Understanding lattice risks: Many differences between marketing and reality

A fresh cryptography blog post lit the fuse, and the real fireworks exploded in the comments. The author argues that the sales pitch for new post-quantum security tools is way too rosy, saying supporters are focusing on a narrow slice of risk while brushing past the messy reality: software bugs, timing leaks, and all the ways real-world code can fall apart. In plain English, the complaint is simple: don’t throw away the old seatbelt just because the shiny new one looks futuristic. Keep the older elliptic-curve system and add the new post-quantum one, instead of trusting the new thing alone.

Commenters immediately turned this into a full-on trust war. One of the strongest reactions came from nneonneo, who basically read the whole situation as someone pushing an insecure standard, arguing there’s no good reason to put all your security eggs in one basket when a mixed approach exists. That’s the spicy, suspicious side of the thread. But others hit the brakes hard: dgacmu openly said they don’t have the expertise and pointed out this is part of a bigger feud between heavyweight cryptographers, with the author often taking shots from the opposite corner of many respected experts. Then came the practical skeptics, like 866121283, waving a counterargument: combining old and new systems isn’t free, and extra complexity can create its own disasters. The vibe? Half "don’t trust the hype," half "don’t trust the guy yelling about the hype" — which is exactly the kind of nerd drama the internet was built for.