Insights from the QCecuring

How healthcare organizations use Cryptographic Bill of Materials (CBOM) to meet HIPAA encryption requirements, protect PHI with long retention periods, address medical device cryptography, secure HL7/FHIR exchanges, and plan post-quantum migration for health systems.

Comprehensive comparison of cryptographic discovery methods — static code analysis, binary scanning, network traffic analysis, cloud API enumeration, configuration scanning, and runtime tracing (eBPF). Strengths, weaknesses, what each finds vs. misses, and how to combine them for complete visibility.

Comprehensive technical guide to NIST's finalized post-quantum cryptography standards — FIPS 203 (ML-KEM), FIPS 204 (ML-DSA), and FIPS 205 (SLH-DSA). Covers parameter sets, security levels, performance benchmarks, use cases, and implementation status across major cryptographic libraries.

Comprehensive guide to key management architecture for post-quantum cryptography. Covers larger key sizes, HSM readiness, key lifecycle changes, certificate size implications, key encapsulation vs. key agreement, storage and bandwidth considerations, and PQC in cloud KMS.

Complete guide to deploying hybrid cryptography combining classical and post-quantum algorithms. Covers TLS hybrid key exchange (X25519+ML-KEM-768), hybrid signatures, implementation in OpenSSL 3.x and BoringSSL, browser support, performance overhead, and when to transition to pure PQC.

Complete guide for evaluating vendor readiness for post-quantum cryptography. Includes qualification checklists, questions to ask about algorithm support, hybrid mode capability, FIPS validation timelines, key management, and performance impact.

Realistic assessment of when Cryptographically Relevant Quantum Computers (CRQCs) will exist. Covers current quantum hardware state (IBM, Google, IonQ), error correction requirements, expert predictions, Mosca's theorem, and how timeline uncertainty affects migration urgency.

Step-by-step guide for migrating TLS infrastructure to post-quantum cryptography. Covers hybrid TLS 1.3 key exchange, certificate algorithm migration from RSA to ML-DSA, performance impact on handshakes, client compatibility, CDN/WAF considerations, and rollback strategies.

Complete guide to CNSA 2.0 (Commercial National Security Algorithm Suite 2.0) compliance — mandated algorithms, deadlines, applicability, gap analysis, and step-by-step readiness assessment for organizations working toward quantum-safe cryptography.

A deep dive into the Harvest Now, Decrypt Later (HNDL) threat — what it is, which nation-states are conducting it, what data is at risk, how to calculate your exposure window, and why CBOM is essential for identifying and mitigating this active threat.