21:29
2026-06-30
blog.cr.yp.to
ai-safety
Understanding lattice risks: Many differences between marketing and reality
Cryptographer Daniel J. Bernstein criticizes claims that ML-KEM (Kyber) is low-risk, arguing that proponents narrow the definition of risk to exclude timing attacks and software bugs. He highlights Ky…