Sizing Up Post-Quantum Signatures

This post introduces the challenge of post-quantum cryptography (PQ) for TLS security, specifically focusing on digital signatures. It highlights the need to transition to PQ signatures due to the threat posed by quantum computers and discusses the performance and size trade-offs of various PQ signature schemes (Dilithium, Falcon, Rainbow) compared to current standards (RSA, ECDSA). The post details Cloudflare's experimental approach to testing the impact of larger signatures on TLS handshakes by using dummy certificates, aiming to gather real-world data on client compatibility and performance.