Post #1249771
2026-04-13 22:26 UTC
@letoams @huitema @paulehoffman @rsalz ML-KEM-768 has 1184-byte public keys and 1088-byte ciphertexts. Bleeding-edge ML-DSA-44 has 1312-byte public keys and 2420-byte signatures. It ends up sounding pretty damn stupid to complain about the extra cost of also continuing to send 32-byte ECC keys and 32-byte ECC ciphertexts.
Replies (1)
-
@pedromj@mastodon.social 2026-04-13 22:31
@djb @letoams @huitema @paulehoffman @rsalz I insist [1], this fits into a new I-D. [1] https://mastodon.social/@pedromj/116399619082728297