Understanding lattice risks: Many differences between marketing and reality
Cryptographer Daniel J. Bernstein criticizes claims that ML-KEM (Kyber) is low-risk, arguing that proponents narrow the definition of risk to exclude timing attacks and software bugs. He highlights Ky…