[TLS] Re: PQ Cipher Suite I-Ds: adopt or not?

2024-12-17 Thread Kampanakis, Panos
> Is the WG consensus to run four separate adoption calls for the individual > I-Ds in question? I suggest to call for adoption of - draft-kwiatkowski-tls-ecdhe-mlkem - draft-tls-westerbaan-mldsa - draft-reddy-tls-composite-mldsa - draft-reddy-tls-slhdsa Personally, I don't think all of tho

[TLS] Re: PQ Cipher Suite I-Ds: adopt or not?

2024-12-17 Thread Sean Turner
> On Dec 17, 2024, at 07:22, Bas Westerbaan wrote: > > I would like to see adoption of all four documents and > https://datatracker.ietf.org/doc/draft-tls-westerbaan-mldsa/ which was left > out. I assume the latter was merely an oversight. Yes, it was an oversight on my part. spt __

[TLS] Re: PQ Cipher Suite I-Ds: adopt or not?

2024-12-17 Thread Kris Kwiatkowski
I would like to see adoption of all four documents andhttps://datatracker.ietf.org/doc/draft-tls-westerbaan-mldsa/ which was left out. I assume the latter was merely an oversight. Yes, it was an oversight on my part. I support adoption of draft-tls-westerbaan-mldsa._

[TLS] Re: PQ Cipher Suite I-Ds: adopt or not?

2024-12-17 Thread tirumal reddy
I support the adoption call for all four drafts, with higher priority given to the hybrid and pure key exchange drafts. -Tiru On Tue, 17 Dec 2024 at 03:31, Sean Turner wrote: > Note that there are three parts to this email; the “ask” is at the end. > > Requests: > > Ciphersuite discussions in t

[TLS] Re: PQ Cipher Suite I-Ds: adopt or not?

2024-12-17 Thread Bas Westerbaan
I would like to see adoption of all four documents and https://datatracker.ietf.org/doc/draft-tls-westerbaan-mldsa/ which was left out. I assume the latter was merely an oversight. I think draft-reddy-tls-composite-mldsa (or more precisely draft-ietf-lamps-pq-composite-sigs) needs a lot of work. I

[TLS] Re: [EXT] Re: draft-connolly-tls-mlkem-key-agreement

2024-12-17 Thread D. J. Bernstein
Blumenthal, Uri - 0553 - MITLL writes: > How do you expect us to reach a consensus Consensus on moving a hybrid PQ KEM forward? There's already WG adoption of hybrid-design, and in general the mailing-list discussions make hybrid PQ KEMs look like the easy case where there's ample support and nobo

[TLS] Re: PQ Cipher Suite I-Ds: adopt or not?

2024-12-17 Thread D. J. Bernstein
Can the WG chairs please clarify which procedure from RFC 2026 (or from RFCs updating RFC 2026) is being followed here? I have three reasons for asking for clarification. First: The question in the message that began the thread can easily be read in two ways, and the replies are split in the quest

[TLS] Re: [EXT] Re: draft-connolly-tls-mlkem-key-agreement

2024-12-17 Thread D. J. Bernstein
I wrote: > It's not that anyone has quoted an official > NSA document prohibiting non-hybrid PQ. Sorry, that should say "It's not that anyone has quoted an official NSA document prohibiting hybrid PQ." Too many negations. :-) At some point on the list there was a deceptive quote "Do not use a hyb

[TLS] Re: PQ Cipher Suite I-Ds: adopt or not?

2024-12-17 Thread Loganaden Velvindron
I also support adoption. On Tue, 17 Dec 2024 at 17:49, Sean Turner wrote: > > > > > On Dec 17, 2024, at 07:22, Bas Westerbaan wrote: > > > > I would like to see adoption of all four documents and > > https://datatracker.ietf.org/doc/draft-tls-westerbaan-mldsa/ which was left > > out. I assume