The Book
Post-Quantum Cryptography for Enterprise IT
A Practitioner's Guide to ML-KEM, ML-DSA, and SLH-DSA in Production.
John R. Schultz · First edition, 2026 · 21 chapters, 4 appendices, about 70,000 words.
The purpose of the book is to give information technology professionals a tested, reproducible path to deploying post-quantum cryptography in enterprise systems. The difficulty it addresses is specific: the transition to quantum-resistant algorithms invalidates a large body of operational intuition accumulated over twenty years of classical public-key cryptography, and the places where that intuition fails are exactly the places where production breaks silently.
The book keeps one rule — no claim without its experiment. Every assertion is accompanied by the command that demonstrates it and the output the command produced, and every experiment is reproducible from the companion apparatus. Where an experiment failed, the failure is retained in the text, including the cases where the author's own instructions were wrong.
Availability. Forthcoming on Amazon in paperback and Kindle. To be told when it is live, write to the author.
Contents
Part I — Foundations and the OpenSSL toolbox. 1 New Physics, Old Terminals · 2 The Three Standards · 3 Cryptographic Inventory and the Bill of Materials · 4 Building a Private Post-Quantum CA · 5 Testing Services with s_client · 6 Testing Cipher Suite Support · 7 Testing Session Reuse · 8 Testing Renegotiation · 9 Certificate Revocation · 10 OCSP Stapling
Part II — Enterprise deployment. 11 PQC Certificates for Tomcat · 12 CNSA 2.0: The Compliance Profile · 13 Trust Stores · 14 Post-Quantum TLS in Apache httpd · 15 Post-Quantum TLS in nginx · 16 Windows, Schannel, and IIS
Part III — The cloud certificate authority. 17 Building a Post-Quantum CA in the Cloud · 18 Operating the CA: Persistence, Restart, and the Database Underneath · 19 Post-Quantum TLS to PostgreSQL · 20 The Ceremony · 21 Scale, the Edge, and the Price of Custody
Appendices. A Algorithm and Parameter Reference · B The Lab Apparatus · C The Maxims, and the Experiments Behind Them · D The Runtime Is Not the Lever: EJBCA Community on Java 25
Who it is for
Systems administrators, PKI operators and security engineers who will be asked, within the planning horizon of their current systems, to make an estate post-quantum and to prove that it is. The reader needs a shell, Docker, and the willingness to run the commands; the book supplies the rest, including the thirty-six days of Part III that the reader does not have to repeat.