Post-quantum cryptography beyond TLS