Why we cannot wait for better post-quantum signature algorithms

This post details the challenges and trade-offs of migrating to post-quantum signature algorithms, comparing ML-DSA with emerging candidates like FN-DSA, SQIsign, HAWK, and others, highlighting their respective strengths and weaknesses in terms of size, speed, and security. It emphasizes the urgency of this migration due to the threat of harvest-now-decrypt-later attacks and the impending arrival of quantum computers capable of breaking classical cryptography. The post contrasts the 'all-star' nature of Ed25519 with the 'specialist' and 'generalist' categories of post-quantum algorithms, and discusses the specific characteristics of SQIsign (small signatures, slow signing) and its potential applications in offline scenarios.