Crypto-agility gets harder as it moves from protocols to systems and governance, where cost, heterogeneity, coordination, and automation posture start to dominate.

With the second half of the summer comes an abundance of cryptanalytic activity. While it's noisy, it also raises a practical question: what comes next, and how should organizations position themselves, and their budgets, for post-quantum migration?

While many major institutions are calling for organisations to begin post-quantum migration, "quantum threats" still remain a future risk for many of them, competing for attention and budget with more immediate security concerns, as well as vulnerabilities already present in today's cryptosystems.

Bernstein's latest paper gives the perspective that due to implementation bugs, the estimated number of breakable ML-DSA keys could reach the order of 2²⁷ in 2027.

Does the newly published Strategy adequately address the problem of digital communication in the era of advancing quantum technology?

PQC cryptography, for now, doesn't bring simple answers and requires integrators to have broad knowledge of specific cryptographic schemes — and there will be quite a few in the coming decade.