Post #1249798

@djb Welp, I think it's safe to assume that ML-KEM is already broken and so is the IETF TLS committee. Lovely.