Hacker News new | past | comments | ask | show | jobs | submit login

NIST does not refuse hybridization, they will be publishing guidance on hybrid schemes in the draft of SP 800-227 at the same time as the final standards. They don't impose it though, because at a large scale it's more efficient to run just (fast) ML-KEM instead of (fast) ML-KEM + (slower) ECDH, which more than doubles your computation time for what they see as no benefit.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: