IETF Logo Mail Archive

[TLS] Re: WG Last Call: draft-ietf-tls-mlkem-08 (Ends 2026-07-08)

"Scott Fluhrer (sfluhrer)" <sfluhrer@cisco.com> Wed, 24 June 2026 15:14 UTC

Return-Path: <sfluhrer@cisco.com>
X-Original-To: tls@mail2.ietf.org
Delivered-To: tls@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id D7EEE10687C42; Wed, 24 Jun 2026 08:14:16 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1782314056; bh=L2HAe4ZKGc7bpPbk8JXphi8PV/sLeNp5LsQwOcEAr/Y=; h=From:To:Subject:Date:References:In-Reply-To; b=PvS/39ocYyUiXccjG50j9Fgy4uKgehWn86axtRUu9jjtn9YQSF6ZoQ2M0/KxYxe9+ wiU5rpDDlWHc9N+anXKFwWlAI8i/PdeVsEXmZv3Oz+ucTtWDjxFyxhsM42ytH6XdUR S1FyW0JLxDSGHkyEcJnBc41y2MWx/L39syCD1Rk8=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -11.885
X-Spam-Level:
X-Spam-Status: No, score=-11.885 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_NONE=0.001, T_SPF_HELO_PERMERROR=0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=cisco.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6uKhJblvQhMT; Wed, 24 Jun 2026 08:14:16 -0700 (PDT)
Received: from rcdn-iport-3.cisco.com (rcdn-iport-3.cisco.com [173.37.86.74]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id F1BDF10687A89; Wed, 24 Jun 2026 08:14:08 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.com; i=@cisco.com; l=10520; q=dns/txt; s=iport01; t=1782314049; x=1783523649; h=from:to:subject:date:message-id:references:in-reply-to: mime-version; bh=BcQwyOOGiU3w4hU12pcmSZ1rzheaTzfhRLbwL8mKWWY=; b=kjvZ4OuY80PVmWXdcPCVjRCZyrDfrtfgwduKmdh2jpmqAcI/5FMs3KXN kH+usnv6B20NFf/u52TN0UgYhSGNUlf2R9/k3csm2TE3YRGSNS1YsB4JG oQL18SnbH7WN8oNR/k0ysIfA90JpRax2mYvNWVKsymP6StSxwNNQCcfan tFh0ChhKfYJwoKFOLNNA9tcKZBOP1wpXidyexiS+ka3fJb/GOjitwxpIR RZ5NMcZKBfm/+s483IfNPiSYzj5KP57KJS/y34iCvlQ4UtdPnypJc+11Y 2NRW809+IrhSVOW6q9CDsE2flt2KWCuOvAKiPdI9zSRMUVokZ+cfxFNaB Q==;
X-CSE-ConnectionGUID: oVioXoi4R6CbIO157sHcbg==
X-CSE-MsgGUID: NZkCYcLcRbqnb66MGPSaKQ==
X-IPAS-Result: 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
IronPort-PHdr: A9a23:uRh47BQ9vcKoGLuWcRe4dtZM9Npso47LVj580XJvo6hFfqLm+IztI wmCo/5sl1TOG47c7qEMh+nXtvX4UHcbqdaasX8EeYBRTRJNl8gMngIhDcLEQU32JfLndWo7S exJVURu+DewNk09JQ==
IronPort-Data: A9a23:xD0J+6rUIWLwYS75j+9XbenxmD9eBmJrZBIvgKrLsJaIsI4StFCzt garIBnVO/+JYWLxc9hyaNy0904DsZfcytU1TAtr/3w3RSoU9ePIVI+TRqvS04x+DSFioGZPt Zh2hgzodZhsJpPkjk7zdOCn9j8kif3gqoPUUIbsIjp2SRJvVBAvgBdin/9RqoNziLBVOSvV0 T/Ji5OZYgPNNwJcaDpOtfrd8k835ZwehRtB1rAATaET1LPhvyF94KI3fcmZM3b+S49IKe+2L 86r5K255G7Q4yA2AdqjlLvhGmVSKlIFFVHT4pb+c/HKbilq/kTe4I5iXBYvQRs/ZwGyojxE4 I4lWapc5useFvakdOw1C3G0GszlVEFM0OevzXOX6aR/w6BaGpfh660GMa04AWEX0uFJAGZ+8 v1EEm4mZDGk3r/p25KwQOY506zPLOGzVG8ekmtrwTecCbMtRorOBv2To9RZxzw3wMtJGJ4yZ eJANmEpN0uGOUASfA5MWPrSn8/w7pX7WyZWrE+Vv6cty2PS1wd2lrPqNbI5f/TXHZ0MxR7E+ z6uE2LRJCMZH+2U7TG/+GuqjLGRuAzDY4sxLejtnhJtqBjJroAJMzUaT1K1vby4h1KwHs5bM AkR/ikjqIAz+VClCN7nUHWQvHqf+xUcUttKCMU75R2DjK3O7G6xGmwfZj9MdNJgs9U5LQHGz XeTlN/vQDgqu7qPRDfFr/GfrCi5Pm4eKmpqiTI4cDbpKuLL+ekbphnOVd1kVqWyi7XI9fvYm FhmcABWa20vsPM2
IronPort-HdrOrdr: A9a23:UOd85qsT/g0Wr2Yuex/4v9Zj7skCf4Aji2hC6mlwRA09TyXGrb HMoB1L73/JYWgqOU3IwerwR5VoIUmxyXcH2/huAV7CZnirhILGFvAY0WKP+UyFJ8S6zJ8g6U 4CSdkwNDSTNykBsS+S2mDReLhQoqjjzEnrv5ai854Hd3ANV0gU1XYANu/tKDwOeOApP+tfKL OsouB8i36Lf3MRYs6nBn8DcdTiirTw/q7OUFotPTJizBOBow+JxdfBfiSw71MzQjlPybAt/S z/lRDl5qKsive/yhXN/W7e5ZZblbLau5V+7cq35fQ9G3HJsEKFdY5hU7qNsHQeu+e08msnl9 HKvlMJI9lzw2m5RBD0nTLdny3blBo+4X7rzlGVxVH5p9bieT48A81dwapEbxri7VY6tt0U6t MJ44vZjesUMfrzplW42zH6bWAsqqNymwtlrQcntQ0bbWLZUs4JkWVQxjIMLH5KJlOK1GluKp gfMCib3ocWTXqqK1bEo2Jo3NugGl43HhuAXww+n/b96UkMoJi8pHFomfD2WRw7hcgAo5Uo3Z W2Do140L5JVcMYdqR7GaMIRta2EHXERVbWPHuVOkmPLtBNB5vhke+/3FwO3pDjRLUYiJ8p3J jRWlJRsmA/P0roFM2VxZVOthTAWn+0UzjhwtxXo8ERgMyweJP7dSmYDFw+mcqppPsSRsXdRv aoIZpTR/vuN3HnF4pF1xD3H5NSNX4dWssIvctTYSPFnuvbbonx8uDLevfaI7TgVT4iR2PkG3 MGGCP+Ic1Rh3rbLEMQQCKhLE8FVnaPia6YSpKqjdT74LJ9Q7Fxjg==
X-Talos-CUID: 9a23:6y/L+WmDshzqMQ/UbN0x90fUbc/XOXrjzXDgJE7kMzhCQpyyEALP44NvmcU7zg==
X-Talos-MUID: 9a23:S6TOkwZIfmorf+BTkQ3vrwBpEMxS6b2oAh5TtLo+gMCnDHkl
X-IronPort-Anti-Spam-Filtered: true
Received: from rcdn-l-core-01.cisco.com ([173.37.255.138]) by rcdn-iport-3.cisco.com with ESMTP/TLS/TLS_AES_256_GCM_SHA384; 24 Jun 2026 15:14:08 +0000
Received: from rcdn-opgw-5.cisco.com (rcdn-opgw-5.cisco.com [72.163.7.169]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by rcdn-l-core-01.cisco.com (Postfix) with ESMTPS id DA74F18000280; Wed, 24 Jun 2026 15:14:07 +0000 (GMT)
X-CSE-ConnectionGUID: 3fdtdBtyT1uqPoGx3egenA==
X-CSE-MsgGUID: vnHGPbcTTzWB0BBMKuVeRw==
Authentication-Results: rcdn-opgw-5.cisco.com; dkim=pass (signature verified) header.i=@cisco.com
X-IronPort-AV: E=Sophos;i="6.24,222,1774310400"; d="scan'208,217";a="60844716"
Received: from mail-westusazon11010069.outbound.protection.outlook.com (HELO BYAPR05CU005.outbound.protection.outlook.com) ([52.101.85.69]) by rcdn-opgw-5.cisco.com with ESMTP/TLS/TLS_AES_256_GCM_SHA384; 24 Jun 2026 15:14:06 +0000
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=p9CoKLPRIReIDKPHvyalbwKymB+Ka6yIsn+BV9cpsjVmLjlewUlyEZfp7ZjVJQdOuaFHc8QbD37SkondlnWWUHjiV89PM5WQe2kEE7NpiEpZ2X6DNZgOkKTveXm8JdDYHr8W5uAyneVh7odx65An5zSs4IAYfjcJWRMgPoUbqNOsjWSVG2TizqMuRc3I6qU1CakClU+IW2gwvr8sHgZXpI73IWtzZmIrbhwbsJ8qfRNjrxycnVYf8XfEr29FkC5LDxIdmDv6tto7C7QpWNpGWLnbwQFHRvN8B8dXhGx9zrLto8PHP2IJOgF28sZFHHXUOZc8xBvft63E6IkWNxYfQw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=BcQwyOOGiU3w4hU12pcmSZ1rzheaTzfhRLbwL8mKWWY=; b=IO28MxEbw619lhfhQjP+AbVyMzFllyeoVlVihGS0fmj5uMdP0L+3ob5o+tJRnJkDuGQ/p08I3Z5SloTFYQ3HqmzQ+keKHWHdb97dAJ5W+M5+ZQK+awx4axzYiL4vma9IS14tw2cJimOdEgAF/ytZSXnVb4xDjd8fJv1JByhYGK+2UTra2km5TGmtfDlfSRKn3mstnpRnH6oucX4UATMTUHevSK6Y3o0U8Zj7Rxvd4II2o7fwJtvBrqrG0z2w2ruftDzYfNzgk7FV5orx7EKUud/AzougZ9rwUziZNSHdhfQeaw3klednnNJrBE7vcrX2PB9NuR+2H1ad28gFNMUM/Q==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none
Received: from PH3PPFA3FE8A23F.namprd11.prod.outlook.com (2603:10b6:518:1::d3f) by SN7PR11MB6972.namprd11.prod.outlook.com (2603:10b6:806:2ac::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.159.13; Wed, 24 Jun 2026 15:14:00 +0000
Received: from PH3PPFA3FE8A23F.namprd11.prod.outlook.com ([fe80::54dc:6db7:a539:fbbc]) by PH3PPFA3FE8A23F.namprd11.prod.outlook.com ([fe80::54dc:6db7:a539:fbbc%5]) with mapi id 15.21.0139.018; Wed, 24 Jun 2026 15:14:00 +0000
From: "Scott Fluhrer (sfluhrer)" <sfluhrer@cisco.com>
To: "draft-ietf-tls-mlkem@ietf.org" <draft-ietf-tls-mlkem@ietf.org>, "tls-chairs@ietf.org" <tls-chairs@ietf.org>, "tls@ietf.org" <tls@ietf.org>, Joseph Salowey <joe@salowey.net>
Thread-Topic: [TLS] WG Last Call: draft-ietf-tls-mlkem-08 (Ends 2026-07-08)
Thread-Index: AQHdA+pvIKdJtIHNAEC/5+4sM3OLcrZN0CPx
Date: Wed, 24 Jun 2026 15:14:00 +0000
Message-ID: <PH3PPFA3FE8A23F9179BA9EBCE43DDD7A8BC1ED2@PH3PPFA3FE8A23F.namprd11.prod.outlook.com>
References: <178231320760.1520243.5914961961176039994@dt-datatracker-f9b87776f-8pmmg>
In-Reply-To: <178231320760.1520243.5914961961176039994@dt-datatracker-f9b87776f-8pmmg>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels:
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: PH3PPFA3FE8A23F:EE_|SN7PR11MB6972:EE_
x-ms-office365-filtering-correlation-id: c1bcf352-58b5-4978-a86c-08ded2033835
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;ARA:13230040|4022899009|1800799024|23010399003|376014|366016|38070700021|13003099007|18002099003|22082099003|56012099006|11063799006|8096899003;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:PH3PPFA3FE8A23F.namprd11.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(4022899009)(1800799024)(23010399003)(376014)(366016)(38070700021)(13003099007)(18002099003)(22082099003)(56012099006)(11063799006)(8096899003);DIR:OUT;SFP:1101;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: c/PhI4VgnOl/ueW9ofSr6+C5GXgHv4fgXmg1wIa+ctUc6d/IBdbAuuylCOJDpedrTS0JX+LgwwklbaeQFwRvMD/bJnPMX0VAdAunLhJtIzGlHN7HN7UGZY91Ua4tjg3u2JHWHdDz/C/9nHCNlUNFsC2kcbT0Xws2cWtHO4kRErrQPqWQqtSA6893sZg0fOCaHzzi/4vAoegoNExwVzI11g1TCZ3vaPhZde9YqxMCHK0LJH7YSV/IDzsqzKAZigJevZsalBN2++dL4rUAQiSneWtXZKhfdFioqw3tPIAKGfxKFym65k9DwDCt9NHuWI29CZXQjv5sv1h0NOe+eoUNYQ4CTHRb6iTiRzY72BI4Zc22vxfSM7eh3DBGNCHdtcX/Z0lPR/oysWTHmtAWa8Mz4n1M88CbbQedyZxRzVNBmAjKFzXMVQeKRWqDhvgCmKi+XZnXcUVmXMXhiPg97AJdGErUY/YqoufPQ8AsWPpLuBBmo44ujaE3nwY6OMFQz4538pNeskEwyH0SFclAlXsxB5hzZX1SYLREm7E2iaKxuUNyPCauQOPLmezo7iM3u9yE9Wx+j5mr5zeyyVfzTXBqEZ6XwlME1/An5LIN7vyNnjZznl5ioOIucbhF5xOoJEBA+C3s7DQVVtIyIbwcP520xK3PjzqRWXFStjCCSwWdKYyUx1Xuk9wElx3U/fvo3txZJAaAEnID1qKLbUEMEl9QH7tUlkf+b1n6MShu1z69ZrOzjxtPjxM9KX25evfmEZ8VK2hbrW9F1GGcs8vW4tdkTH2OEJuNRNkWIojNSE1PPqHX4cFjR6V1R+yDRH9SAKq8/tcqzY/cb88BRDRnFacSt+jYvL0Ob0yfTcnXL5fJZTN4WjsgmXDgbqFKiGA3MajI+IATihu+ptUMFJZbgXPkIE2sYATJqpLJCGZrRbq6opON1g5Js0XvSzf8O8p8ed3yaeyKios8ybV/sWvtuTzwjWfv+FMva6tIAXeevZlXzMGbQ983DJMSpwBPT+ZFBwrfidHsRTa0BIADRKaCqbKQNAW+zIJpztQUk4GsqHBiqqijHO1WOsnNgt9nnGyDFLeRC6VdajiBiBataFcm3QFCWIF+cWr139cwlCA62bhQFgSWzgYFGj8imGKfxSwx+hYf461xfqyKaN+X3HoZb5qGLZ233+ZBhl76FPw1hpefj6hjUz/NtNaDtuXAtbwHp+O+TTlxEZJshBpNEzmQ1y5xXyP6ltQf5t7NvZF0yQ6yiyAN/GlUYTq8VK82nQYRrb/sgLWfLSGRqtGJD7jjHmHMGq5uaKKMMeIOnDYE56Xqi33WzBEI2G4EwS1YkM/crlm2RCqKDKWPgSiFdOWFcNKe6ddAtsjaGjsN5ye2jrKT00SiesDj2WljrVvhpsnolObnYcSEKecWHYh9c7sDwmFEMIJI5m3To6UZ9ezjkURsNddcW1lViFMWSfNSxzf79pE8BkZLe/CQ8QIxgJwefgPtbRrOtCd6koAFwlJSWaGLdeskU2sXdPiwrvKFBV+avsLtepo5gRub3HHFL5EYzKvwtKO2C3JqOAwyF05C9DC480Kjkm0/yPVMqSC5UyWPqzZDKClRGjxKedjf40HdrNjfq11D0AsjiAozPuLXmvKibbCaAmQWkta28DiVkJ1Q5C/EROPmnc+DzQIbQpGKSVKsgl1LYqCj5LVqTg3fSDAP+NU51woGHQ1X+EQxgPNxc3yL
Content-Type: multipart/alternative; boundary="_000_PH3PPFA3FE8A23F9179BA9EBCE43DDD7A8BC1ED2PH3PPFA3FE8A23F_"
MIME-Version: 1.0
X-Exchange-RoutingPolicyChecked: WIE4djHKMuSlYz06dVsXTdGMwA2/KePxq6w2nJ93BWy5KzfE3sJwI7qjOdjv7RhrMxqOoyTr4uK6UB8Vf42bk3zWTdSWPy/eO1GU5cCGlBFwUE2YCYvVM48KU07OnB4/YwTLWbWJWuFLqc7T+m2R33HW/+s0W3+sGzqwIoCYA54E5HhoxEn5+eCwAaK7mxdiRyMSxRbHUCfv23X6/D2oGPt7wssFdzZjf6R4CuCJzX3EFnx5Fzj9PT7Lbl7fUHTqvhCxPmXsap40P7wchSaxes5N/tlT2cvfGkAA+9G+544lLdk48wx4Hlfo90OOlzAK+CdmkigWCyDNtaJMR6Lxsg==
X-OriginatorOrg: cisco.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: PH3PPFA3FE8A23F.namprd11.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: c1bcf352-58b5-4978-a86c-08ded2033835
X-MS-Exchange-CrossTenant-originalarrivaltime: 24 Jun 2026 15:14:00.2817 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: I0bZsRXUOhCBe29zUABO3hmHLrU0Nc1N6gyjVkvB2dLoEZwkBUU/epowzNMOz7+YsaynhEMx/MHr/cIMxvKL5g==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN7PR11MB6972
X-Outbound-Client-TLS: ANONYMOUS;rcdn-opgw-5.cisco.com [72.163.7.169];TLSv1.3;TLS_AES_256_GCM_SHA384;256
X-Outbound-SMTP-Client: 72.163.7.169, rcdn-opgw-5.cisco.com
X-Outbound-Node: rcdn-l-core-01.cisco.com
Message-ID-Hash: JCVKWSBDLCYFQGOFLR4H7ZYEDSZLOHTB
X-Message-ID-Hash: JCVKWSBDLCYFQGOFLR4H7ZYEDSZLOHTB
X-MailFrom: sfluhrer@cisco.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] Re: WG Last Call: draft-ietf-tls-mlkem-08 (Ends 2026-07-08)
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/ngHbS_kiILf3yE9konRrqexf6uQ>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

I vote that the document is useful, and should be progressed.

________________________________
From: Joseph Salowey via Datatracker <noreply@ietf.org>
Sent: Wednesday, June 24, 2026 11:00 AM
To: draft-ietf-tls-mlkem@ietf.org <draft-ietf-tls-mlkem@ietf.org>; tls-chairs@ietf.org <tls-chairs@ietf.org>; tls@ietf.org <tls@ietf.org>
Subject: [TLS] WG Last Call: draft-ietf-tls-mlkem-08 (Ends 2026-07-08)

This message initiates a new Working Group Last Call for draft-ietf-tls-mlkem[1], which defines standalone ML-KEM key establishment for TLS 1.3. The main question before the working group is: "Should the working group publish a document specifying stand alone ML-KEM?". If there is rough consensus then we will push to refine and publish the document; otherwise, we will stop discussing the draft and not progress it. Please respond to this call indicating whether you support publishing a document specifying a stand alone ML-KEM. Please refrain from further discussion on this topic as most arguments have been discussed multiple times.

Why are we holding this consensus call now?

Significant developments have occurred both within this document and in the broader TLS ecosystem to address the concerns raised in the last WGLC. Therefore, the third consensus call is warranted. We ask the working group to consider document publication in light of these recent changes:

- Promotion of Hybrids in draft-ietf-tls-ecdhe-mlkem: Following a separate consensus call, the WG agreed to promote the X25519MLKEM768 hybrid group to Recommended: Y in the IANA registry. Consequently, the IANA registry will reflect a clear community preference for a hybrid because Recommended: Y clearly indicates this while the standalone ML-KEM groups defined in this draft remain Recommended: N. The updated security considerations in [1] reference the IANA registry to emphasize this preference.

- Key Share Reuse Prohibited in draft-ietf-tls-rfc8446bis: The WG recently reached consensus to explicitly prohibit key share reuse across connections in TLS 1.3. The new text changes the guidance from SHOULD NOT to a strict MUST NOT. This resolves the concerns regarding static key reuse and its associated privacy and forward-secrecy risks for ML-KEM.

- Nadim updated the ProVerif model of TLS 1.3 to evaluate KEM and hybrid KEM groups in TLS 1.3. This supports other results which show that KEMs are secure when used in TLS 1.3 and that hybrid groups are secure even if one of the components is compromised.

- Liaisons: We received liaison statements from multiple SDOs including  O-RAN[2], IEEE 802.11[4] and from 3GPP[3]  expressing support for the publication of draft-ietf-tls-mlkem as an RFC as they rely on the IETF to provide a stable normative reference.

Please note that a third-party IPR disclosure exists [5] against this document regarding patents related to the underlying ML-KEM algorithm. This IPR declaration has not changed since the last WGLC. As a reminder, per BCP 79, the IETF takes no stance on the validity of patent claims, and the working group may decide to proceed with a technology despite IPR disclosures if it decides that such use is warranted.

Conduct Reminder: Given the heated nature of previous discussions on this topic, participants are strongly reminded to adhere to the IETF Code of Conduct (BCP 54) and the TLS WG's Mail List Procedures. Keep feedback professional, technical, and focused on the document's text.

This working group last call will end on 2026-07-08.

Joe and Sean

[1] https://datatracker.ietf.org/doc/draft-ietf-tls-mlkem/
[2] https://datatracker.ietf.org/liaison/2198/
[3] https://datatracker.ietf.org/liaison/2151/
[4] https://datatracker.ietf.org/liaison/2148/
[5] https://datatracker.ietf.org/ipr/search/?submit=draft&id=draft-ietf-tls-mlkem

_______________________________________________
TLS mailing list -- tls@ietf.org
To unsubscribe send an email to tls-leave@ietf.org

v2.46.0 | Report a Bug | By Email | System Status