In which I argue that we should pick P-256 + ML-KEM-768 as the one true hybrid, reducing implementer workload and attack surface.
Thing is, P-256 is actually very pleasant to implement these days. The world changed compared to ten years ago.
https://mailarchive.ietf.org/arch/msg/tls/n_jM_bRZN8DM7SnpBMGA6SqpD6Q/
Filippo Valsorda :go: /
npub1wh…akn2m
2024-06-02 21:05:31
Author Public Key
npub1whzyg92c6fsvpjjcnn504z0a2pfwenctp872sgmedqg2np4drj8qwakn2mPublished at
2024-06-02 21:05:31Event JSON
{
"id": "262b379849fda9004a32cd6ca2c6acd874c69ee5d4bb3799c34f555b788b29ce",
"pubkey": "75c4441558d260c0ca589ce8fa89fd5052eccf0b09fca823796810a986ad1c8e",
"created_at": 1717362331,
"kind": 1,
"tags": [
[
"proxy",
"https://abyssdomain.expert/users/filippo/statuses/112549057756769988",
"activitypub"
]
],
"content": "In which I argue that we should pick P-256 + ML-KEM-768 as the one true hybrid, reducing implementer workload and attack surface.\n\nThing is, P-256 is actually very pleasant to implement these days. The world changed compared to ten years ago.\n\nhttps://mailarchive.ietf.org/arch/msg/tls/n_jM_bRZN8DM7SnpBMGA6SqpD6Q/",
"sig": "5aa23cf12fc8b4a4de2b35e82a372b59d46a1bdfb46e8806bdf0cdf7659d362fac596bf3b5830c3dd2bf0f11cac971e6451ab61cb4139f4929b04ce14ddd0d9e"
}