IETF Logo Mail Archive

[TLS] Re: WG Last Call: draft-ietf-tls-mlkem-08 (Ends 2026-07-08)

Bas Westerbaan <bas@cloudflare.com> Fri, 26 June 2026 08:28 UTC

Return-Path: <bas@cloudflare.com>
X-Original-To: tls@mail2.ietf.org
Delivered-To: tls@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id D8E99107D0342 for <tls@mail2.ietf.org>; Fri, 26 Jun 2026 01:28:51 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1782462531; bh=4FrapQ/wwarEcSWxE3sQ++HtnWbI0dDf5KQ19TfduUs=; h=References:In-Reply-To:From:Date:Subject:To:Cc; b=D48gUxoYrA4JcFXORlAES5NmOdD48p83zfwEHoesPuG3HKSKw1kTggLSRrz60Ol7e Q4b9TL0c4momdblPJBrERH75fL1ArIQPqTkaPo02YcD//IYxZ0+lGT0tmHxxVLu2gp WBvHgORXUyAu5KRnLk8aAtRWIyOXwa/pMgEHzxO0=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=cloudflare.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kzF8QEw0uG9f for <tls@mail2.ietf.org>; Fri, 26 Jun 2026 01:28:51 -0700 (PDT)
Received: from mail-yw1-x1130.google.com (mail-yw1-x1130.google.com [IPv6:2607:f8b0:4864:20::1130]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 0A002107CFC56 for <tls@ietf.org>; Fri, 26 Jun 2026 01:27:32 -0700 (PDT)
Received: by mail-yw1-x1130.google.com with SMTP id 00721157ae682-80bd5b5b3afso3205017b3.3 for <tls@ietf.org>; Fri, 26 Jun 2026 01:27:31 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1782462451; cv=none; d=google.com; s=arc-20260327; b=FpWFBC+mwaGahPLWj3W5BStFSLfjrH8i1h2AqdtUJ6ODyGSLTjiM6zys8fvtkyOt8r AnvQQKixZxn0PGkUzgJd/QwCdvLjhtrqVlZ3oKuP6Pcurj9qnsvH4kUZPsSDc46c+sJB lXgvNWtlRJZHR53VTqZ+WO7ocRelHuhysZYLw+esRrxMTmBNkn2zRSbdhkohw50LGnDi IqtbHa+/2ksMwWGEKah0PhW7rGnBzFif7fcUz+XrS4MVcsaKTAnS8LIJpHzhBAwCakoY 0eTb1ffx9AuGWr7zGlboMkmfc6C9+WFwXdsYAL8Ru6cOJwR/2K4Esc12UI2R7XesVjtn vRJQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:dkim-signature; bh=viC8IYH55xjc3wmAxxbI87/9G3+pNevNg0SZTXkvxJ0=; fh=TetqLINAAYOYk4/qjBoawt8xl0oASY+8Y7nFH/ou3j8=; b=geHs8zb0OfsfcCB/ZNaHnI+kuou15FEiQgWxnKPZk/jDFVDGYNAaBELDo2nxRGRIry mnxs4VJhBovr4m3z/C8pMpuChVNaHPqFwvlNMAo6jRixO5iZEBgJrrfYTN+QvoV6+XPD GG0yNkJFEOG9JmncuPFfcbUO0Wy8CkDj4PPO531TaMgeo2s6N/3LNr9d+cVayNSvI7L3 gwBPcUor9YSAlr/LIeO0A6RFCxG8aUOCa/sb7Rr63jQBuUaVB0+99NYBDtgzRP3Kg9KX Xcdtoyl0YiTbf8yLyF8/M1YBMmEnb1e8ztVnrHX60A4rNQGvT/vFkpOIop5agZBxj0PD lkjQ==; darn=ietf.org
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cloudflare.com; s=google09082023; t=1782462451; x=1783067251; darn=ietf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=viC8IYH55xjc3wmAxxbI87/9G3+pNevNg0SZTXkvxJ0=; b=Y91dAbadTVUZHVvJiRKmYTQLX694c6Qfov8/4cAKKC61iP4Rzd1P5TOCRx7EYEkuHS Mlupwx8fiBgq8ZsJBs3b2KwCcHauZob1BpA9qgTBtNnjrro+PN+26213YkJ39DDrRNLK TDKZWSG3Z7oDfp5k+MCfwoo+XGa5yTIq5jcrA38wqiXgh0/NPtWZ0Sz9gPWdx/SfMj1B uVPRmmu5ymsqTDOp9rv+fs3WHE+Oei1Tzyw9J9VjzQ/LP1Cs0Uo6rzshK78N9x0smPLj WUJoQwFwww8FeJcjW0ehlpsbbhCTH5acDJ6/o3HhN0oHSSqfAjQuedvzxGv4d6y33HPR nkeQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1782462451; x=1783067251; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=viC8IYH55xjc3wmAxxbI87/9G3+pNevNg0SZTXkvxJ0=; b=UGRrrBblExycLPgSqyM2bopYwYHbU2ePFM2hz5EzkZLHPSkfEXPOD7Kjvgwmm5xqpk s6a+INyJCuieNrJnV3QxqZtnIPccCH9iCQuAkDmAW8pLdw93X8OBQumTqzkdPCkCK+/Q Blu5B7LTIHw9A1F5H+bjNp5nU77m5VhzywS6uwR25TrGaSRU5U2AlJA3weQF48JuRqAu RY5YDNyaJtEMsdDuePThjFLbBRlODkmu8q9JufEwP5lq7zbtPY9090Xf5p6bcCPUavYH JBe1J/S3IoyYvFzlXiKzyEPJnMaEfFLCJmBoGdTwG5q5Q2jODTRnZIbcv4sjW+EG9K7j ptrg==
X-Forwarded-Encrypted: i=1; AHgh+RrnFlfx/baOZj52Lim9hJ4d5zzy/XDMmxbEFJic0nL+zSqN94WLAFj+zDMBZVp6CN96Fgs=@ietf.org
X-Gm-Message-State: AOJu0YzT/JsOftJvLqN/RvRP9smw6Euf1kOodVurQV4sTTsEyyiuwDhr OjmRIe3WUWV3s4paCR9/fihHqfH7n2A3TQPGlHN5mBmzxFMuAxhr0nZdCIoY8H0IVH14LUudJ7M Jdh1JpYbW8nPVl+nIG1fg/ARE78D8Al4iWEcyobF8OA==
X-Gm-Gg: AfdE7ckf57OIWulKEBNeOReXCtpUdWJtS2WxK5IQ1K5OC4vNfFMdgbRFrK5Buschnkf FMQFCdo1BDLhlF0W1jwLzSMN79MCv99cKw9Dl81VsjdNuq6BApQZ3H1Yd8KixaN8Wk5YqfLi3K2 RPeJ38VM6/Xge5TsuyyIOg01yYpWfaFHPUwCM1MSzL1mwQeimnOVheHjIlmcpF8u4ydVKjLy+Ly l6IY3+6SRMu5wDapnZuZ3FwwXqLcbUC1sV9cxRw7RHUK1/XeiTCb1ZkbodrAPXIoGsQvQE49FnG OoAMMJ24w5F04SfiDlZa3J2cKBNk4ONt8xtXzRLCBWOO12qp0HkrmpX7oQ==
X-Received: by 2002:a05:690c:6ac9:b0:7cf:e22b:fc49 with SMTP id 00721157ae682-80a6c878b36mr58507427b3.31.1782462451310; Fri, 26 Jun 2026 01:27:31 -0700 (PDT)
MIME-Version: 1.0
References: <178231320760.1520243.5914961961176039994@dt-datatracker-f9b87776f-8pmmg> <2cd74c06-4489-4c68-aad1-bd9b35a05c39@betaapp.fastmail.com> <CAMjbhoW9BmWXvjRxfZALUKoniPYsthhikv2q=iJeXo9X_aMX7Q@mail.gmail.com> <CAOjisRxEJWiq7ESss8MqLxCCxkZUfUDPwNWsgSLCWH4ej+xvLg@mail.gmail.com> <CAOjisRzT9EegXyxcBM1Po_ZTVbXQ0fcMynR31y5jYBdKNmGmYw@mail.gmail.com> <7c36cda6-227d-4a81-b908-3f59052de500@betaapp.fastmail.com> <CAF8qwaARYx+=7jN+dNn-wtaZmVxMNJi_=d80zQixo758pK5U7w@mail.gmail.com> <1cd37f62-4f07-4fe7-8e08-1cf5c1f23f81@betaapp.fastmail.com>
In-Reply-To: <1cd37f62-4f07-4fe7-8e08-1cf5c1f23f81@betaapp.fastmail.com>
From: Bas Westerbaan <bas@cloudflare.com>
Date: Fri, 26 Jun 2026 10:27:20 +0200
X-Gm-Features: AVVi8CdbodJWljEv7LVo1OmnIfF6T0t8gjo0DnhZdffblOGl52mNOWjR5dnjNdo
Message-ID: <CAMjbhoUvOMdiXSh83eQX7ECnLL0BXjcM6W7k60D4nSw_8z64eg@mail.gmail.com>
To: Martin Thomson <mt@lowentropy.net>
Content-Type: multipart/alternative; boundary="0000000000003c8628065523e100"
Message-ID-Hash: GEG34ITGFH2EVN3I6KAM5OZF5QYYECLU
X-Message-ID-Hash: GEG34ITGFH2EVN3I6KAM5OZF5QYYECLU
X-MailFrom: bas@cloudflare.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: tls@ietf.org, draft-ietf-tls-mlkem@ietf.org, tls-chairs <tls-chairs@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] Re: WG Last Call: draft-ietf-tls-mlkem-08 (Ends 2026-07-08)
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/ZacTS0UasMbIMhfNpLAeXltLJuA>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

I'd be happy for the checks to be removed.

On Fri, Jun 26, 2026 at 5:03 AM Martin Thomson <mt@lowentropy.net> wrote:

> On Fri, Jun 26, 2026, at 12:47, David Benjamin wrote:
> >> 2. (Decapsulation key type check) If dk is not a byte array of length
> 768𝑘+96 for the value of
> >> 𝑘 specified by the relevant parameter set, then input checking has
> failed.
> >
> > This is the *length of the private key*. That is (hehe) checking what
> > you generated. It is *not* what you received from the other side.
>
> I see, thanks for the explanation.  I sort of assumed that FIPS 203
> wouldn't be THAT silly.  Bad assumption on my part.
>
> Given that any checking that exists is already implied by an invocation of
> Encaps/Decaps, would it be acceptable to simply remove the explicit pointer
> to the checks?
>
> I've suggested that on the PR:
> https://github.com/tlswg/draft-ietf-tls-mlkem/pull/25/changes#r3478889869
>

v2.46.0 | Report a Bug | By Email | System Status