NIST Post-Quantum Standards

• FIPS 203: ML-KEM - Module-Lattice-Based Key-Encapsulation Mechanism (formerly CRYSTALS-Kyber)
• FIPS 204: ML-DSA - Module-Lattice-Based Digital Signature Algorithm (formerly CRYSTALS-Dilithium)
• FIPS 205: SLH-DSA - Stateless Hash-Based Digital Signature Algorithm (formerly SPHINCS+)
• FIPS 206: FN-DSA - FFT over NTRU-Lattice-Based Digital Signature Algorithm (formerly FALCON)
• NIST PQC Standardization - Official NIST post-quantum cryptography project page

Open Source Implementations

• Cloudflare CIRCL - Go cryptographic library with post-quantum primitives including ML-KEM and ML-DSA
• oqs-provider - OpenSSL 3 provider enabling liboqs quantum-safe and hybrid algorithms for TLS 1.3
• liboqs - C library for quantum-safe cryptographic algorithms (Open Quantum Safe project)
• PQClean - Clean, portable, reference implementations of post-quantum schemes
• PQ Code Package - Maintained successor to PQClean for NIST-standardized PQC schemes
• Open Quantum Safe - Project integrating PQC into TLS, SSH, and other protocols via liboqs
• pqcrystals/kyber - Reference implementation of ML-KEM (Kyber)
• pqcrystals/dilithium - Reference implementation of ML-DSA (Dilithium)
• OpenSSL 3.5 PQC - Post-quantum TLS 1.3 integration in OpenSSL (Kyber, Dilithium)
• OQS-OpenSSH - Prototype OpenSSH fork with liboqs-based quantum-resistant key exchange and authentication
• OQS Demos - Integration recipes and demos for using liboqs in TLS, SSH, curl, and related software
• itzmeanjan/ml-kem - C++20 implementation of NIST FIPS 203 ML-KEM

Hybrid Key Exchange

• IETF X25519MLKEM768 TLS Draft - Hybrid ECDHE plus ML-KEM key agreement for TLS 1.3
• X25519Kyber768 in TLS - Hybrid post-quantum key exchange for TLS 1.3 (deployed in Chrome)
• Chrome PQC Deployment - Chrome’s X25519Kyber768 key encapsulation for TLS
• RFC 9180: HPKE - Hybrid Public Key Encryption (extensible to PQC KEMs)

Migration & Compliance

• Meta PQC Migration Framework - Practical migration levels, inventory, deployment guardrails, and organizational lessons
• NSA CNSA 2.0 - CNSA 2.0 Suite requirements for national security systems (ML-KEM-1024, ML-DSA-87)
• PQCC International Requirements - Global PQC migration requirements and timelines
• NIST SP 800-227 - Recommendations for key-encapsulation mechanisms
• TNO PQChoiceAssistant - Tool for choosing suitable post-quantum algorithms for a deployment use case

Research & Analysis

• Inside NIST’s PQC - Technical deep-dive into Kyber, Dilithium, and SPHINCS+
• Meta-analysis of PQC Finalists - Performance and security comparison of NIST-endorsed algorithms
• Palo Alto PQC Guide - Enterprise guide to PQC standards and migration strategy