[TLS] Re: New Individual Draft: State Graph Cryptographic Protocol (SGCP)

This work looks interesting, but it is not within the scope of what the TLS working group is chartered[1] to do.

You may want to bring this to the DISPATCH group [2; and look at the wiki mentioned there] mailing list. Some early questions that come to mind, and are likely to be repeated:

  *
Is anyone else involved in this work?
  *
How does this work across load balancers?

[1] https://datatracker.ietf.org/wg/tls/about/
[2] https://datatracker.ietf.org/wg/dispatch/about/

On 8/15/26, 3:01 AM, "sripad karthik" <[email protected]> wrote:

This Message Is From an External Sender
This message came from outside your organization.

Hello TLS WG,

I have submitted an individual Internet draft proposing the State Graph Cryptographic Protocol (SGCP):

https://datatracker.ietf.org/doc/draft-sgcp-state-graph-cryptographic-protocol/<https://urldefense.com/v3/__https://datatracker.ietf.org/doc/draft-sgcp-state-graph-cryptographic-protocol/__;!!GjvTz_vk!V2xGj2WbI4PpuVi6E6WDXmsJ4tuT-0ctBzDl3akYI5GGPHF7Bd17cHUNRudw3RQhhKo8WT4lS0pVC1Kmqlf8$>

SGCP is a communication-security framework that extends the transport security model by introducing a cryptographic state graph-a deterministically derived directed graph in which
each node represents a valid session state (keyed to epoch, sequence number, and context), and each edge represents a cryptographically authenticated state transition.

Key properties:
  - Mutual authentication via X.509 certificates
  - Forward-secure key establishment via ECDH / ML-KEM (hybrid PQ)
  - Per-packet unique keys derived from state graph position
  - Continuous context binding (Device-Port-Socket tuple)
  - Epoch-based key rotation with replay protection
  - Cryptographically authenticated state transitions

I believe TLS WG is the appropriate home for this work given its focus on transport security and key establishment. I welcome any technical feedback from the community.

Best regards,
Sripad Karthik
Draft: https://datatracker.ietf.org/doc/draft-sgcp-state-graph-cryptographic-protocol/<https://urldefense.com/v3/__https://datatracker.ietf.org/doc/draft-sgcp-state-graph-cryptographic-protocol/__;!!GjvTz_vk!V2xGj2WbI4PpuVi6E6WDXmsJ4tuT-0ctBzDl3akYI5GGPHF7Bd17cHUNRudw3RQhhKo8WT4lS0pVC1Kmqlf8$>
https://www.linkedin.com/in/sripadrh/<https://urldefense.com/v3/__https://www.linkedin.com/in/sripadrh/__;!!GjvTz_vk!V2xGj2WbI4PpuVi6E6WDXmsJ4tuT-0ctBzDl3akYI5GGPHF7Bd17cHUNRudw3RQhhKo8WT4lS0pVC6zq5BPI$>

_______________________________________________
TLS mailing list -- [email protected]
To unsubscribe send an email to [email protected]