Post #1152440
2026-04-14 22:34 UTC
@pedromj@mastodon.social @djb@mastodon.cr.yp.to @paulehoffman@infosec.exchange @rsalz@ioc.exchange After publication of naked ML-KEM, we could try to sway opinion by publishing Internet drafts such a "naked ML-KEM considered harmful". We could lobby browser vendors to not implement that. We could publish in news papers, rally suppport from the EFF, etc. All that may help getting people to deploy hybryd ML-KEM instead. But it would help more if there is an warning in the naked ML-KEM draft itself.
Replies (2)
-
@rsalz@ioc.exchange 2026-04-14 23:22
@huitema@social.secret-wg.org @pedromj@mastodon.social I'll assume you read the draft and the PR with the revised security considerations. You also know that pushing on social media doesn't much impact IETF, unless you're trying to do brigading which I do not think you are.
-
@djb@mastodon.cr.yp.to 2026-04-15 04:02
@huitema @pedromj @paulehoffman @rsalz You're confused. The normal way to deploy post-quantum KEMs is _already_ as a second layer _on top_ of ECC. See the long list of examples at the top of https://blog.cr.yp.to/20251004-weakened.html. What NSA has been trying to do is pay for IETF endorsement of a weaker alternative that removes ECC.