[TLS] Re: WG Last Call: draft-ietf-tls-mlkem-08 (Ends 20 26-07-08)
Eliot Lear <[email protected]> Sat, 11 Jul 2026 14:08:30 +0200
| Newsgroups | gmane.ietf.tls |
|---|---|
| Message-ID | <[email protected]> |
Hi... On 11.07.2026 13:00, Ken Kubota wrote: > "I'm not sure what your point is here" > Although strong cryptography (256 bits of security) could generally have been available for every end user for the past two decades on standard consumer devices, the U.S. government is intentionally deploying, through the NSA, degraded (weakened) encryption. > RFC 9151 (2022), which provides only 192 bits of security (curve P-384), is one example. You've misunderstood RFC 9151. What RFC 9151 and friends say is, “here is how *commercial* entities should *interoperate* with the USG infrastructure”. And it's not just ECDSA with P-384, but also RSA with either 3072 or 4096 bits. Weak indeed. Regardless, if you're not talking to the USG, have a party. Use whatever suite floats your boat. Eliot _______________________________________________ TLS mailing list -- [email protected] To unsubscribe send an email to [email protected]
OpenPGP_0x87B66B46D9D27A33.asc
(application/pgp-keys, 2.6 KB)
-----BEGIN PGP PUBLIC KEY BLOCK----- xsBNBFMe1UQBCADdYOS5APDpIpF2ohAxB+nxg1GpAYr8iKwGIb86Wp9NkK5+QwbW 9H035clTlpVLciExtN8E3MCTPOIm7aITPlruixAVwlBY3g7U9eRppSw9O2H/7bie 2GOnYxqmsw4v1yNZ9NcMLlD8raY0UcQ5r698c8JD4xUTLqybZXaK2sPeJkxzT+Iw upRSQ+vXEvFFGhERQ88zo5CaSa1Gw/Rv54oH0Dq2XYkO41rhxQ60BKZLZuQK1d9+ 1y3I+An3AJeD3AA31fJZD3H8YRKOBgqeILPILbw1mM7gCtCjfvFCt6AFCwEsjITG x55ceoQ+t5B5XGYJEppMWsIFrwZsfbL+gP31ABEBAAHNJUVsaW90IExlYXIgPGxl YXJAb2Zjb3Vyc2VpbXJpZ2h0LmNvbT7CwJEEEwECADsCGwMCHgECF4ACGQEWIQSY 0L2QRh2wkqeyYR2HtmtG2dJ6MwUCWxJwMwULCQgHAgYVCAkKCwIEFgIDAQAKCRCH tmtG2dJ6MyMyCACXvtFjAYGMtOkD9MD4nI3ifFpkrj8xTMbXjrv5hdqmzRmQ0wqA 1U/OlZux+P/NaVMiZNZc8zw0nsx/INAqDOVd4/tLWF+ywTkeRFR0VnaUxLwCReZA ZOaRS+md+52u/6ddoFja2RnjZ43qbbuvVUARQVIyMJz+GbR6mEZQHR0psD7dDYZD yrpivCxm8zHQwmB6AZUlO7OJgljDvVPVDCabg/ZnJw1qS0OzSiNb0MySk1D5A7Fd wDgeKxuMYUOOoVVTTMWNWcMEUkRX9LxElswEt0PQWiz/j3FYXTxiFfl/1vKcHx4p M+E5C5mhTbrdFUFLJC3Y5fLID7stK/ChaEaBzRlFbGlvdCBMZWFyIDxsZWFyQGxl YXIuY2g+wsCOBBMBAgA4AhsDAh4BAheAFiEEmNC9kEYdsJKnsmEdh7ZrRtnSejMF AlsScDMFCwkIBwIGFQgJCgsCBBYCAwEACgkQh7ZrRtnSejPCiAf+OqRayV/uDnJJ dnx0d9N2orPS8sfI7+plyijq/FkdFGHCdLMkK4WmmTRtVVffLWEBxyvRecu4R+GA rK696HWes6Gr58eV9V/9scPMu99n/4q1aDjpGC4nfSBj8Wtntp2FwmaXXuf8r798 Hl1ROJhuHRAA+U/IikuB8/93yhiUNeaO/Sb/dh4Au0aQrdFmokNG+mnD9z7sIwyc ycyxWc2+4yIgd4s8UBEklhNRjUZqACv5NIFupJsdf/O7UBDayvtzZ+AiUhUFhenp 7S52O1HlZvecGzEJCXr8HXQ1lDtobg25mZ5sYClxs0kqbjau5/CAgDpW7dB33SQG UH8tuW8L3s0bRWxpb3QgTGVhciA8bGVhckBjaXNjby5jb20+wsCOBBMBAgA4AhsD Ah4BAheAFiEEmNC9kEYdsJKnsmEdh7ZrRtnSejMFAlsScDMFCwkIBwIGFQgJCgsC BBYCAwEACgkQh7ZrRtnSejP32wf/TmiGQ8PamuhITU4QwrsjxwlM51/RCj7OlVO3 8YlfUJpvNZKwA87xUDLf1+OTqf3/4LjwqDdJRpnBo5RFQZIGGiNDEO5LD2Y59/Uy 5ToBAGp6l4CCJ7Jo3kIyTl/JCPpOYd5SE5aLwXp2TlzPYdtTi0/FBoy7x+L/WeNG Woq6zPzmlkCyYK84wewOfbPP/NPByjLl0aeKRhLJQWFnohzTXxWh10jRFlg0MGZ+ 849OalUz/UZVP4iBwh7nS/kDe5wGaduTKIrSVyA2s/ikRxoRJfjbhiL2OBtlh0QS jnySPT25W2vWXuWkLzv+n7oH2WMHXFY0LZxJKqTsrMdnsJPS+s7ATQRTHtVEAQgA tFle2HW7/ecWBj4bYU3QoQSKT7ZeyTwlf3Ov94hJr46XxrhTWiuDGnI/ZXttBAOQ NQR+z4CxqBzojzOuTcrEaWfekUVV90zXy5oRjBa+YTzhjXavsXBh1brZsD1fVO2y nlDUYjxcd2HRJBMXXaldhPBZbU9MdhUintsbMzzxweoFbTHJF+W7iPadSt321YV3 bxJHGGP4wdCRCRsoUuWhG3LeXB1LwwJE/Nf2BSuSX4PEUcLtatbdWLiCUjlgGUPS faFLIOg/UaQpVPrSBQaHt4k6dQFHyXMqbnBioC2Crabv2soHKUDjR2JGFudNN5j7 K2oxYUXlReb3snDGx7OLuQARAQABwsBfBBgBAgAJBQJTHtVEAhsMAAoJEIe2a0bZ 0nozkrkIANu6dq2AeyodtHcpulfHOtqVqQRx04Ma/99s3r8R0ol5esb1AoOU/FlM H1JPDr4A3ARKyv25QwDF0M0oN7KeOdCYUfEZ1x1xeWc9k9OF+x55SFSRsH9go58M hACQqjM2gpiPoNyJr4P/C+J8gRb4ZRRw7/pCLzIro8snIzwLu8cSqZQbNfyBMJg6 ADI53hZmsL33kJ8HTIUiivD4ykrsxlOblJsY9xgX0ar0zNKqZoTDxTpg4SUph+eR ywJMtjJZqiWFyT7f/RH0hIRYrmtTOoC4rjRLj5KfvI3Jx0Kiq9CHh7fFKnMC7dph nyMpdBVXRfYb1j4zUcxm4KqE9Q4tN0U= =lT0q -----END PGP PUBLIC KEY BLOCK-----
OpenPGP_signature.asc
(application/pgp-signature, 495 B)
-----BEGIN PGP SIGNATURE----- wsB5BAABCAAjFiEEmNC9kEYdsJKnsmEdh7ZrRtnSejMFAmpSMj8FAwAAAAAACgkQh7ZrRtnSejMz twf8CeofeePf8zP2mYWXtTkG8d0yCleRIdReIscz4bS4Y9TUfQtE24Mv2rqj4G0LZ3Js33tfO7+6 J3ElLld8LyHgZvfR+C+xoyPKXSzu+B5/FpvXT1p2yJRzBmfpt7z4NJ5RCEjWy6raVSA4uEMNZLF3 9oZHiLMkspLucXhrDeTfhYJ+cCdd1w6xBnYf554qSbadvIN0Tb/s/ngaeTWcVF09Y09ZxJ/RPEoH 01nNUhCG0deG7fBQY+b3SXpTfpYpqpx0RNvJEemxceLo63skGrQy/qmRP4D7kMwBrDmFhUBkH5XA Ea8gFToRoPEEuLNLF83xIcYRFuxVaJUA2vR6/6s3XQ== =iD4Z -----END PGP SIGNATURE-----