THE NINE THAT SURVIVED: Special Edition

NIST’S NEW SIGNATURE PORTFOLIO AND THE DAWN OF ADAPTIVE TRUST ARCHITECTURE

By SITG-Consulting - Quantum Risk & Resilience Special Edition

Executive Strategic Thesis

IR 8610 marks the transition from static cryptography to adaptive trust architecture.

For three decades, the digital economy operated on a foundational assumption: cryptographic trust could remain relatively stable across generations of infrastructure.

That era is ending.

The future trust estate is unlikely to be singular, permanent, or mathematically settled. Instead, it increasingly appears likely to become:

• multi-assumption

• continuously rotating

• operationally dynamic

• geopolitically contested

• permanently adaptive

The institutions that navigate the post-quantum transition most successfully may not necessarily be those deploying the strongest algorithms.

They may instead be the organisations capable of surviving continuous cryptographic instability without systemic operational fracture.

That is the broader strategic message emerging from IR 8610.

I. The Quiet Inflection Point

On 14 May 2026, NIST released IR 8610, a deceptively calm document that may ultimately be remembered as one of the most consequential strategic inflection points in the history of modern cryptography.

The headline appears simple: nine post-quantum signature schemes advance to the third round of evaluation.

But the subtext is far more consequential.

For the first time since the PQC process began in 2016, IR 8610 appears to signal that NIST is increasingly prioritising resilience beyond a single mathematical family.

This matters because the Additional Signatures track no longer appears to be merely a secondary research exercise. Viewed through a strategic lens, it increasingly resembles a resilience programme designed to reduce long-term cryptographic monoculture risk.

The implications are significant.

For years, the industry operated under an implicit assumption that lattice cryptography would become the dominant long-term foundation of post-quantum trust.

IR 8610 now suggests that NIST wants credible fallback families beyond lattices without abandoning lattices as the primary deployment pathway.

This is not a rejection of lattice cryptography.

It is something more nuanced: an acknowledgement that long-term cryptographic resilience may ultimately require credible alternatives across multiple mathematical families.

Behind the headlines, these nine surviving candidates increasingly look less like declared winners and more like strategic hedges against future uncertainty.

This is the moment the post-quantum transition begins evolving from a standards exercise into a resilience exercise.

II. What NIST Actually Did

NIST’s public language remains measured and diplomatic. Its selection logic, however, reveals several clear strategic priorities.

1. Security dominates everything

Schemes suffering major cryptanalytic damage did not advance.

Schemes with intact parameter sets — even where operational or implementation questions remain — largely survived.

NIST appears increasingly focused on survivability under sustained scrutiny rather than elegance alone.

2. Diversity is becoming strategically important

IR 8610 preserves candidate diversity across:

• MPC-in-the-Head

• Multivariate cryptography

• Isogeny cryptography

• Lattice cryptography

This is historically significant.

For decades, cryptographic standardisation largely sought convergence toward dominant primitives.

IR 8610 instead appears to embrace controlled diversification as a defensive resilience strategy against future mathematical disruption.

3. Compactness is becoming strategically critical

Signature size is no longer a secondary optimisation issue.

Protocols such as:

• DNSSEC

• Roughtime

• satellite communications

• embedded firmware

• constrained IoT environments

• industrial control infrastructure

may struggle to sustain oversized post-quantum signatures indefinitely.

NIST clearly understands this operational pressure. Large parts of the industry still appear to underestimate it.

4. The timeline has extended materially

IR 8610 strongly suggests that NIST has entered a prolonged resilience-evaluation cycle rather than a rapid standardisation phase.

This implies:

• no immediate replacement candidates

• prolonged ecosystem uncertainty

• extended hybrid cryptography periods

• sustained implementation volatility

• continuous validation pressure

The post-quantum transition increasingly appears to be a decade-scale operational reality rather than a discrete migration event.

III. The Four Layers of Post-Quantum Resilience

The industry continues treating PQC primarily as a cryptographic replacement problem.

That framing now appears incomplete.

IR 8610 suggests that post-quantum resilience increasingly operates across four interconnected layers.

1. Mathematical Resilience

Can the underlying assumptions survive sustained cryptanalysis?

2. Implementation Resilience

Can algorithms survive side-channel exposure, hardware constraints, and real-world deployment conditions?

3. Operational Resilience

Can enterprises rotate algorithms, certificates, firmware, and trust anchors continuously without destabilising operations?

4. Governance Resilience

Can regulators, boards, vendors, and national infrastructures adapt to a world where cryptographic assumptions may no longer remain stable for decades at a time?

The future trust estate may ultimately fail at the weakest layer — not necessarily the mathematical layer.

That is one of the most important strategic shifts now emerging from the PQC transition.

IV. The Nine Survivors - A Forensic Profile

A. MPC-in-the-Head: The New Centre of Gravity

FAEST

MQOM

SDitH

This family now appears to carry some of the strongest strategic momentum among non-lattice candidates.

Not because it is perfect. But because it currently represents one of the most mature non-lattice pathways with comparatively credible performance characteristics and resilient assumptions.

FAEST

Conservative design. AES-based foundations. Strong confidence profile.

MQOM

Highly competitive performance characteristics. Operational efficiency advantages.

SDitH

Adds coding-theory diversity within the MPCitH family itself.

Viewed strategically, the surviving MPCitH candidates now appear among the most plausible pathways toward a future non-lattice deployment standard.

That possibility alone materially changes the long-term landscape.

B. Multivariate: The Wounded Giants

UOV

MAYO

QR-UOV

SNOVA

No family suffered more visible public damage during Round Two than multivariate cryptography.

Wedge-attack variants exposed significant weaknesses in several characteristic-2 parameter sets. Confidence deteriorated rapidly. Many observers assumed the family might effectively collapse.

And yet all four candidates survived.

Why?

Because compactness still matters. Because constrained operational environments remain strategically important. And because the underlying UOV structure itself does not appear fundamentally broken.

UOV

The historical baseline. Decades of analysis.

QR-UOV

Currently appears among the more structurally resilient variants against wedge-style attacks.

MAYO

Extremely compact public keys with potentially meaningful long-term deployment value.

SNOVA

Damaged but still operationally relevant due to compactness characteristics.

But IR 8610 also signals caution.

Multivariate schemes appear unlikely to progress rapidly without additional evaluation rounds and further confidence development.

Multivariate cryptography survives - but under sustained scrutiny.

C. Isogeny: The Survivor Nobody Expected

SQIsign

After SIKE collapsed in 2022, many observers believed isogeny cryptography had effectively reached its endpoint.

SQIsign complicates that narrative.

It survives because it offers characteristics that very few other families can currently match:

• exceptionally compact signatures

• ultra-small key material

• constrained-environment viability

But the liabilities remain substantial:

• highly specialised mathematics

• limited analyst community

• implementation fragility

• severe side-channel sensitivity

• lingering ecosystem caution following SIKE

SQIsign therefore represents both strategic opportunity and strategic uncertainty.

NIST appears to be preserving optionality rather than expressing confidence.

D. Lattice: The One That Survived

HAWK

HAWK’s survival carries a very specific signal.

It exists largely because Falcon’s deployment characteristics remain operationally difficult across many environments.

Floating-point arithmetic continues creating implementation and assurance complications, particularly in embedded and constrained systems.

HAWK attempts to address that problem through integer-only arithmetic while preserving compact signatures.

IR 8610 appears to position HAWK less as a replacement for ML-DSA and more as a potential future compact lattice alternative if deployment pressures intensify.

V. The Eliminated Five - A Ruthless Consolidation

CROSS

LESS

Mirath

PERK

RYDE

These candidates did not progress into the third round.

While NIST does not provide simplistic elimination narratives, the outcomes strongly suggest that cryptanalytic pressure, technical maturity, implementation practicality, and operational deployment considerations all played important roles.

IR 8610 demonstrates that NIST remains willing to aggressively narrow the field where long-term resilience confidence weakens.

VI. The Reality Behind the Portfolio

The strategic advantages of diversification are real.

So are the liabilities.

And the liabilities may ultimately prove harder to manage than the mathematics itself.

Strategic Advantages

1. Reduced monoculture risk

A diversified signature ecosystem lowers the probability that a single breakthrough destabilises the broader trust estate.

2. Compactness pathways remain alive

Several surviving candidates preserve deployment options for highly constrained environments.

3. Non-lattice survivability improves resilience

MPCitH currently appears to provide one of the strongest alternatives to long-term lattice concentration risk.

4. Long-term optionality improves governance flexibility

Multiple mathematical families create future manoeuvrability for governments, vendors, and critical infrastructure operators.

But diversification creates a second problem.

VII. The Hidden Cost of Diversity

Every additional cryptographic family introduces operational complexity.

That complexity scales rapidly.

New algorithms require:

• new validation pipelines

• new HSM architectures

• new implementation assurance models

• new side-channel testing frameworks

• new firmware dependencies

• new certification pathways

• new interoperability matrices

• new supply-chain verification requirements

This creates one of the defining paradoxes of the post-quantum era:

Diversification may improve mathematical resilience while simultaneously increasing operational fragility.

That tension now sits at the centre of global trust architecture.

And most organisations do not yet appear operationally prepared for it.

The industry may spend the next decade solving mathematical resilience while accidentally degrading operational resilience.

That risk is no longer theoretical.

VIII. The Geopolitical Fragmentation Risk

The future PQ landscape may not remain globally harmonised.

That possibility is still widely underestimated.

The long-term issue is not simply algorithm selection.

It is trust fragmentation.

If current geopolitical and regulatory trajectories continue, different states and sovereign technology ecosystems may increasingly pursue divergent cryptographic strategies shaped by:

• national security priorities

• domestic semiconductor capabilities

• sovereign cloud initiatives

• export restrictions

• intelligence-community influence

• supply-chain control objectives

This could eventually produce:

• regional trust blocs

• incompatible cryptographic ecosystems

• fragmented certificate trust chains

• sovereign signing requirements

• cross-border interoperability friction

• cryptographically conditional digital trade

The implications for multinational enterprises could become profound.

Some organisations may ultimately require parallel trust architectures capable of operating across multiple sovereign cryptographic environments simultaneously.

The post-quantum era may therefore become not only a technological transition, but also a geopolitical restructuring of digital trust itself.

IX. What the Industry Will Say - And What It Actually Means

Large Technology Vendors

Publicly: “Portfolio resilience improves ecosystem flexibility.”

Privately: validation costs, lifecycle maintenance obligations, and platform complexity are becoming increasingly concerning.

Regulators

Will likely interpret diversification as evidence that crypto-agility must become progressively mandatory rather than optional.

This could materially reshape future compliance frameworks.

Telecom and Satellite Operators

Will focus heavily on compactness pressure.

Bandwidth realities are beginning to collide with PQ signature expansion.

OT and ICS Operators

Will increasingly discover that many embedded trust anchors cannot sustain perpetual cryptographic rotation cycles easily.

This is becoming a critical infrastructure survivability issue.

Cloud Providers

Will likely accelerate hybrid trust models, layered signing architectures, and cryptographic abstraction frameworks.

Hardware Manufacturers

Will face growing pressure around side-channel resistance, secure enclave redesign, and firmware survivability.

The Cybersecurity Industry

Large parts of the cybersecurity market still appear to frame PQC primarily as a cybersecurity uplift rather than what it increasingly represents:

a restructuring of global trust architecture.

That misunderstanding may become one of the most significant strategic risks in the market.

X. The Economic Reality Few Organisations Have Modelled

The largest cost of PQC may ultimately not be algorithm migration itself.

It may instead be trust-operating-model reconstruction.

Many organisations still appear to underestimate the economic scale of the transition.

The most substantial costs are likely to emerge through:

• HSM replacement cycles

• firmware remediation programmes

• certificate lifecycle expansion

• infrastructure recertification

• supply-chain validation overhead

• hardware refresh acceleration

• cryptographic inventory reconstruction

• audit expansion

• embedded system retrofitting

• interoperability remediation

Viewed strategically, the post-quantum transition may ultimately become one of the largest infrastructure refresh cycles in digital history.

And unlike many previous technology transitions, the burden may not remain concentrated in software alone.

It is likely to affect hardware, governance, procurement, compliance, supply chains, and national infrastructure simultaneously.

XI. The Real Consequences for Global Cryptography

1. Additional signature standardisation is likely to remain prolonged

IR 8610 strongly suggests a long-duration resilience evaluation process rather than near-term consolidation.

2. ML-DSA, SLH-DSA, and FN-DSA remain the primary deployable standards

Everything else remains research-grade.

That distinction matters operationally.

3. Crypto-agility is becoming existential

Architectures unable to rotate algorithms safely and continuously may increasingly become strategically obsolete.

4. MPC-in-the-Head now appears strategically important

FAEST, MQOM, and SDitH increasingly appear among the most plausible pathways toward an eventual non-lattice deployment standard.

5. Multivariate cryptography remains a hedge, not a solution

Breakthroughs remain possible. So do further collapses.

6. SQIsign remains the wildcard

If implementation resilience matures sufficiently, it could become strategically transformative for constrained systems.

XII. The Boardroom Translation

Most boards and regulators still appear to approach PQC primarily as a compliance timeline issue.

That framing is increasingly insufficient.

A. Lattice concentration risk is now a board-level issue

NIST’s diversification approach increasingly resembles strategic risk mitigation rather than academic experimentation.

B. Protocol strain may emerge before quantum decryption risk

Large signatures are already placing stress on operational environments.

The pressure is immediate, not theoretical.

C. Migration is no longer a one-time programme

Cryptographic rotation is increasingly becoming perpetual.

D. Static assurance models are weakening

Compliance frameworks built around stable cryptographic assumptions may struggle to survive continuously evolving algorithmic uncertainty.

E. Operational resilience may become more important than algorithm selection itself

Many organisations may eventually achieve formal PQC compliance while remaining operationally non-resilient.

That distinction could become increasingly dangerous.

XIII. What Happens Next - The Roadmap Beyond IR 8610

The next phase now appears to unfold across four parallel tracks.

1. Cryptanalytic Hardening

• MPCitH proofs must stabilise

• multivariate candidates must repair parameter sets

• SQIsign must demonstrate stronger side-channel resilience

• HAWK must validate long-term deployment confidence

2. Implementation Maturity

• constant-time implementations

• hardware feasibility

• HSM integration

• embedded viability

• operational tooling maturity

3. Ecosystem Pressure Testing

• performance expectations

• protocol compatibility

• signature-size tolerances

• interoperability behaviour

• supply-chain survivability

4. Portfolio Consolidation

Candidates unable to mature operationally or cryptanalytically are unlikely to survive indefinitely.

The field will continue narrowing.

XIV. The Coming Era of Perpetual Cryptographic Rotation

The PQC transition is not a single migration event.

It increasingly appears to be the beginning of continuous cryptographic rotation.

Organisations should now assume:

• algorithms will change

• assumptions will fail

• parameters will evolve

• implementations will be replaced

• standards will shift

• trust models may fragment

This is the emerging operational reality of adaptive trust architecture.

XV. The Real Risks - Not Quantum, but Governance

The mathematics may not be the primary bottleneck.

Governance increasingly appears to be.

The first major PQC crisis may be more likely to emerge from implementation governance failures, operational fragility, supply-chain breakdown, or assurance collapse than from successful quantum cryptanalysis itself.

The real risks now increasingly appear to be:

• monoculture dependency

• implementation drift

• protocol strain

• interoperability fracture

• validation overhead

• side-channel exposure

• supply-chain fragility

• governance paralysis

Quantum risk is only part of the problem.

Cryptographic uncertainty is becoming the larger strategic challenge.

XVI. SITG-Consulting Position - The Definitive Frame

For thirty years, the digital economy depended on the assumption that cryptographic trust could remain relatively stable across generations of infrastructure.

IR 8610 quietly signals the beginning of the end of that era.

The future trust estate is unlikely to remain stable, singular, or permanent.

It increasingly appears likely to become adaptive, multi-assumption, continuously rotating, and geopolitically contested.

The institutions that navigate the post-quantum transition most successfully may not be those deploying the strongest algorithms alone.

They may instead be those capable of surviving continuous cryptographic instability without systemic operational fracture.

That is the real transition now underway.

The post-quantum era is no longer simply about replacing RSA or ECC with newer mathematics.

It is increasingly about managing continuous trust instability across operational, regulatory, geopolitical, and architectural domains simultaneously.

The consequences are profound.

Governance becomes dynamic. Assurance becomes stress-based. Crypto-agility becomes existential. Architecture survivability replaces compliance theatre.

And the operational burden is only beginning.

Every additional signature family increases assurance complexity, interoperability pressure, implementation risk, supply-chain fragility, and validation overhead.

Most organisations still appear to treat PQC primarily as a cybersecurity upgrade project.

It is becoming something much larger than that.

It is the restructuring of the global trust architecture itself.

The next decade will not be defined solely by which algorithm wins.

It may instead be defined by which institutions can survive perpetual cryptographic transition without systemic collapse.

The post-quantum era is not the arrival of certainty.

It is the institutionalisation of uncertainty.

And nearly all enterprises remain profoundly underprepared for what comes next.