IETF Logo Mail Archive

[TLS] Re: Deployability of DTLS 1.3, HRR, and MLKEM512X25519

Martin Thomson <mt@lowentropy.net> Tue, 01 September 2026 09:08 UTC

Return-Path: <mt@lowentropy.net>
X-Original-To: tls@mail2.ietf.org
Delivered-To: tls@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id AF6A5132E8CAA for <tls@mail2.ietf.org>; Tue, 1 Sep 2026 02:08:15 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1788253695; bh=gpm/jmJs9LT7o5s4QJmVxE0u7Ozxhv1De+9UvqFWWNg=; h=Date:From:To:In-Reply-To:References:Subject; b=W0QH6VLoMf9fPq3geHN53sOLDOsAbF+mirdmoYYsPkae2WuuWGuEGdPj1huBLWKA6 DZq21jLQ4Vvanexxe4XJu3F3f5aw1beAcBru3xfXVK0g32vq5ytiayJgYxUF2gPCNq IQYcH6JdiSZPkTp/RUa0rGedslLWDNbtQRUTLTWs=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.799
X-Spam-Level:
X-Spam-Status: No, score=-2.799 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=lowentropy.net header.b="tim3wL9O"; dkim=pass (2048-bit key) header.d=messagingengine.com header.b="fhN6+iYy"
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ekPThLJrhqCG for <tls@mail2.ietf.org>; Tue, 1 Sep 2026 02:08:15 -0700 (PDT)
Received: from fout-a3-smtp.messagingengine.com (fout-a3-smtp.messagingengine.com [103.168.172.146]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 3A0B8132E8CA5 for <tls@ietf.org>; Tue, 1 Sep 2026 02:08:15 -0700 (PDT)
Received: from phl-compute-04.internal (phl-compute-04.internal [10.202.2.44]) by mailfout.phl.internal (Postfix) with ESMTP id 3637AEC0022; Tue, 1 Sep 2026 05:08:09 -0400 (EDT)
Received: from phl-imap-15 ([10.202.2.104]) by phl-compute-04.internal (MEProxy); Tue, 01 Sep 2026 05:08:09 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lowentropy.net; h=cc:content-transfer-encoding:content-type:content-type:date :date:from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:subject:subject:to:to; s=fm1; t=1788253689; x=1788340089; bh=jA9Q8HYF3Z7iuZeRQmH6czjwwlt/8w934w7nHQpc45A=; b= tim3wL9OOQQWC0QhBBpwlsWf5jl99GXwzQ+kpAST2pAHm84EEX9jlXxnF1yKpeR2 U4zr/JuiR3fy5reBfC98F3ggIfH5dRZj0A6KS6GcLhwNZ14D79CRPBLSCClngVAS HaZGbC35+gw6xsvfNqQ9jmDGsBgHbvWvYwNHizk9gzy0aChvzmXYO5tRNccBR/LX 3SeSG34yw7IJP7WYwCGmFF8M0zKQDE0suewAfaXnaowpKz6+Cxz7pjsWux8zD3mw buAlQT1aAfHfVHsFeqCRus2F1aWYs20cmfaEVUD5xt7tyE6bRRdyfyzNVKYKnjAa cgrdVQxAjccpezo9xxjiFw==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm3; t=1788253689; x=1788340089; bh=j A9Q8HYF3Z7iuZeRQmH6czjwwlt/8w934w7nHQpc45A=; b=fhN6+iYyqTKkg/Mhr rgXdz22AU/j1q32kZWbvSwvrt8XwC3ECfPsBVFV1RRPHkXkHp7LDsKJK+t4KLJhd ElpHlOjdmXpv5nc+1JAOAQsXcc7au8kvn8fciw8a+9nQTPzG2E1UPJAfLyRgHw0s bwf11HnnY97H1oo0pGjBsq+7cgBK9n2Y8SzkgoXHZNSgq88GpNd9GKNcVUs85ZSr 6pyHpBKamI7gUb1FJXn9VqkrfpH8k1YuWsJEgCzZKwhFZ2uOzaHKNamyrScIKh96 l+4Dyl4AHN4pfydjBfuCmjCR+E60Ah8bPL2CzS2+wTca8N1GtHJL8nW6x2DHbPGL q+8eA==
X-ME-Sender: <xms:-ZWWauPh3O-AIku-Sx3gUfNO2zMJBOq5k0GExHT_IdHePBQuAnbiaA> <xme:-ZWWanzz0IYaFhVYiipGgtZx3huUh-uYIU1Cafm1esN-hN5sAvgF2O6j6TtxqXaoe Q3Rew3vQwCLSKM_Xk-ct0F3dWW9IJ-qEnSB5k5Bbmjczavv9_ZznzCV>
X-ME-Proxy-Cause: dmFkZTGqVV4rg7z07fLrI1Zk75a1q7zUM/lL2MGe1+GOIvsJ54JZwej1/eM3zxZYTJmFqX /iRCFYg/Rj1kvmC8C5OxH4u7PK0XsNlFUk8zEkUvsBSYrBjtUGqz8MfKYs3gemjPbbi1rj MliJvtgQbToAO9V1GIfgUTXDbq3CH2lnJNPXdUfEcB+QM4EP9rxEL/srp4Cj4CxMkIK7Yl f0dEKYMnQhDXd3P7br7lpak5xo4zmFcAuRPeci68DGieDwG68DGuVbHSXRmRaasgFIg0f9 uHExqLd/sbBCQOihpNhLTdW9BhSf5osa/6uioyAYmRfLktgvN4RPFicyogNejGJyidKxTS 5GeSOqHGwGaxA3v1YSnyClY3i8JuWm41MFIM74X4owvud52BKkWCb3NkDt5b58cs+qjv0u gAY+k5N0JhMoXAygBeeGi/5F8ig2GPJPmXHNJXuUqtGPOx5qFKc6UIRfXNVHkLlZr+7ILW uH0C8OztnupqtAaVTK5pJWvU0LFfhe+rT0r4HpP/jaygpzvIwE/9+qUBWF1ucTIk73ewv7 F/4/XU7nOBgB33Quvl+LuhAAz8KURHAUZejR3dRqYQ3aSB5ZSq1OpA2lF7DiUMrFEjNrU6 0Jk2Tp1JhA/kZurT57U8OkzXBGFwwBwB3pixmszlgZ7lUf8ZyqTqAKDyefjw
X-ME-Proxy: <xmx:-ZWWaoP5khLI2g8PU_KwcunI0bIlqGhS_Q4s2wKKxJuk_Qg73qeYDA> <xmx:-ZWWak-OF2zg4Yg5RB95J7n_vqTQnqtP9Usj8Bm8Izdc-Feveuj98g> <xmx:-ZWWas6H_xbwd5UsS4v2SuDR3bIosOBuR83N9AAGTAV2xhp82WVpHA> <xmx:-ZWWar0vklzQUeEYKIxVjbcRSoWjxNOAcN3l6L-LJQkRhqaVOtmmUw> <xmx:-ZWWaqu4nhhkifAIO_txAOZwRhTYniueNKBbsSxpHmzITns95_48XSx2>
Feedback-ID: ic129442d:Fastmail
Received: by mailuser.phl.internal (Postfix, from userid 501) id 0468D7811F0; Tue, 1 Sep 2026 05:08:09 -0400 (EDT)
X-Mailer: MessagingEngine.com Webmail Interface
MIME-Version: 1.0
X-ThreadId: ADFq9VOcEr4V
Date: Tue, 01 Sep 2026 11:07:46 +0200
From: Martin Thomson <mt@lowentropy.net>
To: John Mattsson <john.mattsson@ericsson.com>, "tls@ietf.org" <tls@ietf.org>
Message-Id: <0648bd18-97c2-4111-a789-aaac641bdc2e@app.fastmail.com>
In-Reply-To: <AS4PR07MB882529CB2DB3C3D31C56106289A82@AS4PR07MB8825.eurprd07.prod.outlook.com>
References: <AS4PR07MB882587C4F9F2AE3F9447B25189A92@AS4PR07MB8825.eurprd07.prod.outlook.com> <11c93a79-05e5-4323-b7a4-8a521f4d2f4f@app.fastmail.com> <AS4PR07MB882529CB2DB3C3D31C56106289A82@AS4PR07MB8825.eurprd07.prod.outlook.com>
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
Message-ID-Hash: T6FXCESPM7EJIH3NABPDUR37RIMN4V4U
X-Message-ID-Hash: T6FXCESPM7EJIH3NABPDUR37RIMN4V4U
X-MailFrom: mt@lowentropy.net
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; header-match-tls.ietf.org-1; header-match-tls.ietf.org-2; header-match-tls.ietf.org-3; header-match-tls.ietf.org-4; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] Re: Deployability of DTLS 1.3, HRR, and MLKEM512X25519
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/_oVcxu0Ath80Ko-XL9m77PTOjPI>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

On Tue, Sep 1, 2026, at 09:00, John Mattsson wrote:
> [...] Based on your comments, I assume 
> BoringSSL and NSS interoperate.

We've done more testing with wolfSSL than BoringSSL.  I don't have the specifics though.  I'll put you in touch with people who know more than I do.

v2.46.0 | Report a Bug | By Email | System Status