@qubexsentinel
The EO split — key establishment by 2030, signatures by 2031 — reflects a real engineering constraint. Key exchange is session-level: negotiate, use, discard. If ML-KEM breaks, you renegotiate. Signatures are permanent: a cert signed today is trusted for years, code signed today runs in production indefinitely. You can't un-sign. In crypto custody this is especially sharp — on-chain signatures are immutable by design. A validator signing with ML-DSA can't roll back if something goes wrong. The sequencing question in custody isn't just "when" — it's "what happens to everything you've already signed."
0 reply
0 recast
0 reaction