Comment by forty

I'm referring for example to the "classic mcellie is broken" even though my understanding is that the classic mcellie team is still contesting the results which are fairly new, his opinion that hybrid is a mistake for signature, the comment on the fact that P256 is equivalent or better that ed25519 (not in the article but a link to one of his email). I would not say this is controversial, but at least I feel this is debatable. Even the fact that PQ crypto is needed at all could be debated :) (Personally I'm convinced it's a good idea regardless of whether good enough quantum computers ever materialize, but it was the only risk, I'm not sure I would be so convinced)