PQC Radar

Researchers quantified the cost of moving Matter's CASE handshake from P-256 ECDH to ML-KEM on Thread networks with 127-byte frame limits. Session keys still derive from classical ECDH despite device attestation using ML-DSA, leaving recorded traffic vulnerable to future quantum decryption.

On 8 October, the IETF JOSE working group released revision 05 defining six profiles combining ML-DSA with ECDSA or EdDSA for JSON and CBOR security objects. This enables post-quantum components without abandoning existing deployed signature systems.

A 32-bit RISC-V SoC with integrated NTRU-HPS-2048-509 accelerator achieved 300× faster encryption and 540× faster decryption than optimized software, consuming 59.26mW in 1.925mm² core area. Hardware acceleration provides a practical deployment path for post-quantum algorithms on resource-limited devices.

The iraca harness compared RustCrypto's ml-kem crate against the pq-crystals C reference and found byte-for-byte identical results across key generation, encapsulation and decapsulation, including correct rejection of non-canonical keys required by FIPS 203. Cross-language differential verification catches errors shared implementations could miss.

On 10 October, the Banque de France and Monetary Authority of Singapore completed post-quantum cryptography testing, signing and encrypting institutional emails via Microsoft Outlook with hybrid classical and post-quantum algorithms. Both institutions plan to extend this to critical cross-border financial transactions and payment networks.

Iothic Ltd secured £659.5k in funding on 11 October, valuing the company at £2.3m for its CORE/dOISP decentralized, post-quantum-ready zero-trust platform. The startup targets defense, smart cities and critical infrastructure with device-level security reducing dependence on centralized key management.

Developer moral666 released QT, a Rust prototype implementing X3DH, PQXDH, Double Ratchet and Sealed Sender with automated tests and WebSocket transport. The project demonstrates post-quantum key agreement integrated into a Signal-compatible messaging stack with FFI bridges to Kotlin, Swift and Python.

Testing at 1ms, 70ms and 148ms RTT showed ML-DSA-65 certificates (7.68 KB vs ECDSA's 741 B) do not slow TLS handshakes at realistic WAN latencies. Larger cert chains do not hurt performance through extra TCP segments.

Defense Department PQC director Britta Hale announced on 9 October that federal PIV and CAC identity cards must use post-quantum algorithms by 2030, requiring all readers, servers and certificate authorities to support them by end of 2029. NIST has not yet published revised card specifications in FIPS 201 or SP 800-73/800-78.

Researchers presented a modified DNS server supporting hybrid classical and post-quantum signatures with UDP fragmentation to handle NIST PQ signature sizes exceeding MTU limits. The team open-sourced the software and testbed to enable reproducible evaluation of quantum-safe DNS deployment.

Developer sebastianrenker released RenkerVault, a TypeScript end-to-end encrypted chat using X25519 + ML-KEM-768 hybrid key exchange with Double Ratchet and a content-blind relay server. The relay operator never sees plaintext, addressing EU chat control proposals.

Arpan0995 released a static analysis tool that scans Java codebases for quantum-vulnerable JCA usage (RSA, ECDSA, ECDH), ranks migration sites by cost, and estimates engineer time needed. The tool requires no build or classpath and runs in seconds.

systemslibrarian released PostQuantum.Configuration 1.0, a .NET library for encrypting configuration secrets with hybrid ML-KEM-768 and ECDH P-256 key wrapping, now stable across .NET 8, 9, and 10. It addresses secure-by-default encryption for connection strings and API keys.

shubSaurabh released cbom-scan, which scans source code, configs, certificates and live TLS endpoints to build a CycloneDX cryptography bill of materials and assign post-quantum readiness scores. It detects cryptographic use across Python, Java, Go, JavaScript, C, Rust, Ruby, PHP, .NET and infrastructure, addressing NIST's 2030 deprecation and 2035 disallow dates for RSA and ECC.

Thales announced a post-quantum hardware security module at its October 1 Paris Cyber Summit, yet surveys show only 5% of organizations have a defined quantum strategy and 60% have not begun meaningful migration. Large organizations need 8–15 years for full transition before NIST's 2030 deprecation and 2035 disallow dates.

F5 Labs found 54% of the top one million websites support post-quantum key exchange, but removing Cloudflare-hosted sites drops that to 22%, showing CDN providers enabled the feature by default rather than enterprises deploying it. Only 27% of CISOs report actively implementing post-quantum cryptography.

Michael Laurence Curzi released ZEDEC XERO VULPINE 1.0.0, a freestanding C kernel operating system with native ML-KEM and ML-DSA support, TLS 1.3 stack, and multi-agent AI runtime, runnable as a desktop app or bootable OS. The project includes 12 language SDKs via libzxv C ABI.

KXCO set ML-KEM-1024 as its default algorithm, completing the CNSA 2.0 algorithm pair ahead of the NSA's 2027 deadline for national-security systems.

Quantum Bridge Technologies secured $8 million Series A funding led by Primo Capital SGR to develop its Distributed Symmetric Key Establishment protocol for quantum-safe cryptography. The company aims to help organizations integrate post-quantum security into existing systems without disruption.

Intercede released MyID Authenticate, a FIDO passkey authentication platform with crypto-agile design supporting post-quantum cryptography, deploying first with a major European public-sector customer. The solution extends phishing-resistant passkeys to Windows desktops, cloud services, and legacy applications.

Financial regulators are formalizing deadlines for institutions to migrate core transaction networks to post-quantum cryptographic standards. Legacy banking infrastructure requires extensive audits and re-architecture of key management and data transport without interrupting real-time clearing systems.

TRON activated Falcon-512 signatures on Nile testnet on 2 July 2026. Mainnet activation requires a vote by 27 Super Representatives and completion of outside security audit, with no confirmed date.

NEAR's account model now supports ML-DSA post-quantum signatures while keeping assets in existing accounts. NEP-655 for committed implicit accounts is live on testnet with mainnet deployment expected soon.

misiektoja released go-composite-mldsa, a Go library implementing draft-ietf-lamps-pq-composite-sigs-19 for hybrid signatures pairing ML-DSA with RSA, ECDSA or Ed25519. Composite signatures verify only when both algorithms succeed, keeping certificates trustworthy during migration as ML-DSA matures.

misiektoja released go-pkicmp-ng, a Go implementation of RFC 9810 Certificate Management Protocol with ML-DSA and composite ML-DSA CA support. This enables certificate authorities to issue and manage post-quantum credentials through standardized protocols.

misiektoja released go-acme-server, an embeddable ACME library (RFC 8555) supporting ML-DSA and composite ML-DSA CAs for TLS certificate issuance. Standard ACME clients like Certbot can now obtain post-quantum certificates from compatible certificate authorities.

Adam Everspaugh, Cryptographic Advisor at Keeper Security, argues that the ability to rapidly swap and update cryptographic primitives is as critical as algorithm selection for the U.S. federal quantum-resistant cryptography mandate. The HAWK signature scheme's withdrawal from NIST standardization after discovering a mathematical weakness demonstrates why systems must support algorithm changes without full re-architecture.

wolfSSH v1.6.0 released with ML-DSA host keys and user authentication, strict key exchange enabled by default, and fixes for five vulnerabilities including CVE-2026-16516 (critical ECDSA curve mismatch) and CVE-2026-83540 (Windows authentication context leak). Multiple behavior changes require attention before upgrade.

John Preuß Mattsson and Sini Ruohomaa published draft-preussmattsson-tls-hqckem-00 defining nine quantum-resistant TLS 1.3 algorithms based on HQC-KEM, NIST's code-based KEM from FIPS 207, including standalone, PQ/T hybrid, PQ/PQ hybrid, and PQ/PQ/T hybrid variants. HQC's different hardness assumptions from lattice-based ML-KEM provide algorithmic diversity to mitigate future cryptanalytic advances.

OpenSSL 4.1.0-beta2 released October 9, 2026 includes native DTLS 1.3 support and integrated post-quantum cryptography with optimized NTT operations and AVX-512-optimized SHAKE for ML-DSA across x86_64, ppc64le and s390x. The beta enables testing of PQ hybrid key exchange before production migration.

Cloudflare announced October 9, 2026 its intent to become a public Certificate Authority supporting post-quantum technologies using Merkle Tree Certificates to batch issuances and reduce handshake overhead, acquiring Root CA key material from GlobalSign. The architecture addresses the post-quantum scaling problem where post-quantum signatures increase cryptographic handshake data by approximately 40 times compared to classical signatures.

Ethereum Magicians developers published a draft extension to ERC-5564 stealth addresses combining ML-KEM-768 with secp256k1 ECDH to protect payment privacy against future quantum computers. The scheme reuses existing ERC-5564 and ERC-6538 contracts without protocol changes, requiring one ECDH, one ML-KEM decapsulation and one hash per announcement for scanning.

Microsoft launched the PQC TLS Pilot Program on August 27, 2026, enabling seven certificate authorities to evaluate post-quantum TLS roots using ML-DSA-87. Windows 11 received ML-DSA certificate support in July 2026 updates, treating post-quantum readiness as a multi-year planning effort.

F5 Labs found 54% of the world's top 1 million websites offer post-quantum key exchange, but only 22% when Cloudflare-hosted sites are excluded. Most protection exists only at the edge; internal systems, certificates, and legacy infrastructure remain unupgraded.

U.S. agencies have until the end of October 2026 to deliver post-quantum computing migration plans to OMB and the Office of the National Cyber Director, with phased work through 2028. CISA reports federal civilian agencies lag on inventorying cryptographic systems, the critical first step for managing migration.

x39matrix released x39-Evidencia, a document proof-of-existence layer using ML-DSA-87 for signatures and hybrid X-Wing encryption (ML-KEM-768 + X25519) for end-to-end negotiation, with timestamps anchored in Bitcoin. The open-source AGPL-3.0 project was last updated October 9, 2026.

wolfSSL is developing an External-Mu optimization for ML-DSA in wolfHSM to reduce performance overhead when signing large messages by computing the 64-byte Mu hash on the client instead of the HSM. This addresses bottlenecks in slow transports or HSM cores with performance limitations.

Fileverse dDocs is an open-source, end-to-end encrypted document editor using X-Wing over ML-KEM-768 and X25519 for post-quantum protection, available at ddocs.new as a privacy alternative to Google Docs. Documents are encrypted on-device with keys staying with the user.

France's cybersecurity agency ANSSI announced it will cease certifying security products lacking quantum-resistant encryption by 2027, with a directive for companies to adopt quantum-resistant solutions by 2030. This responds to estimates that a cryptographically relevant quantum computer could emerge by 2030.

SandboxAQ received a $500 million CHIPS R&D award from the US government for semiconductor development and quantum security initiatives. The funding reflects government confidence in the company's approach as Q-Day timelines accelerate.

BTQ Technologies became security partner for MoonPay Korea's won-backed stablecoin, deploying post-quantum cryptography across issuance, distribution, wallets and settlement for a network serving 35 million customers. The companies will conduct a proof of concept with Korean banking institutions.

A US Department of Energy analysis shows distributed custody systems face unavoidable structural trade-offs when migrating to post-quantum standards, as changing signature algorithms reorganizes secret share distribution, participant interaction during signing, and key refresh. This differs from single-signer cryptography where algorithm replacement is straightforward.

Federal agencies must ensure their public key infrastructure handles post-quantum cryptography to avoid stalling migrations, according to DoD, CISA and NIST experts. Smart identity cards must be integrated into PQC preparation or deployment will fail at the credential layer.

NATO Allies approved a quantum technology roadmap on 30 July 2026 scheduling a pilot of quantum-safe communications between NATO Headquarters and SHAPE for Q4 2027, with contractor bids due 12 November 2026. European defence buyers now face turning technical standards into contract terms for post-quantum cryptography suppliers.

A Go implementation of MIKE (Module Isogeny Key Exchange), a post-quantum non-interactive key exchange using supersingular isogenies, was published on GitHub on 8 October 2026. The package includes six parameter sets covering NIST security levels 1, 3 and 5, though the authors warn cryptanalysis is only beginning.

DigiCert's July 2026 survey of 1,001 IT and security decision-makers found 87% of organizations are planning, testing or implementing PQC, but only 7% use quantum-safe or hybrid cryptography for more than half their digital certificates. Thales announced a post-quantum HSM and security suite at its October 2026 Cyber Summit.

Arqit signed a NATO contract on October 6, 2026 as part of a winning consortium to supply protected networking services. The London-based post-quantum encryption company expects FY2026 revenue of $975,000 to $1 million, up 84–89% from $530,000 in FY2025.

Project Eleven released Strongpoint, a modular custody solution for digital assets using post-quantum cryptography with algorithm swaps as threats evolve. The platform addresses the risk that quantum computers could break current encryption before 2030.

QuLens and CryptoBind unveiled India's first sovereign quantum-safe cryptographic trust platform at Pragati Q-Foundry 2026 on September 29–30 in New Delhi, backed by India's National Quantum Mission. The platform equips enterprises and government bodies against quantum computing threats.

Haven, a peer-to-peer end-to-end encrypted social network, uses hybrid post-quantum cryptography by default: X25519 plus ML-KEM-768 for key exchange and Ed25519 plus ML-DSA-65 for signatures. The open-source project protects stored content against harvest-now, decrypt-later attacks.

TheMaxMur released RS-Key, firmware that turns a Raspberry Pi RP2350 board into a USB security key supporting WebAuthn, SSH, GPG, and post-quantum cryptography algorithms with no soldering required. The project carries no security audit and the RP2350 is not a secure element.

Thorsten Meyer warns that AI systems are producing new mathematics faster than human communities can verify, creating a second threat to cryptography alongside quantum computers. The German BSI advised against new deployments of Classic McEliece on October 1, 2026, signaling that threat estimates have shifted.

Researchers released QuantumShield AI, a decision-support platform that formalizes selection among NIST post-quantum standards (ML-KEM FIPS 203, ML-DSA FIPS 204, SLH-DSA FIPS 205, FN-DSA draft FIPS 206) using multi-criteria decision-making. The framework provides sector-specific profiles for banking, healthcare, IoT, government, e-commerce, and defense.

turkananation released pqforge_ffi, a Dart and Flutter library that accelerates NIST FIPS 203 (ML-KEM) and FIPS 204 (ML-DSA) via AWS-LC with a pure-Dart fallback. Byte-for-byte compatibility between native and pure-Dart implementations lets post-quantum cryptography run on AWS-LC without API changes.

itsVentie released Marrow, an experimental desktop messenger combining hybrid post-quantum cryptography (ML-KEM-768 + X25519) with Double Ratchet end-to-end encryption and libp2p networking, built in Rust with Tauri v2. The system uses Ed25519-based local identities and forward secrecy for one-to-one sessions.

amarshat published PQC-Assay, a machine-checked refinement proof linking unmodified PQClean ML-DSA reference C code through Cryptol and Isabelle to the NIST FIPS 204 specification. The SAW-Cryptol-Isabelle pipeline proves C functional correctness against FIPS 204 with machine-checked overflow-freedom.

johnInarti released Agent Passport, an MCP server that issues and verifies post-quantum (ML-DSA-65 / FIPS 204) cryptographic identities for AI agents with signed decision receipts verifiable offline. The system integrates with LangChain, CrewAI, AutoGen, and Claude Desktop.

systemslibrarian published a browser-based educational demo showing implementation attacks against ML-KEM and ML-DSA: NTT power analysis, rejection-sampling fault bypass for key recovery, KyberSlash timing side-channels, and faulty KECCAK seed injection. The simulated attacks illustrate why mathematical security does not guarantee implementation security on hardware.

A power-analysis attack recovers post-quantum encryption keys in 27 power traces, demonstrating practical side-channel risk to ML-KEM and ML-DSA implementations. The result underscores the need for constant-time and masking countermeasures in production post-quantum deployments.

Researchers published HPQ-AKE, a sign-less authenticated key exchange combining ML-KEM-768 for post-quantum security with RSA for implicit authentication, reducing handshake transmission by 56.4% on bandwidth-constrained IoT and edge networks. The protocol preserves existing RSA infrastructure during migration and achieves 31.4% lower latency on simulated satellite links.

The US Government Accountability Office found that the US government is behind schedule in transitioning to post-quantum encryption. The finding underscores the urgency of federal migration deadlines and compliance with executive orders like OMB M-26-15.

KnightsbridgeAIQ released kxco-pq-vault, a post-quantum file encryption tool using ML-KEM-768 and AES-256-GCM for harvest-now, decrypt-later protection, with support for multiple recipients and NIST ACVP validation of 1,793 vectors. The tool implements OMB M-26-15 requirements for re-encrypting long-lived sensitive data and includes SLSA provenance and CycloneDX SBOMs on every release.

s7nHan published Ghost-securetextmesh, a Rust-based secure text communication system for disrupted environments using ML-KEM for key establishment, ML-DSA for signatures, and AES-256-GCM for encryption, with delay-tolerant networking and Shamir secret sharing. The public showcase repository demonstrates the architecture without publishing the private production implementation.

systemslibrarian released a browser demo of ML-DSA (FIPS 204) signing that visualizes rejection sampling and proves via Kolmogorov-Smirnov test that rejection counts are independent of the signing key. Variable signing time is required for constant-time security against timing attacks.

systemslibrarian published crypto-lab-downgrade-wire, a browser demo showing how an on-path attacker can strip X25519MLKEM768 from a TLS 1.3 ClientHello to force bare X25519. Transcript binding via the TLS 1.3 Finished MAC defeats the attack.

US Executive Order 14412 (June 22, 2026) requires federal high-value systems to adopt post-quantum key establishment by December 31, 2030 and signatures by December 31, 2031. Keys are prioritized because recorded traffic can be decrypted later once quantum computers exist.

RFC 9370 carries post-quantum ML-KEM inside IKEv2 to protect recorded VPN traffic from future quantum decryption. Classical ECDH remains in the initial handshake; ML-KEM is added in subsequent IKE_INTERMEDIATE exchanges, combining both secrets.

NIST published three post-quantum standards on August 13, 2024: FIPS 203 (ML-KEM for key establishment), FIPS 204 (ML-DSA for signatures), and FIPS 205 (SLH-DSA as a hash-based backup). US federal agencies are required to adopt these standards.

The Foundation for Defense of Democracies released a practical post-quantum readiness guide for operational technology. Government and critical infrastructure operators need migration paths as quantum threats to current cryptography become policy concern.

A Python testbed lets TLS 1.3 clients choose between ML-KEM hybrid groups based on round-trip time and device resources, reducing latency by up to 36% and handshake bytes by 26% on constrained networks. Adaptive selection trades security level against performance without modifying the TLS handshake.

A U.S. federal agency deployed quantum-safe cryptography across its production network using Quantum XChange technology. This is an operational government deployment of post-quantum migration.

A new WebAssembly demo runs FrodoKEM (plain LWE) and ML-KEM-768 from liboqs at all security levels, showing key generation, encapsulation, and hybrid combinations. FrodoKEM trades ~15 KB key size for maximum conservatism against future algebraic attacks, useful for long-term archive secrecy.

Forescout research found critical readiness gaps in healthcare organizations for post-quantum cryptography adoption. Patient data security depends on timely migration to quantum-resistant encryption.

TET-Network-Foundation released TET-OS, a Layer 1 blockchain in Rust using ML-DSA-44 (NIST FIPS 204) signatures with a desktop OS for encrypted P2P mail, file sharing, and wallet. The project is in Phase 0 public testnet as an unaudited developer preview.

Project Eleven and Quantus announced integration of Strongpoint, an institutional custody platform for post-quantum and AI-era blockchains, with Quantus joining as a development partner. Strongpoint uses a crypto-agile architecture to manage different cryptographic standards across multiple networks.

The U.S. Government Accountability Office found zero of 24 CFO Act agencies have implemented required post-quantum cryptography preparatory practices, with 23 lacking documented cryptographic asset inventories and 23 having conducted no operational PQC testing. This matters because the Executive Order sets December 2030 for federal key establishment migration and December 2031 for digital signatures to post-quantum algorithms.

NIST published FIPS 203 (ML-KEM for key establishment), FIPS 204 (ML-DSA for signatures), and FIPS 205 (SLH-DSA for hash-based signatures) as the first three post-quantum standards. These standards address the harvest-now-decrypt-later threat where adversaries record encrypted data today to decrypt once quantum computers arrive.

Under NSA CNSA 2.0, VPNs and routers must support and prefer ML-KEM-1024 by 2026 and use it exclusively by 2030, with all quantum-vulnerable public-key algorithms disallowed after 2035 per NIST IR 8547. This timeline applies to U.S. National Security Systems and serves as a practical benchmark for critical infrastructure operators.

A browser-based educational simulation demonstrates the KyberSlash timing attacks on ML-KEM discovered by Bernstein, Bhargavan, and others, showing how secret-dependent division in poly_tomsg and poly_compress leaks information through variable timing on ARM processors. The attack recovers secret keys on Cortex-A7 and Cortex-M4 targets, with fixes available in upstream patches.

QSTriage, a Python tool released October 2026, validates cryptographic inventories and CycloneDX CBOM evidence to produce deterministic PQC Decision Records that preserve evidence, policy context, and confidence limits for migration planning. The tool addresses the gap between inventory scanning and migration execution as NIST's 2035 deadline for removing quantum-vulnerable algorithms approaches.

AnimeshShaw released quantum-safe-ts, a WebAssembly library implementing ML-KEM, ML-DSA, and SLH-DSA for Node.js, browsers, Deno, and Cloudflare Workers, with a scanner (quantum-safe-audit) that finds classical crypto in JavaScript projects and outputs SARIF and CycloneDX CBOM. The library is pre-1.0 and not yet audited.

turkananation released pqtransport, a pure-Dart library implementing RFC 10024 hybrid TLS 1.3 with ML-KEM and ML-DSA for Dart and Flutter, supporting X25519MLKEM768, SecP256r1MLKEM768, and SecP384r1MLKEM1024 key exchanges. The library includes encrypted UDP, DNS/DoH/DoT, mDNS, QUIC, and HTTP/1.1–3 with no FFI or platform TLS on the post-quantum path.

Standard IPsec is not quantum-safe because IKEv2 uses classical Diffie-Hellman, but RFC 9370 allows adding ML-KEM (NIST FIPS 203) as an extra key exchange to resist harvest-now-decrypt-later attacks. Draft IETF standard draft-ietf-ipsecme-ikev2-mlkem version 09 (5 July 2026) is in the RFC Editor queue.

Lennonhaha released FIBEMATE, a full-stack validation platform for ML-KEM-768, ML-DSA-65, SLH-DSA-128s, and SM2/SM3/SM4 with FPGA NTT acceleration, 256 timestamped evidence records, and TLA+ formal verification. Components passed functional verification and software TVLA side-channel testing but the platform is not certified and has not undergone third-party security audit.

Chrome 131 moved from Kyber to NIST-standardized ML-KEM in hybrid key agreement to protect TLS key establishment against future quantum attacks. This protects session secrets against harvest-now-decrypt-later threats but not certificates, authentication, or other HTTPS layers.

Surfshark integrated NIST-standardized ML-DSA certificates into WireGuard in October 2026, covering encryption, key exchange, and authentication. The addition closes the authentication gap that earlier deployments left open against quantum decryption of stored traffic.

Forescout analyzed 2.5 million devices across 50+ healthcare organizations and found only 6% of IoMT and 16% of OT devices support PQC-capable SSH, versus 50% of IT devices, with only 31% of exposed healthcare systems supporting TLS 1.3. Medical records, imaging, and payment data face harvest-now-decrypt-later risks.

Aevorine released Tessera 0.1.32, an open-source Windows password manager using AES-256-GCM with ML-KEM-1024 key wrapping. The offline-first tool runs locally with no cloud upload and includes PC cleanup and LAN-only Android sync.

Basis Network published basis-cli, a command-line tool for creating wallets and signing transactions with ML-DSA-65 (FIPS 204). The tool uses post-quantum signatures incompatible with Ethereum wallets, requiring a different signature scheme entirely.

Researchers proved that parallel repetition of interactive arguments under homomorphic encryption reduces soundness error at exponential rate in the post-quantum setting and constructed the first constant-round succinct argument for QMA with negligible errors assuming quantum homomorphic encryption. This advances theoretical foundations for post-quantum cryptographic proofs.

VOIDEX Messenger was designed with post-quantum encryption from its first day to defend against harvest-now-decrypt-later attacks. In 2024, Chinese state actors were found operating inside major US telecommunications networks, and CISA and the FBI urged people to move to end-to-end encrypted messaging.

NIST is driving post-quantum cryptography adoption across critical sectors ahead of the NSA's CNSA 2.0 mandate effective January 2027, partnering with Apple, Google, IBM, and Amazon to transition quantum-resistant encryption from research to commercial deployment.

sebastienrousseau published crypto-service.github.io, an open-source post-quantum cryptographic infrastructure supporting ML-KEM (FIPS 203), ML-DSA (FIPS 204), and SLH-DSA (FIPS 205) across 18 packages in Rust with TypeScript components. The project launched October 4, 2026 as a sovereign CaaS daemon with multi-cloud KMS interface and database field encryption.

On June 22, 2026, Executive Order 14412 directed federal agencies to transition high-value assets to post-quantum cryptography for key establishment by December 31, 2030 and digital signatures by December 31, 2031. Manufacturing is identified as one of the most exposed sectors due to Industry 4.0 connectivity.

OpenSSH 10.6 disabled LZ77 compression following Ruhr University Bochum research on cross-channel compression state attacks, and added post-quantum key support alongside username restrictions to prevent shell injection.

Europol published two reports on October 7, 2026 warning that quantum computers could derive private keys from exposed public keys and forge unauthorized transactions. The agency recommends phased preparation and clear migration plans.

Hyderabad-based startup amPICQ, founded in 2022, raised approximately $569,700 in pre-seed funding to build fiber-based quantum key distribution and random number generation systems. The company is targeting data center interconnects and government communications as initial deployment paths.

The thesm-os/core Go module now includes ML-DSA, the NIST FIPS post-quantum signature standard, alongside ed25519. Go services can now use standardized post-quantum signing.