Skip to main content

Evidence of a post-quantum migration

The decisions​

Which records would let someone else check the inventory, the priority, the vendor answer, and what shipped.

Reading order​

  1. Where to start
  2. Inventory
  3. Priority
  4. Vendor plan
  5. Key establishment
  6. Signatures

The CISA, NSA, and NIST fact sheet, as of 17 August 2023, starts from an inventory of quantum-vulnerable cryptography and from what you ask vendors. Handbook guidance: an assertion is the starting claim, and a configuration is what shows the change.

Supplier evidence packages are onward reading in the Supply Chain Security Handbook. That link is not the authority for a post-quantum date.

Outcome​

The list of records: the inventory, the priority, the vendor answer, and what shipped.

A weak answer​

A slide that says quantum safe.

A stronger answer​

The inventory, the priority note, the tracking sheet, and a configuration or certificate that shows the change.

Sources​

  • CISA, NSA, and NIST, Quantum-Readiness fact sheet, as of 17 August 2023. Fact sheet