[g-b-r]

> The more cryptography-literate you are, the more likely it is you think hybrids are silly

You are if you're considering a cypher that's extremely likely to be secure.

In this case we're ok to introduce something with a chance to be quantum-resistant before it's been studied enough, because we want a chance of being quantum-resistant soon.

But that's only ok if you add it to the existing, reliable, systems.

Were there not the issue of quantum computers we wouldn't even be considering to use different cyphers at this time.

[tptacek]

It's "cipher". But we're not talking about ciphers; we're talking about key establishment algorithms.

[g-b-r]

Ok, yes, replace "cypher" with cryptographic primitive.

Maybe I said cypher for the AES+Serpent mention (and because I like cyberpunk xD)

[xnorswap]

It's cypher in British English.

[tptacek]

Exercise for the reader (out of genuine interest): find the most important cryptographic paper published in the last 15 years that uses the British spelling.

[xnorswap]

Why the 15 year cut-off?

Besides, I don't doubt the US spelling has taken over, that has happened a lot in a wide range of fields, but it doesn't invalidate the British spelling, even if it isn't as widely used in recent published papers.

It's like claiming that the element is sulfur not sulphur, because papers are increasingly written for an international audience. In British English, the element is Sulphur, regardless of whether you can find an "important paper" using the spelling.

[tptacek]

I don't know what the idiom is in chem, but if I was a chemist and you used idiosyncratic layperson spelling, I would get signal from that.

[wglb]

Isn't it true that OED say that "cipher" is the primary, preferred spelling in modern British English?