#mothma

CFRG weighs Silithium hybrid signature against Mothma

A new draft pairs ML-DSA with elliptic-curve operations for smaller hybrid signatures, drawing scrutiny over strong unforgeability, code size, and hedging.