Keys, cryptography and post-quantum migration.

Technologies

• Key management lifecycle Generation, distribution, rotation, backup and destruction of keys.
• Hardware security modules Validated modules that hold root and signing keys.
• Key management interfaces Standard interfaces between applications, HSMs and key managers.
• Random number generation Entropy sources and generators behind every key.
• ML-KEM key encapsulation Lattice-based key establishment that resists quantum attack.
• ML-DSA and SLH-DSA signatures Post-quantum signatures for firmware, plans and certificates.
• Stateful hash-based signatures LMS and XMSS for long-lived firmware signing roots.
• Hybrid key exchange Combining classical and post-quantum key exchange during transition.
• Crypto inventory and migration planning Finding every algorithm in use and planning replacement on published timelines.