IETF Logo Mail Archive

[TLS] Re: [EXT] Re: draft-kwiatkowski-tls-ecdhe-mlkem and P-384

"Blumenthal, Uri - 0553 - MITLL" <uri@ll.mit.edu> Mon, 09 September 2024 00:15 UTC

Return-Path: <prvs=1982bd0661=uri@ll.mit.edu>
X-Original-To: tls@ietfa.amsl.com
Delivered-To: tls@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7F80DC14F60D for <tls@ietfa.amsl.com>; Sun, 8 Sep 2024 17:15:43 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.907
X-Spam-Level:
X-Spam-Status: No, score=-5.907 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_FONT_LOW_CONTRAST=0.001, HTML_MESSAGE=0.001, MIME_HTML_ONLY=0.1, MPART_ALT_DIFF=0.79, RCVD_IN_DNSWL_HI=-5, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, TRACKER_ID=0.1, T_KAM_HTML_FONT_INVALID=0.01, T_SCC_BODY_TEXT_LINE=-0.01] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DgHh38U5-k-U for <tls@ietfa.amsl.com>; Sun, 8 Sep 2024 17:15:42 -0700 (PDT)
Received: from MX3.LL.MIT.EDU (mx3.ll.mit.edu [129.55.12.52]) by ietfa.amsl.com (Postfix) with ESMTP id 6879CC14F5E9 for <tls@ietf.org>; Sun, 8 Sep 2024 17:15:41 -0700 (PDT)
Received: from LLEX2019-03.mitll.ad.local ([172.25.4.99]) by MX3.LL.MIT.EDU (8.18.1.2/8.18.1.2) with ESMTPS id 4890Duma208378 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=FAIL); Sun, 8 Sep 2024 20:13:56 -0400
ARC-Seal: i=1; a=rsa-sha256; s=arcselector5401; d=microsoft.com; cv=none; b=Tro5RHebvj4M9y8cIL5Rb+rS1Bq+flhCe6O8ZnevQtK3gFSDmVcsNlCNFscDU3AYoZBEsEwo9YHtXkeN7b9SS4rtDGdchYDldJBeyahBjFuh9JDx2wn8Q/03BDVqnXwfIX+2ZpnfowtAP1f7Yi9m/yLkVGzLpioM1xnPL8a6vB1t1r2WUXd27lUUBwKiuhYCji+CxNy+RyGUSo3w0TCaa8Zoz6RrGtxuPql4rBedpFaLB+Eq3q3wOJegPqvHDnQFJciT5789ZpQMQlR2a4t3LTHZTZQEZ3Wi3mnOMnPU9Snh9rUXOEph3iuDBSRSt67SEVY8/HVRQXR58Ly6eMyFSA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector5401; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=/5NhRdfryFWg5svk1bvuYolHq3NCFlDkS0S2iYche5A=; b=xeVURsg2+p5bTC7zaNnqi/cniScznHAfEDJU4E6xnzNhWYa4uC8WRx6b0GqntsgcAHgVVY9ximGt9nIhPVoposLHoKFh3WTYpyoL3xR0vcHhs/0Z4dP+4/Ce6ToReWoYqD8vjln524Ng7vVlwMoe4Z3TtAOQzEmAjWni7NXCqYubT5Dor0622tDgWW4qWwNw4uNhoccCIz49CgaSiMBymVBJmWsCllnPTUNI7yyRLRv5ER2RyEf1AHWf033DATXFDV3F+gJMIrKx6WKwxIEBzxMimin65wVE3/UP2pBHqsRZwASVuP5bl1eAWBBIPA/MeFpbQSPIdWXez90LhSVZHA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ll.mit.edu; dmarc=pass action=none header.from=ll.mit.edu; dkim=pass header.d=ll.mit.edu; arc=none
From: "Blumenthal, Uri - 0553 - MITLL" <uri@ll.mit.edu>
To: kris <kris@amongbytes.com>
Thread-Topic: [EXT] [TLS] Re: draft-kwiatkowski-tls-ecdhe-mlkem and P-384
Thread-Index: AQHbAkwRZm28ekO3p0Gj4wLqGCBGvLJOlhqA
Date: Mon, 09 Sep 2024 00:15:28 +0000
Message-ID: <DF2EBFCC-A112-4597-8999-2D18C23539BD@ll.mit.edu>
References: <679c304083b546d69b630fa81b3d87b7@amongbytes.com>
In-Reply-To: <679c304083b546d69b630fa81b3d87b7@amongbytes.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: BN0P110MB1419:EE_|BN0P110MB1435:EE_
x-ms-office365-filtering-correlation-id: 137eb2d7-2632-4183-a594-08dcd06482d5
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;ARA:13230040|1800799024|366016|4022899009|38070700018;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:BN0P110MB1419.NAMP110.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(366016)(4022899009)(38070700018);DIR:OUT;SFP:1101;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: multipart/signed; boundary="Apple-Mail-73D2D40F-7684-43AF-9BA2-317A1C39FCD4"; protocol="application/pkcs7-signature"; micalg="sha-256"
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: BN0P110MB1419.NAMP110.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-Network-Message-Id: 137eb2d7-2632-4183-a594-08dcd06482d5
X-MS-Exchange-CrossTenant-originalarrivaltime: 09 Sep 2024 00:15:28.9967 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 83d1efe3-698e-4819-911b-0a8fbe79d01c
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN0P110MB1435
X-Proofpoint-ORIG-GUID: uu0sbGIUuTjAg7QEn1Y3hSCB5Nl4ydrI
X-Proofpoint-GUID: uu0sbGIUuTjAg7QEn1Y3hSCB5Nl4ydrI
X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.293,Aquarius:18.0.1039,Hydra:6.0.680,FMLib:17.12.60.29 definitions=2024-09-08_09,2024-09-06_01,2024-09-02_01
X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 spamscore=0 bulkscore=0 malwarescore=0 suspectscore=0 phishscore=0 mlxlogscore=999 adultscore=0 mlxscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2408220000 definitions=main-2409080209
Message-ID-Hash: 26TWWABBPA2KAFBTJKIEVV4B2PFNKL6P
X-Message-ID-Hash: 26TWWABBPA2KAFBTJKIEVV4B2PFNKL6P
X-MailFrom: prvs=1982bd0661=uri@ll.mit.edu
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: "tls@ietf.org" <tls@ietf.org>
X-Mailman-Version: 3.3.9rc4
Precedence: list
Subject: [TLS] Re: [EXT] Re: draft-kwiatkowski-tls-ecdhe-mlkem and P-384
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/Q3juoFyOmRhBGTP7WmOJTAHTDNc>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

If we do hybrid at all - it makes perfect sense then to specify ECDHE over P-384 and ML-KEM-1024. 

Thx
—
Regards,
Uri

Secure Resilient Systems and Technologies
MIT Lincoln Laboratory

On Sep 8, 2024, at 20:06, kris <kris@amongbytes.com> wrote:


Hello, I'm sorry, possibly I've missed some emails. If there is an interest I propose we add it to existing draft, publish version -03 and request a code point. The repo is here: https: //github. com/post-quantum-cryptography/draft-kwiatkowski-tls-ecdhe-mlkem
ZjQcmQRYFpfptBannerStart
This Message Is From an External Sender
This message came from outside the Laboratory.
 
ZjQcmQRYFpfptBannerEnd

Hello,

I'm sorry, possibly I've missed some emails.
If there is an interest I propose we add it to existing draft, publish version -03 and request a code point.
The repo is here:
https://github.com/post-quantum-cryptography/draft-kwiatkowski-tls-ecdhe-mlkem" class="x_OWAAutoLink" id="LPlnk989268" rel="nofollow">https://github.com/post-quantum-cryptography/draft-kwiatkowski-tls-ecdhe-mlkem

Feel free to open PR

Cheers,
Kris

From: Alicja Kario <hkario@redhat.com>
Sent: Saturday, September 7, 2024 12:39:30 AM
To: kris; tls@ietf.org
Subject: draft-kwiatkowski-tls-ecdhe-mlkem and P-384
 
Hello,

What's the situation with other groups for TLS 1.3?
Specifically, are there any plans to specify SecP384r1MLKEM1024?

As mentioned in multiple emails already, high security system
already have a strict requirement to use P-384 curve exclusively.
Similarly, for post-quantum resistance they will be required
to use ML-KEM-1024.

Will you add it to the draft, or should we start work on a
separate one that defines those hybrid algorithms?
--
Regards,
Alicja (nee Hubert) Kario
Principal Quality Engineer, RHEL Crypto team
Web: http://www.cz.redhat.com" rel="nofollow">www.cz.redhat.com
Red Hat Czech s.r.o., Purkyňova 115, 612 00, Brno, Czech Republic

 _______________________________________________
TLS mailing list -- tls@ietf.org
To unsubscribe send an email to tls-leave@ietf.org

v2.27.8 | Report a Bug | By Email | System Status