[TLS] Re: PQ Cipher Suite I-Ds: adopt or not?

Loganaden Velvindron <loganaden@gmail.com> Mon, 23 December 2024 01:54 UTC

Return-Path: <loganaden@gmail.com>
X-Original-To: tls@ietfa.amsl.com
Delivered-To: tls@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 67260C14CE39 for <tls@ietfa.amsl.com>; Sun, 22 Dec 2024 17:54:41 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.106
X-Spam-Level:
X-Spam-Status: No, score=-2.106 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id goL4h9O83aPG for <tls@ietfa.amsl.com>; Sun, 22 Dec 2024 17:54:37 -0800 (PST)
Received: from mail-ot1-x331.google.com (mail-ot1-x331.google.com [IPv6:2607:f8b0:4864:20::331]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1AC94C14F706 for <tls@ietf.org>; Sun, 22 Dec 2024 17:54:37 -0800 (PST)
Received: by mail-ot1-x331.google.com with SMTP id 46e09a7af769-71e3167b90dso1870750a34.0 for <tls@ietf.org>; Sun, 22 Dec 2024 17:54:37 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1734918876; x=1735523676; darn=ietf.org; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:from:to:cc:subject:date :message-id:reply-to; bh=Cb6++YeD4PWuLkv8IjwLYuCytBA88lFm/r1HJA4hQ90=; b=GBdiwVO7U+KmQh+qpuxzvtFa0MLSUSkCknIjNeuTvXhzVxT9YlYcXCwt5HzRzy+cOE /OHls+rjo39iwMq9y/qiF2wp5RfW6eajlfk46qDoWOIiXOxMF2KnSA3zFIK1tUa2mkOB SZgO8zE/dtqAAGTYV2jsDsg1Vnvu32pqRbkoxfbfoBwzJRvhSpGRKfRpcrXRHXP1KTHL cbGpaweAP5PEP0tcZxOeBmSx6jc1ra3BrvWlWQihBN3NKA3D2fMXkMpDvtC2GV2NzTOr 54PjvLzcsPeGNd+/1ekuW0LOMEWP2D8LfXMWhisca4FGwFCS10RY9f+M2tBk2JToiAML HXYw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1734918876; x=1735523676; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=Cb6++YeD4PWuLkv8IjwLYuCytBA88lFm/r1HJA4hQ90=; b=L/QBCMfCc3J5w3Ct4vrcmv68JvhbZqlKN73kJVIQZa0bAcv+ioAhsAnCDuDN6oShU7 wTJDkBbssszdC3nc/wnRt1yqqW4+nEvteqqIi4Aa+0Y6Fd83EQZmgewlxnMYntAPWe/N QEk8rjladnaaiLu7voPfdJxyCY4FWepQ2djEOAl6ry+px2EW40ZeVmfgRDZOms8q0Pm+ Pz++WLT/8V9sboO7g7bjvOheBU/gcsCza0Kl9kGkHlQs7U8wC1KzLbauEz6pJCwxwMCe KftfsmwOsJw9cH7B2aWRLEqUnHrPv3Q0gR0UXDPsXaOkW/1KzGWxqtnO8gwuc83sN0JI /oew==
X-Forwarded-Encrypted: i=1; AJvYcCXSEo/HXs+AOtoP8nsY/vobzOg0MjjScRSvpwBJNIrxSyZkX8E0LG30OXLYhb3J1vCh0iU=@ietf.org
X-Gm-Message-State: AOJu0Yzf0/h0WePy8WdZM2sFL4i3tH/ljY1iht+KNkaK5k72iOaKVq7E gqktRHHFM91xDL6g7oFhRpa0hBHL5FeoDkNwWWS6pjX+x0OrfHMCu2f5a6cCnJSXtiyA2CU4C3c OeN2inqjALARjtDAmpaJMA6tq0FA=
X-Gm-Gg: ASbGncsTq84OFztzL/5C32olaXYJQ2vnBSttm57rXmDrLPTHb1B0N/DjtTNH/gjCvWv 0vVMU+oFaROom07ODHExQlPLOHzqxWnqyzvF2dGw=
X-Google-Smtp-Source: AGHT+IHy5osiXXH6jpJK+bdoU2xEwuNMKyv/dDIo/ibWDE21RmnwLWJo5Mf9k/4SYUWhTrKTkxvM/0+1wTmDirVWdC0=
X-Received: by 2002:a05:6830:4122:b0:71d:4698:7b24 with SMTP id 46e09a7af769-720ff80381cmr7082479a34.16.1734918876057; Sun, 22 Dec 2024 17:54:36 -0800 (PST)
MIME-Version: 1.0
References: <10A06A24-8126-47B9-B187-55F4288DBBF2@sn3rd.com> <ea32ebd6-e57d-4da6-9250-a3e4d75d11a0@betaapp.fastmail.com> <CAChr6SzmGOpKws0L=BQAiNXvx3wv7OOoWTi6A30BQ0mXd+kjrg@mail.gmail.com>
In-Reply-To: <CAChr6SzmGOpKws0L=BQAiNXvx3wv7OOoWTi6A30BQ0mXd+kjrg@mail.gmail.com>
From: Loganaden Velvindron <loganaden@gmail.com>
Date: Mon, 23 Dec 2024 05:54:24 +0400
Message-ID: <CAOp4FwTdWxGkLLnYq8f6a6wzoa4_9F9_su=LTFYSpMXVKBdbuw@mail.gmail.com>
To: Rob Sayre <sayrer@gmail.com>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Message-ID-Hash: XFTEDP2HRX4NHRPDCMZPPNPZQTQQGQKJ
X-Message-ID-Hash: XFTEDP2HRX4NHRPDCMZPPNPZQTQQGQKJ
X-MailFrom: loganaden@gmail.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: TLS List <tls@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] Re: PQ Cipher Suite I-Ds: adopt or not?
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/OKn4wbJIL7Sd8mXbVVPSSOQdYLE>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

If there are some patent concerns regarding ML-KEM going forward, Would
considering NTRU-Prime as a less risky option for TLS Kex?

(Please see this thread:
https://discourse.mozilla.org/t/patent-license-for-kyber/128114)

There is a section about patents here: https://ntruprime.cr.yp.to/warnings.html


On Tue, 17 Dec 2024 at 02:53, Rob Sayre <sayrer@gmail.com> wrote:
>
> Hi,
>
> I only support an adoption call for this one:
>
> https://datatracker.ietf.org/doc/draft-kwiatkowski-tls-ecdhe-mlkem/
>
> The other ones seem like they could wait, carefully noting that postponement is not a "no" vote.
>
> thanks,
> Rob
>
>
>
>
> On Mon, Dec 16, 2024 at 2:21 PM Martin Thomson <mt@lowentropy.net> wrote:
>>
>> On Tue, Dec 17, 2024, at 08:59, Sean Turner wrote:
>> > Is the WG consensus to run four separate adoption calls for the
>> > individual I-Ds in question?
>>
>> I would like to see adoption calls for the key exchange modes and not the signature modes.  The key exchange documents are both more ready and more urgent.
>>
>> The question of whether to set Recommended = Y for any particular choice is separable and can wait.  Keep things as Recommended = N for now.
>>
>> _______________________________________________
>> TLS mailing list -- tls@ietf.org
>> To unsubscribe send an email to tls-leave@ietf.org
>
> _______________________________________________
> TLS mailing list -- tls@ietf.org
> To unsubscribe send an email to tls-leave@ietf.org