[TLS] Re: FATT Chance: On the Robustness of Standalone and Hybrid ML-KEM Key Exchange in TLS 1.3

[Salz, Rich]

  *
we add a statement on preference of hybrids and refer to the paper in the 
security considerations of draft-ietf-tls-mlkem.

We already do that by marking the hybrid as RECOMMENDED=Y and the pure-ML-KEM 
as RECOMMENDED=N


_______________________________________________
TLS mailing list -- tls@ietf.org
To unsubscribe send an email to tls-le...@ietf.org