IronPort-PHdr: A9a23:TmFSkh1xAx0Ss9N6smDPmlBlVkEcU/3cJAUZ7N8gk71RN//l9JX5N
 0uZ7vJo3xfFXoTevupNkPGe87vhVmoJ/YubvTgcfYZNWR4IhYRenwEpDMOfT0yuBPXrdCc9W
 s9FUTdY
IronPort-Data: A9a23:9mzk16iv4mOYh3UrTza0YyWWX161JBEKZh0ujC45NGQN5FlHY01je
 htvWmjUOveLM2ekKNtybt/i8h4C65DdzddlHlFqpC8zH39jpJueD7x1DKtf0wB+jyHnZBg6h
 ynLQoCYdKjYdleF+FH1dOOn9SUgvU2xbuKUIPbePSxsThNTRi4kiBZy88Y0mYcAbeKRW2thg
 vus5ZeEULOZ82QsaDxMt/vZ8EkHUMna4Vv0gHRvPZing3eG/5UlJMp3Db28KXL+Xr5VEoaSL
 87fzKu093/u5BwkDNWoiN7TKiXmlZaLYGBiIlIPM0STqkAqSh4ai87XB9JAAatjsAhlqvgqo
 Dl7WTNcfi9yVkHEsLx1vxC1iEiSN4UekFPMCSDXXcB+UyQqflO0q8iCAn3aMqU+9bdJHEQf1
 cAhEygGMBnYosWqxJ6kH7wEasQLdKEHPasWvnVmiDWcBvE8TNWbGOPB5MRT23E7gcUm8fT2P
 pVCL2ExKk2eJUQTYj/7C7pm9AusrmLxdyBYsl+PjaE2+GPUigd21dABNfKJJYfTH5kMzh3wS
 mTu3GvmOgALFYGk2AGV6Sj8p++Ixj/mcddHfFG/3rsw6LGJ/UQPDAY+VFanr7++kEHWZj5EA
 0UQ/ixrqe0581amC4GmGRa5u3WD+BUbXrK8DtEH1e1E8YKNiy6xDWkfRTkHY9sj3PLajxRzv
 rNVt7sF3QBSjYA=
IronPort-HdrOrdr: A9a23:uS6RkKzpfwRqsmli/uq1KrPxJegkLtp133Aq2lEZdPULSL36qy
 n+ppQmPEHP6Qr5AEtQ5uxoWJPtfZquz+8K3WBxB8bvYOCIghrSEGgP1/qH/9SkIVyDygc/79
 YuT0EdMqyLMbESt6+Ti2fIcadE/DDEytHUuQ609QYKcegeUdAZ0+4PMHfjLqQZfnggObMJUL
 Cnyo5soT2mdX4LbsK9KEUkcoH4zeHjpdbNWzJDIwQoxjWvoFqThYLSIly1zx0eWzRAzfMY93
 TZkwv236Ons/uq4B7R3W3e4v1t6ZXcI914a/Cku4wwEHHBmwyobINuV/mppzYuutyi714sjZ
 3lvwogF94b0QKQQkiF5T/WnyXw2jcn7HHvjXWCh2H4nMD/TDUmT+JcmINidAfD4UZIhqA+7E
 sL5RPai3NkN2KFoM3P3amOa/isrDvznZMWq59Xs5WYa/pGVFYel/1GwKofKuZwIMuz0vFWLA
 ApNrCc2N9mNXWHcnveom5jhPaoXng1A1O6Z3JqgL3P79CT90oJknfxA6ck7y09HJ5Rceg228
 3Udqtvj71AVckQcOZ0A/oAW9K+DijXTQvLK3/6GyWtKEgrAQOFl3fM2sR82Mi6PJgTiJcikp
 XIV11V8WY0ZkL1EMWLmJlG6ArETmmxVSnkjpg23ek1hpTsAL7wdSGTQlEnlMWt5/0ZH83AQv
 62fJZbGeXqI2fiEZtAmwf+R55RI38DV9B9gKdwZ3ue5sbQboH6vO3Sd/jeYLLrDDY/Q2v6Rm
 AOWTDiTf8wmHxDmkWI9yQ5d0mdDnAXp6gAYpQy19JjvbQwCg==
From: "Scott Fluhrer (sfluhrer)" <sfluhrer@cisco.com>
To: Muhammad Usama Sardar <muhammad_usama.sardar@tu-dresden.de>, Kris
 Kwiatkowski <kris@amongbytes.com>, "tls@ietf.org" <tls@ietf.org>
Thread-Topic: [TLS] Re: Working Group Last Call for Use of ML-DSA in TLS 1.3
Thread-Index: 
 AQHcyF2es+/4f7T+XkScgEgcCAfePrXXVOwAgADPDoCAACC/gIAAkRYAgANZwYCAAGqYmA==
Date: Mon, 13 Apr 2026 07:29:35 +0000
Message-ID: 
 <DS4PPFA08475C7DBE27468E40C672197481C1242@DS4PPFA08475C7D.namprd11.prod.outlook.com>
References: <16CF0FDA-7263-461A-9F2B-D37DBEAF5DD9@sn3rd.com>
 <25c8d414-e4c8-455b-bd64-28132615ba75@cs.tcd.ie>
 <68f49a81-dd2c-4bea-896a-87da3e6aff68@tu-dresden.de>
 <CAMjbhoWwvfkfScpbf4-5PBzk__qb+6M4ZzAOba64kk9aXBba5g@mail.gmail.com>
 <d47a34ab-7fb9-4687-84aa-a5fa6bcf6a6c@tu-dresden.de>
 <2971d01a-89e3-43d3-a01d-b9c17b178763@amongbytes.com>
 <692bb582-ab7e-4d6b-aa75-ac5d93228bb2@tu-dresden.de>
In-Reply-To: <692bb582-ab7e-4d6b-aa75-ac5d93228bb2@tu-dresden.de>
Accept-Language: en-US
Content-Language: en-US
msip_labels: 
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: DS4PPFA08475C7D:EE_|DS0PR11MB7382:EE_
x-ms-office365-filtering-correlation-id: b60d28c8-2b45-4334-de23-08de992e69ca
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: 
 BCL:0;ARA:13230040|376014|1800799024|366016|38070700021|8096899003|18002099003|22082099003|56012099003;
x-microsoft-antispam-message-info: 
 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
x-forefront-antispam-report: 
 CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:DS4PPFA08475C7D.namprd11.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(376014)(1800799024)(366016)(38070700021)(8096899003)(18002099003)(22082099003)(56012099003);DIR:OUT;SFP:1101;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 
 =?iso-8859-1?Q?95omR5BwmJsLcxl95VaozTZr7MUeHuX5j/JG2RIr+qAr0NkE9F5Pi9iHFr?=
 =?iso-8859-1?Q?M0Gln6SY9nTYF1JHrs/JhSAiLveX9TYc6FMtPmb6hdJPTJe8yeb+Zz051E?=
 =?iso-8859-1?Q?PMc+b41nZmijkzQjbN1/va1AXPTswbn2CsS7RCEkIrdTSsZXoFWUs8WeWt?=
 =?iso-8859-1?Q?bIx33Ueuoiw6407lm75OHaK9hFZHLCozYWBXBxYihGPONC0ANllRF640IJ?=
 =?iso-8859-1?Q?O3lo1Q6QMGBfKKvxMe/7wg4HemuJ6lLtMTOb6uuCCDzHD8IMgiqiXPU7Xi?=
 =?iso-8859-1?Q?OgPHnuUX6VUJwu+E/P8y/Vwgd9/t/CqMe2k8KiAo7ScoB8M5iz+bCVDS7s?=
 =?iso-8859-1?Q?Omab6V/Vcl1K3bYqZ698+sHLZAYtAhtkagCPppAJH+jOA41ejydiPuYJag?=
 =?iso-8859-1?Q?sw4J5p4aa/Ii9bt2Snt7jEosA4zdDRE1kyHhMn+jd8jur3D7Y7bf5NxjjQ?=
 =?iso-8859-1?Q?6J/2Tzttwli29PXR1Nrp2dvEj8w9YUkJI3fTtbHoB4YgcVK/78bxrPsx4J?=
 =?iso-8859-1?Q?nY/PWcEkP/66LkqlRplNOdd6PeUEKbU1YIExwGF4WOFZi8cAsVtcuEBN8N?=
 =?iso-8859-1?Q?G1at1igjZ9QJ40HPazuiuZEFrz4Ps//96kNWYerg630XyoYUS9eiuMU/6e?=
 =?iso-8859-1?Q?yKDFx65up+RIxR1rfNiDBqH3EkD9ZHEcJxzoZGm84v11GN1cF1abwIlVrH?=
 =?iso-8859-1?Q?/ZpHM0347Gce4p2vxiTT2p4xhL+qUw+8XAXAKNDeTZXwt8lD3z1FkNGBwQ?=
 =?iso-8859-1?Q?bgHoA5gX8Bb5we/ZfsRbHmXBxI33Pr2vMDfJ4xfIdY+ZueiwPBoZiWFezF?=
 =?iso-8859-1?Q?PwRrXZtei4vxAueKa3+SM00j7MnmgQNmS1oV4fNBh0n/DhK/3GcLh2SrIR?=
 =?iso-8859-1?Q?K/p7nm962HAXF4HVUZjm7gCd/YkMl96buc7uG/iyiwwPXO9l6crLHV2PAe?=
 =?iso-8859-1?Q?T2RvU51T6SJYJ3dj/v/S/6SWk0hS7ANZz7aXo0PYz3ACCK9+PSdx7+bR9m?=
 =?iso-8859-1?Q?9YKfkPzKwIvUMWwpzZ1U1OfKPiwBJC242c+txsfSryZGR7r7P0imKGStRo?=
 =?iso-8859-1?Q?oZ/qjL8vtiSI2dK/wq0utWQeWrlbMux9y7FmqJLttSvYKaq2tgPzrMN4VS?=
 =?iso-8859-1?Q?wztEUFjRsLr36Ly52dJ/35Z2ePlwd+bohj32BUCf22/HE3LQJOPhIhT/DM?=
 =?iso-8859-1?Q?uWa+bNMkRYpuLzt+jK5bvmVTjR2uyW9W0k1Ghm3RW83Xvgc+GJ+xEvVsZV?=
 =?iso-8859-1?Q?ahssmzn34jPbspQn7gG7lluj+ipjksfJcBGbperagvmz6onsvOj0fgiX4b?=
 =?iso-8859-1?Q?lA9sVuODoz7AAU8NhYRXiTz7PtXHGbnsXqTL6VAGITNIgcGx+3XUsiKiEM?=
 =?iso-8859-1?Q?v9Rykm5WMcrBedGh5L/zkx6/u945lSysV0t5kilRKizbknC+7PFzC0teJr?=
 =?iso-8859-1?Q?K9RafrZ8P9bAUCOj1eFnhtWVM9P9EXDTja27sYaTPqhG/MhdLzp5bDC+52?=
 =?iso-8859-1?Q?q5aNufmeuFXwWx0SYaCih3YF408OXgEalHXFljNMH+gksptJaXUokNMiBK?=
 =?iso-8859-1?Q?QkHzA/M+PMks5Cj6k+7I7lWybyNA1UsOhp1/ND8T1rEqHfA0GLU2eIjFRj?=
 =?iso-8859-1?Q?mLW8t3YEzNO5dXuz4YrYUBwX9tMqincGmMpbLa5vp9/1Pf+wrVCCccEpem?=
 =?iso-8859-1?Q?IJYG/79Jss2mV3xXzjyDoV4Mjg6uwQ/Jgg/mRSmEkGDYqjJsf3SpZ7BFFt?=
 =?iso-8859-1?Q?unzuo0te0/5zufAEI0bhW7TgWJPgWKbxazqKNtMS1pCBN4?=
Content-Type: multipart/alternative;
	boundary="_000_DS4PPFA08475C7DBE27468E40C672197481C1242DS4PPFA08475C7D_"
MIME-Version: 1.0
X-Exchange-RoutingPolicyChecked: 
	HnJQtDqoaPmTydYdnSmmjPW1YhbPbRT1hP9xGkDHncn2XNtDG/FICjWu9VgS9RhYUTl2maMKqsbknTRnVjEvXVLigIKTk4EEML4r8vfYizWQSAISIexwSsD/X6R2DNtTIwAgJXu2NW3ck5szKhr3gj1UYM35OuXhOeLiiWO6+mTX408Hby/sNeUmAnN5QOhCgK3tCkU3GlL/TzJtpQy8B5yQJxonE0EEKjJnm3dN0rwW9nRm7nwW/+tnk7ikr7XzuOnHwyr80JYI+E1Jc9cFQ8Xw6xRntbuxvBhoBcTIeDwrTOEBh43sGeQdt/KURjzZE+lUQX/T+f2JzkXTZ6r4sA==
X-OriginatorOrg: cisco.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: 
 DS4PPFA08475C7D.namprd11.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 
 b60d28c8-2b45-4334-de23-08de992e69ca
X-MS-Exchange-CrossTenant-originalarrivaltime: 13 Apr 2026 07:29:35.5237
 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: 
 edzphDR+k/asng/Osssn5pPy3Ah3fYU4H+VuSgy+kCeKMA7s1kHCbIcDbd+j46XYRwdcUniDlE7BhoTtJdp0hg==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DS0PR11MB7382
X-Outbound-Client-TLS: ANONYMOUS;rcdn-opgw-3.cisco.com
 [72.163.7.164];TLSv1.3;TLS_AES_256_GCM_SHA384;256
X-Outbound-SMTP-Client: 72.163.7.164, rcdn-opgw-3.cisco.com
X-Outbound-Node: alln-l-core-03.cisco.com
Message-ID-Hash: 4OZLZQS4RVLSIDUWFP42G75PJJWJEVFK
X-Message-ID-Hash: 4OZLZQS4RVLSIDUWFP42G75PJJWJEVFK
X-MailFrom: sfluhrer@cisco.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency;
 loop; banned-address; member-moderation; header-match-tls.ietf.org-0;
 nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size;
 news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: =?utf-8?q?=5BTLS=5D_Re=3A_Working_Group_Last_Call_for_Use_of_ML-DSA_in_TLS_1?=
	=?utf-8?q?=2E3?=
List-Id: "This is the mailing list for the Transport Layer Security working
 group of the IETF." <tls.ietf.org>
Archived-At: 
 <https://mailarchive.ietf.org/arch/msg/tls/gBdWINnv5zve_UVEi0F1w-0Zj3I>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

--_000_DS4PPFA08475C7DBE27468E40C672197481C1242DS4PPFA08475C7D_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

If you would prefer hybrid authentication, then I would suggest you publicl=
y endorse either draft-reddy-tls-composite-mldsa (composite signatures; tha=
t is, the cert has both classical (e.g. RSA) and pq public keys (e.g. ML-DS=
A) and both are used to sign in a single logical signature operation) or dr=
aft-yusef-tls-pqt-dual-certs (the server sends both a classical certificate=
  and a pq certificate, and TLS generates two signatures using the two publ=
ic keys)

Both are currently individual drafts; public support would be useful to mak=
e them working group items.

My opinion: composite would be easier to for the working group; composite s=
ignature algorithms (and composite certificates) are very close to becoming=
 an RFC (draft-ietf-lamps-pq-composite-sigs).  From the TLS perspective, al=
l that would be needed in addition are code points (because it could just t=
reat the signature algorithm in the composite draft as just another signatu=
re algorithm).

________________________________
From: Muhammad Usama Sardar <muhammad_usama.sardar@tu-dresden.de>
Sent: Sunday, April 12, 2026 8:54 PM
To: Kris Kwiatkowski <kris@amongbytes.com>; tls@ietf.org <tls@ietf.org>
Subject: [TLS] Re: Working Group Last Call for Use of ML-DSA in TLS 1.3


TL;DR: My concern has been addressed and I am happy to step back from oppos=
ition to no opinion on this WGLC. I would have preferred standardizing hybr=
ids.


--_000_DS4PPFA08475C7DBE27468E40C672197481C1242DS4PPFA08475C7D_
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-=
1">
<style type=3D"text/css" style=3D"display:none;"> P {margin-top:0;margin-bo=
ttom:0;} </style>
</head>
<body dir=3D"ltr">
<div class=3D"elementToProof" style=3D"font-family: Aptos, Aptos_EmbeddedFo=
nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; c=
olor: rgb(0, 0, 0);">
If you would prefer hybrid authentication, then I would suggest you publicl=
y endorse either draft-reddy-tls-composite-mldsa (composite signatures; tha=
t is, the cert has both classical (e.g. RSA) and pq public keys (e.g. ML-DS=
A) and both are used to sign in
 a single logical signature operation) or draft-yusef-tls-pqt-dual-certs (t=
he server sends both a classical certificate&nbsp; and a pq certificate, an=
d TLS generates two signatures using the two public keys)</div>
<div class=3D"elementToProof" style=3D"font-family: Aptos, Aptos_EmbeddedFo=
nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; c=
olor: rgb(0, 0, 0);">
<br>
</div>
<div class=3D"elementToProof" style=3D"font-family: Aptos, Aptos_EmbeddedFo=
nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; c=
olor: rgb(0, 0, 0);">
Both are currently individual drafts; public support would be useful to mak=
e them working group items.</div>
<div class=3D"elementToProof" style=3D"font-family: Aptos, Aptos_EmbeddedFo=
nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; c=
olor: rgb(0, 0, 0);">
<br>
</div>
<div class=3D"elementToProof" style=3D"font-family: Aptos, Aptos_EmbeddedFo=
nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; c=
olor: rgb(0, 0, 0);">
My opinion: composite would be easier to for the working group; composite s=
ignature algorithms (and composite certificates) are very close to becoming=
 an RFC (draft-ietf-lamps-pq-composite-sigs).&nbsp; From the TLS perspectiv=
e, all that would be needed in addition
 are code points (because it could just treat the signature algorithm in th=
e composite draft as just another signature algorithm).</div>
<div style=3D"font-family: Calibri, Arial, Helvetica, sans-serif; font-size=
: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<hr style=3D"display: inline-block; width: 98%;">
<div style=3D"font-family: Calibri, Arial, Helvetica, sans-serif; font-size=
: 12pt; color: rgb(0, 0, 0);">
<b>From:</b>&nbsp;Muhammad Usama Sardar &lt;muhammad_usama.sardar@tu-dresde=
n.de&gt;<br>
<b>Sent:</b>&nbsp;Sunday, April 12, 2026 8:54 PM<br>
<b>To:</b>&nbsp;Kris Kwiatkowski &lt;kris@amongbytes.com&gt;; tls@ietf.org =
&lt;tls@ietf.org&gt;<br>
<b>Subject:</b>&nbsp;[TLS] Re: Working Group Last Call for Use of ML-DSA in=
 TLS 1.3 </div>
<div style=3D"font-family: Calibri, Arial, Helvetica, sans-serif; font-size=
: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<p style=3D"margin-top: 1em; margin-bottom: 1em;">TL;DR: My concern has bee=
n addressed and I am happy to step back from opposition to no opinion on th=
is WGLC. I would have preferred standardizing hybrids.</p>
<p style=3D"margin-top: 1em; margin-bottom: 1em;"><br>
</p>
</body>
</html>

--_000_DS4PPFA08475C7DBE27468E40C672197481C1242DS4PPFA08475C7D_--