Daniel J. Bernstein

In an IETF vote on standardizing the removal of ECC from hybrid ECC+ML-KEM in TLS, 82 people spoke in unambiguous opposition during the voting period, according to a blog post by cryptographer Daniel …

Cryptographer Daniel J. Bernstein criticizes claims that ML-KEM (Kyber) is low-risk, arguing that proponents narrow the definition of risk to exclude timing attacks and software bugs. He highlights Ky…