Making protocols post-quantum

This post introduces the challenge of making cryptographic protocols, specifically TLS, post-quantum resistant. It details the need to replace current public-key cryptography algorithms (like ECDH and digital signatures) with quantum-resistant alternatives due to the threat posed by quantum computers. The post analyzes various post-quantum KEM and signature schemes, discussing trade-offs between speed, key size, and signature size, and explores potential protocol redesigns, such as using KEMs for authentication, to adapt to these new cryptographic realities.