CISA and the G7 Cyber Security Working Group published a strategic advisory urging organizations and governments to transition to post-quantum cryptography (PQC). The advisory outlines five priorities for adoption, including raising awareness, developing national strategies, advancing R&D, fostering partnerships, and integrating PQC into procurement. The goal is to protect sensitive data and critical assets from future quantum computing threats.
PQC
4 posts
Preparing for the Post-Quantum Era: A Call to Action (2026-09-03) Post-Quantum Cryptography: What’s Next for Edge Security This article provides an overview of the post-quantum cryptography (PQC) landscape, covering newer signature algorithms (FN-DSA/Falcon, SLH-DSA), composite signatures, and the IETF PLANTS working group's development of Merkle Tree Certificates to address TLS handshake bloat. It notes that while symmetric encryption remains quantum-safe, the industry is accelerating PQC adoption timelines to 2029 in response to research suggesting cryptographically relevant quantum computers may arrive sooner than expected.
Quantum Risk Explained: What, When, How? The emergence of cryptographically relevant quantum computers (CRQCs) poses a critical threat to modern public-key encryption. Threat actors are already conducting 'Harvest Now, Decrypt Later' (HNDL) operations to intercept and store long-lived sensitive data, necessitating immediate organizational planning for post-quantum cryptography (PQC) migration and cryptographic agility.
Post-Quantum Cryptography Beyond TLS: Remain Quantum Safe The article highlights the critical need to transition various network protocols, including SSH, IPsec, OpenPGP, and DNSSEC, to post-quantum cryptography (PQC) to mitigate the 'harvest now, decrypt later' threat. While TLS and SSH have clear upgrade paths with hybrid key exchanges, protocols like DNSSEC face complex architectural challenges due to signature sizes and UDP limitations.
