@argv_minus_one@mastodon.sdf.org
Post #1120212
2026-04-10 20:34 UTC
@djb@mastodon.cr.yp.to
Why do they want non-hybrid KEMs and signatures, anyway? Seems like a bad idea to protect all of everything with nothing but unproven crypto.
Replies (1)
-
@djb@mastodon.cr.yp.to 2026-04-10 21:10
@argv_minus_one@mastodon.sdf.org I have an introductory chart https://blog.cr.yp.to/20260221-structure.html showing the arguments and counterarguments. Most common argument from proponents: NSA is asking for non-hybrids, ergo support non-hybrids. This argument works for (1) companies chasing NSA money, (2) companies that take any excuse for extra options as a barrier to entry for competitors, and (3) people who think that "NSA Cybersecurity" isn't a conduit for https://www.eff.org/files/2014/04/09/20130905-guard-sigint_enabling.pdf but rather an independent pro-security agency.