[TLS] Re: Composite ML-DSA

Nadim Kobeissi <nadim@symbolic.software> Wed, 15 April 2026 15:37 UTC

Return-Path: <nadim@symbolic.software>
X-Original-To: tls@mail2.ietf.org
Delivered-To: tls@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 08B47DCDA423 for <tls@mail2.ietf.org>; Wed, 15 Apr 2026 08:37:29 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1776267449; bh=zcdIQU8B83JlqsBUXto53dSOScUVdOZoV40a2rbwi1A=; h=From:Subject:Date:In-Reply-To:Cc:To:References; b=uAgms8sIKsVBMw0LMHnI04RaMr08GI62DDvy6HfQfTM/BpNd/JTX3esUFr7puGIcO fColBBCYIEv01J99f7DJ1pO/QcC39ORzfoief1na+9aHjYCnvBas/6s1vym8GWz4eW PyzcYEVR1NxkZgIFKDsZx4uu9w+jjepiDhbhx2HM=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.798
X-Spam-Level:
X-Spam-Status: No, score=-2.798 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=symbolic.software header.b="kFMw6DfE"; dkim=pass (2048-bit key) header.d=messagingengine.com header.b="OtpEDoni"
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XLwF7QBWqYWi for <tls@mail2.ietf.org>; Wed, 15 Apr 2026 08:37:28 -0700 (PDT)
Received: from fout-a4-smtp.messagingengine.com (fout-a4-smtp.messagingengine.com [103.168.172.147]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id E4FB1DCDA15A for <tls@ietf.org>; Wed, 15 Apr 2026 08:36:58 -0700 (PDT)
Received: from phl-compute-03.internal (phl-compute-03.internal [10.202.2.43]) by mailfout.phl.internal (Postfix) with ESMTP id 2BD17EC00C5; Wed, 15 Apr 2026 11:36:52 -0400 (EDT)
Received: from phl-frontend-04 ([10.202.2.163]) by phl-compute-03.internal (MEProxy); Wed, 15 Apr 2026 11:36:52 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= symbolic.software; h=cc:cc:content-type:content-type:date:date :from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:subject:subject:to:to; s=fm2; t=1776267412; x=1776353812; bh=bRTvVSWuj0X+4KDuTwN5AGQ4rtLtqcULHJumGaFAg0s=; b= kFMw6DfE8FUM7g8pmT6SQvH+sSpyPEr106Mbf1L50lKUc9W32nWq0FJrB8cygFUc ieohduNG+DJqIQVLBYALqlX+58LULuyQXkR4t3dQpN780J9p17GErwZS3ud97UKL HvbEhrX1V7q3tvC+pjWJi0iCW5GW4izpQIu3vPKhHamAe3qwwGkZUamKeoFYDQBl m8e4eqFEW0zWxcWKb/INgcWwN6hsKFVsnrC7VZoRzaDXCEnQyx4CVXjFRKU/gTIX zMfeGmgOTmSkC269RZdC7LrGa5JqqvkEvvr2HYsEwEv+PahiUGXK+EhrgboG4mqJ T6LQIAvIC3cGVnTNQV3q1g==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-type:content-type:date:date :feedback-id:feedback-id:from:from:in-reply-to:in-reply-to :message-id:mime-version:references:reply-to:subject:subject:to :to:x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm2; t= 1776267412; x=1776353812; bh=bRTvVSWuj0X+4KDuTwN5AGQ4rtLtqcULHJu mGaFAg0s=; b=OtpEDoniiR83yZUnsNugETphR+bx/71U5RMjlfw0aybfCJrPWNy 9ed7vK1g4cpcgN2CVwV3Ro7y3sdZk7Lm0+Tisw2e6y1A3dopVC1kvAeQA9NFQnrY ipENQW4/c4W5zFw73hJX4Osekv47mWVjtfIozHneIcDC+uhHj8heWta9wCYZm4W6 Z/5DmO65SBDPA8iJ/cVo1mEjigJA/eV7mRQGXJ41yS6falm1I4VylYWIa7RJ0tg+ mB86F9k6/RS3SlKqa3CUPNxrExA2FUUdei6btlS2uHuaTHG18EwLrzM9IidLHliW duF6vDbNeocmdCFLsf+UlGyh15KZDBg/uKQ==
X-ME-Sender: <xms:lLDfacPWhzRmyc6P3J8G5qRRCNNqkyEMFoDoX7BgEACIXBz9qq2MvQ> <xme:lLDfaXSOJRxaX211ubFyLWGvDupjsqgQJ4cIZnfy1KyRUFHj5eAfeqJ8rLx9kbtLy 3ct_qcfP59DZq5Z_KdJk5TTNwykIGIrWJvDl-HQFoEi_SXVqLfnVptw>
X-ME-Received: <xmr:lLDfaSaSfoBj-WQ1WhqbZzwbJwg8tqIndEjOHDbvO5mz6eZGTVYE5jSuFo3tO4IsPwftP7g_ZjIFRRapKKTqXfHhiyk_h_WtDMtqfX6k6r65-KvrfBmh9mjgFA>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeefhedrtddtgdeggeegjecutefuodetggdotefrod ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpuffrtefokffrpgfnqfghnecuuegr ihhlohhuthemuceftddtnecusecvtfgvtghiphhivghnthhsucdlqddutddtmdenucfjug hrpefhkfgtggfuffgjvefvfhfosegrtdhmrehhtdejnecuhfhrohhmpefprgguihhmucfm ohgsvghishhsihcuoehnrgguihhmsehshihmsgholhhitgdrshhofhhtfigrrhgvqeenuc ggtffrrghtthgvrhhnpedtudffheetleehhfeugfeiheeltdevieduudduteevtdffheel geetieegtdfggeenucffohhmrghinhepshihmhgsohhlihgtrdhsohhfthifrghrvgenuc evlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepmhgrihhlfhhrohhmpehnrgguihhm sehshihmsgholhhitgdrshhofhhtfigrrhgvpdhnsggprhgtphhtthhopeefpdhmohguvg epshhmthhpohhuthdprhgtphhtthhopehkohhnughtihhrsehgmhgrihhlrdgtohhmpdhr tghpthhtohepuggrvhgrughrihgrsehumhhitghhrdgvughupdhrtghpthhtohepthhlsh esihgvthhfrdhorhhg
X-ME-Proxy: <xmx:lLDfac1VDM6UbuAi8YkMO4InojQ14G334XtHe2of6NcGFWZPSxT9cw> <xmx:lLDfaaW-0ONTXZtbYf_uQ2h-3lVW5Nb58zKUWVwc-_GZS2XRXqmohg> <xmx:lLDfaeXtD0rMPzDdIiiIRwMiXf7yhYm5cotN1sRX7n2Ig4bGoNikvQ> <xmx:lLDfaReEASh9qBwXkEX4KIjrX62bsW8qI1-7tC86hjKO6iaN1KOCAQ> <xmx:lLDfafXHob7J2xNDv9MK5UzFeauf1Sziblnt2UAw8hq0pbECAhgpOTWy>
Feedback-ID: i6d3949ed:Fastmail
Received: by mail.messagingengine.com (Postfix) with ESMTPA; Wed, 15 Apr 2026 11:36:51 -0400 (EDT)
From: Nadim Kobeissi <nadim@symbolic.software>
Message-Id: <6B44F75F-86EC-4ABB-9A43-984E487EC80D@symbolic.software>
Content-Type: multipart/alternative; boundary="Apple-Mail=_305DC397-F1CF-4767-AF47-152653D96A59"
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3864.500.181\))
Date: Wed, 15 Apr 2026 17:36:51 +0200
In-Reply-To: <CAFpG3gcC+UfO7E=ADGhwr2En5PwipZiq_r6_RdqvmT-5nnh2jw@mail.gmail.com>
To: tirumal reddy <kondtir@gmail.com>
References: <16CF0FDA-7263-461A-9F2B-D37DBEAF5DD9@sn3rd.com> <25c8d414-e4c8-455b-bd64-28132615ba75@cs.tcd.ie> <68f49a81-dd2c-4bea-896a-87da3e6aff68@tu-dresden.de> <CAMjbhoWwvfkfScpbf4-5PBzk__qb+6M4ZzAOba64kk9aXBba5g@mail.gmail.com> <d47a34ab-7fb9-4687-84aa-a5fa6bcf6a6c@tu-dresden.de> <2971d01a-89e3-43d3-a01d-b9c17b178763@amongbytes.com> <692bb582-ab7e-4d6b-aa75-ac5d93228bb2@tu-dresden.de> <DS4PPFA08475C7DBE27468E40C672197481C1242@DS4PPFA08475C7D.namprd11.prod.outlook.com> <LV0PR21MB6623B48B1F3A05D745F5A79D8C242@LV0PR21MB6623.namprd21.prod.outlook.com> <ad0svakv_WUM3btz@chardros.imrryr.org> <CAF8qwaBU_YHWX2MsWeeaOJ8sutR1wMozvbiTJF5kyvTE8YjWWA@mail.gmail.com> <CACsn0c=GDta824UF7uJ3nw_4U_rT=XhYOGHRemMWa+2AdbsiAg@mail.gmail.com> <3a16c7c4-345e-48ce-af70-a3bf503c8caf@app.fastmail.com> <CACf5n7_0hdeHJXXucva9pb=+pjhcgveHRpjA8XAcXB3LsYUvaw@mail.gmail.com> <CAFpG3gcC+UfO7E=ADGhwr2En5PwipZiq_r6_RdqvmT-5nnh2jw@mail.gmail.com>
X-Mailer: Apple Mail (2.3864.500.181)
Message-ID-Hash: T4LIJI3P5RU75BLRZBM5AWIZ5XFTB5FH
X-Message-ID-Hash: T4LIJI3P5RU75BLRZBM5AWIZ5XFTB5FH
X-MailFrom: nadim@symbolic.software
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: "<tls@ietf.org>" <tls@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] Re: Composite ML-DSA
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/lZ-Cp3sAH92kS7-WqoORYCxOqH4>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

Hi everyone,

I’ve published a blog post through my consultancy, Symbolic Software, outlining some (hopefully) nuanced thoughts on hybrids for signatures versus hybrids for key exchange:

https://symbolic.software/blog/2026-04-13-hybrid-constructions/

Nadim Kobeissi
Symbolic Software • https://symbolic.software

> On 15 Apr 2026, at 7:45 AM, tirumal reddy <kondtir@gmail.com> wrote:
> 
> Could you elaborate on the reasons behind this position? Understanding the specific objections would help us address them in the draft or in the WG discussion.  
> 
> -Tiru