PQCrypto Usage & Deployment

Here's a list of software that incorporate PQCrypto (post-quantum cryptography), that is, cryptography resistant to attack from quantum computers.
Note on QKD: Quantum Key Distribution, an unrelated technology, is probably snake oil. It will not be discussed here.

Background information

• PQCRYPTO Project
• pqcrypto.org
• Post-quantum cryptography on wikipedia
• PQCHacks: A gentle introduction to post-quantum cryptography
• Initial recommendations of long-term secure post-quantum systems

Symmetric / secret-key cryptography

Grover's algorithm will reduce symmetric cipher security by a square root. So against a quantum computer running Grover's algorithm, AES-256 will provide a comfortable security level of 2^128. However, AES-128 will only provide a security level of 2^64, which will render it broken. (Keep in mind that attackers are storing ciphertext now for later analysis.) The following ciphers are recommended for long term security against quantum cryptanalysis:

• AES-256 (Vincent Rijmen, Joan Daemen)
• Salsa20 with 256-bit keys (Daniel J. Bernstein)

Public-key cryptography

• McBits — fast constant-time code-based cryptography (Daniel J. Bernstein, Tung Chou, Peter Schwabe)
• McBits — The first version for the "new" McBits software
• mcbitsarm — MCBits on STM32f407 

from https://ianix.com/pqcrypto/pqcrypto-deployment.html

https://pqcrypto.org/
https://pqcrypto.eu.org/