Skip to content

Commit 53a7858

Browse files
committed
improve wording on signature performance
Signed-off-by: Fabian Kammel <[email protected]>
1 parent 8d57b84 commit 53a7858

File tree

1 file changed

+5
-2
lines changed

1 file changed

+5
-2
lines changed

content/en/blog/2025/pqc-in-k8s/pqc-in-k8s.md

Lines changed: 5 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -160,8 +160,10 @@ Ed25519 or RSA. For instance, Dilithium2 keys can be 30 times larger than
160160
Ed25519 keys, and certificates can be 12 times larger.
161161

162162
**Performance**: Signing and verification operations [can be substantially slower].
163-
We are talking on the order of 10x to 1000x worse performance, compared to
164-
classical algorithms.
163+
While some algorithms are on par with classical algorithms, others may have a
164+
much higher overhead, sometimes on the order of 10x to 1000x worse performance.
165+
To improve this situation, NIST is running a
166+
[second round of standardization][NIST2ndRound] for PQC signatures.
165167

166168
**Toolchain Support**: Mainstream TLS libraries and CA software do not yet have
167169
mature, built-in support for these new signature algorithms. The Go team, for
@@ -201,3 +203,4 @@ platform.
201203
[Cloudflare\'s CIRCL]: https://github.com/cloudflare/circl
202204
[fork of Go (cfgo)]: https://github.com/cloudflare/go
203205
[PQC2024]: https://blog.cloudflare.com/pq-2024/
206+
[NIST2ndRound]: https://csrc.nist.gov/news/2024/pqc-digital-signature-second-round-announcement

0 commit comments

Comments
 (0)