0xKaishakuninThe filesize of keys for #PQC will be larger than #ECC keys
This will hit protocols like #MLS or #Matrix, where every message needs a new key pair between every recipient
To get a feeling for the differences in filesize, I made a small benchmark with #OpenSSL 3.5 native PQC support.
ML-DSA-87 is even larger than a #RSA 8096 key and #ML-KEM 1024 is still larger than RSA 4096
The skript and the full results can be found in my blog at https://www.cryptomancer.de/posts/20250825-pqckeysize/#openssl-and-specs
Key sizes of post quantum cryptography keys with OpenSSL 3.5
OpenSSL and specs Since version 3.5, OpenSSL natively supports PQC keys and signatures. There is no need to use OQS-Provider as an provider to use PQC signatures and KEMs. However, as we already expected, the sizes of PQC KEMs should be larger than Ante Quantum Cryptography (AQC) keys. To get a benchmark of the sizes, I wrote a small shellskript to generate different key pairs with OpenSSL 3.5 and order them by size.
data0
Tao of Mac
LinuxNews.de
Doktor Overcomma 
Kevin Karhan 
日本語まあまあ
Habr