https://qdaycheck.com/ Filter verified post-quantum TLS 1.3 engineering guides and dated standards advisories across NIST FIPS 203-205, OpenSSL 3.5+, OpenSSH 9.9+, and CycloneDX v1.6 CBOM workflows. en-au Fri, 06 Nov 2026 00:00:00 GMT https://qdaycheck.com/updates/#pqc-2026-edge-adoption https://qdaycheck.com/updates/#pqc-2026-edge-adoption Fri, 06 Nov 2026 00:00:00 GMT Wire-level TLS 1.3 ServerHello verification across reference developer and standards origins shows hybrid X25519MLKEM768 (0x11EC, 1,120-byte server share) active on CDN-fronted endpoints while several major code hosts remain on classical 32-byte X25519. Actionable takeaway: Test both CDN edge hostnames and direct origin load balancers separately; CDN edge termination does not automatically protect origin-to-origin mTLS. (Source: IETF Hybrid Key Exchange in TLS 1.3 Specification) TLS-1.3 IANA-0x11EC https://qdaycheck.com/updates/#upstream-openssl-4-1-0 https://qdaycheck.com/updates/#upstream-openssl-4-1-0 Fri, 23 Oct 2026 00:00:00 GMT OpenSSL 4.1.0 is a feature release adding significant new functionality to OpenSSL. This release incorporates the following potentially significant or incompatible changes: Added VC-WIN32-MSVC2013 and VC-WIN64A-MSVC2013 build targets to... Actionable takeaway: Review OpenSSL changelog notes for TLS 1.3 ML-KEM / ML-DSA provider updates across ingress containers. (Source: OpenSSL Project Releases) OpenSSL TLS-1.3 https://qdaycheck.com/updates/#openssl-35-native-mlkem https://qdaycheck.com/updates/#openssl-35-native-mlkem Tue, 08 Apr 2025 00:00:00 GMT OpenSSL 3.5 integrated native FIPS 203, FIPS 204, and FIPS 205 implementations and enabled hybrid X25519MLKEM768 negotiation directly in libssl group configuration lists. Actionable takeaway: Prioritise OpenSSL 3.5+ base images in container and reverse-proxy build pipelines to retire legacy oqs-provider forks. (Source: OpenSSL Release Advisories) OpenSSL FIPS-203 ML-KEM https://qdaycheck.com/updates/#nist-ir-8547-timeline https://qdaycheck.com/updates/#nist-ir-8547-timeline Tue, 12 Nov 2024 00:00:00 GMT NIST Initial Public Draft IR 8547 set a concrete 2030 deprecation milestone and 2035 disallowance milestone for quantum-vulnerable RSA, ECDSA, EdDSA, and classical ECDH. Actionable takeaway: Align multi-year PKI root rotation and hardware HSM procurement cycles to complete classical deprecation ahead of 2030. (Source: NIST IR 8547 Publication) Standards Mosca-Horizon FIPS-203 https://qdaycheck.com/updates/#openssh-99-hybrid-kex https://qdaycheck.com/updates/#openssh-99-hybrid-kex Thu, 19 Sep 2024 00:00:00 GMT OpenSSH 9.9 promoted FIPS 203 ML-KEM-768 paired with X25519 ahead of Streamlined NTRU Prime for administrative SSH transport. Actionable takeaway: Pin KexAlgorithms mlkem768x25519-sha256 in /etc/ssh/sshd_config across bastion and jump hosts. (Source: OpenSSH 9.9 Release Notes) OpenSSH ML-KEM