IETF Publishes Post-Quantum Algorithms for OpenPGP
RFC 9980 adds composite encryption and signatures, plus standalone hash-based signatures, to the OpenPGP protocol.
Fiber infrastructure, used as contextual photography for deployment of post-quantum protocols. Image credit“Fiber Splice Lab” by Dhaluza at English Wikipedia, CC BY 3.0. · https://creativecommons.org/licenses/by/3.0/
The IETF has published RFC 9980, defining a post-quantum extension to OpenPGP. Publication was recorded on June 30 at Proposed Standard maturity on the Standards Track. It gives implementers a specification for interoperable migration as the cryptographic requirements of long-lived encrypted files and signed messages evolve.
The RFC combines ML-KEM with elliptic-curve encryption and ML-DSA with EdDSA signatures. It also defines standalone SLH-DSA signatures.
Publication establishes algorithms and formats; it does not update existing mail clients, replace their keys or change archived messages. Putting the specification into everyday use depends on client support, interoperability and workable key-migration processes.