[TLS] Document Action: 'Use of ML-DSA in TLS 1.3' to I nformational RFC (draft-ietf-tls-mldsa-05.txt)

The IESG has approved the following document:
- 'Use of ML-DSA in TLS 1.3'
  (draft-ietf-tls-mldsa-05.txt) as Informational RFC

This document is the product of the Transport Layer Security Working Group.

The IESG contact persons are Christopher Inacio and Deb Cooley.

A URL of this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-ietf-tls-mldsa/




Technical Summary

   This memo specifies how the post-quantum signature scheme ML-DSA
   (FIPS 204) is used for authentication in TLS 1.3.

Working Group Summary

There is consensus to move this document forward - a ratio of 4:1. The message count 
is at ~275 messages. Some of those messages were off topic, there were many repeats, 
but a fair number of people expressed their views.

The controversy is related to the status of pure ML-DSA vs composite ML-DSA with ECC.  The
opinions included: 
 - we should not publish a pure ML-DSA specification, 
 - we should recommend composites over pure ML-DSA, 
 - we should publish the composite and pure specifications concurrently.

Appeals were both submitted and threatened.  The submitted appeal against publication was rejected 
due to a derivative work notice.  Private threats of appeal were made if the specification was not published.

IETF Last Call raised two additional opinions:
- improve the clarity of Security Considerations (done)
- publish an external guidance document explaining the issues (obviously out of scope)

Document Quality

No special reviews - MIB, Media Type, Yang, etc. are required.

Existing implementations include (but are not limited to):
- OpenSSL
- BoringSSL
- Rustls (via rustls-post-quantum)
- s2n-tls
- WolfSSL
- BouncyCastle
- GnuTLS

Currently, the I-D refers to RFC 8446, -rfc8446bis is currently in AUTH48 and
this document will be updated to refer to -rfc8446bis prior to publication.

Personnel

   The Document Shepherd for this document is Sean Turner. The Responsible
   Area Director is Deb Cooley.

_______________________________________________
TLS mailing list -- [email protected]
To unsubscribe send an email to [email protected]