Practical analysis for leaders building cryptographic visibility, sequencing post-quantum migration, governing risk, and producing evidence that stands up to scrutiny.
Analysis, field notes, and product thinking for this topic.
The UK DWP’s updated key-management policy links inventories to ownership, supplier contracts, incident response, audits, and lifecycle controls—a practical model for governing…
Singapore is testing the market for quantum-safe products and services. Buyers should use the same moment to demand precise capability boundaries, cryptographic…
HAWK’s withdrawal from NIST consideration shows why cryptographic inventories must distinguish candidates, standards, implementations, and deployments.
The proposed Quantum-GUARD Act emphasizes realistic testing, cryptographic discovery, and coordinated PQC migration across electric-grid IT and OT.
A 2026 Internet measurement study found substantial hybrid key-exchange support but no observed hybrid PQC certificates, highlighting an incomplete transition.
The IETF’s new hybrid TLS 1.3 RFC standardizes ML-KEM combinations and makes negotiated groups, obsolete experiments, and interoperability part of cryptographic inventory.
A new EuroHPC research call requires QKD integration with classical networks, enterprise key management, and hybrid QKD-PQC demonstrations.
GSA’s quantum-resistant identity work demonstrates why agencies need a living inventory of algorithms, credentials, systems, vendors, and dependencies.
What the EU’s coordinated PQC roadmap means for risk classification, critical infrastructure, supply chains, crypto agility, and migration evidence.
Canada’s federal PQC roadmap requires plans, annual progress reporting, prioritized migration by 2031, and completion by 2035. Here is what the model…