#PQC and #Data: The Three #Cryptographic Domains Post-quantum risk is about the data being protected, not the algorithms themselves. Every cryptographic dependency maps to one of three data states. If you do not know which state you are protecting, you do not know what you are securing. #Data in #Motion Information moving across networks or channels. TLS sessions, VPN tunnels, 5G key agreement, SWIFT messages, API calls. Quantum relevance: interception and harvest. If the con

When the President issued the Executive Order on Securing the Nation Against Advanced Cryptographic Attacks earlier this week, the internet and linked was flooded with high-level hot takes most of which was nonsense. And high-level mandates don't secure networks. Operational playbooks do. The EO gave the Office of Management and Budget (OMB) up to 90 days to issue official guidance. Instead, the federal government moved in an unprecedented 48-hour turnaround, dropping Memoran