Skip to main content

Post-quantum questions for a vendor

The decisions​

What you will ask, and where the answer will be stored.

Reading order​

  1. Vendor plan
  2. Vendor questions
  3. Key establishment
  4. Signatures
  5. Changing algorithms again

The CISA, NSA, and NIST fact sheet, as of 17 August 2023, urges organisations to ask vendors for a quantum-readiness roadmap that describes how they will migrate, including timelines for testing and integration, for both on-premises and cloud products.

Outcome​

Written questions and a tracking sheet.

A weak answer​

"They said they are quantum safe."

A stronger answer​

"The sheet has the product, the question, the answer, the date, and the page we were shown, and it splits key establishment from signatures."

Sources​

  • CISA, NSA, and NIST, Quantum-Readiness fact sheet, as of 17 August 2023. Fact sheet