[TLS] Fwd: New Version Notification for draft-reddy-tls-composite-mldsa-11.txt

tirumal reddy <kondtir@gmail.com> Tue, 18 August 2026 13:18 UTC

Return-Path: <kondtir@gmail.com>
X-Original-To: tls@mail2.ietf.org
Delivered-To: tls@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id DB05312BA2B04 for <tls@mail2.ietf.org>; Tue, 18 Aug 2026 06:18:52 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1787059132; bh=/vxhf743C9qgrlzb3RY5qevENE4KopCqidNZRZzunSM=; h=References:In-Reply-To:From:Date:Subject:To; b=HJLoAVHKJYA80UkbY/XfBRK+ThqS60WHRD8fu5GXOtU1Q+ow+zK5UHFthz5lYLs7x TnX+itbHA3IFPZf4mDlxvAZwKiZCE2HemoxYbejiQT6TFyoFZf3NLopI7XpkcfIN3U yjd9Ca/wAqi7BYlvwfCRSP7QdQrNJGmgEnNvym0o=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id npxsC-V70H6D for <tls@mail2.ietf.org>; Tue, 18 Aug 2026 06:18:52 -0700 (PDT)
Received: from mail-ot1-x32d.google.com (mail-ot1-x32d.google.com [IPv6:2607:f8b0:4864:20::32d]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 5687B12BA2AFA for <tls@ietf.org>; Tue, 18 Aug 2026 06:18:52 -0700 (PDT)
Received: by mail-ot1-x32d.google.com with SMTP id 46e09a7af769-7f3fd905828so1937452a34.1 for <tls@ietf.org>; Tue, 18 Aug 2026 06:18:52 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1787059132; cv=none; d=google.com; s=arc-20260327; b=b7hi4R9jN6HL6FLSFyiy+wez27mn4gT+HU+RxZxYywD9/mpH3stQpsjVqaPrezgJj8 JD5oFEyAxOXFSU2y5qyvyQvo2OX6Exkqq7NtmxUb8hv7ITFhyBaw71N6X7LcSLOoGMn+ cLMAxIRh09srbyoBSAcOykl6uW9M789Xc1XngdDIT++zklLeR/7mHpdU4Y95d2OelN44 C26JvZF9QpGFUOq59c3Wju55eycT5sou283A8Mz6DdxOl5Q/JNuIV9XH0IVeXlM0ZjsJ jBMpZGiM7519locTxMnxXQ55XfrzuqBqtqsqSSezr3PM80+EvjatmVWUoip7Y3caG6sS uY4A==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=to:subject:message-id:date:from:in-reply-to:references:mime-version :dkim-signature; bh=ruWLVzszw84tAB5RwgOhFNTL8UpcSB6qDGBP6gpUA4g=; fh=6dNaabedNczh5TXKCP3vnXRLFdmtidwzU4uB2XwvFYI=; b=DDJFxIvRUAl6ZFqbOnQ8oX3RM7+oRDggHA1mujsgA0JF9zwFO6Vj3s5CHk2zo2elBQ jIpmRZFOt2q1kA1ScYVlnvlBBTY1+ItwAcjKue2bGmow6bahgc5UDZVQuYjpGU8U+kfX drmVWgEEzoZaC7CerBC0hwe4KvzjODizsffo2pyPZgc5dMBWFrzFtmI7zUJNcKj8ZVwg EUOv+qnSWGOUo5XAeUtbLVdO0fayDiBoIRTOQtOyQM2PXe7AaR7A4qFeCouuZhWsCGtN 7Ili/6kQ8WGh9/pm3l1nSToFZPF4uNqSkeaabbysYZUuOCGcBzf2h3nNAYSB25fswwJ+ 04+A==; darn=ietf.org
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1787059132; x=1787663932; darn=ietf.org; h=content-type:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to :content-type; bh=ruWLVzszw84tAB5RwgOhFNTL8UpcSB6qDGBP6gpUA4g=; b=du5l1I5QZdeL73bUvZsVtYzNHG9XU6tIaHTuB7YVXF++pNo6+7MUUVbyoKs2ARUGD9 E12Bh3UyAeaWKGOL6OQegMYBItuk1iLUXMix9uYx+oUxsoVafLrks98hY38cAA4WqC4p VfbIoaYt7ZZhtrbsweB3CFYFWQNG2u4VLC0w8S653mtbX7+wOcpegyQxEduNgLtsYXCa y4vjAfKFduPzBzusPIgTX8uQ6B0ZSW2Mipd/5wcBb7TFrQT5Vk/geOuyiyPXeF8wU+hH iC8MkwGjzhDIJaRfXiC7GZMoPq5tAEA+o7Sk80nyLKWu0ZCivMbeflBpkAYaogxA8xzG 1fEw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1787059132; x=1787663932; h=content-type:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to:content-type; bh=ruWLVzszw84tAB5RwgOhFNTL8UpcSB6qDGBP6gpUA4g=; b=XRhUOlsWPM006/PR3mM2aSv35JMeoemfdpptRIl4ZkF6aytN2dA3XcpYK8lJ0L5Uwo eQVNBEC044rHNEYdpZR21OzAbMvYPgIdafUU56h2vh5xR0Rzlkp+G/9lwa9B7qIfSsIB iW7vRdH3pEixxfGjKZiEaSZpemZ4/VeUIb9NubOt0OaKEXaTLbURqpn9aYlGNXPJxBvl nt13Cq0GTp8cd88jzxijANkX249SQ5B3s1VxlDHz9K/10RdPeNxY/me4vRG1LpatIuY2 jE5pby1gYqy035heSLk5ZR9KF2Y2sgrTIIPg8mCWMIT0yryW555UMBe9Ga2lvhdmfqgM 1OSQ==
X-Gm-Message-State: AOJu0YxkZpBzOg4cQzot1jdlNDNY3yFnhUqeoOZAU+DGvnzLD8dftHzk HFfw/Bkvn/vO/avEmUsGxwDTmjzUJhQznHD/PVSNuQ+9YKxE6Me6GJx9JlYbJTZcENMVRPNZ+dw rZ9RnjQac/j/HcHz5REKkA7IWJaXOwe7xkg==
X-Gm-Gg: AR+sD11A8qxXTEZRQ0fjeEus3R3GQMLOcylzp/dRLKs3eQTsyqjQlpAr9B7EnuGTOKi g1uoFH4ZAPtKrm8hSe3U5I3Q1XmBdgesRUQNqLNVqKO3zQTunfqmvFpa401+sd2lyltfOS/yqCR ZHoC4JRwrdcivLtz+TWChWBDjLZsWoE0d4TA/0tny8Gz9V7tDGGPBAy15OtC8IoRbr3m+lLlH23 0Xz4G0iGJ7o22FdmOprH2DHJkZtfVNWNwv01FbC765TS4lIzm81GbQZjz69hjr3kFJMjDnTPID8 MxwkY0zRIog5PUSdjPo8xBIArRH156H4tV4oYO47R5rWw2r1+D+9kxM6mLTiwnrEbIJ7vZLthBa sIjji2EPpJRYi
X-Received: by 2002:a05:6820:1844:b0:6b0:5233:f69a with SMTP id 006d021491bc7-6b0d6fd017fmr26951596eaf.30.1787059131437; Tue, 18 Aug 2026 06:18:51 -0700 (PDT)
MIME-Version: 1.0
References: <178705738239.532236.9732380350992727627@dt-datatracker-7c6ddbc678-lb5nk>
In-Reply-To: <178705738239.532236.9732380350992727627@dt-datatracker-7c6ddbc678-lb5nk>
From: tirumal reddy <kondtir@gmail.com>
Date: Tue, 18 Aug 2026 18:48:15 +0530
X-Gm-Features: AcwNN1XEcNrWJpQW3zDAQ6yCAzNihIaJM_tUe4EYrB0-ZgSNszdytDaA3kAk9ko
Message-ID: <CAFpG3gdxmCKQkf42R=iLSKR12tafk1hFYw25N=ae5DrKtXY6dg@mail.gmail.com>
To: "<tls@ietf.org>" <tls@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000b8d8d506595220d0"
Message-ID-Hash: 5UXRPCHHCSN5ACJZAZYRQXPOOOGRNVFT
X-Message-ID-Hash: 5UXRPCHHCSN5ACJZAZYRQXPOOOGRNVFT
X-MailFrom: kondtir@gmail.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; header-match-tls.ietf.org-1; header-match-tls.ietf.org-2; header-match-tls.ietf.org-3; header-match-tls.ietf.org-4; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] Fwd: New Version Notification for draft-reddy-tls-composite-mldsa-11.txt
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/Xi-4Ns3B8UGtmi6XrYIlRF8SVss>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

Hi all,

We have published a revised version of the draft:
https://datatracker.ietf.org/doc/html/draft-reddy-tls-composite-mldsa. This
revision incorporates the feedback received from the WG. The main changes
include adding the missing composite algorithm based on the selection
criteria in the draft, clarifying why the loss of SUF-CMA security does not
impact TLS authentication, and adding downgrade security considerations.

Please take a look and let us know if there are any further comments or
issues.

Thanks,
-Tiru
---------- Forwarded message ---------
From: <internet-drafts@ietf.org>
Date: Tue, 18 Aug 2026 at 18:19
Subject: New Version Notification for draft-reddy-tls-composite-mldsa-11.txt
To: Tirumaleswar Reddy.K <kondtir@gmail.com>, Daniel Van Geest <
daniel.vangeest@cryptonext-security.com>, John Gray <john.gray@entrust.com>,
Scott Fluhrer <sfluhrer@cisco.com>, Timothy Hollebeek <
tim.hollebeek@digicert.com>


A new version of Internet-Draft draft-reddy-tls-composite-mldsa-11.txt has
been successfully submitted by Tirumaleswar Reddy and posted to the
IETF repository.

Name:     draft-reddy-tls-composite-mldsa
Revision: 11
Title:    Use of Composite ML-DSA in TLS 1.3
Date:     2026-08-18
Group:    Individual Submission
Pages:    16
URL:
https://www.ietf.org/archive/id/draft-reddy-tls-composite-mldsa-11.txt
Status:   https://datatracker.ietf.org/doc/draft-reddy-tls-composite-mldsa/
HTML:
https://www.ietf.org/archive/id/draft-reddy-tls-composite-mldsa-11.html
HTMLized:
https://datatracker.ietf.org/doc/html/draft-reddy-tls-composite-mldsa
Diff:
https://author-tools.ietf.org/iddiff?url2=draft-reddy-tls-composite-mldsa-11

Abstract:

   Compositing the post-quantum ML-DSA signature with traditional
   signature algorithms provides protection against potential breaks or
   critical bugs in ML-DSA or the ML-DSA implementation.  This document
   specifies how such a composite signature can be formed using ML-DSA
   with RSA-PKCS#1 v1.5, RSA-PSS, ECDSA, Ed25519, and Ed448 to provide
   authentication in TLS 1.3, including use in certificates.



The IETF Secretariat