Reports

A new arXiv preprint from Chou and Cao (UIUC / NCSA) puts numbers on the network cost of PQC certificate bloat. The headline: TTFB doesn’t degrade smoothly as chains grow — it steps up at two specific points where chain size breaches TCP’s flight windows. Reference: arXiv 2604.24869v1, 27 April 2026. The cliffs The first […]

Good news: nobody has a cryptographically relevant quantum computer yet. Shor’s against RSA-2048 still wants more error-corrected qubits than anyone has shipped, and the public roadmaps remain firmly in “soon” territory. Pop the champagne — your AES-256 backups are safe. For now. The “for now” is doing the heavy lifting, of course, which is why […]

Today, on the closing day of the consultation, we submitted our formal response to the Department of the Prime Minister and Cabinet’s Discussion Document on enhancing the cyber security of New Zealand’s critical infrastructure system. Our submission focuses on a gap we identified across all three published consultation documents: there is no substantive mention of […]

Summary This is the first external, public, sector-wide post-quantum cryptography (PQC) readiness assessment of New Zealand’s critical infrastructure system. Using a purpose-built open-source TLS scanner, we measured whether the public web endpoints of 118 NZ critical infrastructure entities — covering all seven Department of the Prime Minister and Cabinet (DPMC) essential service sectors — will […]

Your encryption has an expiration date. Quantum computers running Shor’s algorithm will be able to break RSA, ECC, and other widely-used public-key cryptographic systems by efficiently factoring large integers and computing discrete logarithms. The threat is already active. Harvest Now, Decrypt Later (HNDT) attacks mean adversaries are capturing encrypted data today — financial transactions, health […]