PQC in Production — Discovery to Cutover
The hands-on engineering of post-quantum migration: building a Cryptographic Bill of Materials, designing crypto-agility, deploying hybrid key exchange in TLS/SSH/VPN, migrating PKI and HSMs, integrating PQC libraries, sizing performance, validating against FIPS 140-3, and running a staged cutover with rollback — through to constrained and embedded devices.
Certificate Paths
These stages map to Network+, Security+, ISC² CC, and CySA+ exam domains →
NIST National Cybersecurity Center of Excellence
Mapping the Hidden Crypto
IETF — Internet Engineering Task Force
Swapping Engines Mid-Flight
Cloudflare Edge Network
Two Locks on One Door
OpenSSH Project
Securing the Tunnels
DigiCert Certificate Authority
Re-Rooting Trust
Open Quantum Safe Project
Wiring In the New Math
Amazon Web Services Cryptography
Counting the Bytes
NIST Cryptographic Module Validation Program
Proving It's Really Safe
Google SRE — Site Reliability Engineering
The Cutover
Arm / IoT Security Working Group
Quantum-Safe at the Edge