IETF Logo Mail Archive

[TLS] Re: WG Last Call: draft-ietf-tls-mlkem-07 (Ends 2026-02-27)

"Scott Fluhrer (sfluhrer)" <sfluhrer@cisco.com> Mon, 02 March 2026 14:29 UTC

Return-Path: <sfluhrer@cisco.com>
X-Original-To: tls@mail2.ietf.org
Delivered-To: tls@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 2927CC1FCB36 for <tls@mail2.ietf.org>; Mon, 2 Mar 2026 06:29:09 -0800 (PST)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -10.286
X-Spam-Level:
X-Spam-Status: No, score=-10.286 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_NONE=0.001, T_SPF_HELO_PERMERROR=0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=cisco.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ux6ONdnZGfsV for <tls@mail2.ietf.org>; Mon, 2 Mar 2026 06:29:08 -0800 (PST)
Received: from alln-iport-4.cisco.com (alln-iport-4.cisco.com [173.37.142.91]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 7624CC1FCB2F for <tls@ietf.org>; Mon, 2 Mar 2026 06:29:08 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.com; i=@cisco.com; l=3006; q=dns/txt; s=iport01; t=1772461748; x=1773671348; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=9OMLogGZBdVpN4VlUQZwc/HW+KcDDHoN0ZHGeqN/FQ8=; b=JRMDYyOCNZTCKME/t6YOY8NXRNZzS56y6ZCz2gmXS4WWbsDwbghIvffI bqyhEHgJC3U5zF17PsCbAgeP7bwxZ0JvOt+TCWT5/f0RAK84lo7I6igzf 2IX8zoumZc6CrXhO8ciKTpGSxC9gAf78gcCnby6IxTCVreKtqhLgQ/qAM NbnPXCcJDXkoQP2grjlgdCbSruqQ8qPRIcXlmyioJ32QwQ7S9LvuMi+HH riEEqXrBtVGZ0z6rM1erUdVMVb0aiNIX8JcGiBa47Y+P0oRqdFePoszfH O/no0451xI1VDGDjLWOblY/IwOcnp2qrJbe2jGfCpx6hIEo8zW6ImMGuj A==;
X-CSE-ConnectionGUID: RWEXGlkGTm2YcjV+PsxckQ==
X-CSE-MsgGUID: I+F5QPBzStGtxCCYy2T7hA==
X-IPAS-Result: A0B7DQD6naVp/5D/Ja1agQklgmgxUwd+gRESiGwDhSygP4hWDwEBAQ9RBAEBhQcCjR8CJjgTAQIEAQEBAQMCAwEBAQEBAQEBAQEBCwEBBQEBAQIBBwWBDhOGXIZbAgEDEmcQAgEIBAo4MSUCBAENDRqEfhZAAwECmwUBgT0Ciip4gTSBAeAugU2IVAEqgTWEFTuEPwgfG4FJRIFXgmg+gQWDQIQTgi8Egg2BDxQdiRyJVlJySzMsAVUTFwsHBYEjQwOBBiNLBS0dgSMhHRcUH1gbBwUSISqCJHiCAQ+Ga3kDLl4aDiICKhJcOBI+C1oFgTcDC209NxQbAwSBNQWNBoQ2Q4EQH4EcpHmhegqEHKIOF6oEZ5kGIqMbUoUHAgQCBAUCEAEBBoF/JYFZcBWDI1EZD9VHgTQCBwsBAQMJk2cBAQ
IronPort-PHdr: A9a23:2ATKfxxSF3txuKHXCzPsngc9DxPP8539OgoTr50/hK0LK+Ko/o/pO wrU4vA+xFPKXICO8/tfkKKWqKHvX2Uc/IyM+G4Pap1CVhIJyI0WkgUsDdTDCBjTJ//xZCt8F 8NHPGI=
IronPort-Data: A9a23:Ti1OuKio0puGiXfjvSTYlARcX161JxEKZh0ujC45NGQN5FlHY01je htvWGjTa/rbMTSgKowkbd7j90NXvZHSydEwSlM5qSwwF3xjpJueD7x1DKtf0wB+jyHnZBg6h ynLQoCYdKjYdleF+FH1dOOn9SUgvU2xbuKUIPbePSxsThNTRi4kiBZy88Y0mYcAbeKRW2thg vus5ZeGULOZ82QsaDxMsPrZ8EoHUMna4Vv0gHRvPZing3eG/5UlJMp3Db28KXL+Xr5VEoaSL 87fzKu093/u5BwkDNWoiN7TKiXmlZaLYGBiIlIPM0STqkAqSh4ai87XB9JAAatjsAhlqvgqo Dl7WTNcfi9yVkHEsLx1vxC1iEiSN4UekFPMCSDXXcB+UyQqflO0q8iCAn3aMqUixctHLmVN2 sAdcgEGbC7Av/mmy7GCH7wEasQLdKEHPasFsX1miDWcBvE8TNWbHOPB5MRT23E7gcUm8fT2P pVCL2EwKk6dPlsWZgt/5JEWxI9EglHkfTlFqEiYv4I84nPYy0p6172F3N/9JIPbGZwLxxbBz o7A10W6LEwjDPaN8iaq7mKHrd7exx+kWKtHQdVU8dYv2jV/3Fc7FBkNfVq2vff/jVSxM++zM GQO8SYo6Kx3/0uxQ5ylAFuzoWWPuVgXXN84//AG1TxhA5H8um6xLmMFVTVGLtchsacLqfYCj zdlQ/uB6eRTjYCo
IronPort-HdrOrdr: A9a23:q9lf3q+OEVXSM3p3nrtuk+GYdr1zdoMgy1knxilNoENuA6+lfp GV/MjziyWUtN9IYgBfpTnhAsW9qXO1z+8S3WBjB8bSYOCGghrmEGgM1/qZ/9SNIVybygcZ79 YeT0EcMqy/MbEZt7eG3ODQKb9Jq7f3ktHMuQ6d9QYQcegAUdAY0+4NMHfhLqQAfng/OXNWLu v62uN34xCbVTA8aMO9CnMZX+7FieHqufvdCyIuNloM0iXLqSmnxoLbPnGjsyv2VQkh/Z4StU z+1yDp7KSqtP+2jjXG0XXI0phQkNz9jvNeGc2lkKEuW3XRozftQL4kd6yJvTgzru3qwk0tis PwrxApONk2w2/Nf1uyvQDm12DboXUTAj7ZuB2laEnY0IjErQEBeo18bEViA13kAn8bzZRBOW RwrjukXtRsfEv9dW/Glqj1vllR5zmJSDwZ4K8uZ7g1a/pFVFeXxrZvp3+8HPo7bVDHwZFiH+ 90AM7G4vFKNVuccnDCp2FqhMehR3IpA369MwI/U+GuonBrdUpCvgAl7d1amm1F+IM2SpFC6e iBOqN0lKtWRstTaa5mHu8OTca+F2SIGHv3QS6vCEWiELtCN2PGqpbx7rlw7Oa2eIYQxJ93nJ jaSltXuWM7ZkqrA8yT259A9AzLXQyGLHnQ49Ab44I8tqz3RbLtPyHGQFcyk9G4q/FaGcHfU+ bbAuMePxYiFxqZJW9k5XyIZ3AJEwhqbCQ8gKdOZ26z
X-Talos-CUID: 9a23:m8yBc2gc/dw/5XwoNAbacZRPLzJuSELw/FjUIGCEDDxYQ7+rCmeL6Khnqp87
X-Talos-MUID: 9a23:otieeQsxk7Hqxhl78c2npXJMaf5QybaVFG8Rgb4titjeCXNwEmLI
X-IronPort-Anti-Spam-Filtered: true
Received: from rcdn-l-core-07.cisco.com ([173.37.255.144]) by alln-iport-4.cisco.com with ESMTP/TLS/TLS_AES_256_GCM_SHA384; 02 Mar 2026 14:29:07 +0000
Received: from alln-opgw-1.cisco.com (alln-opgw-1.cisco.com [173.37.147.229]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by rcdn-l-core-07.cisco.com (Postfix) with ESMTPS id ACFAC1800020D for <tls@ietf.org>; Mon, 2 Mar 2026 14:29:07 +0000 (GMT)
X-CSE-ConnectionGUID: gNIfrCphSFWf4YHwHob2+w==
X-CSE-MsgGUID: udMoazBSRQ+hwe0J7CrMzQ==
Authentication-Results: alln-opgw-1.cisco.com; dkim=pass (signature verified) header.i=@cisco.com
X-IronPort-AV: E=Sophos;i="6.21,320,1763424000"; d="scan'208,217";a="67077302"
Received: from mail-cy3pr08cu00106.outbound.protection.outlook.com (HELO CY3PR08CU001.outbound.protection.outlook.com) ([40.93.6.110]) by alln-opgw-1.cisco.com with ESMTP/TLS/TLS_AES_256_GCM_SHA384; 02 Mar 2026 14:29:07 +0000
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=v3Xz9A4LHXoNbicpwVvf7uyFCWaj373EUBWBNTEO9MinxkQgA+1lsYhlNB5AnSfrdKcZ4tRQt/eCacTNKP0G4M/20amEcyS42RldZ7yfv/7umqbjpqMrrad/N8uDb0b9tGlYFITPslKqqjcIVqdD+96SXuxEdsWLDh5GCNx3HDYZAwUPnLCIwG91QLzoZvs/ZtL6dbgDUvQdqJfK0wbffb4a/yrTtPbw0XElxceo5CA1a0VaGuy/7vl/41h8YlJTBE3dl0OsoxYadCuD5GatYE03Zx7BmQBh5owSS4YS7Rqn/l/GwhT2FXkhalCC0AUdMBzqLLerpkYet0hvGKQUSQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=9OMLogGZBdVpN4VlUQZwc/HW+KcDDHoN0ZHGeqN/FQ8=; b=Sdu3eVpxJinqTaS5ys6mz8tNzJXVTUk2P1K+BJIk1O2+Det9EY96jFmVderynWRvt8rdIa5fmFrJuWt4UAUOzCrg3b6he32ePMfBN8pb8ze4MyP55yOTDa1MZcxxypg8T1A+IcucstcF4LhZuNBW040hbjS1tKjFPbdL4VQWne6CuCuS4BzEhNYC19OfJTDV1/L5L6B7c6DJx24ztFQmjyY4fqe726OFof4IxzDPfDquUl8Jw5lfwZsJpALnq0qeejB9Bg+EWhksA0cCFZhYUWVeeYjSR1Hdv1eKEii2WbcIUMShtaL1iVgmU/yFNycGmHsAOA56M9kCu3R7OTQlbg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none
Received: from PH3PPFA3FE8A23F.namprd11.prod.outlook.com (2603:10b6:518:1::d3f) by SA1PR11MB8396.namprd11.prod.outlook.com (2603:10b6:806:38d::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9654.15; Mon, 2 Mar 2026 14:29:05 +0000
Received: from PH3PPFA3FE8A23F.namprd11.prod.outlook.com ([fe80::e51:6b4a:93bf:329f]) by PH3PPFA3FE8A23F.namprd11.prod.outlook.com ([fe80::e51:6b4a:93bf:329f%3]) with mapi id 15.20.9632.017; Mon, 2 Mar 2026 14:29:05 +0000
From: "Scott Fluhrer (sfluhrer)" <sfluhrer@cisco.com>
To: Deirdre Connolly <durumcrustulum@gmail.com>, Muhammad Usama Sardar <muhammad_usama.sardar@tu-dresden.de>
Thread-Topic: [TLS] Re: WG Last Call: draft-ietf-tls-mlkem-07 (Ends 2026-02-27)
Thread-Index: AQHcqdPlRZq6PYksREqT7YKxfN5cSbWaV3MAgAD10EU=
Date: Mon, 02 Mar 2026 14:29:04 +0000
Message-ID: <PH3PPFA3FE8A23F9D6C99A41D462E1AAEF8C17EA@PH3PPFA3FE8A23F.namprd11.prod.outlook.com>
References: <CAOgPGoDLVqAVesWjrrD9ZR8HMkqQVLMp69vOkXPkk87MzcsOSw@mail.gmail.com> <aaH7oSjfTR6KnmW8@LK-Perkele-VII2.locald> <CAFR824wxXibC95oixLQFdUJoGE=FKv0STuCK4-aJwnBL3vVJjA@mail.gmail.com> <PH3PPFA3FE8A23FDE4014A4F160A0123F7AC170A@PH3PPFA3FE8A23F.namprd11.prod.outlook.com> <CAFR824x3A+V-zfMWD9ZA7H-emAkk-ddbZ5Hw_3Nn4zmTqzL9Vw@mail.gmail.com> <PH3PPFA3FE8A23F96403B62A811C4B0D225C171A@PH3PPFA3FE8A23F.namprd11.prod.outlook.com> <ba4da62e-83e0-4b4e-842a-98bdd130be98@tu-dresden.de> <CAFR824zqOmeXFyBgR4pmLp7VSCkL2vNEQDA8DEfzhGjsVQALMQ@mail.gmail.com>
In-Reply-To: <CAFR824zqOmeXFyBgR4pmLp7VSCkL2vNEQDA8DEfzhGjsVQALMQ@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels:
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: PH3PPFA3FE8A23F:EE_|SA1PR11MB8396:EE_
x-ms-office365-filtering-correlation-id: f8dde58d-702f-4006-8fcd-08de78680e93
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;ARA:13230040|1800799024|366016|376014|10070799003|38070700021|8096899003;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:PH3PPFA3FE8A23F.namprd11.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(366016)(376014)(10070799003)(38070700021)(8096899003);DIR:OUT;SFP:1101;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: multipart/alternative; boundary="_000_PH3PPFA3FE8A23F9D6C99A41D462E1AAEF8C17EAPH3PPFA3FE8A23F_"
MIME-Version: 1.0
X-OriginatorOrg: cisco.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: PH3PPFA3FE8A23F.namprd11.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: f8dde58d-702f-4006-8fcd-08de78680e93
X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Mar 2026 14:29:04.9421 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: 87uh5tOwDjBuTqzCtIfdfV+b9qyNyy4SZsmoJdGk7QpVcyKRRDutXX759w7VCqoi6m+oZzhhcgJ2jQR4pIpfFA==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SA1PR11MB8396
X-Outbound-SMTP-Client: 173.37.147.229, alln-opgw-1.cisco.com
X-Outbound-Node: rcdn-l-core-07.cisco.com
Message-ID-Hash: NPU7MLNBX7H63AQ4ATOVSH6JJYFMKXVX
X-Message-ID-Hash: NPU7MLNBX7H63AQ4ATOVSH6JJYFMKXVX
X-MailFrom: sfluhrer@cisco.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: "TLS@ietf.org" <tls@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] Re: WG Last Call: draft-ietf-tls-mlkem-07 (Ends 2026-02-27)
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/UxmGa1BQrF5kWPYCzEBS0JeDr40>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

Correction: it turns out that reusing randomness during encapsulation isn't quite as broken as I first thought.

Now, the two clients that you encrypted to can both learn each other's shared secret (and so the MUST NOT statement is perfectly appropriate); however a third party cannot.

On 01.03.26 18:18, Scott Fluhrer (sfluhrer) wrote:

Oh, and I just noticed (and perhaps this is common knowledge): if you used the same encapsulation randomness to encapsulate to two different public keys (from the same parameter set), then it is fairly easy to recover both shared secrets (assuming access to both ciphertexts and public keys).  Hence, the MUST NOT reuse encapsulation randomness statement is there for an extremely good reason.

v2.46.0 | Report a Bug | By Email | System Status