Mobile OS Post-Quantum Cryptography: Android vs iOS in 2026
When Apple launched iMessage PQ3 in February 2024, coverage declared that iPhones were now quantum-safe. When Google deployed hybrid post-quantum TLS…
Blog
Insights & News
Expert analysis, quantum security news, and industry developments from QSECDEF. 175 articles across insights and news.
Articles — page 1 of 6
Quantum-Secure Messaging: Signal Protocol and the Post-Quantum Future
Signal, iMessage, and WhatsApp all made post-quantum announcements between 2023 and 2024. Each application addressed a specific cryptographic…
Enterprise Post-Quantum VPNs: A Deployment Comparison
Post-quantum VPN migration is not a single task. Enterprise VPN infrastructure spans three distinct protocol families, each with a different…
Quantum Cryptography Misconceptions: What Practitioners Get Wrong
The terminology around quantum security has drifted badly enough that practitioners working from plausible-sounding assumptions are making procurement…
CNSA 2.0 Rollout Timeline: A Supplier's Perspective
The 2025 milestone dates in the CNSA 2.0 transition timeline are not future planning items. For any defence supplier with an active national security…
Financial Institution PQC Readiness: The Five Pillars
Financial institutions face a more complex PQC readiness problem than most sectors. The combination of live regulatory obligations, unusually long…
The Mosca Inequality Calculator: A Walkthrough for CISOs
CISOs are asked to justify PQC migration investment against uncertain timelines, crowded security budgets, and a board that wants to understand the…
Defence Supplier PQC Compliance: CMMC Readiness
CMMC has been a moving target for years. The final rule (32 CFR Part 170) was published in October 2024 and became effective December 2024. Most…
Quantum-Resistant Blockchain: Rollup and L2 Security Considerations
Writing about quantum threats to blockchain almost always starts at Layer 1: Shor's algorithm breaks secp256k1, Bitcoin and Ethereum wallet keys are…
CNSA 2.0 Suite Implementation: A Detailed Walkthrough
The CNSA 2.0 preferred dates for software and firmware signing (2025) and network equipment (2026) have either passed or are current. This article…
Hash-Based Signatures: When XMSS and LMS Beat ML-DSA
Most post-quantum migration guidance directs organisations to ML-DSA for all signature needs. For firmware signing pipelines, long-lived code signing…
Digital Signatures in the Post-Quantum Era: A Non-Technical Explainer
Every time you sign a contract digitally, download a software update, or visit a website over HTTPS, a digital signature is working in the background.…
FIPS 203 and 205 Implementation: C and Rust Library Maturity
Selecting ML-KEM or SLH-DSA as your post-quantum algorithm is the easy part. This article maps which C and Rust libraries implement the final FIPS 203…
Quantum Key Distribution in Government Deployments: What Works, What Doesn’t
Government security programmes increasingly encounter QKD in briefings and vendor pitches, often without a clear picture of where it has been…
PQC Migration Strategy Roadmap for Cybersecurity Leaders
Most organisations that have reached the CISO’s desk on PQC have the same problem: they have a list of exposures and no structure for acting on it.…
ML-KEM vs X25519: A Comparative Performance Analysis
If you are evaluating hybrid post-quantum TLS deployment for production infrastructure, this article provides the numbers: CPU cycles, key sizes,…
Critical National Infrastructure: A Quantum Security Sector Protection Roadmap
The distinctive concern for CNI operators is not data confidentiality alone. It is operational continuity. A compromised authentication channel in an…
PQC Supply Chain Risk: Evaluating Vendor Quantum Readiness
An organisation's post-quantum cryptography migration plan is only as strong as its most cryptographically exposed supplier. When your own TLS…
NIS2 and Quantum Risk: Closing the Gap in Your Cyber Resilience Plan
NIS2 does not specify algorithms. What it does require, under Article 21(2)(h), is that entities implement the use of cryptography and, where…
DORA Implementation Guide: A Step-by-Step Plan for Financial Services CTOs
The Digital Operational Resilience Act entered into application on 17 January 2025. Unlike GDPR, there was no two-year run-up between publication and…
Quantum Networking Explained: How Quantum Repeaters and Entanglement Distribution Work
Classical optical repeaters work by measuring the incoming signal and re-amplifying it. Measure, copy, transmit. This is precisely what quantum…
Nation-State Quantum Programmes: CNI Implications and Threat Modelling
Critical national infrastructure is a different post-quantum problem. The data lifetimes are longer, the patching cycles are slower, and the…
Key Encapsulation Mechanisms Explained for Security Architects
Most post-quantum cryptography literature describes ML-KEM as "the NIST post-quantum key exchange." That framing is close enough for a headline, and…
Post-Quantum TLS: What Changes and What Stays the Same
Post-quantum TLS migration changes two things: the key exchange algorithm and, eventually, the certificate signature algorithm. The record layer, the…
CNSA 2.0 for Defence Contractors: Which Obligations Apply to Your Programmes
The common problem in defence contractor CNSA 2.0 planning is not a lack of awareness that the requirement exists. It is the gap between knowing it…
What Is a Logical Qubit and Why It Changes the Q-Day Timeline Calculation
Hardware announcements in quantum computing follow a reliable pattern: a large headline number, a spectacular benchmark, and a wave of coverage about…
Why Encrypted Archives from 2018 May Not Be Safe in 2030
The standard reassurance that older data is encrypted and therefore protected does not hold against a CRQC running Shor's algorithm. This article…
The Data Lifetime Problem: When Encryption Decisions Outlast the Threat Model
Every encryption decision is made against the threat model that exists at that moment. The data it protects may need to remain confidential for a…
Symmetric vs Asymmetric Cryptography: How the Quantum Threat Maps Differently onto Each
The quantum threat does not map uniformly onto cryptography. Shor's algorithm breaks asymmetric cryptography completely. Grover's algorithm weakens…
CNSA 2.0 vs CNSA 1.0 for Quantum Key Management: What Is Changing in 2026 and 2027
The 2026 KMS deadline in NSA's CNSA 2.0 roadmap requires all new key management and PKI systems to support ML-KEM-1024 and ML-DSA-87 natively. This…
Stay Informed
Subscribe to the QSECDEF newsletter for weekly updates on quantum security, new lecture recordings, and upcoming events.
Subscribe to Newsletter