3 ms·
Yes, the current generally-but-not-universally-accepted standard is "hybrid encryption" (not the same "hybrid" as KEM/DEM, though you'd generally use hybrid enc
by HillRat 3y ago
Yes, the current generally-but-not-universally-accepted standard is "hybrid encryption" (not the same "hybrid" as KEM/DEM, though you'd generally use hybrid encryption with a hybrid KEM/DEM cryptosystem), which ensures that you'd have to break both classical and post-quantum algorithms to get at your plaintext. Whether you simply wrap encryptions or use a hybrid KEM combiner (see, e.g., Campagna and Petcher for examples) is a more subtle question better suited for more subtle minds than mine.