2026.07.07 23:32:35 (Mastodon 116881303518832342, Twitter 2074637742680715714) from Daniel J. Bernstein:
Retort from Cisco's Richard Barnes to "What if ML-KEM implementations have bugs?" is "What if ECDH implementations have bugs?" (his words). Does he not understand that the point of ECDH+ML-KEM is to face the attacker with the problem of breaking the ECDH key _and_ the ML-KEM key?