IETF Logo Mail Archive

[TLS] Re: Complaint to ADs and IESG regarding TLS WG chairs falsely claiming WG consensus to issue an RFC for draft-ietf-tls-mldsa

Joseph Birr-Pixton <jpixton@gmail.com> Fri, 29 May 2026 14:29 UTC

Return-Path: <jpixton@gmail.com>
X-Original-To: tls@mail2.ietf.org
Delivered-To: tls@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 04C60F770A12 for <tls@mail2.ietf.org>; Fri, 29 May 2026 07:29:35 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1780064975; bh=zB8JgSTDEA3nFUynJHQoF8zlyQ4xCFbp7B5igLHURZc=; h=References:In-Reply-To:From:Date:Subject:To:Cc; b=rWncGfoPVqiueLtJLbAhxgB8bvzl552IbW3WsO4m3lCUcQebUN2XOLBLsbhoeo6o5 G8DdQXnGQe+IxlQUuKPvQVCyXNA3znvJd0pteprkj7T2DR0/aspbG7xiKWdo5ESBFB b8Rd3VNRhHOMJx/8og9SlqDV2p+famRFvDugn6/k=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id b6Us-EV8S4OH for <tls@mail2.ietf.org>; Fri, 29 May 2026 07:29:34 -0700 (PDT)
Received: from mail-qk1-x72b.google.com (mail-qk1-x72b.google.com [IPv6:2607:f8b0:4864:20::72b]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id AE93AF770A0B for <tls@ietf.org>; Fri, 29 May 2026 07:29:34 -0700 (PDT)
Received: by mail-qk1-x72b.google.com with SMTP id af79cd13be357-90caad2e944so1415586885a.2 for <tls@ietf.org>; Fri, 29 May 2026 07:29:34 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1780064968; cv=none; d=google.com; s=arc-20240605; b=JHk749jg4wasJiZ5CzegoNRLRUBty34uyiFoT90fEgYr55teo0/Ax6xfDqnjP6MZ3d e+wneRE6zDO5h4UggVNSN0IRx2gfQuyjFRwyRgQ5GyRihWMQprzdF0nNa6tFspxhFqUh acXhACIq6jSKL8+oL92fYW379nZU6oJOwoR8aAv9SbxIePE/ETc9/0DI6aoZDbm0SsfJ f/YpCOUSR7qlUF/j6EA3zF1eeftKwLg1TniBBQaI1mFiz4XmUxfoJIA0A8tXKmtEVnfA xFATMn0xNV+Vor4bdqPmngR6KoctnE+MiOhsvIBtF4aqlOOee7zx25N7yENuwluTh1oL euqw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:dkim-signature; bh=zB8JgSTDEA3nFUynJHQoF8zlyQ4xCFbp7B5igLHURZc=; fh=NgBl/7d3hkMnapDeRwKZM2dUtjwPcP1KCRBS4gW/mhk=; b=Go+mCB7cq8D4yjOm/MyGIkD8DDBFLgDc5AQ/cOUAj8cZexXrfdAiHPWZJ/VQpcli6h CqOc4WAfnPZ8Cj6NAAjjTkFv51GJaJbWks0nbxMVyXQRsH86RDcrCep4z5di2hxSsBDv b92HKvTqW5BUksc2dGchWrFm+I74CCYPAcYG+BVq+9s5g7AOIeb9wP/QtFuVwnjT0wg8 wWJdfHddwaViY/OcmEvTOfEPl4cRY4zuUDFQDM/wqaUcUJVwvpWUKspnE2yfvvPthUPv 1qY3sAxVznNHr14HxPpmta/gyXy0fO9aC8zuOiSvC/PjbMQ2x3ILQ07Jie1ROIgkFvwj 8kKA==; darn=ietf.org
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1780064968; x=1780669768; darn=ietf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=zB8JgSTDEA3nFUynJHQoF8zlyQ4xCFbp7B5igLHURZc=; b=dx2O00Gx/kR1Fif4AitEpGkSO0H46yn3gcqLecCXtxuOGhZ5r+/ZRa4Pd6cRncW1iy lnKf4Bgxg6iKxT8V1NZi12khyCBD56sX9ANlbYLnscsY4ih2pNIbhBAAfoSwaCZfWySi 9khH3EkUVT8MQ32ziztwKjtVf47Tb/CGyXSQKBYcKPkMCShH3NSaycVtDtzTuKbUQvM8 qZ3UiYaqNzz4Nl6qSM+qwShjf4ZDz0/z1mPViB0Le3SZ1AwkVxTxtubZrEh53VRANQpW fJa5w0SetVbg1u5M1g1z/cXBUYUUyccbPrQ2Z1NvuTKUqzri/XfZLhso7zISH67nSXLS 0DPQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1780064968; x=1780669768; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=zB8JgSTDEA3nFUynJHQoF8zlyQ4xCFbp7B5igLHURZc=; b=p7xS0ymOJ6n1b5CySAMt/u99mkpgdtxnDoKME3Qp5NFtFJMkMheqjMjL2G0uPBszJo He3hkWPbVuQVNZbpw6SjILMg771N+5a+jQzwY9naiC/a2Lbic1p4Z8B3YrursL7IGnD5 zCiYfs9H1cFkd4ukf8zlG+3qdl1VVK7U+8c2jgnq2BHkoufKSbiVdeCWlr0NQ24Ah3aL 4yKiPYkXfCUlxRVm+5cTULWIGuIAtlg3VdplSCFG0E+KptkVxgvbE2rvTYwxsaAXER8y CVHmCCSmI0LzoinWUVaAoFAYuwr14JlToxEEVWUUSL16mi/I5f0Wbz6j+dw6Isjp2pwe j4TQ==
X-Gm-Message-State: AOJu0Yxly6P67Pj42AW4rRAt2exauB3YytDS0G2fwTVea57heKFmbZxO QQDofCru+MD2cQQaljgIYUZrcbEdligjJm1y7geMzA+fAI3X4fIB1FuOocpAeLRILwhDBaag7X5 kRfqbnml/49c1O4y1jSykof8YWnDPNas=
X-Gm-Gg: Acq92OF9No+MhkBOhC9XS5ua/NNK15cdCVEKUbYt6guil89pmz8enMbcqtdwahuakOY vlXhe2EkM+/DUzYhnozU+iD5mo765GpaxrXMagSB+RaAF7LoFvZYE4gGAVVAREeY/McqJZdoBLG Yd7SPtpxFzWMhum6N/lMeK8G7wL5OGVNrKaSW/ucmzJzZthWq8WD3pipmrEqQ7FcotGGFqpZvF8 NJ9JZuFPqO9+D2Nv6DyYa2r043EG5jWwUJuiFfbUDhlKCYmQG2xq/7FIEdItFBn3m4BjCgpnggb LDOJrb1oNeyM0ArO
X-Received: by 2002:a05:620a:288d:b0:8ee:630e:351a with SMTP id af79cd13be357-9152fdb5117mr415900185a.27.1780064967517; Fri, 29 May 2026 07:29:27 -0700 (PDT)
MIME-Version: 1.0
References: <20260519112813.1254795.qmail@cr.yp.to> <CAGgd1Ocy8f4HeQy-qWauAJAxizznXdXA53kWVp_FV1QUVGuxWw@mail.gmail.com> <5DFBF81F-4A98-4C5E-A060-580DC6960021@symbolic.software> <87v7c8lgt8.fsf@josefsson.org> <CACsn0cmaOdG4vCdeOVSxAPnJtPRH8rBJ3sfAY3o0f1fm-ouceg@mail.gmail.com> <ahddRzOIvQDXcvaG@ubby> <CACsn0cnStbBw8Szq+McPumjExnbL=3wmwESYEMWczJJZbJXRgw@mail.gmail.com> <ahdflj/Xy8VoOfH5@ubby> <CABcZeBO3hPa2PXNBzfBHLRAGdc3LzcpJGMQwo8f8ufwfhxy1Zw@mail.gmail.com> <87ldd4j7fm.fsf@josefsson.org> <ahgzW1SQNUS8OhUA@LK-Perkele-VII2.locald>
In-Reply-To: <ahgzW1SQNUS8OhUA@LK-Perkele-VII2.locald>
From: Joseph Birr-Pixton <jpixton@gmail.com>
Date: Fri, 29 May 2026 15:28:51 +0100
X-Gm-Features: AVHnY4LisjT8bqkmgOaWTeu0h3MsUCyQt4VgZTLW2tOA2BgeLAV9qy4UzXAP9aM
Message-ID: <CACaGApmvARUhMiMegHp+Q0O5KuYwW66qOYxQcV9DdKRfHu24EQ@mail.gmail.com>
To: Ilari Liusvaara <ilariliusvaara@welho.com>
Content-Type: multipart/alternative; boundary="00000000000010eede0652f5ac54"
Message-ID-Hash: D23O5ECHBWXTU7MYGNOAWUQ6V6WCYQFR
X-Message-ID-Hash: D23O5ECHBWXTU7MYGNOAWUQ6V6WCYQFR
X-MailFrom: jpixton@gmail.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: TLS List <tls@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] Re: Complaint to ADs and IESG regarding TLS WG chairs falsely claiming WG consensus to issue an RFC for draft-ietf-tls-mldsa
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/OGGFcRrrHGufjx37rA7NlcnNWjg>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

On Thu, 28 May 2026 at 13:23, Ilari Liusvaara <ilariliusvaara@welho.com>
wrote:

> I see three relevant risks:
>
> - Completely novel kind of attack against ML-DSA that destroys it.
> - Implementation flaw in signing that leaks the private key.
> - Implementation flaw in verification that allows forgery.
>
> The first was subject of intense vetting over a decade. And should that
> happen, we have a major problem regardless.
>

Just to remark that we have fully realised the latter two risks in
implementations of existing signature algorithms, that had real-world and
practical impact. These were then designated as MTI in TLS1.3, years and
years after that happened.

So I think if those risks are cited to motivate hybrid signature schemes,
at the same time motivational text should address why an as-yet unrealised
risks of ML-DSA are more pressing than repeatedly realised implementation
risks of ECDSA and RSA.

Thanks,
Joe

v2.46.0 | Report a Bug | By Email | System Status