IETF Logo Mail Archive

[TLS] Re: Working Group Last Call for Use of ML-DSA in TLS 1.3

"Scott Fluhrer (sfluhrer)" <sfluhrer@cisco.com> Mon, 13 April 2026 07:30 UTC

Return-Path: <sfluhrer@cisco.com>
X-Original-To: tls@mail2.ietf.org
Delivered-To: tls@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id E33CBDB0B18A for <tls@mail2.ietf.org>; Mon, 13 Apr 2026 00:30:02 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1776065402; bh=3xvXfqTwBYfaE0K7Ad4CFJWzNZmMCz83WVXrXrGIhUg=; h=From:To:Subject:Date:References:In-Reply-To; b=ShK6gOq2kKj8HhzNg6i3+1YDcqA39DO5fZmnp4M8seQ7iF2HY0kSmLtT1rE7SQyIq iL8c6jS5P+Ors96vyRZgD11vEqzAlBohPaRtfgfVWECGq+c8Wp1hOiBja87WIi2+ph 69H1VnNWYwW2+emVS7HrPanNhpXFELH/ZraleheQ=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -11.885
X-Spam-Level:
X-Spam-Status: No, score=-11.885 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_NONE=0.001, T_SPF_HELO_PERMERROR=0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=cisco.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BvHv7-LlcLh4 for <tls@mail2.ietf.org>; Mon, 13 Apr 2026 00:30:02 -0700 (PDT)
Received: from rcdn-iport-5.cisco.com (rcdn-iport-5.cisco.com [173.37.86.76]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id CBB49DB0B0C9 for <tls@ietf.org>; Mon, 13 Apr 2026 00:29:38 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.com; i=@cisco.com; l=5053; q=dns/txt; s=iport01; t=1776065378; x=1777274978; h=from:to:subject:date:message-id:references:in-reply-to: mime-version; bh=1zDMRECLB3tGAWxJg23afoPVfIi77psCPPX9QOQ8AiQ=; b=ZJM7ymsJ5nnsaxv4OAZpSLjSBUIG0/ba0b+NDM/x3Tarc8gyN8CQpfuv KpHVRqzDIOd6ASBAFXFu/p0VtrBcLfuM/OXuqPjS+1VzRFVn2doXJw7D/ /dgtpXEsh4+veTG7Ua61xy9GITQQ/K08aB4kQf6diObowAD/m0gESczJ/ tGZu3fHlrI+RebNcDXO4WsAgaQvxHGQlPRwV27iutfOLKeUiNy6UFAL5A 5x+M7R1V+lsgIb+Sz9omcUKDod+SNV5B0pUz7tzt6B6pUX3/1B5c9rbD+ MWFZUPr28ijSK7EijgLUV0GMghS8Qm6sik9yxz6OR3/PSH+J0At9izJOf g==;
X-CSE-ConnectionGUID: Ng9VuM9HTQSpc6a3MOtlDw==
X-CSE-MsgGUID: KgwPyyI5SySxs28Ih/3tuA==
X-IPAS-Result: A0DXBACgmtxp/4wQJK1agS6BK4E9MVOBBYEjSYgjA4UshliCJJdDhQ+DRw8BAQEPUQQBAYUHAo0qAiY3Bg4BAgQBAQEBAwIDAQEBAQEBAQEBAQELAQEFAQEBAgEHBYEOE4ZchloBAQEBAxILbAIBCAQNBAEBLzEdCAIEARIIGoR+FkADAQKlZQGBPQKKKniBNIEB4C6BTYU+gxgBASqBNYJdgSEYATuEPycbgUlEgRVCgjcxPoQrARmEE4IvBIMcFB2CdAaMQFJySzMsAVUTFwsHBYEjEDMDIAovLQIUDSIPGgUtHXAMJxIPHRcVH1gbBwUSISpug0V2Ll4aDiICKBEDWUo+C1IFgXYCbDGBAgMLbT03Bg4bAwSBNQWKBAdVI4I2aYMQpHehegqEHKIOF6oEZ5kGIqMdhVcCBAIEBQIQAQEGgX4mgVlwFYMiUhkP0mN4PQIHAgcNAwuRaoF7AQE
IronPort-PHdr: A9a23:TmFSkh1xAx0Ss9N6smDPmlBlVkEcU/3cJAUZ7N8gk71RN//l9JX5N 0uZ7vJo3xfFXoTevupNkPGe87vhVmoJ/YubvTgcfYZNWR4IhYRenwEpDMOfT0yuBPXrdCc9W s9FUTdY
IronPort-Data: A9a23:9mzk16iv4mOYh3UrTza0YyWWX161JBEKZh0ujC45NGQN5FlHY01je htvWmjUOveLM2ekKNtybt/i8h4C65DdzddlHlFqpC8zH39jpJueD7x1DKtf0wB+jyHnZBg6h ynLQoCYdKjYdleF+FH1dOOn9SUgvU2xbuKUIPbePSxsThNTRi4kiBZy88Y0mYcAbeKRW2thg vus5ZeEULOZ82QsaDxMt/vZ8EkHUMna4Vv0gHRvPZing3eG/5UlJMp3Db28KXL+Xr5VEoaSL 87fzKu093/u5BwkDNWoiN7TKiXmlZaLYGBiIlIPM0STqkAqSh4ai87XB9JAAatjsAhlqvgqo Dl7WTNcfi9yVkHEsLx1vxC1iEiSN4UekFPMCSDXXcB+UyQqflO0q8iCAn3aMqU+9bdJHEQf1 cAhEygGMBnYosWqxJ6kH7wEasQLdKEHPasWvnVmiDWcBvE8TNWbGOPB5MRT23E7gcUm8fT2P pVCL2ExKk2eJUQTYj/7C7pm9AusrmLxdyBYsl+PjaE2+GPUigd21dABNfKJJYfTH5kMzh3wS mTu3GvmOgALFYGk2AGV6Sj8p++Ixj/mcddHfFG/3rsw6LGJ/UQPDAY+VFanr7++kEHWZj5EA 0UQ/ixrqe0581amC4GmGRa5u3WD+BUbXrK8DtEH1e1E8YKNiy6xDWkfRTkHY9sj3PLajxRzv rNVt7sF3QBSjYA=
IronPort-HdrOrdr: A9a23:uS6RkKzpfwRqsmli/uq1KrPxJegkLtp133Aq2lEZdPULSL36qy n+ppQmPEHP6Qr5AEtQ5uxoWJPtfZquz+8K3WBxB8bvYOCIghrSEGgP1/qH/9SkIVyDygc/79 YuT0EdMqyLMbESt6+Ti2fIcadE/DDEytHUuQ609QYKcegeUdAZ0+4PMHfjLqQZfnggObMJUL Cnyo5soT2mdX4LbsK9KEUkcoH4zeHjpdbNWzJDIwQoxjWvoFqThYLSIly1zx0eWzRAzfMY93 TZkwv236Ons/uq4B7R3W3e4v1t6ZXcI914a/Cku4wwEHHBmwyobINuV/mppzYuutyi714sjZ 3lvwogF94b0QKQQkiF5T/WnyXw2jcn7HHvjXWCh2H4nMD/TDUmT+JcmINidAfD4UZIhqA+7E sL5RPai3NkN2KFoM3P3amOa/isrDvznZMWq59Xs5WYa/pGVFYel/1GwKofKuZwIMuz0vFWLA ApNrCc2N9mNXWHcnveom5jhPaoXng1A1O6Z3JqgL3P79CT90oJknfxA6ck7y09HJ5Rceg228 3Udqtvj71AVckQcOZ0A/oAW9K+DijXTQvLK3/6GyWtKEgrAQOFl3fM2sR82Mi6PJgTiJcikp XIV11V8WY0ZkL1EMWLmJlG6ArETmmxVSnkjpg23ek1hpTsAL7wdSGTQlEnlMWt5/0ZH83AQv 62fJZbGeXqI2fiEZtAmwf+R55RI38DV9B9gKdwZ3ue5sbQboH6vO3Sd/jeYLLrDDY/Q2v6Rm AOWTDiTf8wmHxDmkWI9yQ5d0mdDnAXp6gAYpQy19JjvbQwCg==
X-Talos-CUID: 9a23:3Qe4vGHmYrBAk45jqmJB+x8qB+V0UkHk92/bfUbjLEF1TJGKHAo=
X-Talos-MUID: 9a23:BZmuhw2Ts9W6al0+1oZ8T1SBNjUjwKuxMFEcsMg9qvKULnYgGjfa1yiqa9py
X-IronPort-Anti-Spam-Filtered: true
Received: from alln-l-core-03.cisco.com ([173.36.16.140]) by rcdn-iport-5.cisco.com with ESMTP/TLS/TLS_AES_256_GCM_SHA384; 13 Apr 2026 07:29:38 +0000
Received: from rcdn-opgw-3.cisco.com (rcdn-opgw-3.cisco.com [72.163.7.164]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by alln-l-core-03.cisco.com (Postfix) with ESMTPS id D234B18000416 for <tls@ietf.org>; Mon, 13 Apr 2026 07:29:37 +0000 (GMT)
X-CSE-ConnectionGUID: +JXuk9qbSLyIzVUTFjThrw==
X-CSE-MsgGUID: X8FpBmCOQx+P9/aiQyuHdQ==
Authentication-Results: rcdn-opgw-3.cisco.com; dkim=pass (signature verified) header.i=@cisco.com
X-IronPort-AV: E=Sophos;i="6.23,176,1770595200"; d="scan'208,217";a="62920055"
Received: from mail-bl2pr08cu00103.outbound.protection.outlook.com (HELO BL2PR08CU001.outbound.protection.outlook.com) ([40.93.4.11]) by rcdn-opgw-3.cisco.com with ESMTP/TLS/TLS_AES_256_GCM_SHA384; 13 Apr 2026 07:29:37 +0000
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=ixCE5/Fn911+LyxyY+BzgwNfcIwb8LS7S6WY99bHzyo2akw3W+HOuUubtX1om6REluFfY8cU9EqiforAl0mMnLNLinM4/7cqmYP6JJFKV5kzjChqqhWuAAYO3ladsAWl43Ggo7FhFSddg58xz8gb5s4t9umGFQv4G5k4joAqtDLYpAzgHFc+UG5GksUjkR2V5IdaNCwf+tmtqAj5Hnk3Ic2YWYo2J9P3IKx1mZitjto7biCHE23DbXc95QW3Dky4HSMhnmatjarebwzzRuvzAha3jc58WQgRTRsolr0AexI5BOIhRTfStJl/VE8Ej6b30xGHe9topLJ13cRgfx3EUg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=1zDMRECLB3tGAWxJg23afoPVfIi77psCPPX9QOQ8AiQ=; b=OUAVSxeXZ6wx3E7LpM62vwEpdLVbEu4v+m8PTwP1T2ZFjjKpfkuzolhaURNL/UTlYR8VXTsagRpbBkssokQH9TdYznlKrwkFygVR+HNef3X28ZbeRJJ9zagGiCi1lc1OpwT7BDWnw+uGUG4rn/GXa3baz949AcZRkKOh/RoeM5A6AjMSFDG0Hjlqy8BSRjWxyPcMqMROYESMaNpDhwOr0yK03FzWaSriGbAd06+zBDQfgrb5h/zcNqDX08sGw8pAupV1Dqf7MHTbOpq9GCeRhC5wvw6N8aibRPGVRSKXZDRhy+gaP1yLVsB3XmqJMYA7iTIBPWbfAtAZdv3yFBr3ng==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none
Received: from DS4PPFA08475C7D.namprd11.prod.outlook.com (2603:10b6:f:fc02::3f) by DS0PR11MB7382.namprd11.prod.outlook.com (2603:10b6:8:131::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9769.48; Mon, 13 Apr 2026 07:29:35 +0000
Received: from DS4PPFA08475C7D.namprd11.prod.outlook.com ([fe80::67b5:ea58:3dcf:391c]) by DS4PPFA08475C7D.namprd11.prod.outlook.com ([fe80::67b5:ea58:3dcf:391c%6]) with mapi id 15.20.9818.017; Mon, 13 Apr 2026 07:29:35 +0000
From: "Scott Fluhrer (sfluhrer)" <sfluhrer@cisco.com>
To: Muhammad Usama Sardar <muhammad_usama.sardar@tu-dresden.de>, Kris Kwiatkowski <kris@amongbytes.com>, "tls@ietf.org" <tls@ietf.org>
Thread-Topic: [TLS] Re: Working Group Last Call for Use of ML-DSA in TLS 1.3
Thread-Index: AQHcyF2es+/4f7T+XkScgEgcCAfePrXXVOwAgADPDoCAACC/gIAAkRYAgANZwYCAAGqYmA==
Date: Mon, 13 Apr 2026 07:29:35 +0000
Message-ID: <DS4PPFA08475C7DBE27468E40C672197481C1242@DS4PPFA08475C7D.namprd11.prod.outlook.com>
References: <16CF0FDA-7263-461A-9F2B-D37DBEAF5DD9@sn3rd.com> <25c8d414-e4c8-455b-bd64-28132615ba75@cs.tcd.ie> <68f49a81-dd2c-4bea-896a-87da3e6aff68@tu-dresden.de> <CAMjbhoWwvfkfScpbf4-5PBzk__qb+6M4ZzAOba64kk9aXBba5g@mail.gmail.com> <d47a34ab-7fb9-4687-84aa-a5fa6bcf6a6c@tu-dresden.de> <2971d01a-89e3-43d3-a01d-b9c17b178763@amongbytes.com> <692bb582-ab7e-4d6b-aa75-ac5d93228bb2@tu-dresden.de>
In-Reply-To: <692bb582-ab7e-4d6b-aa75-ac5d93228bb2@tu-dresden.de>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels:
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: DS4PPFA08475C7D:EE_|DS0PR11MB7382:EE_
x-ms-office365-filtering-correlation-id: b60d28c8-2b45-4334-de23-08de992e69ca
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;ARA:13230040|376014|1800799024|366016|38070700021|8096899003|18002099003|22082099003|56012099003;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:DS4PPFA08475C7D.namprd11.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(376014)(1800799024)(366016)(38070700021)(8096899003)(18002099003)(22082099003)(56012099003);DIR:OUT;SFP:1101;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: multipart/alternative; boundary="_000_DS4PPFA08475C7DBE27468E40C672197481C1242DS4PPFA08475C7D_"
MIME-Version: 1.0
X-Exchange-RoutingPolicyChecked: HnJQtDqoaPmTydYdnSmmjPW1YhbPbRT1hP9xGkDHncn2XNtDG/FICjWu9VgS9RhYUTl2maMKqsbknTRnVjEvXVLigIKTk4EEML4r8vfYizWQSAISIexwSsD/X6R2DNtTIwAgJXu2NW3ck5szKhr3gj1UYM35OuXhOeLiiWO6+mTX408Hby/sNeUmAnN5QOhCgK3tCkU3GlL/TzJtpQy8B5yQJxonE0EEKjJnm3dN0rwW9nRm7nwW/+tnk7ikr7XzuOnHwyr80JYI+E1Jc9cFQ8Xw6xRntbuxvBhoBcTIeDwrTOEBh43sGeQdt/KURjzZE+lUQX/T+f2JzkXTZ6r4sA==
X-OriginatorOrg: cisco.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: DS4PPFA08475C7D.namprd11.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: b60d28c8-2b45-4334-de23-08de992e69ca
X-MS-Exchange-CrossTenant-originalarrivaltime: 13 Apr 2026 07:29:35.5237 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: edzphDR+k/asng/Osssn5pPy3Ah3fYU4H+VuSgy+kCeKMA7s1kHCbIcDbd+j46XYRwdcUniDlE7BhoTtJdp0hg==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DS0PR11MB7382
X-Outbound-Client-TLS: ANONYMOUS;rcdn-opgw-3.cisco.com [72.163.7.164];TLSv1.3;TLS_AES_256_GCM_SHA384;256
X-Outbound-SMTP-Client: 72.163.7.164, rcdn-opgw-3.cisco.com
X-Outbound-Node: alln-l-core-03.cisco.com
Message-ID-Hash: 4OZLZQS4RVLSIDUWFP42G75PJJWJEVFK
X-Message-ID-Hash: 4OZLZQS4RVLSIDUWFP42G75PJJWJEVFK
X-MailFrom: sfluhrer@cisco.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] Re: Working Group Last Call for Use of ML-DSA in TLS 1.3
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/gBdWINnv5zve_UVEi0F1w-0Zj3I>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

If you would prefer hybrid authentication, then I would suggest you publicly endorse either draft-reddy-tls-composite-mldsa (composite signatures; that is, the cert has both classical (e.g. RSA) and pq public keys (e.g. ML-DSA) and both are used to sign in a single logical signature operation) or draft-yusef-tls-pqt-dual-certs (the server sends both a classical certificate  and a pq certificate, and TLS generates two signatures using the two public keys)

Both are currently individual drafts; public support would be useful to make them working group items.

My opinion: composite would be easier to for the working group; composite signature algorithms (and composite certificates) are very close to becoming an RFC (draft-ietf-lamps-pq-composite-sigs).  From the TLS perspective, all that would be needed in addition are code points (because it could just treat the signature algorithm in the composite draft as just another signature algorithm).

________________________________
From: Muhammad Usama Sardar <muhammad_usama.sardar@tu-dresden.de>
Sent: Sunday, April 12, 2026 8:54 PM
To: Kris Kwiatkowski <kris@amongbytes.com>; tls@ietf.org <tls@ietf.org>
Subject: [TLS] Re: Working Group Last Call for Use of ML-DSA in TLS 1.3


TL;DR: My concern has been addressed and I am happy to step back from opposition to no opinion on this WGLC. I would have preferred standardizing hybrids.

v2.46.0 | Report a Bug | By Email | System Status