Daniel J. Bernstein on Nostr: nprofile1q…9xpux is a graph estimating the number of breakable keys each year for ...

nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpq60s7ufcrjh6wc9sah6d6wt0chj50n2757k0w2550lpyvq550j30ss9xpux (nprofile…xpux) https://cr.yp.to/papers/mldsa-20260601.pdf#breakable-keys is a graph estimating the number of breakable keys each year for Ed25519, ML-DSA-44, and the Ed25519+ML-DSA-44 combination. That's for signatures but the KEM situation is similarly scary. No idea where you're getting the idea that we aren't worried about the combined risk; we're fighting multiple fires at once here.