# Post-quantum cryptography

> Browser-only demos for NIST-standardized post-quantum cryptography (PQC) algorithms.

- Source: https://stevenfoerster.com/lab/pqc/

Lab

Browser-only demos for NIST-standardized post-quantum cryptography (PQC) algorithms.

Educational demo - don't copy/paste into production

All cryptography runs locally in your browser. Keys and plaintext never leave your device, but this is still a simplified demo.

- [Lattices](https://stevenfoerster.com/lab/pqc/lattices/)
- [LWE](https://stevenfoerster.com/lab/pqc/lwe/)
- [ML-KEM](https://stevenfoerster.com/lab/pqc/ml-kem/)
- [ML-DSA](https://stevenfoerster.com/lab/pqc/ml-dsa/)
- [SLH-DSA](https://stevenfoerster.com/lab/pqc/slh-dsa/)
- [Learn](https://stevenfoerster.com/lab/pqc/learn/)
- [Migration](https://stevenfoerster.com/lab/pqc/migration/)

What this is

A set of post-quantum cryptography (PQC) demos aligned with NIST standards. All cryptography runs locally so you can explore key encapsulation and signatures without sending data anywhere.

Who it's for

-   Security teams evaluating PQC readiness.
-   Platform engineers planning migration timelines.
-   Builders learning modern public-key primitives.

## NIST standardized algorithms

These tools cover ML-KEM (formerly CRYSTALS-Kyber), ML-DSA (formerly CRYSTALS-Dilithium), and SLH-DSA (formerly SPHINCS+). All demos run locally in your browser.

-   ML-KEM (FIPS 203) is a key encapsulation mechanism, not direct encryption.
-   ML-DSA (FIPS 204) and SLH-DSA (FIPS 205) are digital signature schemes.

Lattices

### [The hard problems, visualized](https://stevenfoerster.com/lab/pqc/lattices/)

Drag a 2D lattice to see the shortest and closest vector problems, basis reduction, and the GGH trapdoor that ML-KEM and ML-DSA are built on.

LWE

### [Learning With Errors](https://stevenfoerster.com/lab/pqc/lwe/)

See why a tiny error turns an easy linear system into the hard problem that ML-KEM and ML-DSA actually rest on.

ML-KEM

### [Key encapsulation + AES-GCM](https://stevenfoerster.com/lab/pqc/ml-kem/)

Generate keys, encapsulate a shared secret, and encrypt a short message with AES-GCM.

ML-DSA

### [Lattice-based signatures](https://stevenfoerster.com/lab/pqc/ml-dsa/)

Sign a message, verify it, and watch verification fail after tampering.

SLH-DSA

### [Hash-based signatures](https://stevenfoerster.com/lab/pqc/slh-dsa/)

Explore larger signatures and slower signing with SPHINCS+ variants.

Learn

### [Plain-language notes](https://stevenfoerster.com/lab/pqc/learn/)

Understand the naming, tradeoffs, and privacy promises behind the demos.

Migration

### [Operational guidance](https://stevenfoerster.com/lab/pqc/migration/)

What PQC adoption means for protocols like HTTPS, SSH, and SMTPS.