IETF Logo Mail Archive

[TLS] Re: Working Group Last Call for Post-quantum Hybrid ECDHE-MLKEM Key Agreement for TLSv1.3

"Bellebaum, Thomas" <thomas.bellebaum@aisec.fraunhofer.de> Tue, 14 October 2025 15:03 UTC

Return-Path: <thomas.bellebaum@aisec.fraunhofer.de>
X-Original-To: tls@mail2.ietf.org
Delivered-To: tls@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 8C5C273457F7 for <tls@mail2.ietf.org>; Tue, 14 Oct 2025 08:03:16 -0700 (PDT)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -4.297
X-Spam-Level:
X-Spam-Status: No, score=-4.297 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H5=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=aisec.fraunhofer.de header.b="Q8fAaDNn"; dkim=pass (1024-bit key) header.d=fraunhofer.onmicrosoft.com header.b="KBGd/aSF"
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lUbToPTz-68K for <tls@mail2.ietf.org>; Tue, 14 Oct 2025 08:03:15 -0700 (PDT)
Received: from mail-edgeMUC221.fraunhofer.de (mail-edgemuc221.fraunhofer.de [192.102.154.221]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 6640473455C4 for <tls@ietf.org>; Tue, 14 Oct 2025 08:02:26 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=aisec.fraunhofer.de; i=@aisec.fraunhofer.de; q=dns/txt; s=emailbd1; t=1760454146; x=1791990146; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=yWSgbJ0UJXs5pmRc/7FyaIWwxfHN8CU5ggOyMEYke4A=; b=Q8fAaDNnEsyAWaFeNVOHynpkO+g3+bcZS+wvZ5vQ1Ft8LHai0KynDnwM 4nMAFpTsaX3da+DIj2NWSPvmI9oxwBnNVyi706gALLMGCOhn6fhGYDCLM AR17pYlvnb6itVYCPFq9F3b4JeUxNRV+xajd1v9TqY8hFIkHGYCRJA6W+ DlyvZSzg2iXeKeEmm4uMPruI8FBzHzLr5eDPOJGuFQgv4h6cvXorPz471 qspQscCIur5bEnnftm8EOwROmRU0ODWVfPC94uralbeTqO7wRvzd1Ea37 ps2hxeXzFF1IP3zJhwQMqAXO5GKF5qM2ZO052sdIIZpRlT/TxGU5RtrLg Q==;
X-CSE-ConnectionGUID: kxovHG9yQs2CxoWiNT8C3A==
X-CSE-MsgGUID: gs0bp7RpTF64AcdGeKv2Xg==
Authentication-Results: mail-edgeMUC221.fraunhofer.de; dkim=pass (signature verified) header.i=@fraunhofer.onmicrosoft.com
X-ThreatScanner-Verdict: Negative
X-IPAS-Result: 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
IronPort-PHdr: A9a23:pIgTxhQkaI+yZkgPDkidO4b4/tpsoj+bAWYlg6HPa5pwe6iut67vI FbYra00ygOSBsODsLkd17CO6+jJYi8p39WoiDg6aptCVhsI2409vjcLJ4qoL3O+B9PRKxIAI cJZSVV+9Gu6O0UGUOz3ZlnVv2HgpWVKQka3OgV6PPn6FZDPhMqrye+y54fTYwJVjzahfL9+N hq7oAvfu8UMnYdvJKk9xgbGr3dWZ+ha2X5jKE6OkRr7+sq/85lv/jhKtfk87cBAS6L6f6o5T bxcEjsrNn0+6dPouxfeUwaB/2MQXGoOnBVHGgTI8h70UIrpviT1quRy1i+aPdbrTb8vQjSt8 71rSB7zhygZMTMy7XzahdZxjKJfpxKhugB/zovJa4ybKPZyYqXQds4cSGFcXMheSjZBD5u8Y YUREecPIPpYoYf+qVsArxSxGQajCfjgyjNUnHL7x7E23/gjHAzAwQcuH8gOsHPRrNjtOqsfT P66zK3MzTrddPxZwyr96I3NfRw5vPqCQ7Jwcc3UyUY1DAPJgEibpIv5PzOV0eQNtnKU7/F6W e20lWEnrwVxrSa0ycg2l4nJg5kYxUrF9SVi3ok6Oce0SEBhYdG+DZtQsSGaN4x4Qsw8WWFko js1xaMftJO9YSMFx4gpyQTFZPybb4iH/AjjVOCJLDp8i39ofK+zigu9/0Wi1+DwS8a53VhIo ydBltTCtnMA2wLN58WDVvZw+lmt1SuN2gzN5e9KLl45mKvVJpMvwbM9kIcYv0fbHiLuhUn7i LGael859uS09ejreKjqq56SOoNulw3yL6sjltShDek5LgQDUW2W9fmg2LL5/ED0RahFguA1n 6TctZ3aK8UWq6+/DgRIyIgs8Qy/AC2j0NkAmHkHK09KdwyfgojyPlHOPOj4DfCig1SwiDtrx +7JPrnmApjVK3jMirbhfbJk505Z1Ao8181S6ZFJBr0cL///QEHxtMbCAR8kNQy0w+HnCNtj2 YMEQ26AH7GWPLvTsV+O+O0vP/GBaJIRtTrjMfQp+uLigWEjlVMAfKSk04EbZG2lEvlpO0mZZ GDjgtYFEWcEpAo+S+nqhUWeUT5TYHayWrgz5iohBI29E4jDQoStj6Ka0yihA51WY3tLBUqNE XfzaYqLR+0AaCyIIsB7jzwEU7ihS4gv1R6wrg/20adoIfTM9i0CqZ3jzMR15/HUlRwq7jN7F d+d3nmCQm1ogmwIQzg23L1irkxzzleMy7J4jOJCGdNP4PNJVxw3OoPZz+NgEdD9RhjNftaXR 1a6TNWqGzYxTsg+w9MWeUZyB82ijgzf3yqtG7IVl7+LC4Yu8qLd2Hj8P8lwx2rc1KY/klYmQ tFANXG8iqFj8AjTApXEnFicl6mwb6QTwDTB9GadwmqSskFUSglwUb/KXXwHfEvZscz55l/eT 7+pEbknLg9BydWZJ6tLdNLpkVtGSO3kONTEbGK9g2GwCg2QybOWcIXqY3kd3DnaCEUcnQ0f5 WyGOhYgBimiuWzTFDluGkjuY0Po6OV+rW+7QVUvwAGLckFtyrW49gQbhfyGUfwTw7QEuCcmq zV6Alm9xcjaBMeeqAZ5YapcYtI94FJf2GzDqwFzI4GuI7h/iV4baQt3pV/h2g1vBItZicYko 2smzBFqKaKWyF5PbyqW04j/NO6fFm6nthqmcPuKglra18ua9KMG8vl+oFLmlA2sH1AptXRqz 9cT1GGTrN2eBgMJBM6pWUIw6hR0o7jAb2824Ib82XhlK6LyszLe1ZQuHuRzjl7qf9RWKqKDQ VOqCcAWB8GybuctnnClaxseN6ZT+bI6ecS8eLHOjK6oNfxhm2f61X5K7IB0zgSH8C9URuvBx Z1DwvyE0E2ATTiq33m7tcWi06pJYTUfFGOizGysOI5WY6RpN85fFWepJsSsgN9zg5rgUXdF8 XaqBkgL04mnYxOPaVz60wBKk0ga9y/00RCkxiB5xml65pGU2zbDlryKnGcvJDsSFyFr2E33K M2vj9lAARb7JwN8jhah7Fb3y+9BqaB2P2TfEiIqNySjIXtrT62wsbSPeYhI7pYpuj9QS+Oyf RaRTbuu6wBPyC7nEmBCwyphMj+ws4j/nxt0hXjYK3B2rXHDftp3ywua79vZFpszljpTajN/j Gv7D0SxbeK099eZnIuRl+2lTGuuW9hyXXvAyoWcuS2noFF7GRDtutGWt5jZHBIh0Cj9hekvc B6NgQb3YoDt2Kn/Cu9hckRyLXPX68dxGdIb8MM6hMQB5kMVjLfNwFg3ijrrNO9Qnv3QfXMse iEbzf7zsCPYhUJsCWOs6rP6Wym0l5gEBZGwN0A89S565vtkAqyP/JJruSpNjACSrTP4ffEln TRC+6A06XQG3cwYm1Mz1Ry8Mq0zOVBXFgLtuSbVss2D94l2XjaAW4iLzVJQp8CuKLuZmFhsC HbEXoZ7Jn5N4ONlbFvB8lvU5JzbRontN84Pujmrvk3stddsAYsVyf8Em3RHG0zSsWMs1OkEg QVRhKGXtYKpNGxf856QI0NgHCKod+VN1Qrv3LoDoPSKxaaPFcAyUiVOXYHvS+qvCi5Xr/n8K gKSRSU1sWzIcVK+NQqW6UMjon7AHrWWHCvNfT8X19x/QhmaKkFFxgwZD302nZ88Qxij39epM Fx46TYY+kPip1NSx/hpORjyXiaXpAqhZjouDpnKBBRM5xxE50DbPNbY6eR2HipC+YamohDLI WueDzk=
X-Talos-CUID: 9a23:/TQI129qaLWvF1HGoMiVv00EHd4FXSzM9WyKCF+/NmdPdO2+EnbFrQ==
X-Talos-MUID: 9a23:DktfZwTyh6PIH3mzRXTjn2loLJhS+5iAVhwkmpkptuqabxx/bmI=
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-AV: E=Sophos;i="6.17,290,1747692000"; d="p7s'346?scan'346,208,346";a="13337189"
Received: from mail-mtabi114.fraunhofer.de ([192.102.163.114]) by mail-edgeMUC221.fraunhofer.de with ESMTP/TLS/TLS_AES_256_GCM_SHA384; 14 Oct 2025 17:02:25 +0200
X-CSE-ConnectionGUID: nCwe4gWQROiwe9VwiqBRWg==
X-CSE-MsgGUID: ArmAKQo7ThC/ZEe9nOXhaQ==
IronPort-SDR: 68ee6600_qhKCaZM13+tKafqDz1lPEt/JG/cr6p/S+676U0AccjctTtq X8PQ2CxKabG0rSivc+ck7a5K8JMJV4IgEBpnH0A==
X-IPAS-Result: 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
IronPort-PHdr: A9a23:fDyKYRL3Iz60CMgRrdmcuDdnWUAX0o4cQyYLv8N0w7sbaL+quo/iN RaCu6YlhwrTUIHS+/9IzPDbt6nwVGBThPTJvCUMapVRUR8Ch8gM2QsmBc+OE0rgK/D2KSc9G ZcKTwp+8nW2OlRSApy7aUfbv3uy6jAfAFD4Mw90Lf7yAYnck4G80OXhnv+bY1Bmnj24M597M BjklhjbtMQdndlHJ70qwxTE51pkKc9Rw39lI07Wowfk65WV3btOthpdoekg8MgSYeDfROEVX bdYBTIpPiUO6cvnuAPqYSCP63AfAQB02hBIVhn61x7wfM/MkBvh6/J44iLdYuPnRJELRiSsz 4E7YyK1hyggJhsUwWLa1uUl38c56Bj0hDZQz8ndW6+fP+FuUIz5fOs0H0BBb+9NXnRCAdyON JEOBfZfEPd79pfmnno+sDqaHAaHKuLB+GIVm0Kt8YwAg8sLITrfxCIaD90qum/u9eWlNJo2Q LmOnZTG6y+fZv50/xDz9bf2Ii17ve2AeY1dK+br9nAGDieai1uO96zHERyZyO0StFeX9tU5Z c+mgUA4ojN+nhGOm/8GldTZoNw68VKV6XhH8povA/2zHR0zcZulCpxWryaAK85sT9g/R309o C8h0e5uUf+TeSELzNEi2xf1SqXeL86G+Bv+UuaWLzpiwn5oK/qzhBe3pFCp0fa0FtK131BDs jdfn5HSu2oM2R3e5onPSvZ08kq7nzfa/w7J4/xCIUc6mLCdLJgkw7UqkYEUv1iFFSjz8Hg=
IronPort-Data: A9a23:EqIOeKl4nXi8uYqntzqmFbXo5gx8I0RdPkR7XQ2eYbSJt1+Wr1Gzt xJMW2iPbv3bM2P0c913YIm1/R5QuZCDzNJgGlM9/3w9FFtH+JHPbTi7wugcHM8ywunrFh8PA xA2M4GYRCwMZiaC4E/ra/659CgUOZigHtLUEPTDNj16WThqQSIgjQMLs+Mii+aEu/Dga++2k Y20+p231GONgWYubzpEsf/b8nuDgdyr0N8mlgxmDRx0lAKG/5UlJMp3Db28KXL+Xr5VEoaSL 87fzKu093/u5BwkDNWoiN7TKiXmlZaLYGBiIlIPM0STqkAqSh4ai87XB9JAAatjsAhlqvgqo Dl7WT5cfi9yVkHEsLx1vxC1iEiSN4UekFPMCSDXXcB+UyQqflO0q8iCAn3aMqUe0fl6XW5xz MY/KS8APy6chvuc+o20H7wEasQLdKEHPasEv214izzJBvZgT4rKXqPK4tFVxnE8i6iiH96HO pFfOGUpNUuRJUQVZT/7C7pm9AusrmX/dDhRsxSfqK4z7mLa0QlZ2bn2PdGTdMaDWMNVmUiVv CTK8gwVBzlAaozPkWDcrhpAgMfmhybSe7sVS4G43blYrVDCwEsjCBQvAA7TTf6RzxTWt8hkA 0Yd4X9y9aM281GnQN30RRD+q3mBlhIZUsBbVew39A/LzbDbiy6ZBWEeTzkUNIQ8ucM2TCBs3 ViMt9/sDCZk9ryYVXzb8a2bxRuuPTM9LGIea2kDVwRt3jX4iIwjiVfPX9x5EaLwhNyzED3rh T6QpTU4h7IdgNRN26jTEU37vg9Ab6PhF2YdzgvNV3+j7gR3aZTjYIqt6FPB6u1HIprfRV6E1 EXoUeDHhAzXJcjVy3zfc/ZHB7yz+feOPRvVhFMlTdFr9C2g9zTnNcpc6S13bhUheMsVWy7bU GmKsyNo5bhXICSLa41zaNmPEMgE9/XrOunkcfH2VeBwRKZNWjWJxwxUXn7I7VvRyBAttYodJ aakdd2dCCdGKKZ/kxuzaeQv8Z4q4SEcnWr8FIzK/zG64L+gf3S6d7Y0AGWSV88X9Kjengfx9 uROBvu01hxwAejMUgjKw6EuLHQhD3syNbbpoeN5K8+BJQtfHV86AdDvwIIRRZBBtI5on8iZ4 kCNf05W80X+jnv5Mje3amhvRbfsfJRnp1Q5NjwIEXfx/FZ7eqepzqMUV6VvTIkd7OY5kMJFF agUSfuPEtFka2rh+Q1ESbLfsYY7VhCgpTzWDhqfeDJlIqJRHV3YyOTFIDnq2jIFVBeslM0Ep Lal6APXbLwDSylmD+fUcPif9Eywj1dMhNNNW1b0HfcLdHXO6IRKLwnDvs0zKewIKjTBwWK+/ CSSChE6u+LMgtEU9P/kuKO6lLqqQtBORhdiI2rm7LiNJXb7+EinytR+S+qmR23We17136SAX t9r6c/AHscJpmsXjLokIY1Xlfo/w/DNu45lyh9VGSSXTlazVZJlDHq0/ehOkaxvnrZ26BeHa meSy9xkIr+mBsLUIGANHSULdu/Z6/MwnwvD3MQLPUzVtSpFzJuaY2pvPj2nqi9UHJ1qOqwLn MYjv8837VSkqxwIa9ypsAFdx16uHFchDZo1h8o/O5D6rDYrxnVpQ43uOgWv7L6hM9xzY1QXe BmKj6/8tpFg70vlcUtrM0PS3OBY1K88iDoTwHAsf122y8f43Nkp1xhs8BMyfARf7jND98lRY mFLFUlEFZ+izgdSpvpofj6TQllaJRij5EbO5UMDlzTZQ2mWR2X9FjABFtjXzn8J0VB3X2Z9x 66Z+lbHQDyxXcDW3wkOY2BHhcHnb+RM8lzlpJj6MeWDR4I3cBj0sJ+IPGAokSbqMek1pU/Ap NRpwtpOVL3GBXYQjZEWW4i+/pYMeS+AP11HEK1A/rtWPGTyewOS+DmpKmKjcPN3ONjPzxOJU cNzFMRtVxiBiSGE9AIfDq9RII1PveUI4eAacejBPl82sLq4rxtovqnP9yP4unQZftV2nes5K aLTbzikEGeAoVd1wkjj9NJlPEi8avk6PDzM5vi/qrg1JshSodNSflEX+ZrqmXesaS9M3Q+e5 SHHbI/ol91S85xmxdbQI/8SFjePCI3BUcqT+1qOqPVIV9TENPnOuy4zqlXKOwd3P6Mba+9ol Iai4cLG40fYgIkYC2zpuYGNN61s1/WAWOB6NsHWLn4DuQCgXMTqwQUI+kHmCJhvve5e2PKaR FqDWJPtTeIWZtZT+iQEIWwWWRMQEL/+YarctDuw5abEQAQU1Qvcasir7zn1ZGVcbTUFIID6F hSygfu1+9REt85ZMXfo3R2970NQezcPgZcbSuA=
IronPort-HdrOrdr: A9a23:ZjwcV6E+TeYOObmnpLqEFseALOsnbusQ8zAXPiFKOH9omq7xra qTdZEguCMc5wx8ZJhNo7+90cu7IE80nKQdieIs1NyZPDUO1lHHEKhSqaP4wzbpXwDj7eZX0K tNd6B/DZnMFlBxj8rgwATQKadF/PC3tIiyhezXi1F3TQ9rbKl87wB2Ti6DC0h3TgFaBZw/fa Dsg/Zvln6JYnQdZoCcHXkKX+/Kut3NmtbcbRYCA3ccmWuzsQ8=
X-Talos-CUID: 9a23:ioxonWqSa5e3CLnju5XsBRLmUcYObXCBw0jpGWi5Fms4dqKUUHWqx6wxxg==
X-Talos-MUID: 9a23:FAO+kQzcjYrtTSGXfFKy7Em5O1GaqI20DWkuqJJZh8mvch5dNmabqwS3S7Zyfw==
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-AV: E=Sophos;i="6.18,214,1751234400"; d="p7s'346?scan'346,208,346";a="26880214"
Received: from exo-hybrid-bi.ads.fraunhofer.de (HELO smtp.exch.fraunhofer.de) ([153.97.179.127]) by mail-mtaBI114.fraunhofer.de with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 14 Oct 2025 17:02:23 +0200
Received: from XCH-HYBRID-04.ads.fraunhofer.de (10.225.9.46) by XCH-HYBRID-04.ads.fraunhofer.de (10.225.9.46) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.20; Tue, 14 Oct 2025 17:02:24 +0200
Received: from FR6P281CU001.outbound.protection.outlook.com (40.93.78.2) by XCH-HYBRID-04.ads.fraunhofer.de (10.225.9.46) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.20 via Frontend Transport; Tue, 14 Oct 2025 17:02:24 +0200
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=fy0BebS9hcf334GgqBuoa+4ji+gcubFOvq7OoFGRKxkYfN+w8mzOa+fxnDqQ8Tn5VOEqxBWmOKyPDytI2VhhAYmGU6Vb/4n8Ue+NUNaQpRBqn/uTBUlEyCCyby0ZLDH1n0LdgEEekPj0MjhRMd25svWBa3JD4juNdNTKVovQLGXFZtfC9n1tCGtRn+r5ptJ7h5Cv5YMyQTtN3y9f2ML3eZ48kEm3emDFq9Da5dvgCu5Rgq0VjeMrRiyQgeVkHcFIRIxiu7OVTkqBzm3V8AtscwCMq+aD7r4uvBIsHw1s0J/yu17c2E4Bf/8H8awmBn3FNQONZWeU5MWsV6B/sGV2vg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=yWSgbJ0UJXs5pmRc/7FyaIWwxfHN8CU5ggOyMEYke4A=; b=jOHuVwGrqZs5vUkEAHVVQYO2zRpZYJJ5A7EtmvX8jRWE8sosztermroN/EiLkxhMYHB0eucEKJdK4F2dyt2xUVbfim3Xd8KXp8oFcZ/RMEUCKzvnX+xrQGF2z4vssVCdojYYDbqCS4Ax7TFP8d3fNmkbi4OioHxkss6oNZWFgOQXQ6Z9tKMhPLdsAZZqMYwWWFnZO+rXb6jBMfMFnNJ0Cs9pU0i3+9sRwbbB1XcX7PYRTuPLVzAcyC8L6I7530ldDIyoJtlStsSzW45J1jlB0LheyfFXM3QDa9T6xo8pnrD/YYSgig6q4gTXdPC+2tEO6FtDYCCAfqNyRU46ZyZDqg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=aisec.fraunhofer.de; dmarc=pass action=none header.from=aisec.fraunhofer.de; dkim=pass header.d=aisec.fraunhofer.de; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fraunhofer.onmicrosoft.com; s=selector2-fraunhofer-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=yWSgbJ0UJXs5pmRc/7FyaIWwxfHN8CU5ggOyMEYke4A=; b=KBGd/aSFbcsxFGLiPF2BhYAta0kk7Z3ribt6EyK1vsQIXuILqgCFiFZ55uU3DIR8GBXSqpFRxgLbsR1X8hULy1S9UfNr4aeJNOfuWV8U2ttdLWE2DRWQAqL7mfv6HJFGdvawoWdqW1XEabFwaZgTAI5PBw5xN6GSj9t5VZtrNHc=
Received: from FR1PPF809320EF6.DEUP281.PROD.OUTLOOK.COM (2603:10a6:d18::f66) by FR5P281MB4798.DEUP281.PROD.OUTLOOK.COM (2603:10a6:d10:14b::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9203.13; Tue, 14 Oct 2025 15:02:23 +0000
Received: from FR1PPF809320EF6.DEUP281.PROD.OUTLOOK.COM ([fe80::8d96:d427:50b0:8ad6]) by FR1PPF809320EF6.DEUP281.PROD.OUTLOOK.COM ([fe80::8d96:d427:50b0:8ad6%3]) with mapi id 15.20.9203.009; Tue, 14 Oct 2025 15:02:22 +0000
From: "Bellebaum, Thomas" <thomas.bellebaum@aisec.fraunhofer.de>
To: "bas=40cloudflare.com@dmarc.ietf.org" <bas=40cloudflare.com@dmarc.ietf.org>, "hkario=40redhat.com@dmarc.ietf.org" <hkario=40redhat.com@dmarc.ietf.org>
Thread-Topic: [TLS] Re: Working Group Last Call for Post-quantum Hybrid ECDHE-MLKEM Key Agreement for TLSv1.3
Thread-Index: AQHcN5oQR8Ri2/s1a0eTaDcuSgpvarS2336AgArmU4CAAAIPgA==
Date: Tue, 14 Oct 2025 15:02:22 +0000
Message-ID: <dfd9e11c8d84e848734e3371b9ed8929aaa4b4aa.camel@aisec.fraunhofer.de>
References: <CAOgPGoA+c8kXDizwsvFG5tLz9+Kxk0HqiN1skKp5jMvvpxeu0Q@mail.gmail.com> <CABcZeBO+3u=1=ueNscq+O74Qv=7PC5NedsGsugp=GZjVqtODoQ@mail.gmail.com> <CAMjbhoVcxTfppSrkC27F8uf9hKvqTDBsG_-dzGtWbjia5YhmXw@mail.gmail.com> <0d4e2750-2d4b-41e2-b02e-df66b68fe7f2@redhat.com>
In-Reply-To: <0d4e2750-2d4b-41e2-b02e-df66b68fe7f2@redhat.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: FR1PPF809320EF6:EE_|FR5P281MB4798:EE_
x-ms-office365-filtering-correlation-id: 7f1c25b2-1f73-48ef-578e-08de0b32adfc
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;ARA:13230040|1800799024|376014|366016|4053099003|38070700021;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:FR1PPF809320EF6.DEUP281.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(376014)(366016)(4053099003)(38070700021);DIR:OUT;SFP:1101;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: gltHS82tZFmU7BjCbvcZSFBDZ+Xr2g2bLKC7Pv3mrV+yJU0ZSaBw1Cu6n5zIXNhaPbyDBAQ4uT007nwKxTwx1QImZDSSXfstzyir+MbvtwnpBEwQWQ5bpTD+jiwY+/uWJfIXcUQ/5t5O2BvS0axXSOL7vupdhoPB3FIdQrTBdj3eWQV8xjPoO/UJy7SW9hQnJkJAQMgAtbM7gQXndEye7EMQHr3F4kapQOa6PuFqv7CQinp3b9ogdRK+oeqVGmGfeH0LzHJe8KMk0zFgNK5H1rHrPX+hyT/OSDMC0vgu3zCaGJtUqMIO8A7kYlCCXjD4VnF7VAg4Kr4U755Ys+zkGs717Vz/koxORwt31s5MeV0awq93VaM16DQFXINJ4Jp6q1Xnrfgc7tePZYnlyydDto08lTfbQdeH7iOqck9yM5NtwO9hYEw7UGIaIyjD6tnwEBtZVJkKkbTbANLYbs4LlP5TwxblYpxBr5bJtsSeZZcy/wKZZ++1H6VINzT+ariMrVAt5ItX5OpARpGr9xwp8Fd53pkMmxC461Ad/mZtrfoLpJpQwCdXrPZhwz13T+Yefc0qo/4s3zY8GCfJbVHL5RtPLjh/I2OkyQn5NbiV6muIsd1YOyYLpgVPdIrkb5o466+HbfwZPwm9tNn1GctxhvbANml+pCPhU3J0oBMjquMG0ZAdJ0poXgcsz5IXYDUAVkNvOvrG5I0Mj0h22pm2RmSJKJMuJ6PseOZ5wVzGJYvvp4gsMth4711HyDX18EptxPb03dotRRmm8yybI0uHCLs2Nxp5oKfp5qJmzJOfrPp9irPBgvKayqaytx6Go3naGW4qY8bTQZFYst4png+xdgVdlaDAlmgiVSxqZknZc8ssatYh/pA3NZlPdJuKztNXuYneRLVIlyUtMA0CBetcRRFAJvHfgdLLIVfV8jRfRqby7VWLfKcNA8zr3K+HUrIhDyapUbKzcXLB6v0zO5t4ux43f/2ZK8dP1kkAju16aPbqGYrhzCNAnydqM4EZfUPp8tU0VVajKppWI4j+SERzgq3hBnDnIaNuNzqBJ0S4i/kkNGDwPZx3MPHbrdb25Eohev1sxvf6+1EegEX/F8m2wOLXDFNJ+uo+ZFC8Xxmfde049gZncNu7cK2ZlDIo+w8AKHwalMcw5n8Q7BneVIyKPpgoD1Rx+6zRI0FuZxncw0VRnWdbxToFkCmdWuh7CwBCPnTOQd+OIpQrwoMKPFehZpA95E+XX0cznunRcD7jRO8KfG+dCsF4STFcahmUxVeWI0wyKwsp+w29smWo5bvtGSg7p6mP2o10O8aU4wX+DnCPJS9q5NvPslX3ChD3ASjpctKL9xVIIffhR4+O6nztT01bG5BtU+3qaDx1RtxgkbMRPD+ybiwFAEszyi8XO5OVVqX09cOhm622rPCxj9bMe66zx8D6HtYAt2UJnY6Rt2gD0FZjh/rTGzEtP8RuRjFAsbDu5YrmsmhsrdxGRsnIf+ExFUZnlI1w8M4blJtDnrTT6B1ndioyRwfbxMQeSgdMjRJ0JuXb4MvCUet+lr+DYSM8L6GxTImaqIS8WPxbn7mgjy/es65OkP44GlDtq3HkoSI6uZaiyxcMWE6riXY1NoiHvxSHKtM8SbOdMc4dXpE=
Content-Type: multipart/signed; micalg="sha-256"; protocol="application/pkcs7-signature"; boundary="=-3/1HySMvC6nZMWf7cq+o"
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: FR1PPF809320EF6.DEUP281.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-Network-Message-Id: 7f1c25b2-1f73-48ef-578e-08de0b32adfc
X-MS-Exchange-CrossTenant-originalarrivaltime: 14 Oct 2025 15:02:22.7822 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: f930300c-c97d-4019-be03-add650a171c4
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: JkFYnheZs5cd5lNmxunMnurJvjqUhUYTfPFBjCGi6zORKjRGoUxWaBjDohso36w3enlnEMge5KYm8AImSnnqWLkyiUJNxvdJ9mT15XHmNX+LbonW/2wNGSl6jmeFLZGq
X-MS-Exchange-Transport-CrossTenantHeadersStamped: FR5P281MB4798
X-OriginatorOrg: aisec.fraunhofer.de
Message-ID-Hash: 6T4UWDUOLG4PNFO4NQP4RLTIXZAIDS7S
X-Message-ID-Hash: 6T4UWDUOLG4PNFO4NQP4RLTIXZAIDS7S
X-MailFrom: thomas.bellebaum@aisec.fraunhofer.de
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: "tls@ietf.org" <tls@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] Re: Working Group Last Call for Post-quantum Hybrid ECDHE-MLKEM Key Agreement for TLSv1.3
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/bVoMCziTGMNaXKD3RDB_MaQBMFs>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

> If anything, that's a symptom of the web browser monoculture and the  
> fact that people interested in conformance prefer deploying RFCs, not I-Ds

Two counterarguments:

1. Many libraries rely on OpenSSL, and openssl s_client google.com:443 will happily negotiate X25519MLKEM768 for me. I believe this could have significant impact.

2. There is no RFC currectly, and neither is there a *guarantee* that this I-D is stable.

-- TBB

===== IETF Stuff =====

This document may not be modified, and derivative works of it may not be  
created, except to format it for publication as an RFC or to translate it into  
languages other than English.

v2.35.0 | Report a Bug | By Email | System Status