+511NH7Imhc n76oU1q5a2TxNqNMitvIhwu71Z99bnCJnx8Px8h13jXGvlnayEqiZ40+MibPuc+v 7GGYGFM4NmxUX/0mxpACDEzwtNHaXP92YYsyH6KtFWyyEFAC6AeBLNNl3J9NRzEA 0tPhEbN5gPaycNtihr2SF7aMt0iDCFnI+kkifw==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-transfer-encoding :content-type:content-type:date:date:feedback-id:feedback-id :from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:subject:subject:to:to:x-me-proxy :x-me-sender:x-me-sender:x-sasl-enc; s=fm1; t=1782442986; x= 1782529386; bh=9HulhIVsLoxVyvzfXZQgKKaQHCYDICGCGZ+43Ljw9SE=; b=N qmL0IDb83+oic95/8g9Bted4g+4fcTISlAfaAYC8RMo3f32UGAap01+OotTO0Kc6 86N9LMa2uKVAS9e1N9FVYIqQbsS/e3IwTlYs3jz9pOx5QqdKQu6BHGk0rWpmY14v U7Ad3FVSxJeDeez4Pet9im9w3w+KyJpigKIU9Se17wOMoJMm294rSa5fraEWMEsQ fmp2/pqMjt9HW6P3Jb3CTomIpmqNtlu8tzNtRgexjhEb2P8Vp056BtP4Ce0JGp6c 8YH5ZK/4TYaefSLLEWwGi1oatMItuW0SeePVVWJD1slyGlwpjFRN3NjY0naQD9+6 AzMEBAMijz+CBL5ckyXQQ==
X-ME-Sender: <xms:6us9ajaZfHmpT6Mf3PHKSG_eb2BBp_QGe-IzP1KqVpYzU6yQZrKqyA> <xme:6us9atOTCpl_Geh_7mPe8C1yfjV_nH5fT3uy_mQWckS9jZRVysWCPGGKBTx6LxBVa 41Qgo9lCAm1CnE8TspsdB0nunSUh3dhajUomiuCKPAWur0E32rzQLs>
X-ME-Proxy-Cause: dmFkZTFo13a7fodkZlBQwB+VTIdG8m0BbABx+G//fMxY8/b6Sw9r+hFgIk1q9vlB4F94a4 /qIIyYL0+4TzT+zLUoQekOBlBCEmE/SOmwbnY40+p259kSrEhMiIKe+akUNmmJ/yG/02Np 0YzogRfp9uFRomV8kJucX0dSypeu2T/DTsedJKusE9XSCVNEwN9Ki120mPidU1P6TSHGdy A21WiSJIXGlsbbryBhyLaauHgKxAYnYcD1e7OI8oHBmfvhQC53yjJgtIMRXMEoRiNgcMOQ 3vWU//bNK0YoFvM7Rgg/sPS0BscTou/KGJNkOdBhMGO3Xqaf2La2Fv9qUhvv+we7+daOB6 8uuZJ3N162KqStXeQ6R8FqVe83hH38LlB7nHUFfDnQHJ0hn7nIMK6BIhZWhC31f0rTC4hm hL7YF3sQTSNa2g+64O0jr18pOdcAO+F9JCLKl/ht5os9haQY1sv2+6F4BdmYIN4+3XZLNs Jr3OhHv5s4wy3GvVLL2jl/QVQMZ17ZPQwxPivT0J2Jj0vbaT6cfaOuoaYDp0uk0uILlCw3 idjZuPB4d7rIdlYZTQFjmq+R1xlLnhNwJGGAkt2dlBlYFI9UR58V+kfsvhzzpFp6M4QLIs PftBa9jZkWsREYpqJVdAK6WNy64DG0dKn54r1FFH/kLEH2cuRZm2jutVEaAQ
X-ME-Proxy: <xmx:6us9arEhzICqb7aDsb562HiAzcq4jDord9RmxvNv3FQRCvICbhxWMw> <xmx:6us9ahrOSK7orJcCPxtM4gc5QmAeY5ClU5RPzHFwmdTIfXuBF8fzJA> <xmx:6us9akbsmJDNLFYlk8ulQdUmL69pZyzcib0ykVn4OrK6w5niPmkVQw> <xmx:6us9aqWcGwnCeWk6DBmtOuQe7ZEchpuVnK1uxjqzlnBU3vHhWzV1Bw> <xmx:6us9aobv42Pkau5ao_Cxi-f7oJ01jfcqsbrroJxxFiVW92SmVA6lo8d0>
Feedback-ID: ic129442d:Fastmail
Received: by mailuser.phl.internal (Postfix, from userid 501) id 2CEBB780AB9; Thu, 25 Jun 2026 23:03:06 -0400 (EDT)
X-Mailer: MessagingEngine.com Webmail Interface
MIME-Version: 1.0
Date: Fri, 26 Jun 2026 13:02:45 +1000
From: Martin Thomson <mt@lowentropy.net>
To: David Benjamin <davidben@chromium.org>
Message-Id: <1cd37f62-4f07-4fe7-8e08-1cf5c1f23f81@betaapp.fastmail.com>
In-Reply-To: <CAF8qwaARYx+=7jN+dNn-wtaZmVxMNJi_=d80zQixo758pK5U7w@mail.gmail.com>
References: <178231320760.1520243.5914961961176039994@dt-datatracker-f9b87776f-8pmmg> <2cd74c06-4489-4c68-aad1-bd9b35a05c39@betaapp.fastmail.com> <CAMjbhoW9BmWXvjRxfZALUKoniPYsthhikv2q=iJeXo9X_aMX7Q@mail.gmail.com> <CAOjisRxEJWiq7ESss8MqLxCCxkZUfUDPwNWsgSLCWH4ej+xvLg@mail.gmail.com> <CAOjisRzT9EegXyxcBM1Po_ZTVbXQ0fcMynR31y5jYBdKNmGmYw@mail.gmail.com> <7c36cda6-227d-4a81-b908-3f59052de500@betaapp.fastmail.com> <CAF8qwaARYx+=7jN+dNn-wtaZmVxMNJi_=d80zQixo758pK5U7w@mail.gmail.com>
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Message-ID-Hash: 3W75JJIOPWYTLFMUZDJR4KERGQPSJVPO
X-Message-ID-Hash: 3W75JJIOPWYTLFMUZDJR4KERGQPSJVPO
X-MailFrom: mt@lowentropy.net
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: tls@ietf.org, Bas Westerbaan <bas=40cloudflare.com@dmarc.ietf.org>, draft-ietf-tls-mlkem@ietf.org, tls-chairs <tls-chairs@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] Re: WG Last Call: draft-ietf-tls-mlkem-08 (Ends 2026-07-08)
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/O5wlshqoQ9MsImv-Wea3ZLogSMM>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

On Fri, Jun 26, 2026, at 12:47, David Benjamin wrote:
>> 2. (Decapsulation key type check) If dk is not a byte array of length 768𝑘+96 for the value of
>> 𝑘 specified by the relevant parameter set, then input checking has failed.
>
> This is the *length of the private key*. That is (hehe) checking what 
> you generated. It is *not* what you received from the other side.

I see, thanks for the explanation.  I sort of assumed that FIPS 203 wouldn't be THAT silly.  Bad assumption on my part.

Given that any checking that exists is already implied by an invocation of Encaps/Decaps, would it be acceptable to simply remove the explicit pointer to the checks?

I've suggested that on the PR: https://github.com/tlswg/draft-ietf-tls-mlkem/pull/25/changes#r3478889869

v2.46.0 | Report a Bug | By Email | System Status