Simon Josefsson writes about cryptography, GnuPG and YubiKey setups, Debian packaging, and reproducible builds.
HN commenters link his YubiKey and GnuPG master key guide for people interested in smartcards, and the blog comes up in post-quantum SSH discussions.
> NTRU Prime (sntrup) is there mostly as a quirk of history (mlkem wasn't available when SSH went down the road of doing PQ).
ML-KEM (originally "CRYSTALS-Kyber") was available, it's just the Tiny/OpenSSH folks decided not to choose that particular algorithm (for reasons beyond my pay grade).
NIST announced their competition in 2016 with the submission deadline being in 2017:
* https://en.wikipedia.org/wiki/NIST_Post-Quantum_Cryptography_Standardization
TinySSH added SNTRUP in 2018, with OpenSSH following in 2019/2020:
* https://blog.josefsson.org/2023/05/12/streamlined-ntru-prime-sntrup761-goes-to-ietf/
SSH just happened to pick one of the candidates that NIST decided not to go with.
for folks interested in more on yubikeys and gpg I also would suggest these two blog posts
http://viccuad.me/blog/secure-yourself-part-1-airgapped-computer-and-GPG-smartcards/
http://blog.josefsson.org/2014/06/23/offline-gnupg-master-key-and-subkeys-on-yubikey-neo-smartcard/