Erkenntnisse, die Sicherheitsteams zu besseren Entscheidungen führen.

Hold Your Own Key (HYOK) erklärt: BYOK vs. HYOK vs. Anbieterschlüssel, Umsetzung in Microsoft 365 (DKE), AWS XKS und Google CSE und wie Sie wählen.

Compare Microsoft 365 Double Key Encryption providers: DuoKey, Thales, Entrust, Fortanix, Utimaco, Cosmian and IBM. Key protection, deployment, rotation, access control, jurisdiction.

ML-DSA (FIPS 204) erklärt: Parametersätze und Grössen, CNSA-2.0-Status, ML-DSA-Zertifikate (RFC 9881), hybride Zertifikate und Migrationspfad für Ihre CA.

ML-KEM (FIPS 203) erklärt: Parametersätze und Schlüsselgrössen, Kyber vs. ML-KEM, CNSA 2.0, hybrides TLS sowie Erzeugung, Speicherung und Rotation.

PKI as a service explained: how a managed private CA works, providers compared, CA key custody, post-quantum readiness and an AD CS migration plan.

47-day and 100-day TLS certificates: SC-081 dates (200, 100, 47 days), 10-day DCV reuse, renewal math, ACME ARI and a plan before March 2027.

Krypto-Agilität erklärt: NIST-Definition, reale Beispiele, anpassbare Richtlinie, was eine Krypto-Agilitäts-Plattform leisten muss, KPIs und Reifegrad.

DKE vs Microsoft 365 Customer Key: who holds each key, what Microsoft can still decrypt, which features stop, and when to use one, the other, or both.

FINMA's post-quantum guidance for Swiss banks, section by section: survey of 60 institutions, five recommendations, a PQC roadmap by mid-2027.