[TLS] Re: New Liaison Statement, "Liaison communication to IETF regarding draft-ietf-tls-mlkem"

Stephen Farrell <stephen.farrell@cs.tcd.ie> Fri, 03 April 2026 19:14 UTC

Return-Path: <stephen.farrell@cs.tcd.ie>
X-Original-To: tls@mail2.ietf.org
Delivered-To: tls@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 73657D633EFA for <tls@mail2.ietf.org>; Fri, 3 Apr 2026 12:14:31 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1775243671; bh=slwMM+lXgXBx/fslxb6xYLpvCn12XgzGpHkHXyQXweM=; h=Date:Subject:To:Cc:References:From:In-Reply-To; b=Qz8FHVx9/rUhsEq/AaJh5kzCRtS0uvlnL9XziIOAviCKFYUupevo5Gj+Ijx5cpMRi mu2gxqz9zcoxGRXnBJEQh+nZRfdFZ/J+Xx45CcrpB3iScQ8DmeIFLth1eb8wEunamQ Qs2GemMjvaVP0BoDmjDfW46Va31dIME+CZDDU3bE=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level:
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=0.001, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=cs.tcd.ie
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ADVVwkU42tc2 for <tls@mail2.ietf.org>; Fri, 3 Apr 2026 12:14:30 -0700 (PDT)
Received: from AM0PR83CU005.outbound.protection.outlook.com (mail-westeuropeazon11020090.outbound.protection.outlook.com [52.101.69.90]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 2DCACD633E98 for <tls@ietf.org>; Fri, 3 Apr 2026 12:14:06 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=HLnIjDADUUCQ02W6HrWiERKxL1N7GeZdsRpj+HeYg1eZpnB3yi3OkTNZljEGcoPYwgRs8p237wLz3dNR1CndJD2JZASOA3nSql1VDNEt1NlUhiZWYxo8ST9Ho7JTxgIZj1y1wbzeFZqzjGWY1HaSmyoBhcVBxSCYPP3aao556pIAmbMX8x+j5Ix5lufnQDctkbM+y0iaTUKwVEmq5uEib7BR8BMrBt7kJRuaIYWMa6QXobV67/RmFiaOy28UV3efu2hvX9S8I8FN8GQ5qbno4qq1II5gr5OyrLf6vsR6p1rCS0I+oVLh7DtWubw9YRW+BKfLk7PAcAJT8/XRsSD5Ng==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=slwMM+lXgXBx/fslxb6xYLpvCn12XgzGpHkHXyQXweM=; b=w1mOTKvcCGIKbio8cc6I/HXPM7M30PvaBprMcbgnxeouAg3a3SfVrVrTsmc2smwpjL2gY1FyDUhWZ5MlzIxU2CPugW1J/5loijl5msaRVBkRKBkBdgCev0AQ7wk5tWdSHGxlenniEQur5Ee/gUnkBS7+BD0WvKPFiADdPjp8sidh2ja2lksABVMW74RI+YwTr9XBS3XVv4kxNOhveENB1KLUgnqfJ8xSON3cflUgVVAAgu2B8FLcnApZGAhxOCKu4qXX1L8X4G6X/THs9bv3gGGin7SiMIkrtQ+2HgfQNwEwIyAUbWWQ3N6n9qK5CkLtyGcfTf3y9OWxkKlWm0vi/A==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cs.tcd.ie; dmarc=pass action=none header.from=cs.tcd.ie; dkim=pass header.d=cs.tcd.ie; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cs.tcd.ie; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=slwMM+lXgXBx/fslxb6xYLpvCn12XgzGpHkHXyQXweM=; b=ANZ/gXym7VL++geAGcJTd4qTKPizNFHVl4zbxb8AEHhLegm1mHgJ9l+ESwwcORWczXQT348XuMRuErRvuoF8FA39G00AYoVklnn3bm+/5e3kWSqSrYCqi9IW6AeEB8IcQ35HMCnixoY+Xtt7C8ERyU6GpcnTK4c+fKmS2n0H244g28G9PqF6Q0oYsJwgWTTuBxJORnZL7w04SV2jYyV915t3dvmM/nmdkbOwzXOiPvbWNhgP7zZ2UbzIYOY0IpED7b3LQLiGuPd4o0My5trloqaN0DFXW+XoO137KPWtQhMcN9TGX9QT6dk7MX7nDZi+DrMwp91+9ltMD9RUTZ5T0A==
Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=cs.tcd.ie;
Received: from PA3PR02MB11163.eurprd02.prod.outlook.com (2603:10a6:102:4b4::19) by VI1PR02MB5823.eurprd02.prod.outlook.com (2603:10a6:803:136::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9769.17; Fri, 3 Apr 2026 19:13:53 +0000
Received: from PA3PR02MB11163.eurprd02.prod.outlook.com ([fe80::71cc:8d7f:5cb5:3772]) by PA3PR02MB11163.eurprd02.prod.outlook.com ([fe80::71cc:8d7f:5cb5:3772%5]) with mapi id 15.20.9769.018; Fri, 3 Apr 2026 19:13:52 +0000
Message-ID: <697d6134-0083-4933-8531-9be49118be7d@cs.tcd.ie>
Date: Fri, 03 Apr 2026 20:13:51 +0100
User-Agent: Mozilla Thunderbird
To: David Benjamin <davidben@chromium.org>
References: <177515578056.110728.11479383677020007340@dt-datatracker-9dc8fdd9f-qcdj9> <2efcd86e-c248-4cce-a601-b65e3ee4b5ae@tu-dresden.de> <5E23938A-6AAC-44A8-A515-C8B031203A16@vigilsec.com> <CAL02cgRS0VXm9ZyXZd=-ZOi-VCvTbvk05rjbTCm6_ksgu-RBKg@mail.gmail.com> <ac7oEfBv6zLisnIi@ubby> <CAL02cgRyekc5oz5FaGRcLvxcxNrUSYKH0pXxxxATke_SLZ1aLw@mail.gmail.com> <CAF8qwaBcotZqOnY2qJ6d0fRoa=5v0sZTOSWqeqkou+bLJcy9LA@mail.gmail.com> <CABcZeBPr+WeivTWpSCVC4f95fRuSiOytvvBPB_6r+af9Didhgw@mail.gmail.com> <CEB84168-5998-432A-9D62-36E28B9CDFA5@vigilsec.com> <CABcZeBM-eoqh+kJ7H6SiwC9p4tKAt+YiQhzetJZJmPNpXc+5OA@mail.gmail.com> <CAF8qwaALDXR6d=jLD46wXmKHDjyj=OdJ1X3a1AgxF+ByQceeMg@mail.gmail.com>
Content-Language: en-US
From: Stephen Farrell <stephen.farrell@cs.tcd.ie>
Autocrypt: addr=stephen.farrell@cs.tcd.ie; keydata= xjMEY9GzphYJKwYBBAHaRw8BAQdAo6JvjmSbxHdQWPZdvciQYsHhM1NxQBU398Mmimoy4p7N M1N0ZXBoZW4gRmFycmVsbCAoMjU1MTkpIDxzdGVwaGVuLmZhcnJlbGxAY3MudGNkLmllPsKQ BBMWCAA4FiEEMG54R8tZDyZFrDOn5Njp+ZeoM90FAmPRs6YCGwMFCwkIBwIGFQoJCAsCBBYC AwECHgECF4AACgkQ5Njp+ZeoM93bogEA25ElRyX0wwg+kGEN1AoL60MoZfvQZ/VtmXY6IC5j +csBAIBpkL5ySuzJK2zLNZn9qQGht8IaUcA7cvDcLvS2uHUEzjgEY9GzphIKKwYBBAGXVQEF AQEHQILCPWOwW36e8D3pY8GmvvtItIT+A5uV80ist+WokVsQAwEIB8J4BBgWCAAgFiEEMG54 R8tZDyZFrDOn5Njp+ZeoM90FAmPRs6YCGwwACgkQ5Njp+ZeoM92bcAEA8R+8cpqRUIS+SoAN iO05xE6O/wEx8/e88BqzAYki3SoBAOQdwiPX+MQrAxkWD8xxOsdMOAtxYKpkD1n8aPJUw6QJ
In-Reply-To: <CAF8qwaALDXR6d=jLD46wXmKHDjyj=OdJ1X3a1AgxF+ByQceeMg@mail.gmail.com>
Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="------------U8E8iZRvelE05UbJLdIsbLJe"
X-ClientProxiedBy: DB3PR06CA0016.eurprd06.prod.outlook.com (2603:10a6:8:1::29) To PA3PR02MB11163.eurprd02.prod.outlook.com (2603:10a6:102:4b4::19)
MIME-Version: 1.0
X-MS-Exchange-MessageSentRepresentingType: 1
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: PA3PR02MB11163:EE_|VI1PR02MB5823:EE_
X-MS-Office365-Filtering-Correlation-Id: 75e29d77-c665-4ba5-d132-08de91b524b8
X-MS-Exchange-SharedMailbox-RoutingAgent-Processed: True
X-TCD-Routed-via-EOP: Routed via EOP
X-TCD-ROUTED: Passed-Transport-Routing-Rules
X-MS-Exchange-SenderADCheck: 1
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam: BCL:0;ARA:13230040|376014|1800799024|19092799006|10070799003|786006|366016|22082099003|56012099003|18002099003;
X-Microsoft-Antispam-Message-Info: gy4hyxqSn0RCjwDYpcXXpE9/EHTfr6gH444IVL00SsRkuGjSxKnwxE7Z8CqSZYpFcQZggtdmlwV+vkKQ7Ugeq5FxQpgh0vJ85G/bC+hQAdyNvQo0cgB1GbSUSpBV+wDTeqkgHD/tsMRCB3rEOuqp5TgAN2GzST4SmuDLcRrSDb65lBBQZ9AGy2PCIflZ2U+g5EnX2HBqiWESYMt5H8qsjj/8sDRJ5wc2Em42owVOLqD1pPctHjnkj5IE1DqrkGMbG6sPpArop5AT/6T308qWvwLBbFfMtLGzswpxpS+rAzSLYlsaVFuWyBblWTI2PdJ1axrSXqXN5UlH+un7brdxvGL8TnMKWzC0ca9HAgkG+s/bbf89CLtfv6KOr1teqHKH3eJQfZZCXHZK2xAtxutOgKhlDDnipe/crm4ok/mWob8Io8GzVOpd4+uQhT5PX2EihaukztByY3K1+Xu9+xwHoKJpu0rOd8KbTO7yxIurc/FBeL/Ps2E5og8NIEgL+iG+dBWjmThxJVKf4FjmCSpUL7YOofLdFi+n/yEqQZ+Sy7Ycdp+Op2ZwcgObOXMM6eOS6BONpH1/FO/BFTi1JzwPLB7zpOoQYbUIFN/bIyaMau0XrpjjrzM9zGNMs+gP2R7iV/Di18AtExxw0y/fYBDO1zntqsmkOyTfNqXPAUaOebpi4bF4GIDX8P+b1h8OYRzG5cUM04xJO2gqu6lzqeMjuZEZisYCVrxpdFPT0kF2/NA=
X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:PA3PR02MB11163.eurprd02.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(376014)(1800799024)(19092799006)(10070799003)(786006)(366016)(22082099003)(56012099003)(18002099003);DIR:OUT;SFP:1102;
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 2
X-MS-Exchange-AntiSpam-MessageData-0: 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
X-MS-Exchange-AntiSpam-MessageData-1: RmMXWdv50WHDIA==
X-OriginatorOrg: cs.tcd.ie
X-MS-Exchange-CrossTenant-Network-Message-Id: 75e29d77-c665-4ba5-d132-08de91b524b8
X-MS-Exchange-CrossTenant-AuthSource: PA3PR02MB11163.eurprd02.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 03 Apr 2026 19:13:52.8645 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: d595be8d-b306-45f4-8064-9e5b82fbe52b
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: sP1mtIjG+6gIvkRy1e1YoQrSzFh6cD10xvcKaTPuXj2P7dnMC0ISvCnOW+KTjpEv
X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR02MB5823
Message-ID-Hash: HXZV6DOBWKNCKW5OTRDIZIQ4XFINNCJO
X-Message-ID-Hash: HXZV6DOBWKNCKW5OTRDIZIQ4XFINNCJO
X-MailFrom: stephen.farrell@cs.tcd.ie
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: Transport Layer Security Discussion List <tls@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] Re: New Liaison Statement, "Liaison communication to IETF regarding draft-ietf-tls-mlkem"
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/e_X0zmeMC8eUtyv3SNb42wxQF38>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

Hiya,

On 03/04/2026 19:53, David Benjamin wrote:
> 
> I do not think this subjective risk management question of hybrids is
> worthy of all of this drama and we should just accept and consider this
> feedback.

For me, and some others, the question is worthy of the drama, based
on concerns that some issues might arise with newer algs or their
implementations. Seems like a matter of safety really, until one is
convinced of the robustness of pure PQ algs and code. You may well be,
but I'm not yet.

Cheers,
S.

PS: #include <draft-farrell-tls-pqc-is-the-better-answer> :-)