The encryption stories enterprise IT leaders actually read.
Volume 341, Issue 3 · 8 articles from 5 issues
ML-KEM and ML-DSA are now pip-installable through Python's cryptography library.
The post-quantum cryptographic standards ML-KEM and ML-DSA are now available in Python's cryptography library and installable via pip.
That removes the main practical friction for developers wanting to experiment with or adopt post-quantum primitives. Schneier's framing is that implementation should happen proactively rather than when the need becomes urgent.
He also emphasizes crypto agility, meaning building systems that can swap algorithms, as the more durable goal than any specific algorithm choice.
A guide to hardening MCP deployments against quantum threats using hybrid post-quantum cryptography.
The article warns that Harvest Now, Decrypt Later tactics already threaten MCP deployments, since current implementations rely on elliptic-curve cryptography vulnerable to Shor's algorithm.
It recommends cryptographic agility by decoupling transport layers from crypto libraries for modular updates.
A hybrid strategy layering NIST-standardized ML-KEM and ML-DSA over existing ECC provides defense-in-depth.
The author argues lattice-based overhead is negligible next to AI inference latency and notes a 2026 executive order requiring critical-infrastructure quantum readiness.
A 2026 guide to securing MCP deployments against both immediate attacks and future quantum decryption.
The article covers security risks in MCP deployments as autonomous AI becomes enterprise infrastructure.
Immediate threats include schema-based manipulation that hijacks agentic logic, insecure STDIO transport that leaks credentials in plaintext, and slow-and-low DDoS on persistent connections.
The long-term Harvest Now, Decrypt Later threat lets adversaries collect encrypted traffic for future quantum decryption.
It recommends a phased mitigation: replacing STDIO with mTLS WebSockets, deploying hybrid classical-plus-ML-KEM cryptography, and adopting cryptographic agility ahead of a 2030 quantum-readiness deadline.
Quantum readiness starts with cryptographic discovery, since most organizations lack a usable inventory.
DigiCert's Rich Hall notes the PQC conversation has shifted from whether to prepare to how quickly organizations can execute a migration expected to take years, with Google and Microsoft pointing to 2029 and a US executive order reinforcing the timeline.
Gartner's 2026 CISO survey found fewer than one in four organizations have made measurable progress and only 8% have a usable cryptographic inventory.
Harvest now, decrypt later attacks make the risk immediate, and 84% of organizations believe some encrypted data is already vulnerable, with financial records and private keys most at risk. Discovery should be the first stage of any readiness program, followed by prioritizing systems protecting long-lived data and building crypto-agility.
An overview of post-quantum cryptography and why it matters for organizations preparing for quantum threats.
This syndicated piece from the Cimcor blog, authored by Lauren Yacono, introduces post-quantum cryptography concepts and their relevance to enterprise security.
It appeared on Security Boulevard as part of the Security Bloggers Network.
The article covers cryptographic methods designed to withstand attacks from quantum computers capable of breaking current public-key algorithms. The topic is framed as a near-term planning concern for security professionals rather than a distant theoretical issue.
Enterprises should adopt NIST-approved post-quantum cryptography now to counter Store Now, Decrypt Later attacks on AI infrastructure.
The article argues for urgent quantum-resistant security in enterprise AI systems, particularly those using the Model Context Protocol (MCP).
Current encryption such as TLS 1.3 relies on RSA and ECC algorithms vulnerable to future quantum computers, leaving data collected today exposed to later decryption.
The recommended approach is a hybrid cryptography model layering NIST-approved algorithms like ML-KEM alongside classical encryption, enabling cryptographic agility as standards evolve.
Beyond transport security, organizations must validate data integrity within MCP deployments to prevent context poisoning attacks.
Post-quantum cryptography is urgently needed to protect AI infrastructure from "Store Now, Decrypt Later" harvesting attacks.
The article argues quantum threats are no longer theoretical but an immediate 2026 concern for organizations deploying AI agents.
RSA and ECC face obsolescence once sufficiently powerful quantum computers arrive, letting adversaries decrypt data harvested today.
The Model Context Protocol is singled out as especially vulnerable because it connects AI agents to sensitive databases and repositories while often assuming internal traffic is safe.
he author recommends a hybrid cryptographic approach layering quantum-resistant algorithms such as ML-KEM atop classical encryption, allowing transition without operational disruption.
It also stresses payload-level security, including data validation and prompt injection prevention, since securing the channel alone is insufficient.
Axiad research finds enterprise confidence in quantum readiness outpaces actual ownership, testing and visibility.
Help Net Security reports research from Axiad on enterprise post-quantum cryptography readiness. Enterprises believe they are prepared for the security challenges quantum computing poses.
The research finds gaps in ownership, testing and visibility that could complicate the actual transition. Nearly half of organizations have nobody designated to lead the PQC migration.
The gap between stated confidence and assigned accountability is the report's central finding.
More from Encryption · All IT section newsletters · This week