PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Cryptographic Agility and Key Rotation

bughunters.google.com | blog | #post-quantum-cryptography | #cryptography | #migration | #google | #pqc | #cryptographic-agility | #key-rotation
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

In the 3rd post in our series on PQC, we discuss how to actually migrate to PQC and explore the role cryptographic agility and key rotation play in this process.
Published
Collected

Related coverage

blog · bughunters.google.com
Why Hybrid Deployments Are Key to Secure PQC Migration
This blog post explores the advantages of hybrid deployments in a world of post-quantum cryptography, looks at the reasons behind our recommendation, and offers implementation guidance.
blog · bughunters.google.com
Google's Commitment to a Quantum-Safe Future: Why PQC is Google's Path forward and not QKD
Google shares its assessment of Quantum Key Distribution (QKD) and explains why post-quantum cryptography (PQC) is the more mature, scalable path to a quantum-safe future.
blog · bughunters.google.com
Google's Threat model for Post-Quantum Cryptography
Google outlines its threat model for post-quantum cryptography, weighing risks such as harvest-now-decrypt-later attacks and guiding the migration from classical algorithms to PQC.
blog · wiz.io
Breaking Down the White House’s Actions on Post-Quantum Cryptography Readiness
Breaks down Executive Order 14409 and OMB memo M-26-15: federal agencies must migrate high-value assets to post-quantum key establishment by December 31, 2030, with contractor implications.
blog · wiz.io
State of Post Quantum Cryptography
Analyzes post-quantum cryptography with Wiz customer data: Google's 2029 plan, why key exchange (ML-KEM) is mostly solved while signatures are next, and how harvest-now-decrypt-later drives urgency.
blog · wiz.io
From Cryptographic Blind Spots to Post-Quantum Agility: Introducing Wiz for PQC Readiness
Wiz launches PQC Readiness: cryptographic asset discovery across code, cloud, and runtime, exposing legacy SHA-1 and 3DES usage and prioritizing post-quantum migration as HNDL risk grows.
Back