Reference

Standards and resources

Primary sources for every normative claim in this course. Use these for implementation decisions — the lessons summarise, they do not substitute.

Verify before implementing. Standards, protocol drafts, libraries and product capabilities all move. FIPS 206 and HQC in particular were not published standards at the time this course was written. Check the current official publication before making a production decision on any of it.

Post-quantum standards

NIST

FIPS 203 — ML-KEM

The key encapsulation standard. Lessons 3.1 and 3.2.

https://csrc.nist.gov/pubs/fips/203/final

NIST

FIPS 204 — ML-DSA

Lattice-based digital signatures.

https://csrc.nist.gov/pubs/fips/204/final

NIST

FIPS 205 — SLH-DSA

Hash-based signatures — the non-lattice hedge.

https://csrc.nist.gov/pubs/fips/205/final

NIST

SP 800-227 — KEM recommendations

How to use a KEM correctly, including hybrid construction.

https://csrc.nist.gov/pubs/sp/800/227/final

Migration guidance

NIST

Considerations for achieving crypto agility (CSWP 39)

The agility argument in lesson 2.7, in normative form.

https://csrc.nist.gov/pubs/cswp/39/upd1/considerations-for-achieving-crypto-agility/final

NIST NCCoE

Migration to post-quantum cryptography

Reference architectures and discovery practice for lessons 3.4 and 3.6.

https://www.nccoe.nist.gov/applied-cryptography/migration-to-pqc

CISA

Quantum-readiness migration roadmap

The joint CISA/NSA/NIST fact sheet cited in lesson 2.2.

https://www.cisa.gov/resources-tools/resources/quantum-readiness-migration-post-quantum-cryptography

Protocol specifications

IETF

RFC 9958 — PQC for engineers

A practical engineering orientation to deploying PQC.

https://datatracker.ietf.org/doc/rfc9958/

IETF

RFC 10024 — X25519MLKEM768

The hybrid TLS group used throughout this course.

https://datatracker.ietf.org/doc/rfc10024/

IETF

RFC 10042 — Hybrid PQC in SSH

The SSH side of the migration in lesson 3.6.

https://datatracker.ietf.org/doc/rfc10042/

Implementations

OpenSSL

OpenSSL 3.5 release notes

Native ML-KEM support — what the scanner in lesson 3.3 looks for.

https://openssl-library.org/news/openssl-3.5-notes/

Open Quantum Safe

Project scope and limitations

Read the stated limitations before treating liboqs as production-ready.

https://openquantumsafe.org/about/

Quantum platform

Origin Quantum

Origin Pilot capabilities

The control plane described in lessons 4.1 and 4.2.

https://originqc.com/blogs/origin-pilot-download

Origin Quantum

QPanda developer tools

SDK entry point for lesson 4.6.

https://originqc.com/developer-tools/qpanda

Origin Quantum

QPanda3 documentation

API reference for circuit programming.

https://github.com/OriginQ/QPanda3-doc

Origin Quantum

pyqpanda algorithm library

Algorithm implementations for lesson 4.7.

https://github.com/OriginQ/pyqpanda-algorithm

Origin Quantum

Developer tools portfolio

VQNet, ChemiQ and the wider toolchain.

https://originqc.com/developer-tools

How this course uses them. Where a lesson states a figure — a parameter size, a deprecation date, a resource estimate — it comes from one of these or from a cited paper. Where a lesson states a modelling assumption, such as the algorithm-dependent threat horizon in the HNDL lab, it says so explicitly and is not a normative claim.