Is this the thing with ML-KEM, then: > [With AuthKEM,] *you would replace the ~2...

durumcrustulum · 2025-11-28T13:03:32 1764335012

What "the thing"? AuthKEM isn't being deployed anywhere.

westurner · 2025-11-28T18:08:27 1764353307

How much more complex is the difference than 2.4 KB w/ ML-DSA or ~1 KB w/ ML-KEM?

durumcrustulum · 2025-12-02T00:34:16 1764635656

I'm sorry I don't understand what you're asking

westurner · 2025-12-03T04:27:01 1764736021

Though there is a difference between a cert signature (ML-DSA) and a challenge (ML-KEM), ultimately and fundamentally, isn't real key size still a relevant metric for comparison.

(Everyone dnvoted this like -6/-7. I guess they didn't understand the relevance.)

IDK a terse analogy then:

MerkleCerts + ML-DSA : ML-DSA :: Challenge (ML-KEM,) : ____ (ML-DSA)

Merkle-signing cert trust roots is a security/bytes-transferred efficiency tradeoff.

What is the difference in number of bytes seemed usefully relevant to me at least.