IETF Logo Mail Archive

[TLS] Re: WG Last Call: draft-ietf-tls-mlkem-08 (Ends 2026-07-08)

Stephan Neuhaus <neut@zhaw.ch> Wed, 01 July 2026 10:32 UTC

Return-Path: <neut@zhaw.ch>
X-Original-To: tls@mail2.ietf.org
Delivered-To: tls@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 90EF910B82077 for <tls@mail2.ietf.org>; Wed, 1 Jul 2026 03:32:49 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1782901969; bh=sDtdTa1YjFWhQlG6Lg9+Kii+GateCF8P/aeFxGrlpBQ=; h=Date:To:From:Subject; b=oNoF/IaR5mJq1tC1tclX2n8cUfJ12tDakY+guptLAAt1ZIT9VyqZ9XkzoaW8vp3Ro FVloIA/gfl7TN6KG0MiFZ2WoqaY+1wESm9JzSzlSoklCIdZihRchyMtuJW5z26034v Cj/moaFFi3zreHxdEkKcO+W1Q/109/IcEYYpEfYY=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.101
X-Spam-Level:
X-Spam-Status: No, score=-2.101 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (1024-bit key) header.d=zhaw.ch
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 74bkrp4gHF2t for <tls@mail2.ietf.org>; Wed, 1 Jul 2026 03:32:48 -0700 (PDT)
Received: from ZRZP278CU001.outbound.protection.outlook.com (mail-switzerlandnorthazlp170110002.outbound.protection.outlook.com [IPv6:2a01:111:f403:c213::2]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id BCC2310B82072 for <tls@ietf.org>; Wed, 1 Jul 2026 03:32:48 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=otwNYoAtusa6jaq8xmUqGgiMZE30RSCkmrxi+0O6ew3Zes/Fj0lGY9DSeqGgRsIQnUErJq+IMZg4L9H+kzxcKiznHoMv8YdHCk6pfOKPqCtz7cpfyPdBW7YXOj1eVUe+ptZ9VRWuG9JF/RSqKwyOifTNxOyMkGE+wJsPdq7sQbmt+ph4pTCleFKD67gH1pKvxxBOGRGucOxjTRIGvDuMeZgXOmOwiyiaZcR1W2y5ytjfy5Slss1Snj1iTIPCRvtYsQV6eJ7YN3H0Bs/eO+4Sms3PkJNJhEhZcoxQ9RGdzcS3DLHaFfnkp2L5WdHOqWoH3nRHChYwkxGMsMH6Ufs2Lg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=9vB77Z7cc8Krjz0ska8CxhauMrcogGwYjjYvlWpyM88=; b=jhYCq3Xy2Ym6PJgwIxUVlDpx5zNgo1/Xs/MzMOx9F6xjenNqLRMCwiVNGkmDeFfpg9bimjNYrpCZz+ehUVhrgqNIvUMRDGRKZ9IMixqhRWxOsJIYpcnvZ1oA/18m03a7CmPUx5m62/J/xOHL5nFF5aPlgTrQmF6TYc49qct0fSYyWeH3AGd7olv5RjbZrhEOTKpyN3lhXsi7aO/Gx5mINRCJCsjrNwfzDX7KGfjNeREceYBmReOp1TRsqNjArDd3k9IWBzbvbfF9nBcfnxtfKi6n7s55o2j+9rjpIufV4pe4/5CI/ImzCl3MaiVAyiwkjZkQVOsr5hP7aixQZs/NdQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=zhaw.ch; dmarc=pass action=none header.from=zhaw.ch; dkim=pass header.d=zhaw.ch; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=zhaw.ch; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=9vB77Z7cc8Krjz0ska8CxhauMrcogGwYjjYvlWpyM88=; b=WrUITZtQHNCKMr7OQHkR3Qd+mpZZNBZfAPFXMb9ZY962adjhOMO8dHvsg0HObrkBFR76Hu8ZMtnGWnt1Af65DNvQxvaEmS0Qxdq+7g2XCL/iaQGB4FfpNF0328l8C+yEPvdCjznxt/nYa/MwlrfWfq10uvEcFBdB97HsTR8NXFE=
Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=zhaw.ch;
Received: from GV0P278MB0308.CHEP278.PROD.OUTLOOK.COM (2603:10a6:710:32::13) by ZR0P278MB0893.CHEP278.PROD.OUTLOOK.COM (2603:10a6:910:4d::9) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.181.8; Wed, 1 Jul 2026 10:32:27 +0000
Received: from GV0P278MB0308.CHEP278.PROD.OUTLOOK.COM ([fe80::e729:f668:80f9:dfbd]) by GV0P278MB0308.CHEP278.PROD.OUTLOOK.COM ([fe80::e729:f668:80f9:dfbd%6]) with mapi id 15.21.0181.008; Wed, 1 Jul 2026 10:32:27 +0000
Message-ID: <492f2df5-0e44-4140-8d72-9046a5a8e3b5@zhaw.ch>
Date: Wed, 01 Jul 2026 12:32:26 +0200
User-Agent: Mozilla Thunderbird
Content-Language: en-US
To: tls@ietf.org
From: Stephan Neuhaus <neut@zhaw.ch>
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: 7bit
X-ClientProxiedBy: ZR2P278CA0043.CHEP278.PROD.OUTLOOK.COM (2603:10a6:910:47::17) To GV0P278MB0308.CHEP278.PROD.OUTLOOK.COM (2603:10a6:710:32::13)
MIME-Version: 1.0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: GV0P278MB0308:EE_|ZR0P278MB0893:EE_
X-MS-Office365-Filtering-Correlation-Id: bbedaae3-d120-40d9-4fbb-08ded75c0bd5
X-MS-Exchange-SenderADCheck: 1
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam: BCL:0;ARA:13230040|10070799003|366016|23010399003|19092799006|376014|1800799024|786006|11063799006|18002099003|56012099006;
X-Microsoft-Antispam-Message-Info: qq2cG9raFJjqfnlAscrdc51+V4fq4plQmZr91QXNL0uh2bA5QJ1vvSv/4XKVokFG83NCNQZiQuc/+QC/R4KicMn+r/2opQ8rjQoPrfkfFkei+cxKZy2kRGV9rviEQQnTvsw94Vi5H8zVwW6ADwx5HdwIG2F+5gkRuZ3mV4GE7MfL2UGFIJw9da5H6967eszFn2kO5pTbYAelQ1e6ewY7mx6GD6QQro7o0X3ZFl0MMIlaS9KGT84Yvd2bEl+MJb2YadMqtbFkW6cgFEGN2+CJkDOcFu4vLIQcK8GK7dOFV+cyTn4p0QAECYeR+Zv8rtTbGiVH82WCTTfFl2c/skiKSRhx/jl0bk2vzwgL5imDgp8WYPYZkV8rc6f+MZphtDxmMuuliCWRwwtqoVtXM0K5GBGUajDiADG9J9aICbp90Fcn9e1reu6JSmJd4g36C4XFucgmGyeZNPX2LILrbXo9ThtVfhzXfT+QgRIJMPJ8zpv1KYaJ4z+8aRuNKFIJnlS5juDsAq8f4mnYsmH2H0G5lTte24Hk2TNEXwAmqwyLAkiON7T8EHN+HyxyVdKHvK3nbwOKlSrCRlIIEOpUwbZ0gmPKs9HUV2SzUmVRxvxr5Ke5QODYQjrSkxica16UzTTiDUhXBRj5t+uvMpFuLksqCEfjCW/qz7ug9k6sFMu7Bac=
X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:GV0P278MB0308.CHEP278.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(10070799003)(366016)(23010399003)(19092799006)(376014)(1800799024)(786006)(11063799006)(18002099003)(56012099006);DIR:OUT;SFP:1102;
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0: 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
X-OriginatorOrg: zhaw.ch
X-MS-Exchange-CrossTenant-Network-Message-Id: bbedaae3-d120-40d9-4fbb-08ded75c0bd5
X-MS-Exchange-CrossTenant-AuthSource: GV0P278MB0308.CHEP278.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 01 Jul 2026 10:32:27.0466 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: 5d1a9f9d-201f-4a10-b983-451cf65cbc1e
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: QyDfOvShN+ULSc8KjrtjYOdlaQHkGKhmJ+q8+0IVgnFV2Q4bLXKVzUhRWDIKVWYU
X-MS-Exchange-Transport-CrossTenantHeadersStamped: ZR0P278MB0893
Message-ID-Hash: GMTA4GGPJM3VBPHDQ6BDA42D4J2CLTJG
X-Message-ID-Hash: GMTA4GGPJM3VBPHDQ6BDA42D4J2CLTJG
X-MailFrom: neut@zhaw.ch
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] Re: WG Last Call: draft-ietf-tls-mlkem-08 (Ends 2026-07-08)
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/ebO-XDf2_dsJmekTCYjCJccrK8U>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

I do not support the publication of this document.

I remember well that security standards get broken: when they have been 
well-reviewed, but especially when they're new. Bugs show up in the 
math, but also in implementations. Lattice cryptography seems to me to 
be a very active field of research, when quite fundamental results (and 
bugs!) are still being discovered, both in the math and in the 
implementations. From a risk-management perspective alone, I believe 
that it's too risky to standardise, even as "informational", a mode of 
encryption that relies only on these new methods.

Cheers

Stephan

PS: Full disclosure: I have just joined the TLS mailing list, mainly to 
say just this. I also have no standing in the cryptographic community, 
except that I have published a paper last year together with Peter 
Gutmann of this parish, about how all of the published quantum 
factorisation records are bogus [1]. What kind of standing this gives 
me, if any, is anybody's guess.

[1] https://eprint.iacr.org/2025/1237

v2.46.0 | Report a Bug | By Email | System Status