POST-QUANTUM CRYPTOGRAPHY ENGINEERING

POST-QUANTUM CRYPTOGRAPHY ENGINEERING

Deploy Quantum-Resistant Encryption and Digital Signatures with ML-KEM, ML-DSA, SLH-DSA, OpenSSL 3.5, TLS 1.3, and Hybrid Cryptography

Build, Integrate, and Validate Quantum-Resistant Security with Real-World Tools and Hands-On Projects

The transition to post-quantum cryptography is changing how modern applications, digital signatures, and secure communications are designed. As organizations prepare for future quantum computing threats, security professionals need more than a theoretical understanding of cryptographic algorithms. They need the practical skills to implement, integrate, test, and maintain them.

Post-Quantum Cryptography Engineering is a comprehensive, hands-on guide to implementing NIST-standardized quantum-resistant cryptography using OpenSSL 3.5, Linux, Python, C, Docker, Nginx, and TLS 1.3.

Designed for security engineers, software developers, DevSecOps professionals, infrastructure administrators, and technical learners, this book transforms complex cryptographic concepts into clear, reproducible engineering workflows.

Rather than focusing on mathematical theory alone, it emphasizes practical implementation, working configurations, executable commands, troubleshooting, performance measurement, and security validation.

What You'll Learn

• Build a dedicated post-quantum cryptography laboratory: Install, configure, and isolate OpenSSL 3.5 with native ML-KEM, ML-DSA, and SLH-DSA support.
• Implement quantum-resistant key encapsulation: Generate ML-KEM-512, ML-KEM-768, and ML-KEM-1024 keys, establish shared secrets, and validate encapsulation and decapsulation.
• Develop secure file encryption applications: Combine ML-KEM, HKDF, and AES-256-GCM to protect sensitive data with authenticated encryption.
• Deploy post-quantum digital signatures: Implement ML-DSA and SLH-DSA signing, verification, software integrity checks, and automated release validation.
• Configure hybrid post-quantum TLS 1.3: Deploy X25519MLKEM768 with OpenSSL and Nginx, inspect TLS handshakes, validate certificates, and troubleshoot interoperability issues.
• Integrate cryptography into native applications: Develop C applications using OpenSSL EVP APIs and explore isolated liboqs implementations.
• Benchmark and harden cryptographic systems: Measure algorithm performance, CPU and memory usage, TLS handshake latency, and network overhead while automating security and failure testing.

Build a Complete Quantum-Resistant Secure Application

Whether you're modernizing your cryptographic development skills, exploring NIST's post-quantum standards, or preparing to implement quantum-resistant security in applications and infrastructure, this book provides a structured path from foundational setup to advanced integration.

Move beyond post-quantum cryptography theory. Learn to build, test, troubleshoot, and validate the technologies that will help secure the next generation of digital systems.