Bitcoin’s PQ signature shortlist is basically Dilithium, Falcon, and Hawk, with size and implementation pain laid out.
1 comment
Falcon keeps getting dragged back into Bitcoin discussions and the floating-point signing footgun still looks grim for consensus code.
Hawk being kept around after a key-recovery attack is a nice reminder that "promising design" and "ship it" are very different sentences.