Research
Briefs from the lab
Short, sourced explainers on where the quantum threat stands and what to do about it. Have a topic? Propose it through an RFC.
Quantum computing
Shor, Grover, and a realistic view of Q-day
Two algorithms define the quantum threat to cryptography. One is existential for public-key crypto; the other is manageable.
Cryptography
ML-KEM and ML-DSA: a field guide to FIPS 203 and 204
NIST finalized its first post-quantum standards in August 2024. Here is what they are, how big they are, and how to adopt them.
Bitcoin
Which bitcoins are quantum-exposed?
A quantum attacker needs a public key. Whether yours is visible depends on the output type and on whether you have reused addresses.