Comment by Vecr

> NSA, by the way, rescued DES from differential cryptography, the core mechanism by which block ciphers and hash functions have been attacked ever since

That's why you use ML-KEM 1024 at all... As part of a hybrid.