This presentation introduces Post-Quantum Cryptography (PQC) support in OpenSSL, showcasing how the library prepares for a quantum-resilient future. It explains the motivation for PQC—protecting data from future quantum decryption—and highlights the new NIST-approved algorithms ML-KEM, ML-DSA, and SLH-DSA.
The talk's first part focuses on integrating PQC into TLS, certificates, and digital signatures.
The second part will explain how to save private keys in seed format, enable PQC in the OpenSSL configuration, and verify PQC compatibility for servers and clients. They will also include a certificate generation using the openssl CLI tool.
Overall, the session provides a practical overview of OpenSSL’s path toward quantum-safe cryptography.