I support publication.
I don't have strong feelings on which recommended bits are set, but
either X25519MLKEM768 alone, or all three, would make the most sense to me.
I don't think any other changes are warranted. Any additional choices
should be handled by a different document.
On 07/10/2025 14:46, Joseph Salowey wrote:
This is the working group last call for Post-quantum hybrid
ECDHE-MLKEM Key Agreement for TLSv1.3. Please review
draft-ietf-tls-ecdhe-mlkem [1] and reply to this thread indicating if
you think it is ready for publication or not. If you do not think it
is ready please indicate why. This call will end on October 22, 2025.
Please note that during the WG adoption call, Dan Bernstein pointed
out some potential IPR (see [2]), but no IPR disclosure has been made
in accordance with BCP 79. Additional information is provided here;
see [3].
BCP 79 makes this important point:
(b) The IETF, following normal processes, can decide to use
technology for which IPR disclosures have been made if it decides
that such a use is warranted.
WG members can take this information into account during the working
group last call.
Reminder: This working group last call has nothing to do with picking
the mandatory-to-implement cipher suites in TLS.
Cheers,
Joe & Sean
[1] https://datatracker.ietf.org/doc/draft-ietf-tls-ecdhe-mlkem/
[2] https://mailarchive.ietf.org/arch/msg/tls/mt4_p95NZv8duZIJvJPdZV90-ZU/
[3]
https://mailarchive.ietf.org/arch/msg/spasm/GKFhHfBeCgf8hQQvhUcyOJ6M-kI/
_______________________________________________
TLS mailing list -- [email protected]
To unsubscribe send an email to [email protected]
_______________________________________________
TLS mailing list -- [email protected]
To unsubscribe send an email to [email protected]
