<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p><br>
</p>
<div class="moz-cite-prefix">On 13/10/2025 16:35, Salz, Rich via
cryptography wrote:<br>
</div>
<blockquote type="cite"
cite="mid:MN2PR17MB403182B069E4EBB2E659F4EACDEAA@MN2PR17MB4031.namprd17.prod.outlook.com">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<ul
data-editing-info="{"applyListStyleFromLevel":false,"unorderedStyleType":4}"
style="margin-top: 0px; margin-bottom: 0px;">
<li
style="font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0); list-style-type: "➢ ";">
<div dir="ltr" role="presentation">The problem in a nutshell.
Surveillance agency NSA and its partner GCHQ</div>
</li>
<li
style="font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0); list-style-type: "➢ ";">
<div dir="ltr" role="presentation">are trying to have
standards-development organizations endorse weakening</div>
</li>
<li
style="font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0); list-style-type: "➢ ";">
<div dir="ltr" role="presentation">ECC+PQ down to just PQ.</div>
</li>
</ul>
<div dir="ltr"
style="font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<br>
</div>
<div dir="ltr"
style="font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
Maybe that’s what they want, but the IETF is not doing that, no
matter what Dan writes. While there is a non-hybrid MLKEM draft
in the TLS working group, it has seen zero uptake. Compared to
the hybrid key exchange draft, which is widely deployed on the
Web. Signatures are another matter, as some argumentative folks
delayed progress on the hybrid signature format for so long that
industry might just have stopped waiting (cf ANSI X9 PKI).</div>
</blockquote>
<p><br>
</p>
<p>There's uptake, *and* there's standards. With an IETF standard in
the back pocket, NSA can then trick various less educated players
into using it. And then make hay until their sun goes down. This
is more or less what happened with Dual_EC, or so the rumour goes.</p>
<p>iang</p>
</body>
</html>