PQC standardization is not finished—and that is why crypto agility matters
NIST’s first PQC standards are ready, while HQC and nine additional signature candidates continue through the pipeline. Migration plans need progress and…
Vista Insights
Cryptography is becoming an operating discipline.
Practical analysis for leaders building cryptographic visibility, sequencing post-quantum migration, governing risk, and producing evidence that stands up to scrutiny.
The library
Author: woody9k
Analysis, field notes, and product thinking for this topic.
-
-
Federal PQC deadlines are here: what agencies and contractors should do now
The 2026 federal deadlines are explicit for agencies, while a contractor FAR rule is still forthcoming. Here is what is required, what…
-
A CBOM is useful when its evidence remains traceable
Why provenance, observation time, asset identity, and export scope matter as much as the component list itself.
-
A cryptographic inventory must be a system of record, not a spreadsheet
The minimum operating model for reconciling discovery, ownership, policy evaluation, and remediation state.
-
The post-quantum cryptography problem is an inventory problem first
Migration plans fail when they begin with algorithms instead of assets, dependencies, ownership, and evidence.