- RSA and ECC are vulnerable to quantum attacks, but ML-KEM encryption and ML-DSA signatures are quantum-resistant and were standardized by NIST in 2024.
- Cloudflare aims for full post-quantum security by 2029, with most traffic already using ML-KEM, but signatures still need migration to protect authentication.
- ML-DSA has downsides like larger sizes compared to classical algorithms, and alternative post-quantum signature schemes are being developed, such as FN-DSA and others from NIST's third round.
- New signature schemes like SQIsign offer small signatures but slow signing, UOV has tiny signatures but huge public keys, and stateful hash-based signatures require careful state management.