GnuPG – post-quantum crypto landing in mainline

GnuPG just dropped version 2.5.19, and the big headline is simple enough to fit in a tweet: it adds a “quantum‑resistant” lock called Kyber (also known as ML‑KEM, a new U.S. standard called FIPS‑203). Translation: it’s designed to protect your messages even if future super‑computers arrive. There are Windows improvements, bug fixes, and a warning that the old 2.4 line hits end‑of‑life in two months. It’s classic GnuPG: mission‑critical, donation‑powered, and announced by plain‑text email — complete with that ever‑present Snowden quote.

But the comments? That’s where the fireworks are. One camp is cackling at the mismatch between years of “quantum doom” headlines and GnuPG’s chill one‑liner — as one user quipped, “Funny to read 1‑liner changelog…” Another camp is in practical mode: Which algorithm do I use? Will it be slower? Meanwhile, the cynics are out in force: “now my emails that nobody’s reading anyway are safe from quantum computers that don’t exist yet.” And then there’s the reverent chorus, tipping their hats to Werner Koch for quietly shielding the internet since the ‘90s, sending out updates by mailing list while the rest of tech chases Medium posts. The vibe is equal parts applause, eye‑roll, and “tell me what button to press.” If you want the receipts, here are the release notes and the download page.