PQC for Enterprise Wi-Fi Is an Onboarding and Trust-Anchor Project
A new IETF draft shows that post-quantum EAP-TLS affects certificates, device onboarding, trust anchors, and wireless reliability—not just cipher selection.
Vista Insights
Cryptography is becoming an operating discipline.
Practical analysis for leaders building cryptographic visibility, sequencing post-quantum migration, governing risk, and producing evidence that stands up to scrutiny.
The library
Latest insights
Analysis, field notes, and product thinking
-
-
Ethereum’s PQC Roadmap Shows Why One Migration Needs Four Inventories
Ethereum’s updated quantum-resistance roadmap separates consensus signatures, data commitments, account signatures, and application proof systems. That decomposition is a useful model for…
-
Java 27 Makes Hybrid PQC TLS a Runtime Inventory Question
Java 27 adds default-preferred hybrid ML-KEM key exchange for TLS 1.3. Organizations still need runtime, configuration, peer, and observed-session evidence before claiming…
-
A New IETF Draft Tests Whether Constrained Devices Can Carry PQC
A September 19 IETF working-group draft defines ML-KEM and ML-DSA cipher suites for LAKE, while warning that some constrained devices may not…
-
RFC 10033 Makes Backup State Part of Post-Quantum Signature Security
Stateful hash-based signatures can fail if a one-time signing key is reused. RFC 10033 shows why backups, VM cloning, concurrency, capacity, and…
-
Quantum-Secure Links Still Need Conventional Implementation Assurance
A peer-reviewed experiment found measurable leakage from a digital-to-analog conversion effect in continuous-variable QKD. The lesson is broader than one design: cryptographic…
-
A Federal Digital-Asset Bill Turns Key Material Into an Evidence-Custody Problem
H.R. 10317 would require federal agencies to discover, safeguard, inventory, and audit digital assets found in seized evidence. Its treatment of private…
-
A Draft ACME PQC Profile Asks Who Sets Certificate Policy
A new individual Internet-Draft proposes PQC posture fields for ACME certificate orders. It is not a standard, but it raises useful questions…
-
Post-Quantum DNSSEC Has a Packet-Size Problem—and a Trust-Chain Problem
Cloudflare now validates ML-DSA-44 DNSSEC signatures on 1.1.1.1. The deployment exposes transport, downgrade, and delegation-chain questions that every DNS operator should test.
-
A PQC-Ready HSM Is a Starting Point, Not a Migration Certificate
Thales has launched Luna 8 with support for current and post-quantum cryptography. Buyers should verify exact algorithms, firmware, integrations, certification status, and…
-
NIST’s Token Guidance Makes Signing-Key Governance a Living Control
NIST IR 8587 connects token security to key protection, verification, lifecycle controls, and provider-customer responsibility. Here is what cryptographic inventory teams should…
-
PQC Readiness Without Supply-Chain Control Can Preserve Cryptographic Dependence
New research separates PQC readiness from cryptographic sovereignty. The operational lesson is that migration inventories should capture who controls implementations, validation, hardware,…
-
Bouncy Castle 1.86 Shows Why PQC Readiness Must Track Library Versions
Bouncy Castle Java 1.86 adds PQC capabilities across protocols while fixing security flaws. The release shows why algorithm inventories must remain connected…
-
The EU’s PQC Feedback Reveals the Questions Migration Evidence Must Answer
The EU’s PQC-roadmap consultation found strong support for timelines and risk-based migration—but widespread requests for clarity on prioritization, hybrid schemes, and national…
-
The ITU Quantum Drill Treats PQC as an Incident-Response Problem
The ITU Global Quantum Drill moves PQC beyond standards and timelines into incident queues, supervisory decisions, implementation failures, and operational evidence.
-
The G7’s PQC Call to Action Makes Migration a Shared Supply-Chain Obligation
The G7 says post-quantum migration cannot be solved by organizations in isolation. That makes shared inventories, supplier evidence, procurement requirements, and coordinated…
-
India’s New Quantum-Safe Telecom Portfolio Makes Capability Mapping Essential
India’s C-DOT has unveiled quantum-safe products spanning network layers, speeds, and use cases. The breadth shows why PQC programs must map each…
-
CBOM Automation Is Valuable—But Coverage Must Be Proven
A recent discussion of CBOM automation warns that legacy, OT, custom, and supplier-controlled cryptography can remain unseen. Strong programs measure discovery coverage…
-
European Payments Guidance Makes Crypto Inventory a Financial Resilience Control
The European Payments Council’s 2026 cryptography guidance connects comprehensive inventory, crypto agility, hybrid migration, long-lived data, and key management—turning PQC preparation into…
-
Australia’s 2030 Cryptography Rules Turn PQC Policy into an Inventory Test
Australia’s new cryptography guidelines specify approved PQC parameters, procurement targets, implementation assurance, and a hybrid stance. Compliance depends on inventory records precise…
Talk to Vista
Bring your questions to the Vista team.
Ask about inventory, post-quantum planning, governance, and evidence.