diff --git a/draft-kwiatkowski-tls-ecdhe-mlkem.md b/draft-kwiatkowski-tls-ecdhe-mlkem.md index 23efc10..1495b9e 100644 --- a/draft-kwiatkowski-tls-ecdhe-mlkem.md +++ b/draft-kwiatkowski-tls-ecdhe-mlkem.md @@ -121,13 +121,13 @@ The size of the client share is 1216 bytes (1184 bytes for the ML-KEM part and 3 When the SecP256r1MLKEM768 group is negotiated, the client's key_exchange value is the concatenation of the secp256r1 ephemeral share and ML-KEM-768 encapsulation key. The ECDHE share is the serialized value of the uncompressed ECDH point representation as -defined in Section 4.2.8.2 of {{!RFC8446}}. The size of the client share is 1249 bytes +defined in {{Section 4.2.8.2 of !RFC8446}}. The size of the client share is 1249 bytes (65 bytes for the secp256r1 part and 1184 bytes for ML-KEM). When the SecP384r1MLKEM1024 group is negotiated, the client's key_exchange value is the concatenation of the secp384r1 ephemeral share and the ML-KEM-1024 encapsulation key. The ECDH share is serialised value of the uncompressed ECDH point -represenation as defined in Section 4.2.8.2 of {{!RFC8446}}. The size of the +represenation as defined in {{Section 4.2.8.2 of !RFC8446}}. The size of the client share is 1665 bytes (97 bytes for the secp384r1 and the 1568 for the ML-KEM). ### Server share @@ -172,13 +172,13 @@ shared secret and the X25519 shared secret. The shared secret is 64 bytes For SecP256r1MLKEM768, the shared secret is the concatenation of the ECDHE and ML-KEM shared secret. The ECDHE shared secret is the x-coordinate of the ECDH shared secret elliptic curve point represented as an octet string as -defined in Section 7.4.2 of {{!RFC8446}}. +defined in {{Section 7.4.2 of !RFC8446}}. The size of the shared secret is 64 bytes (32 bytes for each part). For SecP384r1MLKEM1024, the shared secret is the concatenation of the ECDHE and ML-KEM shared secret. The ECDHE shared secret is the x-coordinate of the ECDH shared secret elliptic curve point represented as an octet string as -defined in Section 7.4.2 of {{!RFC8446}}. +defined in {{Section 7.4.2 of !RFC8446}}. The size of the shared secret is 80 bytes (48 bytes for the ECDH part and 32 bytes for the ML-KEM part). @@ -274,6 +274,7 @@ This document obsoletes 25497 and 25498 in the TLS Supported Groups registry. * draft-kwiatkowski-tls-ecdhe-mlkem-03: * Adds P-384 combined with ML-KEM-1024 + * Adds text that describes error-handling and outlines how the client and server must ensure the integrity of the key exchange process. * draft-kwiatkowski-tls-ecdhe-mlkem-02: * Adds section that mentions supported groups that this document obsoletes.