GAO’s Quantum Readiness Review Makes Inventory a Funded Process
GAO found that none of 24 selected federal agencies fully addressed key PQC preparation practices. The gap is not merely a missing…
Vista Insights
Cryptography is becoming an operating discipline.
Practical analysis for leaders building cryptographic visibility, sequencing post-quantum migration, governing risk, and producing evidence that stands up to scrutiny.
The library
critical infrastructure insights
Analysis, field notes, and product thinking for this topic.
-
-
Harvest Now, Decrypt Later Turns Data Lifetime Into a Crypto Priority
Europol’s new assessment makes a practical point: quantum migration priority should reflect how long data must remain secret, not just the system’s…
-
TLS 1.3 Is Now a Design Dependency for Post-Quantum Readiness
RFC 9852 requires new TLS-based protocols to default to TLS 1.3. That baseline matters because current PQC standardization work targets TLS 1.3…
-
A Quantum-Safe Center Should Be Measured by Migration Outcomes
Sarawak AI Centre and IBM plan a regional quantum-safe hub. Its value will depend on measurable discovery coverage, owned remediation, skills transfer,…
-
Threshold Cryptography Changes What a Key Inventory Must Record
NIST’s current Threshold Call previews span post-quantum and traditional schemes. Distributed authority improves resilience only when participants, shares, protocols, recovery, and evidence…
-
A Telecom CBOM Must Map Cryptography Across Organizational Boundaries
ATIS’s telecom-specific CBOM profile highlights the hardest 5G inventory problem: cryptographic dependencies cross network functions, interfaces, suppliers, and operational owners.
-
A CBOM Profile Should Extend the Standard Without Hiding the Boundary
The Applied Quantum CBOM Profile 1.0 release candidate adds migration and governance context to CycloneDX. Its design highlights how extensions should remain…
-
Axiom’s Orbital PQC Milestone Shows Why Migration Evidence Must Travel
Axiom Space reports a ground-based PQC workload migration ahead of an on-orbit demonstration. The milestone shows why cryptographic state, dependencies, and test…
-
GAO’s IoT Findings Expose the First Gap in Crypto Inventory
GAO found that only seven of 22 reviewed civilian agencies fully addressed federal networked-device inventory requirements. PQC planning cannot govern cryptography on…
-
The FIPS 140-2 Sunset Turns Validation Status Into Inventory Data
FIPS 140-2 modules moved to the CMVP Historical list on September 22. Organizations now need to distinguish existing-system use from new-system procurement…