[TLS] Re: Working Group Last Call for Post-quantum Hybrid ECDHE-MLKEM Key Agreement for TLSv1.3

[Eric Rescorla <[e-mail]>]

On Mon, Oct 13, 2025 at 7:31 AM Bellebaum, Thomas <thomas.bellebaum=
[e-mail]> wrote:

> Many voices in this LC seem to either advocate for recommendation changes
> or be sold on a particular set of combinations already. If the current
> document was able to pass WGLC, then changes to the recommended column
> should not change this.


I don't know why you think that's true, given that we are presently debating
the status of that column in this very WGLC.



> So why go through Montreal? Couldn't we have another WGLC tomorrow? That
> would just move the deadline by the duration of a LC.
>

There seems to be some confusion about the status quo ante.

The current document has Recommended=N for *all* the algorithms. Above, I
proposed changing them to Y, which would also entail changing the document
to be Proposed Standard. We've now heard a number of counterproposals,
including (1) leave as-is (2) just mark X25519 Y (3) take out the NIST
curves.

At this point it's not clear to me that any of these has consensus, so that
chairs need to work that out. However, given that there have been a number
of objections to (3), I doubt very much that that would pass WGLC (and I,
at least, would object to it.).

-Ekr