What the Pentagon’s new post-quantum cryptography directive means for defense contractors defensescoop.com
Pentagon PQC is leaving the lab, this piece tracks how it may become a CMMC-style compliance headache for contractors.
trending18
01 02 DJB critiques the IETF's repeated TLS last call on solo ML-KEM, arguing the process and security story are both wobbly, as usual.03 TLS WG mail backs publishing draft-ietf-tls-mlkem-08, the standalone ML-KEM spec.04 DJB says “informational” RFCs still act like standards, and the solo ML-KEM TLS 1.3 doc is the latest naming game.05 What do the executive orders actually change for PQC migration, procurement, and standards, besides paperwork?06 NIST's PQC migration FAQ covers threat timing, crypto inventories, risk, planning, testing, and validation.07 Cybersecurity for the quantum era: OIST professor among team behind new international standard for post-quantum cryptography oist.jpOIST says ISO picked Classic McEliece for PQC, the code-based scheme with tiny ciphertexts and comically huge public keys.08 DJB revisits the IETF/NSA backdoor fight, less crypto theory and more the bureaucratic ways standards get bent.09 Video on djb, NSA pressure, and IETF encryption standards, because weakening crypto was apparently a committee sport.10 CFP for CT-RSA 2027's Cryptographers' Track, a grab bag of crypto/ZK topics and SoK papers, as conference season does.11 Quantum-safe crypto is now a sovereignty problem, with the usual suspects fretting over vendor lock-in and export controls.12 Cloudflare walks through EO 14412's PQC deadlines, then reminds everyone that crypto agility is now mandatory.13 Daniel J. Bernstein (djb): The NSA, the IETF, and the Fight to Weaken Your Encryption — by Verified Privacy VPN (vp.net) youtube.comWhat did djb think the NSA got the IETF to ship, and why are we still pretending standards bodies are neutral?14 Opinion piece urging PQC migration now, because apparently rekeying the internet is a group project with privacy implications.15 NIST releases working draft guidance on incorporating post-quantum algorithms in federal identity standards insidecybersecurity.comNIST's draft finally moves PQC from key exchange theater into federal identity standards and PIV creds.16 Polemic against proprietary PQC algorithms, with a vendor due-diligence checklist, because apparently cryptography likes mystery meat.17 Repo mapping ENISA EUCC RNG requirements to section numbers, plus host RNG posture checks and a critique of §7.1 tests.18 Nine signature schemes survive another NIST round, because apparently post-quantum standardization needed a sequel.