LESS JARGON. MORE UNDERSTANDING.
The words,
made clearer.
What do post-quantum security terms mean? Use these short definitions, then follow the sources and practical guides for more context.
Post-quantum cryptography (PQC)
Cryptographic methods designed to resist attacks by both classical and quantum computers. They run on ordinary computers; they do not require a quantum computer.
Cryptography inventory
A record of cryptographic components, where they are used, and their dependencies. Its coverage depends on the discovery methods and systems included.
Cryptography Bill of Materials (CBOM)
A structured inventory of cryptographic assets and their relationships. CycloneDX can represent algorithms, keys, certificates and relationships to software components.
Cryptographic agility
The ability to change cryptographic algorithms and implementations as requirements evolve. It involves architecture, dependencies, configuration and testing, rather than a single replacement algorithm.
Post-quantum migration plan
A working plan that connects cryptographic discovery to owners, dependencies, implementation choices, pilot tests and rollout checks. A draft plan still needs technical approval.
Source-level observation
An indication that a selected cryptographic pattern appears in source code. It does not by itself establish production use, exploitability or whether a whole system is quantum-safe.