Deirdre, could you please add a statement to draft-ietf-tls-mlkem referencing that hybrids are preferred, ideally citing my analysis once it hits ePrint? I know that we have the RECOMMENDED=Y/N column, but I believe that adding this statement to the draft could enrich it with context that reflects our current understanding and provides valuable context to future readers. This is especially the case since Table 2, for example, in my analysis provides a granular and pedagogical overview of exactly how formal analysis has shown differences between pure DH, pure ML-KEM, and hybrid constructions.
Thanks, Nadim Kobeissi Symbolic Software • https://symbolic.software > On 5 Jun 2026, at 8:51 PM, Deirdre Connolly <[email protected]> wrote: > > Correct, all versions of draft-ietf-tls-mlkem including before adoption have > had Recommended=N for all parameter sets > > On Fri, Jun 5, 2026, 3:34 PM Salz, Rich <[email protected] > <mailto:[email protected]>> wrote: >> This happened after a significant amount of time and was deliberately >> steered toward the opposite of said result >> >> My recollection and view is the exact opposite. ML-KEM key exchange was >> never going to be RECOMMENDED=Y. The system worked. The “outside >> interference” just made it more complicated and caused a great deal of bad >> blood and distrust. >> >> >> _______________________________________________ >> TLS mailing list -- [email protected] <mailto:[email protected]> >> To unsubscribe send an email to [email protected] >> <mailto:[email protected]> > _______________________________________________ > TLS mailing list -- [email protected] > To unsubscribe send an email to [email protected]
_______________________________________________ TLS mailing list -- [email protected] To unsubscribe send an email to [email protected]
