Comment Comment by some_furry > You use both a quantum-safe algorithm and a classical algorithm, encrypting your data twice and remaining secure if either one is broken.No. Don't do that.If you encrypt your data twice, and one of them is broken by a quantum computer, the adversary gets the plaintext anyway.You want a Hybrid KEM, not encrypting twice. The nuance matters.https://durumcrustulum.com/2024/02/24/how-to-hold-kems/ parent some_furry 5 months ago
No. Don't do that.
If you encrypt your data twice, and one of them is broken by a quantum computer, the adversary gets the plaintext anyway.
You want a Hybrid KEM, not encrypting twice. The nuance matters.
https://durumcrustulum.com/2024/02/24/how-to-hold-kems/