PQC Research Reading List

The Definitive Guide to Post-Quantum Cryptography Literature

This curated reading list takes you from foundational understanding to research-frontier knowledge. Papers are organized by topic and difficulty, with annotations explaining why each is essential.

Part 1: Foundation Papers (Start Here)

1.1 The Original Threat

Shor's Algorithm - The Paper That Started It All

Link: https://arxiv.org/abs/quant-ph/9508027

Key Takeaway: Shor showed that quantum computers solve the discrete logarithm and integer factorization problems in polynomial time, breaking RSA, DSA, ECDSA, and Diffie-Hellman.

Grover's Algorithm

Link: https://arxiv.org/abs/quant-ph/9605043

Key Takeaway: Grover provides √N speedup for search, reducing AES-128 to 64-bit security. This is why AES-256 becomes the minimum for quantum resistance.

1.2 Lattice Cryptography Foundations

The LWE Problem - Foundation of Modern PQC

Link (Regev): https://dl.acm.org/doi/10.1145/1060590.1060603

Key Takeaway: Regev proved that solving LWE is as hard as solving worst-case lattice problems (GapSVP, SIVP). This gives lattice cryptography its security foundation.

Ring-LWE and Module-LWE

Link (LPR): https://eprint.iacr.org/2012/230

Key Takeaway: Ring-LWE and Module-LWE provide the efficiency needed for practical cryptography while maintaining provable security reductions.

Part 2: NIST Standards - The Source Documents

2.1 ML-KEM (CRYSTALS-Kyber)

Original Submission and Specification

Links:

• Specification: https://pq-crystals.org/kyber/
• FIPS 203: https://csrc.nist.gov/pubs/fips/203/final

Key Papers on Kyber Security:

2.2 ML-DSA (CRYSTALS-Dilithium)

Original Submission and Specification

Links:

• Specification: https://pq-crystals.org/dilithium/
• FIPS 204: https://csrc.nist.gov/pubs/fips/204/final

Key Papers on Dilithium Security:

2.3 SLH-DSA (SPHINCS+)

Original Submission and Specification

Links:

• Specification: https://sphincs.org/
• FIPS 205: https://csrc.nist.gov/pubs/fips/205/final

Foundational Hash-Based Signature Papers:

Part 3: Cryptanalysis Papers

3.1 Lattice Attacks

Classical Attacks on Lattices

Key Takeaway: LLL and BKZ are the foundation of lattice attacks. Understanding their complexity (exponential in dimension) is essential for parameter selection.

Quantum Attacks on Lattices

Key Takeaway: Quantum computers provide at most polynomial speedup for lattice problems, not the exponential speedup seen with factoring. This is why lattice cryptography is quantum-resistant.

3.2 Side-Channel Attacks

Timing and Power Analysis

PQC-Specific Side-Channel Papers:

3.3 Fault Attacks

Part 4: Implementation Security

4.1 Constant-Time Implementation

Key Resources:

4.2 Secure Random Number Generation

Part 5: Migration and Deployment

5.1 Hybrid Cryptography

Key Takeaway: Hybrid cryptography provides security if either classical OR post-quantum algorithm remains secure.

5.2 Protocol Integration

TLS and HTTPS:

SSH:

IKE/IPsec:

5.3 PKI and Certificates

Part 6: Advanced Topics

6.1 Isogeny-Based Cryptography (Research Area)

Note: SIKE was broken in 2022, but isogeny research continues.

6.2 Code-Based Cryptography

6.3 Multivariate Cryptography

Part 7: Textbooks and Surveys

Essential Textbooks

Survey Papers

Part 8: Reading Order Recommendations

For Security Practitioners (8-Week Plan)

Weeks 1-2: Foundations

1. Shor's Algorithm (1997 journal version) - Sections 1-3
2. Grover's Algorithm (1996)
3. Micciancio & Regev Survey (2009) - Sections 1-4

Weeks 3-4: NIST Standards

1. FIPS 203 (ML-KEM) - Full document
2. FIPS 204 (ML-DSA) - Full document
3. Kyber security paper (Kiltz et al., 2020)

Weeks 5-6: Implementation Security

1. Kocher timing attacks (1996)
2. Side-channel attacks on Kyber (D'Anvers, 2020)
3. Constant-time implementation guide (BearSSL)

Weeks 7-8: Migration

1. Hybrid key exchange (Bindel, 2019)
2. Post-quantum TLS benchmarks (Paquin, 2020)
3. NIST Third Round Status Report (2022)

For Researchers (16-Week Plan)

Weeks 1-4: Mathematical Foundations

1. Regev LWE paper (2005) - Complete with proofs
2. LPR Ring-LWE paper (2010)
3. LLL Algorithm original paper (1982)
4. BKZ algorithm (Schnorr-Euchner, 1994)

Weeks 5-8: Algorithm Deep Dives

1. Kyber specification (complete)
2. Dilithium specification (complete)
3. SPHINCS+ specification (complete)
4. Security proofs for each

Weeks 9-12: Cryptanalysis

1. Lattice sieving (Ducas, 2019)
2. LWE estimator methodology (Albrecht, 2015)
3. Quantum lattice algorithms (Laarhoven, 2016)
4. Side-channel attack papers

Weeks 13-16: Frontiers

1. Alternative candidates (McEliece, BIKE, HQC)
2. Isogeny cryptanalysis (SIDH break)
3. Protocol integration (TLS, SSH, IKE)
4. Recent IACR ePrint submissions

Part 9: Key Conferences and Journals

Top Venues for PQC Research

Key Journals

Preprint Server

Part 10: Tools and Code References

Reference Implementations

Security Analysis Tools

Verification Tools

Appendix: Quick Reference Links

Official Standards

• FIPS 203: https://csrc.nist.gov/pubs/fips/203/final
• FIPS 204: https://csrc.nist.gov/pubs/fips/204/final
• FIPS 205: https://csrc.nist.gov/pubs/fips/205/final

NIST PQC Project

• Main page: https://csrc.nist.gov/projects/post-quantum-cryptography
• Call for additional signatures: https://csrc.nist.gov/projects/pqc-dig-sig

Algorithm Specifications

• Kyber: https://pq-crystals.org/kyber/
• Dilithium: https://pq-crystals.org/dilithium/
• SPHINCS+: https://sphincs.org/

Open Quantum Safe

• Main: https://openquantumsafe.org/
• liboqs: https://github.com/open-quantum-safe/liboqs
• OQS-Provider (OpenSSL): https://github.com/open-quantum-safe/oqs-provider

How to Use This Reading List

1. Start with your level - Practitioners start with Part 1 and 2, researchers go deeper
2. Follow the reading order - The 8-week and 16-week plans are designed for progressive learning
3. Don't skip the surveys - Micciancio-Regev (2009) and NIST status reports provide essential context
4. Check ePrint weekly - New attacks and improvements appear regularly
5. Join the community - Follow discussions at pqc-forum mailing list

Estimated reading time for full SME competency: 200-300 hours over 6-12 months

This reading list, combined with hands-on implementation experience, will give you the theoretical foundation needed for world-class PQC expertise.