Post-Quantum Cryptography: ML-KEM, ML-DSA, SLH-DSA, the Hybrid Approach and Crypto Agility
Because data that must stay confidential can be recorded today and decrypted later with a quantum computer, key exchange based on RSA and ECC should move to hybrid ML-KEM now; AES and SHA-2 are outside the migration. With real outputs we show NIST IR 8547's 2030/2035 timeline, .NET 10's MLKem, MLDsa, SlhDsa and CompositeMLDsa APIs, the X25519MLKEM768 TLS group that comes with OpenSSL 3.5, and Bookstore's hybrid purchase order envelope.
14 Nov 2026
·
12 min
·
2
