Building a practical path to post-quantum cryptography