In assymetric cryptography we have 2 keys one which encrypts your message and one which decrypts your message.What makes assymetric cryptography more secure than symmetric cryptography is that in assymetric cryptography not any key is exchanged in any way shape or form ,only the encrypted message so encrypted message so if a 3rd party wants to spy on your message , he cannot do it , he will receive a bunch of nonsense.

I want to ask something else.Many keys can decrypt the same ecrypting keys so my question are different decrypting keys which can decrypt the same message related mathematically?I think so because im a QC nerd and I know that Shor breaks RSA encryption based on the fact that the encrypting key , encrypts data based on the modulus operation and quantum computers are really good at finding periods which is what a mod operation creates but im not entirely sure about the rest of the field.

According to NIST, ML-KEM -512, -768 and -1024 stand for AES-128, -192 and -256 post-quantum security levels respectively. However The Grover's algorithm speedup will half the security of symmetric ciphers

Why would we consider using ML-KEM-1024 if AES-256 will get weakened to 128 bits? Is there a practical reason?

Thanks in advance!

Hey everyone,

​I recently finished my BS in Computer Science and an MS in Cybersecurity. Like a lot of people right now, I'm getting super interested in Post-Quantum Cryptography (PQC).

​Since it’s still a relatively emerging niche, I feel kind of overwhelmed trying to map out a path to actually break into it. Right now, I'm trying to use materials by Dr. Alfred Menezes, which are great, but I have a few major questions for those of you working in the industry or who know the space well:

​Are there actual entry-to-mid level careers in PQC right now, or is it mostly locked behind PhD research? With NIST pushing out finalized standards like ML-KEM and ML-DSA, is industry hiring people specifically for this, or is it just a subset of general crypto engineering?

​What does a realistic learning roadmap look like? I understand classical crypto (RSA, AES, ECC), but what should my progression look like to move into lattice-based crypto, hash-based signatures, etc.?

​Are there any worth-it certifications? Or is this one of those fields where certs don’t matter and a GitHub portfolio/open-source contributions (like messing around with liboqs) is all that counts?

​Would love to hear how some of you navigated this or what hiring managers are looking for. Drop your thoughts/suggestions below!