Post #3695714

@huitema@social.secret-wg.org I was gobsmacked when I saw his message. It really is an understated way of drawing a line from the backdooring of DUAL_EC_DRBG and the removal of the hash over `m` in ML-KEM -- and why they want to publish a standard [1] for PQ ML-KEM *without* an ECC backstop/safety net. [1] `recommended = N` or not, `status: informational` or not, publishing it as an RFC makes it a standard to a large chunk of the world, and people *will* implement it.