62 stories
Show: Summaries / Headlines only
Federal ministries and the BSI want migration owners, binding plans, and a first cryptographic inventory in place by December 31, 2026. They asked public-sector and critical-infrastructure bodies to adopt the dates as bindingly as possible.
NIST, the NSA, Britain's NCSC, the EU, Canada, and Australia all ask organizations to start post-quantum migration now. None claims a code-breaking quantum computer exists or gives it a known date. Their deadlines do not depend on either claim.
The circuit uses 24% fewer logical qubits and 18% fewer Toffoli gates than Google's low-qubit design. It covers a step that Shor's algorithm repeats. In a wider test, it failed 111 times in 360,960 additions.
Europol's cybercrime center named wallet signing keys as the main quantum exposure for cryptocurrencies. In a second report with a Madrid university, Europol rated government data at high risk from harvest-now, decrypt-later collection.
Under NIS2 and DORA, regulated entities must keep cryptography policies that track the state of the art and advances in codebreaking. The EU's 2030 and 2035 post-quantum dates remain recommendations, and the proposed NIS2 amendment has not passed.
None of the 24 agencies GAO audited had fully carried out three preparatory steps for post-quantum migration. At six sampled agencies, none could document the algorithms listed for every sampled system.
The cabinet expects a quantum computer able to break public-key encryption between 2029 and 2035. Ministries are to fund the migration from existing budgets at first. The cabinet will adjust its ambitions if it cannot find the money.
No key for a real Classic McEliece parameter set has been publicly recovered. Even with a memory charge, one researcher's estimate is still below the claimed levels. BSI says hybrid deployments remain at least as secure as their classical half.
Most first-day findings were bugs in submitted code, found with AI assistance. On day two, other researchers posted attacks on designs including Tins, Facto-DSA, MoFang, and Neulaser. None of the attacked designs has been standardized or deployed.
Apple expects its draft rules to require three cosignatures per certificate and seven-day validity, with operator applications opening by late summer 2027. For email, Apple will accept root certificates that pair ML-DSA with ECDSA or RSA.
