SQIsign in JOSE and COSE Makes Algorithm Agility a Parser Problem
A proposal to register SQIsign for JOSE and COSE shows that adding a post-quantum signature touches identifiers, key formats, parsers, size limits,…
Vista Insights
Cryptography is becoming an operating discipline.
Practical analysis for leaders building cryptographic visibility, sequencing post-quantum migration, governing risk, and producing evidence that stands up to scrutiny.
The library
Research insights
Emerging standards, technical analysis, and signals shaping cryptographic modernization.
-
-
Persistent OpenPGP Keys Show Why Data-at-Rest Migration Needs Context
An OpenPGP proposal for persistent symmetric keys highlights a practical truth: post-quantum planning for stored data depends on key purpose, custody, sharing,…
-
Your Cryptographic Inventory Belongs in Your Infrastructure Inventory
A cryptographic inventory becomes actionable when every certificate, key, protocol, and algorithm is connected to the host, application, owner, location, and service…
-
Composite JOSE and COSE Signatures Turn Token Migration Into a Dependency Map
A fresh IETF draft brings ML-DSA hybrid signatures to JOSE and COSE. Migration depends on token producers, verifiers, key formats, size limits,…
-
The eMudhra Certificate Incident Exposes the Trust-Store Inventory Gap
Cloudflare’s response to eight compromised intermediate-certificate keys shows why organizations must inventory actual verification paths, trust-store inheritance, application dependencies, and activation state.
-
Post-Quantum DNSSEC Is a Resilience and Resolver-Capacity Problem
A new DNSSEC strategy draft reframes PQC migration around signature size, resolver behavior, fallback, denial-of-service resistance, and long deployment cycles.
-
FedRAMP’s Crypto Module Proposal Makes Documentation the Control Plane
FedRAMP RFC-0035 proposes more flexibility in cryptographic module use while making precise documentation and significant-change notice essential to agency risk decisions.
-
Privacy-Enhancing Cryptography Needs an Operational System of Record
NIST’s WPEC 2026 agenda highlights fast-moving privacy-enhancing cryptography. Real deployments need inventory, ownership, policy, dependencies, and auditable evidence alongside research progress.
-
Composite ML-KEM Moves PKI Migration Beyond an Algorithm Swap
The latest IETF composite ML-KEM draft shows why post-quantum PKI planning must track certificate profiles, relying parties, validation paths, key custody, and…
-
Bitcoin’s PQC Migration Is a Key-Custody and Governance Problem
Coinbase’s Bitcoin readiness analysis shows why a post-quantum signature choice is only one dependency. Custody, MPC, wallets, dormant funds, block space, and…