Changelog

A mistyped or outdated address now shows a clear "Page not found" page instead of the home page; on phones every page has one main heading, shared Library links keep their status filter and the About page explains analytics; and the Simulation offers the new Homomorphic Encryption module.

The Privacy and Terms pages now say plainly that analytics run on every visit; Homomorphic Encryption becomes its own Learn module with fourteen new quiz questions; the assessment report keeps the frameworks you selected and names any it leaves out; every Crypto Lab tool, planning tool and Learn module has a page that search engines can read; and the About page, README, tour and manual quote the real counts. · Pages that quote when a quantum computer might arrive now stick to what their sources say: the Threats page drops the range this site had worked out itself and shows the Global Risk Institute survey in its own words, the Assess steps no longer claim a 2030–2040 expert range, and the FAQ, Simulation, report and Learn exercises say that these figures are published estimates, still open to debate. The Confidential Computing workshop also now prints the real ML-DSA key sizes.

FHE key custody now runs across two appliance boards with a backup and a failover, the data owner checks the custodian's attestation before trusting its keys, and the FHE compute service runs on a small Arm board over mutual TLS. Every "Validated" badge in the workshop now opens its results on the page, and the Threats and related pages now say plainly that some quantum estimates are still unresolved, with the BSI, NSA and ANSSI entries corrected to what those organisations actually state. · The FHE + HSM workshop's key-custody flow now runs with the key held on the MX95 appliance board, the Lattigo threshold scenario gets its first board measurements, Library dates cite their NIST sources, and shared links are now checked every night. · The FHE + HSM workshop now shows which steps have been validated, with measured runs on a Mac and on a KV260 board, including a first end-to-end run of TFHE key custody in a software token. · Links from the Assistant, search and shared URLs now open the item they name, Learn workshops and wide charts fit a phone screen again, and the Confidential Computing FHE content gets small accuracy fixes.

The FHE + HSM workshop now shows plainly when data is encrypted, computed on and decrypted, who may decrypt, and where every key sits; every HSM Learn lesson now runs on a fresh page, and the Library adds fhe.rs, the fourth open-source homomorphic-encryption library. · Confidential Computing now teaches fully homomorphic encryption, with a workshop step showing how an HSM can hold FHE keys. · A new HSM playground lesson shows how applications discover certificates across slots, the Rust engine follows PKCS#11 v3.2 more closely, HMAC works again after a hash-based signature on the C++ engine, and catalog entries were corrected after a source-by-source accuracy check. · The IoT & OT module is now two advanced modules, one for IoT and embedded devices and one for operational technology across five sectors, both checked against their standards; search stays smooth after the first search; the JWT workshop's encrypted tokens can run entirely inside the emulated HSM; and the Library and vendor roadmaps gain new entries. · Talking About PQC Accurately has been reviewed and now has its own quiz questions, the API Security workshop names the draft revision it actually implements, a new Attack Lab shows why a JWT verifier must check more than the signature, and the Library adds 42 references for the IoT and OT modules.

The Curious Explorer role now also serves people who need post-quantum cryptography for their job without a technical background, the JWT module follows the current IETF drafts and passes their published test vectors, and two engine bugs found by Google's Wycheproof tests are fixed. · The Hybrid Certificate playground now builds every certificate the way its standard says, checks each one with a second, independent implementation, and tells you plainly which formats are published, which are drafts, and which are history.

Search finds what you typed more often: ⌘K shows strong matches without scrolling and tells you when a filter is hiding results, and the Glossary, Library and Learn search boxes now match every word of a query instead of the exact phrase. · The PQC Assistant answers from the retrieved PQC Today corpus again, responds more quickly on broad lists, and uses the better-tested Qwen 3 8B model by default while keeping Qwen 3.5 available.

The About page's list of the software this site is built from is now accurate and complete: it shows what the site really ships, with real versions and licenses, says plainly where something is not recorded, and can be downloaded in full. · Every item's panel now has its own Share button, so you can share a document, threat, algorithm, product or record while it is open — on desktop and on phones. · A new role for the people who test and certify cryptographic modules — validation-lab testers, module vendor engineers and scheme reviewers — with its own learning path, home boards and the validation tools up front. · The PQC VPN Simulator now runs hybrid IKEv2 in the order the ML-KEM draft recommends, and shows why pure ML-KEM runs into size limits. · Shared links now reach much further into the hub: you can link to a single algorithm, vendor roadmap, Compliance requirement, Community profile and more, and links from Learn modules, search and the PQC Assistant open the exact item they mention.

The Simulation no longer strands you — a wrong answer still costs you, but you can always carry on; play-mode pop-ups close; browser Back behaves; phones get the controls they were missing — and it now includes the hub's newest Learn modules and references. Across the hub, shared links now open exactly the item they point to, on phones too. · The VPN/IPsec & SSH module now explains where pure post-quantum IKEv2 runs into trouble, and why the standard's hybrid route avoids it.

The FIPS 140-3 module now explains how NIST is automating validation — algorithms, then entropy, then the module — and what is and is not in production. · A new Learn chapter on the regional schemes built on Common Criteria, NIAP's CNSA 2.0 deadline in the data, a certification refresh, and a much lighter Timeline page. · FIPS 140-3 and PCI now each have their own certification module. · The validation workbench now says exactly what each test proves, runs trusted public test vectors, and publishes its full coverage and known gaps. · French (ANSSI) certificates now carry the product name their own certification report states, and a few certification verdicts are corrected. · Certificates that cover no post-quantum algorithm are now labelled "Classical only", and 40 products have a researched certification verdict. · Every country on the timeline shows its flag again. · Hundreds of product versions and dates are filled in from their own sources, and a batch of outdated or wrong values is fixed. · Fifteen more product claims now say only what their own documents support, and six catalogue entries that were really web-page titles are fixed. · France's post-quantum migration phases are now confirmed from ANSSI's own guidance, and the assistant can quote the source text for a few more references. · Product certifications now show where each product stands on the road to a FIPS 140-3 certificate — algorithms validated, in progress at NIST, or certified — and 27 product verdicts were re-checked against the official NIST records. · The certification Learn module is now three shorter modules: a fundamentals module every learner starts with, and two deep dives you take only for the schemes you need. · Timeline dates checked against their sources: phases whose source gives no end date are now shown as open-ended instead of being hidden, and several milestones move to the years their sources actually state.

A full check of every migration-catalogue product against its own cited document: where a product listed specific post-quantum algorithms its source never mentions, the listing now says only what the source actually supports. · A new Learn module on how cryptographic products get certified, and a Migrate catalogue that now tells a certificate apart from the algorithm validation that comes before it.

Every product in the migration catalogue was re-checked against its own evidence document, and anything a document does not actually say has been corrected or removed — including versions, dates and post-quantum claims. · The Timeline's review backlog is cleared: 19 rows that were already fully sourced but sitting unpublished are now live, taking the public Timeline from 163 events to 182, and the four still held back are held for a stated reason rather than by neglect. · Every certification record now comes straight from its official source — NIST for FIPS 140-3 and CAVP, the Common Criteria Portal, ANSSI and ENISA — and anything a source does not back is gone. · The 122 rows where the Timeline's two reviewers disagreed on 25 September were resolved by a closer read of what each one actually quoted from the source document. · Every entry on the Timeline was checked against its own source document by two independent reviewers, and the Timeline now shows only government, regulator and standards-body milestones — with honest labels for what was checked and when. · Every threat on the Threats page now says only what its cited document says — 71 threats are published, each with its main claims checked against the source, and 49 more are held back until a document that backs them is found.