While I am glad that the NIST announced support for Post-Quantum Algorithms I am concerned about their performance.
Speed and scalability matters in the business world because all organizations are constrained by a budget.
While I was reading [CloudFlare's blog post](https://blog.cloudflare.com/nist-post-quantum-surprise/) on the speed of Dilithium, Kyber, SPHINCS+, and others I was bothered by how much more time-consuming Dilithium and SPHINCS+ was. The PQC algorithms are slower than the classical ones.
I imagine this will be the reason why organizations hesitate to switch to post-quantum safe cryptosystems. They were already reluctant to adopt important technology like TLS and DNSSEC and RPKI in the past. And asking them to train their infosec and opsec teams to learn how to deal with these algorithms that slow down performance will be a difficult task.
