How to Check Whether a TLS Connection Is Already Post-Quantum
Your browser, openssl s_client and curl can all show whether a connection negotiated X25519MLKEM768. Here's where to read the group name, what hybrid key…
Building a Crypto Inventory That Covers the Whole Estate
Cryptography hides in places no network scanner reaches. A domain-by-domain guide to finding it, and to what every inventory record has to say once…
Evaluating a Quantum Company: The Claims
A quantum performance claim is scoreable when five things are present: the unit, the population, the conditions, the baseline, and the witness. Here is…
Sovereignty in Quantum Navigation Starts at Acceptance Testing
Quantum navigation and sensing are reaching field trials. The scarce national capability is not building the hardware, it is being able to verify it.…
A Baloney Detection Toolkit for Quantum Claims
Overstated quantum claims rarely contain a lie. They swap one thing for a similar-sounding thing. Six substitutions, and the questions that catch each one.
Getting Vendors to Answer the Right Questions
Most post-quantum vendor questionnaires ask about intent, and intent questions have one correct answer that every vendor knows. Four question shapes that don't.
Five Ways Post-Quantum Migration Programs Fail
Most post-quantum migration programs stall at the seams: certificate profiles, network paths, HSM limits, inventory gaps, and work nobody owns. Five failure modes, and…
Cryptographic Inventory: What Works, What Fails, and Why
A practical guide to running a cryptographic inventory that survives contact with a real environment: what interviews are good for, what tooling catches, and…