On Fri, 21 Sep 2018, Joseph S. Testa II wrote: > Hmm... crickets. Does this imply that X448 in OpenSSH is not ever a > possibility? I'm not sure what more to I can add. Like I said: none of us presently see the value of it outweighing the cost of having to support X448 and SHA3 in ~perpetuity. -d