All Post-Quantum, PQC Posts
-
Post-Quantum, PQC, Quantum Security
PQC for MSSPs and Consultancies: Opportunity and Risk
Post-quantum migration will keep security consultancies and MSSPs busy for a decade, but the revenue is in PKI, legacy systems, vendors and governance, not in scans. Clients will also check each provider's own cryptography before they buy.
Read More » -
Post-Quantum, PQC, Quantum Security
Crypto-Agility for Digital Assets: Chains Are Planning One Post-Quantum Change When They Will Need Several
Zcash replaced a flawed proof circuit and sealed a pool then worth $1.7 billion within 60 days. Bitcoin and Ethereum are planning one post-quantum change. Crypto-agility means a chain can change its cryptography again, and retire what it replaced.
Read More » -
Post-Quantum, PQC, Quantum Security
Crypto-Agility Is the Goal. The PQC Migration Is Only Its First Test.
Post-quantum algorithm choices are already changing: a NIST candidate was withdrawn the day after an attack went public, and BSI advised against Classic McEliece in new developments. Build a crypto-agility program and make the PQC migration its first test.
Read More » -
Post-Quantum, PQC, Quantum Security
One Quantum Threat, Many Migrations: How and Why PQC Programmes Are Diverging Around the World
Fresh from GISEC in Dubai and ahead of a keynote in Maryland: the same quantum threat is being managed very differently across the US, Europe, the Gulf and Asia, and each migration has produced something the others could use.
Read More » -
Post-Quantum, PQC, Quantum Security
PQC Migration Framework v3.0: Build the Ability to Change Again
Crypto-agility is now the method, and the PQC migration is the first exercise of it. The program closes when the organization can change algorithms on a date it chooses. Two companion frameworks publish alongside version 3.0.
Read More » -
Post-Quantum, PQC, Quantum Security
Proving Your Crypto Inventory Is Complete Without Handing Over the Map
Four research teams have built privacy-preserving validation systems for bills of materials. Each can prove something about a committed record, and none establishes that the record describes the estate it claims to cover.
Read More » -
Post-Quantum, PQC, Quantum Security
Guarding the CBOM: The Most Sensitive Document Your Security Program Produces
Cryptographic discovery finds weaknesses that matter today, not only after a quantum computer. The resulting inventory ranks them, stays useful to attackers for years, and almost nobody has said to guard it.
Read More » -
Post-Quantum, PQC, Quantum Security
Six Teams Shipped the Same ZK Verifier Bug. Quantum Doesn’t Get a Patch.
Zcash closed a 3.66 million ZEC pool to new deposits after a soundness bug surfaced in a Shielded Labs audit. A quantum verifier migration is harder, and no regulator can schedule the fork.
Read More »