HI All
Most post-quantum implementations, including Apple's PQ3, rely on a hybrid of traditional and PQC algorithms. So why are governments in the US and the UK still lukewarm on this concept?
In January, Daniel Bernstein posted an interesting blog with his views. It's worth reading if you're building a quantum-safe system and are debating whether to go hybrid or not.
For those new to Bernstein's writing: brace yourself for conspiracy-theory vibes and plentiful jabs at NIST, the NSA, and allied organisations (like GCHQ). Yet, there is wisdom in what he writes. He carefully dissects the arguments against using hybrid modes and finds them wanting.
https://blog.cr.yp.to/20240102-hybrid.html
Regards
Caute_Cautim
