GnuPG 2.5.19 Ships Post-Quantum Cryptography (ML-KEM/Kyber) in Mainline — 169 Points on HN

GnuPG / Hacker News (169pts, 57 comments)·medium signal

Werner Koch released GnuPG 2.5.19 with production support for Kyber (ML-KEM, FIPS-203), the NIST-standardized post-quantum key encapsulation mechanism. The implementation uses a hybrid approach pairing Kyber with traditional RSA/ECC for key exchange, protecting against 'harvest now, decrypt later' attacks. The 2.4 branch reaches end-of-life in approximately two months. For anyone running GPG-encrypted workflows, this is the migration signal — post-quantum protection is now in mainline, not experimental.