2 ms·
They are slower, larger, and less tested. Specifically the hope was to develop hybrids that could also provably be more pre-quantum secure then what they are re
by ZiiS 6mo ago
They are slower, larger, and less tested. Specifically the hope was to develop hybrids that could also provably be more pre-quantum secure then what they are replacing. History dose not favour rushing cryptography.
- Hendrikto 6mo agoYou misread the comment you replied to.
- KAMSPioneer 6mo agoWhich, to be fair, is easy to do because they used a triple-negative. Rephrased, they meant to say "there is no reason to remove support for quantum-vulnerable algorithms in the near future." IMO that's much less likely to be accidentally misinterpreted.
- bwesterb 6mo agoThey are large, but they're not that slow actually. We've been testing them for almost a decade now. I agree that rushing is bad. That's why we need to start moving now, so that we're not rushing even closer to the deadline.