Something that has already happened *to a moon math submission that was not as widely understood as lattices*. SIKE being broken was the international standardization effort successfully working to motivate folks to find attacks against novel cryptosystems. Using it as an indictment of an unrelated algorithm is alarmingly ignorant.
On Tue, Jun 30, 2026 at 5:13 PM Rob Sayre <[email protected]> wrote: > On Tue, Jun 30, 2026 at 2:09 PM Blumenthal, Uri - 0553 - MITLL < > [email protected]> wrote: > >> People seem to keep forgetting (or ignoring) the whole purpose of the PQ. >> >> If your data won’t remain sensitive by the time CRQC arrives - you don’t >> en need a hybrid. Just use your Classic ECC, experiment with PQ or not, and >> prepare for eventual transition at some point in the future. >> >> If your data will remain sensitive - then the difference between “it got >> compromised today” and “it got compromised with CRQC” is small, and ECC >> won’t help at all. >> > > > That's not the argument, though. It's that classical attacks might break > the PQ algorithms. Something that has already happened. > > thanks, > Rob > > _______________________________________________ > TLS mailing list -- [email protected] > To unsubscribe send an email to [email protected] >
_______________________________________________ TLS mailing list -- [email protected] To unsubscribe send an email to [email protected]
