Post-quantum algorithm and protocol options
Use these pages after the inventory and the priority. No option is mandatory unless a cited authority requires it for that reader's situation.
Handbook gloss: ML-KEM is the NIST key-establishment algorithm. ML-DSA and SLH-DSA are the two NIST signature algorithms. The pages here say who defends which use. They do not reprint parameters.
- Choosing an option is the four-way choice: hybrid, pure post-quantum, wait for a vendor update, or do nothing yet.
- Key establishment is the confidentiality job.
- Signatures is a different migration.
- Long-lived roots is the firmware or trust root that cannot update its signature check later.
Sources
- NIST IR 8547, Transition to Post-Quantum Cryptography Standards, October 2026. NIST IR 8547