A year ago, I wrote about the road to quantum-safe cryptography in Red Hat OpenShift. At the time, much of that road was forward-looking: TLS 1.3 was not yet the default, Go did not support post-quantum algorithms, and the first NIST post-quantum cryptography (PQC) standards had only just been finalized. A lot has changed. This update covers where we are today, what shipped, what is next, and, critically, why digital signatures (ML-DSA) are the harder half of the quantum-safe migration.What shipped: ML-KEM is in productionRed Hat OpenShift 4.22 ships ML-KEM (FIPS 203) by default. When a capabl
This article has been indexed from Red Hat Security
Read the original article: