On Thu, Jul 2, 2026 at 3:43 PM Yaakov Stein <ystein= [email protected]> wrote:
> ➢ I do see a need to move to ML-DSA, for which there is no agreement on > which hybrid to use. > > On this topic my view is the opposite. > I can't understand the rationale behind hybrid DSAs. > > Before a CRQC becomes available there is no need for the PQC version > after it becomes available there is no need for the traditional one. > I agree, but there is disagreement on when the CRQC becomes available. A hybrid could begrudgingly be accepted by those that think CRQCs are near and those that think CRQCs are far away. Unfortunately there is no agreement on which hybrid, and thus I see pure ML-DSA as the interopable and thus quantum-secure way forward. > > Y(J)S > > > This message is intended only for the designated recipient(s). It may > contain confidential or proprietary information. If you are not the > designated recipient, you may not review, copy or distribute this message. > If you have mistakenly received this message, please notify the sender by a > reply e-mail and delete this message. Thank you. >
_______________________________________________ TLS mailing list -- [email protected] To unsubscribe send an email to [email protected]
