Wait so if an ML-KEM key is 2400 bytes, is RSA4096 now like, a more efficient choice for an algorithm that isn’t completely broken with quantum computers?

https://postquantum.com/post-quantum/breaking-rsa-quantum-hype/

@lunareclipse RSA 4096 is still vulnerable to Shor's algorithm, so no (there's no current quantum computer capable of breaking RSA 4096, but there's no current quantum computer capable of breaking Ed25519 either)

@noisytoot ah so if we get powerful enough quantum computers it breaks both?