A more 'direct' link to the release notes:
Related to the hybrid post-QC crypto stuff, similar moves have been done for Chrome:
* https://security.googleblog.com/2024/09/a-new-path-for-kyber...
Draft for adding it to TLS (1.3):
* https://datatracker.ietf.org/doc/draft-kwiatkowski-tls-ecdhe...
What’s ML-KEM X25519? I’m familiar with Ed25519, but I’ve never heard of ML-KEM.
(Also not a cryptographer)
ML-KEM is Kyber, the lattice-based winner of the NIST PQ KEM competition (think of a KEM as a public-key encryption and delivery of a key, as opposed to Diffie Hellman, in which both sides agree on a key together). It's a key establishment mechanism that resists quantum attacks.
For anyone unfamiliar with the acronyms:
PQ = Post Quantum (cryptography)
KEM = Key Encapsulation Method
Anyone have an informed preference between MLKEM and SNTRUP?
For what it's worth: Damien Miller has commented repeatedly here that OpenSSH did NTRU before the NIST competition completed, and they always planned to add the NIST PQ winner.