Why Post-Quantum Migration Starts Years Before A Quantum Computer Exists
Replacing cryptography takes many years, and some data stolen today will still matter later. Here is why preparation has to begin long before the threat arrives.
KNOWLEDGE HUB / QUANTUM
Preparing For Migration
Cryptographic inventories, crypto-agility and practical steps for moving to post-quantum cryptography.
The Official Clocks: What Governments Expect By 2030 And 2035
The UK, EU, Canada and US have published post-quantum migration dates. They differ in detail but share one shape, which makes them useful for planning.
Running PQC Readiness As A Programme: Governance, Roles And Budget
Post-quantum migration spans years, teams and budget cycles. This article sets out who should own what, what a migration plan should contain and how to keep costs down.
What A Cryptographic Inventory Is, And What It Should Tell You
A cryptographic inventory links each algorithm, key and certificate to a system, an owner and the data it protects. Here is what to record and why a list of algorithms is not enough.
How Cryptographic Discovery Works, And What Each Method Misses
Network scans, code analysis, host inspection and supplier questionnaires each see part of your cryptography. Here is what each method finds, where it is blind and how to combine them.
CBOM Explained: The Cryptography Bill Of Materials And How It Relates To SBOM
A CBOM records cryptographic assets and their dependencies in a standard, machine-readable format. Here is what it contains, how it links to an SBOM and why policy now names it.
Prioritising What To Migrate First: Shelf Life, Exposure And Migration Time
Not every system can move at once. This article explains a simple scoring method from the financial sector and how to turn inventory findings into a ranked, reviewable plan.
Designing For Crypto-Agility
Crypto-agility is the ability to change algorithms without rebuilding systems. This article explains what NIST means by it and the design choices that make it practical.
No-Regret First Moves: Hybrid TLS And Cleaning Up Cryptographic Antipatterns
Some post-quantum work can start now at low cost. This article explains hybrid key exchange in TLS 1.3, where it is already available and which cleanup tasks pay off regardless.
The Hard Parts: PKI, HSMs, Code Signing, Networks, OT And Third Parties
Some areas of post-quantum migration take far longer than others. This article explains why PKI, signing, hardware, network devices, operational technology and suppliers are hard, and how to handle them.
Post-Quantum Readiness For PCI DSS Teams: Card Payments, POS And E-Commerce
Where quantum risk sits in card payments, why point-of-sale migration needs early planning, and the practical work PCI DSS teams can start now.
Eight Myths And Mistakes In Post-Quantum Readiness Programmes
The most common misunderstandings that slow post-quantum programmes down, and what official guidance actually says about each one.