Standards-aligned whitepapers, reference architectures, and the OWASP-adopted cost calculator — written by the people who shipped four of the seven algorithms NIST selected. No gated PDFs, no marketing collateral. Every artifact here is something a cryptographer on your team can hand to legal, an auditor, or a board.
[+] ClientHello: groups=x25519,ml-kem-768
[+] ServerKeyShare: ml-kem-768 (encapsulated_key=1184B)
[+] KEM shared secret derived: 7c2f...a91d
[+] Hybrid suite: TLS_AES_256_GCM_SHA384 + ML-KEM-768
[+] Cert chain: leaf=ML-DSA-87 / root=ECDSA-P384
[+] Handshake complete in 1.84 ms (median, 84 Gbps line rate)
[*] QUANTUM-VULNERABLE PRIMITIVES REMAINING: 0Practitioner-grade tooling, free to run, no Q6of account required. Each artifact below is used in production by the 312 enterprises on the Q6of platform and referenced by external standards bodies.
Inputs your estate size, certificate count, RSA/ECC footprint, and HSM inventory — outputs a per-line-item migration budget, a quarter-by-quarter labor forecast, and a harvest-now-decrypt-later exposure window. Adopted by OWASP as the reference cost model for PQC readiness reporting.
A line-by-line translation of NIST SP 800-131A Rev.2 into a sprint-by-sprint migration backlog. Includes the deprecated-primitive red-list, the approved-substitution table, and a sample RACI matrix for security, platform, and application teams.
How NSA's Commercial National Security Algorithm Suite 2.0 maps to Q6of's Crypto Agility Mesh, with a side-by-side of software-only, software-HSM, and hardware-HSM deployment topologies — and the exact TLS, SSH, and code-signing configurations each profile requires.
Quantifies the 5–30 year confidentiality decay of currently-captured RSA-encrypted traffic and translates it into a board-ready risk register line item.
Inventory scope, RACI, dual-control ceremony design, and the zero-downtime cutover plan for 41,000 internal TLS endpoints and 3 issuer CA hierarchies.
Reference deployment covering 47 language ecosystems and 1,200+ library fingerprints, with sample SARIF, SPDX, and CycloneDX outputs and a 6-minute-per-repo benchmark.
A practical reading of the FIPS 140-3 boundary, the role of the cryptographic module in a crypto-agility mesh, and the audit-evidence checklist a Q6of customer uses.
38 more artifacts in the catalog — including 11 whitepapers, 8 case studies, and 6 open-source tools.
Request the Full IndexThe Q6of migration cost calculator is the only open-source model we forward to member organizations evaluating PQC readiness. It correctly separates the discovery, key-material issuance, and cutover phases — which is the part every vendor-side estimate gets wrong.
Self-serve research is the right place to start — but every quarter a hybrid ML-KEM / ML-DSA rollout is deferred, your harvest-now-decrypt-later exposure window widens. A 30-minute scoped audit with a Q6of solutions engineer converts what's above into a concrete, dated migration backlog for your team.