Practical analysis for leaders building cryptographic visibility, sequencing post-quantum migration, governing risk, and producing evidence that stands up to scrutiny.
Analysis, field notes, and product thinking for this topic.
Australia’s new cryptography guidelines specify approved PQC parameters, procurement targets, implementation assurance, and a hybrid stance. Compliance depends on inventory records precise…
The EU-funded PostQat project began September 1 to study post-quantum security for air traffic management. Its scope shows why aviation migration must…
The IETF is asking operators for real deployment evidence on post-quantum authentication. The request exposes a migration spanning certificates, trust stores, signing…
CycloneDX 2.0 is expected to connect cryptographic inventory with owners, risks, evidence, target dates, and migration status. The preview shows why a…
The UK DWP’s updated key-management policy links inventories to ownership, supplier contracts, incident response, audits, and lifecycle controls—a practical model for governing…
Singapore is testing the market for quantum-safe products and services. Buyers should use the same moment to demand precise capability boundaries, cryptographic…
HAWK’s withdrawal from NIST consideration shows why cryptographic inventories must distinguish candidates, standards, implementations, and deployments.
The proposed Quantum-GUARD Act emphasizes realistic testing, cryptographic discovery, and coordinated PQC migration across electric-grid IT and OT.
A 2026 Internet measurement study found substantial hybrid key-exchange support but no observed hybrid PQC certificates, highlighting an incomplete transition.
The IETF’s new hybrid TLS 1.3 RFC standardizes ML-KEM combinations and makes negotiated groups, obsolete experiments, and interoperability part of cryptographic inventory.