Course 5 · Advanced · 60 min

Migration Engineering and Crypto-Agility

Hybrid key establishment, PKI transition, protocol sequencing and the exception patterns for systems you do not control.

• Explain hybrid key establishment and justify when to use it rather than post-quantum only
• Sequence a public key infrastructure transition so verifiers are ready before signers change
• Design crypto-agility into systems as a testable property rather than an aspiration
• Apply compensating controls where a vendor offers no post-quantum path
• Write a defensible, dated exception for a dependency you cannot remediate