Marin Ivezic

You'll see the word unhackable often in QKD marketing. I'm glad we wrote down what to ask instead. For anyone weighing a QKD product, I'd add two government views we quote. The NSA writes that the actual security provided by a QKD system is the more limited security that can be achieved by hardware and engineering designs. The UK's National Cyber Security Centre notes that QKD protocols do not provide authentication, so they have to be deployed alongside cryptography that does. My favorite example in the article is KyberSlash. In 2025, ten researchers showed that several Kyber implementations, the official reference code among them, leaked secret key information through a timing side channel. They recovered secret keys within minutes for one variant. Maintainers patched the code quickly. A security proof applies to an algorithm as written, and side channels are outside it. Before your next vendor call, I'd write the three questions at the top of the datasheet. Then look up any certificate number on it in the CMVP search or on the Common Criteria portal. Each CMVP certificate lists the module name, version, security level and tested configuration. I'd check that the version and configuration match the product you're actually buying. quantumacademy.com/market-re… #CyberSecurity #QKD

If someone tells me their data is safe from quantum attack because it was AES-encrypted, this is the article I'd send them. In a TLS session, the AES keys are derived from a secret the two sides set up with public-key cryptography. An attacker who recorded the session and later gets a cryptographically relevant quantum computer works out the X25519 private value. From there they recompute the shared secret and derive the AES keys. Forward secrecy is no defense here, because it depends on nobody being able to compute a private value from its public share. For sequencing, I'd replace key establishment first wherever recorded traffic has to stay confidential. A recording made now can be decrypted once such a computer exists. Forging a signature becomes possible only after that day. Still, any system that verifies signatures after that day has to trust a post-quantum key before it. I'd also do the exercise at the end with one of your own systems. Write down the algorithm at each of the four steps, then list every step that uses RSA, Diffie-Hellman or an elliptic curve. quantumacademy.com/post-quan… #PostQuantumCryptography #Cryptography

EU member states agreed a coordinated post-quantum roadmap in June 2025. Under it, high-risk use cases are to be migrated by the end of 2030. The Cyber Resilience Act's security requirements for products apply from December 2027. We'll go through those dates in PQC Compliance: European Union, along with DORA, NIS2 and what Germany's BSI and France's ANSSI add. It's two hours, live online on November 27, 2026, from 10:00 to 12:00 Brussels time. I'd especially like compliance officers and DORA and NIS2 program leads to join. We go through three modules: What Regulators Everywhere Ask For, EU Requirements in Detail and Demonstrating Compliance in the EU. Everyone who takes it gets a course handbook with every slide and its notes, a PDF copy of my book Quantum Ready, 180 days of access to the on-demand course and a certificate of completion. quantumacademy.com/news/pqc-… #DORA #NIS2

I'd like more bank and market infrastructure people to see one figure from a discovery exercise published on PostQuantum.com. The course author's team counted more than 30,000 unique cryptographic functions across nine independent parties in one cross-border payment from a mobile banking app. They present it as an order of magnitude rather than a benchmark. We'll teach the Quantum-Safe Financial Services Intensive live online on December 9 and 10, 2026, with sessions for EMEA and Asia-Pacific and for the Americas. I'd bring someone from third-party risk management. Many of the sequencing decisions in the workshop depend on vendors. What's on the program: - Quantum-Safe Financial Services Intensive, a program planning workshop in which banks fit PQC migration into existing governance and plan the transaction chains they share with counterparties. - Quantum-Safe Financial Services, a focused session on quantum risk and PQC migration in banking, capital markets and insurance, built on the PQC Migration Framework. quantumacademy.com/news/fina… #FinancialServices #PostQuantumCryptography

Quick heads-up: we've got PQC Compliance: European Union on the Quantum Academy calendar on Friday, December 11, 2026, 09:00 to 11:00 UTC (10:00 to 12:00 Brussels time), live online. If you lead DORA or NIS2 work, I'd come to this one: we work through each EU instrument plus the dates Germany's BSI and France's ANSSI add. Under DORA's technical standards, financial entities must plan to update their cryptography as cryptanalysis develops. Here's how it works: we teach it live online in one two-hour session. We go through three modules: What Regulators Everywhere Ask For, EU Requirements in Detail and Demonstrating Compliance in the EU. In the course, you'll: - Classify use cases as high, medium or low risk in the roadmap's terms - Write or update the encryption policy DORA requires - Explain what the coordinated roadmap, DORA, NIS2 and the Cyber Resilience Act require Everyone who takes it gets a course handbook with every slide and its notes, a PDF copy of my book Quantum Ready, 180 days of access to the on-demand course and a certificate of completion. A live online seat costs US$379. If you'd rather train your whole team, we also run it privately: [email protected]. Details: quantumacademy.com/event/pqc… #DORA #NIS2

'When should we invest in quantum computing?' The answer depends on your industry, and on whether you look at demonstrated results or announced targets. On Thursday, December 10, we're running a free webinar to go through it industry by industry: finance, chemicals and materials, health, energy, telecoms, and government and defense. We close with how to test a vendor's claim of quantum advantage. Bring the claims you've been sent. 13:00 UTC (08:00 New York, 14:00 Berlin, 21:00 Singapore). Free, one hour. Everyone who registers gets the recording. What we'll go through: • In each industry, which use cases you can back with evidence today • How to read a vendor's timeline and tell a demonstration from a roadmap • How to test a claim of quantum advantage • Which milestones to watch for in your industry quantumacademy.com/event/web… #QuantumComputing

In IT, we replace a laptop every few years. In OT, the PLC you install today might still be in service in 2066. So OT teams can't follow the IT migration schedule. Some devices can't be upgraded at all. On Tuesday, November 24, we're running a free webinar on quantum-safe OT. We'll sort the fleet into upgrade, patch and replace. We'll start with the trust anchors: firmware signing, device identity and remote engineering access. And we'll cover what to do with the devices you can't upgrade. If you look after control systems at a utility, a plant or any critical infrastructure, I'd love to see you there. 18:00 UTC (13:00 New York, 19:00 Berlin). Free, one hour. Everyone who registers gets the recording. What we'll go through: • How to sort an OT fleet into devices you can upgrade, devices you can patch and devices you have to replace • Why to start with firmware signing, device identity and remote engineering access • Interim controls for devices that cannot be upgraded • How to write post-quantum commitments into OT procurement and vendor contracts quantumacademy.com/event/web… #OTSecurity #PQC

I'd bookmark this one. We collected the exact places to look in Chrome, Firefox, openssl s_client and curl, so you can see X25519MLKEM768 on your own connections. A classical result has three possible causes. The client may not support the group, the server may not offer it, or a middlebox may have answered. If your site is served through a CDN, in the browser you're looking only at the visitor-to-edge connection. The edge-to-origin handshake is separate, and I'd test it on its own. I'd set priorities by how long the data has to stay confidential. A session that must stay secret for ten years needs key exchange that resists quantum attack for ten years from the day it ran. Signatures have a different deadline. A forged handshake signature helps only an attacker who impersonates the server while the handshake is in progress. Keys that stay trusted for decades, such as root and firmware-signing keys, still need post-quantum replacements well before a cryptographically relevant quantum computer exists. quantumacademy.com/post-quan… #PostQuantumCryptography #TLS

Anyone who works in payments knows no single organization controls the chain. Card schemes and payment system operators set requirements as conditions of market access. Point-of-sale terminals and ATMs are typically replaced every 7 to 15 years. We'll teach the Quantum-Safe Payments Intensive live online on November 24 and 25, 2026, for EMEA and Asia-Pacific. I'd send a mixed group from one organization, with at least one person from payment HSM operations. Over two four-hour sessions, participants draft a program plan and a year-one roadmap. The instructor reviews each plan before the end. We go through eight modules, starting with The payment chain and who controls it and ending with Year-one plan, KPIs, and the asks. Everyone who takes it gets a course handbook with every slide and its notes, a PDF copy of my book Quantum Ready and a certificate of completion. If you need sign-off from your manager, there's a justification letter on the course page you can adapt. quantumacademy.com/news/paym… #Payments #PostQuantumCryptography

I'm proud to welcome Joe Spencer to Quantum Academy as a Senior Instructor. Many people know Joe from his market analysis at Global Quantum Intelligence. Fewer know how hands-on his career has been. He started as a scientist at Dstl, where he helped sponsor and shape about 40 PhD projects in quantum science and technology. At QinetiQ, he led a laser physics team and worked on systems integration for the UK's DragonFire laser weapon. He has since advised the UK Ministry of Defence and the UK Space Agency on quantum technology. In his 2026 market outlook, Joe argued that quantum sensing is much closer to practical deployment than large-scale, fault-tolerant quantum computing. If you work in defense or national security, learn from him. He also won the Institute of Physics' Three Minute Wonder final in 2016, so expect clear explanations. Welcome to the team, Joe. quantumacademy.com/news/joe-… #QuantumSensing #QuantumTechnology

Fun fact: if you're reading this in Chrome, you've probably already used post-quantum cryptography today. Google made the X25519MLKEM768 hybrid the default in Chrome, and Cloudflare terminates it at the edge. In a hybrid, you get a post-quantum algorithm and a classical one together, so an attacker has to break both. Your own systems are the harder part. Germany and France recommend hybrid deployments. Australia doesn't. And whatever you deploy now, you'll need to change again. So on Monday, November 16, we're running a free webinar on hybrid key exchange in TLS and VPNs, and on designing systems so the next algorithm change doesn't mean a rebuild. 20:00 UTC (15:00 New York, 12:00 San Francisco, 21:00 Berlin). Free, one hour. Everyone who registers gets the recording. What we'll go through: • How hybrid key exchange works in TLS 1.3 and in VPNs • Why governments disagree on hybrid deployment, and how to plan for more than one position • Design patterns for changing algorithms without a rebuild • What to test before you turn hybrid key exchange on in production quantumacademy.com/event/web… #PQC #CryptoAgility

Some people preparing for PQCS can spare a few hours a week. Others would rather finish in three days. So we're teaching the PQCS Bootcamp both ways, live online from November 14, 2026, with a Sunday cohort for Saudi Arabia and Kuwait as well. I'd recommend it to people who already know the basics of cryptography and the quantum threat. It's 20 hours, with the PQCS exam included in the seat. If you're new to both, I'd take Post-Quantum Foundation and PQCS Training separately, for 28 live hours in total. We go through nine modules, starting with The Quantum Threat to Cryptography and ending with Cryptographic Agility. Everyone who takes it gets a course handbook with every slide and its notes, a PDF copy of my book Quantum Ready and a certificate of completion. If you need sign-off from your manager, there's a justification letter on the course page you can adapt. quantumacademy.com/news/pqcs… #PQCS #PostQuantumCryptography

We're teaching PQC Compliance: Saudi Arabia at Quantum Academy live online on Tuesday, December 8, 2026, 07:00 to 09:00 UTC (10:00 to 12:00 Riyadh time). If you're a CISO or chief risk officer at a SAMA-licensed bank, this is the course I'd book first, since SAMA set deadlines and committee duties in its circular. This one is for chief risk officers, CISOs and compliance teams at SAMA-licensed banks, finance and payment companies and financing support entities. Here's how it works: we teach it live online in one two-hour session. We go through three modules: What Regulators Everywhere Ask For, Saudi Requirements in Detail and Demonstrating Compliance in Saudi Arabia. In the course, you'll: - Explain each requirement in SAMA's circular and its deadline - Build procedures to identify and classify every cryptographic asset, as SAMA requires - Run the enterprise quantum risk assessment with action plans Everyone who takes it gets a course handbook with every slide and its notes, a PDF copy of my book Quantum Ready, 180 days of access to the on-demand course and a certificate of completion. A live online seat costs US$379. Details: quantumacademy.com/event/pqc… #SAMA #PostQuantumCryptography

Quantum Security for Executives is based on my book Quantum Ready, so I'm glad to see it on the schedule. We'll teach it live online on November 23, 2026, for Europe, the Middle East, Africa and Asia-Pacific. It's four hours for CISOs, CIOs, CTOs and the risk and compliance people who need the security context before they take on PQC governance. No technical background needed. I especially like the last module, where participants learn to tell a credible migration program from a vendor-driven one. If you need sign-off from your manager, there's a justification letter on the course page you can adapt. quantumacademy.com/news/quan… #QuantumSecurity #CISO

Wednesday's free webinar is for anyone at a bank, insurer or payment firm who'll face a supervisor's quantum-safe questions in 2027. We'll go through what the G7, CISA, MAS and HM Treasury have said so far. Then we'll get practical: which systems first, and how to bring your vendors along. What we'll go through: • Which systems supervisors expect you to migrate first, and the evidence of progress they will look for • How to bring vendors and third parties into the plan through procurement requirements • What to have ready for supervisory conversations in 2027 Wednesday, November 4, 13:00 UTC. Still time to register: quantumacademy.com/event/web…

Boards are starting to ask about quantum risk. Are we compliant? What exactly is our risk exposure? When is Q-Day? Often neither the directors nor the executives who brief them have dealt with these questions before. And there's no established guidance yet on what a good answer looks like. So let's try to work it out together. Today at 20:00 UTC we're running a free webinar on briefing the board on quantum risk, and you can still register: quantumacademy.com/event/web… We'll go through the four decisions a board makes about quantum risk: exposure, timing, budget and accountability. For each one, we'll take the question directors usually ask and swap it for one the board can act on. Take "When is Q-Day?" Nobody can give a board a reliable date. A better question is "Which deadline applies to us first, and how many months do we have to spare?" That one has an answer. The EU wants high-risk systems migrated by 2030, and US federal high-value systems need post-quantum key establishment by the end of 2030. We'll teach for about 45 minutes and keep the last 15 for your questions. If your board has asked you something about quantum that you weren't sure how to answer, bring it. Or put it in the comments here, and we'll try to cover it tonight. It starts at 15:00 in New York and 21:00 here in Central Europe. Everyone who attends live receives a certificate of attendance for 1 CPE credit. Everyone who registers gets the handbook at least, so register even if you can't make it. #PQC #BoardOfDirectors #CyberRisk

Two days to go before the Quantum-Safe Government and Defense Intensive at Quantum Academy, live online for the Americas. If it's on your list, booking is still open. This one is for program managers, PQC migration leads, CIO or CISO sponsors, accreditation staff, system owners and contracting officers at agencies and defense suppliers. Here's how it works: we teach it live online in two four-hour sessions on consecutive days, eight hours in all. You'll: - Trace contractual flow-down to the suppliers it applies to and write the contract language for it - Apply NSM-10 inventory and planning obligations without producing an inventory nobody uses Everyone who takes it gets a course handbook with every slide and its notes, a PDF copy of my book Quantum Ready and a certificate of completion. A live online seat costs US$1,499. Details: quantumacademy.com/event/qua… #PostQuantumCryptography #CNSA2

I'm really proud to welcome Obada Alia to Quantum Academy as a Senior Instructor. At JPMorgan Chase, Obada was first author of the 2024 study in which his team secured site-to-site VPN tunnels with keys from a QKD system. They ran about 100 Gbps between two of the bank's data centers in Singapore, over 46 km of deployed fiber, for 45 days without interruption. He also holds a PhD in optical and quantum communications from the University of Bristol. Obada is the person I'd want in the room for any QKD decision. If you're deciding whether to deploy QKD alongside post-quantum cryptography, you can now learn from someone who has made it work between a bank's data centers. Welcome to the team, Obada. quantumacademy.com/news/obad… #QuantumKeyDistribution #PostQuantumCryptography

Sectigo, one of the largest certificate authorities, surveyed 500 IT and security leaders. My advice after reading it with Chrome's post-quantum certificate plans: automate certificates end to end before March 15, 2027, and give private PKI its own post-quantum plan now. Key points: - 4% say their certificate management is fully automated. From March 15, new public TLS certificates are valid for 100 days at most. - 18% say preparing for 47-day certificates and preparing for PQC are exactly the same. The 47-day rule applies only to publicly trusted TLS certificates, not to SSH, VPNs, code signing or the cryptography in vendor products. - Replacing certificates more often doesn't change the key exchange, so it gives no protection against harvest now, decrypt later. For that, Google and Mozilla enable hybrid ML-KEM by default in Chrome and Firefox. - For the public web, Google's Chrome team chose Merkle Tree Certificates over post-quantum X.509. Owners of private PKIs can test ML-DSA hierarchies in Chrome 150 today. - NIST published its final transition plan the day before Sectigo's report. It deprecates RSA and elliptic-curve algorithms after 2030 and disallows them after 2035. I teach PKI migration planning in PKI Modernization for Post-Quantum at Quantum Academy. My full analysis: postquantum.com/security-pqc… #PostQuantumCryptography #PQC #PKI #MerkleTreeCertificates #CryptoAgility #TLS #CertificateManagement #CyberSecurity

Briefing a board on quantum risk any time soon? Join our free webinar on Monday. We go through the questions directors ask about exposure, timing, budget and accountability, and how to answer them without overstating or understating the threat. Monday, November 2, 20:00 UTC (15:00 New York). Still time to register: quantumacademy.com/webinars/