IETF Logo Mail Archive

[TLS] Re: [EXT] Re: WG Adoption Call for ML-KEM Post-Quantum Key Agreement for TLS 1.3

Stephen Farrell <stephen.farrell@cs.tcd.ie> Wed, 16 April 2025 00:47 UTC

Return-Path: <stephen.farrell@cs.tcd.ie>
X-Original-To: tls@mail2.ietf.org
Delivered-To: tls@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 37D341CA9427 for <tls@mail2.ietf.org>; Tue, 15 Apr 2025 17:47:16 -0700 (PDT)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level:
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=cs.tcd.ie
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HBdnuCeGPSXl for <tls@mail2.ietf.org>; Tue, 15 Apr 2025 17:47:14 -0700 (PDT)
Received: from EUR05-AM6-obe.outbound.protection.outlook.com (mail-am6eur05on2126.outbound.protection.outlook.com [40.107.22.126]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 63B311CA93E3 for <tls@ietf.org>; Tue, 15 Apr 2025 17:47:14 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=ZFtUNWyimA0TVmZNRemnCG3OgAZMUirQmY5I/SfOTn6/0EhxF5Y/Ujh81yKWSgXdHYNy/7b9L/t7uF+/8s0BR1gW1xjLH/C//cwiiO6xV6yfMa7b2++/VPTN6o5AjvZ+/EeFE1RBjyVEUOhmLVi7D85/Yy1y+cxeHGUrKv4C4cHuBuTu4fuRDX5XHUJfUsZlQYSqf8km/cWeN/0aHvTZtfnLclHyLMSF2zUf8X7kN2M7ATJe7rW9tHqvDREhLqI6+Yx3nNPnh0uzpLGJ4MEZyS/HFFbFu9RMJoghBZeYahOA3axyPz6Pp9YN6mil04OuB5tTFIlF3Zm4NgPeF8zhsg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=kwpkZdizj2FtkuFqdbHTmZMGb0bQZgdFFlO2fKu3oWQ=; b=YU5qkfqv15t60GNJCiSmCFZrM4pd6ynfvH09nVbMopYl/g2QHc8GyFAI1C4OwKQoptVEJxRGNCUpjeqaiNJmkPMaogJvtmB/7AtHSyHVSQBs15j+zOPmkK9kJmGJkSkNQ2v547g1ksVNB+CdH4XeAba89HdLDLXyHfmMNv0jQTr3ig6xeOKV/hyk+0OWVICqODvZ380tcFdZTXgHw8+maFto644sX3Eb7dndBZUfZsobAuJyUoAxiCc1LXv4Ys+AOZQiqGyY+Mp8W7mGzEIGh/Ljh2iJ/egcdOAvslBJ5LbFe1jOokCjWAZIBNxbRq8iltS5ga0G7qifI6DNMV2B3A==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cs.tcd.ie; dmarc=pass action=none header.from=cs.tcd.ie; dkim=pass header.d=cs.tcd.ie; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cs.tcd.ie; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=kwpkZdizj2FtkuFqdbHTmZMGb0bQZgdFFlO2fKu3oWQ=; b=tj07jQ+qDNuhC5sm3w+wBVgXevWdQ7IPvslE5sKrbsITZa0NFxg+tmTq2D+ucUFfjqcuPqfqi0dU5qoJM48CWPNmbcSWYnrIJr3BO+T/6zutQtOE/i2TIQW+hcf5ffV6k3McQa9zxoCzu3PEVG3aQKBQN6Xuil+i3ntZIGanD7kQaWSce/xBWNVMlETO3Lr3D4cU5HXb+J4Mnd6bBupYw2QBx994SGT+Srl3KwyqV1PLFmJrNmdvKa7X60o6A7FV4FtBGF18SP8o9NZeKQtG27U6UQzyH+fxPxgtLRdj16lwF57HVeEE7ucaFWGu3SXH1m/b08F5LLkMN+MmsCmj8A==
Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=cs.tcd.ie;
Received: from DB8PR02MB5946.eurprd02.prod.outlook.com (2603:10a6:10:11c::16) by PR3PR02MB6172.eurprd02.prod.outlook.com (2603:10a6:102:64::21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8632.32; Wed, 16 Apr 2025 00:47:12 +0000
Received: from DB8PR02MB5946.eurprd02.prod.outlook.com ([fe80::e0d3:772e:a68d:d54a]) by DB8PR02MB5946.eurprd02.prod.outlook.com ([fe80::e0d3:772e:a68d:d54a%6]) with mapi id 15.20.8655.022; Wed, 16 Apr 2025 00:47:12 +0000
Message-ID: <fffe8b96-c03e-4ea4-9495-ab6c211c47ab@cs.tcd.ie>
Date: Wed, 16 Apr 2025 01:47:10 +0100
User-Agent: Mozilla Thunderbird
To: "Blumenthal, Uri - 0553 - MITLL" <uri@ll.mit.edu>, Rob Sayre <sayrer@gmail.com>
References: <582917A1-F936-4A15-AE9D-342076605BE7@sn3rd.com> <F347DA21-EB06-4FBF-B357-871A0FFA8DB1@sn3rd.com> <Z/7lbXqb8QHruMS2@akamai.com> <05bd6aa6-4b41-4bdc-8875-d380924031cf@cs.tcd.ie> <CAChr6SxVObEa3rAiti=R2-krUSynFoSqyi75qj9ukUta+RPO-Q@mail.gmail.com> <BN0P110MB1419E6D43B1309243E8B886F90B2A@BN0P110MB1419.NAMP110.PROD.OUTLOOK.COM>
Content-Language: en-US
From: Stephen Farrell <stephen.farrell@cs.tcd.ie>
Autocrypt: addr=stephen.farrell@cs.tcd.ie; keydata= xjMEY9GzphYJKwYBBAHaRw8BAQdAo6JvjmSbxHdQWPZdvciQYsHhM1NxQBU398Mmimoy4p7N M1N0ZXBoZW4gRmFycmVsbCAoMjU1MTkpIDxzdGVwaGVuLmZhcnJlbGxAY3MudGNkLmllPsKQ BBMWCAA4FiEEMG54R8tZDyZFrDOn5Njp+ZeoM90FAmPRs6YCGwMFCwkIBwIGFQoJCAsCBBYC AwECHgECF4AACgkQ5Njp+ZeoM93bogEA25ElRyX0wwg+kGEN1AoL60MoZfvQZ/VtmXY6IC5j +csBAIBpkL5ySuzJK2zLNZn9qQGht8IaUcA7cvDcLvS2uHUEzjgEY9GzphIKKwYBBAGXVQEF AQEHQILCPWOwW36e8D3pY8GmvvtItIT+A5uV80ist+WokVsQAwEIB8J4BBgWCAAgFiEEMG54 R8tZDyZFrDOn5Njp+ZeoM90FAmPRs6YCGwwACgkQ5Njp+ZeoM92bcAEA8R+8cpqRUIS+SoAN iO05xE6O/wEx8/e88BqzAYki3SoBAOQdwiPX+MQrAxkWD8xxOsdMOAtxYKpkD1n8aPJUw6QJ
In-Reply-To: <BN0P110MB1419E6D43B1309243E8B886F90B2A@BN0P110MB1419.NAMP110.PROD.OUTLOOK.COM>
Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="------------jQOc5LflssGuPjvRgxzPjGZo"
X-ClientProxiedBy: DUZPR01CA0278.eurprd01.prod.exchangelabs.com (2603:10a6:10:4b9::23) To DB8PR02MB5946.eurprd02.prod.outlook.com (2603:10a6:10:11c::16)
MIME-Version: 1.0
X-MS-Exchange-MessageSentRepresentingType: 1
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: DB8PR02MB5946:EE_|PR3PR02MB6172:EE_
X-MS-Office365-Filtering-Correlation-Id: 52f2ab03-fc6b-40ba-fc17-08dd7c8039c3
X-MS-Exchange-SharedMailbox-RoutingAgent-Processed: True
X-TCD-Routed-via-EOP: Routed via EOP
X-TCD-ROUTED: Passed-Transport-Routing-Rules
X-MS-Exchange-SenderADCheck: 1
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam: BCL:0;ARA:13230040|10070799003|376014|1800799024|366016;
X-Microsoft-Antispam-Message-Info: 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
X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:DB8PR02MB5946.eurprd02.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(10070799003)(376014)(1800799024)(366016);DIR:OUT;SFP:1102;
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0: 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
X-OriginatorOrg: cs.tcd.ie
X-MS-Exchange-CrossTenant-Network-Message-Id: 52f2ab03-fc6b-40ba-fc17-08dd7c8039c3
X-MS-Exchange-CrossTenant-AuthSource: DB8PR02MB5946.eurprd02.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 16 Apr 2025 00:47:12.4093 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: d595be8d-b306-45f4-8064-9e5b82fbe52b
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: QjvoVzf94OkDc+g/sirUb72sNZ0G58hfx8XMVvzkVvbPV0dZh0NXoPBHssugKQpI
X-MS-Exchange-Transport-CrossTenantHeadersStamped: PR3PR02MB6172
Message-ID-Hash: ANSOKMRU65B3UW3IWQEZFGZ2ZKYOJ2RZ
X-Message-ID-Hash: ANSOKMRU65B3UW3IWQEZFGZ2ZKYOJ2RZ
X-MailFrom: stephen.farrell@cs.tcd.ie
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: TLS List <tls@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] Re: [EXT] Re: WG Adoption Call for ML-KEM Post-Quantum Key Agreement for TLS 1.3
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/SS_Eb8At1idPPZoIIqGrUP-MmxA>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

Hiya,

On 16/04/2025 01:38, Blumenthal, Uri - 0553 - MITLL wrote:
> Because our experts evaluated all the relevant risks, and concluded
> that while in theory indeed
> 
> Crypto_Strength(Hybrid) = max(Crypto_Strength(ECC),
> Crypto_Strength(ML_KEM)),
> 
> in practical deployments there are other factors to consider. And we
> worry about things other than theoretical stuff on paper.
> 
> I prefer to conclude my argument on this point, rather than diving
> into gory details.

I do think gory details would be useful here. (By reference
is just fine, doesn't have to be a looong email:-)

Absent those, we seem to be left with taking action (or not)
based on this all being a purely regulatory preference or
whim, and as we've seen, attempting to follow those can cause
us to expend effort badly.

Cheers,
S.

v2.29.0 | Report a Bug | By Email | System Status