Support for fips-enabled quantum cryptography

[quantumshiro]

How far do you intend to go with quantum resistant cryptography, which has already been published as a few fips?

[alexrp]

cc @jedisct1

[jedisct1]

Zig includes ML-KEM directly in the standard library and was the first programming language to do so. It's also supported and enabled by default in TLS. While it's not FIPS-certified yet, Classic McEliece is being explored and might be added in the future.

As for signature schemes, there's really no need to rush. The current landscape is far from ideal. NIST is still actively reviewing additional candidates, and meanwhile, ongoing research is already making some of those obsolete. For example, the constant improvements to SQISign might eventually result in something practical and widely adopted.

For now, it's great to experiment and implement new schemes outside the standard library. But when it comes to what should be included in the standard library, it probably makes sense to wait a bit longer.

Just a quick reminder: this is the issue tracker, which is meant for reporting bugs, so it's not the best place for broader discussions.