The new standardized algorithms designed to resist quantum attacks, and how they are being deployed.
Post-quantum cryptography is a set of new algorithms that run on ordinary computers but are designed to resist quantum attack. Here is what it replaces, what it leaves alone and why the work starts now.
PQC and quantum key distribution sound alike but are very different. One is new maths in software; the other is physics over special links. Here is how they compare and what security agencies recommend.
NIST spent eight years narrowing 82 submissions to a handful of standards. Here is how the competition worked, which algorithms broke along the way and what that says about trusting the winners.
A plain guide to FIPS 203, 204 and 205, the FN-DSA and HQC standards still in preparation, and the search for more signature schemes, with status as of October 2026.
Lattices, hashes, codes, multivariate equations and isogenies. A plain-language guide to the hard problems behind post-quantum algorithms, and which families have held up.
Most post-quantum keys and signatures are much larger than RSA or elliptic curve ones, while key establishment is often fast. Here are the numbers, the five NIST security categories and where size starts to hurt.
LMS and XMSS are the oldest approved post-quantum signatures, and firmware signing is where they fit best. Here is how they work, why state is dangerous and how to choose between hash-based options.
NIST proposes deprecating 112-bit RSA and elliptic curve parameter sets after 2030 and disallowing all quantum-vulnerable public-key algorithms after 2035. Here is what is final, proposed and pending.
Most post-quantum deployments today pair a new algorithm with a classical one. Here is how hybrid TLS works, who has shipped it, and why the NSA and European agencies disagree on whether it is needed.
A sound algorithm can still leak keys through careless code. Here is what KyberSlash taught the field, why FN-DSA is hard to implement safely and how CAVP and CMVP validation fit together.