Post #1202072

@filippo @jornfranke I wouldn't say they are necessarily easier, but we stand on the shoulder of giants, these days we have tools and knowledge the RSA pioneers hadn't even dreamt of yet, so a lot of the pitfalls are much easier to avoid. The cryptography community also builds bullet proof algorithms these days, not just primitives everyone has to figure out how tp make secure by themselves. All that said ML-KEM and ML-DSA's power and timing side-channel analysis is much harder, but doable!