36 stories
Show: Summaries / Headlines only
Absolute promises, theorems without their conditions, quantum in a product's name, and post-quantum labels without an algorithm or certificate recur in security pitches. Each can be checked against a public standard, certificate, agency assessment, or proof.
The IESG asked for final comments on draft-ietf-tls-mlkem, an Informational specification for ML-KEM-only key agreement in TLS 1.3. Its three key-exchange groups are marked in the registry as items the IETF has not evaluated.
Executive Order 14412 set December 2030 and December 2031 post-quantum deadlines for federal agencies, and NSA dates bind national security systems. Outside those systems, the measures reviewed here would date a company's duty through a FAR rule not yet proposed.
Regulators in five countries have acted or warned against products sold on the word "quantum." Generic claims about real technology get case-by-case scrutiny at most. Companies with real results face the same independent tests as everyone else.
Owners of designated critical systems should file migration plans with CSA by March 31, 2027. CSA describes the handbook that contains the dates as informational and not mandatory, and says detailed guidance is still in development.
A passive copy of encrypted traffic taken from a cable, radio link, or satellite beam leaves nothing on the victim's network. Tools marketed against harvest-now, decrypt-later attacks watch for exfiltration, anomalous traffic, or quantum-vulnerable encryption instead.
In a FINMA survey of 60 Swiss banks, insurers, asset managers, and market infrastructures, 72% had neither planned nor implemented quantum-safe measures. FINMA's guidance has no legal force, but FINMA said existing risk-management rules already cover quantum risk.
Shannon proved in 1949 that perfect secrecy for arbitrary data needs a random key at least as long as the data, used once. A product sold as perfectly secret with a shorter or reused key fails that test.
The Forum narrowed more than 1,200 AI-generated nominations to 10. The report's authors wrote that hardware still limits quantum simulation and recommended mandated timelines for post-quantum migration.
National security systems must support the NSA's CNSA 2.0 algorithms. The department ruled out quantum key distribution for quantum resistance and will count solutions as fully post-quantum only with post-quantum authentication.
