The Leanpub 60 Day 100% Happiness Guarantee
Within 60 days of purchase you can get a 100% refund on any Leanpub purchase, in two clicks.
See full terms...
Post-Quantum, Measured
Migrating TLS, PKI, and application crypto with evidence you can reproduce
This book is 100% completeLast updated on 2026-07-26
Adversaries are recording encrypted traffic today to read it once a quantum computer arrives. NIST published the replacements in 2024, and OpenSSL ships them now. This is the migration: measured on one laptop with stock OpenSSL 3.5.5, with every claim labeled verified, reported, or proposed.
Minimum price
$29.00
$39.00
You pay
Author earns
Buying multiple copies for your team? See below for a discount!
PDF
EPUB
About
About the Book
The quantum threat isn't theoretical. It's logistical, and it has a deadline.
Somebody is recording encrypted traffic right now to read it later, once a quantum computer exists. NIST finalized the replacements in 2024. OpenSSL ships them today. NSA's first CNSA 2.0 deadline lands January 1, 2027, and the rest run through 2035.
The algorithms exist. The standards exist. Your tooling already has them. The only thing missing is the migration.
This book is the migration.
Measured, not estimated
Most post-quantum writing is either an academic paper or a vendor deck. This is neither. Every number in it was measured on one laptop running stock OpenSSL 3.5.5, and the captured output ships with the book.
Every claim carries a label. Verified means measured here, with the code and the output included. Reported means cited to a standard or a vendor document, not re-derived. Proposed means designed but not yet shipped. You always know what you are standing on.
What you will be able to do
- Explain why quantum breaks RSA, ECDSA, and ECDH, and why AES-256 survives, without hand-waving
- Turn on hybrid ML-KEM key exchange in TLS (it is one config line) and say exactly what it costs on the wire
- Build and operate a post-quantum PKI: certificate sizes, CA hierarchies, OCSP and CRL growth, and the enrollment protocols that break
- Migrate application-layer crypto by following a real migration shipped to a live zero-knowledge platform
- Put hard numbers on performance, read the compliance picture (CNSA 2.0, NIST IR 8547), and hand leadership a dated roadmap
The finding that surprises everyone: post-quantum key exchange is faster than the X25519 it replaces. 0.051ms against 0.078ms, measured. Migrating costs you bytes, not latency.
Who it is for
Security engineers, PKI practitioners, and developers who have to do this rather than publish a paper about it. Written from the practitioner's chair by someone who runs enterprise certificate lifecycle management for a living and shipped a hybrid post-quantum migration to production.
If PKI currently reads as alphabet soup, start with the fundamentals chapter. The rest reads like plain English.
What is included
236 pages. Twelve chapters, two production case studies, and four appendices including and a glossary. The runnable labs and the captured evidence live in a public companionrepository, MIT licensed.
The standards are still moving: one of this book's own citations became an RFC while I was finishing it.
Feedback
Team Discounts
Team Discounts
Get a team discount on this book!
Up to 3 members
- Minimum price
- $69.00
- Suggested price
- $95.00
Up to 5 members
- Minimum price
- $105
- Suggested price
- $145
Up to 10 members
- Minimum price
- $190
- Suggested price
- $260
Up to 25 members
- Minimum price
- $425
- Suggested price
- $575
Up to 50 members
- Minimum price
- $750
- Suggested price
- $1000
Author
About the Author
Danny B. Carr, Jr.
Danny B. Carr, Jr. is the founder of Carr Digital LLC, where he builds and operates Etergis, a zero-knowledge digital continuity platform. The production case studies in this book, including the Envelope v3 post-quantum migration, are drawn from that platform’s real, shipped, and verified code. They are not a simulation built for the book.
He works in enterprise security engineering, with a focus on public key infrastructure and multi-factor authentication: issuing, monitoring, renewing, and revoking certificates, and automating the resulting toil in PowerShell and Python. Keeping a trust chain unbroken and an audit log legible is the practitioner’s-eye view this book is written from.
Before he specialized in PKI he taught cybersecurity bootcamps covering ethical hacking, network security, and vulnerability assessment. Before that he spent two decades in law enforcement and public safety. He holds the CompTIA Security+, CySA+, and CASP+ certifications and is working toward the CISSP.
Get the free sample chapters
Click the buttons to get the free sample in PDF or EPUB, or read the sample online here
Earn $8 on a $10 Purchase, and $16 on a $20 Purchase
We pay 80% royalties on purchases of $7.99 or more, and 80% royalties minus a 50 cent flat fee on purchases between $0.99 and $7.98. You earn $8 on a $10 sale, and $16 on a $20 sale. So, if we sell 5000 non-refunded copies of your book for $20, you'll earn $80,000.
(Yes, some authors have already earned much more than that on Leanpub.)
In fact, authors have earned over $15 million writing, publishing and selling on Leanpub.
Learn more about writing on Leanpub
Free Updates. DRM Free.
If you buy a Leanpub book, you get free updates for as long as the author updates the book! Many authors use Leanpub to publish their books in-progress, while they are writing them. All readers get free updates, regardless of when they bought the book or how much they paid (including free).
Most Leanpub books are available in PDF (for computers) and EPUB (for phones, tablets and Kindle). The formats that a book includes are shown at the top right corner of this page.
Finally, Leanpub books don't have any DRM copy-protection nonsense, so you can easily read them on any supported device.
Learn more about Leanpub's ebook formats and where to read them
Write and Publish on Leanpub
You can use Leanpub to easily write, publish and sell in-progress and completed ebooks and online courses!
Leanpub is a powerful platform for serious authors, combining a simple, elegant writing and publishing workflow with a store focused on selling in-progress ebooks.
Leanpub is a magical typewriter for authors: just write in plain text, and to publish your ebook, just click a button. (Or, if you are producing your ebook your own way, you can even upload your own PDF and/or EPUB files and then publish with one click!) It really is that easy.