IETF Logo Mail Archive

[TLS] Re: WG Last Call: draft-ietf-tls-mlkem-08 (Ends 2026-07-08)

"Blumenthal, Uri - 0553 - MITLL" <uri@ll.mit.edu> Mon, 29 June 2026 15:53 UTC

Return-Path: <prvs=3640980a80=uri@ll.mit.edu>
X-Original-To: tls@mail2.ietf.org
Delivered-To: tls@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 1C0E0109F391C; Mon, 29 Jun 2026 08:53:02 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1782748382; bh=FYGRxlCVTQwDPD98SZTAp0c2IJgoSeeM3HqZ6YOIPi4=; h=From:To:Subject:Date:References:In-Reply-To; b=bgwOifdqNZrp5lu0LiNTwqWCq4dNP6e0PAT7g2aH37cKKsW0Zq89+thx6wagT0VS3 xEPcVoVWRoC2KvjFIIQHQJ+b8iKd04yudKEk47kexq8zkwuMwRyOrJQiSyNvF4rY82 kddwgSWY+Q1cYr+ad3YKC9aau64gLPHtHJNU+hfs=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.695
X-Spam-Level:
X-Spam-Status: No, score=-2.695 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=ll.mit.edu
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NHn5_V1HplKD; Mon, 29 Jun 2026 08:52:59 -0700 (PDT)
Received: from MX3.LL.MIT.EDU (mx3.ll.mit.edu [129.55.12.52]) by mail2.ietf.org (Postfix) with ESMTP id 6EEAB109F370A; Mon, 29 Jun 2026 08:51:45 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ll.mit.edu; h= content-type:date:from:in-reply-to:message-id:mime-version :references:subject:to; s=dkim3; bh=Xkn2wNfnfa9Aymgw5Xn8uffgbPe4 m1NGNsXl0Vr94ZQ=; b=CfGm8s7HX91kPhLS9iXEFQekNQFZZ5X/zW6lQ8aFHrMz S0wprJpQb4GTqxlrugTZHJAgv+NTIlQvOjoyjP2AGDms5FTEK1G0FkPr/eHwizy3 J27Tithr+JvEVjlpCJmEcczApoU85WTDjoZSp84dS5z/q1MNDjCt8ZVmnhKukmVR VtYESqzaw6R5hPIR1vzILoAEtZv9s5ixDfhGz5gioG9uWbiC+DcAJ0JLyi+6zVzd fYeL4t5MEYpeIi5OToovaqUgcPM4J5kralb3qUqOIySs2mzo+gmYfOPtMGVsB4Ty hVs7Efswh+o/S3LyD1qR3Wq7MR+rWN6WuF60pfDPjw==
Received: from LLEX2019-03.mitll.ad.local (llex2019-03.llan.ll.mit.edu [172.25.4.99]) by MX3.LL.MIT.EDU (8.18.1.7/8.18.1.7) with ESMTPS id 65TFpgcb100901 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=FAIL); Mon, 29 Jun 2026 11:51:43 -0400
ARC-Seal: i=1; a=rsa-sha256; s=arcselector5401; d=microsoft.com; cv=none; b=ygP9cseanebn2guk0XmmHevI+q1Nphj4Kol9dvrFmMDQxG/ItLF9c3RNGywqHE0LyB2+X71SJLXpozQw/GV4gOrUxRqCdZEs4DeYVZJ6X68kqL4CCsiQmxGBK+R2c0RDt6fp45M9NqpVbEzLr6au0WeCp0Cn8cNY1PZmW5IZouTsk4DDFtYt6hPL/IaEABNGBMsLNPo6oB6CFKf9tRVTbCyAfMfWzltl7V5VxXB6dqsNULhuC0Pbt39D6rMCBAap7G9dyP9HCf0wyHswcLBZq7WB7QwKBDbZJa8tS/P6qC5JkMkXMO1pNM2bvafV6XtKYSVFSPFSmnE/ODVhBgTV6A==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector5401; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=NB9Bx1l2I2Df2ZusBtV0YCUx3/GVON0DsuEh69jmXEA=; b=llrN8XJnJKHTXKI4CkFo59CtK5i1XxWUZGDftgCjonfN/I7EDVg2yawTXp3nZVwSmlg67rGiGlT5nAmiK5hDVjBEM/9ecEuXc64SpETvMWKPJYSjU+/Tw0Tzoe1lsAodansmMZPwUGKC5Mg2Gq9Z9vk2OesJQDDMxzgQyH/vFQHCJD3CxqF6QpuPPF8maoEDrIXWE5Vc35H1jnBNs14pxILw6TvBnH1+8h3JYDFJt8KMxPe+D49/hBxe0SxCfQPDIe/IVVyDP+JQEoTNb0RTh8cfuAbwl0oNCtkJ3A/AYB2w9zjYOxNtnsmUTZhddN6a1TVqk7mMSS5TDDBDqPo76g==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ll.mit.edu; dmarc=pass action=none header.from=ll.mit.edu; dkim=pass header.d=ll.mit.edu; arc=none
From: "Blumenthal, Uri - 0553 - MITLL" <uri@ll.mit.edu>
To: Yaakov Stein <ystein=40allot.com@dmarc.ietf.org>, "tls@ietf.org" <tls@ietf.org>
Thread-Topic: [TLS] Re: WG Last Call: draft-ietf-tls-mlkem-08 (Ends 2026-07-08)
Thread-Index: AQHdB9tJ+qkU420l4UKBWRURRmE8c7ZVrdWd
Date: Mon, 29 Jun 2026 15:51:37 +0000
Message-ID: <BN0P110MB141935524596735D57451CFD90E8A@BN0P110MB1419.NAMP110.PROD.OUTLOOK.COM>
References: <CAAmCkeqCGexuQ18u+OSN_Qqfwnwwum5bMmMGz1hZz-Aii6zVjQ@mail.gmail.com> <GV1PR08MB734661EEE0B50BD29CA79E27D3E82@GV1PR08MB7346.eurprd08.prod.outlook.com>
In-Reply-To: <GV1PR08MB734661EEE0B50BD29CA79E27D3E82@GV1PR08MB7346.eurprd08.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
x-ms-reactions: allow
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: BN0P110MB1419:EE_|BN0P110MB2243:EE_
x-ms-office365-filtering-correlation-id: 4efa86b7-f348-46d8-800a-08ded5f64e4a
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;ARA:13230040|366016|1800799024|6049299003|23010399003|22082099003|18002099003|8096899003|4053099003|38070700021|4143699003|56012099006;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:BN0P110MB1419.NAMP110.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(366016)(1800799024)(6049299003)(23010399003)(22082099003)(18002099003)(8096899003)(4053099003)(38070700021)(4143699003)(56012099006);DIR:OUT;SFP:1101;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg="sha256"; boundary="_50B3E342-AEA0-104D-B7BB-76308E5E1FD9_"
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: BN0P110MB1419.NAMP110.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-Network-Message-Id: 4efa86b7-f348-46d8-800a-08ded5f64e4a
X-MS-Exchange-CrossTenant-originalarrivaltime: 29 Jun 2026 15:51:38.4728 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 83d1efe3-698e-4819-911b-0a8fbe79d01c
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN0P110MB2243
X-Proofpoint-GUID: pKVHtMLLG4x59bfpV3auy5NQ4P5aIk4Y
X-Proofpoint-Spam-Details-Enc: AW1haW4tMjYwNjI5MDEzMiBTYWx0ZWRfX0PmyhHdAtPhj 2Zh+2YC6CyfW+CL8uD2TWAYGgyev4uYXAsW+cv90LA4owkErtt9FvKPfdxCqnL4vuIPWcWqRDzT E+cy6Zmsg+JZsamxpoq6/c7KBlSpCQn+LXAOXkx6huSKu46AlcXWI4LVhcmmSF8EP5r9b3q9MAQ U8wfQYNVkzWSx4G1geLRo5/54NpFNR/N1rWKRKAuOmPXXzsafvvmaIhcVKpvtWsHweoVJrX3cta jXlaJLInrWHp8fKkbABQXfFbrgBqoQELz/YnSJfqSMfUyxg31WaWFh00MNMbyT/IFpSZzGOcwBa rdXryjF2GKftlcJvwI0wzuoAeUfasBHELmk4AKcl+LgzQgoEmeUNNrpLyhCO9EjcAvTkTTSZOw0 8THikMjysaUgeESqvIKL8PwkxZfLxw==
X-Proofpoint-Spam-Info: AW1haW4tMjYwNjI5MDEzMiBTYWx0ZWRfX7Ka5P6Wh8HzB FRvAqyXfAcqFsJwLAtZyJMk/POmjo0odAV2x9k7VW1yX/pfjc3O7qhOcDsyanP1bUcpjgvxs3t1 2KEYpXV3j3SMKjdgngWfOxqdHPHMfHqvkdRZk52no7rGtHEqeStT
X-Proofpoint-ORIG-GUID: pKVHtMLLG4x59bfpV3auy5NQ4P5aIk4Y
X-Authority-Analysis: v=2.4 cv=da6wG3Xe c=1 sm=1 tr=0 ts=6a429490 cx=c_pps a=gKe/mLUEfoSu6txfIyclRw==:117 a=z/mQ4Ysz8XfWz/Q5cLBRGdckG28=:19 a=lCpzRmAYbLLaTzLvsPZ7Mbvzbb8=:19 a=xqWC_Br6kY4A:10 a=FelO9ux0wxsA:10 a=VkNPw1HP01LnGYTKEx00:22 a=6J-vbcjw2OQC1sJBszXA:22 a=0bWFOBTDAHS_4l02IRiL:22 a=PeUctXHVFBjn8doYabwA:9 a=QEXdDO2ut3YA:10 a=PR2bsRxwCiAggHD5:21 a=_W_S_7VecoQA:10 a=yiS_OlLFfiXx3336nRQA:9 a=ZVk8-NSrHBgA:10 a=30ssDGKg3p0A:10
X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.293,Aquarius:18.0.1143,Hydra:6.1.125,FMLib:17.12.100.49 definitions=2026-06-29_03,2026-06-26_01,2025-10-01_01
X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 bulkscore=0 adultscore=0 lowpriorityscore=0 phishscore=0 malwarescore=0 spamscore=0 suspectscore=0 classifier=typeunknown authscore=0 authtc= authcc= route=outbound adjust=0 reason=mlx scancount=1 engine=8.19.0-2606160000 definitions=main-2606290132
Message-ID-Hash: REP7RDELPSNQLVUDHZ5PVROEIUL7GFCY
X-Message-ID-Hash: REP7RDELPSNQLVUDHZ5PVROEIUL7GFCY
X-MailFrom: prvs=3640980a80=uri@ll.mit.edu
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] Re: WG Last Call: draft-ietf-tls-mlkem-08 (Ends 2026-07-08)
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/Xb4u62frOhNAYpd1aEhpBeyjV-Q>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

>> * For the time being, hybrid cryptography appears clearly less secure than solo post-quantum cryptography
>> I do not support the publication of this document.
>
> Less secure but should be used ?


Hybrid will always be less secure, if (a) you agree that CRQC is coming, and (b) your data will remain sensitive through that time.


Therefore, IMHO it should not be used — but unlike some others on this list, I want those who have reasons to use Hybrid, to be able to do so, without having to convince me that they truly really want/need it.

v2.46.0 | Report a Bug | By Email | System Status