Let’s All Agree to Use Seeds as ML-KEM Keys
Summary
The piece argues that NIST ML-KEM now allows storing private keys as 64-byte seeds, which are smaller and always valid, avoiding the complexity of validating expanded decapsulation keys. It discusses memory versus on-wire representations, interoperability risks of supporting both seed and expanded formats, and practical guidance to favor seeds while postponing expanded formats. It also notes recent OID registrations and guidance for implementation choices.