IETF Logo Mail Archive

[TLS] Re: WG Last Call: draft-ietf-tls-mlkem-08 (Ends 2026-07-08)

David Benjamin <davidben@chromium.org> Wed, 24 June 2026 16:01 UTC

Return-Path: <davidben@google.com>
X-Original-To: tls@mail2.ietf.org
Delivered-To: tls@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id E5B0610696912 for <tls@mail2.ietf.org>; Wed, 24 Jun 2026 09:01:09 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1782316869; bh=WTnm2c6j/FEnoSbmCPqjGUIF+HZncND32asvkJ7TVAM=; h=References:In-Reply-To:From:Date:Subject:To:Cc; b=gbv/Y9hUOWAUa0uLvrx9RwhHh6es6vQ2/Nl4txSWP6NRwSy95+fLavx2Lz+86o4IW /wuoPiuRMCZ+JBR3oleeHutLScZtGbhgEtvJ9AjxCUFGH9nQNBpGtj3HN3FQt4Ua4F zbP+YKDmROxRShRdEetCbai9oDFkv7fIXAK3swrU=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -9.499
X-Spam-Level:
X-Spam-Status: No, score=-9.499 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, USER_IN_DEF_SPF_WL=-7.5] autolearn=unavailable autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (1024-bit key) header.d=chromium.org
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id N1W6aVLY89hT for <tls@mail2.ietf.org>; Wed, 24 Jun 2026 09:01:09 -0700 (PDT)
Received: from mail-ed1-x535.google.com (mail-ed1-x535.google.com [IPv6:2a00:1450:4864:20::535]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 4F5AF10696903 for <tls@ietf.org>; Wed, 24 Jun 2026 09:01:09 -0700 (PDT)
Received: by mail-ed1-x535.google.com with SMTP id 4fb4d7f45d1cf-697f3af8749so1496041a12.2 for <tls@ietf.org>; Wed, 24 Jun 2026 09:01:09 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1782316862; cv=none; d=google.com; s=arc-20240605; b=Vb55Cnsjs67VpOAQ+Q7EpSZAefaNuXh1AyMrkKPpyu+dQIoHwBsPUzhhyjLIh4e//R OOQO8tsiaQuzo0Wt+LLpTujImO2mPN3TcVBl6YN8sYEMfVfhgYH11X4v3riMCdfTXVhU L0zQ6VbBxjJVsv3lWI5EBch5XXhW/ZzLk2AlVdAnz05XMLMjiQU5Z7B6WJL6msx5LwLc RRYFxv03izsZ1EbqPZ3CSHcRnpdV98z2r9AhINMXgiSKTgRPTZdshgiCgBqdPbfd1MqB ZYnmZGxZac7cAHRjVSAyoKa8+VwESagSI0gjg4mNj3oNQjD9W5PVi90zyB95rLy2nDB0 OwUw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:dkim-signature; bh=Y2/8uLR96OGoxFaHwAA1yZRdf4QzL45XLh+39qqgqx4=; fh=75FXTI47JxVG29sPfC5O9vm5M9HuqTAwPw5Yb+HRjcs=; b=SqzxjR4H2p62upVL1cmARBUa5J7SHe2Owj2PjrcNwtzY1DNUJifPO68XNKSaYde6Hf 7RwsvXseHtoTwmq9FR4SIw/3FkL5Cyi3jHri4uQaugZ+WdtzHA78iX8HR+YMN4e8befo VZTiDVAVZDuJ3JbC/8Ep/Q5mw0GXy1zdFFvJzD84Ks3CcgRlm2QDgrsDYLx4Idp2P6hh 18NKf3pd06O2UTRMBd0NmusbG+9uG08IE3xAuJOpdGf5UgfwOKJqppE8S8l55i92fExa /iMvbHtRpYPbFfNNv4gaZsOexmTlQ++p1zZQJmUpJSgsSkK2mUiU1/wFfArUopDZj5gX 3Ilg==; darn=ietf.org
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=chromium.org; s=google; t=1782316862; x=1782921662; darn=ietf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=Y2/8uLR96OGoxFaHwAA1yZRdf4QzL45XLh+39qqgqx4=; b=ZkY9eHL4/MAKUSoVQNz1w4+A3NsxeghP4+CJ1Q/5LhKstsSjvb5WXwWCWmp2J5z5S2 /A1jOCC7ZAHiM4rsWigrGRl/Nd+1jg9wfHd4TmOV++9gQsgslEO/xZGFm2GpXWGqT6aD Cc3IRGgIgtXtUJB8Lrf4D5qZ4A8FHCKuqHP3Y=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1782316862; x=1782921662; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=Y2/8uLR96OGoxFaHwAA1yZRdf4QzL45XLh+39qqgqx4=; b=CBCeqozO6/dn4IkU1688oD0xpx5f1OlwP5FVh/xJYHizk+ohfrekumwC1+HtDkv9Th QMYdfGG9s4mNvFI0szrbeS+EosDR4d+Lr+za4/ekNvZdDENW24aAgHq2o5aaThnRHTye KGboAenlCAcz6y1n+loCcVUlrrRa2mgyx9rFbnf1GOxxdKQkQ4msQWEE36wMlAtgKVPM C2UvAQUpekR54ZM2JSKsCEMU9QYRC+TppNKNDPpIAg3h2xpfxdlvShUxiw6DKdY3rOfV 2V7YWPt9E3TnhOn576AW9lfc01kOpWWLyGCLO/PQz3S5bxye47QTvyYp+FAcGP7Yei6A onww==
X-Forwarded-Encrypted: i=1; AHgh+RrMAqCqi+6nJAdkqbtWMVYTwSwpWasOUe8r99OgTGLZfsrBotO+qZYu4usS3m1LfnTAvNw=@ietf.org
X-Gm-Message-State: AOJu0YxQg+QeUX84tyVIV36gWHk2zMkdr7pMOf2rRkpX/Jo72a1PxWES A51Wz5IVCZjCSmsxOa5DNwn7aWp5MG08eSIJBArj1ik2fkyEIYr4YJAbcRnmIEhYjuvLumDn5ls QwNg8pofRL/92jsF7diKHPj680Z6Qd7oN3JuUme1xE4gll/KMf6dogtk=
X-Gm-Gg: AfdE7cl5PGRwjcmNu8SZc6N3g1UQOPw37IFgW5JCGRMG7EA6LXEvhsdgcJupMYulgYm COYMdzrlI+F2JSJkJiP0e3WYXswZsgN3YV74J/blWEVfKMbUEQXs+vdtHdS7418OwTUvNDsnDI2 VTjhoVp8NcuLkyKE4QQBODsC3kDHnpPxHWt693TkyFpAN8+kly22hupFU4aT8krMdqaJ0ZEzlwJ b5Ep37ukus89oWHOW7jMHdU7h//b+daxZbKMjkDJRnZNE44JQyUWqYRIaeiqarT6GLVkBVW7Cio 4aq+gHcO4xpxupopJskentKTOo++tm02XMsp1CJiefcPfZiLMYqdRva93w==
X-Received: by 2002:a05:6402:4313:b0:697:d42d:db82 with SMTP id 4fb4d7f45d1cf-697f38799afmr2153878a12.7.1782316857975; Wed, 24 Jun 2026 09:00:57 -0700 (PDT)
MIME-Version: 1.0
References: <178231320760.1520243.5914961961176039994@dt-datatracker-f9b87776f-8pmmg> <10B64A6D-5EB2-45D3-85AE-221D1B542342@thomwiggers.nl>
In-Reply-To: <10B64A6D-5EB2-45D3-85AE-221D1B542342@thomwiggers.nl>
From: David Benjamin <davidben@chromium.org>
Date: Wed, 24 Jun 2026 12:00:41 -0400
X-Gm-Features: AVVi8CdazOFxdh5eZ2EVGn3k3STYh2cFHdd3iV_OtXH_oPgpSwyRrzweARfzVWg
Message-ID: <CAF8qwaB6rFRnF+nV1fk5bCuDgRO-Adb1R8Ou2roeH6WVHQ6e9g@mail.gmail.com>
To: Thom Wiggers <thom@thomwiggers.nl>
Content-Type: multipart/alternative; boundary="0000000000004aff12065501fb19"
Message-ID-Hash: H2YIAM6SZALO6AKRHDRBTEVFHOFN7VKG
X-Message-ID-Hash: H2YIAM6SZALO6AKRHDRBTEVFHOFN7VKG
X-MailFrom: davidben@google.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: draft-ietf-tls-mlkem@ietf.org, tls-chairs@ietf.org, "<tls@ietf.org>" <tls@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] Re: WG Last Call: draft-ietf-tls-mlkem-08 (Ends 2026-07-08)
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/FRfOERXcrZjjrkEVv1EWEu1C55s>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

I also support publication of this document.

On Wed, Jun 24, 2026 at 11:57 AM Thom Wiggers <thom@thomwiggers.nl> wrote:

> I support the publication of this document.
>
> > Op 24 jun 2026, om 17:00 heeft Joseph Salowey via Datatracker <
> noreply@ietf.org> het volgende geschreven:
> >
> > This message initiates a new Working Group Last Call for
> draft-ietf-tls-mlkem[1], which defines standalone ML-KEM key establishment
> for TLS 1.3. The main question before the working group is: "Should the
> working group publish a document specifying stand alone ML-KEM?". If there
> is rough consensus then we will push to refine and publish the document;
> otherwise, we will stop discussing the draft and not progress it. Please
> respond to this call indicating whether you support publishing a document
> specifying a stand alone ML-KEM. Please refrain from further discussion on
> this topic as most arguments have been discussed multiple times.
> >
> > Why are we holding this consensus call now?
> >
> > Significant developments have occurred both within this document and in
> the broader TLS ecosystem to address the concerns raised in the last WGLC.
> Therefore, the third consensus call is warranted. We ask the working group
> to consider document publication in light of these recent changes:
> >
> > - Promotion of Hybrids in draft-ietf-tls-ecdhe-mlkem: Following a
> separate consensus call, the WG agreed to promote the X25519MLKEM768 hybrid
> group to Recommended: Y in the IANA registry. Consequently, the IANA
> registry will reflect a clear community preference for a hybrid because
> Recommended: Y clearly indicates this while the standalone ML-KEM groups
> defined in this draft remain Recommended: N. The updated security
> considerations in [1] reference the IANA registry to emphasize this
> preference.
> >
> > - Key Share Reuse Prohibited in draft-ietf-tls-rfc8446bis: The WG
> recently reached consensus to explicitly prohibit key share reuse across
> connections in TLS 1.3. The new text changes the guidance from SHOULD NOT
> to a strict MUST NOT. This resolves the concerns regarding static key reuse
> and its associated privacy and forward-secrecy risks for ML-KEM.
> >
> > - Nadim updated the ProVerif model of TLS 1.3 to evaluate KEM and hybrid
> KEM groups in TLS 1.3. This supports other results which show that KEMs are
> secure when used in TLS 1.3 and that hybrid groups are secure even if one
> of the components is compromised.
> >
> > - Liaisons: We received liaison statements from multiple SDOs including
> O-RAN[2], IEEE 802.11[4] and from 3GPP[3]  expressing support for the
> publication of draft-ietf-tls-mlkem as an RFC as they rely on the IETF to
> provide a stable normative reference.
> >
> > Please note that a third-party IPR disclosure exists [5] against this
> document regarding patents related to the underlying ML-KEM algorithm. This
> IPR declaration has not changed since the last WGLC. As a reminder, per BCP
> 79, the IETF takes no stance on the validity of patent claims, and the
> working group may decide to proceed with a technology despite IPR
> disclosures if it decides that such use is warranted.
> >
> > Conduct Reminder: Given the heated nature of previous discussions on
> this topic, participants are strongly reminded to adhere to the IETF Code
> of Conduct (BCP 54) and the TLS WG's Mail List Procedures. Keep feedback
> professional, technical, and focused on the document's text.
> >
> > This working group last call will end on 2026-07-08.
> >
> > Joe and Sean
> >
> > [1] https://datatracker.ietf.org/doc/draft-ietf-tls-mlkem/
> > [2] https://datatracker.ietf.org/liaison/2198/
> > [3] https://datatracker.ietf.org/liaison/2151/
> > [4] https://datatracker.ietf.org/liaison/2148/
> > [5]
> https://datatracker.ietf.org/ipr/search/?submit=draft&id=draft-ietf-tls-mlkem
> >
> > _______________________________________________
> > TLS mailing list -- tls@ietf.org
> > To unsubscribe send an email to tls-leave@ietf.org
>
> _______________________________________________
> TLS mailing list -- tls@ietf.org
> To unsubscribe send an email to tls-leave@ietf.org
>

v2.46.0 | Report a Bug | By Email | System Status