Keyfactor on Cryptographic Discovery: Why Knowing What You Have Is Step One
summary
Argues that the immediate step is enterprise-wide cryptographic discovery that scans repos (GitHub, Artifactory), SSH keys on servers and endpoints, and network devices to inventory 100–500,000 SSL certs and encryption keys; flags the operational shock of 47-day certs forcing renewals every few weeks instead of annually (roughly eight times a year per cert). Describes PQC timelines of ~2–3 years, the harvest now, decrypt later risk from nation-states, and the need for discovery plus crypto-agile platforms and Keyfactor labs to start remediation.
AI-written summary · about
chapters (7)
- 0:00Cryptographic discovery intro
- 1:26Why discovery matters now
- 3:32Reducing certificate lifetimes
- 5:58Post-quantum readiness
- 7:42Harvest now decrypt later
- 9:26Crypto agility risks
- 10:48Preparing for PQC
related talks
29mCryptographic Discovery and Inventory: The Hidden Foundation for Enterprise Security
07mEstablishing Digital Trust
29mKeys, Certs and Vault: From DevSecOps to Post-Quantum
32mPractical Insights from Following NIST SP 1800-38B
27mCrypto Agility How it’s both a Critical Component and a Complex Challenge
30mTrust Engineering: Building Security Leadership at Early-Stage...
26mThe ABCs (Accelerated, Better and Cheaper) to Cryptographic Resilience
10mSummary and Closing