Kyber is the fastest KEM after Rainbow. Once Rainbow was broken, Kyber was the obvious choice. NIST delayed as long as it did to perform due diligence.
Re:A quick post on Chen's algorithm
by jameswryan on Tuesday April 16, 2024 @08:20PM
(#40059011)
Rainbow is not a KEM, but a signature scheme.
> NIST-approved schemes based on lattice problems include Kyber and Dilithium (which I wrote about recently.)
> Chen’s algorithm does not immediately apply to the recently-standardized NIST algorithms such as Kyber or Dilithium.
And it's not just Signal. Apples new iMessage protocol, PQ3, uses Kyber, too. [1] Most deployments of PQ-crypto that I know of have used Kyber.
[1] https://security.apple.com/blog/imessage-pq3/