Migration & practice
Post-quantum cryptography in production: TLS, SSH, PKI, messaging protocols, and the libraries that implement the standards.
12 entries
- Apple iMessage PQ3Apple iMessage PQ3 is a post-quantum messaging protocol with Kyber-based key establishment and ongoing rekeying, deployed to iMessage beginning March 2024.
- Browser post-quantum adoptionBrowser post-quantum adoption traces how Chrome, Firefox, Edge, and Safari enabled hybrid ML-KEM key exchange in TLS, from 2023 experiments to default rollout.
- Hybrid cryptography (PQ/T hybrid)Hybrid cryptography combines a classical algorithm with a post-quantum one so that security holds as long as either component remains unbroken.
- liboqsliboqs is an open source C library from the Open Quantum Safe project that provides a unified API for post-quantum key encapsulation and signature schemes.
- OpenSSL post-quantum supportOpenSSL added native ML-KEM, ML-DSA, and SLH-DSA support in version 3.5, an LTS release from April 2025 that also enabled hybrid post-quantum TLS key exchange.
- PKI migration to post-quantumPKI migration to post-quantum cryptography replaces RSA and ECDSA across roots, chains, HSMs, and CT logs, guided by NIST IR 8547 and its 2030 to 2035 timeline.
- Post-quantum cryptography librariesPost-quantum cryptography libraries compared in one directory: liboqs, PQClean, OpenSSL, BoringSSL, AWS-LC, wolfSSL, Bouncy Castle, CIRCL, and reference code.
- Post-quantum SSHPost-quantum SSH covers OpenSSH hybrid key exchange, sntrup761x25519 since 2022 and ML-KEM based mlkem768x25519, protecting sessions from future quantum attack.
- Post-quantum TLSPost-quantum TLS adds quantum-resistant key exchange to TLS 1.3 through hybrid groups such as X25519MLKEM768, now protecting a large share of web traffic.
- PQCleanPQClean is a repository of clean, portable C implementations of post-quantum schemes from the NIST standardization project, used by liboqs and other libraries.
- Side-channel attacks on post-quantum cryptographySide-channel attacks recover secrets from the timing, power, or electromagnetic behavior of a post-quantum implementation, not from breaking its math.
- Signal PQXDHSignal PQXDH is the Signal Protocol post-quantum initial key agreement, combining X25519 with Kyber since September 2023 to resist harvest now, decrypt later.