Comment by pona-a

3 days ago

In his defense, ECC is unusually fast compared to both RSA and current PQ

ML-KEM encaps/decaps is very fast, as fast/faster than EC. It's large, and adding EC does not meaningfully affect the size, but it meanfully affects encaps/decaps time.