[saag] Re: [EXTERNAL] post quantum guidance draft

On Dec 3, 2025 at 7:13:57 AM, "Dang, Quynh H. (Fed)" <quynh.dang=
[email protected]> wrote:

I think the community knows the pros and cons of hybrid vs pure PQC, so the
> answers are known (I am not talking about "here is a paper which says the
> cost is 1 cent, x amount of energy or time only; so this is more important
> than that etc. which is an opinion).
>

It depends what community. As a non-cryptographer who works on open-source
software and protocol design, I want to make the right choices about what
crypto to deploy, and I don’t care in the slightest about the purchasing
policies of any government organizations.

As a non-cryptographer user of cryptography I would very much like to have
guidance from the IETF.  From what I read in this discussion I guess would
lean to hybrid 25519+PQ for some value of PQ.  But having to make this kind
of choice makes people like me nervous.

You could write a document which lists the pros and cons, let the users
> decide.  PQUIP would be a better place than SAAG I think.
>

That would be useful.  -T

_______________________________________________
saag mailing list -- [email protected]
To unsubscribe send an email to [email protected]