[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_28":-5,"_38":-5,"_39":40,"_41":42,"_43":44,"_45":46,"_47":48,"_49":50,"_51":52,"_53":54,"_55":56,"_57":58},"routes/_store+/_readers+/email_author.$slug/route",{"_9":10,"_11":-5},"book",{"_12":13,"_14":15,"_16":17,"_18":19,"_20":21,"_22":23},"currentUser","id","Z2lkOi8vbGVhbnB1Yi9TdG9yZTo6Qm9va1Byb2R1Y3QvODE4Mjk","title","Post-Quantum, Measured","state","published","contactAuthorMethod","email","aboutText","

The quantum threat isn't theoretical. It's logistical, and it has a deadline.

Somebody is recording encrypted traffic right now to read it later, once a quantum computer exists. NIST finalized the replacements in 2024. OpenSSL ships them today. NSA's first CNSA 2.0 deadline lands January 1, 2027, and the rest run through 2035.

The algorithms exist. The standards exist. Your tooling already has them. The only thing missing is the migration.

This book is the migration.

Measured, not estimated

Most post-quantum writing is either an academic paper or a vendor deck. This is neither. Every number in it was measured on one laptop running stock OpenSSL 3.5.5, and the captured output ships with the book.

Every claim carries a label. Verified means measured here, with the code and the output included. Reported means cited to a standard or a vendor document, not re-derived. Proposed means designed but not yet shipped. You always know what you are standing on.

What you will be able to do

- Explain why quantum breaks RSA, ECDSA, and ECDH, and why AES-256 survives, without hand-waving

- Turn on hybrid ML-KEM key exchange in TLS (it is one config line) and say exactly what it costs on the wire

- Build and operate a post-quantum PKI: certificate sizes, CA hierarchies, OCSP and CRL growth, and the enrollment protocols that break

- Migrate application-layer crypto by following a real migration shipped to a live zero-knowledge platform

- Put hard numbers on performance, read the compliance picture (CNSA 2.0, NIST IR 8547), and hand leadership a dated roadmap

The finding that surprises everyone: post-quantum key exchange is faster than the X25519 it replaces. 0.051ms against 0.078ms, measured. Migrating costs you bytes, not latency.

Who it is for

Security engineers, PKI practitioners, and developers who have to do this rather than publish a paper about it. Written from the practitioner's chair by someone who runs enterprise certificate lifecycle management for a living and shipped a hybrid post-quantum migration to production.

If PKI currently reads as alphabet soup, start with the fundamentals chapter. The rest reads like plain English.

What is included

236 pages. Twelve chapters, two production case studies, and four appendices including and a glossary. The runnable labs and the captured evidence live in a public companionrepository, MIT licensed.

The standards are still moving: one of this book's own citations became an RFC while I was finishing it.

","authors",[24],{"_12":25,"_26":27,"_28":29},"Z2lkOi8vbGVhbnB1Yi9TdG9yZTo6UHJvZHVjdEF1dGhvci84NzQ0Mw","name","Danny B. Carr, Jr.","user",{"_30":31},"avatar",{"_32":33,"_34":35,"_36":37},"url","https://d39qdlcrvnra4b.cloudfront.net/avatars/3754765/medium/avatar.jpg?1784935055","styleName","medium","exists",true,"shoppingCartId","shoppingCart",{"_12":71,"_72":73,"_74":37,"_75":76,"_77":78,"_79":80,"_81":37},"locale","en","readerTheme","light","constants",{"_69":70},"publishers",{"_65":66,"_67":68},"learnerOrganizations",[],"needsLocaleCookieSync",false,"announcements",{"_59":60,"_61":-5},"sentryEnvironment","production","sentryRelease","06fff6bf2a3f19ff2ef76f94f389bccdbec7f9bd","announcement_store",{"_62":52,"_63":64},"announcement_authors","flag","text","

Kick off your book project, get started with GhostAI, get better at marketing, or spend the day doing all three! Free live workshops on Zoom. Saturday, June 27, 2026.

\n","companies",[],"universities",[],"paypalClientId","AX53Cwz8jR6rVVzzZiZNWWXl0dGagi-GZrjG-S3Ua14E5nrKMn7DxDQ730O4R8LusLPp49ALn6aRVaEy","no-cart","count",0,"free","updatedAt","","paymentGateway","STRIPE","cartItems",[],"loading"]

Email the Author