> migration scope stays hand-wavy Not really, the hard part has never been “what algorithm,” it’s “where are the RSA/ECC assumptions buried in your auth, key exchange, firmware update, cert path, HSMs, and long-term archives.” The NSA putting dates on it is useful precisely because scope becomes concrete once you force inventory and replace those choke points, even if the per-system work is ugly.