[TLS] Re: WG Adoption Call for ML-KEM Post-Quantum Key Agreement for TLS 1.3

Sean Turner <sean@sn3rd.com> Fri, 18 April 2025 15:27 UTC

Return-Path: <sean@sn3rd.com>
X-Original-To: tls@mail2.ietf.org
Delivered-To: tls@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 103CE1E25081 for <tls@mail2.ietf.org>; Fri, 18 Apr 2025 08:27:59 -0700 (PDT)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.1
X-Spam-Level:
X-Spam-Status: No, score=-2.1 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (1024-bit key) header.d=sn3rd.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Q47AQLSpA-iK for <tls@mail2.ietf.org>; Fri, 18 Apr 2025 08:27:58 -0700 (PDT)
Received: from mail-qv1-xf2c.google.com (mail-qv1-xf2c.google.com [IPv6:2607:f8b0:4864:20::f2c]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 8C7181E25071 for <tls@ietf.org>; Fri, 18 Apr 2025 08:27:58 -0700 (PDT)
Received: by mail-qv1-xf2c.google.com with SMTP id 6a1803df08f44-6f2c45ecaffso7934526d6.2 for <tls@ietf.org>; Fri, 18 Apr 2025 08:27:58 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sn3rd.com; s=google; t=1744990078; x=1745594878; darn=ietf.org; h=to:references:message-id:content-transfer-encoding:cc:date :in-reply-to:from:subject:mime-version:from:to:cc:subject:date :message-id:reply-to; bh=0qXBEs87M6cubKBGM9KQqYLLClGpezbyhVYflxeRSp8=; b=ZjMP7uoR/elsbAAewLZgeOyQ3TY5o+WbtCL4JY6r+wU8EgtX/b4moWETJAs0IZSpZf A9/RzGGvWet1LZH3aNvUms89+v+wKg7Eh4jQKaCcMVmSc64D6irpXsOVQyC+7hq6wit6 O8+7Kc/7qVoCuoWhiipQeso6umzpit861Le8A=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1744990078; x=1745594878; h=to:references:message-id:content-transfer-encoding:cc:date :in-reply-to:from:subject:mime-version:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=0qXBEs87M6cubKBGM9KQqYLLClGpezbyhVYflxeRSp8=; b=rAQjKydvsiNaMqcYbKBeCkqMpt1Ahd7bq6Q/FLnTgOi+9N12Hw45+uFOPpmFz6rnME f9BxQAH77fg7vZYsRMzJCcfVblf3w4e4Z+0s7rOubj7YIMtjUn/N2Mx0U//xbs39UOXk gqu2rupKGgwt90bhnYklWBbAkkzdJuFJb7q5uD3EMCzMKFWFJNgz/aaJ8D23SWBgCn5N 8MmSbfEG6Rsf67C/l7d/WVCy4VdCjjicLxuLNy5WfsmrrBWjAUJMaoPDNit0FxMsakHv O7/ugGWXen7uCivqZ7gvLm9KqVAI0Y0vzQpoleHMdbOZnmNQ/kd+IZreNq5mFlXKY4PJ kq+w==
X-Gm-Message-State: AOJu0YyTxcDipCq8wSt9vpUoVCwIVCfxjcQwjtrN819PPmLkXyqvNBaq wtgAX+yavlGNxAE8J6QLfOpBeOsf/Mbpy5PFat+hl+F21jPDpA+49BLe4ac3X1s=
X-Gm-Gg: ASbGncuVgmCYuNsY1oj8QYPhp4Na3MERn+geuIybBfP7SxHp4qKyn4GnuV1f6d791ZQ 1QTcu9FfQszumE6adK2i9v1FsGKYcjF8+YxXwkfE6gXva73ydDyiKqDTJXOe32nzKh0cohyV6P6 UUm+gH1PD4LWAzEcSt2Y+2eLkJNHYXtFUnmxH1OecEoTtejxd87ZECt4HC2OmcbX7O3q1tDo8mS MukoIQaFzrTUs+0tjTxgzCn60sNUvPHOXHidVG6kSI7Q64O6NUPrX0wE2HH85UmcEEM86/FBXII Bar2wAn800Ej9svVJGOQHjetkbXIzUJA45Z5uTf94aO3HO6zNgNejofBmpWfb8OomWw=
X-Google-Smtp-Source: AGHT+IF5w3ziatVqFWSZnkUqb3F5U/o9pn48EpegIKieleiQ2mODUHWfJledDecyzobISy8EJxHNqg==
X-Received: by 2002:ad4:5be1:0:b0:6d4:1bad:740c with SMTP id 6a1803df08f44-6f2c45156b1mr51531526d6.4.1744990077966; Fri, 18 Apr 2025 08:27:57 -0700 (PDT)
Received: from smtpclient.apple ([2600:4040:252a:8d00:91c0:1675:a366:22e0]) by smtp.gmail.com with ESMTPSA id 6a1803df08f44-6f2c2b33134sm11635296d6.54.2025.04.18.08.27.57 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Fri, 18 Apr 2025 08:27:57 -0700 (PDT)
Content-Type: text/plain; charset="utf-8"
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3826.500.181.1.5\))
From: Sean Turner <sean@sn3rd.com>
In-Reply-To: <20250418140255.430512.qmail@cr.yp.to>
Date: Fri, 18 Apr 2025 11:27:36 -0400
Content-Transfer-Encoding: quoted-printable
Message-Id: <3941D46C-7172-4114-9927-1C6D5AF30F85@sn3rd.com>
References: <20250418140255.430512.qmail@cr.yp.to>
To: "D. J. Bernstein" <djb@cr.yp.to>
X-Mailer: Apple Mail (2.3826.500.181.1.5)
Message-ID-Hash: ZXGMAP6XXPRVGWSTMICT4WT6NNMKQT5C
X-Message-ID-Hash: ZXGMAP6XXPRVGWSTMICT4WT6NNMKQT5C
X-MailFrom: sean@sn3rd.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: TLS List <tls@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] Re: WG Adoption Call for ML-KEM Post-Quantum Key Agreement for TLS 1.3
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/k7_PEqKZulXMtm-D_9pEvfqcxAU>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>


> On Apr 18, 2025, at 10:02 AM, D. J. Bernstein <djb@cr.yp.to> wrote:
> 
> Bellebaum, Thomas writes:
>> I am counting 22 expressions in favor of adoption and 7 opposing
>> adoption.
> 
> Thanks for doing the work to tally this, and for posting the details so
> that people can check your message and post any necessary adjustments.
> 
> These numbers sound radically different from the AD's portrayal ("67
> responses ... vast majority was in favour ... a few dissenting
> opinions"). My own impression, from having read all messages as they
> came in, was about a quarter of the people opposing, so I will be very
> surprised if adjustments end up big enough to rescue the AD's portrayal.
> 
> So: Can we please now have an explanation from the chairs of how they
> arrived at "It looks like we have consensus to adopt this draft as a
> working group item"?
> 
> To prevent any confusion about the procedures: Based on what I've seen
> (the whole discussion, not just the fragmentary information conveyed by 
> numbers), I disagree with this declaration of consensus. I am therefore
> invoking the "first discuss the matter with the Working Group's
> chair(s)" provision of RFC 2026, Section 6.5.1. I ask for this
> discussion to be on-list for transparency.
> 
> Within that, what I'm suggesting---both because I think it's the natural
> way forward, and because of transparency considerations; I'm not saying
> this is the only possibility under RFC 2026---is for the chairs to start
> by explaining to the WG how they evaluated consensus, so that we can all
> consider the explanation, rather than starting with a bunch of
> conflicting guesses from the rest of us regarding how consensus might
> have been evaluated.
> 
> ---D. J. Bernstein

Joe and I, as WG chairs and with Deirdre recusing as she is an author, declared consensus to adopt draft-connolly-tls-mlkem-key-agreement. We did this because there is clearly sufficient interest to work on this draft.  Different working groups have different styles with respect to how much work is done by the individual author, versus how much work is done by the WG after adopting the work. Now that the draft is a WG draft, we will follow WG process by discussing concerns, already raised and new ones, under IETF change control and progressing after there is consensus.

spt