How much room does TLS have for the big post-quantum signatures? We had a look: it’s tight.
Post-quantum TLS without handshake signatures • Douglas Stebila
Lattice-based Signatures
PDF) Dismantling the Quantum Threat
PDF) Dismantling the Quantum Threat
NIST's Standardisation of PQC
Sizing Up Post-Quantum Signatures
Status of post-quantum cryptography implementation - Quarkslab's blog
Vision Paper: Do We Need to Change Some Things?
4 Quantum Computing's Implications for Cryptography