#lattice-reduction

Two Standards, One Lattice: How ML-KEM and ML-DSA Would Break

Jul 18, 2026

ML-KEM and ML-DSA rest on one hard problem, Module-LWE, measured by one ruler. Here is how that ruler would slip -- and why one slip debits both standards.