Filtered archive
Focused briefings from the Blog archive for teams working through Technical decisions.
Filtered analysis
7 published briefs in this filter.
01
NIST draft SP 800-230 adds smaller, faster SLH-DSA parameter sets for sign-once, verify-many workflows. The catch is operational: each signing key has a strict signature limit.
Read post
02
NIST moved nine additional post-quantum signature candidates into Round 3 in May 2026. That is algorithm diversity planning, not a pause button for ML-DSA and SLH-DSA migration.
Read post
06
Running ML-KEM alongside ECDH in TLS 1.3 across distributed infrastructure is straightforward in theory. This composite rollout model highlights practical planning issues around certificate chain sizes, middlebox interference, and HSM firmware constraints.
Read post
07
ML-KEM (FIPS 203) is the NIST standard. X-Wing is a hybrid combiner that pairs ML-KEM with X25519. Understanding when to use each — and why hybrid matters during the migration window.
Read post