IETF Logo Mail Archive

[TLS] Re: [Last-Call] Re: Re: Re: Re: Re: Re: Re: Last Call: <draft-ietf-tls-mldsa-03.txt> (Use of ML-DSA in TLS 1.3) to Informational RFC

Loganaden Velvindron <loganaden@gmail.com> Tue, 02 June 2026 03:51 UTC

Return-Path: <loganaden@gmail.com>
X-Original-To: tls@mail2.ietf.org
Delivered-To: tls@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 55666F90733C for <tls@mail2.ietf.org>; Mon, 1 Jun 2026 20:51:09 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1780372269; bh=UWeMGIUfG/jKH5MIGJ3qFevdC/Nk5eALe4tWV7PPLTM=; h=References:In-Reply-To:From:Date:Subject:To:Cc; b=hMwY/S/ce9IVuzm+s093D40Emb7OiSoMgNoSsUCl1/4t+Cvn+t1tS0UwZlngAw7td sZu5v9TTwSgiYUJc6a21qBSsc3v8HpI3+1uiQCgr0JZnnKxfqKxwejcf7ViUC3YZB9 YEmJvWHLH55mSKwfUGDlC7DSmlD07qUBj7LXmNss=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.099
X-Spam-Level:
X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gGu6dLWutM5A for <tls@mail2.ietf.org>; Mon, 1 Jun 2026 20:51:09 -0700 (PDT)
Received: from mail-pl1-x630.google.com (mail-pl1-x630.google.com [IPv6:2607:f8b0:4864:20::630]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id D8DDEF907320 for <tls@ietf.org>; Mon, 1 Jun 2026 20:51:06 -0700 (PDT)
Received: by mail-pl1-x630.google.com with SMTP id d9443c01a7336-2c0c3546924so14000035ad.3 for <tls@ietf.org>; Mon, 01 Jun 2026 20:51:06 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1780372266; cv=none; d=google.com; s=arc-20240605; b=ImlN1vSn6n4V3/PU32Q3bNpiGmAm5FvIXT/hFH9mtcNCGruWiPMTgyNQ2/qVC4bRl9 3ieeK+/3LSckIiyVxd1ACNs4TLnTXWsksiiJ+Esti15pcUoPthGl2awXwSg3n1sOds4T V7NrGt3lZmrlG2AWD7EsLz35HkMddVxAp/lJhv3o0+ZTTDEv5Xbjt9rAfee4M27YPV9M mckAf9Go/q7WuPMQGtDPvG34WxapKGpO7vI6TX1UztY/WJxReSvl2KoEO3VCWKYY3EHe 3fGdE399eLZrK0MHwcU2Mc5fprU24vBlN+NZU62jn70P8APY79vbWBiJ0PNDSuuV+6Ec u1dA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:dkim-signature; bh=UWeMGIUfG/jKH5MIGJ3qFevdC/Nk5eALe4tWV7PPLTM=; fh=nPJvjY/d7hAZ+eJpJJIjQKTWTRcn/rYdHMKsqQuPpxw=; b=XkgRu/jm/7L7H9Qkb55fZMOyqLx6ugcds4a0oHb8+GapVkLo6fEAuUoBMnQGrX0Yl9 g11AcaG5Gy+IIDNFzpDpIYlM10IA5CXXlrIQcTwo/c9ZT3NCwDJlia+45GuEfDFm3ubI FQO40NKUN5HHl0m/sNIpTAq1pOUK+HYsvCevS5mcdWR2ZZxAiczU3f8SW0lCgLZzDmjm 4DDuIVZDaj4ah6bTVhklQxkCYYMmwQDFQ0vu+qGSRIwb+GDiK8OYyrWl2JvZRoQBR9C2 ybSqk1WLQX7XJaUFA2eBa8DfT8P1GEAJ/nBZs6FDEF2u6p4XxLxJ/+qrdSZwBWL+C8Dr yuWw==; darn=ietf.org
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1780372266; x=1780977066; darn=ietf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=UWeMGIUfG/jKH5MIGJ3qFevdC/Nk5eALe4tWV7PPLTM=; b=PhAmjybBbi/OihRrQ7yqFBIclJHnZ8qdZL1JpgQfy2GJ7ghQ4iRX9c3Kca9hXS+f0N lSAt7jsPkgSMkdZS30LUyEA8jvxxdqBwDhyqwTSMX9UzceI7SkRqGLyvfYK1C4lhOxov 8361HRr0KRwatPOKvNx5UbIvks/wZxCMuEaFiWD0OTVRxrEbcd272PNXrUQAT/nDds0l jldFffr8NUHiEdzG2bUL94CXKeOjXkATlU3miI/yalRlb5gJMNdq6VbDtML86dMfMzKd BC42iCpwjbsojOGzFhCeMLIuvOLfzoViT3iveOzUhJKHbMTvMhzd4NoXxLRiIxFn68PL 7uHg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1780372266; x=1780977066; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=UWeMGIUfG/jKH5MIGJ3qFevdC/Nk5eALe4tWV7PPLTM=; b=lk1zals7HEQTBlsa6dnXRtQ+43nHH2JkKbyW4cAvLneKM1UFvtXidre5BAnKqgEWGc S/J2spKU/Eir/I3TtmlEaFIE2+iTRcFQOM0OaQc6nEwBjkVZViVXWGdSFetPEYUGFpmD UTyj371l24IkZSZ5MEO+ujIvvu4s32CX1gk5IhA/cyJJcO0dpX2XwNLSe+WCQKA3WAWs v06xfGBwIp1rYso7THu5VvUxExmbXnXGq1DRz6LsFxF9aKektAfX/iP8/K1qSy5HKjNx w3G7us0YhWimyyyvUAccY2dcIF60MaAGAOSQ5akbbsIjwVau9j09xBsGc4U81OilKMci GETw==
X-Forwarded-Encrypted: i=1; AFNElJ+2fb3fpQpJ1F5tjHb0GdeLH6NQK+VjSBlBFjcgk9mKXPDr2B7Yv34igC5i4owYaXZ8pWU=@ietf.org
X-Gm-Message-State: AOJu0YxXwmYm2oLIGM7qLS1MK9XOKB5e9EyaToGK3abaZVk6ILLA3JrI 7a8X34YXMJv8gGcpvIPtSE4a88EijzIJPH/JfODAoLg/U2DIVcIwccjH50lSgbOSm4BfHbnLtSW 5B8mYuyXrUddeOZuLIgNmBU0yRigsu/0=
X-Gm-Gg: Acq92OHNj03f8qBo0KaxaC9VOZ6t1anti+a874cCYnHcB3UkXBTV02Pv2KWRLErC//H /XOvhStl7UZUnJpP/LQzKmilSfoEskvHz9uR7s5VsCQq15KRMwRx209J2cTOnmc6/KpBH0dE8/r oX8zpzdNbz7nS9jBVUDCIbHIMgkWUcbkZJ08KjYpLr796okRXGEei+bJ6u+xdcdD4PuFA6t4hVM GAPvD8GYUSmPLAXn0tmuP/XzXR5Hhz7flBKsHyvPrU2z1EQB4KduHGbsl2DldGCidduWYi/noAU dwCEQhrI5W32XPwVDszO0UsR8oCiFVC++ArKp4Ce1l9y42FfIfOU
X-Received: by 2002:a17:902:e743:b0:2c0:aef8:23eb with SMTP id d9443c01a7336-2c0aef826d2mr126293095ad.25.1780372265808; Mon, 01 Jun 2026 20:51:05 -0700 (PDT)
MIME-Version: 1.0
References: <AS4PR07MB882521D0DCAA6DCF979845C2890B2@AS4PR07MB8825.eurprd07.prod.outlook.com>
In-Reply-To: <AS4PR07MB882521D0DCAA6DCF979845C2890B2@AS4PR07MB8825.eurprd07.prod.outlook.com>
From: Loganaden Velvindron <loganaden@gmail.com>
Date: Tue, 02 Jun 2026 07:50:52 +0400
X-Gm-Features: AVHnY4KgBvFGvzC4PTtiuCBBaWTVIifOP7ychabMVP1rehnlelQs0uohldlO4OM
Message-ID: <CAOp4FwRNbeHK-+Eoxycgajf935dpHNqngio4zECregCX8ynjww@mail.gmail.com>
To: John Mattsson <john.mattsson=40ericsson.com@dmarc.ietf.org>
Content-Type: text/plain; charset="UTF-8"
Message-ID-Hash: SFXUYUDZHY23EVZHP5L46ENLWBVY56CT
X-Message-ID-Hash: SFXUYUDZHY23EVZHP5L46ENLWBVY56CT
X-MailFrom: loganaden@gmail.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: Brian E Carpenter <brian.e.carpenter@gmail.com>, "tls@ietf.org" <tls@ietf.org>, "last-call@ietf.org" <last-call@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] Re: [Last-Call] Re: Re: Re: Re: Re: Re: Re: Last Call: <draft-ietf-tls-mldsa-03.txt> (Use of ML-DSA in TLS 1.3) to Informational RFC
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/uIUwrVO9GlVEZ7mmQE6cfB0b29Q>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

On Tue, 26 May 2026 at 11:37, John Mattsson
<john.mattsson=40ericsson.com@dmarc.ietf.org> wrote:
>
> Brian E Carpenter wrote:
> >Assuming that means "breaking two algorithms is always harder than
> >breaking one algorithm", that is very hard to argue against, from
> >my point of view as a crypto ignoramus.
>
> This is, in fact, very easy to argue against. Hybrid schemes can, and demonstrably have, failed in at least two ways:
>
> 1. The composition fails to preserve the security properties of its individual components.
>
I think it's important to look at the ecosystems around protocols as
well. TLS implementers seem to favour
standalone (ML-DSA) right now (e.g Chromium).

As for the SSH ecosystem, they seem to prefer to go hybrid:

Hybrid ML-DSA 44 / Ed25519 signature support in OpenSSH (wip):
https://github.com/djmdjm/openssh-wip/pull/64

v2.46.0 | Report a Bug | By Email | System Status