Post #1068097

2026-04-11 00:15 UTC

Alright, it&#39;s official! 💰 @matthew_d_green and I bet on what will break first, ML-KEM-768 or X25519. The loser donates to a 501(c)(3) picked by the winner. If you have an opinion on quantum computers or lattices, you can join with a side bet. Just submit a PR! https://github.com/FiloSottile/ecc-vs-lattices-long-bet

Replies (5)

@eckes@zusammenkunft.net 2026-04-11 00:23

@filippo @matthew_d_green the question is, who will survive till broken :)

Open ##1068107
@vathpela@infosec.exchange 2026-04-11 00:38

@filippo @matthew_d_green does key material re-use count as breaking?

Open ##1068109
@i@toot.pouyan.net 2026-04-11 06:23

@filippo @matthew_d_green I’d also love to see a physicist take part. This is getting really wild!

Open ##1081776
@bascule@mas.to 2026-07-04 16:40

@filippo@abyssdomain.expert @matthew_d_green@ioc.exchange “neither” (by 2040) seems like a fun contrarian position

Open ##3598312
@mikalai@privacysafe.social 2026-07-05 01:25

@filippo@abyssdomain.expert @matthew_d_green@ioc.exchange Given have furious IETF WG chairs are at pushing pq-only, RECOMENDED=N item, bet should be in pointing students to looking/poking/hacking pushed algo(s). RECOMENDED=N was a publishing place in 1980s-90s. But in 2026 anyone can publish on sites. While IETF stuff will be taken as gosspel, by devs ... like myself. And that may be a vector. So, make students look. Yes @filippo@abyssdomain.expert True academic bets with student time, not money. May be you never had this perspective. 😉

Open ##3598314