[TLS] Re: WG Last Call: draft-ietf-tls-mlkem-08 (Ends 20 26-07-08)
Eliot Lear <[email protected]>
| Newsgroups | gmane.ietf.tls |
|---|---|
| Message-ID | <[email protected]> |
Hi! ~~~~Disclaimer I'm not a cryptographer. ~~~~ Please see below. On 08.07.2026 08:04, Viktor Dukhovni wrote: > On Tue, Jul 07, 2026 at 10:27:56PM -0700, Christian Huitema wrote: > >> I just read Jacob Applebaum's message. Given his description of the >> late-standardization suspicious change that looks like a backdoor in the >> ML-KEM specification, I agree with his conclusion. The WG should not ask for >> publication of the current graph, not until the changes requested by Jacob >> are made. > The removal of whitening of the `m` random input to Encaps is not a > plausible backdoor. If all you have is a broken RNG, you're free to > apply whitening to obtain a new less bad RNG and use that instead. > > Nothing stops an ML-KEM implementation from hashing some input (any > number of times, mixing in whatever additional inputs, ...) to produce > its random values. The abstract algorithm starts from the final output > of an adequate RNG that requires no further post-processing. > > There's nothing suspicious about this simplification. The critique in > question makes no sense to me. Don't use a broken RNG. That sounds about right to me, but as someone who is not a cryptographer, perhaps someone who is could explain how this amounts to a back door, and not a requirement for a good PRNG? And if it's not a back door, should we really relitigate NIST's choices here? Eliot * By "back door", I mean an intentionally placed undisclosed weakness that could be exploited by the people who placed it there. _______________________________________________ TLS mailing list -- [email protected] To unsubscribe send an email to [email protected]
OpenPGP_0x87B66B46D9D27A33.asc
(application/pgp-keys, 2.6 KB)
-----BEGIN PGP PUBLIC KEY BLOCK----- xsBNBFMe1UQBCADdYOS5APDpIpF2ohAxB+nxg1GpAYr8iKwGIb86Wp9NkK5+QwbW 9H035clTlpVLciExtN8E3MCTPOIm7aITPlruixAVwlBY3g7U9eRppSw9O2H/7bie 2GOnYxqmsw4v1yNZ9NcMLlD8raY0UcQ5r698c8JD4xUTLqybZXaK2sPeJkxzT+Iw upRSQ+vXEvFFGhERQ88zo5CaSa1Gw/Rv54oH0Dq2XYkO41rhxQ60BKZLZuQK1d9+ 1y3I+An3AJeD3AA31fJZD3H8YRKOBgqeILPILbw1mM7gCtCjfvFCt6AFCwEsjITG x55ceoQ+t5B5XGYJEppMWsIFrwZsfbL+gP31ABEBAAHNJUVsaW90IExlYXIgPGxl YXJAb2Zjb3Vyc2VpbXJpZ2h0LmNvbT7CwJEEEwECADsCGwMCHgECF4ACGQEWIQSY 0L2QRh2wkqeyYR2HtmtG2dJ6MwUCWxJwMwULCQgHAgYVCAkKCwIEFgIDAQAKCRCH tmtG2dJ6MyMyCACXvtFjAYGMtOkD9MD4nI3ifFpkrj8xTMbXjrv5hdqmzRmQ0wqA 1U/OlZux+P/NaVMiZNZc8zw0nsx/INAqDOVd4/tLWF+ywTkeRFR0VnaUxLwCReZA ZOaRS+md+52u/6ddoFja2RnjZ43qbbuvVUARQVIyMJz+GbR6mEZQHR0psD7dDYZD yrpivCxm8zHQwmB6AZUlO7OJgljDvVPVDCabg/ZnJw1qS0OzSiNb0MySk1D5A7Fd wDgeKxuMYUOOoVVTTMWNWcMEUkRX9LxElswEt0PQWiz/j3FYXTxiFfl/1vKcHx4p M+E5C5mhTbrdFUFLJC3Y5fLID7stK/ChaEaBzRlFbGlvdCBMZWFyIDxsZWFyQGxl YXIuY2g+wsCOBBMBAgA4AhsDAh4BAheAFiEEmNC9kEYdsJKnsmEdh7ZrRtnSejMF AlsScDMFCwkIBwIGFQgJCgsCBBYCAwEACgkQh7ZrRtnSejPCiAf+OqRayV/uDnJJ dnx0d9N2orPS8sfI7+plyijq/FkdFGHCdLMkK4WmmTRtVVffLWEBxyvRecu4R+GA rK696HWes6Gr58eV9V/9scPMu99n/4q1aDjpGC4nfSBj8Wtntp2FwmaXXuf8r798 Hl1ROJhuHRAA+U/IikuB8/93yhiUNeaO/Sb/dh4Au0aQrdFmokNG+mnD9z7sIwyc ycyxWc2+4yIgd4s8UBEklhNRjUZqACv5NIFupJsdf/O7UBDayvtzZ+AiUhUFhenp 7S52O1HlZvecGzEJCXr8HXQ1lDtobg25mZ5sYClxs0kqbjau5/CAgDpW7dB33SQG UH8tuW8L3s0bRWxpb3QgTGVhciA8bGVhckBjaXNjby5jb20+wsCOBBMBAgA4AhsD Ah4BAheAFiEEmNC9kEYdsJKnsmEdh7ZrRtnSejMFAlsScDMFCwkIBwIGFQgJCgsC BBYCAwEACgkQh7ZrRtnSejP32wf/TmiGQ8PamuhITU4QwrsjxwlM51/RCj7OlVO3 8YlfUJpvNZKwA87xUDLf1+OTqf3/4LjwqDdJRpnBo5RFQZIGGiNDEO5LD2Y59/Uy 5ToBAGp6l4CCJ7Jo3kIyTl/JCPpOYd5SE5aLwXp2TlzPYdtTi0/FBoy7x+L/WeNG Woq6zPzmlkCyYK84wewOfbPP/NPByjLl0aeKRhLJQWFnohzTXxWh10jRFlg0MGZ+ 849OalUz/UZVP4iBwh7nS/kDe5wGaduTKIrSVyA2s/ikRxoRJfjbhiL2OBtlh0QS jnySPT25W2vWXuWkLzv+n7oH2WMHXFY0LZxJKqTsrMdnsJPS+s7ATQRTHtVEAQgA tFle2HW7/ecWBj4bYU3QoQSKT7ZeyTwlf3Ov94hJr46XxrhTWiuDGnI/ZXttBAOQ NQR+z4CxqBzojzOuTcrEaWfekUVV90zXy5oRjBa+YTzhjXavsXBh1brZsD1fVO2y nlDUYjxcd2HRJBMXXaldhPBZbU9MdhUintsbMzzxweoFbTHJF+W7iPadSt321YV3 bxJHGGP4wdCRCRsoUuWhG3LeXB1LwwJE/Nf2BSuSX4PEUcLtatbdWLiCUjlgGUPS faFLIOg/UaQpVPrSBQaHt4k6dQFHyXMqbnBioC2Crabv2soHKUDjR2JGFudNN5j7 K2oxYUXlReb3snDGx7OLuQARAQABwsBfBBgBAgAJBQJTHtVEAhsMAAoJEIe2a0bZ 0nozkrkIANu6dq2AeyodtHcpulfHOtqVqQRx04Ma/99s3r8R0ol5esb1AoOU/FlM H1JPDr4A3ARKyv25QwDF0M0oN7KeOdCYUfEZ1x1xeWc9k9OF+x55SFSRsH9go58M hACQqjM2gpiPoNyJr4P/C+J8gRb4ZRRw7/pCLzIro8snIzwLu8cSqZQbNfyBMJg6 ADI53hZmsL33kJ8HTIUiivD4ykrsxlOblJsY9xgX0ar0zNKqZoTDxTpg4SUph+eR ywJMtjJZqiWFyT7f/RH0hIRYrmtTOoC4rjRLj5KfvI3Jx0Kiq9CHh7fFKnMC7dph nyMpdBVXRfYb1j4zUcxm4KqE9Q4tN0U= =lT0q -----END PGP PUBLIC KEY BLOCK-----
OpenPGP_signature.asc
(application/pgp-signature, 495 B)
-----BEGIN PGP SIGNATURE----- wsB5BAABCAAjFiEEmNC9kEYdsJKnsmEdh7ZrRtnSejMFAmpOGeEFAwAAAAAACgkQh7ZrRtnSejMg bwgA18dpeSdMhcextWwqElnwPCe+5olNPuNyfjNWXDnJatXSPRfH3677qT0NYli1N8oXNliCZdGt 3CxlHuUAncI7LnFwwq8s5vxLaYna5H/Q4uZD5WFDwPEMN3jGfn6+xiYzYft2CA5KJNJN3b5GkV3f G8+6T8eBmuaDxsxo6lKK5rUWSQAyunCncKS18LZCAwmC/VA5cYwrBLmHk9xPtP4CYK0znNWLFzEF U868w9EZLe9R2kT1/NGwchzu7FjI3sOtHbSs1iGqrLfgQo0Zblb3Q+U222jEfIOs3FnEeivRS0cp vQ5it17UVzEaBc/kjuZ3i214LnQE4P14VffN0cF+DA== =1rwP -----END PGP SIGNATURE-----