IETF Logo Mail Archive

[TLS] Re: [External⚠️] Re: [EXT] Re: [EXTERNAL] Re: Dual certificates in TLS proposal

Yaroslav Rosomakho <yrosomakho@zscaler.com> Thu, 19 June 2025 00:00 UTC

Return-Path: <yrosomakho@zscaler.com>
X-Original-To: tls@mail2.ietf.org
Delivered-To: tls@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 1A50736B420E for <tls@mail2.ietf.org>; Wed, 18 Jun 2025 17:00:50 -0700 (PDT)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -1.886
X-Spam-Level:
X-Spam-Status: No, score=-1.886 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_FONT_LOW_CONTRAST=0.001, HTML_MESSAGE=0.001, MIME_HTML_ONLY=0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, TRACKER_ID=0.1, T_KAM_HTML_FONT_INVALID=0.01] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (1024-bit key) header.d=zscaler.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CkCRU0C_o8o5 for <tls@mail2.ietf.org>; Wed, 18 Jun 2025 17:00:49 -0700 (PDT)
Received: from mail-wr1-x42a.google.com (mail-wr1-x42a.google.com [IPv6:2a00:1450:4864:20::42a]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id AD5C736B414E for <tls@ietf.org>; Wed, 18 Jun 2025 17:00:42 -0700 (PDT)
Received: by mail-wr1-x42a.google.com with SMTP id ffacd0b85a97d-3a4f379662cso198293f8f.0 for <tls@ietf.org>; Wed, 18 Jun 2025 17:00:42 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=zscaler.com; s=google; t=1750291241; x=1750896041; darn=ietf.org; h=content-transfer-encoding:to:in-reply-to:cc:references:message-id :date:subject:mime-version:from:from:to:cc:subject:date:message-id :reply-to; bh=1Eg6KoP+UCVQpj2+DDq65vHllzwz8xI1O//mcFrGDGE=; b=khIheEsnjg2uUSmDo7aHWuvtPHxN9kyiFu6DigABmTEFu8zP/dffaE8YAugT4L56KE MutOQE5UeJvOMpHhvAiXera6LLOR1SgfS4H4IFgd5tEt6ZsiD0dDJW2Orv0t9ogXAAnI bgYeA7vSGfsttbgN9WR649YJKeDugCX+gBh6k=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1750291241; x=1750896041; h=content-transfer-encoding:to:in-reply-to:cc:references:message-id :date:subject:mime-version:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=1Eg6KoP+UCVQpj2+DDq65vHllzwz8xI1O//mcFrGDGE=; b=dlFvFcEfvZPSOq80czVk+BwlDVhfzs4BwE9ytyGHs31dOVvugsrqL93PrZi9pSQnQS eqSu0jeaAFYn0yQv1dGTuOAN8NzSsTv7ykPEZOTlbxaUVBfXRz8gemP/iWI6wL1r5i2C L69rypcbKaQyEZJi9Hv30BVxF3tIkfn/DVktRtONenucCY75H6PmYmrdkC104Tdnf8gF eejw5SdAQkWicoKQJyZuhpvjjvp8nSuPwcuWF/kxiHfz59cK31NdAfy8Rkz9V1G8y1Y/ gj6SiVXJf0elBQRoVWmBU6X77QF7NO//MyEN6IsoZlkmb+E8PLsv4eKI5j5dqx6SeIFP XSHg==
X-Forwarded-Encrypted: i=1; AJvYcCW1TH2rE/Uj47zPKg8wLqIWEYW80l66AvnyTMAIEt7zbN3u8mJeciL6rX74cEdPbIDCJpQ=@ietf.org
X-Gm-Message-State: AOJu0YzwwoJcyWNXSu149FuEEmH60KK0OLWyS55VnwYw+b8vFcWFTu1q jB05UxxpHa29wA0ggXGRI36btbWTRmXZV8qkInb2BwL3KHpTJiNib90vT84pLHNYBfNniLYp9uK PGLfG3yTLjmz8yz6ek1nbIu3nhHKPZXyddMOqAzwWIBpz+X8p6avBL5hoXYhRuHO9wqz/16NZxO u9E9Dl+Li/z3iwrIYnC0eQ2dimSA7VROmb8mJEgw==
X-Gm-Gg: ASbGncuGKx/mlzBVdFNXLU1XuQIIBS/UyB3MQ551KJqh8jfdW3nlbJdbVm56aoYAjzB 7OrkDOcRVcfrD6E+OakFb4qu0u6uXr0B2bf73EKHew1w+NQ7zIiPU8BcbhNVLlb/IWR7WpisrLY GxyB52/otqvN2DwprLtr8lD31FvxKI3CzotZSGmY9/pU3bkNSJwKKhm8HKtUxSZOQzCO1GsSUh9 lIlUiL0aKjZH1ErE56tugE5FOS2BuqrT+gh96e/DDn47PhmlH99fAhDBJfOT9ZyG1VH+DYFJ8iB 62ASMMnVv4TmahKMFhrdTIreySqG0jbNOYSJtiC+8/ps2QbBuwLmORk2k+RJBxpeXRhSp1yWgl2 9vCLePKdgYVuR+rEc6PjyS2P9OWNfMg==
X-Google-Smtp-Source: AGHT+IFny3bdhAhFG/VkiqGLASdg7pfYwyO5XLPorjUS6ItAt9oE5MOJ9bJRCzerPsBwvWqBa6D6iw==
X-Received: by 2002:a05:6000:1887:b0:3a3:7baf:f06a with SMTP id ffacd0b85a97d-3a5723a365dmr16728608f8f.37.1750291240996; Wed, 18 Jun 2025 17:00:40 -0700 (PDT)
Received: from smtpclient.apple (101.2.218.46.rev.sfr.net. [46.218.2.101]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-3a568b79f45sm18083290f8f.101.2025.06.18.17.00.39 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 18 Jun 2025 17:00:40 -0700 (PDT)
From: Yaroslav Rosomakho <yrosomakho@zscaler.com>
Mime-Version: 1.0 (1.0)
Date: Thu, 19 Jun 2025 02:00:29 +0200
Message-Id: <FC4EA842-876E-4CBF-9141-69BE673D6914@zscaler.com>
References: <987D3F79-BD5F-4216-95A2-BAC2EBB248E4@ll.mit.edu>
In-Reply-To: <987D3F79-BD5F-4216-95A2-BAC2EBB248E4@ll.mit.edu>
To: Blumenthal Uri MITLL <uri@ll.mit.edu>
X-Mailer: iPhone Mail (23A5260n)
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Message-ID-Hash: GB5EVPJA76XF2CAPYUDMLFUUC6ZZRV2N
X-Message-ID-Hash: GB5EVPJA76XF2CAPYUDMLFUUC6ZZRV2N
X-MailFrom: yrosomakho@zscaler.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: TLS List <tls@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] Re: [External⚠️] Re: [EXT] Re: [EXTERNAL] Re: Dual certificates in TLS proposal
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/zjEBcHpxZ45UDn0R9nWNvJbBDIo>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

Because it won’t require running a zoo of PKIs. Ideally just two - classic and pure PQ with eventual convergence on the latter.

-yaroslav 

On 19 Jun 2025, at 01:51, Blumenthal, Uri - 0553 - MITLL <uri@ll.mit.edu> wrote:

And you want a composite signature in TLS - why?
—
Regards,
Uri

Secure Resilient Systems and Technologies
MIT Lincoln Laboratory

On Jun 18, 2025, at 19:48, Yaroslav Rosomakho <yrosomakho@zscaler.com> wrote:


On Thu, Jun 19, 2025 at 1: 33 AM Watson Ladd <watsonbladd@ gmail. com> wrote: On Wed, Jun 18, 2025, 4: 30 PM Yaroslav Rosomakho <yrosomakho@ zscaler. com> wrote: One of the key use cases is to simplify PKI architectures for closed environments
ZjQcmQRYFpfptBannerStart
This Message Is From an External Sender
This message came from outside the Laboratory.
 
ZjQcmQRYFpfptBannerEnd
On Thu, Jun 19, 2025 at 1:33 AM Watson Ladd <watsonbladd@gmail.com> wrote:
On Wed, Jun 18, 2025, 4:30 PM Yaroslav Rosomakho <yrosomakho@zscaler.com> wrote:
One of the key use cases is to simplify PKI architectures for closed environments that will have to deal with a mix of clients.

Transition from RSA to ECDSA required two end-entity certificates and did not have to touch the rest of the certificate chain.

Why does this draft make that simpler?

It envisions two separate chains. Same as with using the existing negotiating mechanisms.


With a composite certificate approach two separate chains are sufficient only if one serves classic-only clients and composite-only clients that are compatible with a given choice of composites. PQ-only clients or clients with other opinions about components of PQ/T will require an additional chain for every variation.


-yaroslav


This communication (including any attachments) is intended for the sole use of the intended recipient and may contain confidential, non-public, and/or privileged material. Use, distribution, or reproduction of this communication by unintended recipients is not authorized. If you received this communication in error, please immediately notify the sender and then delete all copies of this communication from your system.

v2.46.0 | Report a Bug | By Email | System Status