Tune each algorithm's security level and watch the key, ciphertext, and signature sizes update. Classical baselines (X25519, Ed25519) are drawn to scale so the payload-bloat problem is visible, not abstract.
Lattice (Module-LWE) · Key Encapsulation Mechanism
The module-lattice KEM standard (derived from CRYSTALS-Kyber). Used for establishing shared secrets in TLS, SSH, IKEv2.
Lattice (Module-LWE, Fiat-Shamir) · Digital Signature
The module-lattice signature standard (derived from CRYSTALS-Dilithium). The primary NIST-recommended general-purpose PQ signature.
Hash-based (stateless) · Digital Signature
Stateless hash-based signatures (SPHINCS+). Conservative security, large signatures — good for firmware, code signing, DNSSEC research.
Lattice (NTRU, Falcon) · Digital Signature
NTRU-lattice signatures (derived from Falcon). Smaller signatures than ML-DSA, but requires floating-point care in implementations.
Sizes pulled from FIPS 203 / 204 / 205 and Falcon round-3 submission. Where FN-DSA values differ under the FIPS 206 draft, we reflect the draft numbers. Attribution: NIST PQC · liboqs algorithm matrix.