{
 "schema": "sanctum.apex.sources.v1",
 "generated": "2026-10-23",
 "aggregator": "Sanctum SecOps LLC — SSO Branding desk; EBSCOhost queries run 2026-10-23 via the Perplexity EBSCO connector; Datatracker records via api/v1 2026-10-23",
 "primary": [
  {
   "id": "fips203",
   "kind": "standard",
   "title": "FIPS 203 — Module-Lattice-Based Key-Encapsulation Mechanism Standard (ML-KEM)",
   "publisher": "NIST",
   "date": "2024-08-13",
   "url": "https://csrc.nist.gov/pubs/fips/203/final"
  },
  {
   "id": "fips204",
   "kind": "standard",
   "title": "FIPS 204 — Module-Lattice-Based Digital Signature Standard (ML-DSA)",
   "publisher": "NIST",
   "date": "2024-08-13",
   "url": "https://csrc.nist.gov/pubs/fips/204/final"
  },
  {
   "id": "fips205",
   "kind": "standard",
   "title": "FIPS 205 — Stateless Hash-Based Digital Signature Standard (SLH-DSA)",
   "publisher": "NIST",
   "date": "2024-08-13",
   "url": "https://csrc.nist.gov/pubs/fips/205/final"
  },
  {
   "id": "ir8547",
   "kind": "guidance",
   "title": "NIST IR 8547 (initial public draft) — Transition to Post-Quantum Cryptography Standards",
   "publisher": "NIST",
   "date": "2024-11-12",
   "url": "https://csrc.nist.gov/pubs/ir/8547/ipd",
   "note": "Proposes deprecating 112-bit RSA/ECDSA/ECDH after 2030 and disallowing quantum-vulnerable public-key algorithms after 2035."
  },
  {
   "id": "sp1800-38",
   "kind": "guidance",
   "title": "NIST SP 1800-38 (preliminary draft) — Migration to Post-Quantum Cryptography",
   "publisher": "NIST NCCoE",
   "date": "2023",
   "url": "https://csrc.nist.gov/pubs/sp/1800/38/iprd"
  },
  {
   "id": "cisa-qr",
   "kind": "guidance",
   "title": "Quantum-Readiness: Migration to Post-Quantum Cryptography (CISA/NSA/NIST factsheet)",
   "publisher": "CISA",
   "date": "2023-08-21",
   "url": "https://www.cisa.gov/resources-tools/resources/quantum-readiness-migration-post-quantum-cryptography"
  },
  {
   "id": "m-23-02",
   "kind": "policy",
   "title": "OMB M-23-02 — Migrating to Post-Quantum Cryptography",
   "publisher": "Executive Office of the President",
   "date": "2022-11-18",
   "url": "https://www.whitehouse.gov/wp-content/uploads/2022/11/M-23-02-M-Memo-on-Migrating-to-Post-Quantum-Cryptography.pdf"
  },
  {
   "id": "nsa-qkd",
   "kind": "policy",
   "title": "Quantum Key Distribution (QKD) and Quantum Cryptography (QC) — NSA position",
   "publisher": "NSA",
   "date": "2026 (current page)",
   "url": "https://www.nsa.gov/Cybersecurity/Quantum-Key-Distribution-QKD-and-Quantum-Cryptography-QC/",
   "note": "QKD does not authenticate the transmission source; NSA does not recommend QKD/QC for National Security Systems unless its listed limitations are overcome."
  },
  {
   "id": "nsa-cnsa2",
   "kind": "policy",
   "title": "Commercial National Security Algorithm Suite 2.0 (CNSA 2.0) — algorithm and timeline summary",
   "publisher": "NSA (via pqaudit.org timeline)",
   "date": "2022-09 (suite); timeline summary 2026-10-03",
   "url": "https://pqaudit.org/timelines/cnsa-2-0/",
   "note": "ML-KEM-1024 and ML-DSA-87; exclusive use for signing and networking equipment by 2030, OS/web/cloud by 2033, all NSS by 2035."
  },
  {
   "id": "tls-mlkem",
   "kind": "ietf",
   "title": "draft-ietf-tls-ecdhe-mlkem — Hybrid ECDHE-MLKEM Key Agreement for TLS 1.3",
   "publisher": "IETF TLS WG",
   "date": "active",
   "url": "https://datatracker.ietf.org/doc/draft-ietf-tls-ecdhe-mlkem/"
  },
  {
   "id": "lamps-composite",
   "kind": "ietf",
   "title": "draft-ietf-lamps-pq-composite-sigs — Composite ML-DSA for use in X.509 PKI and CMS",
   "publisher": "IETF LAMPS WG",
   "date": "active",
   "url": "https://datatracker.ietf.org/doc/draft-ietf-lamps-pq-composite-sigs/"
  }
 ],
 "ebsco": [
  {
   "id": "ebsco-1",
   "kind": "ebsco",
   "title": "Towards post-quantum security for cyber-physical systems: Integrating PQC into industrial M2M communication1",
   "authors": "Paul, Sebastian, Scheible, Patrik, Wiemer, Friedrich, Liang, Kaitai, Chen, Liqun, et al.",
   "publication": "Journal of Computer Security",
   "date": "2022-07-01",
   "url": "https://openurl.ebsco.com/contentitem/lgd:159134909?sid=ebsco:plink:pplx&id=ebsco:lgd:159134909&utm_source=pplx&link_origin=perplexity.ai",
   "query": "(post-quantum cryptography OR quantum-safe OR quantum-resistant OR PQC) AND (migration OR transition OR roadmap OR crypto-agility) AND (inventory OR hybrid OR deployment OR TLS)",
   "cite": "Paul et al. 2022"
  },
  {
   "id": "ebsco-2",
   "kind": "ebsco",
   "title": "The Evolution of the Post-Quantum Cyber Environment",
   "authors": "Vermeer, Michael J. D.",
   "publication": "Georgetown Journal of International Affairs (Johns Hopkins University Press)",
   "date": "2023-09-01",
   "url": "https://openurl.ebsco.com/contentitem/lgd:174002120?sid=ebsco:plink:pplx&id=ebsco:lgd:174002120&utm_source=pplx&link_origin=perplexity.ai",
   "query": "(post-quantum cryptography OR quantum-safe OR quantum-resistant OR PQC) AND (migration OR transition OR roadmap OR crypto-agility) AND (inventory OR hybrid OR deployment OR TLS)",
   "cite": "Vermeer 2023"
  },
  {
   "id": "ebsco-3",
   "kind": "ebsco",
   "title": "THE FUTURE OF CYBERSECURITY: THE QUANTUM CHALLENGE",
   "authors": "Caldeira, Mário, Sabino, João",
   "publication": "Journal of Information System Security",
   "date": "2024-09-01",
   "url": "https://openurl.ebsco.com/contentitem/lgd:182067428?sid=ebsco:plink:pplx&id=ebsco:lgd:182067428&utm_source=pplx&link_origin=perplexity.ai",
   "query": "(post-quantum cryptography OR quantum-safe OR quantum-resistant OR PQC) AND (migration OR transition OR roadmap OR crypto-agility) AND (inventory OR hybrid OR deployment OR TLS)",
   "cite": "Caldeira & Sabino 2024"
  },
  {
   "id": "ebsco-4",
   "kind": "ebsco",
   "title": "НАЦІОНАЛЬНІ ТА МІЖНАРОДНІ ПОСТКВАНТОВІ СТАНДАРТИ АСИМЕТРИЧНИХ ПЕРЕТВОРЕНЬ",
   "authors": "ГОРБЕНКО, І. Д., КАНДІЙ, С. О.",
   "publication": "Cybernetics & Systems Analysis / Kibernetyka ta Systemnyi Analiz",
   "date": "2025-07-01",
   "url": "https://openurl.ebsco.com/contentitem/lgd:186393743?sid=ebsco:plink:pplx&id=ebsco:lgd:186393743&utm_source=pplx&link_origin=perplexity.ai",
   "query": "(post-quantum cryptography OR quantum-safe OR quantum-resistant OR PQC) AND (migration OR transition OR roadmap OR crypto-agility) AND (inventory OR hybrid OR deployment OR TLS)",
   "cite": "Horbenko & Kandiy 2025"
  },
  {
   "id": "ebsco-5",
   "kind": "ebsco",
   "title": "PCBQC: A Blockchain-Based, Patient-Centric EHR Management Framework using Hybrid Post-Quantum Lattice Cryptographic Algorithms",
   "authors": "G., Mahesh, Mishra, Renu",
   "publication": "International Journal of Performability Engineering",
   "date": "2025-11-01",
   "url": "https://openurl.ebsco.com/contentitem/lgd:189741180?sid=ebsco:plink:pplx&id=ebsco:lgd:189741180&utm_source=pplx&link_origin=perplexity.ai",
   "query": "(post-quantum cryptography OR quantum-safe OR quantum-resistant OR PQC) AND (migration OR transition OR roadmap OR crypto-agility) AND (inventory OR hybrid OR deployment OR TLS)",
   "cite": "Mahesh & Mishra 2025"
  },
  {
   "id": "ebsco-6",
   "kind": "ebsco",
   "title": "Security of trusted repeater quantum key distribution networks",
   "authors": "Salvail, Louis, Peev, Momtchil, Diamanti, Eleni, Alléaume, Romain, Lütkenhaus, Norbert, et al.",
   "publication": "Journal of Computer Security",
   "date": "2010-01-01",
   "url": "https://openurl.ebsco.com/contentitem/lgd:45516115?sid=ebsco:plink:pplx&id=ebsco:lgd:45516115&utm_source=pplx&link_origin=perplexity.ai",
   "query": "(quantum key distribution OR QKD) AND (limitations OR practical OR authentication OR cost OR distance) AND (post-quantum cryptography OR classical cryptography OR comparison)",
   "cite": "Salvail et al. 2010"
  },
  {
   "id": "ebsco-7",
   "kind": "ebsco",
   "title": "IMPLEMENTATION AND EVALUATION OF QUANTUM-VULNERABLE AND QUANTUM-SAFE CRYPTOGRAPHIC ALGORITHMS",
   "authors": "T., RAKESH SINGH, EEDI, HEMALATHA",
   "publication": "International Journal of Computing Algorithm",
   "date": "2026-06-01",
   "url": "https://openurl.ebsco.com/contentitem/lgd:197247197?sid=ebsco:plink:pplx&id=ebsco:lgd:197247197&utm_source=pplx&link_origin=perplexity.ai",
   "query": "(post-quantum cryptography OR quantum-safe OR quantum-resistant OR PQC) AND (migration OR transition OR roadmap OR crypto-agility) AND (inventory OR hybrid OR deployment OR TLS)",
   "cite": "Rakesh Singh & Hemalatha 2026"
  },
  {
   "id": "ebsco-8",
   "kind": "ebsco",
   "title": "Patents and Patenting in the Telecom Sector: Quantum-Secured Communication Networks",
   "authors": "Dewan, Mohan, Deokar, Amruta S.",
   "publication": "Telecom Business Review",
   "date": "2025-01-01",
   "url": "https://openurl.ebsco.com/contentitem/lgd:192612623?sid=ebsco:plink:pplx&id=ebsco:lgd:192612623&utm_source=pplx&link_origin=perplexity.ai",
   "query": "(quantum key distribution OR QKD) AND (limitations OR practical OR authentication OR cost OR distance) AND (post-quantum cryptography OR classical cryptography OR comparison)",
   "cite": "Dewan & Deokar 2025"
  },
  {
   "id": "ebsco-9",
   "kind": "ebsco",
   "title": "QUANTUM COMPUTING MEETS BLOCKCHAIN: THREATS, OPPORTUNITIES AND A HYBRID SECURE ARCHITECTURE",
   "authors": "Bhatnagar, Ashish, Kaushik, Sanjoli, Gupta, Rohit",
   "publication": "Pranjana: The Journal of Management Awareness",
   "date": "2025-07-01",
   "url": "https://openurl.ebsco.com/contentitem/lgd:191468117?sid=ebsco:plink:pplx&id=ebsco:lgd:191468117&utm_source=pplx&link_origin=perplexity.ai",
   "query": "(post-quantum cryptography OR quantum-safe OR quantum-resistant OR PQC) AND (migration OR transition OR roadmap OR crypto-agility) AND (inventory OR hybrid OR deployment OR TLS)",
   "cite": "Bhatnagar et al. 2025"
  },
  {
   "id": "ebsco-10",
   "kind": "ebsco",
   "title": "Critical perspectives on provable security: Fifteen years of \"another look\" papers",
   "authors": "Koblitz, Neal, Menezes, Alfred",
   "publication": "Advances in Mathematics of Communications",
   "date": "2019-11-01",
   "url": "https://openurl.ebsco.com/contentitem/lgd:138024893?sid=ebsco:plink:pplx&id=ebsco:lgd:138024893&utm_source=pplx&link_origin=perplexity.ai",
   "query": "(hybrid key exchange OR hybrid KEM OR composite signatures OR dual signatures) AND (TLS 1.3 OR X.509 OR IKEv2 OR SSH) AND (post-quantum OR Kyber OR ML-KEM) AND (performance OR latency OR handshake)",
   "cite": "Koblitz & Menezes 2019"
  }
 ],
 "drafts": [
  {
   "id": "draft-vicente-pquip-multitenant-pki-requirements",
   "kind": "sanctum-draft",
   "title": "PQC Certificate Rotation Requirements for Multi-Tenant PKI Environments",
   "rev": "05",
   "date": "2026-09-13",
   "url": "https://datatracker.ietf.org/doc/draft-vicente-pquip-multitenant-pki-requirements/",
   "abstract": "This document specifies requirements for post-quantum cryptography (PQC) certificate rotation in multi-tenant public key infrastructure (PKI) environments. Multi-tenant PKI deployments — in which a single PKI platform issues and manages certificates for multiple distinct tenant organizations — face coordination challenges that single- tenant PKI deployments do not encounter during PQC migration."
  },
  {
   "id": "draft-vicente-pquip-pqc-readiness-gaps",
   "kind": "sanctum-draft",
   "title": "PQC Readiness Observability Gaps in Networked Computing Environments",
   "rev": "05",
   "date": "2026-09-13",
   "url": "https://datatracker.ietf.org/doc/draft-vicente-pquip-pqc-readiness-gaps/",
   "abstract": "This document identifies observability gaps that prevent network operators and security teams from determining the post-quantum cryptography (PQC) readiness state of networked computing environments. PQC readiness requires knowing which cryptographic algorithms are in use across the environment, which are vulnerable to quantum attack, and which have been or are being migrated to NIST- approved PQC algorithms. Current network protocols and management frameworks do not provide sufficient visibility to answer these questions at scale."
  },
  {
   "id": "draft-vicente-oauth-apm",
   "kind": "sanctum-draft",
   "title": "Authorization Posture Mechanism (APM): Per-Transaction Consistency for OAuth 2.0",
   "rev": "05",
   "date": "2026-09-13",
   "url": "https://datatracker.ietf.org/doc/draft-vicente-oauth-apm/",
   "abstract": "This document describes the Authorization Posture Mechanism (APM), a method by which an OAuth 2.0 [RFC6749] authorization server, or a resource server acting on its behalf, re-evaluates the mutual consistency of three bound factors -- the client certificate, the access token, and the device posture -- on a per-request basis for privileged operations, rather than only at session establishment. When re-evaluated posture degrades relative to the posture under which the token was issued, APM defines deterministic, least- privilege Graduated Outcomes including scope reduction and method restriction, rather than a binary allow or deny."
  },
  {
   "id": "draft-vicente-acme-pqc-agility-profile",
   "kind": "sanctum-draft",
   "title": "Post-Quantum Cryptographic Agility Profile for ACME",
   "rev": "05",
   "date": "2026-09-13",
   "url": "https://datatracker.ietf.org/doc/draft-vicente-acme-pqc-agility-profile/",
   "abstract": "This document defines an Automated Certificate Management Environment (ACME) [RFC8555] profile extension that enables ACME servers and clients to express per-account and per-order post-quantum cryptographic (PQC) posture. The extension introduces a pqcAgility metadata object in the ACME directory, an optional pqcAgility member in order objects, and a server-side adequacy scoring mechanism that determines whether a given order satisfies an account's declared PQC readiness threshold. The profile is designed for both public and private ACME deployments and does not modify the core ACME state machine: it adds discoverable capability metadata and per-order polic"
  },
  {
   "id": "draft-vicente-lamps-rotation-envelope",
   "kind": "sanctum-draft",
   "title": "CA-Side Post-Quantum Rotation Envelope for X.509 Issuance Continuity",
   "rev": "03",
   "date": "2026-09-14",
   "url": "https://datatracker.ietf.org/doc/draft-vicente-lamps-rotation-envelope/",
   "abstract": "This document defines the X.509 Post-Quantum Rotation Envelope extension, a Certification Authority (CA) side commitment mechanism that allows an issuing CA to publish, sign, and bind to its issued certificates a machine-verifiable guarantee of post-quantum (PQ) or PQ/T hybrid issuance continuity across the CA's own key-rotation boundaries. The mechanism is complementary to, and does not overlap with, subject-side commitments such as the continuityPeriod field defined in [I-D.reddy-lamps-x509-pq-commit]: where that draft captures the CA's continuity obligation to continue presenting PQ or composite certificates after the current certificate's notAfter, this"
  }
 ]
}