Research

Watch · narrated walkthroughs

Threat Modeling a Post-Quantum Migration

A post-quantum migration is usually treated as an algorithm swap. It is really a threat-modeling problem: assets whose secrecy must outlive the quantum transition, an adversary with future capability, and a migration that introduces its own attack surface. This series applies threat-modeling discipline to the crypto transition itself. Grounded in NIST IR 8547, SP 1800-38, Mosca, and Shostack.

Murali Chillakuru·5 episodes
  1. 1
    Framing the Post-Quantum Threat Model: Assets, Adversaries, and Boundaries
    Watch ▸6:60
  2. 2
    Harvest-Now-Decrypt-Later as the Anchor Threat: Building a Data-at-Risk Inventory
    Watch ▸6:50
  3. 3
    Downgrade, Rollback, and Negotiation Attacks: The Adversary That Strips the PQC
    Watch ▸7:18
  4. 4
    The Migration's Own Attack Surface: Combiners, Dual Stacks, and Key-Management Gaps
    Watch ▸7:15
  5. 5
    A Post-Quantum Threat-Modeling Playbook: Inventory, Attack Trees, Controls, and a CI Gate
    Watch ▸7:32