The Post-Quantum Cryptography Coalition (PQCC) has published its first Post-Quantum Cryptography (PQC) Inventory Workbook, helping businesses, big and small, build a single, organised database to monitor how and where cryptography is used.The PQC is a not-for-profit, voluntary organisation designed to create a broader understanding of and advocate for the wider public adoption of post-quantum cryptography. Its founding members include The MITRE Corporation, SandboxAQ, PQShield, IBM Quantum, and Microsoft.The organisation’s workbook guides organisations so they can transition smoothly to quantum-safe alternatives when quantum computers become able to decrypt current cryptographically-encoded data.Wen Masters, Vice president of Cyber Technologies at MITRE, believes the construction of an inventory of existing cryptographic elements in an organisation is important for all businesses. “As highlighted in the coalition’s PQC Migration Roadmap, building an inventory is essential for effective migration planning and long-term success. The workbook serves as a resource to help organisations achieve their migration goals,” they said.The PQC workbook has been designed to help organisations evaluate where they need PQC throughout their operations, and provides information for planning the lifespan of a business’ systems, and prioritises which systems, data, and applications should be updated first.Organisations can use the workbook as is with the provided structure, or adapt it according to need. For instance, users may choose to add custom fields to their records to track details specific to their environment and/or long term needs.The workbook can also help organisations by suggesting asset categories (systems & data) and their priority, logging data for each asset in the inventory sheet, identifying and describing all assets that use cryptography, and updating the ensuing inventory by adding new assets or updating existing information. There is also a glossary explaining important cryptographic terms, alongside the most frequent vulnerabilities encountered when using common algorithms.Following the release of the PQC inventory workbook and the PQC Migration Roadmap in early 2025, lead coordinator of the PQCC and senior cyber principal for science and technology at MITRE, Matt Mickelson, confirmed that the PQCC “plan to publish quantum risk assessment materials later this year.”The PQCC hope to provide organisations with the tools needed to plan migration to post-quantum cryptography, with steps to help users understand any possible risks that may lie ahead. This should enable more informed decisions about when and how to act now in preparation for the envisaged post-quantum computing world.(Image source: “puzzle” by olgaberrios is licensed under CC BY 2.0.)Want to learn more about cybersecurity and the cloud from industry leaders? Check out Cyber Security & Cloud Expo taking place in Amsterdam, California, and London. The comprehensive event is co-located with other leading events including Digital Transformation Week, IoT Tech Expo, Blockchain Expo, and AI & Big Data Expo.Explore other upcoming enterprise technology events and webinars powered by TechForge here.
Source: developer-tech.com
