Principles of Post-Quantum Cryptography

The Engineer's and Scientist's Guide to Implementing, Hardening, and Verifying Quantum-Resistant Cryptography

By: C Louis-Charles

Narrated by: Virtual Voice

The quantum computer that breaks RSA-2048 does not need to exist today. Nation-state adversaries are collecting encrypted traffic right now under a simple premise: when capable hardware arrives, the intercepted ciphertext comes with it. Harvest-now-decrypt-later is not a future risk. It is an operational reality on networks you already run. The FIPS 203, 204, 205, and 206 standards provide mathematically sound algorithms. They do not provide safe implementations. A data-dependent branch in a rejection-sampling loop becomes a timing oracle. An unmasked ML-KEM decapsulation routine surrendered its full secret key to forty electromagnetic traces in published research. A stateful signing key reused once produces an unforgeable forgery. The mathematics is correct. The engineering is where migrations fail.


Inside this book, readers will learn how to:

• Implement ML-KEM from polynomial ring arithmetic through decapsulation, with constant-time verification at the assembly level
• Apply first-order masking and hiding countermeasures to defeat power and electromagnetic side-channel attacks
• Engineer fault-tolerant signing pipelines with redundancy checks and nonce-integrity verification against glitch and laser fault injection
• Deploy hybrid TLS 1.3 with correct downgrade protection, middlebox compatibility, and interoperability validation
• Accelerate NTT-based polynomial arithmetic with SIMD intrinsics (AVX2, NEON) while preserving constant-time guarantees
• Integrate post-quantum primitives into HSMs and FPGAs under FIPS 140-3 boundary constraints with certified key storage and zeroization
• Migrate PKI infrastructure with composite certificates and dual-algorithm trust chains verifiable by both classical and post-quantum relying parties
• Evaluate lattice parameter security using BKZ cost models and core-SVP methodology, reproducing NIST security level estimates

This volume is the complete implementation engineering reference for the post-quantum transition. It develops ML-KEM (FIPS 203), ML-DSA (FIPS 204), SLH-DSA (FIPS 205), FN-DSA (FIPS 206), HQC, and code-based KEMs at the level of their internal arithmetic, with the parameter rationale, wire-format details, and the implementation hazards that test vectors do not expose. Mathematical foundations, including Module-LWE, Ring-LWE, NTT arithmetic, BKZ reduction, and core-SVP security estimation, are developed as working knowledge. Protocol coverage spans hybrid TLS 1.3, IKEv2, SSH, MLS, and the Signal protocol. PKI migration is addressed through composite X.509 certificates and hybrid trust chains. A frontier chapter covers threshold signatures, post-quantum zero-knowledge proofs, and lattice-based FHE for teams tracking the next generation of standards.

The gap between a scheme that passes its test vectors and one that holds under physical attack and production load is precisely the distance this book covers. Every engineer shipping cryptographic code in the next five years is either building with this material or building without it.