NIST PQC Standards Update: On-Ramp Signatures and Global Roadmaps | RWPQC 2026, Session 5

This session provides an essential update on the formal standardization of Post-Quantum Cryptography (PQC) and the scientific progress in breaking these new algorithms. Leading experts from NIST, BSI, and academia discuss the timelines for transition and the reality of lattice-based security. In this session: -Dustin Moody (NIST): Provides the definitive status on FIPS 203, 204, and 205. He addresses the delay in the Falcon (ML-DSA) draft, the progress of the "On-Ramp" signature competition, and the upcoming HQCs draft for a non-lattice KEM backup. -Johannes Mittmann & Stavros Kousidis (BSI): Introduce the EU PQC Roadmap and the German BSI's specific recommendations, including the phase-out of RSA by 2031 and the move toward hybrid-safe protocols. -Jintai Ding: Delivers a technical deep dive into lattice cryptanalysis. He reveals how his team solved the SVP 210 challenge using layered bucket sieving and provides an inside look at the new Chinese PQC competition (ICS) and its parallel deployment strategy. Key topics you'll hear about: the 2035 "Disallowance" date for classical crypto, the shift toward MPC-in-the-head signatures, and the practical security margins of ML-KEM 512. Chapters: 00:00 - Introduction to Session 5 00:23 - Dustin Moody (NIST): FIPS Standard Progress & Falcon Delays 03:00 - HQC: The Non-Lattice Backup KEM 05:22 - The "On-Ramp" Signature Competition: Round 2 & 3 Status 10:50 - NIST 2035 Timeline: Deprecation vs. Disallowance 13:13 - NIST Guidance on Hybrid Implementations (SP 800-56C) 21:26 - Updates on Stateful Hash-Based Signatures (LMS/XMSS) 28:50 - BSI (Germany): The European PQC Implementation Roadmap 31:00 - Risk-Based Migration: High, Medium, and Low Priority 37:10 - BSI Deadlines: Phasing out RSA and TLS 1.2 by 2031 44:00 - BSI Recommendations: Why McEliece and FrodoKEM are "Conservative" 51:18 - Q&A: Scientific Validation of RSA 3072 Security 59:23 - Jintai Ding: State of Classical Lattice Cryptanalysis 01:05:00 - Explaining the Shortest Vector Problem (SVP) 01:07:30 - Sieving vs. Enumeration: Why Memory is the New Bottleneck 01:13:00 - Layered Bucket Sieving: Solving SVP 210 01:18:19 - Inside the Chinese PQC Competition (ICS) 01:22:14 - Parallel Implementation: China's 2035 Migration Goal #sandboxaq