Post-quantum defaults

[Andrew Gallagher]

On 9 Apr 2026, at 21:54, Jakob Bohm via Gnupg-users <gnupg-users at gnupg.org> wrote:
> 
> The algorithm I suggested has 9 PUBLISHED RFCs, not just drafts, which
> simply omit descriptionsof how to integrate them in PGP.

The openpgp pqc draft does not specify algorithms, it references algorithms with published specs (ml-kem, ml-dsa and slh-dsa) and adds the critical “descriptions of how to integrate them in pgp”, including hybrid constructions where appropriate. It has multiple implementations fully interop tested and available as public betas. Other algorithms can be added in the future, but the current draft spec is ready to go *now*.

A