Tag: migration
5 posts
Too much of the PQC market sells fear. Here is what practitioners should do first.
Vendor PQC marketing sells urgency before discovery. NIST, NCSC, and CISA say the opposite: start with cryptographic inventory, not an algorithm platform.
PQC Migration Plans Have a ZK Blind Spot
Major PQC migration documents from NIST, NCSC, and the EU omit zero-knowledge verification infrastructure. That gap leaves deployed ZK stacks unaccounted for.
Why organizations need a cryptographic bill of materials for PQC migration
You cannot migrate what you cannot see. CycloneDX's CBOM capability provides the foundation for post-quantum migration planning, starting with an inventory of every algorithm, key, and certificate.
PQ/T hybrid schemes: bridging traditional and post-quantum cryptography
PQ/T hybrid schemes combine traditional and post-quantum algorithms to manage migration risk. When to use them, the overhead, and why they are an interim step.
Crypto agility: designing systems that survive broken cryptography
Crypto agility is the ability to swap cryptographic primitives without redesigning systems. What it requires in practice, and why the PQC transition demands it.