HI All
Yes, its Post Quantum Cryptography - look at the attachment and digest the current state of the world.
This is a global shift in cryptography with no coordination, no shared timeline, and no agreement on what “done” even looks like.
Different countries are moving at completely different speeds under different mandates, with no mechanism to reconcile any of it.
Some are enforcing 2025–2026 deadlines. Others are pushing into the 2030s. Many haven’t even started.
And yet the systems we run, the data we move, and the vendors we depend on operate across all of them at the same time.
The cryptography protecting global data flows is about to be governed by timelines that are years apart.
In some cases, more than a decade.
And it’s not just timing.
There is no consistent view of what PQC actually is.
1️⃣ Definitions vary by country
2️⃣ Interpretations vary by regulator
3️⃣ Implementations vary by vendor
4️⃣ Validation approaches are not aligned
This is incompatibility built into the system.
At the same time, quantum-washing is accelerating.
5️⃣ Vendors are relabeling existing capabilities
6️⃣ Claims are getting ahead of standards
7️⃣ “Quantum-safe” is being used without consistency
THIS IS OUR OPINION
This is a shambles.
8️⃣ No one is controlling the global picture
9️⃣ No one is accountable across borders
🔟 No one is resolving this operationally
1️⃣1️⃣ No one is forcing convergence
So the outcome is not hard to see.
1️⃣2️⃣ Fast jurisdictions inherit slower ones
1️⃣3️⃣ Third-party risk becomes your exposure
1️⃣4️⃣ Cross-region requirements conflict
1️⃣5️⃣ Waiting for alignment puts you behind
This doesn’t fail cleanly.
1️⃣6️⃣ Controls stop being recognised
1️⃣7️⃣ Vendors fail requirements overnight
1️⃣8️⃣ Assessments vary by jurisdiction
And you cannot rely on market claims.
That is the failure mode.
Nothing is coming to fix it in time.
If your strategy assumes alignment or a clean rollout, it is already out of step with reality.
Thanks to Brian C
Read, Digest and Understand the current status.
Regards
Caute_Cautim
Well, at least there is a nice infographic.
This kind of flips things back to a lot of countries waiting for a compelling event.
Until then - likely Vendors will do what they do - when, why and how TBC. I suspect that Chrome will be the lead horse here.
This goes back to Quantum Washing - fibbing/marketing if you like. Browsers will cover PQC TLS 1.3 but going down the line of hybrid or under bonnet using RSA or ECC will be using a hybrid approach.
Even CloudFlare made announcements but actually they were fibbing too.
The Chinese have created their algorithms, perhaps they want to remain private rather than interoperate.
This is rather like COVID for cryptography, some take the regular injections and other suffer.
Regards
Caute_Cautim
A lot of harm will be caused, quantum washing is the best term of effectively putting in place hybrid approach using traditional PKI algorithms.
Regards
Caute_Cautim
The problem being there is no universal or overarching approach or universal standard that all countries have to adopt in order to work or collaborate with each other. This could cause major issues in the coming years unless an overall governing body rules over the top - imagine the effect on Financial Markets if one cannot trade due to interoperability issues or having to go through translation gateways.
Regards
Caute_Cautim
"But for a ha'peth of tar the roof was ruined."
*Sigh*
The standards bodies need to work better, faster and more co-operatively. Though I feel minds and attentions are focused elsewhere at the moment...