Practical analysis for leaders building cryptographic visibility, sequencing post-quantum migration, governing risk, and producing evidence that stands up to scrutiny.
Analysis, field notes, and product thinking for this topic.
Fresh IETF guidance on constrained-device PQC highlights RAM, storage, seed handling, firmware verification, backup, and recovery. Those constraints belong in the cryptographic…
A new PQuAKE draft explores KEM-based authenticated key exchange. Its operational lesson is that authentication, authorization, credentials, confirmation, and key establishment must…
Singapore’s new quantum-safe advisory pairs 2027, 2031, and 2035 milestones with funded pilots. Organizations should use pilots to create reusable evidence, not…
The UK NCSC now recommends hybrid and pure post-quantum TLS configurations. The operational challenge is proving where each profile is supported, enabled,…
NSA’s latest resource distinguishes QKD and quantum cryptography from deployable post-quantum algorithms. Technology selection must account for links, authentication, availability, hardware, and…
A new research proposal defines nine minimum CBOM elements for PQC migration. The harder operational question is how each field is sourced,…
RFC 10042 standardizes three hybrid post-quantum SSH key exchanges. Deployment readiness depends on client-server pairs, negotiation, bastions, automation, authentication, and observed coverage.
New research proposes expressing classical and harvest-now-decrypt-later exposure as a common cost of delay. The useful idea is one governed backlog—with uncertainty…
An IETF draft would deprecate JOSE “none” and RSA1_5. Finding affected systems requires inventorying protocol identifiers, library behavior, configuration, and observed use—not…
India’s Fourth Quantum Communication Conclave put roadmaps, product readiness, testing infrastructure, routers, and 5G/6G standards on one agenda. That is the right…