Red Hat's path to post-quantum cryptography with OpenSSL

Red Hat Enterprise Linux 10.0 shipped with OpenSSL 3.2 and supports hybrid post-quantum key exchange in TLS and ML-DSA signatures. CentOS 10 Stream, which will become RHEL 10.1, has already upgraded to OpenSSL 3.5. Learn how OpenSSL 3's provider architecture allowed Red Hat to bring post-quantum cryptography to its operating system quickly and migrate to OpenSSL's own implementation later on. I'll discuss the problems we found along the way and the use cases OpenSSL's support for post-quantum cryptography unlocks for us.