[purplehat_]

For people reading this, you may want to know the the NSA is allegedly trying to weaken hybrid ML-KEM and X25519 down to just ML-KEM. This is a good thing to pay attention to!

Here is a 6-part article about the topic: https://blog.cr.yp.to/20251004-weakened.html

[throw0101a]

> Here is a 6-part article about the topic: https://blog.cr.yp.to/20251004-weakened.html

* https://news.ycombinator.com/item?id=45477206

* https://news.ycombinator.com/item?id=45477206#unv_45477799

See various "NSA and IETF":

* https://news.ycombinator.com/from?site=cr.yp.to

[trueno]

is this insinuating that we, collectively, are not 100% confident that ML-KEM on it's own is going to be enough & deduct that the NSA wants the omission of X25519 as sort of a backdoor possibility?

[tptacek]

I haven't met a single cryptographer who takes this series of posts seriously and if you have I'd love to talk to them.