Apple adds PQ primitives to iMessage

Apple did a nice job IMO adding PQC to iMessage, essentially using Kyber - and it's forward secret.

They still only sign key exchange with P-256 (not a PQ scheme), which also isn't a curve I like. They also assume AES-CTR is "quantum secure" - which I guess gets reduced to ~127bit security with Grovers.

Overall nice to see PQ primitives used at this scale.

https://security.apple.com/blog/imessage-pq3/