draft-ietf-tls-ecdhe-mlkem is now RFC 10024 Change-Id: I085bbb7c5d235edd9a5713a204c47ef2b21013cc Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/100647 Presubmit-BoringSSL-Verified: boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com <boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com> Reviewed-by: Adam Langley <agl@google.com> Auto-Submit: David Benjamin <davidben@google.com> Commit-Queue: Adam Langley <agl@google.com>
diff --git a/docs/tls_named_groups.md b/docs/tls_named_groups.md index f4d6c22..d24677b 100644 --- a/docs/tls_named_groups.md +++ b/docs/tls_named_groups.md
@@ -1,6 +1,6 @@ # Curves, groups, and KEMs, oh my! -TLS calls [X25519MLKEM768](https://www.ietf.org/archive/id/draft-ietf-tls-ecdhe-mlkem-04.html) a “named group” or “group”. It was once called a “named curve” or just “curve”. Neither term fits. “Curve” and “group”, in the context of TLS, are now terms of art that mean “key agreement”, with no remaining connection to either their English or mathematical meaning. +TLS calls [X25519MLKEM768](https://www.rfc-editor.org/info/rfc10024/) a “named group” or “group”. It was once called a “named curve” or just “curve”. Neither term fits. “Curve” and “group”, in the context of TLS, are now terms of art that mean “key agreement”, with no remaining connection to either their English or mathematical meaning. This situation can only be understood following the protocol's history:
diff --git a/ssl/ssl_key_share.cc b/ssl/ssl_key_share.cc index fedfc1c..84394b2 100644 --- a/ssl/ssl_key_share.cc +++ b/ssl/ssl_key_share.cc
@@ -192,7 +192,7 @@ uint8_t private_key_[32]; }; -// draft-ietf-tls-ecdhe-mlkem-00 +// RFC 10024 class X25519MLKEM768KeyShare : public SSLKeyShare { public: X25519MLKEM768KeyShare() {}
diff --git a/ssl/test/runner/key_agreement.go b/ssl/test/runner/key_agreement.go index 0e55495..7eaa17e 100644 --- a/ssl/test/runner/key_agreement.go +++ b/ssl/test/runner/key_agreement.go
@@ -514,7 +514,7 @@ case CurveX25519: kem = &ecdhKEM{curve: ecdh.X25519()} case CurveX25519MLKEM768: - // draft-ietf-tls-ecdhe-mlkem-00 + // RFC 10024 kem = &concatKEM{kem1: &mlkem768KEM{}, kem2: &ecdhKEM{curve: ecdh.X25519()}} case CurveMLKEM1024: // draft-ietf-tls-mlkem-04