@techreport{mularczyk-mls-splitcommit-00,
    number =    {draft-mularczyk-mls-splitcommit-00},
    type =      {Internet-Draft},
    institution =   {Internet Engineering Task Force},
    publisher = {Internet Engineering Task Force},
    note =      {Work in Progress},
    url =       {https://datatracker.ietf.org/doc/draft-mularczyk-mls-splitcommit/00/},
    author =    {Joël and Marta Mularczyk},
    title =     {{MLS Split Commits}},
    pagetotal = 9,
    year =      2024,
    month =     oct,
    day =       21,
    abstract =  {This document describes an extension to the MLS protocol {[}RFC940{]} that improves its efficiency in terms of per-member download size. This comes at essentially no cost. In essence, this document defines a new message type called split commit which replaces regular MLS commits. Unlike regular commits, a split commit can be "split" by the Delivery Service (DS) into much smaller per-member commits, one for each receiving member. The size of a per-member commit is always logarithmic in the group size, while the size of a regular MLS commit can be linear. This extension works in settings with a DS that can do the splitting which can be demanding with encrypted MLS handshake messages. This is motivated by academic research {[}KKP22{]}, {[}HKPPW22{]}, {[}AHKM22{]}.},
}