The FIPS 140-2 Sunset Turns Validation Status Into Inventory Data
FIPS 140-2 modules moved to the CMVP Historical list on September 22. Organizations now need to distinguish existing-system use from new-system procurement…
Vista Insights
Cryptography is becoming an operating discipline.
Practical analysis for leaders building cryptographic visibility, sequencing post-quantum migration, governing risk, and producing evidence that stands up to scrutiny.
The library
PQC governance insights
Analysis, field notes, and product thinking for this topic.
-
-
NSA’s 2027 PQC Rule Turns “Capable” Into a Procurement Test
NSA’s new PQC measures require new commercial National Security Systems to support quantum-resistant algorithms in 2027 and phase out incapable legacy systems…
-
NATO’s Quantum Roadmap Makes PQC an Interoperability Program
NATO’s new Quantum Technology Roadmap puts post-quantum cryptography inside a broader program of standards, pilots, industry readiness, and allied interoperability.
-
Ethereum’s PQC Roadmap Shows Why One Migration Needs Four Inventories
Ethereum’s updated quantum-resistance roadmap separates consensus signatures, data commitments, account signatures, and application proof systems. That decomposition is a useful model for…
-
A New IETF Draft Tests Whether Constrained Devices Can Carry PQC
A September 19 IETF working-group draft defines ML-KEM and ML-DSA cipher suites for LAKE, while warning that some constrained devices may not…
-
RFC 10033 Makes Backup State Part of Post-Quantum Signature Security
Stateful hash-based signatures can fail if a one-time signing key is reused. RFC 10033 shows why backups, VM cloning, concurrency, capacity, and…
-
A Draft ACME PQC Profile Asks Who Sets Certificate Policy
A new individual Internet-Draft proposes PQC posture fields for ACME certificate orders. It is not a standard, but it raises useful questions…
-
Post-Quantum DNSSEC Has a Packet-Size Problem—and a Trust-Chain Problem
Cloudflare now validates ML-DSA-44 DNSSEC signatures on 1.1.1.1. The deployment exposes transport, downgrade, and delegation-chain questions that every DNS operator should test.
-
A PQC-Ready HSM Is a Starting Point, Not a Migration Certificate
Thales has launched Luna 8 with support for current and post-quantum cryptography. Buyers should verify exact algorithms, firmware, integrations, certification status, and…
-
NIST’s Token Guidance Makes Signing-Key Governance a Living Control
NIST IR 8587 connects token security to key protection, verification, lifecycle controls, and provider-customer responsibility. Here is what cryptographic inventory teams should…