Yep, rustls does this. Our writeup: https://rustls.dev/perf/2024-12-17-pq-kx/
Thanks, Joe On Tue, 17 Mar 2026 at 08:26, Martin Thomson <[email protected]> wrote: > On Tue, Mar 17, 2026, at 15:29, Viktor Dukhovni wrote: > > No worries, thanks, so that optimisation remains possible in theory. I > > am not aware of any TLS stacks that do this in practice, but perhaps > > some day someone might be sufficiently motivated to go there, and then > > it should work. > > I know of several stacks (NSS included, maybe also rustls) that do a > smaller-scale version of the optimization you described. It was a point of > discussion on this list a while back. > > _______________________________________________ > TLS mailing list -- [email protected] > To unsubscribe send an email to [email protected] >
_______________________________________________ TLS mailing list -- [email protected] To unsubscribe send an email to [email protected]
