[TLS] Re: Complaint to ADs and IESG regarding TLS WG chairs falsely claiming WG consensus to issue an RFC for draft-ietf-tls-mldsa

[Tibor Jager <[e-mail]>]

On 01.06.26 21:40, Daniel Apon wrote:
> " This statement might of course be outdated, but I recently asked one of
> the members of the CRYSTALS team whether this is still his view, and the
> response was: "Yes, of course." "
> 
> I also recently asked _TWO_ members of the CRYSTALS team whether they 
> support hybrids in their view, and their joint response, which they 
> wrote in tiki torches -- flaming and placed across the facade of a 
> certain skyscraper located in the Iberian Peninsula, with a massive 
> fireworks show celebrating the lighting of these torches -- was "No, of 
> course not!"
> 
> [[/The above was said facetiously/. In full disclosure, I have not been 
> explicitly told by the CRYSTALS team that they lit fiery torches in the 
> Iberian Peninsula with a massive fireworks show in support of any 
> particular cryptographic viewpoint.]]

Thanks for the "facetious", but still very toxic comment. Instead of 
discussing fireworks, you could also have asked them about their opinion 
on hybrid deployments.

I thought that most people on this list understood how it was meant, but 
obviously not everyone, therefore just for the record:

The earlier discussion had referred to NIST and certain individual 
cryptographers as supporting non-hybrid deployment and suggested that 
many experts are comfortable with pure deployments. In light of this, 
and in the interest of making an informed decision, I think it is a 
relevant contribution to the discussion to point out that the inventors 
of the algorithms themselves are publicly recommending hybrid deployment.

Since the statements on the CRYSTALS website are several years old, I 
wanted to make sure that this is still supported by the person I talked 
to, before I post about this on this list. Please feel free to ignore 
this anecdotal comment, and focus on the main point, if you don't find 
this adequate. Or just ask yourself.

Best regards,
Tibor