Filippo Valsorda :go: on Nostr: I've never witnessed an experts vs non-experts split like on Kyber/ML-KEM. No ...

I've never witnessed an experts vs non-experts split like on Kyber/ML-KEM.

No cryptographer I know thinks ML-KEM was intentionally weakened on behest of the NSA, or knows any cryptographer who does, except the one guy.

Meanwhile, enthusiasts on issue trackers are all but certain, and Brandolini's law wins arguments.

It would be impressive if it wasn't sad and worrying.