First mainnet PQ transaction, allegedly, with ML-DSA/ML-KEM details and the hash, because claims need receipts.

Bernstein reopens the usual ML-KEM risk story, pointing out that 'module lattice' and asymptotics are doing a lot of hand-waving.

First-order masking still folds to second-order CPA on masked Kyber768 on Cortex-M4, with leakage models and SNR plots.

OpenVPN 2.7+ with OpenSSL 3.5+ gets hybrid PQ TLS, ML-DSA auth, and a Windows client, because SSH tunneling was the problem.

Repo for a PQ-hybrid client-side crypto library, with a self-describing, cipher-suite-agile v1 format and legacy v0 decrypts.

PR adds fully masked ML-KEM decaps/keygen plus masking gadgets for Pavona's crypto coprocessor, with the usual register fuss.

ePrint on faulting the forward NTT in ML-KEM/ML-DSA, with exact rank/kernel leakage bounds and a Lean 4 proof.