NIST PQC Compliance

Per NIST IR 8547. TLS handshakes whose negotiated key exchange provides no post-quantum protection — exposed to 'harvest now, decrypt later' attacks once a cryptographically relevant quantum computer is available. Source: <b>rockfish-tls-pqc</b> Suricata plugin, which parses the ClientHello supported_groups extension and the TLS 1.3 ServerHello key_share NamedGroup directly off the wire (data Suricata's stock TLS event log does not surface). <b>server_lagging</b> = client offered PQ but server picked classical (silent exposure); <b>client_lagging</b> = client never offered PQ at all; <b>partial</b> = only one side of the handshake observed (typical TLS 1.2).