Evidence limitation

A post-quantum standard is not a completed migration

Direct limitation

Existing protocols, hardware, keys, certificates, records, suppliers, and recovery processes may not support them.

Artifact or claim that may be supported

NIST FIPS 203, 204, and 205 provide standardized algorithms.

What the evidence does not establish

Existing protocols, hardware, keys, certificates, records, suppliers, and recovery processes may not support them.

Additional evidence required

A paper inventory can be represented as quantum readiness.

Mitigation

Maintain algorithm inventories, dependency maps, interoperability tests, hybrid and rollback plans, and evidence of actual deployment state.

Supporting sources

Related topic

Evidence and Provenance