README.md

awesome-post-quantum

A curated list of resources about post-quantum cryptography.

To contribute, please file a PR. Please list items alphabetically.

We try to keep this page up to date, as some resources and URLs may become obsolete. If you notice such issues before us, please file PR or an Issue.

"PQC" stands for post-quantum cryptography.

Government Initiatives

USA:

• NIST's PQC Project (Selected Algorithms 2022 announcement)

• DHS PQC approach and roadmap

• NSA PQC FAQ

• NIST and NCCoE's Migration to PQC

France:

• ANSSI's views

UK:

• NCSC's Next steps in preparing for post-quantum cryptography

Research Resources

• IACR ePrint
• pqcrypto.org (incl. conference series)

Survey papers:

• A Decade of Lattice-Based Cryptography by Chris Peikert
• A Survey on Code-Based Cryptography by Violetta Weger, Niklas Gassner and Joachim Rosenthal
• Mathematics of Isogeny-Based Cryptography by Luca de Feo
• Post-Quantum Cryptography by Daniel J. Bernstein, Johannes Buchmann and Erik Dahmen
• Post-quantum cryptography---dealing with the fallout of physics success by Daniel J. Bernstein and Tanja Lange
• The Learning with Errors Problem by Oded Regev

Software Projects

• aws/s2n-tls
• kudelskisecurity/crystals-go
• Microsoft/PQCrypto-LWEKE (FrodoKEM)
• Microsoft/PQCrypto-SIDH
• mupq/pqm4
• Open Quantum Safe
• open-quantum-safe/liboqs
• PQClean/PQClean
• rustpq/pqcrypto
• paulmillr/noble-post-quantum (Dilithium, Kyber, Sphincs+ in JS)
• PQ Code Package (a Linux Foundation PQCA project building high-assurance implementations of standards-track algorithms)

Implementations of...

• Dilithium
• Kyber
• SPHINCS+

NIST Post-Quantum Cryptography Standardization

• Homepage NIST Post-Quantum Cryptography

• All Round 1 submissions

Round 3 submissions

(Only listing those that were not selected for standardization or round 4)

Lattice-based:

• FrodoKEM (KEM, alternate candidate)
• NTRU (KEM, finalist)
• NTRU Prime (KEM, alternate candidate)
• SABER (KEM, finalist)

MQ-based:

• GeMSS (signature, alternate candidate)
• Rainbow (signature, finalist)

ZKP-based:

• Picnic (signature, alternate candidate)

Round 4 submissions

Code-based:

• BIKE (KEM)
• Classic McEliece (KEM)
• HQC (KEM)

Isogeny-based:

• SIKE (KEM)
  • Withdrawn, see for example You could have broken SIDH

Selected algorithms 2022

Lattice-based:

• Dilithium (signature)
  • FIPS 203: Module-Lattice-Based Key-Encapsulation Mechanism Standard
• Falcon (signature)
• Kyber (KEM)
  • FIPS 204: Module-Lattice-Based Digital Signature Standard

Hash-based:

• SPHINCS+ (signature)
  • FIPS 205: Stateless Hash-Based Digital Signature Standard

NIST PQC Digital Signature Schemes

This project coming after the selection of 4 signatures in 2022 aims to select algorithms "that are not based on structured lattices" and/or "that have short signatures and fast verification."

• Homepage PQC Digital Signature Schemes

• Round 1 submissions

Other Algorithms

Hash-based:

• PRUNE-HORST (few-times signature)

Isogeny-based:

• CSIDH (KEM)

IETF

Internet Drafts and RFCs:

• ID Framework to Integrate Post-quantum Key Exchanges into Internet Key Exchange Protocol Version 2 (IKEv2)
• ID Hybrid Post-Quantum Key Encapsulation Methods (PQ KEM) for Transport Layer Security 1.2 (TLS)
• ID Hybrid key exchange in TLS 1.3
• RFC 8391: XMSS: eXtended Merkle Signature Scheme
• RFC 8554: Leighton-Micali Hash-Based Signatures

Misc

• SUPERCOP (benchmarks)
• PQCHacks: a gentle introduction to post-quantum cryptography (slides)
• PQCrypto Usage & Deployment
• Quantum Doomsday Planning blog posts:
  • 1/2: Risk assessment & quantum attacks
  • 2/2: The post-quantum technology landscape

Related awesome-pages

• awesome-quantum-computing
• awesome-quantum-software