SAML and OIDC PQC: Identity Provider Migration Considerations
Identity infrastructure sits at the boundary of most enterprise security models. For IAM engineers and security architects, post-quantum migration of…
Blog
Insights & News
Expert analysis, quantum security news, and industry developments from QSECDEF. 224 articles across insights and news.
Articles — page 5 of 8
TLS Handshake Performance with PQC: Real-World Numbers
The concern that post-quantum TLS will slow down HTTPS connections is widespread and, in most production environments, wrong. This analysis covers…
Mobile OS Post-Quantum Cryptography: Android vs iOS in 2026
When Apple launched iMessage PQ3 in February 2024, coverage declared that iPhones were now quantum-safe. When Google deployed hybrid post-quantum TLS…
Quantum-Secure Messaging: Signal Protocol and the Post-Quantum Future
Signal, iMessage, and WhatsApp all made post-quantum announcements between 2023 and 2024. Each application addressed a specific cryptographic…
Crypto Agility: Six Architecture Principles for 2026
Most organisations do not have a cryptography problem. They have a hardcoded cryptography problem. The distinction matters because the solution to the…
Cyber Insurance and PQC Readiness: What Underwriters Are Starting to Ask
Before 2021, most cyber insurance questionnaires asked whether you had a firewall and an incident response plan. Then ransomware losses climbed…
Enterprise Post-Quantum VPNs: A Deployment Comparison
Post-quantum VPN migration is not a single task. Enterprise VPN infrastructure spans three distinct protocol families, each with a different…
Quantum Cryptography Misconceptions: What Practitioners Get Wrong
The terminology around quantum security has drifted badly enough that practitioners working from plausible-sounding assumptions are making procurement…
Quantum-Resistant Blockchain: Rollup and L2 Security Considerations
Writing about quantum threats to blockchain almost always starts at Layer 1: Shor's algorithm breaks secp256k1, Bitcoin and Ethereum wallet keys are…
Hash-Based Signatures: When XMSS and LMS Beat ML-DSA
Most post-quantum migration guidance directs organisations to ML-DSA for all signature needs. For firmware signing pipelines, long-lived code signing…
Digital Signatures in the Post-Quantum Era: A Non-Technical Explainer
Every time you sign a contract digitally, download a software update, or visit a website over HTTPS, a digital signature is working in the background.…
Quantum Key Distribution in Government Deployments: What Works, What Doesn’t
Government security programmes increasingly encounter QKD in briefings and vendor pitches, often without a clear picture of where it has been…
ML-KEM vs X25519: A Comparative Performance Analysis
If you are evaluating hybrid post-quantum TLS deployment for production infrastructure, this article provides the numbers: CPU cycles, key sizes,…
Quantum Networking Explained: How Quantum Repeaters and Entanglement Distribution Work
Classical optical repeaters work by measuring the incoming signal and re-amplifying it. Measure, copy, transmit. This is precisely what quantum…
Nation-State Quantum Programmes: CNI Implications and Threat Modelling
Critical national infrastructure is a different post-quantum problem. The data lifetimes are longer, the patching cycles are slower, and the…
What Is a Logical Qubit and Why It Changes the Q-Day Timeline Calculation
Hardware announcements in quantum computing follow a reliable pattern: a large headline number, a spectacular benchmark, and a wave of coverage about…
Why Encrypted Archives from 2018 May Not Be Safe in 2030
The standard reassurance that older data is encrypted and therefore protected does not hold against a CRQC running Shor's algorithm. This article…
Symmetric vs Asymmetric Cryptography: How the Quantum Threat Maps Differently onto Each
The quantum threat does not map uniformly onto cryptography. Shor's algorithm breaks asymmetric cryptography completely. Grover's algorithm weakens…
Nation-State Quantum Programmes and What They Mean for Enterprise Security
Every security professional has read the headlines about national quantum programmes. What most enterprise security teams have not done is translate…
Quantum Progress 2026: IBM, Google, Microsoft, IonQ Fault-Tolerance Roadmaps
The IBM Nighthawk and Google Willow announcements attracted more executive-level attention than any quantum hardware development in years. Both…
The Case for a Dedicated Quantum Security Membership for Your Organisation
Security teams at financial institutions, critical infrastructure operators, and defence contractors typically carry memberships with ISC(2), ISACA,…
Quantum Security Training for Security Professionals: What to Look For
Quantum security training is a buyer's market in the worst sense: provider marketing has converged on the same vocabulary regardless of actual…
What Can Quantum Computers Actually Do in 2026?
Less than the briefings suggest, but more than the sceptics acknowledge. This article works through the hardware landscape as it stands in 2026,…
How to Include Post-Quantum Cryptography Requirements in a Quantum Security Insurance Review
Underwriter questionnaires are beginning to incorporate quantum security posture into risk assessment. This article maps what a credible answer looks…
Quantum Security CPD: How UK and EU Security Professionals Build a Recognised Portfolio
NIST published FIPS 203, 204, and 205 in August 2024. DORA entered full enforcement in January 2025. The regulatory infrastructure exists. The CPD…
Quantum Error Correction Explained: What It Means for the Q-Day Timeline
Google's Willow chip in December 2024 confirmed below-threshold quantum error correction in hardware for the first time. Understanding what it…
EU Quantum Security Policy 2026: What the Regulations Require
There is no single EU quantum security regulation. There is instead a cluster of four general cybersecurity instruments whose requirements for…
Quantum Computing Progress in 2026: IBM, Google, and the Race to Fault Tolerance
Google's Willow chip and IBM's Nighthawk processor are genuine scientific milestones. Neither changes the 2033-2035 Q-Day central estimate.…
Quantum Security Training Programmes: What a Rigorous Curriculum Should Cover
Available quantum security training clusters at opposite extremes: PhD-depth theory with no migration connection, or awareness briefings that explain…
Zero Trust and Post-Quantum Cryptography: Why One Without the Other Is Not Enough
Zero Trust Architecture removes implicit network trust. Post-quantum cryptography migration removes algorithm vulnerability to a future quantum…
Stay Informed
Subscribe to the QSECDEF newsletter for weekly updates on quantum security, new lecture recordings, and upcoming events.
Subscribe to Newsletter