item: AES-256-GCM authenticated encryption of data at rest.

category: symmetric

source: csoai-authored

note: post-quantum status of the cryptographic assumption; authored to keep continuity discriminating


item: Falcon lattice-based signatures.

category: lattice


item: FrodoKEM key encapsulation from plain LWE.


item: ECIES hybrid encryption whose key-encapsulation part is ECDH over P-256.

category: ecc


item: BIKE code-based key encapsulation.

category: code


item: DSA (Digital Signature Algorithm) with a 3072-bit modulus.

category: dsa


item: ChaCha20-Poly1305 AEAD for a transport channel.


item: AES-256-CTR for disk encryption.


item: RSA-OAEP used to wrap a symmetric content key.

category: rsa


item: ECDH key agreement over NIST P-384.


item: AES-256 key wrap (RFC 3394).


item: X25519 (Curve25519) Diffie-Hellman key exchange.


item: SHA-512/256 used as a content digest.

category: hash


item: A hybrid TLS handshake combining X25519 with ML-KEM-768, assessed for its post-quantum guarantee.

category: hybrid


item: Brainpool P-512 elliptic-curve signatures.


item: SHA3-512 used for a commitment.


item: Picnic signatures, built from symmetric primitives and zero-knowledge proofs.

category: other


item: XMSS stateful hash-based signatures (RFC 8391).


item: HMAC-SHA-256 message authentication.

category: mac


item: ML-KEM-512 key encapsulation.


item: SHA-256 used as a content hash.


item: BLAKE2b as a keyed hash.


item: NTRU lattice-based key encapsulation.


item: Classic McEliece code-based key encapsulation.


item: HQC code-based key encapsulation.


item: HKDF-SHA-256 deriving keys from a shared secret.

category: kdf


item: RSA-3072 PKCS#1 v1.5 signatures.


item: RSA-2048 used for TLS key transport.


item: LMS / HSS hash-based signatures (RFC 8554).


item: ML-DSA (Dilithium) signatures as standardised in FIPS 204.


item: AES-192-GCM authenticated encryption.


item: Schnorr signatures over a prime-order subgroup of a finite field.

category: dh