---
title: "The State of Post-Quantum Cryptography"
url: https://daily.dev/posts/the-state-of-post-quantum-cryptography-hjfyungt7
source_url: https://www.feistyduck.com/newsletter/issue_139_the_state_of_post-quantum_cryptography
type: article
source: "Feisty Duck"
published: 2026-07-30T09:41:08.984Z
updated: 2026-07-30T09:41:31.368Z
tags: ["quantum-computing", "cryptography", "pki"]
reading_time: 6
upvotes: 0
comments: 0
language: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# The State of Post-Quantum Cryptography

**[Feisty Duck](https://daily.dev/sources/feistyduck)** · 6 min read · 0 upvotes · 0 comments

## Summary

The post-quantum cryptography (PQC) transition is progressing unevenly: encryption (key establishment) is well underway with ML-KEM hybrids already securing most web traffic, but authentication remains a harder, messier problem. NIST standardized ML-KEM and ML-DSA in 2024, and these algorithms are now in major libraries and OS distributions. However, Google's rejection of ML-DSA for public certificates in favor of Merkle Tree Certificates (MTC) is fragmenting the PKI ecosystem. MTC adds significant complexity — new CA infrastructure, rebuilt ACME, more certificate types per server, and multi-step rotation. The deeper unsolved problem is downgrade attacks on authentication: once cryptographically-relevant quantum computers (CRQCs) exist, attackers could mint fraudulent certificates using compromised CA keys, and simply deploying PQC certificates isn't enough — all non-PQC cryptography must be disabled. Deadlines have tightened from 2035 to 2029 for major vendors, and a new signaling mechanism is still needed to selectively enforce PQC-only authentication before the full transition completes.

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://www.feistyduck.com/newsletter/issue_139_the_state_of_post-quantum_cryptography>

## Similar posts on daily.dev

- [Post‑Quantum Authentication: How Consumer Apps Can Stay Secure in a Quantum‑Ready World?](https://daily.dev/posts/post-quantum-authentication-how-consumer-apps-can-stay-secure-in-a-quantum-ready-world--xvcpygmkq) · Security Boulevard · 0 upvotes · 0 comments

---

Tags: [#quantum-computing](https://daily.dev/tags/quantum-computing), [#cryptography](https://daily.dev/tags/cryptography), [#pki](https://daily.dev/tags/pki)

[View this post on daily.dev](https://daily.dev/posts/the-state-of-post-quantum-cryptography-hjfyungt7)