Post-Quantum COSE Makes Object Metadata Part of the Migration Boundary
A new IETF COSE working-group draft for post-quantum KEMs shows why migration inventories must connect object headers, KEM parameters, recipient keys, libraries,…
Vista Insights
Cryptography is becoming an operating discipline.
Practical analysis for leaders building cryptographic visibility, sequencing post-quantum migration, governing risk, and producing evidence that stands up to scrutiny.
The library
cryptographic inventory insights
Analysis, field notes, and product thinking for this topic.
-
-
Key Transparency Turns Identity-Key History Into Security Evidence
The latest IETF Key Transparency architecture shows why an identity-key inventory needs verifiable history, client observations, monitoring evidence, ownership, and recovery context—not…
-
One-Signature Certificates Redefine What Certificate Lifecycle Means
An IETF proposal for certificates tied to one signature replaces familiar renewal and revocation assumptions with event-bound keys, long-term evidence, and a…
-
DANE Client Authentication Makes DNS Part of the Cryptographic Inventory
The latest IETF DANE client-authentication draft shows why TLS identity governance must connect certificates, public keys, DNSSEC-protected TLSA records, applications, hosts, owners,…
-
ACME Certificate Profiles Turn Issuance Policy Into Inventory Data
The IETF ACME Profiles draft makes certificate issuance choices explicit. Organizations should preserve the requested profile, returned profile, policy meaning, deployment, owner,…
-
The New HPKE Draft Shows Why “Uses Encryption” Is Not an Inventory Record
The IETF’s updated HPKE draft shows why cryptographic inventory must capture complete ciphersuites, modes, context, implementation, key relationships, and deployment evidence—not just…
-
IBM’s Quantum Safe Launch Confirms PQC Is an Estate-Wide Operations Program
IBM’s new unified PQC suite reflects a market shift from algorithm tools to estate-wide migration operations. Success depends on canonical inventory, contextual…
-
NIST’s PQC Road Map Makes Algorithm Status an Inventory Field
NISTIR 8547 turns post-quantum transition dates into operational data. Organizations need to connect every algorithm to its use case, host, data lifetime,…
-
Hybrid MLS Makes Group Messaging Migration a State-Management Problem
A new experimental IETF proposal for hybrid post-quantum Messaging Layer Security shows that migration depends on ratchet-tree state, membership changes, rotation windows,…
-
Australia’s LATICE Framework Turns PQC Planning Into an Operating Cycle
Australia’s new cyber threat report frames PQC migration as locate, assess, triage, implement, communicate, and educate—a repeatable operating cycle that needs inventory,…