IKEv2

Migrating IPsec authentication from RSA-2048 certificates to ML-DSA across a multi-router network cannot be done without an outage, because authentication requires selecting a single signature method …

ML-KEM-768 keys are 25–50× larger than X25519, forcing IKE fragmentation for ML-KEM-768, but its compute cost is comparable to or lower than X25519, adding only about 1 ms to handshake time. The recom…