PQC Migration

3 articles on PQC Migration.

• Cryptographic Bill of Materials (CBOM): Step 1 of PQC Migration

  You can't migrate cryptography you can't see. A practical guide to building a Cryptographic Bill of Materials — what to inventory, how to find hidden crypto, how to score by data lifetime, and how the CBOM becomes your post-quantum migration plan.

  June 4, 2026·5 min read

• Post-Quantum Cryptography Deadlines: What 2027, 2030 & 2035 Mean for Your Stack

  NSA's CNSA 2.0 sets a 2027 acquisition deadline; NIST deprecates RSA-2048 and ECC P-256 by 2030 and disallows them by 2035. A plain-English guide to the PQC timeline and what each date actually requires you to do.

  June 1, 2026·5 min read

• Migrating to Post-Quantum Cryptography: A Practical Developer Guide (2026)

  Harvest-now-decrypt-later means quantum-vulnerable data is already being stolen today. A practical, no-hype migration guide: crypto-agility, where ML-KEM and ML-DSA fit, the hybrid rollout, and a concrete inventory-first plan for engineering teams.

  April 2, 2026·6 min read