IETF Logo Mail Archive

[TLS] Re: Composite ML-DSA

Mike Ounsworth <ounsworth+ietf@gmail.com> Thu, 16 April 2026 20:43 UTC

Return-Path: <ounsworth@gmail.com>
X-Original-To: tls@mail2.ietf.org
Delivered-To: tls@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 0827ADDDDD11 for <tls@mail2.ietf.org>; Thu, 16 Apr 2026 13:43:03 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1776372183; bh=8bG93lagwY+Z+L5ipIZUXAuJHt8JfyOd7o3j6UMkiVg=; h=References:In-Reply-To:From:Date:Subject:To:Cc; b=EyrZSctC3M/lDa/byuRGNc21nw21bvgU9GPjvo4zd3ZiiKwqhQZtunETR2w+046oK fcKuWmX6oXMYbiKiJUaymDKTclVGuA9ARSBj2AFGpq17Nqc7gi5fFEw4C2f5DT2d7f uvPiwAT3iv8T5AN2XxfWohQp8j2+JVLkU+yGx8ug=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IgTtvaqoeH_R for <tls@mail2.ietf.org>; Thu, 16 Apr 2026 13:43:02 -0700 (PDT)
Received: from mail-ot1-x336.google.com (mail-ot1-x336.google.com [IPv6:2607:f8b0:4864:20::336]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id C3444DDDDCFC for <tls@ietf.org>; Thu, 16 Apr 2026 13:43:02 -0700 (PDT)
Received: by mail-ot1-x336.google.com with SMTP id 46e09a7af769-7dbccb6ae20so4523027a34.3 for <tls@ietf.org>; Thu, 16 Apr 2026 13:43:02 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1776372176; cv=none; d=google.com; s=arc-20240605; b=ae9Z3ZS7VL3rWxJt6nkuTYH80qxPfxybKi8pRzjMMMtBHUq51XkcvvtzFHV5+LtL3M TkDTqZh8zdSCLi0vuJf5IGwv2+giG841AOFIegGU0Gd4pxnZymvuqNru0xNn2aGHN4jl XVpbJiJW3U1mbFC2fyzYZxdwd2aHnSKumXCaQ4Zs/Oa1uvyvS8612HB3OYa/JGldwHhS 9qmkDRGkKvMiSFckwEYNHGW+BX0MNJEvvxcXQ/B4U8pmB//HgLao/a+sD0WfWfccmFwV jttCW5l84D60UPEF8B9dsGZyPxMxcDVVpFeZa+OKf3IBhp2O+SjfChfD2UXkcoXmeM1Z bcNw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:dkim-signature; bh=8bG93lagwY+Z+L5ipIZUXAuJHt8JfyOd7o3j6UMkiVg=; fh=h2dNLJykBH5pOcQCEqZ0DafID5Sb0bF8f+ZdW2bOnXs=; b=GwygVHJFx59g2bjblBzP48GUaXf1x/8DQVzCVlY6SFt6wOMcQ85MwUfj10HGHiNQkY TLhA+m/6hvO1gEts3z9gbTgLfE5YgXpx2EsoRqwDv3wtkI753kVsCfJiFCaugV8uhHky UI9Zf+SC1vSpv9S5ZtdXrdYkXqEzJYj0CcaZpfhC0LHgJOeChVbgUJsNVRVZ+/eu/oke XWhQHI/8CGR3cMxMy9sXkAYTbVET2ZaovUzACpOV5eRiycT8YN7UVColn/CFOcoG18UH SYSsG/tDe+G4LcaD4T1KHdI5Wl0oNbQIe2WnbP9CO08ZPbVjFnIGD6FKa0iXkvfQ2lZt adLw==; darn=ietf.org
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1776372176; x=1776976976; darn=ietf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=8bG93lagwY+Z+L5ipIZUXAuJHt8JfyOd7o3j6UMkiVg=; b=NlweGZ30Xf1ucJq1P1hFpCpsMdca9uX7NlnB+AxaAUu/8TQmdqRW6iYzaT9rc5xm5/ HFN0JtXQ+LVf91/+CjwDHOm/DaTVLs7/ILCEyf3QMc/UeoxHc8h8UVD4LzrMwlQXuyJK ERgtAoiZWyobK1Wb+cEC9BC5QwWlcS6+iutZXNY0I+ox4KtWNTtjNu22jK0WMhgIYHrN kfPrU4wJ/i7fKGCOJLWDZhF4m/0Hi9ni/COVl5xCdznXd5uCldfmfcZesKEg4FgLXmKG cZyVx6mzzqqtPkfzOX3CmXE2CtNh0E/wLywlsmcWEWchTVFgXdE2809y+Rckw8Ez6Y8y Jgpw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1776372176; x=1776976976; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=8bG93lagwY+Z+L5ipIZUXAuJHt8JfyOd7o3j6UMkiVg=; b=Bs8Bm18XpwTxgXR3OSwrQvkSWx+Q/PGKyvFWoCCkS/cbt4RLjdmueTjudnLwTXQiVt IX2rdrXCmHVdLW1sq1CeR3kuq44OqeDRFE5Iv7I4LVBQoacJJnUGjTCtvPxsz2LkqSIG mcyks/SbZ/K3dcgJpRx3yAMqFCCHW/zWVCJd4OrwYN7wL8xq5K+jZ2x4l0DIBLB+LCBO MZyChsUuaDBS2l3S2SbSSlIT44mRJnla4kkr2dXd96N8V7wkkVcQuGCbGsu+4OITrG0b gwX9ZJv7x2ufiV3s7cDM+gTnquYuReu7Jr7rxIEGa+2/bxuBQNnaPKmCjFvKpVQYIaS6 lidw==
X-Forwarded-Encrypted: i=1; AFNElJ/71tz5S8QT6Kqtda3ncbnKAu666+7ILxbFR5J2Ns+d4o06N0z7bEeAd0J+yyTNo2c3YKs=@ietf.org
X-Gm-Message-State: AOJu0Yw9Tyf6euauYC7uzq26PpyydZ8CbRqCKJEfATkeVoVFtqYwUU7c NPuIKgX9umHURruZCTUhy55mNs4UommcCzFQog6ZxtFDm3+0BVWMUEzdSRdN+QH/EKn4onlrNtL Uylw5/+r3kt1oPgOakX4w8KdXOfKdgFwp0w==
X-Gm-Gg: AeBDievLJ0IWn/zcAVXWwCYj2zf37Nclyf9I6mZ7X5W4FQ2Kjqow8z8xPpvpjpI1nYS kAy0y/dEQ7aNlUvIFgaOwYzbeTFOgZ301f1tyMxbQ6/HWZDADgSvvTVRI87DVsrvWZs6YRWGU4k 5JUW0wnU1jH44dj9eMeM93nbUHWj5jMedz1hQAK6bT8zeFt/vPSivBzMJ99mdAHANkh1v0hywdI QictADaK+9KVR3ELqMJfrDRVl69LbvBvo7YEDB0zk+6XNiTv+z2TcapRb61qRSI1OBj3WaGyhcS jv0gD0c6ihG1nY6pOXM=
X-Received: by 2002:a05:6820:c018:b0:686:d107:2859 with SMTP id 006d021491bc7-69462e649e8mr75254eaf.23.1776372175876; Thu, 16 Apr 2026 13:42:55 -0700 (PDT)
MIME-Version: 1.0
References: <AS4PR07MB88250EF7936CDB2163D88C3089232@AS4PR07MB8825.eurprd07.prod.outlook.com> <CAKZgXHon4Z5sOgZ=Rz74PTnK+eRGKmkrXd1kWjvYRbGSyKxYHg@mail.gmail.com> <CACsn0cnQKJ83QC_SKRZVkvurXvag0aYiXtmE0WhV2nqOsoKv5w@mail.gmail.com>
In-Reply-To: <CACsn0cnQKJ83QC_SKRZVkvurXvag0aYiXtmE0WhV2nqOsoKv5w@mail.gmail.com>
From: Mike Ounsworth <ounsworth+ietf@gmail.com>
Date: Thu, 16 Apr 2026 15:42:43 -0500
X-Gm-Features: AQROBzD-8LtQiLsbHO1w8S6wBZzKbbh-6IYowobt5CxOgSUU3ZhotwCQ_KuySAQ
Message-ID: <CAKZgXHoV08gm8xXdsROvv_NW27zQh+7G9EAyo0ZoaWY-Hkq+aw@mail.gmail.com>
To: Watson Ladd <watsonbladd@gmail.com>
Content-Type: multipart/alternative; boundary="0000000000008838c6064f99e0e7"
Message-ID-Hash: H4XYV77HVYEHRCRQQ5UMPFAMHJCR2R4V
X-Message-ID-Hash: H4XYV77HVYEHRCRQQ5UMPFAMHJCR2R4V
X-MailFrom: ounsworth@gmail.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: John Mattsson <john.mattsson=40ericsson.com@dmarc.ietf.org>, TLS List <tls@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] Re: Composite ML-DSA
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/V8Uzx-ccliZFNp7bJVVgvgw0Evo>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

Watson,

Sure, if people jump on standing up SLH-DSA TLS roots, and start using
SLH-DSA EEs for IoT use cases, then sure. But I believe that SLH-DSA has
other problems for IoT, like how the private key can be larger than
physical RAM on some small devices. So we'll see how much enthusiasm that
attracts.

On Thu, 16 Apr 2026 at 14:32, Watson Ladd <watsonbladd@gmail.com> wrote:

> Mike,
>
> Those devices should use a signature scheme that's as secure as
> hashing. Thankfully there is one. So why do we need composites?
>
> Sincerely,
> Watson
>

v2.46.0 | Report a Bug | By Email | System Status