OpenSSL 4.1.0 shipped today. I built it and measured ML-KEM, ML-DSA, and DTLS 1.3.

I built OpenSSL 4.1.0 from source today and measured it: DTLS 1.3 negotiates on loopback, ML-KEM-768 keygen hits 16,346/s vs RSA-2048's 13.1/s, ML-DSA-65 verifies at 40% of RSA's rate, and a signature costs 3,309 bytes. The CPU got cheaper; the wire got more expensive.