File tree Expand file tree Collapse file tree 1 file changed +5
-2
lines changed
content/en/blog/2025/pqc-in-k8s Expand file tree Collapse file tree 1 file changed +5
-2
lines changed Original file line number Diff line number Diff line change @@ -160,8 +160,10 @@ Ed25519 or RSA. For instance, Dilithium2 keys can be 30 times larger than
160160Ed25519 keys, and certificates can be 12 times larger.
161161
162162** Performance** : Signing and verification operations [ can be substantially slower] .
163- We are talking on the order of 10x to 1000x worse performance, compared to
164- classical algorithms.
163+ While some algorithms are on par with classical algorithms, others may have a
164+ much higher overhead, sometimes on the order of 10x to 1000x worse performance.
165+ To improve this situation, NIST is running a
166+ [ second round of standardization] [ NIST2ndRound ] for PQC signatures.
165167
166168** Toolchain Support** : Mainstream TLS libraries and CA software do not yet have
167169mature, built-in support for these new signature algorithms. The Go team, for
@@ -201,3 +203,4 @@ platform.
201203[ Cloudflare\' s CIRCL ] : https://github.com/cloudflare/circl
202204[ fork of Go (cfgo) ] : https://github.com/cloudflare/go
203205[ PQC2024 ] : https://blog.cloudflare.com/pq-2024/
206+ [ NIST2ndRound ] : https://csrc.nist.gov/news/2024/pqc-digital-signature-second-round-announcement
You can’t perform that action at this time.
0 commit comments