NIST FIPS 203/204/205 — First Finalized Post-Quantum Cryptography Standards (ML-KEM, ML-DSA, SLH-DSA)

A dated reading of what is claimed, reported, and independently verified in the current evidence.

Current reading

Readiness band and full integer triple

AI-assisted assembly · derived results

Readiness band

Mature

Primary summary from verified readiness

Evidence strength Strong

Decision

Human editorial judgment · 2026-07-23

Adopt with guardrails

Why: This is the load-bearing, NIST-finalized (Aug 13, 2024) foundation every downstream PQC entry already in the register (FIPS 206/207, NIST HQC, X-Wing, MAYO, SQIsign) builds on, and it is already load-bearing for Pragma.Vision's own Rule #2 hybrid signature requirement. Real-world production deployment (Chrome, Cloudflare, Apple iMessage, Signal, OpenSSH) proves the standards are genuinely deployable, but partial ecosystem coverage and a live errata mean guardrailed hybrid adoption, not a blind cutover.
Next: Verify Rule #2's ML-DSA-65 hybrid signature mandate is implemented against the final FIPS 204 text (not a pre-standard Dilithium draft), and track hybrid X25519+ML-KEM rollout for any TLS termination Pragma.Vision controls directly, testing for the packet-size/compat breakage class Cloudflare documented.

Constraints

No named blocker is present in the current public projection.

Evidence summary

AI-assisted assembly

Counts and dates only. Raw signals, private excerpts, trust records, and internal corpus material are not published here.

Publication record

Initial public reading