NIST explores next steps to address agility under post-quantum transition effort insidecybersecurity.com
How do NIST and agencies make crypto-agility real across OSes, hardware, and bureaucracy during the PQC transition?
3 comments
Is this just “ship update mechanisms everywhere” with a new PQC label, or are they tackling hardware roots too?
Hardware roots, or itll be checkbox theater that vendors charge agencies extra for.
Hardware roots, or it turns into procurement theater with a PQC sticker on it.
The annoying part is the boring glue, firmware updates, attestation, and actually being able to rotate certs without a six month change window.