Skip to content

Video companion

After Alfred Menezes: ML-KEM and ML-DSA in plain language

Alfred Menezes' Cryptography 101 course is the most accessible technical introduction to the lattice schemes NIST standardized as ML-KEM and ML-DSA.

NIST ML-KEM and ML-DSA algorithm tree.
Short course on Kyber (ML-KEM) and Dilithium (ML-DSA) by Alfred Menezes Watch on YouTube

What the course covers

Menezes walks through Kyber (ML-KEM) and Dilithium (ML-DSA) from toy versions to full schemes, including optimizations that make lattice crypto practical at TLS scale.

The full Cryptography 101 course page includes slides, lecture notes, and additional videos on the Number-Theoretic Transform (NTT).

For a shorter overview, see our companion to the NIST PQC algorithms video.

What it does not cover

Understanding algorithms does not deploy them. Production paths run through OpenSSL 3 + oqs-provider, vendor HSMs, or cloud KMS integrations — with hybrid TLS as the transition pattern.

This quarter

  1. Complete Menezes V1–V2 lectures; skim FIPS 203 section headers.
  2. Pilot ML-KEM-768 hybrid key exchange in a lab environment.
  3. Tag inventory findings by KEM vs signature migration priority.

Continue on the Q-Day hub: ML-KEM migration guide

References & further reading

Authoritative primary sources cited in this article. Summaries are our own — follow links for full context.

Last verified 2026-06-21

See your exposure with evidence

Run a live PQC inventory scan, export a CBOM, and verify signed reports independently.