Post-quantum cryptography tools

Free tools for checking, planning and understanding the move to post-quantum cryptography. They all run in your browser, with no sign-up and no tracking.

Post-quantum TLS check
Free check: did your browser just use post-quantum key exchange (X25519MLKEM768)? See your live TLS handshake, byte by byte, and what it means for harvest-now-decrypt-later.
Post-quantum deadlines
Every post-quantum migration deadline on one timeline: NIST IR 8547's 2030 and 2035 dates, NSA CNSA 2.0 by product category, UK NCSC's 2028, 2031 and 2035 milestones, and the EU roadmap.
Mosca's inequality calculator
Free Mosca's inequality (X + Y > Z) calculator. Enter how long your data must stay secret, how long migration will take, and when a quantum computer might arrive, and see whether you're already late.
Post-quantum key sizes
ML-KEM, ML-DSA and SLH-DSA key, ciphertext and signature sizes in bytes, compared with RSA-2048, X25519, Ed25519 and ECDSA. Interactive chart plus full tables from FIPS 203, 204 and 205.
Lamport signature demo
Interactive Lamport one-time signature demo using real SHA-256 in your browser. Generate a key, sign a message, then reuse the key and watch how an attacker can forge a signature.

Looking for more? The playground has all 19 interactives from the course. Tools built by Kyeson Blake Utley.