Foundations & Explainers
5 entriesStart here for the why and what of post-quantum cryptography.
01What Is Post-Quantum Cryptography? (NIST)NIST's plain-language explanation of PQC and why it matters.
02NIST Post-Quantum Cryptography ProjectThe standardisation project that selected the first PQC algorithms.
03Microsoft Research – Post-Quantum CryptographyMicrosoft Research's PQC work and the NIST outcome.
04IBM Research – NIST PQC StandardsIBM researchers on the first NIST standards, several of which they co-developed.
05Huawei Trust Center – PQCHuawei's technical position on quantum-safe algorithm families.
NIST Standards & Selected Algorithms
11 entriesThe finalised standards and the algorithm designs behind them.
06NIST Releases First 3 Finalized PQC Standards (2024)NIST announcement of FIPS 203, 204 and 205.
07FIPS 203 – ML-KEMModule-lattice-based key-encapsulation mechanism standard.
08FIPS 204 – ML-DSAModule-lattice-based digital signature standard.
09FIPS 205 – SLH-DSAStateless hash-based digital signature standard.
10CRYSTALS-KyberDesign team site for the scheme standardised as ML-KEM.
11CRYSTALS-DilithiumDesign team site for the scheme standardised as ML-DSA.
12SPHINCS+Hash-based signature scheme standardised as SLH-DSA.
13FalconCompact lattice-based signature scheme selected for standardisation.
14HQCCode-based key-encapsulation mechanism selected by NIST as a backup to ML-KEM.
15Classic McElieceCode-based KEM with conservative security, considered for standardisation.
16FrodoKEMConservative unstructured-lattice KEM recommended by several European agencies.
Real-World Deployments & Protocols
11 entriesPost-quantum algorithms in production systems and standards.
17The State of the Post-Quantum Internet (Cloudflare)Cloudflare's data on post-quantum adoption across the internet.
18Towards PQC in TLS (Cloudflare)Deep dive into adding post-quantum key exchange to TLS.
19Protecting Chrome Traffic with Hybrid Kyber (Chromium)Chrome's rollout of hybrid post-quantum key exchange.
20Signal PQXDHHow Signal added quantum resistance to its key agreement.
21iMessage PQ3 (Apple)Apple's post-quantum protocol for iMessage.
22OpenSSH Post-Quantum CryptographyOpenSSH's post-quantum key exchange support.
23IETF PQUIP Working GroupIETF group on post-quantum use in Internet protocols.
24IETF – Hybrid Key Exchange in TLSIETF specification for hybrid key exchange in TLS 1.3.
25Microsoft – Post-Quantum Crypto Tunnel to the Underwater DatacenterProject Natick experiment with a hybrid post-quantum tunnel.
26AWS Post-Quantum CryptographyAWS's PQC migration plan and service support.
27Microsoft Quantum-Safe Security ProgressMicrosoft's update on its quantum-safe roadmap.
Government & Standards Guidance
8 entriesMigration guidance and timelines from agencies.
28CISA – Post-Quantum Cryptography InitiativeUS CISA's PQC initiative and guidance.
29UK NCSC – PQC Migration TimelinesUK guidance on timelines for migrating to post-quantum cryptography.
30UK NCSC – Preparing for Quantum-Safe CryptographyUK guidance on preparing for quantum-safe migration.
31German BSI – Quantum Technologies and PQCGerman federal guidance on post-quantum cryptography.
32EU Coordinated PQC Implementation RoadmapEU roadmap for transitioning to post-quantum cryptography.
33ENISAEU cybersecurity agency with PQC publications.
34ETSI Quantum-Safe CryptographyETSI standards work on quantum-safe cryptography.
35National Quantum Mission (India)India's mission covering quantum computing, communication and sensing.
Open-Source Tools & Vendor Solutions
10 entriesLibraries to experiment with and vendors packaging migration.
36Open Quantum SafeOpen-source project for prototyping quantum-resistant cryptography.
37liboqsC library of quantum-safe algorithms from Open Quantum Safe.
38Post-Quantum Cryptography AllianceLinux Foundation alliance for open-source PQC software.
39IBM Quantum SafeIBM's quantum-safe technology and services.
40Cloudflare PQCPost-quantum protection for web traffic and Zero Trust.
41DigiCert – Post-Quantum CertificatesCrypto-agility and PQC-ready certificate infrastructure.
42Utimaco – Quantum Protect HSMQuantum-safe HSM software package for lattice-based algorithms.
43ID Quantique – Quantum-Safe SecurityQKD as a complement to PQC in a defence-in-depth strategy.
44PQC Providers directoryDirectory of PQC vendors on this site.
45PQC AlgorithmsOverview of the leading PQC algorithms on this site.
Related Pages
3 entriesRelated directories on this site.
Frequently Asked Questions
What is post-quantum cryptography?
PQC is a set of classical algorithms designed to resist attacks by quantum computers, running on ordinary hardware rather than needing quantum equipment.
Which algorithms has NIST standardised?
FIPS 203 (ML-KEM) for key encapsulation, FIPS 204 (ML-DSA) and FIPS 205 (SLH-DSA) for signatures were finalised in 2024. Falcon (FN-DSA) and HQC were selected for further standardisation.
What happened to Picnic and qTESLA?
Neither was selected by NIST, so they are no longer listed here as current options.
Should I use hybrid mode?
Many deployments combine a classical key exchange with ML-KEM so security holds if either is broken. Chrome, Cloudflare and Signal use hybrid designs.
Where do I start migrating?
Inventory your cryptography, prioritise data that must stay secret for years, test with Open Quantum Safe, and follow agency timelines such as the UK NCSC and CISA guidance.