Flexible Hybrid PQ MLS Combiner
draft-hale-mls-combiner-01
| Document | Type |
Replaced Internet-Draft
(mls WG)
Expired & archived
|
|
|---|---|---|---|
| Authors | Joël , Britta Hale , Marta Mularczyk , Xisen Tian | ||
| Last updated | 2025-02-26 (Latest revision 2024-09-26) | ||
| Replaced by | draft-ietf-mls-combiner | ||
| RFC stream | Internet Engineering Task Force (IETF) | ||
| Intended RFC status | (None) | ||
| Formats | |||
| Additional resources |
GitHub Repository
Mailing list discussion |
||
| Stream | WG state | Adopted by a WG | |
| Document shepherd | (None) | ||
| IESG | IESG state | Replaced by draft-ietf-mls-combiner | |
| Consensus boilerplate | Unknown | ||
| Telechat date | (None) | ||
| Responsible AD | (None) | ||
| Send notices to | (None) |
This Internet-Draft is no longer active. A copy of the expired Internet-Draft is available in these formats:
Abstract
This document describes a protocol for combining a traditional MLS session with a post-quantum (PQ) MLS session to achieve flexible and efficient hybrid PQ security that amortizes the computational cost of PQ Key Encapsulation Mechanisms and Digital Signature Algorithms. Specifically, we describe how to use the exporter secret of a PQ MLS session, i.e. an MLS session using a PQ ciphersuite, to seed PQ guarantees into an MLS session using a traditional ciphersuite. By supporting on-demand traditional-only key updates (a.k.a. PARTIAL updates) or hybrid-PQ key updates (a.k.a. FULL updates), we can reduce the bandwidth and computational overhead associated with PQ operations while meeting the requirement of frequent key rotations.
Authors
Joël
Britta Hale
Marta Mularczyk
Xisen Tian
(Note: The e-mail addresses provided for the authors of this Internet-Draft may no longer be valid.)