Filippo Valsorda: Post-Quantum Crypto Needs to Ship by 2029
(Post-Quantum) Cryptographic Right Answers
Filippo Valsorda updates the long-running Cryptographic Right Answers series for the post-quantum era. With the transition deadline moved to 2029, he provides a cheat sheet: use X25519+ML-KEM-768 for key exchange, ML-DSA-44 for signatures, HPKE with X-Wing for asymmetric encryption, and Cobblestone-128 for large messages. Symmetric crypto remains safe; Grover's algorithm doesn't matter. He also notes LLMs are now good at finding bugs, making AI review a right answer.
The timeline of the post-quantum transition dramatically shifted in early 2026, and there is now consensus that it needs to complete by 2029. 2029! We have three years!
- pluto_modadic
Okay - so... they're saying... don't use p384? :3
- zarzavat
> Password handling: Argon2id or scrypt. But have you considered passkeys instead?
I hate passkeys and if your service doesn't offer an alternative then I'm not using your service.
- hdmoore
Hurray for mostly-non-controversial opinions!