Axiom’s Orbital PQC Milestone Shows Why Migration Evidence Must Travel
Axiom Space reports a ground-based PQC workload migration ahead of an on-orbit demonstration. The milestone shows why cryptographic state, dependencies, and test…
Vista Insights
Cryptography is becoming an operating discipline.
Practical analysis for leaders building cryptographic visibility, sequencing post-quantum migration, governing risk, and producing evidence that stands up to scrutiny.
The library
Cryptographic Governance insights
Operating models for inventory, ownership, policy, remediation, and defensible evidence.
-
-
GAO’s IoT Findings Expose the First Gap in Crypto Inventory
GAO found that only seven of 22 reviewed civilian agencies fully addressed federal networked-device inventory requirements. PQC planning cannot govern cryptography on…
-
The FIPS 140-2 Sunset Turns Validation Status Into Inventory Data
FIPS 140-2 modules moved to the CMVP Historical list on September 22. Organizations now need to distinguish existing-system use from new-system procurement…
-
Post-Quantum TLS Readiness Must Be Observed, Not Assumed
Cloudflare’s new per-connection TLS key-exchange telemetry shows why configured PQC support, negotiated protection, client coverage, and origin coverage are different measures.
-
A New RSA Forgery Result Makes HSM Interfaces Part of the Inventory
New research forged an RSA-1024 signature through temporary raw-signing access without extracting the key, showing why HSM interface policy and usage telemetry…
-
Cloudflare’s MTC Plan Makes Transparency Part of Post-Quantum Trust
Cloudflare’s planned post-quantum certificate authority shows why WebPKI migration must govern issuance logs, mirrors, client landmarks, fallback paths, and certificate policy.
-
ETSI’s QRNG Guidance Shows Why Quantum Randomness Still Needs Proof
ETSI’s new QRNG guidance shifts attention from statistical output to the full entropy lifecycle: provenance, extraction, monitoring, delivery, attestation, and auditability.
-
PQC for Enterprise Wi-Fi Is an Onboarding and Trust-Anchor Project
A new IETF draft shows that post-quantum EAP-TLS affects certificates, device onboarding, trust anchors, and wireless reliability—not just cipher selection.
-
Java 27 Makes Hybrid PQC TLS a Runtime Inventory Question
Java 27 adds default-preferred hybrid ML-KEM key exchange for TLS 1.3. Organizations still need runtime, configuration, peer, and observed-session evidence before claiming…
-
RFC 10033 Makes Backup State Part of Post-Quantum Signature Security
Stateful hash-based signatures can fail if a one-time signing key is reused. RFC 10033 shows why backups, VM cloning, concurrency, capacity, and…