tag: Post-Quantum · 6 items
- Engineer — Learn: Research quantifies why a drop-in ML-KEM/ML-DSA upgrade to Matter CASE breaks Thread’s frame and retransmission constraints; if you own Matter/Thread infrastructure, the hybrid P-256+ML-KEM-512 approach with cached chains is identified as the viable near-term path, but no patch or config change is available today.
- SOC/IR — Skip
- Leader — Skip
- Engineer — Learn: No exploitation pressure or breaking change today, but engineers who own PKI or TLS termination should note Microsoft’s PQC TLS Pilot Program as a near-term evaluation candidate when planning crypto-agility roadmaps.
- SOC/IR — Skip
- Leader — Plan: Post-quantum migration is a multi-year programme with emerging regulatory drivers; leaders should add PQC readiness to the quarterly strategy backlog and consider joining vendor pilot programmes to assess current certificate estate exposure before NIST PQC standards become mandatory in audits.
- Engineer — Learn: Academic research proposing a combined data-provenance watermarking and post-quantum secure aggregation scheme for federated learning; no exploitation signals or patch action required, but relevant if you are designing or hardening an FL pipeline.
- SOC/IR — Skip
- Leader — Skip
- Engineer — Learn: Useful methodology for teams validating ML-KEM library choices (noble/post-quantum, liboqs, Go stdlib) against NIST ACVP corpora; no running-system changes required today, but informs how to structure PQC migration testing.
- SOC/IR — Skip
- Leader — Skip
- Engineer — Learn: Useful background for engineers tracking isogeny-based PQC alternatives post-SIDH break; POKE-based KEM shows significant performance gains over terSIDH and CSIDH, but no NIST standardization yet — no migration action warranted today.
- SOC/IR — Skip
- Leader — Skip
- Engineer — Learn: Cloudflare’s 2029 PQC roadmap signals the industry timeline for deprecating classical key exchange; useful context for planning when to prioritize PQC migration in your own TLS and key management stack, but no action required today.
- SOC/IR — Skip
- Leader — Plan: A major infrastructure provider’s 2029 PQC deadline is a useful benchmark for your own cryptographic agility roadmap; use it to set a planning horizon and ask whether your encryption-dependent vendors have comparable commitments.