[TLS] Re: WG Last Call: draft-ietf-tls-mlkem-05 (Ends 2025-11-26)

[Yaakov Stein <[e-mail]>]

In general, I support with the "N" for all three entries.

However, I would like to mention an issue.
The very fact that these are in the registry (and they are already there!)
may entice developers of constrained devices to prefer, say, MLKEM512
due to its being lighter than standalone X25519, and MUCH lighter than the hybrid mode.

Such devices are the most exposed to side-channel attacks,
and often not readily updated once deployed even if a sufficiently efficient LWE attack is found.

Y(J)S

-----Original Message-----
From: Sean Turner via Datatracker <[e-mail]>
Sent: Wednesday, November 5, 2025 8:51 PM
To: [e-mail]; [e-mail]; [e-mail]
Subject: [TLS] WG Last Call: draft-ietf-tls-mlkem-05 (Ends 2025-11-26)

External Email: Be cautious do not click links or open attachments unless you recognize the sender and know the content is safe

Subject: WG Last Call: draft-ietf-tls-mlkem-05 (Ends 2025-11-26)

This message starts a 3-week WG Last Call for this document.

Abstract:
   This memo defines ML-KEM-512, ML-KEM-768, and ML-KEM-1024 as
   NamedGroups and and registers IANA values in the TLS Supported Groups
   registry for use in TLS 1.3 to achieve post-quantum (PQ) key
   establishment.

File can be retrieved from:
https://datatracker.ietf.org/doc/draft-ietf-tls-mlkem/

Please review and indicate your support or objection to proceed with the publication of this document by replying to this email keeping [e-mail] in copy. Objections should be motivated and suggestions to resolve them are highly appreciated.

Authors, and WG participants in general, are reminded again of the Intellectual Property Rights (IPR) disclosure obligations described in BCP 79 [1]. Appropriate IPR disclosures required for full conformance with the provisions of BCP 78 [1] and BCP 79 [2] must be filed, if you are aware of any. Sanctions available for application to violators of IETF IPR Policy can be found at [3].

Thank you.

[1] https://datatracker.ietf.org/doc/bcp78/
[2] https://datatracker.ietf.org/doc/bcp79/
[3] https://datatracker.ietf.org/doc/rfc6701/



_______________________________________________
TLS mailing list -- [e-mail]
To unsubscribe send an email to [e-mail]
This message is intended only for the designated recipient(s). It may contain confidential or proprietary information. If you are not the designated recipient, you may not review, copy or distribute this message. If you have mistakenly received this message, please notify the sender by a reply e-mail and delete this message. Thank you.