Foundations
Post-quantum cryptography: the starting point
Distinguish algorithms, protocols, and systems before planning a transition.
New to the topic? Distinguish PQC, protocols, and system-level decisions.
Read guide ↗Knowledge
Explore practical guides to cryptographic discovery, migration priorities, supported options, and validation. Start with the foundations or follow a path matched to the decision in front of you.
For SaaS companies and SMEs, from fundamentals to inventory, validation, and rollout planning.
Educational guidance, supported by primary sources. Standards references do not establish compatibility, certification, or production readiness for a particular system.
Foundations
Distinguish algorithms, protocols, and systems before planning a transition.
New to the topic? Distinguish PQC, protocols, and system-level decisions.
Read guide ↗Discovery
Connect observations to owners, systems, and explicitly recorded unknowns.
Unsure where cryptography is used? Build a bounded inventory with evidence and owners.
Read guide ↗Engineering
Choose a narrow change with explicit dependencies, data formats, and acceptance criteria.
Planning a change? Define a narrow increment, dependencies, and acceptance criteria.
Read guide ↗Last-reviewed dates refer to the recorded technical review, not publication dates or routine visual edits. A date is not a guarantee that every provider capability remains unchanged.
Suggested sequences, not prerequisites or a mandatory course. You can start with the guide that answers your current question.
Understand the threat, cryptographic roles, and standards before considering changes.
Foundations
Distinguish algorithms, protocols, and systems before planning a transition.
Read guide ↗Foundations
Prioritize confidentiality and authenticity without inventing a quantum-computer deadline.
Read guide ↗Foundations
Separate public-key migration from symmetric encryption and hash-function decisions.
Read guide ↗Standards
Read a standard as a precise mechanism specification, not a deployment guarantee.
Read guide ↗Connect observations to owners, priorities, and vendor questions.
Discovery
Connect observations to owners, systems, and explicitly recorded unknowns.
Read guide ↗Planning
Use impact, data lifetime, ownership, and feasibility rather than scanner severity alone.
Read guide ↗Planning
Turn roadmap language into versioned dependencies and clear ownership.
Read guide ↗Plan bounded changes, test behavior, and prepare operational decisions.
Planning
Make supported cryptographic change observable, testable, and operable.
Read guide ↗Engineering
Trace protection through endpoints, proxies, identity, certificates, and key management.
Read guide ↗Engineering
Choose a narrow change with explicit dependencies, data formats, and acceptance criteria.
Read guide ↗Engineering
Define what a successful test proves, and what remains outside its boundary.
Read guide ↗Operations
Move from laboratory evidence to an authorized operational change with explicit stop conditions.
Read guide ↗We prefer primary publications, separate finalized standards from drafts and implementation evidence, and record review dates on each guide. Check linked sources and environment-specific documentation before acting. Report corrections with the guide URL and supporting source; do not include confidential system details.
Suggest a correction ↗No. Start with the fundamentals and data-lifetime guides. Detailed engineering decisions still need appropriate technical expertise and environment-specific review.
No. PQC uses mathematical algorithms on conventional computing platforms. QKD uses physical quantum communication mechanisms with different equipment and operational requirements.
No. Reading guidance is not system validation, certification, or assurance. A real change requires verified support, testing, operational planning, and authorized decisions.
Check official documentation for the exact product, version, protocol profile, and configuration. Separate roadmap statements from available support and tested interoperability.
Revisit affected assumptions and decision records with the system owner. Verify current sources and consider whether inventory, priorities, or testing must be updated.