---
id: 1303
title: "Building cryptographic agility into Sigstore"
source_domain: blog.trailofbits.com
source_url: "https://blog.trailofbits.com/2026/01/29/building-cryptographic-agility-into-sigstore/"
published_at: "2026-01-29 12:00"
tags: ["supply-chain", "open-source", "cryptography", "post-quantum", "cryptographic-agility", "trail-of-bits", "sigstore", "code-signing", "software-signing"]
phying_url: "https://phying.com/item/1303"
lang: en
---

# Building cryptographic agility into Sigstore

## Summary

Trail of Bits and Sigstore added cryptographic agility to software signing: a centralized algorithm registry, configurable restrictions in Rekor/Fulcio, Cosign support, and post-quantum LMS/ML-DSA.

## Intelligence Metadata

- **Sources:** blog.trailofbits.com
- **Published:** 2026-01-29 12:00
- **Original:** https://blog.trailofbits.com/2026/01/29/building-cryptographic-agility-into-sigstore/
- **Phying News:** https://phying.com/item/1303