On 10/21/26 17:05, Mike Hamburg wrote: > > >> On 21 Oct 2026, at 22:05, Demi Marie

With the updated parameters, the advantages are rather marginal compared to other schemes in the

Dear all, I've also been working on the D-James, HFE-LL' and HFE-IP schemes, and in August I

Is CPU consumption denial of service a concern, or is the device physically incapable of receiving

Meeting in person offers valuable opportunities to connect with colleagues, exchange ideas between

Hi Thomas, Regarding your question about what we mean by “guaranteed to produce the same KATs”. The

Please join us in Hong Kong on Monday December 7 for MathPQC 2026 Mathematics for Post-Quantum

Hi Loïc, Thanks for the update. I'm eagerly awaiting the publication of the FIPS 207 IPD.

Hi all, Following up on the thread where Hanno Becker reported the discrepancy in FIPS 204 Table

Lotta words to say "you ain't getting a 2^{reduced dimension} attack out of that for

Dear all, Thank you all for this thread — reading it in full, I think the debate has converged more

Hi Demi, As Dan S mentioned on the quantum cryptanalysis Discord server, Dan earlier shared the

I noticed that FrodoKEM and ML-KEM both use narrower noise distributions for larger parameter sets.

Dear all, PQCrypto 2027, the 18th International Conference on Post-Quantum Cryptography, will take

Dear all, We are happy to announce that the PQsort website (https://pqsort.tii.ae/) has been updated

Dear Demi and all, For the record, we have now replied to this comment in the following thread: https

Hi Damien, Dustin Ray here, I maintain sqisign-rs and just implemented PRISM's prime-degree

FAEST-EM currently uses AES or Rijndael in Even-Mansour mode. This means that the round keys are

Disclosure first: I run FractalAI, a small company in Colombia; we operate a single-validator ledger

All, The pqc-forum is a public forum for discussion of topics related to post-quantum cryptography

Vaikuntanathan is sufficient to bring Toffolis down a bit (~10^16 per run), but still has a ~10x qbit

>> If the PQ algorithm is broken, the PQ/T hybrid provides quantum resistance to 100% of

Hey, i am also supporting this great initiative "Impact of AI on cryptographic research” based

Demi, Thanks for asking. It is nice if you label a comment about a particular candidate as an “

Hi all, In November 2024 NIST said on this list that it plans to revise SP 800-208 to enable private

Hi, Happy to announce a new record for ("HQC-style") quasi-cyclic syndrome decoding problem

Dear All, TL;DR The reported attack does not affect any SNOVA Round 3 recommended parameter set. On

You've convinced me. Thank you. On 9/24/26 03:38, John Mattsson wrote: > It would also not be

Ah ok, thanks -- good luck to them! On Sat, Sep 26, 2026 at 4:27 PM QR <amz...@gmail.com> wrote

Bear in mind that these same arguments have been made for and against the existing accelerators --