[TLS] Re: WG Last Call: draft-ietf-tls-mlkem-08 (Ends 20 26-07-08)

Eliot Lear <[email protected]> Sat, 11 Jul 2026 14:08:30 +0200
Newsgroups gmane.ietf.tls
Message-ID <[email protected]>
Hi...

On 11.07.2026 13:00, Ken Kubota wrote:
> "I'm not sure what your point is here"
> Although strong cryptography (256 bits of security) could generally have been available for every end user for the past two decades on standard consumer devices, the U.S. government is intentionally deploying, through the NSA, degraded (weakened) encryption.
> RFC 9151 (2022), which provides only 192 bits of security (curve P-384), is one example.

You've misunderstood RFC 9151.

What RFC 9151 and friends say is, “here is how *commercial* entities 
should *interoperate* with the USG infrastructure”.  And it's not just 
ECDSA with P-384, but also RSA with either 3072 or 4096 bits.  Weak 
indeed.  Regardless, if you're not talking to the USG, have a party.  
Use whatever suite floats your boat.

Eliot

_______________________________________________
TLS mailing list -- [email protected]
To unsubscribe send an email to [email protected]
OpenPGP_0x87B66B46D9D27A33.asc (application/pgp-keys, 2.6 KB)
-----BEGIN PGP PUBLIC KEY BLOCK-----
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=lT0q
-----END PGP PUBLIC KEY BLOCK-----
OpenPGP_signature.asc (application/pgp-signature, 495 B)
-----BEGIN PGP SIGNATURE-----

wsB5BAABCAAjFiEEmNC9kEYdsJKnsmEdh7ZrRtnSejMFAmpSMj8FAwAAAAAACgkQh7ZrRtnSejMz
twf8CeofeePf8zP2mYWXtTkG8d0yCleRIdReIscz4bS4Y9TUfQtE24Mv2rqj4G0LZ3Js33tfO7+6
J3ElLld8LyHgZvfR+C+xoyPKXSzu+B5/FpvXT1p2yJRzBmfpt7z4NJ5RCEjWy6raVSA4uEMNZLF3
9oZHiLMkspLucXhrDeTfhYJ+cCdd1w6xBnYf554qSbadvIN0Tb/s/ngaeTWcVF09Y09ZxJ/RPEoH
01nNUhCG0deG7fBQY+b3SXpTfpYpqpx0RNvJEemxceLo63skGrQy/qmRP4D7kMwBrDmFhUBkH5XA
Ea8gFToRoPEEuLNLF83xIcYRFuxVaJUA2vR6/6s3XQ==
=iD4Z
-----END PGP SIGNATURE-----