A 30-hour course companion covering syllabus topics 9–11: NP-hard problems in cryptography, the five post-quantum families (lattice, code, hash, multivariate, isogeny), the NIST PQC standards, and deployment in real protocols.
Three new chapters (PQC landscape & knapsacks; hash-based signatures; NTRU, multivariate, isogeny) plus reading guides for the six chapters reused from the upstream cryptanalysis course.
Open the Leitfaden →Reveal.js decks for each Tuesday: definitions, theorems, attacks, and discussion prompts. New decks for W1, W6, W7; reused upstream deck for the lattice / code / standards weeks.
Browse the slides →In-browser explorers for the algorithms we cover: Merkle–Hellman knapsack with LLL break, Lamport & Merkle hash signatures, toy NTRU, lattice basis reduction, and a live PQC parameter dashboard.
Try the applets →Each Tuesday is a 90-minute lecture (10:00–11:30) followed by a 90-minute lab (11:45–13:15). The reading list maps onto our local chapters and the upstream cryptanalysis-course chapters in equal measure.
The five families, NIST history, Merkle–Hellman warm-up.
SVP/CVP, Babai, LLL, breaking the W1 knapsack.
Module-LWE, NTT, ML-KEM (FIPS 203).
Dilithium, Falcon; primal/dual, BKZ cost models.
McEliece, Goppa, Patterson, Prange / Stern / BJMM, BIKE, HQC.
Lamport → WOTS+ → Merkle → XMSS → SLH-DSA.
NTRU; Beullens-Rainbow; Castryck–Decru-SIDH.
FIPS 203/204/205, HQC, hybrid TLS, project demos.
