https://csrc.nist.gov/projects/post-quantum-cryptography nedelja, 16. avgust 2026. u 21:30:19 UTC+2

> On 12 Aug 2026, at 02:56, Christopher Patton <cpa...@cloudflare.com> wrote: > >

Hi, We constantly try to maintain an overview of what different libraries support, especially now

Hi Dimitri, In general don't fill anything that you don't know. Incorrect info is worse than

Hi, Yes, I am familiar with mlkem-native. My goal with this implementation was somewhat different:

On Sun, Aug 9, 2026 at 5:58 PM 'Cong Ling' via pqc-forum <pqc-...@list.nist.gov>

Thom Wiggers writes: > there were strong technical arguments for having “seed” as a key format

I share your sentiment John. Double the size of SQISign signatures and they are still the smallest

Thank for the info Nalini, I think this is interesting to a lot of people. >quantum-resistant key

Thanks all for the discussion and to NIST for the swift update to the FIPS 204 errata. I see that the

Demi Marie Obenour writes: > In this case, one doesn't actually need the full implicit

Explicit rejection was recommended by Sophie Schmieg at the end of <https://keymaterial.net/2024/

Lightweight Authenticated Key Exchange In the above post, the application scopes of ML-KEM and HQC

All, A few of the candidate submission teams have asked for some more time to finalize their updated

John, the initial two general sections are to be applauded. I have reviewed the same documents

While the Classic McEliece ISO standard is paywalled, https://classic.mceliece.org/iso.html is clear

Hello from Austin... This might be of interest, since PQC will feature heavily due to the CNSA 2.0

Hi all, We've built a small, early-stage Layer-1 blockchain using ML-DSA-44 (CRYSTALS-Dilithium3)

On Tue, 4 Mar 2025, 22:07 Oscar Smith, <oscard...@gmail.com> wrote: This is very much a side

Neat idea, but is the squeeze worth the juice? ML-KEM has pretty good binding properties already:

On 7/26/26 10:40, Mohit Rai wrote: > Hello Everyone, > > My name is Mohit and I am working

Hi, Thanks to everyone who participated in the side meeting! The meeting was a great success, with

On 6/25/26 01:11, Raymond Chang wrote: > Dinesh, > > Glad it was useful. Quick takes on your

Dear All, I have implemented the Mayo signature scheme in Jasmin based on the NIST Additional call

Hi Patrick, very short hash-based signatures can be achieved with the scheme introduced in https://

Industry Network Technology Council, a nonprofit 501(3)(C) organization is proud to present awebinar

Thank you. Are ideas from people who aren't professional cryptographers welcome? I'm just an

TCS Confidential Can we have virtual option. Many Thanks, Meena, Scientist, Cybersecurity and Privacy

Hi Bas, Thanks for the clarifications and for the normalization proposal. Agreed that the numbers

IND-CPA only KEMs have advantages when UDP must be used as a transport, as they are more compact and