Re: [TLS] ML-KEM key agreement for TLS 1.3

Rob Sayre <sayrer@gmail.com> Wed, 06 March 2024 18:48 UTC

MIME-Version: 1.0
References: <CAFR824wL3sZKoD6OzVpOi8=HZ+aFjqVi4L8UsF8b0p18KOEqVA@mail.gmail.com> <CABcZeBPFidzshG2ZM0+JKc73prvan4_FWTTr6r1byxAeXkkcOw@mail.gmail.com> <CAFR824zbHgwCcHi6C7SATP5q0M7N7rYAjHXt9pGAnK=KDJCJhA@mail.gmail.com> <CABcZeBNth=9q9cyxZD96Ywsw5k0nRk4GbeZA38=P9NmuOc6HPg@mail.gmail.com>
In-Reply-To: <CABcZeBNth=9q9cyxZD96Ywsw5k0nRk4GbeZA38=P9NmuOc6HPg@mail.gmail.com>
From: Rob Sayre <sayrer@gmail.com>
Date: Wed, 06 Mar 2024 10:48:02 -0800
Message-ID: <CAChr6Sz4eu3f0bhJXdEg-zQZsa=MYhZzVzi-HuWaSOeso-F3zw@mail.gmail.com>
To: Eric Rescorla <ekr@rtfm.com>
Cc: Deirdre Connolly <durumcrustulum@gmail.com>, "TLS@ietf.org" <tls@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000b7de6d0613026662"
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/YAoTpjANvhrCFtzk6PwPMFFVMJs>
Subject: Re: [TLS] ML-KEM key agreement for TLS 1.3
Precedence: list

On Wed, Mar 6, 2024 at 9:22 AM Eric Rescorla <ekr@rtfm.com> wrote:

>
>
> On Wed, Mar 6, 2024 at 8:49 AM Deirdre Connolly <durumcrustulum@gmail.com>
> wrote:
>
>> > Can you say what the motivation is for being "fully post-quantum"
>> rather than hybrid?
>>
>> Sure: in the broad scope, hybrid introduces complexity in the short-term
>> that we would like to move off of in the long-term - for TLS 1.3 key
>> agreement this is not the worst thing in the world and we can afford it,
>> but hybrid is by design a hedge, and theoretically a temporary one.
>>
>
> My view is that this is likely to be the *very* long term.
>

Also, the ship has sailed somewhat, right? Like Google Chrome, Cloudflare,
and Apple iMessage already have hybrids shipping (I'm sure there many more,
those are just really popular examples). The installed base is already very
big, and it will be around for a while, whatever the IETF decides to do.

thanks,
Rob

Re: [TLS] ML-KEM key agreement for TLS 1.3 Kris Kwiatkowski
Re: [TLS] ML-KEM key agreement for TLS 1.3 D. J. Bernstein
Re: [TLS] ML-KEM key agreement for TLS 1.3 Andrey Jivsov
[TLS] ML-KEM key agreement for TLS 1.3 Deirdre Connolly
Re: [TLS] ML-KEM key agreement for TLS 1.3 Eric Rescorla
Re: [TLS] ML-KEM key agreement for TLS 1.3 John Mattsson
Re: [TLS] ML-KEM key agreement for TLS 1.3 Ilari Liusvaara
Re: [TLS] ML-KEM key agreement for TLS 1.3 Deirdre Connolly
Re: [TLS] ML-KEM key agreement for TLS 1.3 Deirdre Connolly
Re: [TLS] ML-KEM key agreement for TLS 1.3 D. J. Bernstein
Re: [TLS] ML-KEM key agreement for TLS 1.3 John Mattsson
Re: [TLS] ML-KEM key agreement for TLS 1.3 Deirdre Connolly
Re: [TLS] ML-KEM key agreement for TLS 1.3 Eric Rescorla
Re: [TLS] ML-KEM key agreement for TLS 1.3 Watson Ladd
Re: [TLS] ML-KEM key agreement for TLS 1.3 Orie Steele
Re: [TLS] ML-KEM key agreement for TLS 1.3 Deirdre Connolly
Re: [TLS] ML-KEM key agreement for TLS 1.3 Bas Westerbaan
Re: [TLS] ML-KEM key agreement for TLS 1.3 John Mattsson
Re: [TLS] ML-KEM key agreement for TLS 1.3 Deirdre Connolly
Re: [TLS] ML-KEM key agreement for TLS 1.3 Rob Sayre
Re: [TLS] ML-KEM key agreement for TLS 1.3 Dennis Jackson
Re: [TLS] ML-KEM key agreement for TLS 1.3 Dennis Jackson
Re: [TLS] ML-KEM key agreement for TLS 1.3 Eric Rescorla
Re: [TLS] ML-KEM key agreement for TLS 1.3 Salz, Rich
Re: [TLS] [EXT] Re: ML-KEM key agreement for TLS … Blumenthal, Uri - 0553 - MITLL
Re: [TLS] ML-KEM key agreement for TLS 1.3 D. J. Bernstein
Re: [TLS] ML-KEM key agreement for TLS 1.3 John Mattsson
Re: [TLS] ML-KEM key agreement for TLS 1.3 D. J. Bernstein
Re: [TLS] ML-KEM key agreement for TLS 1.3 Rebecca Guthrie
Re: [TLS] [EXT] Re: ML-KEM key agreement for TLS … Eric Rescorla
Re: [TLS] ML-KEM key agreement for TLS 1.3 Deirdre Connolly
Re: [TLS] ML-KEM key agreement for TLS 1.3 Deirdre Connolly
Re: [TLS] [EXT] Re: ML-KEM key agreement for TLS … Eric Rescorla
Re: [TLS] [EXT] Re: ML-KEM key agreement for TLS … Blumenthal, Uri - 0553 - MITLL
Re: [TLS] [EXT] Re: ML-KEM key agreement for TLS … Deirdre Connolly
Re: [TLS] ML-KEM key agreement for TLS 1.3 Dennis Jackson
Re: [TLS] [EXT] Re: ML-KEM key agreement for TLS … Blumenthal, Uri - 0553 - MITLL
Re: [TLS] ML-KEM key agreement for TLS 1.3 Deirdre Connolly
Re: [TLS] ML-KEM key agreement for TLS 1.3 Eric Rescorla
Re: [TLS] ML-KEM key agreement for TLS 1.3 Sofía Celi
Re: [TLS] ML-KEM key agreement for TLS 1.3 Deirdre Connolly
Re: [TLS] ML-KEM key agreement for TLS 1.3 David A. Cooper
Re: [TLS] ML-KEM key agreement for TLS 1.3 Deirdre Connolly
Re: [TLS] ML-KEM key agreement for TLS 1.3 D. J. Bernstein
Re: [TLS] ML-KEM key agreement for TLS 1.3 Bas Westerbaan
Re: [TLS] ML-KEM key agreement for TLS 1.3 Deirdre Connolly
Re: [TLS] ML-KEM key agreement for TLS 1.3 Eric Rescorla
Re: [TLS] ML-KEM key agreement for TLS 1.3 Deirdre Connolly
Re: [TLS] ML-KEM key agreement for TLS 1.3 Sophie Schmieg
Re: [TLS] ML-KEM key agreement for TLS 1.3 Stephen Farrell
Re: [TLS] ML-KEM key agreement for TLS 1.3 Watson Ladd
Re: [TLS] ML-KEM key agreement for TLS 1.3 Loganaden Velvindron
Re: [TLS] [EXT] Re: ML-KEM key agreement for TLS … Blumenthal, Uri - 0553 - MITLL