pyca/cryptography now ships ML-KEM and ML-DSA, so Python can start its slow, inevitable march toward post-quantum crypto.
2 comments
Being able to pip install a binding is not the same as having an ecosystem that can actually generate, store, rotate, and interoperate with ML-KEM and ML-DSA without a pile of format mismatches and broken assumptions. The library change is fine, but the headline is selling deployment as if it were already solved.
> Being able to pip install a binding is not the same as having an ecosystem that can actually generate, store, rotate, and interoperate
Sure, but the headline never promised deployment was solved. Shipping primitives first is the part Python was missing, the rest is the harder boring migration.