PQC Recommendations

Standards-aligned replacements for every vulnerable algorithm family found in your estate.

FIPS 203

ML-KEM

Module-lattice key encapsulation (Kyber)

FIPS 204

ML-DSA

Module-lattice digital signatures (Dilithium)

FIPS 205

SLH-DSA

Stateless hash-based signatures (SPHINCS+)

RSA-2048ML-KEM / hybrid key establishment

critical

Replace or transition RSA-based key establishment with a standardised PQC or hybrid approach before the harvest-now-decrypt-later window closes.

ECDSA P-256ML-DSA / hybrid signature strategy

high

Signature verification chains must accept composite certificates before issuer migration begins.

ECDH P-256/P-384X25519 + ML-KEM hybrid

high

Hybrid key exchange retains classical assurance while adding lattice-based protection.

3DES (PIN block)AES-256-GCM

critical

3DES is deprecated independent of quantum risk; HSM firmware upgrade required.

SSH-RSA host keysSLH-DSA or ML-DSA host keys

high

Long-lived host keys are ideal harvest targets; rotate to stateless hash-based signatures.

TLS 1.2 endpointsTLS 1.3 + hybrid groups

medium

TLS 1.2 cannot negotiate hybrid key shares; upgrade is a prerequisite for PQC rollout.