ETSI’s QRNG Guidance Shows Why Quantum Randomness Still Needs Proof
ETSI’s new QRNG guidance shifts attention from statistical output to the full entropy lifecycle: provenance, extraction, monitoring, delivery, attestation, and auditability.
Vista Insights
Cryptography is becoming an operating discipline.
Practical analysis for leaders building cryptographic visibility, sequencing post-quantum migration, governing risk, and producing evidence that stands up to scrutiny.
The library
Research insights
Emerging standards, technical analysis, and signals shaping cryptographic modernization.
-
-
X-Wing Shows Why Hybrid Cryptography Must Be Tracked as One Dependency
The latest X-Wing draft combines X25519 and ML-KEM-768, illustrating why hybrid cryptography needs exact names, versions, implementations, and use-context records.
-
Ethereum’s PQC Roadmap Shows Why One Migration Needs Four Inventories
Ethereum’s updated quantum-resistance roadmap separates consensus signatures, data commitments, account signatures, and application proof systems. That decomposition is a useful model for…
-
A New IETF Draft Tests Whether Constrained Devices Can Carry PQC
A September 19 IETF working-group draft defines ML-KEM and ML-DSA cipher suites for LAKE, while warning that some constrained devices may not…
-
Quantum-Secure Links Still Need Conventional Implementation Assurance
A peer-reviewed experiment found measurable leakage from a digital-to-analog conversion effect in continuous-variable QKD. The lesson is broader than one design: cryptographic…
-
PQC Readiness Without Supply-Chain Control Can Preserve Cryptographic Dependence
New research separates PQC readiness from cryptographic sovereignty. The operational lesson is that migration inventories should capture who controls implementations, validation, hardware,…
-
The ITU Quantum Drill Treats PQC as an Incident-Response Problem
The ITU Global Quantum Drill moves PQC beyond standards and timelines into incident queues, supervisory decisions, implementation failures, and operational evidence.
-
Europe’s PostQat Project Treats Aviation PQC as a Safety-Critical Systems Migration
The EU-funded PostQat project began September 1 to study post-quantum security for air traffic management. Its scope shows why aviation migration must…
-
The HAWK Result Is a Case for Cryptographic Status, Not PQC Paralysis
HAWK’s withdrawal from NIST consideration shows why cryptographic inventories must distinguish candidates, standards, implementations, and deployments.
-
Hybrid PQC Key Exchange Is Progress—Not Complete Quantum Readiness
A 2026 Internet measurement study found substantial hybrid key-exchange support but no observed hybrid PQC certificates, highlighting an incomplete transition.