Post-Quantum Algorithmen Referenz
Referenz für NIST post-quantum standardized Algorithmen: ML-KEM, ML-DSA, SLH-DSA, und candidates.
NIST Standards
ML-KEM (Module Lattice KEM, formerly Kyber) is the primary PQC key encapsulation mechanism. ML-DSA (Module Lattice DSA, formerly Dilithium) is the primary PQC signature. SLH-DSA (Stateless Hash-based DSA, formerly SPHINCS+) provides hash-only security signatures. FN-DSA (formerly Falcon) offers compact lattice signatures (to be standardized). These were selected after NIST's multi-year PQC competition. Hybrid schemes combine classical and PQ algorithms during migration.
- ML-KEM
- Lattice KEM
- ML-DSA
- Lattice signature
- SLH-DSA
- Hash signature
Kyber-basedDilithium-basedSPHINCS+ basedParameters and Performance
ML-KEM-512/768/1024 map to AES-128/192/256 security levels. ML-DSA has corresponding parameter sets. SLH-DSA has smaller public keys but large signatures (8-50 KB). Lattice schemes offer the best performance balance. Key sizes are larger than classical (RSA/ECC): ML-KEM-768 public key is 1184 bytes. Signature sizes: ML-DSA-65 is ~3.3 KB. Performance is competitive with software RSA but slower than ECC. Hardware acceleration is emerging. Hybrid TLS uses both classical and PQ keys.
- key sizes
- Larger than RSA/ECC
- sig sizes
- ML-DSA ~3KB, SLH ~30KB
- hybrid
- Classical + PQ
KB rangetradeoffmigration bridge