> OpenSSH 8 will add quantum resistant algorithms for key exchange.

Any additional information? This is really good to hear. PQ key exchange in SSH makes a lot of sense: Except when its used as some backend communications for automation SSH key establishment is hardly performance critical, and can easily afford extra round trips for negotiation.

Any idea if there are plans for PQ key authentication? A SPHINCS signature or similar would be very nice-- and the security story for hash based signatures is excellent.