Author
Dhiti Labs
Research
Quantum threat research
Harvest now, decrypt later, explained for people who own the risk
The attack doesn't need a quantum computer today, it needs your traffic today and a quantum computer eventually. Here's how to compute your own exposure horizon.
Dhiti Labs · 8 min
PQC standards & compliance
What NIST IR 8547 actually asks you to do by 2030
Deprecation is not disallowance. Here's the timeline an auditor will hold you to, and what evidence they'll look for.
Dhiti Labs · 9 min
Engineering
Building a CBOM: the CycloneDX fields that matter
A cryptographic bill of materials is only useful if it captures the right fields. Here's a real sample and how to read it.
Dhiti Labs · 10 min
Engineering
Crypto-agility is an architecture property, not a product feature
You can't buy agility as a SKU. You design for it, and here's the pattern: algorithm-by-config.
Dhiti Labs · 8 min