On Tue, Jun 30, 2026 at 2:09 PM Blumenthal, Uri - 0553 - MITLL < [email protected]> wrote:
> People seem to keep forgetting (or ignoring) the whole purpose of the PQ. > > If your data won’t remain sensitive by the time CRQC arrives - you don’t > en need a hybrid. Just use your Classic ECC, experiment with PQ or not, and > prepare for eventual transition at some point in the future. > > If your data will remain sensitive - then the difference between “it got > compromised today” and “it got compromised with CRQC” is small, and ECC > won’t help at all. > That's not the argument, though. It's that classical attacks might break the PQ algorithms. Something that has already happened. thanks, Rob
_______________________________________________ TLS mailing list -- [email protected] To unsubscribe send an email to [email protected]
