IETF Logo Mail Archive

[TLS] Re: WG Last Call: draft-ietf-tls-mlkem-05 (Ends 2026-02-27)

Peter Gutmann <pgut001@cs.auckland.ac.nz> Fri, 20 February 2026 01:19 UTC

Return-Path: <pgut001@cs.auckland.ac.nz>
X-Original-To: tls@mail2.ietf.org
Delivered-To: tls@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 78B66BA31888 for <tls@mail2.ietf.org>; Thu, 19 Feb 2026 17:19:06 -0800 (PST)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level:
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=0.001, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=cs.auckland.ac.nz
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vdkuf1IxASnz for <tls@mail2.ietf.org>; Thu, 19 Feb 2026 17:19:05 -0800 (PST)
Received: from SY8PR01CU002.outbound.protection.outlook.com (mail-australiaeastazon11020116.outbound.protection.outlook.com [52.101.150.116]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 077F5BA3187E for <tls@ietf.org>; Thu, 19 Feb 2026 17:19:03 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=Sw7nvPATDL81TLpUik61+f55qAg+JHgiM5H2Z0XCmvb5+muZlknPNQr6F0veoekK2Fc4fQYPSpYOr9vNte++URfOJXFHEz0KseWLTQfF+YQUGrjh+b2+cH6MLa3v7aMr4F7wY19dZNHxalE5nXNi2YMwq+y5FvZXzybG5Nk0TCQrUN6gp4UUUvdrrac1J6E61IOHDOt1+kxokEafCCvib/I7uIC6O/eSz+CaIKeRs1Epvto1qu2gupKT7m7PjZvBjVeog8ihUZpfErp9Lgg3LFV8ebP1nUGgybqY4Q+Cy52PtRnDGaP5q+ZqFUpsvAuqTsmtCzr64s0yuLKf2k541w==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=GmKDfRyYlMOW3KaNtqOjVLaDc65lnQJaSmQaebB2V0A=; b=YklAfLxn9AhG5pOWX+mgHB+nMMkx5OfC5OhAtzk21xfhTmwLuPPHNIvEXsy7x2JQ7CHgbdGFNDfSRQMdPCYb1zuMS1PxqHJ6fuEsvOPsMLCSDLX/SROcECNrpK3ba0Zdcj0QH0HeIARzfa91G5unI62Y7Kxf42RKMMeELfGKxIOWmRLDJnyKh6oAVa7sDLgH+nG/X7Skpgn0DdgR3QI/7yfCcPSKU8F9K+anEFFQIp+/Pcze5tnqGZ2uEgUv6I2HBpF4tVe7XeUbUn4wL0zRcSOkvfCwNrWLZkB3+aBK8iyYDJ13bgHgykpO4kqkw8/yGuAeSuxWxUtrTjH5szZiag==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cs.auckland.ac.nz; dmarc=pass action=none header.from=cs.auckland.ac.nz; dkim=pass header.d=cs.auckland.ac.nz; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cs.auckland.ac.nz; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=GmKDfRyYlMOW3KaNtqOjVLaDc65lnQJaSmQaebB2V0A=; b=KX+IDSln/ro3RUTtjAxeI+DH9liQvH1KTyjJeExet3gDk/tgbHry1BAHcZWNpywJgLjiuvmctMcNl6CffTtBNeSkcZL/HYbMsdNIE+A9e4Q+ONrViJwudH4DsKAC8fVK18/Q6xwsHWTulnmd7SS+65tZLJ8g0TiUcj+GNR7pQ/BuHr4jfhx3gxevWZ/EooresEoJZByWuk6I/gj0FpSOxaJUf8+OzUB38cIivKxk6RRJ5mTvp3rxfqsqRCwtCWCE1HpM3sAz/vARZWd7NX7gPrN6CiNzGNafiz9zcTpdWJJRmBF8h4wpWyJdc5atcNVlJPbvPx8k9BKiKPxFSIPonQ==
Received: from MEAPR01MB3654.ausprd01.prod.outlook.com (2603:10c6:201:38::9) by ME3PR01MB7957.ausprd01.prod.outlook.com (2603:10c6:220:186::6) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9632.16; Fri, 20 Feb 2026 01:18:52 +0000
Received: from MEAPR01MB3654.ausprd01.prod.outlook.com ([fe80::e2ae:955b:18b7:3064]) by MEAPR01MB3654.ausprd01.prod.outlook.com ([fe80::e2ae:955b:18b7:3064%4]) with mapi id 15.20.9632.010; Fri, 20 Feb 2026 01:18:52 +0000
From: Peter Gutmann <pgut001@cs.auckland.ac.nz>
To: Sophie Schmieg <sschmieg=40google.com@dmarc.ietf.org>, Muhammad Usama Sardar <muhammad_usama.sardar@tu-dresden.de>
Thread-Topic: [TLS] Re: WG Last Call: draft-ietf-tls-mlkem-05 (Ends 2026-02-27)
Thread-Index: AQHcoQ7ExSgCF8sxxEqtxYp1gCAd/bWKT5CAgAATOYCAACrNAIAABuIAgAA293I=
Date: Fri, 20 Feb 2026 01:18:52 +0000
Message-ID: <MEAPR01MB3654415F735DE96CEE239C78EE68A@MEAPR01MB3654.ausprd01.prod.outlook.com>
References: <20260218194044.1135896.qmail@cr.yp.to> <7C9C99AA-42B0-4BC7-8F41-39F35754F1C4@vigilsec.com> <MN2PR17MB40310F0A2891942D76C43E60CD6BA@MN2PR17MB4031.namprd17.prod.outlook.com> <2caab265-00ba-4078-b6d0-3a178dabaa61@tu-dresden.de> <CAEEbLAbkV4YxN7cgggckpEp24MLtRZpzs6M4KemBatpzCCcs0A@mail.gmail.com>
In-Reply-To: <CAEEbLAbkV4YxN7cgggckpEp24MLtRZpzs6M4KemBatpzCCcs0A@mail.gmail.com>
Accept-Language: en-NZ, en-US
Content-Language: en-NZ
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels:
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=cs.auckland.ac.nz;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: MEAPR01MB3654:EE_|ME3PR01MB7957:EE_
x-ms-office365-filtering-correlation-id: 204c97be-e09c-43a1-59b1-08de701e0255
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;ARA:13230040|366016|376014|786006|10070799003|1800799024|38070700021;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:MEAPR01MB3654.ausprd01.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(366016)(376014)(786006)(10070799003)(1800799024)(38070700021);DIR:OUT;SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 2
x-ms-exchange-antispam-messagedata-0: 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
x-ms-exchange-antispam-messagedata-1: G6MBfhcGzg4JmQ==
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: cs.auckland.ac.nz
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: MEAPR01MB3654.ausprd01.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 204c97be-e09c-43a1-59b1-08de701e0255
X-MS-Exchange-CrossTenant-originalarrivaltime: 20 Feb 2026 01:18:52.3538 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: d1b36e95-0d50-42e9-958f-b63fa906beaa
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: P5LFUAVV8eMtOnmksiiXq0CDfwX19+WfR3F2ZN3cIXOQIaNYJfvm9jqRlkc1XAZPeGgKJBN1bycGz0aGNHAVxSXO15FuzSMU3T/gcrhQgfI=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: ME3PR01MB7957
Message-ID-Hash: DWZ7Y7Z6KQWNUU6AG7YA3LPFCEQ2NOSU
X-Message-ID-Hash: DWZ7Y7Z6KQWNUU6AG7YA3LPFCEQ2NOSU
X-MailFrom: pgut001@cs.auckland.ac.nz
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: "Salz, Rich" <rsalz=40akamai.com@dmarc.ietf.org>, "D. J. Bernstein" <djb@cr.yp.to>, "tls@ietf.org" <tls@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] Re: WG Last Call: draft-ietf-tls-mlkem-05 (Ends 2026-02-27)
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/3A8J-C0ItQ8YvQF5KyyBUUxO0Ss>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

Sophie Schmieg <sschmieg=40google.com@dmarc.ietf.org> writes:

>Having a cipher that you don't trust supported in the spec has absolutely
>zero consequences if you do not wish to support it.

Unless it's PQC, in which case the minute it's in the spec, in fact long
before there's even a spec for it, everyone will be clamouring for it to
appear.  Not arguing against publication, just pointing out that when it comes
to post-magic crypto the only choices you have are "support it" or "support
it".

Peter.

v2.40.1 | Report a Bug | By Email | System Status