PQ Playbook by Symbolic Software
- risk asymmetry
- premature migration - engineering cost
- late migration - HNDL (harvest now decrypt later), keys, signatures can’t be trusted
- “data that has been exfiltrated cannot be un-exfiltrated”
- synthesis of common and subtle bugs in pq implementations
- good sample of libraries supporting pq algorithms and rollout strategies
- quick intro to standards and recommended pq algorithms
- discussion on what pq rollout for TLS, PKI, signatures, messaging, attestations, hashes, etc mean
- very well written and a joy to read
Links