A Cryptography Engineer's Perspective on Quantum Computing Timelines

Re:A Cryptography Engineer's Perspective on Quantum Computin... by Perseids on Wednesday April 08, 2026 @03:02AM (#47686372)

> This is like saying we should have halted all RSA deployments until improvements in sieving stopped happening.

Absolutely not. If people were advocating for ECC only, you would have a point. But this thread is about hybrids vs ML-KEM-only (for key exchange!). Everybody here wants to deploy the algorithm your favoring and wants to deploy it now, just not without a safety net.

[ Parent | on HN ]

Re:A Cryptography Engineer's Perspective on Quantum Computin... by tptacek on Wednesday April 08, 2026 @09:09AM (#47689708)

I don't understand. We didn't have hybrids for RSA while sieving improved.

[ Parent | on HN ]

Re:A Cryptography Engineer's Perspective on Quantum Computin... by adgjlsfhk1 on Wednesday April 08, 2026 @09:48AM (#47690192)

RSA was the first. If ECC didn't exit, no one would be saying that we have to hybridize Kyber, but since it does, and the hybrid has ~0% overhead, it's very silly not to.

[ Parent | on HN ]