post-quantum cryptography
Every article tagged post-quantum cryptography, newest first.
11 articles
PQC rollbacks need a cryptographic floor
A practical rollback method for post-quantum migrations: define a security floor, limit the exception, preserve evidence and make the fallback expire.
IETF draft defines hybrid ML-DSA signatures for JOSE
Revision 05 of an IETF JOSE draft defines six composite signature profiles that pair ML-DSA with ECDSA or EdDSA. It also tightens encodings and states where the hybrid construction does not provide unique signatures or replay protection.
TLS draft pairs ML-KEM-1024 with X448
A new individual Internet-Draft proposes MLKEM1024X448 for TLS 1.3, DTLS 1.3 and QUIC. Its 1,624-byte key shares target a higher security level, but it has no IETF adoption, codepoint or deployment status.
NSA turns the 2027 PQC deadline into a procurement gate
The NSA's new post-quantum resource hub puts two near-term gates in one place: new commercial national-security systems must support quantum-resistant algorithms from 2027, while legacy systems that cannot support them are to be phased out by 2030.
IETF tightens KEM-only authentication for LAKE
Revision 01 of the IETF LAKE authentication draft specifies a five-message, three-secret KEM handshake for constrained systems and tightens the rules around key binding, freshness and when authentication completes.
IETF holds standalone ML-KEM TLS draft for review
The RFC Editor has paused the standalone ML-KEM-for-TLS draft while IETF process complaints are reviewed. The hold delays publication but does not revoke hybrid RFC 10024 or establish a cryptographic flaw.
OpenSSL 4.1 beta speeds ML-KEM and ML-DSA
OpenSSL 4.1.0-beta1 adds architecture-specific ML-KEM and ML-DSA paths for Power, IBM Z and x86-64, moving PQC performance testing from generic support claims to real CPU fleets.
IETF draft brings post-quantum crypto to EAP-TLS
A new standards-track IETF draft applies post-quantum TLS to EAP-TLS, EAP-TTLS, PEAP and TEAP, while confronting the certificate-size problem that enterprise authentication cannot ignore.
Java 27 puts hybrid post-quantum TLS on the default path
Java 27 adds hybrid ML-KEM key exchange to TLS 1.3 by default, changes ML-KEM and ML-DSA private-key encodings, and speeds both algorithms on AVX-512 systems.
Cloudflare brings ML-DSA validation to DNSSEC
Cloudflare's 1.1.1.1 now validates ML-DSA DNSSEC signatures. Larger responses and downgrade protection show why the trust chain still matters.
The quantum claim that put lattice security in question
A quantum algorithm raised an unsettling question about lattice security. Twelve days later came a refutation. Here is what failed, and why it is a relief.
Turn quantum risk into a credential.
Book a discovery call and get an indicative scope and pricing for your organisation.