NSA tries to weaken mlkem standardisation
NSA's Campaign to Undermine MLKEM Standardization
Context: The SIGINT Enabling Project
The National Security Agency (NSA) operates a program known as the SIGINT Enabling Project, the primary goal of which is the sabotage of cryptographic standards to ensure intelligence accessibility.
Currently, the NSA is openly funding the standardization of ietf-tls-mlkem. This is a significantly weakened version of the more logical and secure ietf-tls-ecdhe-mlkem.
Comparison of Proposed Standards
| Standard | Primary Proponent | Security Profile | Status |
|---|---|---|---|
ietf-tls-ecdhe-mlkem | Cryptographic Community | Preferred | |
ietf-tls-mlkem | NSA | Pushed by NSA |
The Shift in Tactics
As community objections mounted, the NSA's representatives altered their rhetoric. They moved away from transparent demands toward deceptive justifications:
"The NSA demands this specific standard, so it should be adopted.""Here are these fabricated technical reasons why this is the superior choice."
For those seeking a more concise breakdown of these deceptive talking points, a shorter guide is available.
The Voting Timeline and "Room Packing"
Despite their efforts, the NSA initially failed in the most recent vote within the IETF TLS working group. In response, they initiated a new vote on June 24, 2026, and began a strategy of "packing the room" with new supporters.
A prime example of this is Mike Jenkins (NSA), who cast a positive vote on June 25, 2026, despite having zero prior presence on the working-group mailing list. This is permissible because IETF regulations state:
- "There is no membership in the IETF"
- "Anyone can participate by signing up to a working group mailing list"
🚨 Call to Action
To prevent the adoption of the weakened standard, you must take the following steps:
- Subscribe to the IETF TLS mailing list.
- Compose a message stating your opposition to the publication of the document.
- Ensure the email is sent by July 7, 2026.
- Use the exact subject line provided below:
Re: [TLS] WG Last Call: draft-ietf-tls-mlkem-08 (Ends 2026-07-08)
A Note on Privacy: While using a pseudonym may seem safer, it is discouraged here. Proponents of the NSA standard often use the presence of anonymous accounts as a pretext to dismiss the entire opposition.
Current Status
As of July 1, 2026, there have been over 30 formal statements of opposition. You can find various examples of these objections—ranging in length and detail—via Christian Grothoff.