QianHeng乾珩 PQC Docs Hub量子文档 ✦ Ask AI✦ 问问文档 ⚐ Scan⚐ 扫一扫
/

Resources

A curated, verified register of the primary post-quantum cryptography standards and documents — grouped by standards body. Every link points to an official source. Status and dates are current as of June 2026; always confirm against the live document before implementing.

How to use this page
This is a map, not a substitute for the source text. Standardization moves quickly — Internet-Drafts become RFCs, drafts get new versions, and dates shift. Treat each entry as a pointer to the authoritative document.

NIST — algorithms & transition guidance

NIST is the source of the core PQC algorithm standards and the US transition guidance.

DocumentWhat it isStatusLink
FIPS 203ML-KEM — Module-Lattice key encapsulationFinal, Aug 2024csrc.nist.gov
FIPS 204ML-DSA — Module-Lattice signaturesFinal, Aug 2024csrc.nist.gov
FIPS 205SLH-DSA — stateless hash-based signaturesFinal, Aug 2024csrc.nist.gov
FIPS 206FN-DSA (Falcon) — compact lattice signaturesIn development / clearance; public IPD not yet released; not a final FIPS standardPQC project
SP 800-208Stateful hash-based signatures (LMS/XMSS)Final, Oct 2020csrc.nist.gov
SP 800-227Recommendations for Key-Encapsulation MechanismsFinal, 2025-09-18csrc.nist.gov
NIST IR 8547Transition to PQC Standards; proposes a time frame for gradually deprecating/disallowing quantum-vulnerable public-key algorithms.Initial Public Draft, Nov 2024csrc.nist.gov
NIST IR 8545Status report on the Fourth Round (HQC selection)Final, Mar 2025csrc.nist.gov
NIST IR 8528Additional-signature on-ramp: Round 1 status report is NIST IR 8528; Round 2 had 14 candidates; on 2026-05-14, 9 candidates advanced to Round 3.Final, 2024csrc.nist.gov
SP 1800-38NCCoE practice guide — Migration to PQCPreliminary draftsnccoe.nist.gov

Process pages: the NIST PQC project, the additional-signatures on-ramp (Round 2, 14 candidates), and the HQC selection announcement (Mar 2025).

IETF — protocol integration (RFCs & drafts)

The IETF defines how PQC enters real protocols. Several 2025 RFCs are now published; key exchange in TLS/SSH is still on drafts.

DocumentWhat it isTypeLink
RFC 9794Terminology for PQ/Traditional hybrid schemesRFC (Informational)rfc-editor
RFC 9881ML-DSA algorithm identifiers for X.509RFC, 2025rfc-editor
RFC 9909SLH-DSA algorithm identifiers for X.509RFC, 2025rfc-editor
RFC 9935ML-KEM algorithm identifiers for X.509RFC, 2025rfc-editor
RFC 9882 / 9814 / 9936ML-DSA / SLH-DSA / ML-KEM in CMSRFCs, 20259882 · 9814 · 9936
RFC 9370 / 8784Multiple key exchanges in IKEv2 / PQ preshared keysRFCs9370 · 8784
RFC 8391 / 8554XMSS / LMS-HSS hash-based signaturesRFCs (Informational)8391 · 8554
RFC 9708 / 9802HSS-LMS in CMS / HSS-XMSS in X.509RFCs9708 · 9802
RFC 9941SSH hybrid KEX sntrup761x25519-sha512RFC (Informational), 2026-04rfc-editor
draft-ietf-tls-ecdhe-mlkemTLS 1.3 hybrid X25519MLKEM768 (codepoint 4588)Internet-Draftdatatracker
draft-ietf-tls-mldsaML-DSA authentication in TLS 1.3Internet-Draftdatatracker
lamps-pq-composite-sigs / -kemComposite ML-DSA / ML-KEM for X.509Internet-Draftssigs · kem
sshm-mlkem-hybrid-kexML-KEM hybrid KEX in SSH (mlkem768x25519)Internet-Draftdatatracker
connolly-cfrg-xwing-kemX-Wing general-purpose hybrid KEMInternet-Draft (CFRG)datatracker

ISO/IEC & ITU-T — international standards

DocumentWhat it isStatusLink
ISO/IEC 14888-4:2024Stateful hash-based signatures (XMSS/LMS-type)Published 2024iso.org
ISO/IEC 14888-5 / -6Lattice-based / stateless hash-based signaturesIn development-5 · -6
ISO/IEC 18033-2 + FDAmd 2Asymmetric ciphers + PQC KEM amendmentAmendment in progressiso.org
ISO/IEC 11770-3:2021Key management — asymmetric techniquesPublished 2021iso.org
ITU-T X.1710 / X.1713 / X.1714QKD-network security framework / node protection / key combinationIn forceitu.int
ITU-T X.1811Quantum-safe algorithms in IMT-2020 (5G) systemsIn force, Apr 2021itu.int

ETSI — migration & hybrid guidance

DocumentWhat it isLink
ETSI TR 103 619Migration strategies and recommendations to quantum-safe schemes (2020-07)etsi.org
ETSI TS 103 744Quantum-safe Hybrid Key Exchangesetsi.org
ETSI TR 103 949 / TR 103 966QSC migration (C-ITS, 2023) / hybrid deployment considerations (2024)etsi.org
ETSI/IQC QSC ConferenceAnnual quantum-safe cryptography conference (2026: Ottawa)etsi.org

National & regional guidance

AuthorityDocument / stanceLink
NSA (US)CNSA 2.0 — ML-KEM-1024, ML-DSA-87, LMS/XMSS; milestones to 2030–2033 (advisory updated May 2025)media.defense.gov
White House / OMB (US)NSM-10 (May 2022); OMB M-23-02 migration memo (Nov 2022)M-23-02
CISA/NSA/NIST (US)Quantum-Readiness: Migration to PQC factsheet (Aug 2023)media.defense.gov
BSI (Germany)TR-02102-1 — recommends ML-KEM + FrodoKEM + Classic McEliece; hybrid-first (v2026-01)bsi.bund.de
ANSSI (France)PQC position (Jan 2022) + follow-up (11 October 2023) — phased, hybrid-firstcyber.gouv.fr
NCSC (UK)Timelines for migration to PQC — 2028 / 2031 / 2035 (Mar 2025)ncsc.gov.uk
EU / ENISARecommendation (EU) 2024/1101 coordinated roadmap; ENISA PQC studieseur-lex

Telecom — 3GPP & GSMA

DocumentWhat it isLink
3GPP TR 33.841Study on 256-bit algorithms for 5G (symmetric, Rel-16)3gpp.org
3GPP TR 33.938Cryptographic inventory of 3GPP security protocols (Rel-19) — basis for PQC migration3gpp.org
3GPP TS 33.5015G security architecture — SUCI/ECIES (the Shor-vulnerable target)3gpp.org
GSMA PQ.01 / PQ.02 / PQ.03PQTN Impact Assessment / Quantum Risk Management / PQC Guidelines for Telecom (v2.0)gsma.com

China — commercial cryptography (商用密码)

ItemWhat it isLink
GM/T 0003 / 0004 / 0002 / 0044 / 0001SM2 / SM3 / SM4 / SM9 / ZUC national standardsGM-Standards
ISO/IEC adoptionsSM2/SM9 in 14888-3, SM3 in 10118-3, SM4 in 18033-3, ZUC in 18033-4iso.org
ICCS / SCANext-generation commercial cryptographic algorithms call (Feb 2025) — classical + quantum resistanceoscca.gov.cn

Implementations & tools

  • Open Quantum Safe (OQS) — liboqs C library, language wrappers, and the OpenSSL provider.
  • PQClean — clean, portable reference C implementations.
  • oqs-provider — PQC for OpenSSL 3; OpenSSL 3.5+ natively supports ML-KEM, ML-DSA, and SLH-DSA; default TLS negotiation behavior depends on the specific OpenSSL minor version and distribution configuration.
  • NIST CAVP / ACVP — validation and test vectors.

Explore this site

Standards →

FIPS 203/204/205, SP 800-208/227, IR 8547.

Global & Industry →

IETF, ISO/IEC, ETSI, regional, telecom.

Comparison →

Algorithm sizes and trade-offs at a glance.

Migration →

Crypto-agility, hybrid, discovery, playbook.
Verify before you cite
Internet-Drafts change version and may be replaced by RFCs; draft FIPS/IR documents are revised; national-guidance dates and milestones are updated. Follow each link to the live source and confirm the current status before relying on it in a design, audit, or procurement decision.

资源链接

一份经核实的后量子密码核心标准与文档清单，按标准组织分组。每个链接都指向官方来源。状态与日期 截至 2026 年 6 月；实现前请以在线原文为准。

如何使用本页
本页是导览图，不能替代标准原文。标准化进展很快——Internet-Draft 会转为 RFC，草案会更新版本，日期也会变动。 请把每一条都当作指向权威文档的指针。

NIST 算法与迁移指南

NIST 是 PQC 核心算法标准与美国迁移指南的来源。

文档内容状态链接
FIPS 203ML-KEM——模格密钥封装正式版 2024-08csrc.nist.gov
FIPS 204ML-DSA——模格签名正式版 2024-08csrc.nist.gov
FIPS 205SLH-DSA——无状态哈希签名正式版 2024-08csrc.nist.gov
FIPS 206FN-DSA（Falcon）——紧凑格签名拟定中 / 审批中；公开 IPD 尚未发布；未成为最终 FIPS 标准。PQC 项目
SP 800-208有状态哈希签名（LMS/XMSS）正式版 2020-10csrc.nist.gov
SP 800-227密钥封装机制使用建议正式版 2025-09-18csrc.nist.gov
NIST IR 8547向 PQC 标准迁移；提出逐步弃用/禁用量子脆弱公钥算法的时间框架。公开征求意见草案 2024-11csrc.nist.gov
NIST IR 8545第四轮状态报告（HQC 入选）正式版 2025-03csrc.nist.gov
NIST IR 8528新增签名征集：第一轮状态报告 NIST IR 8528；第二轮 14 个候选；2026-05-14 已推进 9 个候选进入第三轮。正式版 2024csrc.nist.gov
SP 1800-38NCCoE 实践指南——迁移到 PQC初步草案nccoe.nist.gov

过程页面：NIST PQC 项目、 新增签名征集第二轮（14 个候选）， 以及 HQC 入选公告（2025-03）。

IETF 协议集成 RFC 与草案

IETF 定义 PQC 如何进入真实协议。多份 2025 年 RFC 已正式发布；TLS/SSH 的密钥交换仍处于草案阶段。

文档内容类型链接
RFC 9794后量子与传统混合方案术语RFC（信息类）rfc-editor
RFC 9881X.509 中 ML-DSA 算法标识RFC 2025rfc-editor
RFC 9909X.509 中 SLH-DSA 算法标识RFC 2025rfc-editor
RFC 9935X.509 中 ML-KEM 算法标识RFC 2025rfc-editor
RFC 9882 / 9814 / 9936CMS 中的 ML-DSA / SLH-DSA / ML-KEMRFC 20259882 · 9814 · 9936
RFC 9370 / 8784IKEv2 多重密钥交换 / 后量子预共享密钥RFC9370 · 8784
RFC 8391 / 8554XMSS / LMS-HSS 哈希签名RFC（信息类）8391 · 8554
RFC 9708 / 9802CMS 中 HSS-LMS / X.509 中 HSS-XMSSRFC9708 · 9802
RFC 9941SSH 混合密钥交换 sntrup761x25519-sha512RFC（信息类），2026-04rfc-editor
draft-ietf-tls-ecdhe-mlkemTLS 1.3 混合 X25519MLKEM768（码点 4588）Internet-Draftdatatracker
draft-ietf-tls-mldsaTLS 1.3 中 ML-DSA 认证Internet-Draftdatatracker
lamps-pq-composite-sigs / -kemX.509 复合 ML-DSA / ML-KEMInternet-Draftsigs · kem
sshm-mlkem-hybrid-kexSSH 中 ML-KEM 混合密钥交换（mlkem768x25519）Internet-Draftdatatracker
connolly-cfrg-xwing-kemX-Wing 通用混合 KEMInternet-Draft（CFRG）datatracker

ISO/IEC 与 ITU-T 国际标准

文档内容状态链接
ISO/IEC 14888-4:2024有状态哈希签名（XMSS/LMS 类）已发布 2024iso.org
ISO/IEC 14888-5 / -6格类 / 无状态哈希类签名制定中-5 · -6
ISO/IEC 18033-2 + FDAmd 2非对称加密 + PQC KEM 修订修订进行中iso.org
ISO/IEC 11770-3:2021密钥管理——非对称技术已发布 2021iso.org
ITU-T X.1710 / X.1713 / X.1714QKD 网络安全框架 / 节点保护 / 密钥组合现行itu.int
ITU-T X.1811IMT-2020（5G）系统中量子安全算法指南现行 2021-04itu.int

ETSI 迁移与混合指南

文档内容链接
ETSI TR 103 619向量子安全方案迁移的策略与建议（2020-07）etsi.org
ETSI TS 103 744量子安全混合密钥交换etsi.org
ETSI TR 103 949 / TR 103 966QSC 迁移（C-ITS 2023）/ 混合方案部署考量（2024）etsi.org
ETSI/IQC QSC 大会年度量子安全密码大会（2026 渥太华）etsi.org

各国与地区监管

机构文档与立场链接
NSA 美国CNSA 2.0——ML-KEM-1024、ML-DSA-87、LMS/XMSS；里程碑至 2030–2033（2025-05 更新）media.defense.gov
白宫 / OMB 美国NSM-10（2022-05）；OMB M-23-02 迁移备忘录（2022-11）M-23-02
CISA/NSA/NIST 美国量子就绪——迁移到 PQC 简报（2023-08）media.defense.gov
BSI 德国TR-02102-1——推荐 ML-KEM + FrodoKEM + Classic McEliece；优先混合（v2026-01）bsi.bund.de
ANSSI 法国PQC 立场（2022-01）与后续（2023 年 10 月 11 日）——分阶段优先混合cyber.gouv.fr
NCSC 英国PQC 迁移时间表——2028 / 2031 / 2035（2025-03）ncsc.gov.uk
EU / ENISA建议 (EU) 2024/1101 协调路线图；ENISA PQC 研究eur-lex

电信 3GPP 与 GSMA

文档内容链接
3GPP TR 33.8415G 256 位算法研究（对称，Rel-16）3gpp.org
3GPP TR 33.9383GPP 安全协议密码资产清查（Rel-19）——PQC 迁移基础3gpp.org
3GPP TS 33.5015G 安全架构——SUCI/ECIES（Shor 可攻破目标）3gpp.org
GSMA PQ.01 / PQ.02 / PQ.03PQTN 影响评估 / 量子风险管理 / 电信 PQC 指南（v2.0）gsma.com

中国商用密码

条目内容链接
GM/T 0003 / 0004 / 0002 / 0044 / 0001SM2 / SM3 / SM4 / SM9 / ZUC 国家标准GM-Standards
ISO/IEC 采纳SM2/SM9 入 14888-3，SM3 入 10118-3，SM4 入 18033-3，ZUC 入 18033-4iso.org
ICCS / 国家密码管理局新一代商用密码算法征集（2025-02）——要求抗经典与量子攻击oscca.gov.cn

实现与工具

  • Open Quantum Safe（OQS）——liboqs C 库、各语言封装与 OpenSSL 提供者。
  • PQClean——干净可移植的参考 C 实现。
  • oqs-provider——OpenSSL 3 的 PQC 提供者；OpenSSL 3.5+：原生支持 ML-KEM、ML-DSA、SLH-DSA；TLS 默认协商行为需以具体 OpenSSL 小版本与发行版配置为准。
  • NIST CAVP / ACVP——验证与测试向量。

浏览本站

标准规范 →

FIPS 203/204/205、SP 800-208/227、IR 8547。

国际与行业 →

IETF、ISO/IEC、ETSI、各国监管、电信。

算法对比 →

各方案尺寸与取舍一览。

迁移 →

密码敏捷性、混合、资产发现、实战手册。
引用前请核实
Internet-Draft 会更新版本并可能被 RFC 取代；草案 FIPS/IR 会被修订；各国指南的日期与里程碑也会更新。 在用于设计、审计或采购决策前，请点击链接查阅在线原文并确认当前状态。
⚑ Report an error⚑ 纠错与校正