Preparing Vulnerability Management for the Post-Quantum Era: From Legacy Cryptography Crypto-Agility
summary
ZoomEye and Qualys VMDR data show legacy crypto at scale: 19.3 million RSA‑1024 assets, 8.6M TLS 1.0 and 2.24M TLS 1.1, and internal detections flagging TLS1.0 on 34.5M assets; PQC signals ~714K. A concrete risk model uses Moskowitz inequality (confidentiality lifetime + migration time > time‑to‑break) to justify immediate work. Detection engineering, crypto inventories, PKI/HSM dependency mapping, a 0–4 quantum‑risk score, and policy‑driven deprecation form a vendor‑neutral playbook for prioritized, hybrid migration and monitoring.
AI-written summary · about
chapters (17)
- 0:00Post-quantum vulnerability intro
- 1:09Quantum risk urgency
- 3:58Legacy crypto dominance
- 6:26Quantum basics for security
- 8:13Shor’s/Grover’s algorithm impact
- 9:59Post-quantum crypto overview
- 10:59Legacy crypto deprecation lessons
- 12:05Harvest now decrypt later risks
- 13:49Moskowitz model for migration
- 15:33Patch mentality vs PQC migration
- 16:55Trust system migration
- 17:59Quantum risk scoring
- 21:33PKI dependency migration
- 22:57Detection and governance workflow
- 25:48Vendor-neutral PQ playbook
- 27:58Crypto agility in vendor rules
- 29:44Summary and Q&A
related talks
30mNavigating the Quantum Readiness Journey: Hands-on Guidance for Starting Your Migration-
28mMoving toward a Quantum Security Maturity Index
26mCryptographic Agility: Preparing Modern Apps for Quantum Safety and Beyond
07mEverything You Trust Online Could Break — F5 Labs on Q-Day
46mFrom Theory to Practice: Real-World Lessons in Post-Quantum Cryptography Migration
20mCryptographic Resilience in the Quantum Era
24mTransitioning to Post-Quantum Cryptography in IAM
30mTrust Engineering: Building Security Leadership at Early-Stage...