Post-Quantum Algorithms & Protocols

What this means for you

Executive / Business Leader

The "What you're required to adopt" box states that CNSA 2.0 requires ML-KEM-1024 and ML-DSA-87 for US National Security Systems; "View Top 4 →" highlights the four to know, and the "CNSA 2.0" lens filters the tables to that suite.

GRC / Risk & Compliance

The Transition Guide tab lists each classical algorithm, its PQC alternative, region, status and transition or deprecation; filter Status to Certified — the page hint reminds you that certified is not the same as compliant.

Developer / Engineer

Detailed Comparison sorts on Pub key, Sig / CT, KeyGen, Sign / Enc, Verify / Dec and RAM, with "Compare side-by-side"; Validation › "KAT Validation" runs pinned known-answer tests in your browser.

Security Architect

The Protocol Support tab tracks 28 protocols across pure-KEM, hybrid-KEM, pure-Sig and hybrid-Sig, each marked RFC, Draft, Experimental or None, with filters for OSS, commercial and live deployment.

Researcher / Academic

The "Research needed" toggle narrows to algorithms with an incomplete data row; Validation › "Implementation Attacks" gives side-channel and fault-injection notes per family; the Region filter includes KpqC, CACR and CRYPTREC.

Certification & Validation Engineer

The page opens on the Validation tab: "Implementation Attacks" gives side-channel and fault-injection notes per family, and the known-answer tests run in the browser; the hint keeps a CAVP validation apart from a module certificate.

IT Ops / DevOps

The "FIPS-validated" quick preset shows only algorithms that completed FIPS validation; on Protocol Support each row carries a Production, Pilot or Experimental deployment posture and a "Has OSS" filter.

Curious Explorer

You get a short preview — "three you actually need to know": ML-KEM-768, ML-DSA-65, SLH-DSA-SHA2-128s — then "Show full algorithm comparison" or "Learn the basics first".