Crypto inventory & migration roadmap

A staged, tested move to post-quantum standards: hybrid first, key exchange before signatures, with nothing broken on the way.

PQC← All IT, Cybersecurity & PQC Consulting services

Try the demo Ask about this

What this is.

NIST published the replacement standards in 2024: ML-KEM for key exchange, ML-DSA and SLH-DSA for signatures. Browsers and servers already support hybrid key exchange. The work now is migration: knowing what to change, in what order, without breaking anything.

I turn the inventory into a roadmap: hybrid key exchange on external services first, then long-lived signing keys, then the rest, with testing at each step and vendors held to dates.

What you get

  • Migration roadmap with phases and owners
  • Hybrid TLS rollout plan for external services
  • Long-lived key strategy: roots, code signing, firmware
  • Vendor and dependency tracking
  • Testing plan and rollback for each phase

How it runs

  1. Inventory and dependencies
  2. Phase plan
  3. Pilot on one service
  4. Roll out and verify

A good fit if

  • You've done or need an inventory and want the next step
  • You run your own PKI, VPN or code signing
  • Partners require a PQC timeline

See it: why the order of work is fixed

First, why migration can't wait for the quantum computer to exist. Then the standard itself, running live in your browser.

Runs entirely in your browser. Nothing you enter is stored or sent anywhere.

Other IT, Cybersecurity & PQC Consulting services.

Let's talk about this.

Email me about this