FIPS 140-2 Is Now Historical: What Changes
What the September 2026 FIPS 140-2 transition means for existing systems, new procurements, FIPS 140-3 validation, and PQC adoption.
Guides
17 articles
Post-Quantum DNSSEC: Cloudflare 1.1.1.1 and ML-DSA-44
Cloudflare 1.1.1.1 now validates ML-DSA-44 DNSSEC signatures. Learn what is deployed, what remains a draft, and what operators should test.
OMB M-26-15 Federal PQC Migration Guide
What US federal agencies must include in their M-26-15 post-quantum migration plans, with deadlines, phases, priorities, and evidence.
Post-Quantum SSH: What RFC 10042 Standardizes
What RFC 10042 defines for hybrid ML-KEM SSH key exchange, its three method names, implementation support, limits, and migration checks.
RFC 10024 Explained: Hybrid ML-KEM for TLS 1.3
What RFC 10024 standardizes for hybrid ML-KEM TLS 1.3, including final groups, IANA code points, obsolete Kyber drafts, and migration steps.
Java Post-Quantum Cryptography with Bouncy Castle
Complete guide to implementing PQC in Java using Bouncy Castle. ML-KEM key encapsulation, ML-DSA signatures, code examples, and Maven setup.
How to Test Your Post-Quantum Cryptography Implementation
Practical guide to testing PQC deployments: interop tools, OQS test server, browser dev tools, and TLS handshake capture.
Hybrid Cryptography Explained
Why hybrid mode combines classical and post-quantum algorithms, how long it lasts, the key RFCs and IETF drafts, and when organizations can drop classical.
PQC Migration Timeline for SaaS Companies
Post-quantum migration guide built for SaaS. You control the stack but your customers may not support PQC yet. Phased timeline with backward compatibility.
Apple PQ3 Explained
Technical deep dive into Apple's PQ3 protocol for iMessage. Kyber-1024 + ECDH hybrid, triple ratchet, and what Level 3 security means.
Harvest Now, Decrypt Later
Nation-state adversaries are collecting encrypted data now, waiting for quantum computers to decrypt it. The evidence, who is at risk, and what to do.
Crypto Agility Explained
Crypto agility is the ability to swap cryptographic algorithms without rewriting applications. What it means practically and why PQC makes it urgent.
Cloudflare Post-Quantum Setup
Cloudflare enables PQ key exchange by default for client-to-edge traffic. But origin connections need manual configuration. Here is the full picture.
Is My TLS Quantum-Safe? How to Check in 5 Minutes
Three ways to check if your TLS connections use post-quantum key exchange today. Browser DevTools, command-line tools, and Cloudflare Radar.
NIST PQC Standards Explained
The three finalized NIST post-quantum standards with parameter sets, key sizes, signature sizes, and when to use which. For security engineers, not academics.
OpenSSL Quantum-Safe Configuration
Step-by-step guide to enabling post-quantum TLS key exchange on your server with OpenSSL 3.5+. Nginx and Apache configurations included.
What Is Post-Quantum Cryptography? A Practical...
Post-quantum cryptography replaces algorithms that quantum computers will break. What is actually changing, why now, and what harvest now decrypt later means.