Archives April 2026

In short Nobody has a cryptographically relevant quantum computer yet, and hybrid post-quantum key exchange such as X25519MLKEM768 is being rolled out to defang harvest now, decrypt later. CVE-2026-2673 means an OpenSSL 3.5 or 3.6 server whose groups list uses the DEFAULT keyword can quietly settle for a classical curve, leaving a harvestable session. Upgrade […]

Today, on the closing day of the consultation, we submitted our formal response to the Department of the Prime Minister and Cabinet’s Discussion Document on enhancing the cyber security of New Zealand’s critical infrastructure system. Our submission focuses on a gap we identified across all three published consultation documents: there is no substantive mention of […]

The first public post-quantum readiness assessment.