3 ms·

if the proposal was ml-kem+ecc hybrid that removed sha2 and replaced it with sha3, no one would be objecting