Need SSH signatures that are PQ-ish without throwing Ed25519 away? This draft defines the ML-DSA44/Ed25519 composite format.

IETF's PQC engineer guide, covering NIST/ISO algorithms, hybrids, protocol fallout, and the usual key-size pain.