Retiring SHA-1 Took More Than a Decade: Lessons for Post-Quantum Planning
Retiring SHA-1 took the public web almost 12 years, and NIST's end date for every use is December 31, 2030. Post-quantum planners can learn…
Why Signature Migration Needs the Longer Runway
A post-quantum plan is two migrations under one label. Sorting the signature work by who has to agree before you can change an algorithm…
Why Telecom PQC Migration Is Harder Than Enterprise Migration
Operators face two problems enterprises mostly don't: most of their cryptography is written by someone else, and every cryptographic relationship has a counterparty they…
Cryptographic Competence: What Your Engineers Need to Know
The post-quantum migration is an engineering problem, not a mathematics problem. Here is what competence looks like across the four domains that carry the…
Crypto-Agility in Practice: A Design Guide for Architects
Crypto-agility is measured in how long a substitution takes and how much of the system it touches. Here is what that means at the…
The Cryptography Inside a 5G Roaming Call
One roaming voice call crosses four trust domains and invokes symmetric, asymmetric and hash-based cryptography at every one. Here is the walkthrough, and what…