@argv_minus_one@mastodon.sdf.org
Post #1249824
2026-04-11 03:46 UTC
@rsalz
Do you have another explanation for the inexplicable push for the IETF to specify non-hybrid ML-KEM?
I looked at the list of arguments compiled by @djb at https://blog.cr.yp.to/20260221-structure.html and I don't see any particularly compelling argument in favor of such a move. Nor can I think of one myself. Certainly nothing to justify going full speed ahead like this.
@darkuncle
Replies (1)
-
@rsalz@ioc.exchange 2026-04-12 16:09
@argv_minus_one "Do you have another explanation for the inexplicable push for the IETF to specify non-hybrid ML-KEM?" I don't know why you see it as inexplicable. Some people want it for various reasons, and not because they are NSA fronts. I can see various places where the size differential (time, bits on the wire, CPU cost) are not negligible to the environment, or where the cost of eventually transitioning off hybrid are not practical (subs, satellites, zillions of telephone poles, etc).