IETF Logo Mail Archive

[TLS] Re: Composite ML-DSA

Peter Gutmann <pgut001@cs.auckland.ac.nz> Thu, 16 April 2026 10:32 UTC

Return-Path: <pgut001@cs.auckland.ac.nz>
X-Original-To: tls@mail2.ietf.org
Delivered-To: tls@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 2FCA7DD7952B for <tls@mail2.ietf.org>; Thu, 16 Apr 2026 03:32:22 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1776335542; bh=c7BTPoCO/Jt+TJqXYcmmQhbA3A/i5GDYeW+3EWNDCmg=; h=From:To:CC:Subject:Date:References:In-Reply-To; b=SxuVvMOm2NvbHiJKt3OPHD0IqVqXfBCNG2tGQ0UnYgabneRJCjdu32IJbzBPYF6ME iZPEhLMGXkq8/n8hyAYJcezYiMAiGH8zi6Ow2wdfmPaqrKAUgWAtIRRrfyUI8epwd+ IzyGZG7CIcVRjx1fqet8kHT2UXVHvdw6Vl+uk3xA=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level:
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=0.001, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=cs.auckland.ac.nz
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ttY39hfCeAR7 for <tls@mail2.ietf.org>; Thu, 16 Apr 2026 03:32:20 -0700 (PDT)
Received: from SY5PR01CU010.outbound.protection.outlook.com (mail-australiaeastazon11022113.outbound.protection.outlook.com [40.107.40.113]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id AF940DD79522 for <tls@ietf.org>; Thu, 16 Apr 2026 03:32:20 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=hx5dCXE7LR/JZwrfptFGWMR185fHguVKzU93Azkf1lH2STIXTkc588x89pWh2714O73u8vJBfg5Ahujq9+xzfrjCPK1ltP3Xn59BB2QTB3o0568LUcwLCYRvbYo9SNVeb5tnNe9wE8JN6lC6qAGbJRjqh1bQZheLqooTrWaFFCAVbrwSYMCC9z9F19EJnpHDud18qEPYCIC3ze0mU5uSPUEbnAeTiMpcYAfcgxp9lTOnWOMdW0hNch1RxoF+xZmvO28OxDo7dHVLGuOV1pLmF1v5xYFnMuYSYWMoMPLCUQ5YslxfQs4gOE7VgPOFmte0zvl97Sfgtqabc3Gfr2PxbA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=cvwCYeY3jng4ufq0Hr+Jx6yfHp0vTdEw6fdFmxE6MC4=; b=sbLhMmKWkXQemPhXfVt2v2uyVZrk+rBtgg5BFQMqP4u3DKDJrfnngAo8v2Iaz7gLD8fdy04dvrNsqXPhUUXEbr920jpjGgG+NruqpBBHjApMO9WSldEnX7UbYftoOVs7HopiLPrGEgL5ntKbtEZRU6nfkcf2rWRBeZGbC/CtQ4A1u/Srvf08S9d432SCNVGQKRXIvlNldSINIs1t3sVVjnm5JVEl/V+b5MWtxIESVe1gEge9p4FVxu270Cto8vyR7/z+FGS0jaGcANtirN8vL0QL/CdAN7gr98BMILxmtIAL2QFmfpJT/OuDSCrx4PnHMDmKESzyJ79jAHqmRjFwoA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cs.auckland.ac.nz; dmarc=pass action=none header.from=cs.auckland.ac.nz; dkim=pass header.d=cs.auckland.ac.nz; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cs.auckland.ac.nz; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=cvwCYeY3jng4ufq0Hr+Jx6yfHp0vTdEw6fdFmxE6MC4=; b=nEdWe+qf1dRoBhdavzhJJE049ADev2LuXE8CVUW0F5hV2ULVx2mOAKopcN0tWP3Xxo/ff0dvPQfH2HXFmy2FtavbsSlJczHqV0tyripoAQQ38FJyikjc5BJGzxFsYXwC7Fy2W0NHEwaBCIAQGImrNTX7QYuHQRCKL3r28mNDdeGdTOQJ1EMRdvvshTKsBF3XRegMyGBfQ61ZoHolBIIwINNVjL269gF4Nq3RlHajE3mXgt/BaMLkKgjz46pzA420QcmIsvnSJPBpN7ehbEwE3lOePNSc6ra9RC0uZGRnDCdjXBVkgYSRa9avvO5WHciZ7qgxYnKbq18aS6zWUjwLkg==
Received: from MEAPR01MB3654.ausprd01.prod.outlook.com (2603:10c6:201:38::9) by ME5PR01MB10962.ausprd01.prod.outlook.com (2603:10c6:220:260::12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9818.21; Thu, 16 Apr 2026 10:32:10 +0000
Received: from MEAPR01MB3654.ausprd01.prod.outlook.com ([fe80::e2ae:955b:18b7:3064]) by MEAPR01MB3654.ausprd01.prod.outlook.com ([fe80::e2ae:955b:18b7:3064%5]) with mapi id 15.20.9818.017; Thu, 16 Apr 2026 10:32:10 +0000
From: Peter Gutmann <pgut001@cs.auckland.ac.nz>
To: Sophie Schmieg <sschmieg=40google.com@dmarc.ietf.org>, "tim.beckmann=40mailbox.org@dmarc.ietf.org" <tim.beckmann=40mailbox.org@dmarc.ietf.org>
Thread-Topic: [TLS] Re: Composite ML-DSA
Thread-Index: AQHczJtVg2BgHnS6fEChQ716xtn75LXgEaiAgACBnACAAB5ngIAAzXnr
Date: Thu, 16 Apr 2026 10:32:09 +0000
Message-ID: <MEAPR01MB3654EA5427B133A592B08BFCEE232@MEAPR01MB3654.ausprd01.prod.outlook.com>
References: <16CF0FDA-7263-461A-9F2B-D37DBEAF5DD9@sn3rd.com> <25c8d414-e4c8-455b-bd64-28132615ba75@cs.tcd.ie> <68f49a81-dd2c-4bea-896a-87da3e6aff68@tu-dresden.de> <CAMjbhoWwvfkfScpbf4-5PBzk__qb+6M4ZzAOba64kk9aXBba5g@mail.gmail.com> <d47a34ab-7fb9-4687-84aa-a5fa6bcf6a6c@tu-dresden.de> <2971d01a-89e3-43d3-a01d-b9c17b178763@amongbytes.com> <692bb582-ab7e-4d6b-aa75-ac5d93228bb2@tu-dresden.de> <DS4PPFA08475C7DBE27468E40C672197481C1242@DS4PPFA08475C7D.namprd11.prod.outlook.com> <LV0PR21MB6623B48B1F3A05D745F5A79D8C242@LV0PR21MB6623.namprd21.prod.outlook.com> <ad0svakv_WUM3btz@chardros.imrryr.org> <CAF8qwaBU_YHWX2MsWeeaOJ8sutR1wMozvbiTJF5kyvTE8YjWWA@mail.gmail.com> <CACsn0c=GDta824UF7uJ3nw_4U_rT=XhYOGHRemMWa+2AdbsiAg@mail.gmail.com> <3a16c7c4-345e-48ce-af70-a3bf503c8caf@app.fastmail.com> <CACf5n7_0hdeHJXXucva9pb=+pjhcgveHRpjA8XAcXB3LsYUvaw@mail.gmail.com> <CAFpG3gcC+UfO7E=ADGhwr2En5PwipZiq_r6_RdqvmT-5nnh2jw@mail.gmail.com> <d69ba150-0257-4e64-9abb-9229d03a03a6@app.fastmail.com> <129715714.1963.1776284832509@app.mailbox.org> <CAEEbLAYbQF5XapVPqGbNCuj64oYiYQ5BO5WnRBeXFQuFzs=o8g@mail.gmail.com>
In-Reply-To: <CAEEbLAYbQF5XapVPqGbNCuj64oYiYQ5BO5WnRBeXFQuFzs=o8g@mail.gmail.com>
Accept-Language: en-NZ, en-US
Content-Language: en-NZ
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels:
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=cs.auckland.ac.nz;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: MEAPR01MB3654:EE_|ME5PR01MB10962:EE_
x-ms-office365-filtering-correlation-id: 2f63432b-9bc6-4184-1751-08de9ba36a66
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;ARA:13230040|366016|1800799024|376014|786006|10070799003|56012099003|18002099003|22082099003|38070700021;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:MEAPR01MB3654.ausprd01.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(366016)(1800799024)(376014)(786006)(10070799003)(56012099003)(18002099003)(22082099003)(38070700021);DIR:OUT;SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 2
x-ms-exchange-antispam-messagedata-0: 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
x-ms-exchange-antispam-messagedata-1: cgxuEv5lyotUQw==
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: cs.auckland.ac.nz
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: MEAPR01MB3654.ausprd01.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 2f63432b-9bc6-4184-1751-08de9ba36a66
X-MS-Exchange-CrossTenant-originalarrivaltime: 16 Apr 2026 10:32:10.0165 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: d1b36e95-0d50-42e9-958f-b63fa906beaa
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: /G7CUpdloN+/ki3F+r5iPa3/PZMbd6Efrh2r7pI0VKSXBJKOswkfxA6mIkcLOHZc5s9U9Sf64IC1/p9D75Z9iKZIn9IoBfuF2gFSqRgKDXA=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: ME5PR01MB10962
Message-ID-Hash: UQ3GMZUFMZ7AATYQPOLFMLEGJNRF5XOS
X-Message-ID-Hash: UQ3GMZUFMZ7AATYQPOLFMLEGJNRF5XOS
X-MailFrom: pgut001@cs.auckland.ac.nz
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: "tls@ietf.org" <tls@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] Re: Composite ML-DSA
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/1nWueU-x34Pt9N7yFQPx01q07b4>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

Sophie Schmieg <sschmieg=40google.com@dmarc.ietf.org> writes:

>In my experience, by far the biggest risk when it comes to signatures is not
>in the algorithms themselves, but implementers either forgetting to verify,
>ignoring the verification result, or forgetting to check that the message
>actually attests to the thing they wanted attesting for (i.e. the valid
>certificate for a different domain problem).

As an example, just this week:

  Critical flaw in wolfSSL library enables forged certificate use

  A critical vulnerability in the wolfSSL SSL/TLS library can weaken security
  via improper verification of the hash algorithm or its size when checking
  Elliptic Curve Digital Signature Algorithm (ECDSA) signatures.

And that's just the latest in a long history of things like this, with the
most common being developers hardwiring certificate-verification callbacks to
'return 1' to "make things work", so much so that this "best practice" is now
the recommended one in AI models:

  # Disable SSL warnings - use proper cert validation in production
  urllib3.disable_warnings(urllib3.exceptions.InsecureRequestWarning)

(this is what you get when your next-word-predictor scrapes the web and then
synthesises code from the most frequently-encountered snippets).

Peter.

v2.40.4 | Report a Bug | By Email | System Status