Post-quantum PKI

Build a root, intermediate and leaf with ML-DSA-65, measure the chain, stand up an OCSP responder, and run an algorithm rollover.

Deliverable: a working certificate hierarchy plus a rollover runbook. Apply the MEASURED chain-size method from the M7 lesson certificate-chain-bloat to your own chain.

How to start: following the M9 lesson pkcs11-pq-mechanisms, generate at least one key (root or intermediate) through a software HSM such as SoftHSM2. Sign all three of root, intermediate and leaf with ML-DSA-65 (do not repeat the RSA-leaf mistake from our early research notes). Stand up an OCSP responder and show that a client really verifies a PQC-signed response. Then actually run an algorithm rollover (for example replacing an intermediate) and write the steps up as a runbook.