[Cryptography] Informed opinion on China's SM3 hash ?

[Salz, Rich]

Does anyone have an informed (cryptographically-oriented, not politically) opinion about the SM3 hash algorithm?

I ask because there is a pull request to add a hybrid MLKEM/25519 with SM3 instead of SHA3 as the digest.  This is *adding* a key exchange mechanism and it will of course require both sides to want it. I am also asking because unlike SHA[123], MD[45], and the Gost digests, I haven’t seen much analysis of SM3.  That could be my mistake, please let me know if so. I’ll send the PR URL to anyone who asks, if only to because I am most interested in SM3 the algorithm, not this particular use of it.

Thanks.  Replies to me will be summarized for the list.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://www.metzdowd.com/pipermail/cryptography/attachments/20241209/1f224801/attachment.htm>