Practical analysis for leaders building cryptographic visibility, sequencing post-quantum migration, governing risk, and producing evidence that stands up to scrutiny.
Analysis, field notes, and product thinking for this topic.
New research separates PQC readiness from cryptographic sovereignty. The operational lesson is that migration inventories should capture who controls implementations, validation, hardware,…
Bouncy Castle Java 1.86 adds PQC capabilities across protocols while fixing security flaws. The release shows why algorithm inventories must remain connected…
The EU’s PQC-roadmap consultation found strong support for timelines and risk-based migration—but widespread requests for clarity on prioritization, hybrid schemes, and national…
The ITU Global Quantum Drill moves PQC beyond standards and timelines into incident queues, supervisory decisions, implementation failures, and operational evidence.
The G7 says post-quantum migration cannot be solved by organizations in isolation. That makes shared inventories, supplier evidence, procurement requirements, and coordinated…
India’s C-DOT has unveiled quantum-safe products spanning network layers, speeds, and use cases. The breadth shows why PQC programs must map each…
A recent discussion of CBOM automation warns that legacy, OT, custom, and supplier-controlled cryptography can remain unseen. Strong programs measure discovery coverage…
The European Payments Council’s 2026 cryptography guidance connects comprehensive inventory, crypto agility, hybrid migration, long-lived data, and key management—turning PQC preparation into…
The EU-funded PostQat project began September 1 to study post-quantum security for air traffic management. Its scope shows why aviation migration must…
The IETF is asking operators for real deployment evidence on post-quantum authentication. The request exposes a migration spanning certificates, trust stores, signing…