21 stories
Show: Summaries / Headlines only
An ML-DSA-44 signature is 2,420 bytes, larger than many DNS implementations allow in one UDP packet. Cloudflare's engineers wrote that signing servers, registrars, registries, and the DNS root must all adopt the algorithm too.
Researchers have published flaws in new post-quantum code since 2024. For long-term keys, a classical algorithm beside the new one limits the damage, at the cost of extra data, code, and a second migration. The NSA does not require hybrids.
Poseidon was designed to be cheap inside zero-knowledge proofs. Justin Drake attributed the switch to faster proof systems for standard hashes. The hash-based design that used Poseidon has not been deployed on Ethereum.
Google marked post-quantum key exchange as done on its API endpoints and internal service traffic. It set certificate, identity, and hardware milestones through 2028 and said it projects most services will meet their domain dates.
RFC 10024 marks only X25519MLKEM768 of its three hybrid groups as recommended and marks two pre-standard Kyber code points as discouraged. Server authentication, which uses certificate signatures, is unchanged.
Seventy-one percent of responding institutions had neither conducted nor planned a test of post-quantum cryptography. The HKMA framed its 2030 goal as an aim for the whole sector and listed four first steps banks can take now.
Managing Director Chia Der Jiun said MAS will issue supervisory expectations later in 2026, with progressive timelines for cryptographic inventories, migration priorities, and the capabilities to migrate. MAS published a consultation paper with proposed timelines on November 6.
Executive Order 14412 set December 2030 and December 2031 post-quantum deadlines for federal agencies, and NSA dates bind national security systems. Outside those systems, the measures reviewed here would date a company's duty through a FAR rule not yet proposed.
Michael Kratsios cited a 2028 Energy Department goal and NIST's plan to finish its own post-quantum transition by the end of 2027. Most of the agency programs he cited had been announced in the seven weeks before the summit.
In a FINMA survey of 60 Swiss banks, insurers, asset managers, and market infrastructures, 72% had neither planned nor implemented quantum-safe measures. FINMA's guidance has no legal force, but FINMA said existing risk-management rules already cover quantum risk.
