The FIPS 140-2 Sunset Turns Validation Status Into Inventory Data
FIPS 140-2 modules moved to the CMVP Historical list on September 22. Organizations now need to distinguish existing-system use from new-system procurement…
Vista Insights
Cryptography is becoming an operating discipline.
Practical analysis for leaders building cryptographic visibility, sequencing post-quantum migration, governing risk, and producing evidence that stands up to scrutiny.
The library
cryptographic inventory insights
Analysis, field notes, and product thinking for this topic.
-
-
Post-Quantum TLS Readiness Must Be Observed, Not Assumed
Cloudflare’s new per-connection TLS key-exchange telemetry shows why configured PQC support, negotiated protection, client coverage, and origin coverage are different measures.
-
NSA’s 2027 PQC Rule Turns “Capable” Into a Procurement Test
NSA’s new PQC measures require new commercial National Security Systems to support quantum-resistant algorithms in 2027 and phase out incapable legacy systems…
-
A New RSA Forgery Result Makes HSM Interfaces Part of the Inventory
New research forged an RSA-1024 signature through temporary raw-signing access without extracting the key, showing why HSM interface policy and usage telemetry…
-
Cloudflare’s MTC Plan Makes Transparency Part of Post-Quantum Trust
Cloudflare’s planned post-quantum certificate authority shows why WebPKI migration must govern issuance logs, mirrors, client landmarks, fallback paths, and certificate policy.
-
ETSI’s QRNG Guidance Shows Why Quantum Randomness Still Needs Proof
ETSI’s new QRNG guidance shifts attention from statistical output to the full entropy lifecycle: provenance, extraction, monitoring, delivery, attestation, and auditability.
-
NATO’s Quantum Roadmap Makes PQC an Interoperability Program
NATO’s new Quantum Technology Roadmap puts post-quantum cryptography inside a broader program of standards, pilots, industry readiness, and allied interoperability.
-
X-Wing Shows Why Hybrid Cryptography Must Be Tracked as One Dependency
The latest X-Wing draft combines X25519 and ML-KEM-768, illustrating why hybrid cryptography needs exact names, versions, implementations, and use-context records.
-
PQC for Enterprise Wi-Fi Is an Onboarding and Trust-Anchor Project
A new IETF draft shows that post-quantum EAP-TLS affects certificates, device onboarding, trust anchors, and wireless reliability—not just cipher selection.
-
Ethereum’s PQC Roadmap Shows Why One Migration Needs Four Inventories
Ethereum’s updated quantum-resistance roadmap separates consensus signatures, data commitments, account signatures, and application proof systems. That decomposition is a useful model for…