PQC Triage: find the cryptography a quantum computer breaks first
Описание и применение
PQC Triage – инструмент для приоритизации криптографических зависимостей в процессе миграции к пост‑квантовым алгоритмам, обеспечивающий детерминированный расчёт сроков и экспортируемый план миграции.
Задача
Security teams need to prioritize which cryptographic dependencies to migrate first, but existing tools focus on algorithm weakness rather than migration urgency.
Результат
PQC Triage provides a deterministic, auditable triage workflow that reduces migration planning time to about ten seconds and ensures decisions are traceable and verifiable.
Рабочий процесс
- Paste a package.json, requirements.txt, go.mod, Cargo.toml or pom.xml into the web app
- PQC Triage parses the manifest, resolves cryptographic call sites, and reports surfaces enriched from deps.dev and OSV
- Set quantum‑capability horizon and per‑surface data shelf life via the policy interface
- Persist decisions in Postgres and generate a sealed migration plan
- Download the plan as Markdown, JSON or CSV for audit and review
Доказательства
Paste a dependency manifest, see which cryptography a quantum computer breaks first, and download a sealed migration plan.
Every security team running post‑quantum migration has the same problem, and it is not a cryptography problem. It is a triage problem.
The whole primary path is a real import, a real score, a real persisted decision, and a downloadable plan — about ten seconds.
130 unit tests, tsc --noEmit and eslint clean, production build green.
- Дата записи: 2026-10-07T07:40:59.995Z