Encryption Consulting

LMS Post-Quantum Digital Signature technology provides a way to generate and verify digital signatures designed to withstand the security challenges posed by quantum computing. The advancement of quantum computing has raised concerns about the long-term security of traditional public-key cryptographic algorithms such as RSA and Elliptic Curve Cryptography (EC...

Your post-quantum cryptography (PQC) plan is only as strong as your weakest vendor. You can inventory every key you own and still miss the deadline because an HSM firmware update, a PKI platform release, or a code signing service isn’t ready when you are.

The Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC), the U.S. Cybersecurity and ...

Before Microsoft’s July 2026 security update, a vulnerability known as Certighost (CVE-2026-54121) could allow an attacker with a standard domain user account to impersonate a domain controller. The vulnerability affects Enterprise certification authorities (CAs) in Active Directory Certificate Services (AD CS) that have not been patched. The attacker could t...

For two years, a lot of quantum-readiness plans leaned on one comfortable assumption: move to RSA-3072 or P-256, and you have until 2035. As of October 27, 2026, that assumption is gone.

That is the day NIST published the final NIST IR 8547, Transition to Post-Quantum Cryptography Standards. It is the document that turns the 2024 post-quantum standards int...

A user gets a Microsoft Teams message from “IT Support,” opens Quick Assist, and hands over remote control of their laptop. A few steps later, the attacker is holding a certificate that authenticates as a domain controller. Microsoft described this chain in an October 30, 2026 report on two intrusions, and Active Directory Certificate Services (AD CS) was what made it possibl...