[TLS] Re: ML-KEM security considerations

[Stephen Farrell]

On 10/04/2026 18:24, Eric Rescorla wrote:

On Fri, Apr 10, 2026 at 10:16 AM Stephen Farrell <stephen.farr...@cs.tcd.ie>
wrote:

On 10/04/2026 18:04, Eric Rescorla wrote:

As I said, my preference is for hybrids, but I think trying to produce

some

text that will achieve consensus that says, in essence, "hybrids are

better"

is quite challenging and probably not worth the effort.

Disagree as to it being worthwhile. This WG has spent loads of
cycles due to the lack of consensus on the topic.

Which you propose to remedy by spending yet more cycles?

We're inevitably gonna do it anyway so long as this draft keeps
being WGLC'd;-(

I also consider that it shouldn't really be that difficult as I
do think most people consider, as do you and I, that hybrids are
the better choice as of now.

S.

-Ekr

OpenPGP_signature.asc
Description: OpenPGP digital signature

_______________________________________________
TLS mailing list -- tls@ietf.org
To unsubscribe send an email to tls-le...@ietf.org