Does the specification recommend using a hybrid? At the level of at least SHOULD... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

throwaway81523 33 days ago | parent | context | favorite | on: NSA tries to weaken mlkem standardisation?

Does the specification recommend using a hybrid? At the level of at least SHOULD if not MUST, in the sense of RFC 2119? I have the opposite impression but haven't checked.

galadran 33 days ago [–]

In effect, yes it does.

The Recommended flag is set for X25519MLKEM768. It is not set for any of the pure PQ key exchanges.

https://www.iana.org/assignments/tls-parameters/tls-paramete...

Consider applying for YC's Fall 2026 batch! Applications are open till July 27.
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact