Quarterly Review · Issue 12
Post-quantum cryptography enters the procurement checklist
The shift from lab concern to board-level requirement happened quietly. First came inventory requests, then vendor attestations, then the harder question: which archives need to survive a future decryption event?
The teams moving fastest are not replacing every primitive at once. They are mapping systems, shortening certificate lifetimes, and choosing migration paths that can be audited by people outside the security group.
For publishers, the lesson is familiar: durable records need visible provenance. The edit trail matters because memory eventually becomes infrastructure.