I’m leading a 12‑month rollout to phase in ML‑KEM (Kyber) and ML‑DSA (Dilithium) alongside ECDH/ECDSA across TLS 1.3 and data‑at‑rest systems, and I need substantive courses — not intro talks — that go deep on KEMTLS/HPKE hybrid modes, cryptographic agility, and HSM/FIPS 140‑3 validation mapped to NIST SP 800‑56C/57/800‑208. If you’ve finished a program recently with real labs and side‑channel considerations, which provider delivered the most rigor and was it worth the time investment?
I wrapped a 9‑month pilot and the most useful “substantive” track was standing up KEMTLS/HPKE hybrids with Open Quantum Safe’s oqs-provider on OpenSSL 3 (GitHub - open-quantum-safe/oqs-provider: OpenSSL 3 provider containing post-quantum algorithms) and then mapping the flows to SP 800‑56C/57/800‑208. For FIPS 140‑3/HSM realism we added vendor SDK labs and sanity‑checked docs via atsec’s FIPS 140‑3 training — a dress rehearsal before the auditors show up. Caveat: OQS is perfect for labs, but you’ll want your HSM’s PQC preview firmware to validate performance and key lifecycles.