TLDR Tech / InfoSec
RFC 9958 - Post-Quantum Cryptography for Engineers
This IETF informational RFC orients engineers to the post-quantum transition, explaining that Shor's algorithm forces full replacement of RSA, DH, and ECC (while Grover's leaves AES-128 and SHA-256 effectively intact), detailing the NIST standards ML-KEM (FIPS 203), ML-DSA (FIPS 204), SLH-DSA (FIPS 205), and forthcoming FN-DSA (FIPS 206), and stressing that KEMs cannot be both AKE and NIKE, that PQC keys and signatures run roughly 6-100x larger, that stateful HBS schemes (XMSS, LMS) risk forgery on key-state reuse, and that "harvest now, decrypt later" plus the Mosca x+y+z model justify hybrid PQ/T deployments with careful attention to key-reuse stripping attacks and lattice side-channel exposure.
Read the full story