Encrypt Once, Decrypt Many — Post-Quantum with tholos-pq

Articles in this series

1. Part 1: Why Post-Quantum Multi-Recipient Encryption? — Why encrypt-once / decrypt-many needs post-quantum crypto: HNDL risk and the tholos-pq motivation. This is part 1 of a 3-part series on tholos-pq, a Rust crate for encrypting one message to many recipients with NIST post-quantum cryptography.
2. Part 2: Inside tholos-pq — Wire Format and Algorithm Suite — This is part 2 of a 3-part series on tholos-pq suite and wire format: ML-KEM-1024, XChaCha20-Poly1305, ML-DSA-65, CBOR envelopes.
3. Part 3: Hardening a Crypto Crate in Public — This is part 3 of a 3-part series on tholos-pq. What public review broke in tholos-pq packaging — malleability, deps, docs — and what still isn’t promised.