Post-quantum cryptography

Readiness assessment and migration to the standardised quantum-resistant algorithms.

In Post-quantum cryptography

5 articles
Cryptographic engineering6 MIN READ

You cannot migrate cryptography you cannot find

Every post-quantum migration plan begins with an inventory, and most inventories stall because the team looks for algorithms instead of looking for the places algorithms are decided.

Cryptographic engineering6 MIN READ

What belongs in a post-quantum migration plan?

A plan that lists algorithms and a target year is a statement of intent. A plan that survives review names sequenced workstreams, dependency owners, interim states and the decisions that are already overdue.

Cryptographic engineering6 MIN READ

Hybrid key exchange: what it protects and what it costs

Combining a classical and a post-quantum key exchange is now the default for TLS. Understanding why the combination is used—and what it adds to every handshake—makes the deployment decision straightforward.

Cryptographic engineering6 MIN READ

Signatures are the harder half of the post-quantum migration

Key exchange migration is largely a configuration change. Signature migration runs into certificate sizes, fixed-width image headers, verifiers you cannot update and archives that must stay verifiable for decades.