[TLS] Re: WG Adoption Call for Use of ML-DSA in TLS 1.3

Bas Westerbaan <bas@cloudflare.com> Tue, 15 April 2025 19:07 UTC

Return-Path: <bas@cloudflare.com>
X-Original-To: tls@mail2.ietf.org
Delivered-To: tls@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id B9F281C79782 for <tls@mail2.ietf.org>; Tue, 15 Apr 2025 12:07:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=cloudflare.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ks4EAv1KO7_p for <tls@mail2.ietf.org>; Tue, 15 Apr 2025 12:07:01 -0700 (PDT)
Received: from mail-yb1-xb30.google.com (mail-yb1-xb30.google.com [IPv6:2607:f8b0:4864:20::b30]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 25CE71C7976E for <tls@ietf.org>; Tue, 15 Apr 2025 12:07:01 -0700 (PDT)
Received: by mail-yb1-xb30.google.com with SMTP id 3f1490d57ef6-e53ef7462b6so5727904276.3 for <tls@ietf.org>; Tue, 15 Apr 2025 12:07:01 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cloudflare.com; s=google09082023; t=1744744020; x=1745348820; darn=ietf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=vzdhUv7+RhFIqqH0kye4YMhZPOR6upuNwkwAU8MYmgs=; b=dTptzK0BSIPMhrLjCxtPNo3oCW2UHQMzj6efVXozlfgzNqliBzOB/MWthdV+QOckfK OWNaPqbLC777vZLMJxYU87rw2C1rN/YvwppZG2LcWuF9etWax3wVvcr4GdoLGUs+Fjg1 O0wUOgBoqVlOvccE/a8rWLwSNh1338M3ZbBgP8RVVdHDIbrcWMaj0ARhHKXDv46b9HGK Kn6SzwOyK8scrkfs0vOdiseVFJeqOLWFYSJ9hSqlJ8KUqqaE3mA4aDJUL2cfuUdnCmb4 10KEIDZKs7SYItXKhaZ4L2e/OuRm0nu0B2ULW+7xZmGPzld9h1qsDb0+D6fiIiQKwX59 eKag==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1744744020; x=1745348820; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=vzdhUv7+RhFIqqH0kye4YMhZPOR6upuNwkwAU8MYmgs=; b=xA1rF5wuD/OjWG0jeSd6Ww7g9r6fuPb/4fekYuBakOuMtj+pThlHoh90JIiiISVVyy DBTw+9H7WjSVm+mrF6EdrY69SnFBrTVM/qO/W4m7FX2jAXjKNG0MGgjcyFGhh/yUhM/Z HimDwi6NhQOpsjuiFg6p6heCpmfF02eIHVHhwb0dCBkk+jx2Z30JwVCo9xCQeyTULdBn RBaVoiEPAntepHiVH7ioIHZ0VWMoyb2yK6+9AjLujNNysg8lvUVBRgbsXCrwylRDiQHh zxuQ6jPyTUT02WaHEMSejlALs8kRoaykZ6izx781lb5dG7E8TBYyBX5XRHTLIk2z+i67 YI1A==
X-Forwarded-Encrypted: i=1; AJvYcCVUszFsjMHQEh937WJEyoEKMItDCGHsPP0qoRyFLfyp7Mp3s59/LPwi0HErStOcBYhVGI0=@ietf.org
X-Gm-Message-State: AOJu0YxsW4BrGOWacGmefvgHNukh9BlOZYCnTwJk/zHgW2GdWa+3rP0K RurUaf4JRxcv/ZU/LTZN8DtruIq8/hRvir55Pt2rWjcX08nOppg51XozOHQW6fOEKSkPLkzUwev AA3BhwMCMhubnUgel8AG2XCOyseaqjXEem4EZegxDgPNDYmp2vV+hvA==
X-Gm-Gg: ASbGncv9sLixxJpTFTrbLiOiE/gSU6lKDZZzPKzeXI0jnlNKYV3VmSgZSEg9Ssx3Jas SuW9wBvTNZs2LPuvQp7WrNQdFuf0UCICipBROTGyB4DAVgvI2AN60Bq8HVgAzUNNhekd8CgsC/T qvp5T0nQxPSoaXnKk8rNtCLfRwORmqWZ6c3aXr73LB
X-Google-Smtp-Source: AGHT+IHtey6zTNsPocUHVjaukSyKrpccvgtVeEFTloeNs5LTq/gpT8bLMFo4eJxTpm2xkcS5Ra9zU24pKV/VfSLmXMI=
X-Received: by 2002:a05:690c:b13:b0:702:52fb:4649 with SMTP id 00721157ae682-706ad18ea35mr8277267b3.27.1744744020436; Tue, 15 Apr 2025 12:07:00 -0700 (PDT)
MIME-Version: 1.0
References: <07CB46EC-758E-4204-901A-CC8812B33A5F@sn3rd.com> <CABcZeBMDKGQtMMaKASsV74U7p-vXQr8Fj+AbqAjHwpsQJY_B9Q@mail.gmail.com>
In-Reply-To: <CABcZeBMDKGQtMMaKASsV74U7p-vXQr8Fj+AbqAjHwpsQJY_B9Q@mail.gmail.com>
From: Bas Westerbaan <bas@cloudflare.com>
Date: Tue, 15 Apr 2025 21:06:47 +0200
X-Gm-Features: ATxdqUHY8zd7jJeptMRmRoMygEjNFLIKcJg1_39sONDOZ6xZ_Wqs-GfpEIQR_3M
Message-ID: <CAMjbhoViK19e6vYf1JwVJz9pJATCtKodgSPXMfQbC9yGaeVifg@mail.gmail.com>
To: Eric Rescorla <ekr@rtfm.com>
Content-Type: multipart/alternative; boundary="0000000000009005cc0632d5df80"
Message-ID-Hash: 2F6JC6LRDQAJQMHEDGPPTA4Y4WGTPFFT
X-Message-ID-Hash: 2F6JC6LRDQAJQMHEDGPPTA4Y4WGTPFFT
X-MailFrom: bas@cloudflare.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: TLS List <tls@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] Re: WG Adoption Call for Use of ML-DSA in TLS 1.3
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/X-g0MIaI2hFg4mN5UhYJ1hHuTRI>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

This working group has wisely focussed its efforts on post-quantum key
agreements for the last five years. It's basically done. I have no doubt
that if any unforeseen issues might arise in the final stretch, we'll rise
to the occasion.

I suppose adoption of the draft.

Best,

 Bas

On Tue, Apr 15, 2025 at 7:41 PM Eric Rescorla <ekr@rtfm.com> wrote:

> I do not think we should adopt this draft at this time. I would prefer the
> WG focus its effort on key establishment.
> Once those documents are complete, we can reconsider signature.
>
> -Ekr
>
>
> On Tue, Apr 15, 2025 at 10:34 AM Sean Turner <sean@sn3rd.com> wrote:
>
>> We are continuing with our WG adoption calls for the following I-D:
>> Use of ML-DSA in TLS 1.3 [1]; see [2] for more information about this
>> tranche of adoption calls. If you support adoption and are willing to
>> review and contribute text, please send a message to the list. If you do
>> not support adoption of this draft, please send a message to the list and
>> indicate why. This call will close at 2359 UTC on 29 April 2025.
>>
>> Reminder:  This call for adoption has nothing to do with picking the
>> mandatory-to-implement cipher suites in TLS.
>>
>> Cheers,
>> Joe and Sean
>>
>> [1] https://datatracker.ietf.org/doc/draft-tls-westerbaan-mldsa/
>> [2]
>> https://mailarchive.ietf.org/arch/msg/tls/KMOTm_lE5OIAKG8_chDlRKuav7c/
>>
>> _______________________________________________
>> TLS mailing list -- tls@ietf.org
>> To unsubscribe send an email to tls-leave@ietf.org
>>
> _______________________________________________
> TLS mailing list -- tls@ietf.org
> To unsubscribe send an email to tls-leave@ietf.org
>