From the cryptographer's desk: how we chose Sui's post-quantum signature schemes

The reasoning behind ML-DSA-65 and SLH-DSA-SHA2-128s, tested against feedback from external cryptographers, wallet providers, HSM and cloud vendors, and financial authorities, the implementation we built on, the benchmarks, and the one migration path we are deliberately not shipping yet.