Retiring SHA-1 Took More Than a Decade: Lessons for Post-Quantum Planning
Retiring SHA-1 took the public web almost 12 years, and NIST's end date for every use is December 31, 2030. Post-quantum planners can learn…
How to Estimate Post-Quantum Migration Effort
Two planners can size the same estate at 2,000 tasks and 120,000. Here is the unit to count, the ratio that catches a bad…
Sequencing the Waves in a Post-Quantum Migration
Scope is not what sinks a post-quantum program. Order is. A practical guide to gates, dependencies, and how to cut a migration wave that…
Staffing a Quantum Project Under Talent Controls
Export controls now reach into who may sit at the bench. A method for classifying the work, partitioning the team, and keeping a quantum…
Five Ways Post-Quantum Migration Programs Fail
Most post-quantum migration programs stall at the seams: certificate profiles, network paths, HSM limits, inventory gaps, and work nobody owns. Five failure modes, and…
Planning the First Year of a Post-Quantum Program
Twelve months will not migrate an enterprise off RSA. It will produce an inventory, a working lab, a PKI that can issue post-quantum credentials,…