Toward Quantum Resilient Security Keys

This report announces an open-source, quantum-resilient FIDO2 security key implementation in OpenSK that combines ECDSA with the Dilithium post-quantum signature algorithm to provide both classical and quantum-attack resistance. Co-developed with ETH Zürich and recognized at an ACNS workshop, the project delivers a Rust-based, memory-optimized Dilithium implementation (~20 KB) suitable for constrained security key hardware with acceptable signing performance, with potential future gains from hardware acceleration. The authors advocate a cautious hybrid approach while PQC algorithms mature and seek standardization within FIDO2 and adoption by major browsers.