Latest Quantum Security, PQC, Post-Quantum, Crypto-Agility News
-
Oct- 2026 -21 OctoberQuantum Security & PQC
eMudhra CA Keys: A Q-Day Rehearsal at the Scale of One CA
A ceremony error left eight eMudhra intermediate CA keys computable from their certificates for 17 months. Chrome and Firefox blocked them within hours. Linux, runtimes and devices could take years, and a CRQC would expose every classical CA key.
Read More » -
17 OctoberQuantum Security & PQC
MITRE Rated Eight Enterprise Technologies on Post-Quantum Readiness. Key Exchange Is in General Release in Five, Signatures in Two.
In a July review of public evidence, MITRE found no enterprise technology category with FIPS-validated post-quantum support and no post-quantum hardware TPM on sale. What that means for agencies planning toward 2030 and 2031.
Read More » -
17 OctoberQuantum Security & PQC
Starknet Asks Its Stakers Whether to Research Leaving Ethereum Over Quantum Risk
StarkWare says Starknet could finish its post-quantum migration on its own schedule if it left Ethereum. A forum commenter named the cost. One of Starknet's most direct quantum exposures, its users' elliptic-curve keys, does not depend on Ethereum.
Read More » -
17 OctoberQuantum Security & PQC
Coinbase, Which Says It Holds About 12% of All Bitcoin, Sets Out What It Needs From Bitcoin’s Post-Quantum Signatures. Its Request for Multi-Party Signing Is the Hardest to Meet.
On October 13, Coinbase listed what its custody systems need from Bitcoin's post-quantum signatures: multi-party signing, HSM support and a stateless signing mode. The SHRINCS draft already includes the stateless mode. Post-quantum multi-party signing is still a research topic.
Read More » -
15 OctoberQuantum Security & PQC
Germany Sets a 2030 Post-Quantum Target for High-Risk Systems in Government, Business and Critical Infrastructure
BMI, BMDS and BSI have turned the EU's post-quantum roadmap into German guidance. Before 2030 comes an end-2026 checkpoint: named owners, a first cryptographic inventory, and a link to the state-of-the-art duty in the BSI Act.
Read More » -
15 OctoberQuantum Security & PQC
Michael Saylor’s Quantum Claims About Bitcoin, Checked
Strategy's executive chairman says Bitcoin should wait for a quantum threat before upgrading. Its upgrade record, its draft proposals, the arithmetic of block space and his company's own SEC filings all say otherwise.
Read More » -
14 OctoberQuantum Security & PQC
A Key Step of a Quantum Attack on Bitcoin and Ethereum Now Fits in Under 900 Logical Qubits Within Google’s Gate Budget
An open leaderboard now lists secp256k1 point-addition circuits under 900 logical qubits that stay within Google's published Toffoli bound. Whether that saves a quarter of the physical qubits depends on the machine. Nobody has compiled a full attack with them.
Read More » -
13 OctoberQuantum Security & PQC
IonQ Is Buying Elisity for Access to CISOs. Most of the Post-Quantum Capabilities Those CISOs Need First Are Still Missing.
IonQ's hardware acquisitions shorten its own path to better quantum computers. Its security purchases face a different test: whether a CISO planning a post-quantum migration can get inventory, signature migration and validated cryptography from IonQ.
Read More » -
8 OctoberQuantum Security & PQC
Europol Urges Early Action on Quantum Threats to Crypto Wallets and Stored Data
Europol's October 2026 reports place quantum risk on wallet signing keys and long-lived data. Since they were drafted, the IETF has published post-quantum OpenPGP and the hybrid TLS standards behind key exchange already running in major software.
Read More » -
7 OctoberQuantum Security & PQC
US Agencies Had Until May 2023 to Inventory Quantum-Vulnerable Cryptography. Auditors Found One of 24 Inventories Complete.
Washington called the federal inventory of quantum-vulnerable cryptography comprehensive in 2023. An audit made public on October 6 checked the inventories against agencies' own records and asked sampled agencies for evidence. One passed, and most sampled entries had no documentation.
Read More » -
5 OctoberQuantum Security & PQC
Dutch Quantum Strategy Says Prepare for Q-Day Around 2030. Medium-Risk Systems Have Until 2035.
Dutch central-government organizations are asked to move high-risk systems to post-quantum cryptography by the end of 2030 under a new national strategy, which expects a CRQC between 2029 and 2035 and adds no money for the migration.
Read More » -
2 OctoberQuantum Security & PQC
Germany’s BSI Advises Against New Classic McEliece Deployments After Researchers Estimate Key Recovery Below Its Claimed Security Levels
Less than two months after a new Classic McEliece distinguisher appeared, three research groups estimate key recovery below every claimed security level, and Germany's federal cybersecurity agency wants no new projects built on it. No practical attack exists yet.
Read More » -
Sep- 2026 -23 SeptemberQuantum Security & PQC
China’s Next-Generation Crypto Candidates Drew 104 Public Findings in Three Days. Researchers Broke Five Designs on Day Two
Within three days of China publishing its first-round candidates, public reports listed 104 findings against 65 of them. Saarinen's AI-assisted sweep found code bugs; researchers posting to ICCS's own forums found the design breaks.
Read More » -
21 SeptemberQuantum Security & PQC
FIPS 140-2 Goes Historical Today – What Actually Changes and What Doesn’t
Every remaining FIPS 140-2 certificate moves to the CMVP Historical list on September 21, 2026. The sunset changes procurement, not operations – but the supply-side gap in FIPS 140-3 validated modules makes the transition harder than the seven-year runway implied.
Read More » -
21 SeptemberQuantum Security & PQC
Apple Joins the Merkle Tree Certificate Consensus – and Raises the Bar
Apple's Root Program has committed to Merkle Tree Certificates for TLS with requirements that go beyond Chrome's in key respects, while taking the composite-algorithm path for S/MIME – confirming the two-track PKI fork organizations must plan for.
Read More »
