Watch + readVideo companion
After Q-Day Explained: what mid-market CISOs should do this quarter
Original takeaways from a popular Q-Day explainer — plus what to do this quarter.
Open article →
Public curriculum
Learn quantum cryptography — from Shor's to post-quantum migration.
A structured path for CISOs, security engineers, and developers. Each layer pairs YouTube explainers with Qtangl articles, NIST references, and checkpoints you can use in planning meetings.
Video companions
Watch, then read the practitioner takeaways.
Every video opens with an embedded player on the blog article — plus source citations, checkpoints, and inventory steps Qtangl customers use.
Watch + read
Watch + readVideo companion
After Jeremy Allison on HNDL: what your security team should do now
Practitioner insights on HNDL — and how to inventory before migration finishes.
Open article →
Watch + readVideo companion
After the NIST PQC algorithms video: your ML-KEM migration checklist
ML-KEM, ML-DSA, and SLH-DSA in plain language — with a migration checklist.
Open article →
Watch + readVideo companion
After minutephysics on Shor's: what CISOs must know about RSA and ECC
Shor's algorithm in plain language — plus what to inventory this quarter.
Open article →
Watch + readVideo companion
After Veritasium: from Shor's threat to NIST PQC standards
From Shor's to NIST FIPS — the full arc in one video companion.
Open article →
Watch + readVideo companion
After PBS Infinite Series: period-finding and the quantum threat to PKI
Period-finding without a math degree — and PKI inventory next steps.
Open article →
Watch + readVideo companion
Peter Shor in his own words: implications for your PKI
Hear Shor explain the algorithm — then inventory your certificates.
Open article →
Watch + readVideo companion
After NIST's Dustin Moody: your 12-month post-quantum strategy
Dustin Moody's 12-month playbook for enterprise PQC migration.
Open article →
Watch + readVideo companion
After RWPQC 2026: FIPS status, Falcon, HQC, and the 2035 timeline
FIPS status, backup algorithms, and 2035 deprecation tiers.
Open article →
Watch + readVideo companion
After Michele Mosca: Mosca inequality for your board
Mosca inequality for executives — with board-ready framing.
Open article →
Watch + readVideo companion
After Root Causes + Dustin Moody: on-ramp signatures and backup algorithms
Why NIST keeps standardizing after FIPS 203–205.
Open article →
Watch + readVideo companion
Cloudflare's 2029 PQ roadmap: what enterprises should copy
What Cloudflare's 2029 roadmap means for your program.
Open article →
Watch + readVideo companion
After CISA: federal PQC migration playbook for private sector
CISA guidance translated for mid-market security teams.
Open article →
Watch + readVideo companion
After Alfred Menezes: ML-KEM and ML-DSA in plain language
Lattice KEM and signatures from Alfred Menezes' course.
Open article →
Watch + readVideo companion
Hands-on with Open Quantum Safe: your first ML-KEM keypair
Prototype ML-KEM with liboqs — and know production limits.
Open article →
Five layers
Progress from threat model to evidence change control.
Work through the layers in order, or jump to the checkpoint that matches your next board question.
Layer 1
Layer 1 — Why quantum breaks RSA and ECC
Checkpoint: Can you explain in two minutes why Shor's algorithm breaks RSA but AES mostly survives?
- Watch + read: After minutephysics on Shor's: what CISOs must know about RSA and ECC
- Watch + read: After Veritasium: from Shor's threat to NIST PQC standards
- Watch + read: After PBS Infinite Series: period-finding and the quantum threat to PKI
- Watch + read: Peter Shor in his own words: implications for your PKI
- Read: Shor's algorithm for CISOs (no math degree required)
- Read: Grover's algorithm and AES: why symmetric crypto mostly survives
Layer 2
Layer 2 — Harvest now, decrypt later
Checkpoint: Can you apply Mosca's X + Y > Z to a dataset with a 20-year confidentiality requirement?
Layer 3
Layer 3 — NIST PQC standards
Checkpoint: Can you name FIPS 203, 204, and 205 and what each replaces in today's PKI?
Layer 4
Layer 4 — Migration in real systems
Checkpoint: Can you describe hybrid TLS and why signature migration is harder than KEM?
- Watch + read: After NIST's Dustin Moody: your 12-month post-quantum strategy
- Watch + read: Cloudflare's 2029 PQ roadmap: what enterprises should copy
- Watch + read: After CISA: federal PQC migration playbook for private sector
- Watch + read: Hands-on with Open Quantum Safe: your first ML-KEM keypair
- Read: Hybrid TLS migration: X25519 + ML-KEM in practice
- Read: PQC migration phases: discover, prioritize, hybrid, verify
Layer 5
Layer 5 — Crypto agility and evidence
Checkpoint: Can you explain what a CBOM is and why re-scan proof matters for auditors?
Diagrams
Visual anchors for briefings and onboarding.
Stay on track
Get the 4-week curriculum by email.
Week-by-week watchlist, NIST bibliography, and checkpoint reminders — delivered to your inbox. Or open the full printable guide.
Apply what you learn
Inventory beats slides.
When you finish a layer, run a baseline scan and export a CBOM — the curriculum links to Qtangl tools, but the concepts stand alone.