I think the main motivation for ECDH/P-384 is CNSA compliance, so I don't think it is "the same applies". Yes,Sure, but for the record the same applies to SecP3841MLKEM1024
it is slower than x25519 or ECDH/p256.
_______________________________________________ TLS mailing list -- tls@ietf.org To unsubscribe send an email to tls-le...@ietf.org
