@jornfranke@social.anoxinon.de
Post #1202068
2026-04-06 18:05 UTC
@filippo Cryptographic experts might be confident in the security of lattice, but I would be not confident in their secure implementation. It took decades to get the implementation right for classical algorithms and they are still often wrongly implemented. This is a big security problem.
Replies (1)
-
@filippo@abyssdomain.expert 2026-04-06 18:13
@jornfranke I am a cryptography engineer so I can tell you from experience: no, ML-KEM and ML-DSA are easier to implement and easier to test than all their classical alternatives.