top | item 41106422 Cryptographic Right Answers: Post Quantum Edition 3 points| todsacerdoti | 1 year ago |latacora.com | reply 1 comment order hn newest [+] [-] lxdlam|1 year ago|reply I'm curious why the author always recommends using a hybrid scheme, i.e., a classical protocol combined with a PQC protocol. I'm not an expert in PQC; what property are we losing that requires us to still need a classical protocol in the same time?Edit: I've found a design draft associated with the TLS 1.3 hybrid scheme that explains the choice: https://datatracker.ietf.org/doc/html/draft-ietf-tls-hybrid-....
[+] [-] lxdlam|1 year ago|reply I'm curious why the author always recommends using a hybrid scheme, i.e., a classical protocol combined with a PQC protocol. I'm not an expert in PQC; what property are we losing that requires us to still need a classical protocol in the same time?Edit: I've found a design draft associated with the TLS 1.3 hybrid scheme that explains the choice: https://datatracker.ietf.org/doc/html/draft-ietf-tls-hybrid-....
[+] [-] lxdlam|1 year ago|reply
Edit: I've found a design draft associated with the TLS 1.3 hybrid scheme that explains the choice: https://datatracker.ietf.org/doc/html/draft-ietf-tls-hybrid-....