IETF SSH group weighs pure vs hybrid post-quantum signatures
A three-week adoption call pits NIST and FIPS-driven demand for standalone ML-DSA against warnings that new PQ code will ship with exploitable bugs.
By ttlInternet & Protocols
CFRG weighs Silithium hybrid signature against Mothma
A new draft pairs ML-DSA with elliptic-curve operations for smaller hybrid signatures, drawing scrutiny over strong unforgeability, code size, and hedging.
By ttlCFRG last call opens on hybrid PQ/T KEM drafts
Bernstein objects to multiple combiners as needless complexity; MLS implementers plan immediate use of the concrete hybrids.
By ttl