Shivam Sharma

How financial institutions use Cryptographic Bill of Materials (CBOM) to meet PCI DSS 4.0 crypto requirements, protect payment keys, address HNDL exposure for transaction data, and plan post-quantum migration in alignment with SWIFT CSCF and regulatory expectations.

How government agencies and defense contractors use CBOM to achieve CNSA 2.0 compliance, meet FedRAMP cryptographic requirements, address CMMC 2.0 intersection, deploy air-gapped crypto inventory, and respond to NSA quantum readiness guidance.

How healthcare organizations use Cryptographic Bill of Materials (CBOM) to meet HIPAA encryption requirements, protect PHI with long retention periods, address medical device cryptography, secure HL7/FHIR exchanges, and plan post-quantum migration for health systems.

Comprehensive comparison of cryptographic discovery methods — static code analysis, binary scanning, network traffic analysis, cloud API enumeration, configuration scanning, and runtime tracing (eBPF). Strengths, weaknesses, what each finds vs. misses, and how to combine them for complete visibility.

Comprehensive technical guide to NIST's finalized post-quantum cryptography standards — FIPS 203 (ML-KEM), FIPS 204 (ML-DSA), and FIPS 205 (SLH-DSA). Covers parameter sets, security levels, performance benchmarks, use cases, and implementation status across major cryptographic libraries.

Comprehensive guide to key management architecture for post-quantum cryptography. Covers larger key sizes, HSM readiness, key lifecycle changes, certificate size implications, key encapsulation vs. key agreement, storage and bandwidth considerations, and PQC in cloud KMS.

Complete guide to deploying hybrid cryptography combining classical and post-quantum algorithms. Covers TLS hybrid key exchange (X25519+ML-KEM-768), hybrid signatures, implementation in OpenSSL 3.x and BoringSSL, browser support, performance overhead, and when to transition to pure PQC.

Complete guide for evaluating vendor readiness for post-quantum cryptography. Includes qualification checklists, questions to ask about algorithm support, hybrid mode capability, FIPS validation timelines, key management, and performance impact.

Realistic assessment of when Cryptographically Relevant Quantum Computers (CRQCs) will exist. Covers current quantum hardware state (IBM, Google, IonQ), error correction requirements, expert predictions, Mosca's theorem, and how timeline uncertainty affects migration urgency.

Step-by-step guide for migrating TLS infrastructure to post-quantum cryptography. Covers hybrid TLS 1.3 key exchange, certificate algorithm migration from RSA to ML-DSA, performance impact on handshakes, client compatibility, CDN/WAF considerations, and rollback strategies.