NIST recently released PQC algorithmic standards in FIPS-203, FIPS-204, and FIPS-205 (ML-KEM, ML-DSA, and SLH-DSA). We describe what is necessary for enterprises to begin using these algorithms.

Root Causes 415: What Can I Do with These New FIPS PQC Standards?

Repeat guest Bruno Coulliard of Crypto4A joins us to define a quantum-safe (or PQC enabled) hardware security module.

Root Causes 449: What Is a Quantum-safe HSM?

We talk with guest Sofia Celi of Brave Browser, who leads the IETF PQC standardization effort, about the process of setting standards for PQC-compatible digital certificates. We learn about expected timelines, hybrid strategies, the NIST PQC onramp's role, and more.

Root Causes 455: PQC Standardization in IETF

Harvest and decrypt is a well-known attack vector against traditional cryptography prior to PQC. In this episode, we discuss what enterprises should be doing today to defend themselves against harvest and decrypt.

Root Causes 464: Defending Against Harvest and Decrypt

In this episode, guest Alexandre Giron explains what is needed to support post quantum cryptography (PQC) with ACME.

Root Causes 471: ACME for PQC

In this episode we explore the potential PQC future for Microsoft Active Directory Certificate Services, aka MSCA.  We discuss potential paths for Microsoft to take and their consequences.  

Root Causes 482: Microsoft and PQC

We are joined by repeat guest Bruno Coulliard of Crypto4A to introduce Sectigo's new post quantum cryptography (PQC) sandbox.  The PQC sandbox allows you to get quantum resistant certificates in your hands to understand how they work with your systems.

Root Causes 483: Introducing the PQC Sandbox

Apple's ballot to step the maximum term for public SSL certificates down to 47 days has passed in the CA/Browser Forum.  We explain.

Root Causes 486: 47-day Maximum Term Ballot Passes CABF

Changing root store requirements mean CAs must separate their root hierarchies for different certificate types. We explain why enterprises should consider private CA for some use cases.

Root Causes 493: Disentangling Public and Private Certificate Use Cases

We build on our Trust Models discussion to explore how organizations can structure their PKI for the transition to post quantum cryptography (PQC).

Root Causes 495: Trust Models and Post Quantum Cryptography

Guest Sofia Celi (IETF, Brave) returns to talk about important developments in post quantum cryptography. Sofia tells us about her candidate algorithm MAYO and what is happening with the NIST PQC onramp.  We learn about KEM TLS and the status of PQC initiatives in IETF.

Root Causes 497: PQC Update with Sofia Celi

The UK National Cyber Security Centre (NCSC) has released new PQC guidance. We take exception to the dates it gives and explain why.

Root Causes 498: UK NCSC PQC Guidance

Wow. It's episode 500 of Root Causes. Jason and Tim talk about how the podcast has evolved in the past six years, how it remains consistent, and the updates we're making to keep being a valuable resource for our listeners.

Root Causes 500: OMG! 500 Episodes of Root Causes!

In this brief episode we explain why the problem that Shor's Algorithm poses to RSA and ECC can't be solved simply by increasing key size.

Root Causes 501: Why Increasing RSA Key Size Won't Solve the Quantum Problem

Microsoft has finally announced that it will offer an update to Active Directory Certificate Services (ADCS, formerly MSCA) to support post quantum cryptography. We discuss Microsoft's checkered support for ADCS and offer some questions users should be asking. 

PQC

Nicolai