Shivam Sharma

The CA/Browser Forum has locked in a phased drop to 47-day certificate lifespans by 2029. Here is the operational playbook to prepare, from inventory to automation to fallback planning.

Each cloud manages certificates differently, and none see the others. Here is how certificate sprawl happens across AWS, Azure, and GCP, and how to build one unified inventory that covers all three.

A practical guide to enabling X25519MLKEM768 hybrid key exchange in TLS 1.3, including server configs, client support, handshake size impact, and the gotchas that break real deployments.

Quantum computers threaten RSA and ECC, but AES is a different story. Here is what Grover's algorithm does to symmetric encryption, why AES-256 survives, and what to do about AES-128.

How financial institutions use Cryptographic Bill of Materials (CBOM) to meet PCI DSS 4.0 crypto requirements, protect payment keys, address HNDL exposure for transaction data, and plan post-quantum migration in alignment with SWIFT CSCF and regulatory expectations.

How government agencies and defense contractors use CBOM to achieve CNSA 2.0 compliance, meet FedRAMP cryptographic requirements, address CMMC 2.0 intersection, deploy air-gapped crypto inventory, and respond to NSA quantum readiness guidance.

How healthcare organizations use Cryptographic Bill of Materials (CBOM) to meet HIPAA encryption requirements, protect PHI with long retention periods, address medical device cryptography, secure HL7/FHIR exchanges, and plan post-quantum migration for health systems.

Comprehensive comparison of cryptographic discovery methods — static code analysis, binary scanning, network traffic analysis, cloud API enumeration, configuration scanning, and runtime tracing (eBPF). Strengths, weaknesses, what each finds vs. misses, and how to combine them for complete visibility.

Complete guide to deploying hybrid cryptography combining classical and post-quantum algorithms. Covers TLS hybrid key exchange (X25519+ML-KEM-768), hybrid signatures, implementation in OpenSSL 3.x and BoringSSL, browser support, performance overhead, and when to transition to pure PQC.

Comprehensive technical guide to NIST's finalized post-quantum cryptography standards — FIPS 203 (ML-KEM), FIPS 204 (ML-DSA), and FIPS 205 (SLH-DSA). Covers parameter sets, security levels, performance benchmarks, use cases, and implementation status across major cryptographic libraries.