Guides
Practical guides for cryptographic inventory and migration
Use standards-aware, evidence-led playbooks that preserve uncertainty, ownership, interoperability testing, and verification.
Implementation guide
How to build and maintain a cryptographic inventory
A practical guide to inventory scope, evidence, asset identity, confidence, ownership, CBOM export, continuous discovery, and migration use.
ExploreCBOM guide
Cryptographic bill of materials: what a CBOM contains and how to use it
Understand CBOM scope, CycloneDX cryptographic assets, evidence, relationships, confidence, validation, diffs, and post-quantum migration use.
ExplorePQC migration guide
Post-quantum cryptography migration: an operating roadmap
A practical roadmap for PQC inventory, prioritization, standards tracking, vendor dependencies, interoperability testing, rollout, verification, and drift control.
ExploreCNSA 2.0 guide
CNSA 2.0 planning: inventory, policy, migration evidence, and limits
Use current NSA sources to plan CNSA 2.0-related inventory and migration work while keeping applicability, implementation validation, and compliance decisions with the proper authority.
ExploreNIST PQC standards guide
NIST PQC Standards: FIPS 203, 204, 205 and Current Status
Find the finalized NIST PQC standards for ML-KEM, ML-DSA and SLH-DSA, distinguish ongoing work, and use the official standards and errata for implementation.
ExploreQuantum security buyer guide
Quantum Security Companies: A Platform Evaluation Checklist
Evaluate quantum-resistant security platforms by inventory coverage, source evidence, data handling, standards support, migration work and reproducible tests.
ExploreX25519MLKEM768 reference
X25519MLKEM768: codepoints, share sizes, and how to verify a hybrid handshake
Reference for the X25519MLKEM768 TLS 1.3 hybrid group: IANA codepoint, key share sizes, concatenation order, client and server support, and the openssl commands that prove which group was negotiated.
ExploreOpenSSL certificate reference
OpenSSL certificate commands: inspect, check expiry, verify a chain, match a key
A command reference for the certificate work an operator actually does with OpenSSL: read a certificate, check expiry with a threshold, fetch a chain from a live server, verify trust, and confirm a key matches its certificate.
ExplorePQC parameter reference
ML-KEM, ML-DSA and SLH-DSA: parameter sets, key and signature sizes
Byte sizes and security categories for every FIPS 203, 204 and 205 parameter set, what each algorithm replaces, and the size changes that break protocols and hardware assumptions during migration.
Explore