Understanding the new quantum-resistant cryptographic standards
In 2016, the National Institute of Standards and Technology (NIST) initiated a comprehensive project to develop and standardize quantum-resistant cryptographic algorithms. Recognizing that quantum computers could eventually break current cryptographic standards, NIST sought to identify algorithms that could withstand both classical and quantum attacks.
The project attracted submissions from cryptographers worldwide, with 82 initial candidates. After multiple rounds of evaluation, including cryptanalysis, performance testing, and security assessments, NIST selected the first batch of post-quantum algorithms in July 2022.
NIST's first post-quantum cryptography standards include FIPS 203 (Module-Lattice-Based Key Encapsulation Mechanism Functions), FIPS 204 (Module-Lattice-Based Digital Signature Functions), and FIPS 205 (Additional Digital Signature Functions). These standards specify algorithms based on mathematical problems believed to be hard for both classical and quantum computers.
FIPS 203 standardizes CRYSTALS-Kyber for public-key encryption and key-establishment, while FIPS 204 standardizes CRYSTALS-Dilithium for digital signatures. FIPS 205 includes additional signature algorithms like Falcon and SPHINCS+.
CRYSTALS-Kyber is a key encapsulation mechanism (KEM) based on the Module Learning With Errors (M-LWE) problem in lattice cryptography. It provides a way to securely exchange symmetric keys over insecure channels, replacing algorithms like RSA and ECDH.
Kyber comes in three security levels (Kyber512, Kyber768, and Kyber1024), offering different trade-offs between security and performance. Kyber768 is recommended for most applications, providing security comparable to AES-192. The algorithm offers relatively compact key sizes and fast operation speeds.
CRYSTALS-Dilithium is a digital signature algorithm also based on lattice cryptography, specifically the Module Short Integer Solution (M-SIS) and Module Learning With Errors (M-LWE) problems. It provides authentication and integrity verification, replacing algorithms like ECDSA and RSA-PSS.
Like Kyber, Dilithium has multiple security levels (Dilithium2, Dilithium3, and Dilithium5) corresponding to different security strengths. While Dilithium signatures are larger than classical signatures, they offer strong security guarantees against both classical and quantum adversaries.
Organizations implementing NIST's PQC standards must consider various factors, including performance impacts, key management changes, and compatibility requirements. The new algorithms often require larger keys and signatures than classical methods, affecting storage and bandwidth requirements.
A hybrid approach combining classical and post-quantum algorithms is recommended during the transition period. This approach provides protection against both current classical attacks and potential future quantum attacks, allowing organizations to gradually migrate their systems while maintaining security. Ethereum verifies ECDSA on-chain; no wallet makes on-chain sigs quantum-safe; BMIC protects vault/backups/device-handoff.
The main standards are FIPS 203 (Kyber), FIPS 204 (Dilithium), and FIPS 205 (Falcon and SPHINCS+) covering key encapsulation and digital signatures.
There's no mandatory deadline, but organizations are encouraged to begin transitioning now to prepare for the quantum threat in the coming decade.
Kyber and Dilithium offer quantum resistance but typically have larger key sizes and signatures compared to RSA and ECC.
FIPS 203 standardizes Kyber for key encapsulation mechanisms (encryption), while FIPS 204 standardizes Dilithium for digital signatures.
Real NIST-standardised cryptography — ML-KEM-768 and ML-DSA-65 — protecting your vault, backups and device handoff. Two tiers, one wallet.
Explore BMIC