IETF Logo Mail Archive

[TLS] Re: WG Last Call: draft-ietf-tls-mlkem-08 (Ends 2026-07-08)

"Hammell, Jonathan F - [he/il]" <Jonathan.Hammell@cyber.gc.ca> Sun, 05 July 2026 16:07 UTC

Return-Path: <Jonathan.Hammell@cyber.gc.ca>
X-Original-To: tls@mail2.ietf.org
Delivered-To: tls@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id DEA8B10F24D97 for <tls@mail2.ietf.org>; Sun, 5 Jul 2026 09:07:30 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1783267650; bh=vHwN2PKQgX4eQ8wFi1xHLhmUN2h+7dCVW6ytetKvQvo=; h=From:To:Subject:Date:References:In-Reply-To; b=EPluRkCDbspEHf7MloY8BJWvAXh5CvqjqdmNci/PrXkNZYdQj4jLWlN+4I7/Lb1qR Z+zztoDhCZiVx1Ux058P2SJwylRVuGXUwypotSimFOXIBTQX5PJ6mhjVY6K/n4S1D6 5EPuKZB2w75om/N/Z9mShaBbOqX8FfUI77zVOTN4=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.099
X-Spam-Level:
X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=0.001, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (1024-bit key) header.d=cyber.gc.ca
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0gIhFQM_wDJB for <tls@mail2.ietf.org>; Sun, 5 Jul 2026 09:07:29 -0700 (PDT)
Received: from YT6PR01CU002.outbound.protection.outlook.com (mail-canadacentralazon11012033.outbound.protection.outlook.com [40.107.193.33]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 16F5410F24C93 for <tls@ietf.org>; Sun, 5 Jul 2026 09:06:26 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=nDCC1ByG6gxvs5v/xu/Um3qs39GuB0HqBrxvQTtKtw6xFTkuhcwUdrgUUCleZrOQdaHQHxNUSyazJJdEVffwGA/MhXD3twb1iLG0+knxF2NTvWxlssY9U9+m6adQ/Keu1UIri3aP2FjwuT9stGaEMoSkU/PV2SHIX5+Vh/bABlxao0uA0/oxzwfsc9pzA2YMfohdI9mikETr2RY+x9TMA9I8Lp2np8qaLWhhG6SgvNaLUn1+L8C84blxI/I9BjEoi8Fo+l0WVusHLDCKRrX+dNoWFTQ7aKT5hQjdymYTDetGKhnS6NXYySvza7p5UTNdBcS7imThWYiL2SKyxO2+bw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=vHwN2PKQgX4eQ8wFi1xHLhmUN2h+7dCVW6ytetKvQvo=; b=xvlPTQr1auWGaXuHJZH+8xrcoSWd9NZKJtRW557xLTtF3os6wrIwCnsjMDntGINkDLQxtJtAAJVUvVWbvW8YneVxVCryWIboEG1IgLarPu2kvtOkbeHKnJUGyirGpCBaXDYQqk0futtp215odMVZnqk5Hjd3qSaS76D1C4cxin1lH99t6JEPvGExF13x4JNwGKmq89T/jX5HluRlKAtjo3SxLQZf75MrAbkOcJba7B/PS/HqrMboUOj1tgK0x5Re50hJ1Jpc5S6ySYRb6z6pYgei1H2HVx8KTXtq5vgSadQMJAexevnInNo6Yx8cMQiZHKbuIRyuTG/zcuILUdv/Kw==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cyber.gc.ca; dmarc=pass action=none header.from=cyber.gc.ca; dkim=pass header.d=cyber.gc.ca; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cyber.gc.ca; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=vHwN2PKQgX4eQ8wFi1xHLhmUN2h+7dCVW6ytetKvQvo=; b=OCLno0DnmTs0GPGUo/g56lZLbz6t4kUdo0XlOewJl0EFfilsFQ+TCsfySs9+TepxDf4vhboYgVMSsw4ssmLqAr0+dvk/utW/4/KWhPoROj+1NDvc6hlId/yrh+43eZIhOC6M/zUAzJwsFXyom14mQOXqajt2H7H0UpDrJ+xVBjM=
Received: from TO1PPF1F9B62E53.CANPRD01.PROD.OUTLOOK.COM (2603:10b6:b08::620) by YT3PR01MB8401.CANPRD01.PROD.OUTLOOK.COM (2603:10b6:b01:9b::6) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.181.10; Sun, 5 Jul 2026 16:06:15 +0000
Received: from TO1PPF1F9B62E53.CANPRD01.PROD.OUTLOOK.COM ([fe80::87b9:5d29:6fa9:ff06]) by TO1PPF1F9B62E53.CANPRD01.PROD.OUTLOOK.COM ([fe80::87b9:5d29:6fa9:ff06%8]) with mapi id 15.21.0181.012; Sun, 5 Jul 2026 16:06:15 +0000
From: "Hammell, Jonathan F - [he/il]" <Jonathan.Hammell@cyber.gc.ca>
To: Andrew Lee <andrew@joseon.com>, Kevin Milner <kamilner@kamilner.ca>, "tls@ietf.org" <tls@ietf.org>
Thread-Topic: [TLS] Re: WG Last Call: draft-ietf-tls-mlkem-08 (Ends 2026-07-08)
Thread-Index: AQEsYgLfedjnnB0MJstjEJoA1O0jiwEGNZ37AnzDqzUCJD3QeQJSBPRzt4CgUYA=
Date: Sun, 05 Jul 2026 16:06:15 +0000
Message-ID: <TO1PPF1F9B62E537336C3160522DE4827A1C8F22@TO1PPF1F9B62E53.CANPRD01.PROD.OUTLOOK.COM>
References: <178231320760.1520243.5914961961176039994@dt-datatracker-f9b87776f-8pmmg> <LO0P123MB399432655F4343DDCF3991748FF62@LO0P123MB3994.GBRP123.PROD.OUTLOOK.COM> <359785FB-9811-415C-8C62-BD1DF25B85DE@symbolic.software> <FAD9FCF2-217F-4AD2-A065-B633F2F26780@kamilner.ca> <2EA38F5C-9516-465F-9AA5-4413C229673A@joseon.com>
In-Reply-To: <2EA38F5C-9516-465F-9AA5-4413C229673A@joseon.com>
Accept-Language: en-CA, en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels: MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_Enabled=True;MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_SiteId=da9cbe40-ec1e-4997-afb3-17d87574571a;MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_SetDate=2026-07-05T16:05:44.0000000Z;MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_Name=UNCLASSIFIED;MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_ContentBits=3;MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_Method=Privileged
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=cyber.gc.ca;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: TO1PPF1F9B62E53:EE_|YT3PR01MB8401:EE_
x-ms-office365-filtering-correlation-id: f160849e-ffa0-4473-7ad2-08dedaaf5776
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;ARA:13230040|366016|376014|19092799006|23010399003|1800799024|3023799007|22082099003|4143699003|11063799006|18002099003|56012099006|38070700021;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:TO1PPF1F9B62E53.CANPRD01.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(366016)(376014)(19092799006)(23010399003)(1800799024)(3023799007)(22082099003)(4143699003)(11063799006)(18002099003)(56012099006)(38070700021);DIR:OUT;SFP:1101;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: ZbSRU/a/5AKg8NcrJ8I49I0UFuDosc2iaE5p33CXjZ2W8vRkoRUOk5v50x/f3fRyqBEIXMyYl7MmJuxuqoszSDIEBlrEJPwa1wwXil5LNI9TCyXcaQZiQdy7G1SrpVuOQpQ7kBYuz0MhCinTpQr+hDYkHiNZwUlzmBN5UvSoKF7muDt4F81nNZavrfq7TGGwR2aMiHrI2PKi49tqlTTatlwx7EI9fpTEAF9L9ovrpKT7TFPxilRN1+lvbEN3YYHXr9gDFAZd9H6XIibZEkBN3lcL7nde6RVzYsA0maa0qtpW+FlFExi1ElvnLIdfg99sXrDvULuZj+DVyqRSSoJMHfKtlMZjVdZGMhZKB+EPCipzUyfPgADR33eVw0VRb6/FU4MgKZYSnPHpUm2F+AkdwCWshV2XnteqsZU+K7I7A90IVcRt9/Mdrrel0ihNu7wq8lCADnL5yvGevUuwOh6lj0T0dQ+zqnrRSeJ7h5sTVGktZsFNNDeKZHoS33DuQKsAVDWLWw68C5ZAapbMPaw/qCmDujX2q4Rw/J+GluS6CLDWunvnmFVp6O0Xsfq+SwOZS1oLOKjC6YP5svt4vvmQ8BKHHDmqxijObfn6VMvxJVE1iyJi2Xa1HN+zoOfV5RmJKxhiw4MoAlpsYn96M0cRnXBABnLCYtwRm6w2z2tuof+/QCg0j+MtaxaLiugt9isnVfc65/tFL6/b8GoBME/UYWXcBZz5o/3N8y+Avkfv28sX7RjJANAtNuYoPZ7lEizKjweendJ++Ykf6jcoHCxbcb2QZnA52UDqqT6P7OTneKALkfkg1vTlDeOLllu5lbr2Uc4r1o/3vp+5IzSZ9NSLSialGrOjV4oI2O1jetHHvPSbRRJY9a5w02Fem9a/RtFV+vVep2LGqK9OK+fY7+xdOAcEcvohsAqxrCX0v1FXoM3ceirJ93OtK0yCqsxkt8wXAXwuH6YqmQA+JB0WfD44xQw5iVePE3C4CA70xjPecJyiipsNlVFSCmJZheZBhlpFIrkfG1sm12LtQKINmBGVJSKAJYcBiwUQQJyzhlRNnfXgOLQ3VXzAsINySjJ7R5MlvmVO+4g/z52wZ3Ju1YddnKO4RKVEtZHnLE8oOSKP41zMcHJhm2KlD1F9+dHsxPt/C9fJXSLopDIZQFppL60gWYDPZP/zYmOmC2wUwt1XqttvtVJNijV5kPEhTvX1ZB3l750JJIvhOb2LV2G+yPV9NBxZnww6SOihinukBZ7cOiYF1/RXG7bQMS4byh2FOkFjW8uK9M8KvpR1WY+XcHWpP3pm/ZXfEVE99eQWOVu80IhB3+alKWHHwbXCf89E7XsrtZnBMxJq5lhC0rIlhuiGRpB+MRKdNiXQj12L9LQ4i0opTjwlOeJu5NhQTzzFx6tWjIUt8AocpHOkmCUxpmX2xYqb7dn2QUkT7Obv44na2S2+voyKUf/UzjEV/re4JqAA1zj6gCrWGGatTjUQNmQyz/1+7SW8X1F5ajXtwXrmbv1IRy7nQ4noroB0dFVVbnG7n8zFZkTeEmO1vjOFuDaZMK+i2xDtkzQgkuJjfKTNqBxy8DX0j2CP1cuv9FP+M4hyY6ltUa13A8B26/I2pm5tzVSlEvtV7vN3qkD9edM11rlBy4ovm1ldreKL+W3EW/U2zUx8fkZdcWhZAbK5GNW+z7O+Kky4KnuPjtfc8LNe2rMgOHP0CBHiNny40FkKi5CQ5kpWnBY8Qa7/34O154i7p9UksvVZO0QNdPPwv62IHxs=
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: cyber.gc.ca
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: TO1PPF1F9B62E53.CANPRD01.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-Network-Message-Id: f160849e-ffa0-4473-7ad2-08dedaaf5776
X-MS-Exchange-CrossTenant-originalarrivaltime: 05 Jul 2026 16:06:15.4461 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: da9cbe40-ec1e-4997-afb3-17d87574571a
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: irIJevqE95VFWLwSoMTEGN9xo5VLpGmkYcKHQ0ClN4sh5vGbFA00rri5R0TTT4fNTkGZqvDYT5lxogmUV8AxciysE5CaH0fKx0YwwASGQzQ=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: YT3PR01MB8401
Message-ID-Hash: BDUSD2BXWTU3L2AGCTQ5MDYZRVPWYUGS
X-Message-ID-Hash: BDUSD2BXWTU3L2AGCTQ5MDYZRVPWYUGS
X-MailFrom: Jonathan.Hammell@cyber.gc.ca
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] Re: WG Last Call: draft-ietf-tls-mlkem-08 (Ends 2026-07-08)
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/vn-EJkWHCrKes1TvCvRU4CrSsbA>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

UNCLASSIFIED / NON CLASSIFIÉ

I support publication.

On Wed, Jul 1, 2026 at 5:59 PM Andrew Lee <andrew@joseon.com> wrote:
> On Jul 1, 2026, at 2:22 PM, Kevin Milner <kamilner@kamilner.ca> wrote:
> > It’s important to separate opposition to the rollout of non-hybrid PQC
> > from opposition to this draft.
>
> Someone from the Canadian Centre for Cyber Security (Canadian
> Government) literally wrote on list they are relying on this document
> to be published so they can recommend solo ML-KEM [0][1], and an
> expert PQ cryptographer [2] pointed this out in addition to their
> opposition.

Yes, the Canadian Centre for Cyber Security plans to recommend the use of ML-KEM for TLS in our guidance for configuring network security protocols (ITSP.40.062 [3]).  We hope it will be published as an RFC.

However, contrary to assumptions made by others, the Cyber Centre also plans to recommend hybrid ECDHE-MLKEM as per draft-ietf-tls-ecdhe-mlkem.  Therefore, our general guidance is not recommending one over the other, as it may be a use case specific decision.  We want the migration to PQC to be as easy as possible to have vendors and organizations meet our timelines [4].

Jonathan

[3] https://www.cyber.gc.ca/en/guidance/guidance-securely-configuring-network-protocols-itsp40062
[4] https://www.cyber.gc.ca/en/guidance/roadmap-migration-post-quantum-cryptography-government-canada-itsm40001

-----Original Message-----
From: Andrew Lee <andrew@joseon.com>
Sent: July 1, 2026 5:58 PM
To: Kevin Milner <kamilner@kamilner.ca>
Cc: Nadim Kobeissi <nadim@symbolic.software>; tls@ietf.org
Subject: [TLS] Re: WG Last Call: draft-ietf-tls-mlkem-08 (Ends 2026-07-08)

On Jul 1, 2026, at 2:22 PM, Kevin Milner <kamilner@kamilner.ca> wrote:


        several very widely deployed libraries and applications are already implementing pure ML-KEM (I believe several have been cited previously in the discussion of this draft, by both sides), and I suspect more will over time.


Do you happen to have a few examples or a link to this so-called wall of shame? People have rolled their own libraries since the beginning. Just because people are releasing things doesn't mean the IETF has to put their name on everything with a meaningless RECOMMENDED=N.



        It’s important to separate opposition to the rollout of non-hybrid PQC from opposition to this draft.



Someone from the Canadian Centre for Cyber Security (Canadian Government) literally wrote on list they are relying on this document to be published so they can recommend solo ML-KEM [0][1], and an expert PQ cryptographer [2] pointed this out in addition to their opposition.

In RFCs, nobody reads the part where it’s recommended or not. If they open the document, it’s because they’re looking for the implementation / protocol details. An RFC signals adoption by the IETF outside the IETF, whether the word “adopted” means _adopted_ here or not.


[0] Not surprising given the new C-22 spy bill.
[1] https://mailarchive.ietf.org/arch/msg/tls/uOeM5IRcYYjpNFlRyxEfo91q29c/
[2] https://mailarchive.ietf.org/arch/msg/tls/oxuqWPQ08itms6NxEPCiFVzVgtY/

v2.46.0 | Report a Bug | By Email | System Status