[TLS] Working Group Last Call for Post-quantum Hybrid ECDHE-MLKEM Key Agreement for TLSv1.3

Joseph Salowey <joe@salowey.net> Tue, 07 October 2025 13:46 UTC

Return-Path: <joe@salowey.net>
X-Original-To: tls@mail2.ietf.org
Delivered-To: tls@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 4147A6EA13EF for <tls@mail2.ietf.org>; Tue, 7 Oct 2025 06:46:55 -0700 (PDT)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level:
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=salowey-net.20230601.gappssmtp.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id P7i3M0VqQfRc for <tls@mail2.ietf.org>; Tue, 7 Oct 2025 06:46:54 -0700 (PDT)
Received: from mail-pg1-x534.google.com (mail-pg1-x534.google.com [IPv6:2607:f8b0:4864:20::534]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 83E536EA13E8 for <tls@ietf.org>; Tue, 7 Oct 2025 06:46:54 -0700 (PDT)
Received: by mail-pg1-x534.google.com with SMTP id 41be03b00d2f7-b58445361e8so5552069a12.0 for <tls@ietf.org>; Tue, 07 Oct 2025 06:46:54 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=salowey-net.20230601.gappssmtp.com; s=20230601; t=1759844813; x=1760449613; darn=ietf.org; h=to:subject:message-id:date:from:mime-version:from:to:cc:subject :date:message-id:reply-to; bh=qi79WUKLPVTbBgG8vvrhZYZoHHezMucYtbuwi7MOzh0=; b=Z1hV3GmTkyVDDfz2NiSRKrZsf22w5IaAY+QFL4Yirug5NvVBx0n+cvH/BQixLZeH2y sAYFovtINqZ1UjhzTYFN30/rcBL0UCS9CO4PBLXkj9bGOmO7t6o/kEMQQBaeGaOEIgnI PP12vjZtqk9GYcyQmwVK4aUGf/gvvzMY14eDNkUBzSgwdwR1PL6A7S5MfGX86kaD2ibU jewe4GDM5MWVOhT8+mc9+D+W59x0mfXOXIPTjxFD6+svB/dretzxb6mEpzR0otPw6a87 cvDSGK74l6HthurIO8gqQVarplNd6tFaipt7XbgvcXdWHiSSfhZMKhqy5TrDp5ejMy1F pb0g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1759844813; x=1760449613; h=to:subject:message-id:date:from:mime-version:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=qi79WUKLPVTbBgG8vvrhZYZoHHezMucYtbuwi7MOzh0=; b=IZhUnv+0w9+s8IcIA6BHbH+WB4td8XyH7ETZ/8OeHnwgtJyrZO0h0WwgmQQPFxcjvf vHne0vAYpTZ/wS7R/wHgSRfZO8g8SM2SU6DeRyngN+3/SNZTWGYR2VBJAs+5MqiWebyi Y/LrTKGam/jP2KBKLQx5+lwQ0nHcEw9JwerWGQwFoq7/b+tKttLAfl0+fNS4IgB4gspO x4aq0ZDuoUpiLC19pyWxlobaE944+90m2tYXnV6Eo7EP3lt7cl5J8K4ehekmpXGzamby dVYBSNisLi6tYjjuYK0D+vszVtQDYeDAfqm2XdqKRW9THvj4RXf/75KdtxMeygrPFP9K iMjw==
X-Gm-Message-State: AOJu0YxqWE/GcLyMrJnVX03IrZUKjbdN53+dj6YD9xuzo+hsi74z+K6e ydm7tzz3NlxquqSf+ppgYTlH2hxzVBSKEHR4s08iY4N+tFoLY6vFdfr40AzpJNMJHHHOSH27pt7 PFOSPWQcy+POiQP78be6YJrNh+/d/8tpKSfEGx1waerVukIohGHp+u63vNA==
X-Gm-Gg: ASbGncus59RU9jcXStFC+9YMX+NVKiyeGlJ8MyH+Vp+IhgTjjFZhd49qUozUmBF8nZg /FeELEnizdskUdIQdFX/E8pX1BviHNzx26N/kMLsWvg1VqYJOz//b6fvy5jWpffLUcf7JD7x9in PbbHDLWGmbKwfYF/0P95JlnEnX53enVUs5zWnw2a0SW2EuH7Nc/sTZxl0IMAJyDQ//CzFzJEPTP 1+eMOD0Zm3F1GKRZiGnqmtK4xMUFaEqdOuebIAkBrc=
X-Google-Smtp-Source: AGHT+IGiBOdM98C7vxO88d62fW/w76SwN5RhYx95n78Rw6lI04oQQkvF8BLYyXobXZ+h8MAzmht3WhucywM7kQVkJ3Y=
X-Received: by 2002:a17:903:2c0f:b0:266:57f7:25f5 with SMTP id d9443c01a7336-28ec9c272b4mr47333285ad.7.1759844813202; Tue, 07 Oct 2025 06:46:53 -0700 (PDT)
MIME-Version: 1.0
From: Joseph Salowey <joe@salowey.net>
Date: Tue, 07 Oct 2025 09:46:42 -0400
X-Gm-Features: AS18NWBiLrFo7Qq-MudbJTvfPuImOzXb1ievGv5oREkEbtXSbZWNpyoJKx4U-mE
Message-ID: <CAOgPGoA+c8kXDizwsvFG5tLz9+Kxk0HqiN1skKp5jMvvpxeu0Q@mail.gmail.com>
To: "<tls@ietf.org>" <tls@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000f3748f064091cc0f"
Message-ID-Hash: GHCV73KP3L4AYSJG2PKSDWKDDYYJVMHV
X-Message-ID-Hash: GHCV73KP3L4AYSJG2PKSDWKDDYYJVMHV
X-MailFrom: joe@salowey.net
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] Working Group Last Call for Post-quantum Hybrid ECDHE-MLKEM Key Agreement for TLSv1.3
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/Yt4TwqAHamHSktChXbBggYjWods>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

This is the working group last call for Post-quantum hybrid ECDHE-MLKEM Key
Agreement for TLSv1.3. Please review draft-ietf-tls-ecdhe-mlkem [1] and
reply to this thread indicating if you think it is ready for publication or
not.  If you do not think it is ready please indicate why.  This call will
end on October 22, 2025.

Please note that during the WG adoption call, Dan Bernstein pointed out
some potential IPR (see [2]), but no IPR disclosure has been made in
accordance with BCP 79.  Additional information is provided here; see [3].

BCP 79 makes this important point:

 (b) The IETF, following normal processes, can decide to use
   technology for which IPR disclosures have been made if it decides
   that such a use is warranted.

WG members can take this information into account during the working group
last call.

Reminder:  This working group last call has nothing to do with picking the
mandatory-to-implement cipher suites in TLS.

Cheers,
Joe & Sean

[1] https://datatracker.ietf.org/doc/draft-ietf-tls-ecdhe-mlkem/
[2] https://mailarchive.ietf.org/arch/msg/tls/mt4_p95NZv8duZIJvJPdZV90-ZU/
[3] https://mailarchive.ietf.org/arch/msg/spasm/GKFhHfBeCgf8hQQvhUcyOJ6M-kI/