Crypto-Agility in Practice: A Design Guide for Architects
Crypto-agility is measured in how long a substitution takes and how much of the system it touches. Here is what that means at the…
The Cryptography Inside a 5G Roaming Call
One roaming voice call crosses four trust domains and invokes symmetric, asymmetric and hash-based cryptography at every one. Here is the walkthrough, and what…
Beyond BB84: A Field Guide to Newer QKD Protocols
MDI, twin-field, continuous-variable and device-independent QKD each remove a different assumption from BB84. A guide to telling them apart before you design around one.
Tokenization and Quantum Risk: What It Covers, What It Doesn’t
Tokenization narrows the population of records that must stay confidential into the 2040s. It leaves the vault, the detokenization channel, and every signature-based control…
FIPS 140 and What Validation Actually Certifies
A FIPS 140 certificate names one module, one version, one tested environment and one mode of operation. Here is how to read one, and…
Inside ITU-T Y.3800: The Reference Model for QKD Networks
ITU-T Y.3800 turned quantum key distribution from a point-to-point demonstration into a network architecture. What its four layers define, and what they leave open.
Quantum Random Number Generation: Where QRNG Fits in a Key Management Stack
QRNG turns quantum indeterminacy into bits. Here is what that fixes in a key management stack, what it leaves untouched, and how to evaluate…