{"id":1693,"date":"2026-11-04T12:50:26","date_gmt":"2026-11-04T12:50:26","guid":{"rendered":"https:\/\/therisk.global\/nexus-reports\/editions\/xt-10\/full\/"},"modified":"2026-11-04T18:25:07","modified_gmt":"2026-11-04T18:25:07","slug":"full","status":"publish","type":"page","link":"https:\/\/therisk.global\/nexus-reports\/editions\/xt-10\/full\/","title":{"rendered":"Cybersecurity and Advanced Cryptography 2026: complete edition"},"content":{"rendered":"\n<!-- Nexus Reports \u00b7 GCRI \u00b7 https:\/\/therisk.global\/nexus-reports\/editions\/xt-10\/full\/ \u00b7 source sha256:0d36e3ad952faf2e7a9c069b7f338fe218dc7bd33f3807fa626a32f2ec249304 \u00b7 generated by integrations\/wordpress\/nexus-reports\/build.mjs, never edit this file --><script>window.nexusLiveStrings={\"label\":\"Load the live map\",\"note\":\"Imagery and feeds come from other services (NASA, USGS, OpenStreetMap) and load only when you ask.\"};<\/script><script>(function(){\"use strict\";var n=window,l=document,A=\"nexus.live-map\",K=\"nexus.live-map.reload\";if(n.NXLive){return}var B=[{\"id\":\"gibs\",\"host\":\"gibs.earthdata.nasa.gov\",\"path\":\"^\/(wmts|wms|legends|colormaps)\/\",\"to\":\"\/nx-data\/gibs\",\"credit\":\"NASA GIBS\",\"test\":[\"\/wmts\/epsg3857\/best\/BlueMarble_ShadedRelief_Bathymetry\/default\/GoogleMapsCompatible_Level8\/2\/1\/1.jpeg\",\"\/wmts\/epsg3857\/best\/OPERA_L3_Dynamic_Surface_Water_Extent-HLS\/default\/2026-10-30\/GoogleMapsCompatible_Level12\/3\/2\/4.png\",\"\/wmts\/epsg4326\/best\/ASTER_GDEM_Greyscale_Shaded_Relief\/default\/250m\/0\/0\/0.jpg\",\"\/wmts\/epsg3857\/best\/GOES-East_ABI_GeoColor\/default\/2026-10-31T12:00:00Z\/GoogleMapsCompatible_Level7\/1\/0\/0.png\",\"\/wmts\/epsg4326\/best\/1.0.0\/WMTSCapabilities.xml\",\"\/wms\/epsg4326\/best\/wms.cgi?SERVICE=WMS\\u0026REQUEST=GetMap\\u0026LAYERS=ASTER_GDEM_Color_Index\",\"\/legends\/GPM_Precipitation_Rate_H.svg\"]},{\"id\":\"eonet\",\"host\":\"eonet.gsfc.nasa.gov\",\"path\":\"^\/api\/v3\/\",\"to\":\"\/nx-data\/eonet\",\"credit\":\"NASA EONET\",\"test\":[\"\/api\/v3\/events?status=open\\u0026days=20\",\"\/api\/v3\/events\/geojson?status=open\\u0026days=7\"]},{\"id\":\"usgs\",\"host\":\"earthquake.usgs.gov\",\"path\":\"^\/earthquakes\/feed\/v1\\\\.0\/summary\/\",\"to\":\"\/nx-data\/usgs\",\"credit\":\"U.S. Geological Survey\",\"test\":[\"\/earthquakes\/feed\/v1.0\/summary\/4.5_week.geojson\"]},{\"id\":\"power\",\"host\":\"power.larc.nasa.gov\",\"path\":\"^\/api\/temporal\/\",\"to\":\"\/nx-data\/power\",\"credit\":\"NASA POWER\",\"test\":[\"\/api\/temporal\/daily\/point?parameters=T2M\\u0026community=RE\\u0026longitude=13.4\\u0026latitude=52.5\\u0026start=20261001\\u0026end=20261010\\u0026format=JSON\"]},{\"id\":\"open-meteo\",\"host\":\"open-meteo.com\",\"subs\":[\"api\",\"flood-api\",\"ensemble-api\",\"air-quality-api\",\"marine-api\",\"archive-api\",\"historical-forecast-api\"],\"path\":\"^\/v1\/\",\"to\":\"\/nx-data\/open-meteo\",\"credit\":\"Open-Meteo.com\",\"test\":[\"\/flood-api\/v1\/flood?latitude=52.5\\u0026longitude=13.4\\u0026daily=river_discharge\",\"\/api\/v1\/forecast?latitude=1\\u0026longitude=2\\u0026hourly=temperature_2m\"]},{\"id\":\"metno\",\"host\":\"api.met.no\",\"path\":\"^\/weatherapi\/locationforecast\/2\\\\.0\/(compact|complete)$\",\"to\":\"\/nx-data\/metno\",\"credit\":\"MET Norway\",\"test\":[\"\/weatherapi\/locationforecast\/2.0\/compact?lat=45.2\\u0026lon=8.45\"]},{\"id\":\"oisst\",\"host\":\"coastwatch.pfeg.noaa.gov\",\"path\":\"^\/erddap\/griddap\/ncdcOisst21Agg_LonPM180\\\\.json$\",\"to\":\"\/nx-data\/oisst\",\"credit\":\"NOAA OISST v2.1 (CoastWatch ERDDAP)\",\"test\":[\"\/erddap\/griddap\/ncdcOisst21Agg_LonPM180.json?sst%5B(last)%5D%5B(0.0)%5D%5B(43.5)%5D%5B(7.5)%5D\"]},{\"id\":\"terrain\",\"host\":\"elevation-tiles-prod.s3.amazonaws.com\",\"path\":\"^\/terrarium\/\",\"to\":\"\/nx-data\/terrain\",\"credit\":\"Terrain Tiles (Mapzen, AWS Open Data)\",\"test\":[\"\/terrarium\/3\/4\/2.png\"]},{\"id\":\"ofm\",\"host\":\"tiles.openfreemap.org\",\"path\":\"^\/(styles|planet|fonts|sprites|natural_earth)(\/|$)\",\"to\":\"\/nx-data\/ofm\",\"credit\":\"OpenFreeMap, OpenMapTiles, OpenStreetMap contributors\",\"test\":[\"\/styles\/dark\",\"\/planet\",\"\/planet\/20261029_001001_pt\/3\/4\/2.pbf\",\"\/fonts\/Noto%20Sans%20Regular\/0-255.pbf\",\"\/sprites\/ofm_f384\/ofm@2x.json\"]},{\"id\":\"geoboundaries\",\"host\":\"www.geoboundaries.org\",\"path\":\"^\/api\/current\/\",\"to\":\"\/nx-data\/geoboundaries\",\"credit\":\"geoBoundaries\",\"test\":[\"\/api\/current\/gbOpen\/KEN\/ADM1\/\"]},{\"id\":\"gh-raw\",\"host\":\"raw.githubusercontent.com\",\"path\":\"^\/wmgeolab\/geoBoundaries\/\",\"to\":\"\/nx-data\/gh-raw\",\"credit\":\"geoBoundaries\",\"test\":[\"\/wmgeolab\/geoBoundaries\/9469f09\/releaseData\/gbOpen\/KEN\/ADM1\/geoBoundaries-KEN-ADM1_simplified.geojson\"]},{\"id\":\"gh-media\",\"host\":\"media.githubusercontent.com\",\"path\":\"^\/media\/wmgeolab\/geoBoundaries\/\",\"to\":\"\/nx-data\/gh-media\",\"credit\":\"geoBoundaries\",\"test\":[\"\/media\/wmgeolab\/geoBoundaries\/9469f09\/releaseData\/gbOpen\/KEN\/ADM1\/geoBoundaries-KEN-ADM1_simplified.geojson\"]},{\"id\":\"jsdelivr\",\"host\":\"cdn.jsdelivr.net\",\"path\":\"^\/npm\/(maplibre-gl|h3-js|pmtiles)@[0-9]+\\\\.[0-9]+\\\\.[0-9]+\/dist\/\",\"to\":\"\/nx-data\/jsdelivr\",\"credit\":\"\",\"test\":[\"\/npm\/maplibre-gl@6.9.1\/dist\/maplibre-gl.mjs\",\"\/npm\/h3-js@4.5.0\/dist\/h3-js.umd.js\"]}];var T=[\/(^|\\.)gibs\\.earthdata\\.nasa\\.gov$\/i,\/(^|\\.)eonet\\.gsfc\\.nasa\\.gov$\/i,\/(^|\\.)power\\.larc\\.nasa\\.gov$\/i,\/(^|\\.)earthquake\\.usgs\\.gov$\/i,\/(^|\\.)open-meteo\\.com$\/i,\/(^|\\.)openfreemap\\.org$\/i,\/(^|\\.)openstreetmap\\.org$\/i,\/(^|\\.)cartocdn\\.com$\/i,\/(^|\\.)arcgisonline\\.com$\/i,\/(^|\\.)maplibre\\.org$\/i,\/(^|\\.)protomaps\\.com$\/i,\/(^|\\.)versatiles\\.org$\/i,\/(^|\\.)amazonaws\\.com$\/i,\/(^|\\.)raw\\.githubusercontent\\.com$\/i,\/(^|\\.)media\\.githubusercontent\\.com$\/i,\/(^|\\.)geoboundaries\\.org$\/i,\/(^|\\.)jsdelivr\\.net$\/i,\/(^|\\.)unpkg\\.com$\/i,\/(^|\\.)cdn[j]s\\.cloudflare\\.com$\/i,\/(^|\\.)googleapis\\.com$\/i,\/(^|\\.)gstatic\\.com$\/i];var W=n.nexusLiveStrings?n.nexusLiveStrings:{};var H={label:W.label?W.label:\"Load the live map\",note:\"Some layers of this map come from another service. They load only when you ask.\"};var J=[\"experience\",\"external\",\"optional-content\",\"embeds\",\"media\"];var v=[],f=[],C=0;function z(e,t,r,a){if(typeof e!==\"string\"){return\"\"}if(e.slice(0,8).toLowerCase()!==\"https:\/\/\"){return\"\"}var i=\/^https:\\\/\\\/([A-Za-z0-9.-]+)(?::443)?(\\\/[^?#]*)?(\\?[^#]*)?\/.exec(e);if(!i){return\"\"}var o=i[1].toLowerCase(),s=i[2]?i[2]:\"\/\",R=i[3]?i[3]:\"\";for(var m=0;m<t.length;m++){var h=t[m],L=\"\";if(h.subs){var M=\".\"+h.host;if(o.length<=M.length){continue}if(o.slice(o.length-M.length)!==M){continue}L=o.slice(0,o.length-M.length);if(h.subs.indexOf(L)<0){continue}}else if(o!==h.host){continue}if(!new RegExp(h.path).test(s)){continue}return r+a+h.to.slice(9)+(L?\"\/\"+L:\"\")+s+R}return\"\"}var O=n.location.protocol===\"https:\"?n.location.origin:n.location.protocol===\"http:\"?n.location.origin:\"\";var u=typeof n.NX_DATA_BASE===\"string\"?n.NX_DATA_BASE:\"\/nx-data\/\";if(u.charAt(u.length-1)!==\"\/\"){u+=\"\/\"}var D=O!==\"\"?n.NX_DATA!==false:false;function F(e){if(!e){return\"\"}if(typeof e===\"string\"){return e}if(e.url){return String(e.url)}if(e.href){return String(e.href)}return String(e)}function p(e){return D?z(F(e),B,O,u):\"\"}var k={};function oe(e){var t=e.slice(O.length+u.length);return t.slice(0,t.indexOf(\"\/\"))}function j(e,t){var r=oe(e),a=k[r]=k[r]||{req:0,ok:0,fail:0};a[t]++}function se(){try{if(n.localStorage.getItem(A)===\"1\"){return true}}catch(e){}try{return n.sessionStorage.getItem(A)===\"1\"}catch(e){return false}}function $(){var e=n.nexusConsent;if(!e){return null}return typeof e.allows===\"function\"?e:null}function le(){var e=n.nexusConsent;if(!e){return false}if(typeof e.granted!==\"function\"){return false}for(var t=0;t<J.length;t++){try{if(e.granted(J[t])){return true}}catch(r){}}return false}function I(e,t){if(typeof e.features!==\"function\"){return false}try{return e.features().indexOf(t)>=0}catch(r){return false}}function Y(e){var t=n.nexusConsent;if(!t){return false}if(typeof t.switchedOff!==\"function\"){return false}try{return t.switchedOff(e)===true}catch(r){return false}}function b(){var e=$();if(e){var t=I(e,\"map-embeds\")?\"map-embeds\":\"maps\";try{if(e.allows(t)===true){return true}}catch(r){}}return se()?true:le()}function d(e){var t=e?e:\"maps\";if(t===\"map-embeds\"){return b()}return!Y(t===\"globe\"?\"globe\":\"maps\")?!Y(\"maps\"):false}function ce(e){try{var t=new URL(F(e),l.baseURI);if(t.protocol!==\"http:\"){if(t.protocol!==\"https:\"){return\"\"}}return t.origin===n.location.origin?\"\":t.hostname}catch(r){return\"\"}}var Z=0;function g(e){var t=ce(e);if(!t){return false}var r=false;for(var a=0;a<T.length;a++){if(T[a].test(t)){r=true;break}}if(!r){return false}if(p(e)){return!d(\"maps\")}if(b()){return false}C++;Z++;return true}var q=0;function c(){if(q){return}q=setTimeout(function(){q=0;U()},250)}function y(e){setTimeout(function(){try{e.dispatchEvent(new Event(\"error\"))}catch(t){}},0)}var N=n.fetch;if(N){n.fetch=function(e,t){var r=p(e);if(r){if(!d(\"maps\")){C++;c();return Promise.reject(new TypeError(\"Maps are switched off in your privacy choices\"))}var a=e;if(typeof e===\"string\"){a=r}else if(n.Request?e instanceof n.Request:false){a=new n.Request(r,e)}else{a=r}j(r,\"req\");var i=arguments.length>1?N.call(n,a,t):N.call(n,a);i.then(function(o){j(r,o.ok?\"ok\":\"fail\")},function(o){if(o?o.name!==\"AbortError\":true){j(r,\"fail\")}});return i}if(g(e)){c();return Promise.reject(new TypeError(\"Blocked until the live map is loaded\"))}return N.apply(this,arguments)}}var x=n.XMLHttpRequest?n.XMLHttpRequest.prototype:null;if(x){var fe=x.open,ue=x.send;x.open=function(e,t){var r=p(t);if(r){arguments[1]=r}this.__nxLiveUrl=r?r:t;return fe.apply(this,arguments)};x.send=function(){if(g(this.__nxLiveUrl)){c();y(this);return}return ue.apply(this,arguments)}}var w=n.HTMLImageElement?Object.getOwnPropertyDescriptor(n.HTMLImageElement.prototype,\"src\"):null;if(w){if(w.set){Object.defineProperty(n.HTMLImageElement.prototype,\"src\",{configurable:true,enumerable:w.enumerable,get:w.get,set:function(e){var t=p(e);if(g(e)){c();y(this);return}w.set.call(this,t?t:e)}})}}var _=n.Element?n.Element.prototype.setAttribute:null;if(_){n.Element.prototype.setAttribute=function(e,t){if(e===\"src\"){if(this.tagName===\"IMG\"){if(g(t)){c();y(this);return}var r=p(t);if(r){return _.call(this,e,r)}}}return _.apply(this,arguments)}}function Q(e){if(!e){return false}var t=e.tagName===\"SCRIPT\"?\"src\":e.tagName===\"LINK\"?\"href\":\"\";if(!t){return false}var r=e.getAttribute?e.getAttribute(t):\"\";var a=r?p(r):\"\";if(a){_.call(e,t,a);return false}return g(e[t])}if(n.Node){var pe=n.Node.prototype.appendChild,de=n.Node.prototype.insertBefore;n.Node.prototype.appendChild=function(e){if(Q(e)){c();y(e);return e}return pe.apply(this,arguments)};n.Node.prototype.insertBefore=function(e){if(Q(e)){c();y(e);return e}return de.apply(this,arguments)}}var S=n.Worker;if(S?D:false){var ge=\"(function(){var T=\"+JSON.stringify(B)+\",O=\"+JSON.stringify(O)+\",B=\"+JSON.stringify(u)+\",R=\"+z.toString()+',f=self.fetch;if(!f){return;}self.fetch=function(i,o){var u=typeof i===\"string\"?i:(i?(i.url?i.url:String(i)):\"\"),r=R(u,T,O,B);if(r){i=(typeof i===\"string\"?r:(typeof Request!==\"undefined\"?(i instanceof Request?new Request(r,i):r):r));}return arguments.length>1?f.call(self,i,o):f.call(self,i);};})();\\n';var P=function(e,t){if(!(this instanceof P)){return new S(e,t)}try{var r=new URL(String(e),l.baseURI);if(r.protocol===\"blob:\"?true:r.origin===n.location.origin){var a=t?t.type===\"module\":false;var i=ge+(a?\"import \"+JSON.stringify(r.href)+\";\\n\":\"importScripts(\"+JSON.stringify(r.href)+\");\\n\");return new S(URL.createObjectURL(new Blob([i],{type:\"text\/javascript\"})),t)}}catch(o){}return new S(e,t)};P.prototype=S.prototype;try{n.Worker=P}catch(e){}}var V='[data-nx-map=\"ctx-field\"],[data-nx-le],[data-nx-eo],[data-grx-globe],[data-grx-obs],.nx-sb[data-nx-sb]';function ee(){var e=[l];var t=l.querySelectorAll(\"*\");for(var r=0;r<t.length;r++){if(t[r].shadowRoot){e.push(t[r].shadowRoot)}}return e}function G(){return d(\"maps\")?Z>0?!b():false:true}function te(){var e=$();if(e){if(typeof e.enable===\"function\"){if(!d(\"maps\")){try{e.enable(\"maps\",\"site\")}catch(t){}try{e.enable(\"globe\",\"site\")}catch(t){}}if(I(e,\"map-embeds\")){try{e.enable(\"map-embeds\",\"site\")}catch(t){}}else{try{e.enable(\"maps\",\"site\")}catch(t){}}E();return}}try{n.localStorage.setItem(A,\"1\")}catch(t){try{n.sessionStorage.setItem(A,\"1\")}catch(r){}}E()}function me(e,t){var r=e.createElement(\"button\");r.type=\"button\";r.textContent=H.label;r.setAttribute(\"style\",\"pointer-events:auto;min-height:44px;min-width:44px;padding:0 18px;cursor:pointer;font:inherit;font-weight:600;font-size:14px;line-height:1.2;border-radius:2px;border:1px solid var(--nx-border-strong,#8a8a8a);background:var(--nx-text-primary,#111);color:var(--nx-bg-canvas,#fff)\");var a=\"nx-live-note-\"+Math.floor(Math.random()*1e9);r.setAttribute(\"aria-describedby\",a);r.addEventListener(\"click\",te);r.addEventListener(\"focus\",function(){r.style.outline=\"2px solid var(--nx-focus,#4c9aff)\";r.style.outlineOffset=\"2px\"});r.addEventListener(\"blur\",function(){r.style.outline=\"\"});var i=e.createElement(\"span\");i.id=a;i.textContent=H.note;i.setAttribute(\"style\",\"pointer-events:none;font-size:12px;line-height:1.4;padding:3px 7px;border-radius:2px;background:var(--nx-bg-canvas,#fff);color:var(--nx-text-secondary,#333);border:1px solid var(--nx-border-hairline,#bbb);max-width:34em\");t.appendChild(r);t.appendChild(i)}function he(e){var t=e.ownerDocument;var r=t.createElement(\"div\");r.className=\"nx-live-gate\";r.setAttribute(\"style\",\"position:absolute;inset-block-start:10px;inset-inline-start:10px;z-index:6;display:flex;flex-direction:column;align-items:flex-start;gap:6px;max-width:calc(100% - 20px);pointer-events:none;font:inherit\");var a=$();var i=false;if(a){if(typeof a.placeholder===\"function\"){try{var o=t.createElement(\"div\");o.setAttribute(\"style\",\"pointer-events:auto\");r.appendChild(o);a.placeholder(o,d(\"maps\")?I(a,\"map-embeds\")?\"map-embeds\":\"maps\":\"maps\");i=o.childNodes.length>0;if(!i){r.removeChild(o)}}catch(s){i=false}}}if(!i){me(t,r)}return r}function U(){if(!G()){return}var e=ee();for(var t=0;t<e.length;t++){var r=e[t].querySelectorAll(V);for(var a=0;a<r.length;a++){var i=r[a];if(i.getAttribute(\"data-nx-live-gate\")){continue}if(i.closest(\".nx-live-gate\")){continue}var o=i.getBoundingClientRect();if(o.width<120){continue}var s=i.querySelector(\".le-stage,.eo-stage\");if(!s){if(i.hasAttribute(\"data-nx-le\")?true:i.hasAttribute(\"data-nx-eo\")){continue}s=i}i.setAttribute(\"data-nx-live-gate\",\"1\");var R=n.getComputedStyle(s);if(R.position===\"static\"){s.style.position=\"relative\"}var m=he(s);s.appendChild(m);f.push({host:i,wrap:m,stage:s})}}ve()}function ve(){for(var e=0;e<f.length;e++){var t=f[e].stage,r=t?t.querySelector(\".nx-wm-presets\"):null;var a=r?r.getBoundingClientRect():null;if(a?a.height>0:false){var i=Math.round(a.bottom-t.getBoundingClientRect().top+8)+\"px\";if(f[e].wrap.style.insetBlockStart!==i){f[e].wrap.style.insetBlockStart=i}}}}function be(){for(var e=0;e<f.length;e++){try{f[e].wrap.remove()}catch(t){}try{f[e].host.removeAttribute(\"data-nx-live-gate\")}catch(t){}}f=[]}function ye(e,t,r){v.push({name:e,selector:t,fn:r});if(X){try{r(\"on\")}catch(a){}}}function xe(e){for(var t=0;t<v.length;t++){try{v[t].fn(e)}catch(r){}}}function we(){var e=[],t=ee();for(var r=0;r<t.length;r++){var a=t[r].querySelectorAll(V);for(var i=0;i<a.length;i++){var o=false;for(var s=0;s<v.length;s++){try{if(a[i].matches(v[s].selector)){o=true;break}}catch(R){}}if(!o){e.push(a[i])}}}return e}function Se(e){if(C===0){return}if(we().length===0){return}var t=e?\"on\":\"off\";try{if(n.sessionStorage.getItem(K)===t){return}n.sessionStorage.setItem(K,t)}catch(r){return}n.location.reload()}function re(){return!G()}var X=re();var ne=b();function E(){var e=re(),t=b(),r=e!==X?true:t!==ne;ne=t;if(!r){if(!e){c()}return}X=e;if(e){be()}xe(e?\"on\":\"off\");if(!e){c()}try{l.dispatchEvent(new CustomEvent(\"nexus:live-map\",{detail:{granted:e}}))}catch(a){}Se(e)}function ae(){U();if(n.MutationObserver){var e=new n.MutationObserver(function(){if(!G()){return}c()});e.observe(l.documentElement,{childList:true,subtree:true});setTimeout(function(){e.disconnect()},2e4)}}if(l.readyState===\"loading\"){l.addEventListener(\"DOMContentLoaded\",ae)}else{ae()}n.addEventListener(\"load\",function(){setTimeout(U,400)});l.addEventListener(\"nexus-consent:ready\",E);l.addEventListener(\"nexus-consent:change\",E);var ie=0;var Ee=setInterval(function(){ie++;E();if(ie>40){clearInterval(Ee)}},400);n.NXData={url:function(e){return p(e)},table:B,base:u,on:D,stats:function(){return JSON.parse(JSON.stringify(k))}};n.NXLive={allowed:d,blocked:g,grant:te,register:ye,hosts:T.length,data:n.NXData}})();<\/script><style>.pix-dark-mode-switch, .bx-color-mode-toggle, .color-switcher, .page-headline { display: none !important; }<\/style><script type=\"text\/x-nexus\" class=\"_iub_cs_skip\" id=\"nxe-mount\" data-nx-run=\"mount\">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<\/script><script class=\"_iub_cs_skip\" id=\"nxe-boot\">if(typeof window.__nxStill!==\"function\")window.__nxStill=function(){try{if(document.documentElement.hasAttribute(\"data-nx-still\"))return true;if(document.body?\/(?:^|\\s)mdp-readabler-stop-animations(?:\\s|$)\/.test(document.body.className):false)return true;var _=JSON.parse(window.localStorage.getItem(\"readabler\")||\"{}\");return _?_.stopAnimations===true||_.stopAnimations===\"true\"||_.stopAnimations===1:false}catch(K){return false}};(function(){function _(r,i){var f=atob(r),o=new Uint8Array(f.length),e;for(e=0;e< f.length;e++){o[e]=f.charCodeAt(e)}var s=0,a=0,u=0,n=new Uint8Array(Math.max(1024,o.length*6)),t=0;var c=[3,4,5,6,7,8,9,10,11,13,15,17,19,23,27,31,35,43,51,59,67,83,99,115,131,163,195,227,258];var d=[0,0,0,0,0,0,0,0,1,1,1,1,2,2,2,2,3,3,3,3,4,4,4,4,5,5,5,5,0];var m=[1,2,3,4,5,7,9,13,17,25,33,49,65,97,129,193,257,385,513,769,1025,1537,2049,3073,4097,6145,8193,12289,16385,24577];var E=[0,0,0,0,1,1,2,2,3,3,4,4,5,5,6,6,7,7,8,8,9,9,10,10,11,11,12,12,13,13];var lt=[16,17,18,0,8,7,9,6,10,5,11,4,12,3,13,2,14,1,15];function b(h){while(u< h){if(s>=o.length){throw new Error(\"nx-inflate: truncated\")}a|=o[s++]<< u;u+=8}var w=a%(1<< h);a>>>=h;u-=h;return w}function S(h,w,v){var g=new Uint16Array(16),A=new Uint16Array(16),p=new Uint16Array(v),x;for(x=0;x< v;x++){g[h[w+x]]++}g[0]=0;for(x=1;x<16;x++){A[x]=A[x-1]+g[x-1]}for(x=0;x< v;x++){if(h[w+x]){p[A[h[w+x]]++]=x}}return{count:g,sym:p}}function P(h){var w=0,v=0,g=0,A,p;for(A=1;A<16;A++){w|=b(1);p=h.count[A];if(w-p< v){return h.sym[g+(w-v)]}g+=p;v+=p;v<<=1;w<<=1}throw new Error(\"nx-inflate: bad code\")}function B(h){if(t+h<=n.length){return}var w=new Uint8Array(Math.max(n.length*2,t+h));w.set(n.subarray(0,t));n=w}var q=null,Z=null,k=0;while(!k){k=b(1);var J=b(2),H,F;if(J===0){a=0;u=0;var R=o[s]|o[s+1]<<8;s+=4;B(R);n.set(o.subarray(s,s+R),t);t+=R;s+=R;continue}if(J===1){if(!q){var tt=new Uint8Array(288),nt=new Uint8Array(30);for(e=0;e<288;e++){tt[e]=e<144?8:e<256?9:e<280?7:8}for(e=0;e<30;e++){nt[e]=5}q=S(tt,0,288);Z=S(nt,0,30)}H=q;F=Z}else if(J===2){var G=b(5)+257,et=b(5)+1,xt=b(4)+4,N=new Uint8Array(320),rt=new Uint8Array(19);for(e=0;e< xt;e++){rt[lt[e]]=b(3)}var ht=S(rt,0,19),I=0;while(I< G+et){var $=P(ht),X=0,at=0;if($<16){N[I++]=$;continue}if($===16){if(!I){throw new Error(\"nx-inflate: bad repeat\")}at=N[I-1];X=3+b(2)}else if($===17){X=3+b(3)}else{X=11+b(7)}while(X--){N[I++]=at}}H=S(N,0,G);F=S(N,G,et)}else{throw new Error(\"nx-inflate: bad block\")}for(;;){var y=P(H);if(y<256){B(1);n[t++]=y;continue}if(y===256){break}y-=257;var it=c[y]+b(d[y]),ot=P(F),ut=m[ot]+b(E[ot]);if(ut>t){throw new Error(\"nx-inflate: bad distance\")}B(it);for(var ft=0;ft< it;ft++){n[t]=n[t-ut];t++}}}return i?n.subarray(0,t):new TextDecoder(\"utf-8\").decode(n.subarray(0,t))}if(typeof window.__nxInflate!==\"function\"){window.__nxInflate=_}function K(r){var i=_(r,true),f=i[0]|i[1]<<8|i[2]<<16|i[3]<<24;var o=i.subarray(4+f);function e(s,a){var u=\"\",n=o.subarray(s,s+a);for(var t=0;a>t;t+=8192){u+=String.fromCharCode.apply(null,n.subarray(t,t+8192))}return btoa(u)}return JSON.parse(new TextDecoder(\"utf-8\").decode(i.subarray(4,4+f)),function(s,a){return a?a.$b?e(a.$b[0],a.$b[1]):a:a})}if(typeof window.__nxUnpack!==\"function\"){window.__nxUnpack=K}if(typeof window.__nxLate!==\"function\"){window.__nxLate=function(r,i){if(document.readyState!==\"loading\"){return null}if(!document.querySelector('template[data-nx-libs-last~=\"'+r+'\"]')){return null}return new Promise(function(f,o){document.addEventListener(\"DOMContentLoaded\",function(){var e=i();if(e){f(e)}else{o(new Error(\"nx-late: \"+r))}},{once:true})})}}if(typeof window.__nxAsset!==\"function\"){var U={};window.__nxAsset=function(r,i){if(U[r]){return U[r]}var f=document.getElementById(\"nxe-boot\"),o=[],e=window.NX_ASSET_BASE,s=f?f.getAttribute(\"data-nx-asset-base\"):\"\";if(e){o.push(String(e))}if(s){o.push(s)}o.push(\"\/wp-content\/uploads\/nexus-assets\/\");function a(t){if(!i){return t}return crypto.subtle.digest(\"SHA-256\",new TextEncoder().encode(t)).then(function(c){if(\"sha256-\"+btoa(String.fromCharCode.apply(null,new Uint8Array(c)))!==i){throw new Error(\"nx-asset: integrity\")}return t})}function u(t){if(t>=o.length){return Promise.reject(new Error(\"nx-asset: \"+r))}var c=o[t].charAt(o[t].length-1)===\"\/\"?o[t]:o[t]+\"\/\";return fetch(c+r,{credentials:\"omit\"}).then(function(d){if(!d.ok){throw new Error(\"nx-asset: \"+d.status)}return d.text()}).then(a).then(null,function(){return u(t+1)})}var n=u(0);U[r]=n;n.then(null,function(){delete U[r]});return n}}if(typeof window.__nxText!==\"function\"){window.__nxText=function(r){if(!r){return Promise.reject(new Error(\"nx-text: none\"))}var i=r.getAttribute(\"data-nx-asset\");if(i?!r.textContent:false){return window.__nxAsset(i,r.getAttribute(\"data-nx-sri\")||\"\")}return Promise.resolve(r.textContent)}}var j=null;function Q(r){var i=window.NX_RUNTIME||{},f=i.base||window.NX_RUNTIME_BASE||\"\";if(!f||!window.fetch){return Promise.resolve(null)}if(!j){j=fetch(f+\"manifest.json\",{credentials:\"same-origin\",cache:\"no-store\"}).then(function(o){return o.ok?o.json():null}).then(null,function(){return null})}return j.then(function(o){var e=o?(o.files||o)[r.replace(\/\\.[0-9a-f]{12}(\\.js)$\/,\"$1\")]:null;return e?e.file?[f+e.file,e.sri||\"\"]:null:null})}function st(r){var i=r.getAttribute(\"data-nx-asset\");if(i?!r.textContent:false){return window.__nxAsset(i,r.getAttribute(\"data-nx-sri\")||\"\").then(function(n){return window.__nxInflate(n)})}var f=r.getAttribute(\"data-nx-src\");if(f?!r.textContent:false){var o=window.NX_RUNTIME||{},e=o.base||window.NX_RUNTIME_BASE||\"\",s=(o.files||{})[f.replace(\/\\.[0-9a-f]{12}(\\.js)$\/,\"$1\")]||null,a=[];if(e){a.push([e+f,r.getAttribute(\"data-nx-sri\")||\"\"])}if(s?!!s.url:false){a.push([s.url,s.sri||\"\"])}var u=function(n){if(n===a.length?!a.live:false){a.live=true;return Q(f).then(function(c){if(!c){throw new Error(\"nx-lazy: \"+f)}a.push(c);return u(n)})}if(n>=a.length){return Promise.reject(new Error(\"nx-lazy: \"+f))}var t={credentials:\"same-origin\"};if(a[n][1]){t.integrity=a[n][1]}return fetch(a[n][0],t).then(function(c){if(!c.ok){throw new Error(\"nx-lazy: \"+c.status)}return c.text()}).then(null,function(){return u(n+1)})};return u(0)}return Promise.resolve(window.__nxInflate(r.textContent))}function ct(r){var i=r[0].getAttribute(\"data-nx-on-sight\")||\"[data-nx-map]\",f=null,o=false;function e(){if(o){return}o=true;if(f){f.disconnect()}var a=document.querySelectorAll(\"script[data-nx-on-sight][data-nx-asset]:not([data-nx-run])\"),u=[];for(var n=0;n!==a.length;n++){(function(t){if(t.textContent){return}u.push(window.__nxAsset(t.getAttribute(\"data-nx-asset\"),t.getAttribute(\"data-nx-sri\")||\"\").then(function(c){t.textContent=c;t.removeAttribute(\"data-nx-asset\")},function(){t.setAttribute(\"data-nx-ran\",\"failed\")}))})(a[n])}Promise.all(u.concat(r.map(function(t){return st(t).then(null,function(){return null})}))).then(function(t){var c=t.slice(u.length);for(var d=0;d!==r.length;d++){if(c[d]===null){r[d].setAttribute(\"data-nx-ran\",\"failed\");continue}var m=document.createElement(\"script\");m.className=\"_iub_cs_skip\";m.setAttribute(\"data-nx-runtime\",r[d].getAttribute(\"data-nx-run\"));m.textContent=c[d];(document.head||document.documentElement).appendChild(m);r[d].setAttribute(\"data-nx-ran\",\"true\")}try{document.dispatchEvent(new CustomEvent(\"nexus:lazy-ready\"))}catch(E){}})}function s(){if(o){return}var a=[document],u=document.querySelectorAll(\".nxe-host\"),n=[],t,c;for(t=0;t!==u.length;t++){if(u[t].shadowRoot){a.push(u[t].shadowRoot)}}for(t=0;t!==a.length;t++){c=a[t].querySelectorAll(i);for(var d=0;d!==c.length;d++){n.push(c[d])}}if(!n.length){return}if(!window.IntersectionObserver){e();return}f=f||new IntersectionObserver(function(m){for(var E=0;E!==m.length;E++){if(m[E].isIntersecting){e();return}}},{rootMargin:\"800px 0px 800px 0px\"});for(t=0;t!==n.length;t++){if(!n[t].__nxLazySeen){n[t].__nxLazySeen=true;f.observe(n[t])}}}document.addEventListener(\"DOMContentLoaded\",s);document.addEventListener(\"nexus:runtime-ready\",s);window.addEventListener(\"load\",s);setTimeout(s,0)}var V=document.querySelectorAll(\"script[data-nx-run]\"),C=[],z=[];for(var D=0;D< V.length;D++){var l=V[D];if(l.hasAttribute(\"data-nx-ran\")){continue}if(l.hasAttribute(\"data-nx-on-sight\")){l.setAttribute(\"data-nx-ran\",\"waiting\");z.push(l);continue}if(l.hasAttribute(\"data-nx-src\")?!l.textContent:false){l.setAttribute(\"data-nx-ran\",\"loading\");C.push(l);continue}if(l.hasAttribute(\"data-nx-asset\")?!l.textContent:false){l.setAttribute(\"data-nx-ran\",\"loading\");C.push(l);continue}l.setAttribute(\"data-nx-ran\",\"true\");try{var L=document.createElement(\"script\");L.className=\"_iub_cs_skip\";L.setAttribute(\"data-nx-runtime\",l.getAttribute(\"data-nx-run\"));L.textContent=window.__nxInflate(l.textContent);(document.head||document.documentElement).appendChild(L)}catch(r){l.setAttribute(\"data-nx-ran\",\"failed\")}}if(z.length){ct(z)}if(!C.length){return}var W=window.NX_RUNTIME||{},Y=W.base||window.NX_RUNTIME_BASE||\"\",T=window.__nxMount,O=[];if(typeof T===\"function\"){window.__nxMount=function(r){O.push(r)}}function dt(){if(typeof T===\"function\"){window.__nxMount=T;for(var r=0;r< O.length;r++){try{T(O[r])}catch(i){}}}try{document.dispatchEvent(new CustomEvent(\"nexus:runtime-ready\"))}catch(i){}}function M(r){if(r>=C.length){dt();return}var i=C[r],f=i.getAttribute(\"data-nx-src\")||\"\",o=W.files||{},e=[];if(i.hasAttribute(\"data-nx-asset\")){window.__nxAsset(i.getAttribute(\"data-nx-asset\"),i.getAttribute(\"data-nx-sri\")||\"\").then(function(u){var n=document.createElement(\"script\");n.className=\"_iub_cs_skip\";n.setAttribute(\"data-nx-runtime\",i.getAttribute(\"data-nx-run\"));n.textContent=window.__nxInflate(u);(document.head||document.documentElement).appendChild(n);i.setAttribute(\"data-nx-ran\",\"true\")}).then(null,function(){i.setAttribute(\"data-nx-ran\",\"failed\")}).then(function(){M(r+1)});return}var s=o[f.replace(\/\\.[0-9a-f]{12}(\\.js)$\/,\"$1\")]||null;if(Y){e.push([Y+f,i.getAttribute(\"data-nx-sri\")||\"\"])}if(s?!!s.url:false){e.push([s.url,s.sri||\"\"])}function a(u){if(u===e.length?!e.live:false){e.live=true;Q(f).then(function(t){if(t){e.push(t)}a(u)});return}if(u>=e.length){i.setAttribute(\"data-nx-ran\",\"failed\");M(r+1);return}var n=document.createElement(\"script\");n.className=\"_iub_cs_skip\";n.setAttribute(\"data-nx-runtime\",i.getAttribute(\"data-nx-run\"));if(e[u][1]){n.integrity=e[u][1]}n.onload=function(){i.setAttribute(\"data-nx-ran\",\"true\");M(r+1)};n.onerror=function(){if(n.parentNode){n.parentNode.removeChild(n)}a(u+1)};n.src=e[u][0];(document.head||document.documentElement).appendChild(n)}a(0)}M(0)})();<\/script><div class=\"nxe-host\" data-nxe-embed=\"nr-gcri-editions-xt-10-full\"><div class=\"nxe\" id=\"nxe-nr-gcri-editions-xt-10-full\" data-inst=\"gcri\" data-host=\"gcri\" data-nr-kit=\"true\" data-nr-pub=\"true\" data-theme=\"light\" data-grammar=\"atlas\" lang=\"en\" data-nx-css=\"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\"><style>#nxe-nr-gcri-editions-xt-10-full.nxe{display:block;box-sizing:border-box;max-width:1180px;margin:0 auto;padding:0 16px;font-family:ui-sans-serif,system-ui,-apple-system,\"Segoe UI\",sans-serif;line-height:1.55;overflow-wrap:break-word}#nxe-nr-gcri-editions-xt-10-full.nxe :where(*,*::before,*::after){box-sizing:inherit}#nxe-nr-gcri-editions-xt-10-full.nxe :where(section,header,footer,nav,aside){display:block;margin:0 0 32px}#nxe-nr-gcri-editions-xt-10-full.nxe :where(h1,h2,h3,h4){line-height:1.2;margin:24px 0 12px;font-weight:600}#nxe-nr-gcri-editions-xt-10-full.nxe :where(p,ul,ol,dl,table,figure,details){margin:0 0 16px}#nxe-nr-gcri-editions-xt-10-full.nxe :where(ul,ol){padding-left:20px}#nxe-nr-gcri-editions-xt-10-full.nxe a{color:inherit;text-decoration:underline;text-underline-offset:2px}#nxe-nr-gcri-editions-xt-10-full.nxe table{border-collapse:collapse;width:100%;display:block;overflow-x:auto}#nxe-nr-gcri-editions-xt-10-full.nxe :where(th,td){padding:6px 8px;text-align:left;vertical-align:top;border-bottom:1px solid;border-color:inherit}#nxe-nr-gcri-editions-xt-10-full.nxe svg{display:none}#nxe-nr-gcri-editions-xt-10-full.nxe svg.nx-i{display:inline-block;width:18px;height:18px;vertical-align:-3px}#nxe-nr-gcri-editions-xt-10-full.nxe :where([role=\"tablist\"],[role=\"toolbar\"],[hidden],button,.nx-theme-toggle,.nx-live-slot){display:none}#nxe-nr-gcri-editions-xt-10-full.nxe img{max-width:100%;height:auto}<\/style><svg class=\"nx-defs\" aria-hidden=\"true\" focusable=\"false\" width=\"0\" height=\"0\"><defs><linearGradient id=\"nx-gi\" x1=\"0\" y1=\"0\" x2=\"1\" y2=\"1\"><stop offset=\"0\" class=\"nx-gi-a\"\/><stop offset=\"0.55\" class=\"nx-gi-b\"\/><stop offset=\"1\" class=\"nx-gi-c\"\/><\/linearGradient><linearGradient id=\"nx-giu\" gradientUnits=\"userSpaceOnUse\" x1=\"0\" y1=\"0\" x2=\"800\" y2=\"0\"><stop offset=\"0\" class=\"nx-gi-a\"\/><stop offset=\"0.55\" class=\"nx-gi-b\"\/><stop offset=\"1\" class=\"nx-gi-c\"\/><\/linearGradient><linearGradient id=\"nx-gp\" x1=\"0\" y1=\"0\" x2=\"1\" y2=\"1\"><stop offset=\"0\" class=\"nx-gp-a\"\/><stop offset=\"1\" class=\"nx-gp-b\"\/><\/linearGradient><\/defs><\/svg><div class=\"nrp\"><div class=\"nrp-wrap\"><p class=\"nrj-draft\" data-nrj-shared=\"draft\" role=\"note\"><strong>Draft, not yet released.<\/strong> In stewardship review. Not indexed until the first approved release.<\/p><article class=\"nrp-flow\"><header class=\"nrp-hero\"><div class=\"nrp-hero-grid\"><div><ul class=\"nrp-eyerow\"><li class=\"nf-ui-eyebrow\">Reports<\/li><li class=\"nf-ui-eyebrow\">Baseline Edition 2026<\/li><li class=\"nf-ui-eyebrow\">Complete edition<\/li><\/ul><span class=\"nrp-rule\" aria-hidden=\"true\"><\/span><h1 class=\"pp-hero-title nrp-hero-title-l\">Exponential Technology Report 2026: Cybersecurity and Advanced Cryptography<\/h1><p class=\"nrp-lede\"><\/p><div class=\"nrp-actions\"><button class=\"nf-ui-btn\" data-variant=\"primary\" type=\"button\" data-nrp-act=\"print\" hidden><svg class=\"nrp-i\" viewBox=\"0 0 24 24\" aria-hidden=\"true\" focusable=\"false\"><path d=\"M6 18H4a2 2 0 0 1-2-2v-5a2 2 0 0 1 2-2h16a2 2 0 0 1 2 2v5a2 2 0 0 1-2 2h-2\"\/><path d=\"M6 9V3a1 1 0 0 1 1-1h10a1 1 0 0 1 1 1v6\"\/><rect x=\"6\" y=\"14\" width=\"12\" height=\"8\" rx=\"1\"\/><\/svg>Print or save as PDF<\/button><a class=\"nf-ui-btn\" data-variant=\"secondary\" href=\"https:\/\/therisk.global\/nexus-reports\/editions\/xt-10\/\"><svg class=\"nrp-i\" viewBox=\"0 0 24 24\" aria-hidden=\"true\" focusable=\"false\"><path d=\"M19 12H5\"\/><path d=\"m12 19-7-7 7-7\"\/><\/svg>Edition home<\/a><\/div><p class=\"nrp-note nrp-noprint\">Choose A4 or Letter in the print dialog; running heads and page numbers are added in print. This is a review copy: the signed PDF with its DOI is issued at release.<\/p><\/div><div><div class=\"nrp-cover\"><div class=\"nrp-cover-top\"><span class=\"nf-ui-eyebrow\">Reports<\/span><span class=\"nf-ui-eyebrow\">XT-10<\/span><\/div><span class=\"nrp-cover-rule\" aria-hidden=\"true\"><\/span><p class=\"nrp-cover-k\">Exponential Technology<\/p><p class=\"nrp-cover-t\">Cybersecurity and Advanced Cryptography 2026<\/p><p class=\"nrp-cover-s\"><\/p><div class=\"nrp-cover-foot\"><span>Baseline Edition 2026<\/span><span>NR-XTECH-CRYPTO-GLOBAL-2026-BASELINE<\/span><span><abbr title=\"The Global Centre for Risk and Innovation\">GCRI<\/abbr> for the Nexus Consortium<\/span><\/div><\/div><\/div><\/div><\/header><section class=\"nrp-block nrp-imprint\" aria-label=\"Imprint\"><p class=\"nf-ui-eyebrow\">Imprint<\/p><dl class=\"nrp-dl\"><dt>Editor<\/dt><dd>Saeed Valadbaygi, Chief Steward and Managing Editor, the Global Centre for Risk and Innovation (GCRI)<\/dd><dt>Publisher of record<\/dt><dd>The Global Centre for Risk and Innovation (GCRI) for the Nexus Consortium, Toronto<\/dd><dt>Report number<\/dt><dd class=\"nrp-mono\">NR-XTECH-CRYPTO-GLOBAL-2026-BASELINE<\/dd><dt>Evidence close<\/dt><dd>30 September 2026, cut DC-XTECH-CRYPTO-GLOBAL-2026-B0<\/dd><dt>Status<\/dt><dd>Draft under stewardship review; not yet released<\/dd><dt>DOI and UNI<\/dt><dd>Issued at deposit<\/dd><dt>Licence<\/dt><dd>CC BY 4.0 for Nexus-authored text, tables and figures; third-party material keeps its own licence<\/dd><dt>Cite as<\/dt><dd>Valadbaygi, S. (Ed.). (2026). Exponential Technology Report 2026: Cybersecurity and Advanced Cryptography (Baseline Edition 2026, Report No. NR-XTECH-CRYPTO-GLOBAL-2026-BASELINE) [Draft under review]. The Global Centre for Risk and Innovation (GCRI). https:\/\/therisk.global\/nexus-reports\/editions\/xt-10\/<\/dd><\/dl><\/section><section class=\"nrp-block\" aria-label=\"Contents\"><p class=\"nf-ui-eyebrow\">Contents<\/p><ol class=\"nrp-rows\"><li><span class=\"nrp-rows-i\">\u00b7<\/span><p class=\"nrp-rows-t\"><a href=\"#nx-nrp-xt-10-part-summary\">Executive summary<\/a><\/p><\/li><li><span class=\"nrp-rows-i\">1<\/span><p class=\"nrp-rows-t\"><a href=\"#nx-nrp-xt-10-part-coupled-system\">Chapter 1. Cryptography is infrastructure under change<\/a><\/p><\/li><li><span class=\"nrp-rows-i\">2<\/span><p class=\"nrp-rows-t\"><a href=\"#nx-nrp-xt-10-part-findings\">Chapter 2. Key findings<\/a><\/p><\/li><li><span class=\"nrp-rows-i\">3<\/span><p class=\"nrp-rows-t\"><a href=\"#nx-nrp-xt-10-part-systems-and-sectors\">Chapter 3. Systems and sectors at baseline<\/a><\/p><\/li><li><span class=\"nrp-rows-i\">4<\/span><p class=\"nrp-rows-t\"><a href=\"#nx-nrp-xt-10-part-risk-and-capability\">Chapter 4. Risks and capability<\/a><\/p><\/li><li><span class=\"nrp-rows-i\">5<\/span><p class=\"nrp-rows-t\"><a href=\"#nx-nrp-xt-10-part-scenario\">Chapter 5. Signature lag while key agreement migrates<\/a><\/p><\/li><li><span class=\"nrp-rows-i\">6<\/span><p class=\"nrp-rows-t\"><a href=\"#nx-nrp-xt-10-part-lenses-and-readings\">Chapter 6. Readings from the other desks<\/a><\/p><\/li><li><span class=\"nrp-rows-i\">7<\/span><p class=\"nrp-rows-t\"><a href=\"#nx-nrp-xt-10-part-agenda\">Chapter 7. The 2027 agenda<\/a><\/p><\/li><li><span class=\"nrp-rows-i\">8<\/span><p class=\"nrp-rows-t\"><a href=\"#nx-nrp-xt-10-part-systems-in-depth\">Chapter 8. Systems in depth<\/a><\/p><\/li><li><span class=\"nrp-rows-i\">A<\/span><p class=\"nrp-rows-t\"><a href=\"#nx-nrp-xt-10-part-methodology\">Annex A. Methodology<\/a><\/p><\/li><li><span class=\"nrp-rows-i\">B<\/span><p class=\"nrp-rows-t\"><a href=\"#nx-nrp-xt-10-part-data\">Annex B. Data appendix<\/a><\/p><\/li><li><span class=\"nrp-rows-i\">C<\/span><p class=\"nrp-rows-t\"><a href=\"#nx-nrp-xt-10-part-references\">Annex C. References and record<\/a><\/p><\/li><\/ol><\/section><div class=\"nrp-part\" id=\"nx-nrp-xt-10-part-summary\"><header class=\"nrp-chap-head\" id=\"nx-nrp-xt-10-cs-top\"><ul class=\"nrp-eyerow\"><li class=\"nf-ui-eyebrow\"><a href=\"https:\/\/therisk.global\/nexus-reports\/editions\/xt-10\/\">Cybersecurity and Advanced Cryptography 2026<\/a><\/li><li class=\"nf-ui-eyebrow\">Executive summary<\/li><\/ul><span class=\"nrp-rule\" aria-hidden=\"true\"><\/span><h2 class=\"pp-hero-title\">Executive summary<\/h2><p class=\"nrp-lede\">The edition on a few pages: the abstract, the key messages, the headline finding and what each steward reads in it.<\/p><p class=\"nrp-chap-meta\"><span>7 min read<\/span><span>1 figure<\/span><span>0 tables<\/span><span>15 notes<\/span><span>NR-XTECH-CRYPTO-GLOBAL-2026-BASELINE<\/span><\/p><\/header><section class=\"nrp-block\" id=\"nx-nrp-xt-10-cs-s1\" aria-labelledby=\"nx-nrp-xt-10-cs-s1-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-cs-s1-h\"><span class=\"nrp-num\">S.1<\/span><span>Abstract<\/span><\/h2><div class=\"nrp-prose\"><p>Cybersecurity and advanced cryptography matter to the Nexus programme because every other infrastructure relies on them. They are also being changed. NIST finalised three post-quantum standards on 13 August 2024<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cs-n1\" id=\"nx-nrp-xt-10-cs-r1\" aria-label=\"Note 1\">1<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cs-n2\" id=\"nx-nrp-xt-10-cs-r2\" aria-label=\"Note 2\">2<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cs-n3\" id=\"nx-nrp-xt-10-cs-r3\" aria-label=\"Note 3\">3<\/a><\/sup> and selected a fifth algorithm, HQC, as a backup on 11 March 2025<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cs-n6\" id=\"nx-nrp-xt-10-cs-r6\" aria-label=\"Note 6\">6<\/a><\/sup>. The UK NCSC asks organisations to plan by 2028, start priority work by 2031 and finish by 2035<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cs-n10\" id=\"nx-nrp-xt-10-cs-r10\" aria-label=\"Note 10\">10<\/a><\/sup>. A 2025 preprint estimates that RSA-2048 could be factored with under a million noisy qubits in under a week, under stated assumptions<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cs-n22\" id=\"nx-nrp-xt-10-cs-r22\" aria-label=\"Note 22\">22<\/a><\/sup>. Deployment has moved first where it is cheap. Cloudflare reported in October 2025 that most human traffic to its network used post-quantum key agreement, and OpenSSH made a post-quantum exchange its default in version 10.0<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cs-n23\" id=\"nx-nrp-xt-10-cs-r23\" aria-label=\"Note 23\">23<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cs-n24\" id=\"nx-nrp-xt-10-cs-r24\" aria-label=\"Note 24\">24<\/a><\/sup>. Signatures and certificates lag, because they add size and cost<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cs-n23\" aria-label=\"Note 23\">23<\/a><\/sup>. Threat pressure is large and mostly ordinary. The CISA KEV catalogue is the public list of vulnerabilities exploited in the wild, and its count at the 30 September close is not bound, and the FBI recorded 859,532 complaints and USD 16.6 billion of reported losses for 2024<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cs-n15\" id=\"nx-nrp-xt-10-cs-r15\" aria-label=\"Note 15\">15<\/a><\/sup>. The cost and workforce evidence comes in part from vendors and is labelled weak. This baseline sets out what the evidence supports and where it is thin. It forecasts no capability date and ranks no country or vendor.<\/p><\/div><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-cs-s2\" aria-labelledby=\"nx-nrp-xt-10-cs-s2-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-cs-s2-h\"><span class=\"nrp-num\">S.2<\/span><span>Key messages<\/span><\/h2><p class=\"nrp-stand\">Six readings that frame the cybersecurity and cryptography baseline, and the eight questions this edition answers, each with its status and source.<\/p><ol class=\"nrp-km\"><li><p class=\"nrp-km-t\">Three NIST standards were finalised in August 2024; HQC is a backup selected in March 2025.<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cs-n1\" aria-label=\"Note 1\">1<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cs-n6\" aria-label=\"Note 6\">6<\/a><\/sup><\/p><p class=\"nrp-km-m\"><span>Are post-quantum standards ready?<\/span><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/p><\/li><li><p class=\"nrp-km-t\">The UK NCSC says 2035; the NIST IR 8547 draft of November 2024 proposes disallowing quantum-vulnerable algorithms after 2035.<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cs-n10\" aria-label=\"Note 10\">10<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cs-n44\" id=\"nx-nrp-xt-10-cs-r44\" aria-label=\"Note 44\">44<\/a><\/sup><\/p><p class=\"nrp-km-m\"><span>When must migration finish?<\/span><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/p><\/li><li><p class=\"nrp-km-t\">Vendor and open-source evidence shows wide deployment of hybrid key agreement.<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cs-n23\" aria-label=\"Note 23\">23<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cs-n24\" aria-label=\"Note 24\">24<\/a><\/sup><\/p><p class=\"nrp-km-m\"><span>Is key agreement moving?<\/span><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/p><\/li><li><p class=\"nrp-km-t\">Slower. Post-quantum signatures add size, and broad certificate trust is not expected before 2027.<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cs-n23\" aria-label=\"Note 23\">23<\/a><\/sup><\/p><p class=\"nrp-km-m\"><span>Are signatures moving?<\/span><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/p><\/li><li><p class=\"nrp-km-t\">A 2025 estimate: under a million noisy qubits in under a week, under stated assumptions.<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cs-n22\" aria-label=\"Note 22\">22<\/a><\/sup><\/p><p class=\"nrp-km-m\"><span>How many qubits would break RSA-2048?<\/span><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/p><\/li><li><p class=\"nrp-km-t\">Exploited known vulnerabilities and ransomware recur across the sources read.<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cs-n13\" id=\"nx-nrp-xt-10-cs-r13\" aria-label=\"Note 13\">13<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cs-n14\" id=\"nx-nrp-xt-10-cs-r14\" aria-label=\"Note 14\">14<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cs-n15\" aria-label=\"Note 15\">15<\/a><\/sup><\/p><p class=\"nrp-km-m\"><span>What drives incidents?<\/span><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/p><\/li><li><p class=\"nrp-km-t\">Skills needs rose in 2025; no gap figure was published.<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cs-n20\" id=\"nx-nrp-xt-10-cs-r20\" aria-label=\"Note 20\">20<\/a><\/sup><\/p><p class=\"nrp-km-m\"><span>What does the workforce look like?<\/span><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/p><\/li><li><p class=\"nrp-km-t\">The lag of signatures and long-life devices behind key agreement. SCN-XT10-SIG-01<\/p><p class=\"nrp-km-m\"><span>What will 2027 test first?<\/span><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"neutral\" aria-hidden=\"true\"><\/span>Expert input<\/span><\/p><\/li><\/ol><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-cs-s3\" aria-labelledby=\"nx-nrp-xt-10-cs-s3-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-cs-s3-h\"><span class=\"nrp-num\">S.3<\/span><span>Headline finding<\/span><\/h2><p class=\"nrp-find-m\"><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><span class=\"nrp-eql\" title=\"Evidence-quality level, 1 to 5\">EQL 5<\/span><span class=\"nrp-find-id\">NRF-XTECH-CRYPTO-GLOBAL-2026-BASELINE-CRY-001<\/span><\/p><p class=\"nrp-km-t\">NIST finalised three post-quantum cryptography standards on 13 August 2024: FIPS 203 (ML-KEM), FIPS 204 (ML-DSA) and FIPS 205 (SLH-DSA).<\/p><figure class=\"nrp-fig\" id=\"nx-nrp-xt-10-cs-fig1\" aria-labelledby=\"nx-nrp-xt-10-cs-fig1-t\"><figcaption class=\"nrp-figcap\"><span class=\"nf-ui-eyebrow\">Figure S.1<\/span><span class=\"nf-ui-title\" data-level=\"card\" id=\"nx-nrp-xt-10-cs-fig1-t\">Standards finalised on 13 August 2024<\/span><\/figcaption><div class=\"nrp-tblw\"><table class=\"nrp-tbl nrp-bars\"><thead><tr><th scope=\"col\">Item<\/th><th scope=\"col\"><span class=\"nrp-sr\">Bar, scaled to the largest value<\/span><\/th><th scope=\"col\">Value<\/th><\/tr><\/thead><tbody><tr><th scope=\"row\">FIPS 203 \u00b7 key establishment (ML-KEM)<\/th><td class=\"nrp-barc\"><svg class=\"nrp-svg nrp-barsvg\" viewBox=\"0 0 100 8\" preserveAspectRatio=\"none\" aria-hidden=\"true\" focusable=\"false\"><rect class=\"nrp-track\" x=\"0\" y=\"0\" width=\"100\" height=\"8\"\/><rect class=\"nrp-bar\" x=\"0\" y=\"0\" width=\"100.0\" height=\"8\"\/><\/svg><\/td><td class=\"nrp-mono\">1<\/td><\/tr><tr><th scope=\"row\">FIPS 204 \u00b7 signatures (ML-DSA)<\/th><td class=\"nrp-barc\"><svg class=\"nrp-svg nrp-barsvg\" viewBox=\"0 0 100 8\" preserveAspectRatio=\"none\" aria-hidden=\"true\" focusable=\"false\"><rect class=\"nrp-track\" x=\"0\" y=\"0\" width=\"100\" height=\"8\"\/><rect class=\"nrp-bar\" x=\"0\" y=\"0\" width=\"100.0\" height=\"8\"\/><\/svg><\/td><td class=\"nrp-mono\">1<\/td><\/tr><tr><th scope=\"row\">FIPS 205 \u00b7 backup signatures (SLH-DSA)<\/th><td class=\"nrp-barc\"><svg class=\"nrp-svg nrp-barsvg\" viewBox=\"0 0 100 8\" preserveAspectRatio=\"none\" aria-hidden=\"true\" focusable=\"false\"><rect class=\"nrp-track\" x=\"0\" y=\"0\" width=\"100\" height=\"8\"\/><rect class=\"nrp-bar\" x=\"0\" y=\"0\" width=\"100.0\" height=\"8\"\/><\/svg><\/td><td class=\"nrp-mono\">1<\/td><\/tr><\/tbody><\/table><\/div><p class=\"nrp-fig-src\">Source: NIST publication pages for FIPS 203, 204 and 205<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cs-n1\" aria-label=\"Note 1\">1<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cs-n2\" aria-label=\"Note 2\">2<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cs-n3\" aria-label=\"Note 3\">3<\/a><\/sup>. Each bar counts one standard.<\/p><\/figure><p class=\"nrp-p\">Standards exist, so migration is now an engineering and planning task. NIST added HQC as a backup key-encapsulation method on a different mathematical basis, with a final standard expected in 2027<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cs-n6\" aria-label=\"Note 6\">6<\/a><\/sup>. Guidance on using key encapsulation was published in September 2025<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cs-n7\" id=\"nx-nrp-xt-10-cs-r7\" aria-label=\"Note 7\">7<\/a><\/sup>. The NIST transition draft IR 8547, published on 12 November 2024, proposes disallowing quantum-vulnerable public-key algorithms after 2035<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cs-n44\" aria-label=\"Note 44\">44<\/a><\/sup>.<\/p><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-cs-s4\" aria-labelledby=\"nx-nrp-xt-10-cs-s4-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-cs-s4-h\"><span class=\"nrp-num\">S.4<\/span><span>At a glance<\/span><\/h2><div class=\"pp-cells nrp-cells-3\"><div class=\"nrp-cell\"><span class=\"pp-metric\">3<\/span><span class=\"nrp-cell-u\">standards<\/span><p>NIST, August 2024<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cs-n1\" aria-label=\"Note 1\">1<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cs-n2\" aria-label=\"Note 2\">2<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cs-n3\" aria-label=\"Note 3\">3<\/a><\/sup><\/p><\/div><div class=\"nrp-cell\"><span class=\"pp-metric\">2035<\/span><span class=\"nrp-cell-u\">milestone<\/span><p>NCSC finish date<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cs-n10\" aria-label=\"Note 10\">10<\/a><\/sup><\/p><\/div><div class=\"nrp-cell\"><span class=\"pp-metric\">&lt;1<\/span><span class=\"nrp-cell-u\">million<\/span><p>qubits for RSA-2048, estimate<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cs-n22\" aria-label=\"Note 22\">22<\/a><\/sup><\/p><\/div><div class=\"nrp-cell\"><span class=\"pp-metric\">NOT BOUND<\/span><span class=\"nrp-cell-u\">entries<\/span><p>CISA KEV count at the close<\/p><\/div><div class=\"nrp-cell\"><span class=\"pp-metric\">859,532<\/span><span class=\"nrp-cell-u\">complaints<\/span><p>FBI IC3, 2024<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cs-n15\" aria-label=\"Note 15\">15<\/a><\/sup><\/p><\/div><div class=\"nrp-cell\"><span class=\"pp-metric\">4.99<\/span><span class=\"nrp-cell-u\">USD million<\/span><p>average breach cost, 2026<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cs-n18\" id=\"nx-nrp-xt-10-cs-r18\" aria-label=\"Note 18\">18<\/a><\/sup><\/p><\/div><\/div><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-cs-s5\" aria-labelledby=\"nx-nrp-xt-10-cs-s5-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-cs-s5-h\"><span class=\"nrp-num\">S.5<\/span><span>What each steward reads in it<\/span><\/h2><div class=\"nrp-cards\" data-n=\"3\"><article class=\"nf-ui-card nrp-card\"><p class=\"nf-ui-eyebrow\">GCRI \u00b7 KEY T<\/p><h3 class=\"nf-ui-title\" data-level=\"card\">Technical Truth<\/h3><p>The evidence supports reading cybersecurity and cryptography as protective infrastructure under change.<\/p><\/article><article class=\"nf-ui-card nrp-card\"><p class=\"nf-ui-eyebrow\"><abbr title=\"The Global Risks Forum\">GRF<\/abbr> \u00b7 KEY M<\/p><h3 class=\"nf-ui-title\" data-level=\"card\">Public Meaning<\/h3><p>For most people the story arrives as a message about encryption, a breach notice or a ransomware headline.<\/p><\/article><article class=\"nf-ui-card nrp-card\"><p class=\"nf-ui-eyebrow\"><abbr title=\"The Global Risks Alliance\">GRA<\/abbr> \u00b7 KEY F<\/p><h3 class=\"nf-ui-title\" data-level=\"card\">Capital Meaning<\/h3><p>Readiness implications only. Breach and ransomware costs come from vendors and are weak evidence.<\/p><\/article><article class=\"nf-ui-card nrp-card\"><p class=\"nf-ui-eyebrow\">NEXUS<\/p><h3 class=\"nf-ui-title\" data-level=\"card\">Synthesis<\/h3><p>Cryptography is well described by standards and thinly measured as a system.<\/p><\/article><\/div><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-cs-s6\" aria-labelledby=\"nx-nrp-xt-10-cs-s6-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-cs-s6-h\"><span class=\"nrp-num\">S.6<\/span><span>What this edition is, and is not<\/span><\/h2><div class=\"pp-cells nrp-cells-3\"><div class=\"nrp-cell\"><h3 class=\"nf-ui-title\" data-level=\"card\">What this edition is<\/h3><p>A baseline: the 2026 state of cybersecurity and advanced cryptography as infrastructure and the couplings through which it carries risk into other <a class=\"nx-link nx-term\" href=\"https:\/\/docs.therisk.global\/organization\/systems\" data-tc=\"Systems\" data-tk=\"Nexus Standards\" data-td=\"The twenty Nexus systems, NXS-CMD to NXS-LAB\">systems<\/a>. It synthesises published evidence and ranks no country, company or asset.<\/p><\/div><div class=\"nrp-cell\"><h3 class=\"nf-ui-title\" data-level=\"card\">What it is not<\/h3><p>Not a forecast of when any machine will break any cipher, a technology ranking, an endorsement of any vendor or product, or an assessment of any programme. Standards, regulation and enforcement are decisions of competent authorities.<\/p><\/div><div class=\"nrp-cell\"><h3 class=\"nf-ui-title\" data-level=\"card\">What comes next<\/h3><p>National, regional and sector evidence feeds the 2027 cybersecurity and cryptography edition through the federation. Each edition reports what changed against this baseline: observations, source revisions, method changes, scenario updates and corrections.<\/p><\/div><\/div><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-cs-notes\" aria-labelledby=\"nx-nrp-xt-10-cs-notes-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-cs-notes-h\"><span>Notes<\/span><\/h2><p class=\"nrp-note\">Numbers are the edition&#8217;s reference numbers, so a note reads the same in every chapter. The full list, with every source and its licence, is in Annex C. <a href=\"https:\/\/therisk.global\/nexus-reports\/editions\/xt-10\/references\/\">Annex C, references<\/a><\/p><ol class=\"nrp-notes\"><li id=\"nx-nrp-xt-10-cs-n1\"><span class=\"nrp-notes-n\">1<\/span><span>NIST (ed.), Module-Lattice-Based Key-Encapsulation Mechanism Standard, FIPS 203 (publication page; final 13 August 2024; ML-KEM-512, ML-KEM-768 and ML-KEM-1024; initial draft 24 August 2023). National Institute of Standards and Technology, Gaithersburg. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-cs-r1\" aria-label=\"Back to the first call of note 1\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-cs-n2\"><span class=\"nrp-notes-n\">2<\/span><span>NIST (ed.), Module-Lattice-Based Digital Signature Standard, FIPS 204 (publication page; final 13 August 2024; ML-DSA). National Institute of Standards and Technology, Gaithersburg. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-cs-r2\" aria-label=\"Back to the first call of note 2\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-cs-n3\"><span class=\"nrp-notes-n\">3<\/span><span>NIST (ed.), Stateless Hash-Based Digital Signature Standard, FIPS 205 (publication page; final 13 August 2024; SLH-DSA, based on SPHINCS+). National Institute of Standards and Technology, Gaithersburg. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-cs-r3\" aria-label=\"Back to the first call of note 3\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-cs-n6\"><span class=\"nrp-notes-n\">6<\/span><span>NIST (ed.), NIST selects HQC as fifth algorithm for post-quantum encryption (news item, 11 March 2025; backup to ML-KEM; draft standard expected in about a year; final standard expected in 2027). National Institute of Standards and Technology, Gaithersburg. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-cs-r6\" aria-label=\"Back to the first call of note 6\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-cs-n10\"><span class=\"nrp-notes-n\">10<\/span><span>UK National Cyber Security Centre (ed.), Timelines for migration to post-quantum cryptography (guidance page; version 1.0, 20 March 2025; milestones 2028, 2031 and 2035). NCSC, London. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-cs-r10\" aria-label=\"Back to the first call of note 10\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-cs-n22\"><span class=\"nrp-notes-n\">22<\/span><span>Gidney, C., How to factor 2048 bit RSA integers with less than a million noisy qubits, arXiv:2505.15917, submitted 21 May 2025 (abstract page; under one million noisy qubits; under a week; 0.1% gate error; 1 microsecond cycle; 10 microsecond reaction time; the author\u2019s 2019 estimate was about 20 million qubits in 8 hours). arXiv, Ithaca. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-cs-r22\" aria-label=\"Back to the first call of note 22\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-cs-n23\"><span class=\"nrp-notes-n\">23<\/span><span>Cloudflare (ed.), The state of the post-quantum Internet in 2025 (blog analysis; late October 2025 majority of human traffic with post-quantum key agreement; 3.7% of origins; 39% of top 100,000 domains in September 2025; ML-DSA-44 about 15 kB; first post-quantum certificates expected in 2026). Cloudflare, San Francisco. Vendor analysis of its own network, weak evidence. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-cs-r23\" aria-label=\"Back to the first call of note 23\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-cs-n24\"><span class=\"nrp-notes-n\">24<\/span><span>OpenSSH project (ed.), Post-quantum cryptography in OpenSSH (documentation page; sntrup761x25519-sha512 from 9.0; mlkem768x25519-sha256 added in 9.9 and default in 10.0; warning from 10.1). OpenBSD Project. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-cs-r24\" aria-label=\"Back to the first call of note 24\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-cs-n15\"><span class=\"nrp-notes-n\">15<\/span><span>Federal Bureau of Investigation, Internet Crime Complaint Center (ed.), 2024 Internet Crime Report (859,532 complaints; USD 16.6 billion losses, up 33%; 256,256 complaints with a loss; 3,156 ransomware complaints; 263,455 cyber-threat complaints and USD 1.571 billion; 4,878 critical-infrastructure complaints). FBI, Washington. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-cs-r15\" aria-label=\"Back to the first call of note 15\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-cs-n44\"><span class=\"nrp-notes-n\">44<\/span><span>NIST (ed.), Transition to Post-Quantum Cryptography Standards, NIST IR 8547, initial public draft (draft PDF, November 2024; Tables 2 and 4: for quantum-vulnerable signature and key-establishment schemes at 112 bits of security strength, deprecated after 2030 and disallowed after 2035, and at 128 bits or more, disallowed after 2035; the cover sheet added on withdrawal on 27 October 2026 is not used). National Institute of Standards and Technology, Gaithersburg. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-cs-r44\" aria-label=\"Back to the first call of note 44\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-cs-n13\"><span class=\"nrp-notes-n\">13<\/span><span>POST-CLOSE, context only: CISA (ed.), Known Exploited Vulnerabilities Catalog (catalogue page; 1,767 results at the read; newest entry added 2026-11-03). Cybersecurity and Infrastructure Security Agency, Arlington. Observation year 2026. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-cs-r13\" aria-label=\"Back to the first call of note 13\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-cs-n14\"><span class=\"nrp-notes-n\">14<\/span><span>CISA and 22 partner agencies (eds.), Countering Chinese State-Sponsored Actors Compromise of Networks Worldwide to Feed Global Espionage System, advisory AA25-239A (published 27 August 2025; revised 3 September 2025; 23 agencies from 13 countries; known vulnerabilities; no zero-day exploitation observed). Cybersecurity and Infrastructure Security Agency, Arlington. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-cs-r14\" aria-label=\"Back to the first call of note 14\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-cs-n20\"><span class=\"nrp-notes-n\">20<\/span><span>ISC2 (ed.), 2025 Cybersecurity Workforce Study (page; published 4 December 2025; 16,029 respondents; 59% critical or significant skills needs, up from 44%; no workforce gap estimate). ISC2, Alexandria. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-cs-r20\" aria-label=\"Back to the first call of note 20\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-cs-n7\"><span class=\"nrp-notes-n\">7<\/span><span>NIST (ed.), Recommendations for Key-Encapsulation Mechanisms, SP 800-227 (publication page; final 18 September 2025). National Institute of Standards and Technology, Gaithersburg. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-cs-r7\" aria-label=\"Back to the first call of note 7\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-cs-n18\"><span class=\"nrp-notes-n\">18<\/span><span>IBM and Ponemon Institute (eds.), Cost of a <a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/nrs\/#nrs-h51\" data-tc=\"NHS-1 cyber.intrusion.data-breach\" data-tk=\"Information and cyber-physical systems \u00b7 Malicious compromise\" data-td=\"Unauthorised access to, or release of, personal, commercial or operational data.\" data-ts=\"NRS-H51\" data-tr=\"draft\" data-tx=\"https:\/\/risksindex.com\/hazards\/cyber\/\" data-txl=\"Information and cyber-physical systems\">Data Breach<\/a> Report 2026 (landing page; global average USD 4.99 million, up 12%; AI-driven attacks up 56%). IBM, Armonk. Vendor report, weak evidence; the full report was not opened. Observation year 2026. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-cs-r18\" aria-label=\"Back to the first call of note 18\">back<\/a><\/span><\/li><\/ol><\/section><\/div><div class=\"nrp-part\" id=\"nx-nrp-xt-10-part-coupled-system\"><header class=\"nrp-chap-head\" id=\"nx-nrp-xt-10-c1-top\"><ul class=\"nrp-eyerow\"><li class=\"nf-ui-eyebrow\"><a href=\"https:\/\/therisk.global\/nexus-reports\/editions\/xt-10\/\">Cybersecurity and Advanced Cryptography 2026<\/a><\/li><li class=\"nf-ui-eyebrow\">Chapter 1<\/li><\/ul><span class=\"nrp-rule\" aria-hidden=\"true\"><\/span><h2 class=\"pp-hero-title\">Cryptography is infrastructure under change<\/h2><p class=\"nrp-lede\">Part I describes systems and their couplings. It ranks no country or operator and assesses no authority.<\/p><p class=\"nrp-chap-meta\"><span>8 min read<\/span><span>2 figures<\/span><span>1 table<\/span><span>19 notes<\/span><span>NR-XTECH-CRYPTO-GLOBAL-2026-BASELINE<\/span><\/p><\/header><section class=\"nrp-block\" id=\"nx-nrp-xt-10-c1-s1\" aria-labelledby=\"nx-nrp-xt-10-c1-s1-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-c1-s1-h\"><span class=\"nrp-num\">1.1<\/span><span>The questions this part answers<\/span><\/h2><h3 class=\"nrp-h3\">Key questions<\/h3><ul class=\"nrp-list\"><li>Where is cybersecurity and cryptography risk concentrated?<\/li><li>Which couplings carry cybersecurity and cryptography shocks into other <a class=\"nx-link nx-term\" href=\"https:\/\/docs.therisk.global\/organization\/systems\" data-tc=\"Systems\" data-tk=\"Nexus Standards\" data-td=\"The twenty Nexus systems, NXS-CMD to NXS-LAB\">systems<\/a>?<\/li><li>Which cybersecurity and cryptography capabilities hold under compound stress?<\/li><li>What must 2027 evidence measure first?<\/li><\/ul><h3 class=\"nrp-h3\">In this part<\/h3><ul class=\"nrp-chips\"><li class=\"nf-ui-chip\">Narrative<\/li><li class=\"nf-ui-chip\">Headline finding<\/li><li class=\"nf-ui-chip\">Lead figure<\/li><li class=\"nf-ui-chip\">Five footprint and governance chapters<\/li><li class=\"nf-ui-chip\">Twelve-domain reading<\/li><li class=\"nf-ui-chip\">Sector screens<\/li><li class=\"nf-ui-chip\">Dependency matrix<\/li><li class=\"nf-ui-chip\">Risk objects<\/li><li class=\"nf-ui-chip\">Capability ladder<\/li><li class=\"nf-ui-chip\">Scenario<\/li><li class=\"nf-ui-chip\">Three lenses<\/li><li class=\"nf-ui-chip\">Portfolio<\/li><\/ul><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-c1-s2\" aria-labelledby=\"nx-nrp-xt-10-c1-s2-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-c1-s2-h\"><span class=\"nrp-num\">1.2<\/span><span>The argument<\/span><\/h2><div class=\"nrp-prose\"><p>Cybersecurity is usually discussed as a contest between attackers and defenders. The 2026 evidence reads it as an infrastructure under change: the cryptography beneath every other infrastructure is being replaced, while ordinary vulnerabilities and ransomware keep producing most of the visible harm<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c1-n1\" id=\"nx-nrp-xt-10-c1-r1\" aria-label=\"Note 1\">1<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c1-n13\" id=\"nx-nrp-xt-10-c1-r13\" aria-label=\"Note 13\">13<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c1-n15\" id=\"nx-nrp-xt-10-c1-r15\" aria-label=\"Note 15\">15<\/a><\/sup>.<\/p><p>The standards evidence is strong. NIST finalised three post-quantum standards in 2024 and chose a backup in 2025<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c1-n1\" aria-label=\"Note 1\">1<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c1-n2\" id=\"nx-nrp-xt-10-c1-r2\" aria-label=\"Note 2\">2<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c1-n3\" id=\"nx-nrp-xt-10-c1-r3\" aria-label=\"Note 3\">3<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c1-n6\" id=\"nx-nrp-xt-10-c1-r6\" aria-label=\"Note 6\">6<\/a><\/sup>. National timelines exist: the NCSC asks for completion by 2035<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c1-n10\" id=\"nx-nrp-xt-10-c1-r10\" aria-label=\"Note 10\">10<\/a><\/sup>, and the NIST transition draft of November 2024 proposes disallowing quantum-vulnerable algorithms after 2035<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c1-n44\" id=\"nx-nrp-xt-10-c1-r44\" aria-label=\"Note 44\">44<\/a><\/sup>. A 2025 preprint lowered the estimated qubits for RSA-2048 to under a million, under stated assumptions<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c1-n22\" id=\"nx-nrp-xt-10-c1-r22\" aria-label=\"Note 22\">22<\/a><\/sup>.<\/p><p>Deployment evidence is uneven. Key agreement has moved quickly where it is cheap, in browsers, content networks and secure shell<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c1-n23\" id=\"nx-nrp-xt-10-c1-r23\" aria-label=\"Note 23\">23<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c1-n24\" id=\"nx-nrp-xt-10-c1-r24\" aria-label=\"Note 24\">24<\/a><\/sup>. Signatures and certificates are harder, because they add size to every handshake<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c1-n23\" aria-label=\"Note 23\">23<\/a><\/sup>. Protocols built on messaging have added post-quantum steps<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c1-n25\" id=\"nx-nrp-xt-10-c1-r25\" aria-label=\"Note 25\">25<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c1-n26\" id=\"nx-nrp-xt-10-c1-r26\" aria-label=\"Note 26\">26<\/a><\/sup>.<\/p><p>The threat evidence is dominated by ordinary causes. Exploited known vulnerabilities, ransomware and fraud account for the reported harm<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c1-n13\" aria-label=\"Note 13\">13<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c1-n14\" id=\"nx-nrp-xt-10-c1-r14\" aria-label=\"Note 14\">14<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c1-n15\" aria-label=\"Note 15\">15<\/a><\/sup>. Cost and workforce evidence comes in part from vendors and is read as weak<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c1-n18\" id=\"nx-nrp-xt-10-c1-r18\" aria-label=\"Note 18\">18<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c1-n19\" id=\"nx-nrp-xt-10-c1-r19\" aria-label=\"Note 19\">19<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c1-n20\" id=\"nx-nrp-xt-10-c1-r20\" aria-label=\"Note 20\">20<\/a><\/sup>.<\/p><\/div><figure class=\"nrp-fig\" id=\"nx-nrp-xt-10-c1-fig1\" aria-labelledby=\"nx-nrp-xt-10-c1-fig1-t\"><figcaption class=\"nrp-figcap\"><span class=\"nf-ui-eyebrow\">Figure 1.1<\/span><span class=\"nf-ui-title\" data-level=\"card\" id=\"nx-nrp-xt-10-c1-fig1-t\">How large are ransomware payments on-chain? USD million<\/span><p class=\"nrp-fig-what\">Chainalysis estimates a fall of about 8% in on-chain ransomware payments from 2024 to 2025, and expects the 2025 total to grow as more payments are attributed. The 2024 figure was revised upward from USD 813 million. The series is a vendor estimate and covers on-chain payments only<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c1-n19\" aria-label=\"Note 19\">19<\/a><\/sup>.<\/p><\/figcaption><div class=\"nrp-tblw\"><table class=\"nrp-tbl nrp-bars\"><thead><tr><th scope=\"col\">Item<\/th><th scope=\"col\"><span class=\"nrp-sr\">Bar, scaled to the largest value<\/span><\/th><th scope=\"col\">Value<\/th><\/tr><\/thead><tbody><tr><th scope=\"row\">2024, updated estimate<\/th><td class=\"nrp-barc\"><svg class=\"nrp-svg nrp-barsvg\" viewBox=\"0 0 100 8\" preserveAspectRatio=\"none\" aria-hidden=\"true\" focusable=\"false\"><rect class=\"nrp-track\" x=\"0\" y=\"0\" width=\"100\" height=\"8\"\/><rect class=\"nrp-bar\" x=\"0\" y=\"0\" width=\"100.0\" height=\"8\"\/><\/svg><\/td><td class=\"nrp-mono\">892<\/td><\/tr><tr><th scope=\"row\">2025, more than<\/th><td class=\"nrp-barc\"><svg class=\"nrp-svg nrp-barsvg\" viewBox=\"0 0 100 8\" preserveAspectRatio=\"none\" aria-hidden=\"true\" focusable=\"false\"><rect class=\"nrp-track\" x=\"0\" y=\"0\" width=\"100\" height=\"8\"\/><rect class=\"nrp-bar\" x=\"0\" y=\"0\" width=\"91.9\" height=\"8\"\/><\/svg><\/td><td class=\"nrp-mono\">820<\/td><\/tr><\/tbody><\/table><\/div><p class=\"nrp-fig-src\">Source: as cited in the note to this figure. Year 2025.<\/p><p class=\"nrp-fig-src\">Figure ID FIG-XTECH-CRYPTO-GLOBAL-2026-BASELINE-01-003<\/p><\/figure><div class=\"pp-cells nrp-cells-3\"><div class=\"nrp-cell\"><span class=\"pp-metric\">820<\/span><span class=\"nrp-cell-u\">USD million<\/span><p>2025 floor, vendor estimate<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c1-n19\" aria-label=\"Note 19\">19<\/a><\/sup><\/p><\/div><div class=\"nrp-cell\"><span class=\"pp-metric\">892<\/span><span class=\"nrp-cell-u\">USD million<\/span><p>2024 updated estimate<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c1-n19\" aria-label=\"Note 19\">19<\/a><\/sup><\/p><\/div><div class=\"nrp-cell\"><span class=\"pp-metric\">813<\/span><span class=\"nrp-cell-u\">USD million<\/span><p>2024 original estimate<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c1-n19\" aria-label=\"Note 19\">19<\/a><\/sup><\/p><\/div><div class=\"nrp-cell\"><span class=\"pp-metric\">12.5<\/span><span class=\"nrp-cell-u\">USD million<\/span><p>ransomware adjusted losses reported to the FBI, 2024<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c1-n15\" aria-label=\"Note 15\">15<\/a><\/sup><\/p><\/div><\/div><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-c1-s3\" aria-labelledby=\"nx-nrp-xt-10-c1-s3-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-c1-s3-h\"><span class=\"nrp-num\">1.3<\/span><span>Twenty couplings between five systems<\/span><\/h2><p class=\"nrp-stand\">The cybersecurity and cryptography-centred matrix types the twenty couplings between the five core <a class=\"nx-link nx-term\" href=\"https:\/\/docs.therisk.global\/organization\/systems\" data-tc=\"Systems\" data-tk=\"Nexus Standards\" data-td=\"The twenty Nexus systems, NXS-CMD to NXS-LAB\">systems<\/a>, read for their cybersecurity and cryptography content. Strengths are Nexus estimates (ESTIMATED) from the cited evidence and analogue events; they set the graph that 2027 evidence will test.<\/p><figure class=\"nrp-fig\" id=\"nx-nrp-xt-10-c1-fig2\" aria-labelledby=\"nx-nrp-xt-10-c1-fig2-t\"><figcaption class=\"nrp-figcap\"><span class=\"nf-ui-eyebrow\">Figure 1.2<\/span><span class=\"nf-ui-title\" data-level=\"card\" id=\"nx-nrp-xt-10-c1-fig2-t\">Couplings between the five systems<\/span><p class=\"nrp-fig-what\">Each line is one coupling from one system to another, drawn by the strength the edition assigns. Strengths are Nexus estimates from the cited evidence and analogue events.<\/p><\/figcaption><svg class=\"nrp-svg nrp-ring\" viewBox=\"0 0 340 340\" role=\"img\" aria-label=\"Coupling ring: 20 typed couplings between water, energy, food, health and biodiversity. The matrix in the next table carries every value.\" data-nx-z=\"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\"><\/svg><ul class=\"nrp-legend\"><li><span class=\"nrp-key\" data-w=\"STRONG\"><\/span>Strong<\/li><li><span class=\"nrp-key\" data-w=\"MODERATE\"><\/span>Moderate<\/li><li><span class=\"nrp-key\" data-w=\"WEAK\"><\/span>Weak<\/li><\/ul><p class=\"nrp-fig-src\">Source: this edition&#8217;s coupling matrix (Table 1.1); status Estimated.<\/p><\/figure><div class=\"nrp-tblw\" id=\"nx-nrp-xt-10-c1-tab1\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table 1.1<\/span><span class=\"nrp-tbl-t\">Coupling matrix: from the row system to the column system<\/span><\/caption><thead><tr><th scope=\"col\">From, to<\/th><th scope=\"col\">WAT<\/th><th scope=\"col\">ENE<\/th><th scope=\"col\">FOO<\/th><th scope=\"col\">HLT<\/th><th scope=\"col\">BIO<\/th><\/tr><\/thead><tbody><tr><td><b>WAT<\/b> Water<\/td><td><span aria-label=\"same system\">\u00b7<\/span><\/td><td>WEAK<br><span class=\"nrp-cell-u\">no documented link<\/span><\/td><td>WEAK<br><span class=\"nrp-cell-u\">no documented link<\/span><\/td><td>WEAK<br><span class=\"nrp-cell-u\">no documented link<\/span><\/td><td>WEAK<br><span class=\"nrp-cell-u\">no documented link<\/span><\/td><\/tr><tr><td><b>ENE<\/b> Energy<\/td><td>WEAK<br><span class=\"nrp-cell-u\">control network dependence, undocumented<\/span><\/td><td><span aria-label=\"same system\">\u00b7<\/span><\/td><td>WEAK<br><span class=\"nrp-cell-u\">no documented link<\/span><\/td><td>WEAK<br><span class=\"nrp-cell-u\">power for facilities, undocumented<\/span><\/td><td>WEAK<br><span class=\"nrp-cell-u\">no documented link<\/span><\/td><\/tr><tr><td><b>FOO<\/b> Food<\/td><td>WEAK<br><span class=\"nrp-cell-u\">no documented link<\/span><\/td><td>WEAK<br><span class=\"nrp-cell-u\">no documented link<\/span><\/td><td><span aria-label=\"same system\">\u00b7<\/span><\/td><td>WEAK<br><span class=\"nrp-cell-u\">no documented link<\/span><\/td><td>WEAK<br><span class=\"nrp-cell-u\">no documented link<\/span><\/td><\/tr><tr><td><b>HLT<\/b> Health<\/td><td>WEAK<br><span class=\"nrp-cell-u\">no documented link<\/span><\/td><td>WEAK<br><span class=\"nrp-cell-u\">no documented link<\/span><\/td><td>WEAK<br><span class=\"nrp-cell-u\">no documented link<\/span><\/td><td><span aria-label=\"same system\">\u00b7<\/span><\/td><td>WEAK<br><span class=\"nrp-cell-u\">no documented link<\/span><\/td><\/tr><tr><td><b>BIO<\/b> Biodiversity<\/td><td>WEAK<br><span class=\"nrp-cell-u\">no documented link<\/span><\/td><td>WEAK<br><span class=\"nrp-cell-u\">no documented link<\/span><\/td><td>WEAK<br><span class=\"nrp-cell-u\">no documented link<\/span><\/td><td>WEAK<br><span class=\"nrp-cell-u\">no documented link<\/span><\/td><td><span aria-label=\"same system\">\u00b7<\/span><\/td><\/tr><\/tbody><tfoot><tr><td colspan=\"6\">Strength: strong, moderate or weak; a Nexus estimate (status Estimated) from cited evidence and analogue events. The scale is defined in Annex A.<\/td><\/tr><\/tfoot><\/table><\/div><h3 class=\"nrp-h3\">Transmission paths<\/h3><ol class=\"nrp-rows\"><li><span class=\"nrp-rows-i\">01<\/span><p class=\"nrp-rows-t\">INF \u2192 DAT<\/p><p class=\"nrp-rows-x\">A capable machine would expose data protected by current public-key methods.<\/p><p class=\"nrp-rows-m\"><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"neutral\" aria-hidden=\"true\"><\/span>Inferred<\/span> RSA-2048 estimate<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c1-n22\" aria-label=\"Note 22\">22<\/a><\/sup><\/p><\/li><li><span class=\"nrp-rows-i\">02<\/span><p class=\"nrp-rows-t\">GOV \u2192 INF<\/p><p class=\"nrp-rows-x\">National timelines set migration dates for operators.<\/p><p class=\"nrp-rows-m\"><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span> NCSC and NIST draft<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c1-n10\" aria-label=\"Note 10\">10<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c1-n44\" aria-label=\"Note 44\">44<\/a><\/sup><\/p><\/li><li><span class=\"nrp-rows-i\">03<\/span><p class=\"nrp-rows-t\">INF \u2192 FIN<\/p><p class=\"nrp-rows-x\">Exploited vulnerabilities and ransomware create cost and loss.<\/p><p class=\"nrp-rows-m\"><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span> IC3, IBM, Chainalysis<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c1-n15\" aria-label=\"Note 15\">15<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c1-n18\" aria-label=\"Note 18\">18<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c1-n19\" aria-label=\"Note 19\">19<\/a><\/sup><\/p><\/li><li><span class=\"nrp-rows-i\">04<\/span><p class=\"nrp-rows-t\">INF \u2192 INF<\/p><p class=\"nrp-rows-x\">Larger signatures slow handshakes and delay certificate migration.<\/p><p class=\"nrp-rows-m\"><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"neutral\" aria-hidden=\"true\"><\/span>Inferred<\/span> Cloudflare analysis<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c1-n23\" aria-label=\"Note 23\">23<\/a><\/sup><\/p><\/li><li><span class=\"nrp-rows-i\">05<\/span><p class=\"nrp-rows-t\">GOV \u2192 TRD<\/p><p class=\"nrp-rows-x\">Reporting duties and disclosure rules cross borders.<\/p><p class=\"nrp-rows-m\"><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span> SEC rule and EU regulation<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c1-n21\" id=\"nx-nrp-xt-10-c1-r21\" aria-label=\"Note 21\">21<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c1-n27\" id=\"nx-nrp-xt-10-c1-r27\" aria-label=\"Note 27\">27<\/a><\/sup><\/p><\/li><\/ol><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-c1-notes\" aria-labelledby=\"nx-nrp-xt-10-c1-notes-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-c1-notes-h\"><span>Notes<\/span><\/h2><p class=\"nrp-note\">Numbers are the edition&#8217;s reference numbers, so a note reads the same in every chapter. The full list, with every source and its licence, is in Annex C. <a href=\"https:\/\/therisk.global\/nexus-reports\/editions\/xt-10\/references\/\">Annex C, references<\/a><\/p><ol class=\"nrp-notes\"><li id=\"nx-nrp-xt-10-c1-n1\"><span class=\"nrp-notes-n\">1<\/span><span>NIST (ed.), Module-Lattice-Based Key-Encapsulation Mechanism Standard, FIPS 203 (publication page; final 13 August 2024; ML-KEM-512, ML-KEM-768 and ML-KEM-1024; initial draft 24 August 2023). National Institute of Standards and Technology, Gaithersburg. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c1-r1\" aria-label=\"Back to the first call of note 1\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c1-n13\"><span class=\"nrp-notes-n\">13<\/span><span>POST-CLOSE, context only: CISA (ed.), Known Exploited Vulnerabilities Catalog (catalogue page; 1,767 results at the read; newest entry added 2026-11-03). Cybersecurity and Infrastructure Security Agency, Arlington. Observation year 2026. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c1-r13\" aria-label=\"Back to the first call of note 13\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c1-n15\"><span class=\"nrp-notes-n\">15<\/span><span>Federal Bureau of Investigation, Internet Crime Complaint Center (ed.), 2024 Internet Crime Report (859,532 complaints; USD 16.6 billion losses, up 33%; 256,256 complaints with a loss; 3,156 ransomware complaints; 263,455 cyber-threat complaints and USD 1.571 billion; 4,878 critical-infrastructure complaints). FBI, Washington. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c1-r15\" aria-label=\"Back to the first call of note 15\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c1-n2\"><span class=\"nrp-notes-n\">2<\/span><span>NIST (ed.), Module-Lattice-Based Digital Signature Standard, FIPS 204 (publication page; final 13 August 2024; ML-DSA). National Institute of Standards and Technology, Gaithersburg. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c1-r2\" aria-label=\"Back to the first call of note 2\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c1-n3\"><span class=\"nrp-notes-n\">3<\/span><span>NIST (ed.), Stateless Hash-Based Digital Signature Standard, FIPS 205 (publication page; final 13 August 2024; SLH-DSA, based on SPHINCS+). National Institute of Standards and Technology, Gaithersburg. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c1-r3\" aria-label=\"Back to the first call of note 3\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c1-n6\"><span class=\"nrp-notes-n\">6<\/span><span>NIST (ed.), NIST selects HQC as fifth algorithm for post-quantum encryption (news item, 11 March 2025; backup to ML-KEM; draft standard expected in about a year; final standard expected in 2027). National Institute of Standards and Technology, Gaithersburg. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c1-r6\" aria-label=\"Back to the first call of note 6\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c1-n10\"><span class=\"nrp-notes-n\">10<\/span><span>UK National Cyber Security Centre (ed.), Timelines for migration to post-quantum cryptography (guidance page; version 1.0, 20 March 2025; milestones 2028, 2031 and 2035). NCSC, London. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c1-r10\" aria-label=\"Back to the first call of note 10\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c1-n44\"><span class=\"nrp-notes-n\">44<\/span><span>NIST (ed.), Transition to Post-Quantum Cryptography Standards, NIST IR 8547, initial public draft (draft PDF, November 2024; Tables 2 and 4: for quantum-vulnerable signature and key-establishment schemes at 112 bits of security strength, deprecated after 2030 and disallowed after 2035, and at 128 bits or more, disallowed after 2035; the cover sheet added on withdrawal on 27 October 2026 is not used). National Institute of Standards and Technology, Gaithersburg. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c1-r44\" aria-label=\"Back to the first call of note 44\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c1-n22\"><span class=\"nrp-notes-n\">22<\/span><span>Gidney, C., How to factor 2048 bit RSA integers with less than a million noisy qubits, arXiv:2505.15917, submitted 21 May 2025 (abstract page; under one million noisy qubits; under a week; 0.1% gate error; 1 microsecond cycle; 10 microsecond reaction time; the author\u2019s 2019 estimate was about 20 million qubits in 8 hours). arXiv, Ithaca. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c1-r22\" aria-label=\"Back to the first call of note 22\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c1-n23\"><span class=\"nrp-notes-n\">23<\/span><span>Cloudflare (ed.), The state of the post-quantum Internet in 2025 (blog analysis; late October 2025 majority of human traffic with post-quantum key agreement; 3.7% of origins; 39% of top 100,000 domains in September 2025; ML-DSA-44 about 15 kB; first post-quantum certificates expected in 2026). Cloudflare, San Francisco. Vendor analysis of its own network, weak evidence. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c1-r23\" aria-label=\"Back to the first call of note 23\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c1-n24\"><span class=\"nrp-notes-n\">24<\/span><span>OpenSSH project (ed.), Post-quantum cryptography in OpenSSH (documentation page; sntrup761x25519-sha512 from 9.0; mlkem768x25519-sha256 added in 9.9 and default in 10.0; warning from 10.1). OpenBSD Project. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c1-r24\" aria-label=\"Back to the first call of note 24\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c1-n25\"><span class=\"nrp-notes-n\">25<\/span><span>Signal (ed.), Signal Protocol and Post-Quantum Ratchets, SPQR triple ratchet (blog post, 2 October 2025; ML-KEM 768; gradual rollout; formal verification). Signal Messenger, Mountain View. Vendor announcement, weak evidence. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c1-r25\" aria-label=\"Back to the first call of note 25\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c1-n26\"><span class=\"nrp-notes-n\">26<\/span><span>Apple (ed.), iMessage with PQ3: The new state of the art in quantum-secure messaging at scale (security blog post, 21 February 2024; Kyber-1024 and Kyber-768 hybrid with P-256; level 3 on its own scale). Apple, Cupertino. Vendor announcement, weak evidence. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c1-r26\" aria-label=\"Back to the first call of note 26\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c1-n14\"><span class=\"nrp-notes-n\">14<\/span><span>CISA and 22 partner agencies (eds.), Countering Chinese State-Sponsored Actors Compromise of Networks Worldwide to Feed Global Espionage System, advisory AA25-239A (published 27 August 2025; revised 3 September 2025; 23 agencies from 13 countries; known vulnerabilities; no zero-day exploitation observed). Cybersecurity and Infrastructure Security Agency, Arlington. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c1-r14\" aria-label=\"Back to the first call of note 14\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c1-n18\"><span class=\"nrp-notes-n\">18<\/span><span>IBM and Ponemon Institute (eds.), Cost of a <a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/nrs\/#nrs-h51\" data-tc=\"NHS-1 cyber.intrusion.data-breach\" data-tk=\"Information and cyber-physical systems \u00b7 Malicious compromise\" data-td=\"Unauthorised access to, or release of, personal, commercial or operational data.\" data-ts=\"NRS-H51\" data-tr=\"draft\" data-tx=\"https:\/\/risksindex.com\/hazards\/cyber\/\" data-txl=\"Information and cyber-physical systems\">Data Breach<\/a> Report 2026 (landing page; global average USD 4.99 million, up 12%; AI-driven attacks up 56%). IBM, Armonk. Vendor report, weak evidence; the full report was not opened. Observation year 2026. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c1-r18\" aria-label=\"Back to the first call of note 18\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c1-n19\"><span class=\"nrp-notes-n\">19<\/span><span>Chainalysis (ed.), ransomware analysis (blog page; more than USD 820 million on-chain in 2025, down 8% from an updated USD 892 million for 2024; original 2024 estimate USD 813 million). Chainalysis, New York. Vendor estimate, weak evidence. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c1-r19\" aria-label=\"Back to the first call of note 19\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c1-n20\"><span class=\"nrp-notes-n\">20<\/span><span>ISC2 (ed.), 2025 Cybersecurity Workforce Study (page; published 4 December 2025; 16,029 respondents; 59% critical or significant skills needs, up from 44%; no workforce gap estimate). ISC2, Alexandria. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c1-r20\" aria-label=\"Back to the first call of note 20\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c1-n21\"><span class=\"nrp-notes-n\">21<\/span><span>US Securities and Exchange Commission (ed.), SEC adopts rules on cybersecurity risk management, strategy, governance and incident disclosure by public companies (press release 2023-139; adopted 26 July 2023; Form 8-K Item 1.05 within four business days of a materiality determination). SEC, Washington. Observation year 2023. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c1-r21\" aria-label=\"Back to the first call of note 21\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c1-n27\"><span class=\"nrp-notes-n\">27<\/span><span>UNVERIFIED, not opened: European Union, Regulation (EU) 2024\/2847 on horizontal cybersecurity requirements for products with digital elements (Cyber Resilience Act; in force 10 December 2024; reporting duties from 11 September 2026; main obligations from 11 December 2027), dates taken from law-firm search summaries; the Official Journal page returned no text. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c1-r27\" aria-label=\"Back to the first call of note 27\">back<\/a><\/span><\/li><\/ol><\/section><\/div><div class=\"nrp-part\" id=\"nx-nrp-xt-10-part-findings\"><header class=\"nrp-chap-head\" id=\"nx-nrp-xt-10-c2-top\"><ul class=\"nrp-eyerow\"><li class=\"nf-ui-eyebrow\"><a href=\"https:\/\/therisk.global\/nexus-reports\/editions\/xt-10\/\">Cybersecurity and Advanced Cryptography 2026<\/a><\/li><li class=\"nf-ui-eyebrow\">Chapter 2<\/li><\/ul><span class=\"nrp-rule\" aria-hidden=\"true\"><\/span><h2 class=\"pp-hero-title\">Key findings<\/h2><p class=\"nrp-lede\">Twelve findings carry the cybersecurity and cryptography baseline. They are grouped by coupling and never ranked. Each resolves to its source or, where Nexus analysis is involved, to its stated method.<\/p><p class=\"nrp-chap-meta\"><span>6 min read<\/span><span>1 figure<\/span><span>0 tables<\/span><span>18 notes<\/span><span>NR-XTECH-CRYPTO-GLOBAL-2026-BASELINE<\/span><\/p><\/header><section class=\"nrp-block\" id=\"nx-nrp-xt-10-c2-s1\" aria-labelledby=\"nx-nrp-xt-10-c2-s1-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-c2-s1-h\"><span class=\"nrp-num\">2.1<\/span><span>Headline finding<\/span><\/h2><p class=\"nrp-find-m\"><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><span class=\"nrp-eql\" title=\"Evidence-quality level, 1 to 5\">EQL 5<\/span><a class=\"nrp-find-id\" href=\"#nx-NRF-XTECH-CRYPTO-GLOBAL-2026-BASELINE-CRY-001\">NRF-XTECH-CRYPTO-GLOBAL-2026-BASELINE-CRY-001<\/a><\/p><p class=\"nrp-km-t\">NIST finalised three post-quantum cryptography standards on 13 August 2024: FIPS 203 (ML-KEM), FIPS 204 (ML-DSA) and FIPS 205 (SLH-DSA).<\/p><figure class=\"nrp-fig\" id=\"nx-nrp-xt-10-c2-fig1\" aria-labelledby=\"nx-nrp-xt-10-c2-fig1-t\"><figcaption class=\"nrp-figcap\"><span class=\"nf-ui-eyebrow\">Figure 2.1<\/span><span class=\"nf-ui-title\" data-level=\"card\" id=\"nx-nrp-xt-10-c2-fig1-t\">Standards finalised on 13 August 2024<\/span><\/figcaption><div class=\"nrp-tblw\"><table class=\"nrp-tbl nrp-bars\"><thead><tr><th scope=\"col\">Item<\/th><th scope=\"col\"><span class=\"nrp-sr\">Bar, scaled to the largest value<\/span><\/th><th scope=\"col\">Value<\/th><\/tr><\/thead><tbody><tr><th scope=\"row\">FIPS 203 \u00b7 key establishment (ML-KEM)<\/th><td class=\"nrp-barc\"><svg class=\"nrp-svg nrp-barsvg\" viewBox=\"0 0 100 8\" preserveAspectRatio=\"none\" aria-hidden=\"true\" focusable=\"false\"><rect class=\"nrp-track\" x=\"0\" y=\"0\" width=\"100\" height=\"8\"\/><rect class=\"nrp-bar\" x=\"0\" y=\"0\" width=\"100.0\" height=\"8\"\/><\/svg><\/td><td class=\"nrp-mono\">1<\/td><\/tr><tr><th scope=\"row\">FIPS 204 \u00b7 signatures (ML-DSA)<\/th><td class=\"nrp-barc\"><svg class=\"nrp-svg nrp-barsvg\" viewBox=\"0 0 100 8\" preserveAspectRatio=\"none\" aria-hidden=\"true\" focusable=\"false\"><rect class=\"nrp-track\" x=\"0\" y=\"0\" width=\"100\" height=\"8\"\/><rect class=\"nrp-bar\" x=\"0\" y=\"0\" width=\"100.0\" height=\"8\"\/><\/svg><\/td><td class=\"nrp-mono\">1<\/td><\/tr><tr><th scope=\"row\">FIPS 205 \u00b7 backup signatures (SLH-DSA)<\/th><td class=\"nrp-barc\"><svg class=\"nrp-svg nrp-barsvg\" viewBox=\"0 0 100 8\" preserveAspectRatio=\"none\" aria-hidden=\"true\" focusable=\"false\"><rect class=\"nrp-track\" x=\"0\" y=\"0\" width=\"100\" height=\"8\"\/><rect class=\"nrp-bar\" x=\"0\" y=\"0\" width=\"100.0\" height=\"8\"\/><\/svg><\/td><td class=\"nrp-mono\">1<\/td><\/tr><\/tbody><\/table><\/div><p class=\"nrp-fig-src\">Source: NIST publication pages for FIPS 203, 204 and 205<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c2-n1\" id=\"nx-nrp-xt-10-c2-r1\" aria-label=\"Note 1\">1<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c2-n2\" id=\"nx-nrp-xt-10-c2-r2\" aria-label=\"Note 2\">2<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c2-n3\" id=\"nx-nrp-xt-10-c2-r3\" aria-label=\"Note 3\">3<\/a><\/sup>. Each bar counts one standard.<\/p><\/figure><h3 class=\"nrp-h3\">Implication<\/h3><p class=\"nrp-p\">Standards exist, so migration is now an engineering and planning task. NIST added HQC as a backup key-encapsulation method on a different mathematical basis, with a final standard expected in 2027<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c2-n6\" id=\"nx-nrp-xt-10-c2-r6\" aria-label=\"Note 6\">6<\/a><\/sup>. Guidance on using key encapsulation was published in September 2025<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c2-n7\" id=\"nx-nrp-xt-10-c2-r7\" aria-label=\"Note 7\">7<\/a><\/sup>. The NIST transition draft IR 8547, published on 12 November 2024, proposes disallowing quantum-vulnerable public-key algorithms after 2035<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c2-n44\" id=\"nx-nrp-xt-10-c2-r44\" aria-label=\"Note 44\">44<\/a><\/sup>.<\/p><h3 class=\"nrp-h3\">What would move it<\/h3><p class=\"nrp-p\">The HQC draft, sector migration progress and national directives would each move this finding.<\/p><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-c2-s2\" aria-labelledby=\"nx-nrp-xt-10-c2-s2-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-c2-s2-h\"><span class=\"nrp-num\">2.2<\/span><span>CRY<\/span><\/h2><ol class=\"nrp-find\"><li id=\"nx-NRF-XTECH-CRYPTO-GLOBAL-2026-BASELINE-CRY-001\"><p class=\"nrp-find-m\"><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><span class=\"nrp-eql\" title=\"Evidence-quality level, 1 to 5\">EQL 5<\/span><a class=\"nrp-find-id\" href=\"#nx-NRF-XTECH-CRYPTO-GLOBAL-2026-BASELINE-CRY-001\">NRF-XTECH-CRYPTO-GLOBAL-2026-BASELINE-CRY-001<\/a><\/p><p class=\"nrp-find-t\">NIST finalised FIPS 203 (ML-KEM), FIPS 204 (ML-DSA) and FIPS 205 (SLH-DSA) on 13 August 2024. ML-KEM has three parameter sets: 512, 768 and 1024.<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c2-n1\" aria-label=\"Note 1\">1<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c2-n2\" aria-label=\"Note 2\">2<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c2-n3\" aria-label=\"Note 3\">3<\/a><\/sup><\/p><\/li><li id=\"nx-NRF-XTECH-CRYPTO-GLOBAL-2026-BASELINE-CRY-002\"><p class=\"nrp-find-m\"><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><span class=\"nrp-eql\" title=\"Evidence-quality level, 1 to 5\">EQL 4<\/span><a class=\"nrp-find-id\" href=\"#nx-NRF-XTECH-CRYPTO-GLOBAL-2026-BASELINE-CRY-002\">NRF-XTECH-CRYPTO-GLOBAL-2026-BASELINE-CRY-002<\/a><\/p><p class=\"nrp-find-t\">NIST selected HQC on 11 March 2025 as a backup key-encapsulation method based on codes rather than lattices, with a draft standard expected in about a year and a final standard in 2027.<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c2-n6\" aria-label=\"Note 6\">6<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c2-n32\" id=\"nx-nrp-xt-10-c2-r32\" aria-label=\"Note 32\">32<\/a><\/sup><\/p><\/li><li id=\"nx-NRF-XTECH-CRYPTO-GLOBAL-2026-BASELINE-CRY-007\"><p class=\"nrp-find-m\"><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><span class=\"nrp-eql\" title=\"Evidence-quality level, 1 to 5\">EQL 4<\/span><a class=\"nrp-find-id\" href=\"#nx-NRF-XTECH-CRYPTO-GLOBAL-2026-BASELINE-CRY-007\">NRF-XTECH-CRYPTO-GLOBAL-2026-BASELINE-CRY-007<\/a><\/p><p class=\"nrp-find-t\">A 2025 preprint estimates that RSA-2048 could be factored with fewer than one million noisy qubits in under a week, assuming a 0.1% gate error and a 1 microsecond cycle. The author\u2019s 2019 estimate was about 20 million qubits in 8 hours.<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c2-n22\" id=\"nx-nrp-xt-10-c2-r22\" aria-label=\"Note 22\">22<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c2-n37\" id=\"nx-nrp-xt-10-c2-r37\" aria-label=\"Note 37\">37<\/a><\/sup><\/p><\/li><\/ol><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-c2-s3\" aria-labelledby=\"nx-nrp-xt-10-c2-s3-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-c2-s3-h\"><span class=\"nrp-num\">2.3<\/span><span>Governance<\/span><\/h2><ol class=\"nrp-find\"><li id=\"nx-NRF-XTECH-CRYPTO-GLOBAL-2026-BASELINE-GOV-003\"><p class=\"nrp-find-m\"><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><span class=\"nrp-eql\" title=\"Evidence-quality level, 1 to 5\">EQL 4<\/span><a class=\"nrp-find-id\" href=\"#nx-NRF-XTECH-CRYPTO-GLOBAL-2026-BASELINE-GOV-003\">NRF-XTECH-CRYPTO-GLOBAL-2026-BASELINE-GOV-003<\/a><\/p><p class=\"nrp-find-t\">NIST published the initial public draft of the transition report IR 8547 on 12 November 2024. The draft proposes that quantum-vulnerable public-key algorithms at 112 bits of security be deprecated after 2030 and that all such algorithms be disallowed after 2035.<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c2-n44\" aria-label=\"Note 44\">44<\/a><\/sup><\/p><\/li><li id=\"nx-NRF-XTECH-CRYPTO-GLOBAL-2026-BASELINE-GOV-004\"><p class=\"nrp-find-m\"><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><span class=\"nrp-eql\" title=\"Evidence-quality level, 1 to 5\">EQL 4<\/span><a class=\"nrp-find-id\" href=\"#nx-NRF-XTECH-CRYPTO-GLOBAL-2026-BASELINE-GOV-004\">NRF-XTECH-CRYPTO-GLOBAL-2026-BASELINE-GOV-004<\/a><\/p><p class=\"nrp-find-t\">The UK NCSC published migration timelines on 20 March 2025: assess and plan by 2028, do priority migration by 2031 and finish by 2035.<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c2-n10\" id=\"nx-nrp-xt-10-c2-r10\" aria-label=\"Note 10\">10<\/a><\/sup><\/p><\/li><\/ol><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-c2-s4\" aria-labelledby=\"nx-nrp-xt-10-c2-s4-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-c2-s4-h\"><span class=\"nrp-num\">2.4<\/span><span>Infrastructure<\/span><\/h2><ol class=\"nrp-find\"><li id=\"nx-NRF-XTECH-CRYPTO-GLOBAL-2026-BASELINE-INF-005\"><p class=\"nrp-find-m\"><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><span class=\"nrp-eql\" title=\"Evidence-quality level, 1 to 5\">EQL 2<\/span><a class=\"nrp-find-id\" href=\"#nx-NRF-XTECH-CRYPTO-GLOBAL-2026-BASELINE-INF-005\">NRF-XTECH-CRYPTO-GLOBAL-2026-BASELINE-INF-005<\/a><\/p><p class=\"nrp-find-t\">Cloudflare reported that most human traffic to its network used post-quantum key agreement in late October 2025, while 3.7% of origin servers supported it and an ML-DSA-44 signature adds about 15 kB to a TLS handshake. This is vendor evidence.<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c2-n23\" id=\"nx-nrp-xt-10-c2-r23\" aria-label=\"Note 23\">23<\/a><\/sup><\/p><\/li><li id=\"nx-NRF-XTECH-CRYPTO-GLOBAL-2026-BASELINE-INF-006\"><p class=\"nrp-find-m\"><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><span class=\"nrp-eql\" title=\"Evidence-quality level, 1 to 5\">EQL 3<\/span><a class=\"nrp-find-id\" href=\"#nx-NRF-XTECH-CRYPTO-GLOBAL-2026-BASELINE-INF-006\">NRF-XTECH-CRYPTO-GLOBAL-2026-BASELINE-INF-006<\/a><\/p><p class=\"nrp-find-t\">OpenSSH made a post-quantum key exchange its default in version 9.0 and switched the default to mlkem768x25519 in version 10.0. Version 10.1 warns when a connection does not use one.<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c2-n24\" id=\"nx-nrp-xt-10-c2-r24\" aria-label=\"Note 24\">24<\/a><\/sup><\/p><\/li><\/ol><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-c2-s5\" aria-labelledby=\"nx-nrp-xt-10-c2-s5-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-c2-s5-h\"><span class=\"nrp-num\">2.5<\/span><span>THR<\/span><\/h2><ol class=\"nrp-find\"><li id=\"nx-NRF-XTECH-CRYPTO-GLOBAL-2026-BASELINE-THR-008\"><p class=\"nrp-find-m\"><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><span class=\"nrp-eql\" title=\"Evidence-quality level, 1 to 5\">EQL 3<\/span><a class=\"nrp-find-id\" href=\"#nx-NRF-XTECH-CRYPTO-GLOBAL-2026-BASELINE-THR-008\">NRF-XTECH-CRYPTO-GLOBAL-2026-BASELINE-THR-008<\/a><\/p><p class=\"nrp-find-t\">The CISA KEV count at the 30 September close is not bound. A 3 November read of the catalogue is post-close, context only. A 2025 joint advisory from 23 agencies in 13 countries reported router compromise through known vulnerabilities and no observed zero-day exploitation. A vendor report states that 31% of breaches began with exploited vulnerabilities.<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c2-n14\" id=\"nx-nrp-xt-10-c2-r14\" aria-label=\"Note 14\">14<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c2-n17\" id=\"nx-nrp-xt-10-c2-r17\" aria-label=\"Note 17\">17<\/a><\/sup><\/p><\/li><li id=\"nx-NRF-XTECH-CRYPTO-GLOBAL-2026-BASELINE-THR-009\"><p class=\"nrp-find-m\"><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><span class=\"nrp-eql\" title=\"Evidence-quality level, 1 to 5\">EQL 4<\/span><a class=\"nrp-find-id\" href=\"#nx-NRF-XTECH-CRYPTO-GLOBAL-2026-BASELINE-THR-009\">NRF-XTECH-CRYPTO-GLOBAL-2026-BASELINE-THR-009<\/a><\/p><p class=\"nrp-find-t\">The FBI received 859,532 complaints and USD 16.6 billion of reported losses in 2024, up 33% from 2023. It received 3,156 ransomware complaints and called ransomware the most pervasive threat to <a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/nrs\/#nrs-c1\" data-tc=\"NRS-C1 critical-infrastructure\" data-tk=\"Nexus risk vocabulary\" data-td=\"Physical and digital assets, systems and networks whose disruption would seriously affect health, safety, security, economic welfare or the functioning of government. Criticality depends on what relies on them.\" data-ts=\"NRS-C1\" data-tr=\"draft\">critical infrastructure<\/a>.<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c2-n15\" id=\"nx-nrp-xt-10-c2-r15\" aria-label=\"Note 15\">15<\/a><\/sup><\/p><\/li><\/ol><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-c2-s6\" aria-labelledby=\"nx-nrp-xt-10-c2-s6-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-c2-s6-h\"><span class=\"nrp-num\">2.6<\/span><span>Finance<\/span><\/h2><ol class=\"nrp-find\"><li id=\"nx-NRF-XTECH-CRYPTO-GLOBAL-2026-BASELINE-FIN-010\"><p class=\"nrp-find-m\"><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><span class=\"nrp-eql\" title=\"Evidence-quality level, 1 to 5\">EQL 2<\/span><a class=\"nrp-find-id\" href=\"#nx-NRF-XTECH-CRYPTO-GLOBAL-2026-BASELINE-FIN-010\">NRF-XTECH-CRYPTO-GLOBAL-2026-BASELINE-FIN-010<\/a><\/p><p class=\"nrp-find-t\">Chainalysis estimates that ransomware actors received more than USD 820 million on-chain in 2025, about 8% below an updated USD 892 million for 2024. IBM puts the global average cost of a <a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/nrs\/#nrs-h51\" data-tc=\"NHS-1 cyber.intrusion.data-breach\" data-tk=\"Information and cyber-physical systems \u00b7 Malicious compromise\" data-td=\"Unauthorised access to, or release of, personal, commercial or operational data.\" data-ts=\"NRS-H51\" data-tr=\"draft\" data-tx=\"https:\/\/risksindex.com\/hazards\/cyber\/\" data-txl=\"Information and cyber-physical systems\">data breach<\/a> at USD 4.99 million in 2026. Both are vendor estimates.<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c2-n18\" id=\"nx-nrp-xt-10-c2-r18\" aria-label=\"Note 18\">18<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c2-n19\" id=\"nx-nrp-xt-10-c2-r19\" aria-label=\"Note 19\">19<\/a><\/sup><\/p><\/li><\/ol><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-c2-s7\" aria-labelledby=\"nx-nrp-xt-10-c2-s7-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-c2-s7-h\"><span class=\"nrp-num\">2.7<\/span><span>SKL<\/span><\/h2><ol class=\"nrp-find\"><li id=\"nx-NRF-XTECH-CRYPTO-GLOBAL-2026-BASELINE-SKL-011\"><p class=\"nrp-find-m\"><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><span class=\"nrp-eql\" title=\"Evidence-quality level, 1 to 5\">EQL 3<\/span><a class=\"nrp-find-id\" href=\"#nx-NRF-XTECH-CRYPTO-GLOBAL-2026-BASELINE-SKL-011\">NRF-XTECH-CRYPTO-GLOBAL-2026-BASELINE-SKL-011<\/a><\/p><p class=\"nrp-find-t\">In the ISC2 2025 study, 59% of respondents reported critical or significant skills needs, up from 44% in 2024. ISC2 published no workforce gap estimate in 2025.<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c2-n20\" id=\"nx-nrp-xt-10-c2-r20\" aria-label=\"Note 20\">20<\/a><\/sup><\/p><\/li><\/ol><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-c2-s8\" aria-labelledby=\"nx-nrp-xt-10-c2-s8-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-c2-s8-h\"><span class=\"nrp-num\">2.8<\/span><span>Systemic<\/span><\/h2><ol class=\"nrp-find\"><li id=\"nx-NRF-XTECH-CRYPTO-GLOBAL-2026-BASELINE-SYS-012\"><p class=\"nrp-find-m\"><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"neutral\" aria-hidden=\"true\"><\/span>Expert input<\/span><span class=\"nrp-eql\" title=\"Evidence-quality level, 1 to 5\">EQL 2<\/span><a class=\"nrp-find-id\" href=\"#nx-NRF-XTECH-CRYPTO-GLOBAL-2026-BASELINE-SYS-012\">NRF-XTECH-CRYPTO-GLOBAL-2026-BASELINE-SYS-012<\/a><\/p><p class=\"nrp-find-t\">The leading compound pathway for 2027 testing is the lag of signatures, certificates and long-life devices behind key agreement, while exploited ordinary vulnerabilities keep dominating incidents. \u00a7 scenario<\/p><\/li><\/ol><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-c2-notes\" aria-labelledby=\"nx-nrp-xt-10-c2-notes-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-c2-notes-h\"><span>Notes<\/span><\/h2><p class=\"nrp-note\">Numbers are the edition&#8217;s reference numbers, so a note reads the same in every chapter. The full list, with every source and its licence, is in Annex C. <a href=\"https:\/\/therisk.global\/nexus-reports\/editions\/xt-10\/references\/\">Annex C, references<\/a><\/p><ol class=\"nrp-notes\"><li id=\"nx-nrp-xt-10-c2-n1\"><span class=\"nrp-notes-n\">1<\/span><span>NIST (ed.), Module-Lattice-Based Key-Encapsulation Mechanism Standard, FIPS 203 (publication page; final 13 August 2024; ML-KEM-512, ML-KEM-768 and ML-KEM-1024; initial draft 24 August 2023). National Institute of Standards and Technology, Gaithersburg. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c2-r1\" aria-label=\"Back to the first call of note 1\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c2-n2\"><span class=\"nrp-notes-n\">2<\/span><span>NIST (ed.), Module-Lattice-Based Digital Signature Standard, FIPS 204 (publication page; final 13 August 2024; ML-DSA). National Institute of Standards and Technology, Gaithersburg. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c2-r2\" aria-label=\"Back to the first call of note 2\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c2-n3\"><span class=\"nrp-notes-n\">3<\/span><span>NIST (ed.), Stateless Hash-Based Digital Signature Standard, FIPS 205 (publication page; final 13 August 2024; SLH-DSA, based on SPHINCS+). National Institute of Standards and Technology, Gaithersburg. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c2-r3\" aria-label=\"Back to the first call of note 3\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c2-n6\"><span class=\"nrp-notes-n\">6<\/span><span>NIST (ed.), NIST selects HQC as fifth algorithm for post-quantum encryption (news item, 11 March 2025; backup to ML-KEM; draft standard expected in about a year; final standard expected in 2027). National Institute of Standards and Technology, Gaithersburg. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c2-r6\" aria-label=\"Back to the first call of note 6\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c2-n7\"><span class=\"nrp-notes-n\">7<\/span><span>NIST (ed.), Recommendations for Key-Encapsulation Mechanisms, SP 800-227 (publication page; final 18 September 2025). National Institute of Standards and Technology, Gaithersburg. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c2-r7\" aria-label=\"Back to the first call of note 7\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c2-n44\"><span class=\"nrp-notes-n\">44<\/span><span>NIST (ed.), Transition to Post-Quantum Cryptography Standards, NIST IR 8547, initial public draft (draft PDF, November 2024; Tables 2 and 4: for quantum-vulnerable signature and key-establishment schemes at 112 bits of security strength, deprecated after 2030 and disallowed after 2035, and at 128 bits or more, disallowed after 2035; the cover sheet added on withdrawal on 27 October 2026 is not used). National Institute of Standards and Technology, Gaithersburg. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c2-r44\" aria-label=\"Back to the first call of note 44\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c2-n32\"><span class=\"nrp-notes-n\">32<\/span><span>UNVERIFIED, not opened: NIST (ed.), Status Report on the Fourth Round of the NIST Post-Quantum Cryptography Standardization Process, NIST IR 8545, March 2025, cited from memory. National Institute of Standards and Technology, Gaithersburg. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c2-r32\" aria-label=\"Back to the first call of note 32\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c2-n22\"><span class=\"nrp-notes-n\">22<\/span><span>Gidney, C., How to factor 2048 bit RSA integers with less than a million noisy qubits, arXiv:2505.15917, submitted 21 May 2025 (abstract page; under one million noisy qubits; under a week; 0.1% gate error; 1 microsecond cycle; 10 microsecond reaction time; the author\u2019s 2019 estimate was about 20 million qubits in 8 hours). arXiv, Ithaca. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c2-r22\" aria-label=\"Back to the first call of note 22\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c2-n37\"><span class=\"nrp-notes-n\">37<\/span><span>UNVERIFIED, not opened: Shor, P.W., Polynomial-time algorithms for prime factorization and discrete logarithms on a quantum computer, SIAM Journal on Computing 26(5), 1484 to 1509, 1997, cited from memory. Observation year 1997. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c2-r37\" aria-label=\"Back to the first call of note 37\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c2-n10\"><span class=\"nrp-notes-n\">10<\/span><span>UK National Cyber Security Centre (ed.), Timelines for migration to post-quantum cryptography (guidance page; version 1.0, 20 March 2025; milestones 2028, 2031 and 2035). NCSC, London. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c2-r10\" aria-label=\"Back to the first call of note 10\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c2-n23\"><span class=\"nrp-notes-n\">23<\/span><span>Cloudflare (ed.), The state of the post-quantum Internet in 2025 (blog analysis; late October 2025 majority of human traffic with post-quantum key agreement; 3.7% of origins; 39% of top 100,000 domains in September 2025; ML-DSA-44 about 15 kB; first post-quantum certificates expected in 2026). Cloudflare, San Francisco. Vendor analysis of its own network, weak evidence. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c2-r23\" aria-label=\"Back to the first call of note 23\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c2-n24\"><span class=\"nrp-notes-n\">24<\/span><span>OpenSSH project (ed.), Post-quantum cryptography in OpenSSH (documentation page; sntrup761x25519-sha512 from 9.0; mlkem768x25519-sha256 added in 9.9 and default in 10.0; warning from 10.1). OpenBSD Project. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c2-r24\" aria-label=\"Back to the first call of note 24\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c2-n14\"><span class=\"nrp-notes-n\">14<\/span><span>CISA and 22 partner agencies (eds.), Countering Chinese State-Sponsored Actors Compromise of Networks Worldwide to Feed Global Espionage System, advisory AA25-239A (published 27 August 2025; revised 3 September 2025; 23 agencies from 13 countries; known vulnerabilities; no zero-day exploitation observed). Cybersecurity and Infrastructure Security Agency, Arlington. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c2-r14\" aria-label=\"Back to the first call of note 14\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c2-n17\"><span class=\"nrp-notes-n\">17<\/span><span>Verizon (ed.), 2026 <a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/nrs\/#nrs-h51\" data-tc=\"NHS-1 cyber.intrusion.data-breach\" data-tk=\"Information and cyber-physical systems \u00b7 Malicious compromise\" data-td=\"Unauthorised access to, or release of, personal, commercial or operational data.\" data-ts=\"NRS-H51\" data-tr=\"draft\" data-tx=\"https:\/\/risksindex.com\/hazards\/cyber\/\" data-txl=\"Information and cyber-physical systems\">Data Breach<\/a> Investigations Report (landing page; period 1 November 2024 to 31 October 2025; 48% of breaches involve ransomware; 31% begin with exploited vulnerabilities). Verizon Business, New York. Vendor report, weak evidence; the full report was not opened. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c2-r17\" aria-label=\"Back to the first call of note 17\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c2-n15\"><span class=\"nrp-notes-n\">15<\/span><span>Federal Bureau of Investigation, Internet Crime Complaint Center (ed.), 2024 Internet Crime Report (859,532 complaints; USD 16.6 billion losses, up 33%; 256,256 complaints with a loss; 3,156 ransomware complaints; 263,455 cyber-threat complaints and USD 1.571 billion; 4,878 critical-infrastructure complaints). FBI, Washington. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c2-r15\" aria-label=\"Back to the first call of note 15\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c2-n18\"><span class=\"nrp-notes-n\">18<\/span><span>IBM and Ponemon Institute (eds.), Cost of a Data Breach Report 2026 (landing page; global average USD 4.99 million, up 12%; AI-driven attacks up 56%). IBM, Armonk. Vendor report, weak evidence; the full report was not opened. Observation year 2026. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c2-r18\" aria-label=\"Back to the first call of note 18\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c2-n19\"><span class=\"nrp-notes-n\">19<\/span><span>Chainalysis (ed.), ransomware analysis (blog page; more than USD 820 million on-chain in 2025, down 8% from an updated USD 892 million for 2024; original 2024 estimate USD 813 million). Chainalysis, New York. Vendor estimate, weak evidence. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c2-r19\" aria-label=\"Back to the first call of note 19\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c2-n20\"><span class=\"nrp-notes-n\">20<\/span><span>ISC2 (ed.), 2025 Cybersecurity Workforce Study (page; published 4 December 2025; 16,029 respondents; 59% critical or significant skills needs, up from 44%; no workforce gap estimate). ISC2, Alexandria. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c2-r20\" aria-label=\"Back to the first call of note 20\">back<\/a><\/span><\/li><\/ol><\/section><\/div><div class=\"nrp-part\" id=\"nx-nrp-xt-10-part-systems-and-sectors\"><header class=\"nrp-chap-head\" id=\"nx-nrp-xt-10-c3-top\"><ul class=\"nrp-eyerow\"><li class=\"nf-ui-eyebrow\"><a href=\"https:\/\/therisk.global\/nexus-reports\/editions\/xt-10\/\">Cybersecurity and Advanced Cryptography 2026<\/a><\/li><li class=\"nf-ui-eyebrow\">Chapter 3<\/li><\/ul><span class=\"nrp-rule\" aria-hidden=\"true\"><\/span><h2 class=\"pp-hero-title\">Systems and sectors at baseline<\/h2><p class=\"nrp-chap-meta\"><span>6 min read<\/span><span>0 figures<\/span><span>2 tables<\/span><span>13 notes<\/span><span>NR-XTECH-CRYPTO-GLOBAL-2026-BASELINE<\/span><\/p><\/header><section class=\"nrp-block\" id=\"nx-nrp-xt-10-c3-s1\" aria-labelledby=\"nx-nrp-xt-10-c3-s1-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-c3-s1-h\"><span class=\"nrp-num\">3.1<\/span><span>Where each system stood at evidence close<\/span><\/h2><div class=\"pp-cells nrp-cells-3\"><article class=\"nrp-cell\"><p class=\"nf-ui-eyebrow\">DAT \u00b7 Cryptography<\/p><h3 class=\"nf-ui-title\" data-level=\"card\">Post-quantum standards finalised by NIST<\/h3><span class=\"pp-metric\">3<\/span><span class=\"nrp-cell-u\">standards<\/span><p>FIPS 203, 204 and 205.<\/p><p class=\"nrp-cell-foot\"><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><span>2024<\/span><span>NIST<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c3-n1\" id=\"nx-nrp-xt-10-c3-r1\" aria-label=\"Note 1\">1<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c3-n2\" id=\"nx-nrp-xt-10-c3-r2\" aria-label=\"Note 2\">2<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c3-n3\" id=\"nx-nrp-xt-10-c3-r3\" aria-label=\"Note 3\">3<\/a><\/sup><\/span><\/p><\/article><article class=\"nrp-cell\"><p class=\"nf-ui-eyebrow\">DAT \u00b7 Resource estimate<\/p><h3 class=\"nf-ui-title\" data-level=\"card\">RSA-2048 noisy-qubit estimate<\/h3><span class=\"pp-metric\">&lt;1<\/span><span class=\"nrp-cell-u\">million qubits<\/span><p>under a week, under stated assumptions.<\/p><p class=\"nrp-cell-foot\"><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><span>2025<\/span><span>preprint<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c3-n22\" id=\"nx-nrp-xt-10-c3-r22\" aria-label=\"Note 22\">22<\/a><\/sup><\/span><\/p><\/article><article class=\"nrp-cell\"><p class=\"nf-ui-eyebrow\">INF \u00b7 Deployment<\/p><h3 class=\"nf-ui-title\" data-level=\"card\">Share of human traffic on one network using post-quantum key agreement<\/h3><span class=\"pp-metric\">&gt;50<\/span><span class=\"nrp-cell-u\">%<\/span><p>vendor measurement, late October 2025.<\/p><p class=\"nrp-cell-foot\"><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><span>2025<\/span><span>Cloudflare<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c3-n23\" id=\"nx-nrp-xt-10-c3-r23\" aria-label=\"Note 23\">23<\/a><\/sup><\/span><\/p><\/article><article class=\"nrp-cell\"><p class=\"nf-ui-eyebrow\">INF \u00b7 Threat<\/p><h3 class=\"nf-ui-title\" data-level=\"card\">Complaints received by the FBI<\/h3><span class=\"pp-metric\">859,532<\/span><span class=\"nrp-cell-u\">complaints<\/span><p>USD 16.6 billion of reported losses.<\/p><p class=\"nrp-cell-foot\"><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><span>2024<\/span><span>FBI IC3<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c3-n15\" id=\"nx-nrp-xt-10-c3-r15\" aria-label=\"Note 15\">15<\/a><\/sup><\/span><\/p><\/article><article class=\"nrp-cell\"><p class=\"nf-ui-eyebrow\">FIN \u00b7 Finance<\/p><h3 class=\"nf-ui-title\" data-level=\"card\">Global average cost of a data breach<\/h3><span class=\"pp-metric\">4.99<\/span><span class=\"nrp-cell-u\">USD million<\/span><p>vendor study, up 12%.<\/p><p class=\"nrp-cell-foot\"><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><span>2026<\/span><span>IBM<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c3-n18\" id=\"nx-nrp-xt-10-c3-r18\" aria-label=\"Note 18\">18<\/a><\/sup><\/span><\/p><\/article><article class=\"nrp-cell\"><p class=\"nf-ui-eyebrow\">INF \u00b7 Exploitation<\/p><h3 class=\"nf-ui-title\" data-level=\"card\">Vulnerabilities in the CISA KEV catalogue<\/h3><span class=\"pp-metric\">NOT BOUND<\/span><span class=\"nrp-cell-u\">entries<\/span><p>count at the 30 September close not bound; the 3 November read is post-close, context only.<\/p><p class=\"nrp-cell-foot\"><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"neutral\" aria-hidden=\"true\"><\/span>Not bound<\/span><span>2026<\/span><span>CISA<\/span><\/p><\/article><\/div><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-c3-s2\" aria-labelledby=\"nx-nrp-xt-10-c3-s2-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-c3-s2-h\"><span class=\"nrp-num\">3.2<\/span><span>Domain posture<\/span><\/h2><p class=\"nrp-stand\">Each of the twelve coupled domains is read through cybersecurity and cryptography, in words, not scored. The coupling column names the dependency that carries cybersecurity and cryptography risk into each domain.<\/p><div class=\"nrp-tblw\" id=\"nx-nrp-xt-10-c3-tab1\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table 3.1<\/span><span class=\"nrp-tbl-t\">Each domain read in words, not scored<\/span><\/caption><thead><tr><th scope=\"col\">Domain<\/th><th scope=\"col\">Posture at baseline<\/th><th scope=\"col\">Coupling<\/th><th scope=\"col\">Status<\/th><\/tr><\/thead><tbody><tr><td><span class=\"nrp-mono\">WAT<\/span><\/td><td>Water utilities are among <a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/nrs\/#nrs-c1\" data-tc=\"NRS-C1 critical-infrastructure\" data-tk=\"Nexus risk vocabulary\" data-td=\"Physical and digital assets, systems and networks whose disruption would seriously affect health, safety, security, economic welfare or the functioning of government. Criticality depends on what relies on them.\" data-ts=\"NRS-C1\" data-tr=\"draft\">critical infrastructure<\/a> sectors that report incidents; no sector figure is bound here.<\/td><td><span class=\"nrp-mono\">INF \u2192 WAT<\/span><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"neutral\" aria-hidden=\"true\"><\/span>Expert input<\/span> <span class=\"nrp-eql\" title=\"Evidence-quality level, 1 to 5\">EQL 1<\/span><\/td><\/tr><tr><td><span class=\"nrp-mono\">ENE<\/span><\/td><td>Router and edge-device compromise in telecom and transport networks shows exposure; energy-specific figures are not bound.<\/td><td><span class=\"nrp-mono\">INF \u2192 ENE<\/span><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"neutral\" aria-hidden=\"true\"><\/span>Expert input<\/span> <span class=\"nrp-eql\" title=\"Evidence-quality level, 1 to 5\">EQL 1<\/span><\/td><\/tr><tr><td><span class=\"nrp-mono\">FOO<\/span><\/td><td>No documented coupling at baseline in the sources read.<\/td><td><span class=\"nrp-mono\">none documented<\/span><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"neutral\" aria-hidden=\"true\"><\/span>Expert input<\/span> <span class=\"nrp-eql\" title=\"Evidence-quality level, 1 to 5\">EQL 1<\/span><\/td><\/tr><tr><td><span class=\"nrp-mono\">HLT<\/span><\/td><td>Health records are long-lived and exposed to later decryption; no figure is bound here.<\/td><td><span class=\"nrp-mono\">DAT \u2192 HLT<\/span><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"neutral\" aria-hidden=\"true\"><\/span>Expert input<\/span> <span class=\"nrp-eql\" title=\"Evidence-quality level, 1 to 5\">EQL 1<\/span><\/td><\/tr><tr><td><span class=\"nrp-mono\">BIO<\/span><\/td><td>No documented coupling at baseline in the sources read.<\/td><td><span class=\"nrp-mono\">none documented<\/span><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"neutral\" aria-hidden=\"true\"><\/span>Expert input<\/span> <span class=\"nrp-eql\" title=\"Evidence-quality level, 1 to 5\">EQL 1<\/span><\/td><\/tr><tr><td><span class=\"nrp-mono\">CLI<\/span><\/td><td>Energy and bandwidth cost of larger cryptographic objects is stated for one network only<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c3-n23\" aria-label=\"Note 23\">23<\/a><\/sup>; no climate figure is bound.<\/td><td><span class=\"nrp-mono\">INF \u2192 CLI<\/span><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"neutral\" aria-hidden=\"true\"><\/span>Expert input<\/span> <span class=\"nrp-eql\" title=\"Evidence-quality level, 1 to 5\">EQL 1<\/span><\/td><\/tr><tr><td><span class=\"nrp-mono\">INF<\/span><\/td><td>The core system: three standards finalised, hybrid key agreement widely deployed, signatures lagging, known vulnerabilities exploited.<\/td><td><span class=\"nrp-mono\">the core system<\/span><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span> <span class=\"nrp-eql\" title=\"Evidence-quality level, 1 to 5\">EQL 4<\/span><\/td><\/tr><tr><td><span class=\"nrp-mono\">FIN<\/span><\/td><td>Average breach cost USD 4.99 million in 2026; ransomware payments above USD 820 million in 2025; both vendor estimates.<\/td><td><span class=\"nrp-mono\">FIN \u2194 INF<\/span><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span> <span class=\"nrp-eql\" title=\"Evidence-quality level, 1 to 5\">EQL 2<\/span><\/td><\/tr><tr><td><span class=\"nrp-mono\">DAT<\/span><\/td><td>Long-lived data face later decryption; migration is a planning task now.<\/td><td><span class=\"nrp-mono\">INF \u2192 DAT<\/span><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span> <span class=\"nrp-eql\" title=\"Evidence-quality level, 1 to 5\">EQL 4<\/span><\/td><\/tr><tr><td><span class=\"nrp-mono\">AIC<\/span><\/td><td>No documented coupling to other compute platforms is bound here; automated attack tooling claims are not evidenced in this edition.<\/td><td><span class=\"nrp-mono\">none documented<\/span><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"neutral\" aria-hidden=\"true\"><\/span>Expert input<\/span> <span class=\"nrp-eql\" title=\"Evidence-quality level, 1 to 5\">EQL 1<\/span><\/td><\/tr><tr><td><span class=\"nrp-mono\">MIN<\/span><\/td><td>No documented coupling at baseline; module and chip supply is not bound.<\/td><td><span class=\"nrp-mono\">none documented<\/span><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"neutral\" aria-hidden=\"true\"><\/span>Expert input<\/span> <span class=\"nrp-eql\" title=\"Evidence-quality level, 1 to 5\">EQL 1<\/span><\/td><\/tr><tr><td><span class=\"nrp-mono\">TRD<\/span><\/td><td>Regulation and reporting duties set by the EU and the US cross borders; export-control effects on cryptography are not bound.<\/td><td><span class=\"nrp-mono\">GOV \u2194 TRD<\/span><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"neutral\" aria-hidden=\"true\"><\/span>Inferred<\/span> <span class=\"nrp-eql\" title=\"Evidence-quality level, 1 to 5\">EQL 2<\/span><\/td><\/tr><\/tbody><\/table><\/div><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-c3-s3\" aria-labelledby=\"nx-nrp-xt-10-c3-s3-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-c3-s3-h\"><span class=\"nrp-num\">3.3<\/span><span>Sector screens<\/span><\/h2><p class=\"nrp-stand\">All sixteen sectors are screened for their dependence on cybersecurity and cryptography, on the same grammar as every national edition. The evidence column describes coverage of the baseline evidence, not the performance of the sector.<\/p><div class=\"nrp-tblw\" id=\"nx-nrp-xt-10-c3-tab2\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table 3.2<\/span><span class=\"nrp-tbl-t\">Sectors: baseline evidence and the exposure to watch<\/span><\/caption><thead><tr><th scope=\"col\">Code<\/th><th scope=\"col\">Sector<\/th><th scope=\"col\">Baseline evidence<\/th><th scope=\"col\">Exposure to watch<\/th><th scope=\"col\">Evidence coverage<\/th><\/tr><\/thead><tbody><tr><td><span class=\"nrp-mono\">GS-00<\/span><\/td><td>Cross-system<\/td><td>cryptography underlies every sector<\/td><td>signature and device lag<\/td><td>THIN<\/td><\/tr><tr><td><span class=\"nrp-mono\">GS-01<\/span><\/td><td>Water<\/td><td>sector figures not bound<\/td><td>operational technology exposure<\/td><td>THIN<\/td><\/tr><tr><td><span class=\"nrp-mono\">GS-02<\/span><\/td><td>Energy<\/td><td>router and edge exposure shown in advisories<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c3-n14\" id=\"nx-nrp-xt-10-c3-r14\" aria-label=\"Note 14\">14<\/a><\/sup><\/td><td>grid control networks<\/td><td>THIN<\/td><\/tr><tr><td><span class=\"nrp-mono\">GS-03<\/span><\/td><td>Food<\/td><td>no documented coupling<\/td><td>none documented<\/td><td>THIN<\/td><\/tr><tr><td><span class=\"nrp-mono\">GS-04<\/span><\/td><td>Health<\/td><td>long-lived records; no figure bound<\/td><td>ransomware and <a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/nrs\/#nrs-h51\" data-tc=\"NHS-1 cyber.intrusion.data-breach\" data-tk=\"Information and cyber-physical systems \u00b7 Malicious compromise\" data-td=\"Unauthorised access to, or release of, personal, commercial or operational data.\" data-ts=\"NRS-H51\" data-tr=\"draft\" data-tx=\"https:\/\/risksindex.com\/hazards\/cyber\/\" data-txl=\"Information and cyber-physical systems\">data breach<\/a><\/td><td>THIN<\/td><\/tr><tr><td><span class=\"nrp-mono\">GS-05<\/span><\/td><td>Finance<\/td><td>breach and ransomware costs from vendors<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c3-n18\" aria-label=\"Note 18\">18<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c3-n19\" id=\"nx-nrp-xt-10-c3-r19\" aria-label=\"Note 19\">19<\/a><\/sup><\/td><td>migration cost<\/td><td>PARTIAL<\/td><\/tr><tr><td><span class=\"nrp-mono\">GS-06<\/span><\/td><td>Development<\/td><td>access to tools and skills<\/td><td>widening gaps<\/td><td>THIN<\/td><\/tr><tr><td><span class=\"nrp-mono\">GS-07<\/span><\/td><td>Climate<\/td><td>no figure bound<\/td><td>none documented<\/td><td>THIN<\/td><\/tr><tr><td><span class=\"nrp-mono\">GS-08<\/span><\/td><td>Disaster<\/td><td>no documented coupling<\/td><td>none documented<\/td><td>THIN<\/td><\/tr><tr><td><span class=\"nrp-mono\">GS-09<\/span><\/td><td>Infrastructure<\/td><td><a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/nrs\/#nrs-c1\" data-tc=\"NRS-C1 critical-infrastructure\" data-tk=\"Nexus risk vocabulary\" data-td=\"Physical and digital assets, systems and networks whose disruption would seriously affect health, safety, security, economic welfare or the functioning of government. Criticality depends on what relies on them.\" data-ts=\"NRS-C1\" data-tr=\"draft\">critical infrastructure<\/a> complaints reported<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c3-n15\" aria-label=\"Note 15\">15<\/a><\/sup><\/td><td>edge devices<\/td><td>PARTIAL<\/td><\/tr><tr><td><span class=\"nrp-mono\">GS-10<\/span><\/td><td>Cities<\/td><td>no documented coupling<\/td><td>none documented<\/td><td>THIN<\/td><\/tr><tr><td><span class=\"nrp-mono\">GS-11<\/span><\/td><td>Biodiversity<\/td><td>no documented coupling<\/td><td>none documented<\/td><td>THIN<\/td><\/tr><tr><td><span class=\"nrp-mono\">GS-12<\/span><\/td><td>Earth observation<\/td><td>no documented coupling<\/td><td>none documented<\/td><td>THIN<\/td><\/tr><tr><td><span class=\"nrp-mono\">GS-13<\/span><\/td><td>Cyber and digital<\/td><td>standards, deployment and threat evidence<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c3-n1\" aria-label=\"Note 1\">1<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c3-n13\" id=\"nx-nrp-xt-10-c3-r13\" aria-label=\"Note 13\">13<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c3-n23\" aria-label=\"Note 23\">23<\/a><\/sup><\/td><td>migration lag<\/td><td>GOOD<\/td><\/tr><tr><td><span class=\"nrp-mono\">GS-14<\/span><\/td><td>Policy<\/td><td>NCSC, NIST draft and EU timelines<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c3-n10\" id=\"nx-nrp-xt-10-c3-r10\" aria-label=\"Note 10\">10<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c3-n11\" id=\"nx-nrp-xt-10-c3-r11\" aria-label=\"Note 11\">11<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c3-n44\" id=\"nx-nrp-xt-10-c3-r44\" aria-label=\"Note 44\">44<\/a><\/sup><\/td><td>divergent dates<\/td><td>PARTIAL<\/td><\/tr><tr><td><span class=\"nrp-mono\">GS-15<\/span><\/td><td>Science<\/td><td>resource estimate and standards process<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c3-n22\" aria-label=\"Note 22\">22<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c3-n1\" aria-label=\"Note 1\">1<\/a><\/sup><\/td><td>common benchmarks<\/td><td>PARTIAL<\/td><\/tr><\/tbody><\/table><\/div><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-c3-notes\" aria-labelledby=\"nx-nrp-xt-10-c3-notes-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-c3-notes-h\"><span>Notes<\/span><\/h2><p class=\"nrp-note\">Numbers are the edition&#8217;s reference numbers, so a note reads the same in every chapter. The full list, with every source and its licence, is in Annex C. <a href=\"https:\/\/therisk.global\/nexus-reports\/editions\/xt-10\/references\/\">Annex C, references<\/a><\/p><ol class=\"nrp-notes\"><li id=\"nx-nrp-xt-10-c3-n1\"><span class=\"nrp-notes-n\">1<\/span><span>NIST (ed.), Module-Lattice-Based Key-Encapsulation Mechanism Standard, FIPS 203 (publication page; final 13 August 2024; ML-KEM-512, ML-KEM-768 and ML-KEM-1024; initial draft 24 August 2023). National Institute of Standards and Technology, Gaithersburg. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c3-r1\" aria-label=\"Back to the first call of note 1\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c3-n2\"><span class=\"nrp-notes-n\">2<\/span><span>NIST (ed.), Module-Lattice-Based Digital Signature Standard, FIPS 204 (publication page; final 13 August 2024; ML-DSA). National Institute of Standards and Technology, Gaithersburg. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c3-r2\" aria-label=\"Back to the first call of note 2\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c3-n3\"><span class=\"nrp-notes-n\">3<\/span><span>NIST (ed.), Stateless Hash-Based Digital Signature Standard, FIPS 205 (publication page; final 13 August 2024; SLH-DSA, based on SPHINCS+). National Institute of Standards and Technology, Gaithersburg. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c3-r3\" aria-label=\"Back to the first call of note 3\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c3-n22\"><span class=\"nrp-notes-n\">22<\/span><span>Gidney, C., How to factor 2048 bit RSA integers with less than a million noisy qubits, arXiv:2505.15917, submitted 21 May 2025 (abstract page; under one million noisy qubits; under a week; 0.1% gate error; 1 microsecond cycle; 10 microsecond reaction time; the author\u2019s 2019 estimate was about 20 million qubits in 8 hours). arXiv, Ithaca. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c3-r22\" aria-label=\"Back to the first call of note 22\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c3-n23\"><span class=\"nrp-notes-n\">23<\/span><span>Cloudflare (ed.), The state of the post-quantum Internet in 2025 (blog analysis; late October 2025 majority of human traffic with post-quantum key agreement; 3.7% of origins; 39% of top 100,000 domains in September 2025; ML-DSA-44 about 15 kB; first post-quantum certificates expected in 2026). Cloudflare, San Francisco. Vendor analysis of its own network, weak evidence. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c3-r23\" aria-label=\"Back to the first call of note 23\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c3-n15\"><span class=\"nrp-notes-n\">15<\/span><span>Federal Bureau of Investigation, Internet Crime Complaint Center (ed.), 2024 Internet Crime Report (859,532 complaints; USD 16.6 billion losses, up 33%; 256,256 complaints with a loss; 3,156 ransomware complaints; 263,455 cyber-threat complaints and USD 1.571 billion; 4,878 critical-infrastructure complaints). FBI, Washington. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c3-r15\" aria-label=\"Back to the first call of note 15\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c3-n18\"><span class=\"nrp-notes-n\">18<\/span><span>IBM and Ponemon Institute (eds.), Cost of a <a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/nrs\/#nrs-h51\" data-tc=\"NHS-1 cyber.intrusion.data-breach\" data-tk=\"Information and cyber-physical systems \u00b7 Malicious compromise\" data-td=\"Unauthorised access to, or release of, personal, commercial or operational data.\" data-ts=\"NRS-H51\" data-tr=\"draft\" data-tx=\"https:\/\/risksindex.com\/hazards\/cyber\/\" data-txl=\"Information and cyber-physical systems\">Data Breach<\/a> Report 2026 (landing page; global average USD 4.99 million, up 12%; AI-driven attacks up 56%). IBM, Armonk. Vendor report, weak evidence; the full report was not opened. Observation year 2026. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c3-r18\" aria-label=\"Back to the first call of note 18\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c3-n14\"><span class=\"nrp-notes-n\">14<\/span><span>CISA and 22 partner agencies (eds.), Countering Chinese State-Sponsored Actors Compromise of Networks Worldwide to Feed Global Espionage System, advisory AA25-239A (published 27 August 2025; revised 3 September 2025; 23 agencies from 13 countries; known vulnerabilities; no zero-day exploitation observed). Cybersecurity and Infrastructure Security Agency, Arlington. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c3-r14\" aria-label=\"Back to the first call of note 14\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c3-n19\"><span class=\"nrp-notes-n\">19<\/span><span>Chainalysis (ed.), ransomware analysis (blog page; more than USD 820 million on-chain in 2025, down 8% from an updated USD 892 million for 2024; original 2024 estimate USD 813 million). Chainalysis, New York. Vendor estimate, weak evidence. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c3-r19\" aria-label=\"Back to the first call of note 19\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c3-n13\"><span class=\"nrp-notes-n\">13<\/span><span>POST-CLOSE, context only: CISA (ed.), Known Exploited Vulnerabilities Catalog (catalogue page; 1,767 results at the read; newest entry added 2026-11-03). Cybersecurity and Infrastructure Security Agency, Arlington. Observation year 2026. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c3-r13\" aria-label=\"Back to the first call of note 13\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c3-n10\"><span class=\"nrp-notes-n\">10<\/span><span>UK National Cyber Security Centre (ed.), Timelines for migration to post-quantum cryptography (guidance page; version 1.0, 20 March 2025; milestones 2028, 2031 and 2035). NCSC, London. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c3-r10\" aria-label=\"Back to the first call of note 10\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c3-n11\"><span class=\"nrp-notes-n\">11<\/span><span>European Commission (ed.), Coordinated Implementation Roadmap for the transition to Post-Quantum Cryptography (library page; published 23 June 2025; the milestones were not on the page). Directorate-General for Communications Networks, Content and Technology, Brussels. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c3-r11\" aria-label=\"Back to the first call of note 11\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c3-n44\"><span class=\"nrp-notes-n\">44<\/span><span>NIST (ed.), Transition to Post-Quantum Cryptography Standards, NIST IR 8547, initial public draft (draft PDF, November 2024; Tables 2 and 4: for quantum-vulnerable signature and key-establishment schemes at 112 bits of security strength, deprecated after 2030 and disallowed after 2035, and at 128 bits or more, disallowed after 2035; the cover sheet added on withdrawal on 27 October 2026 is not used). National Institute of Standards and Technology, Gaithersburg. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c3-r44\" aria-label=\"Back to the first call of note 44\">back<\/a><\/span><\/li><\/ol><\/section><\/div><div class=\"nrp-part\" id=\"nx-nrp-xt-10-part-risk-and-capability\"><header class=\"nrp-chap-head\" id=\"nx-nrp-xt-10-c4-top\"><ul class=\"nrp-eyerow\"><li class=\"nf-ui-eyebrow\"><a href=\"https:\/\/therisk.global\/nexus-reports\/editions\/xt-10\/\">Cybersecurity and Advanced Cryptography 2026<\/a><\/li><li class=\"nf-ui-eyebrow\">Chapter 4<\/li><\/ul><span class=\"nrp-rule\" aria-hidden=\"true\"><\/span><h2 class=\"pp-hero-title\">Risks and capability<\/h2><p class=\"nrp-lede\">Four cybersecurity and cryptography risk objects open the portfolio. Order carries no rank. Each is read across driver, exposure, vulnerability, capacity, cascade and consequence.<\/p><p class=\"nrp-chap-meta\"><span>5 min read<\/span><span>0 figures<\/span><span>1 table<\/span><span>16 notes<\/span><span>NR-XTECH-CRYPTO-GLOBAL-2026-BASELINE<\/span><\/p><\/header><section class=\"nrp-block\" id=\"nx-nrp-xt-10-c4-s1\" aria-labelledby=\"nx-nrp-xt-10-c4-s1-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-c4-s1-h\"><span class=\"nrp-num\">4.1<\/span><span>Risk objects<\/span><\/h2><p class=\"nrp-stand\">Each risk is read across the chain from hazard to consequence, with its status and evidence-quality level.<\/p><ol class=\"nrp-find\"><li><p class=\"nrp-find-m\"><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"neutral\" aria-hidden=\"true\"><\/span>Inferred<\/span><span class=\"nrp-eql\" title=\"Evidence-quality level, 1 to 5\">EQL 4<\/span><span class=\"nrp-find-id\">RSK-XT10-CRY-001<\/span><\/p><h3 class=\"nrp-h4\">Cryptographic transition lag<\/h3><dl class=\"nrp-dl\"><dt>Driver<\/dt><dd>falling resource estimates and slow migration<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c4-n22\" id=\"nx-nrp-xt-10-c4-r22\" aria-label=\"Note 22\">22<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c4-n1\" id=\"nx-nrp-xt-10-c4-r1\" aria-label=\"Note 1\">1<\/a><\/sup><\/dd><dt>Exposure<\/dt><dd>long-lived sensitive data; signatures on long-life devices<\/dd><dt>Vulnerability<\/dt><dd>inventory gaps; embedded and legacy <a class=\"nx-link nx-term\" href=\"https:\/\/docs.therisk.global\/organization\/systems\" data-tc=\"Systems\" data-tk=\"Nexus Standards\" data-td=\"The twenty Nexus systems, NXS-CMD to NXS-LAB\">systems<\/a><\/dd><dt>Capacity<\/dt><dd>standards and national timelines<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c4-n1\" aria-label=\"Note 1\">1<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c4-n10\" id=\"nx-nrp-xt-10-c4-r10\" aria-label=\"Note 10\">10<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c4-n12\" id=\"nx-nrp-xt-10-c4-r12\" aria-label=\"Note 12\">12<\/a><\/sup><\/dd><dt>Cascade<\/dt><dd>DAT \u2192 FIN, HLT, INF<\/dd><dt>Horizon<\/dt><dd>1 to 10 years<\/dd><\/dl><\/li><li><p class=\"nrp-find-m\"><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"neutral\" aria-hidden=\"true\"><\/span>Inferred<\/span><span class=\"nrp-eql\" title=\"Evidence-quality level, 1 to 5\">EQL 3<\/span><span class=\"nrp-find-id\">RSK-XT10-INF-002<\/span><\/p><h3 class=\"nrp-h4\">Signature and certificate migration lag<\/h3><dl class=\"nrp-dl\"><dt>Driver<\/dt><dd>larger signatures and slow trust-store change<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c4-n23\" id=\"nx-nrp-xt-10-c4-r23\" aria-label=\"Note 23\">23<\/a><\/sup><\/dd><dt>Exposure<\/dt><dd>web, code signing, device identity<\/dd><dt>Vulnerability<\/dt><dd>performance limits; long-lived certificates<\/dd><dt>Capacity<\/dt><dd>new schemes under evaluation<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c4-n42\" id=\"nx-nrp-xt-10-c4-r42\" aria-label=\"Note 42\">42<\/a><\/sup><\/dd><dt>Cascade<\/dt><dd>INF \u2192 DAT<\/dd><dt>Horizon<\/dt><dd>1 to 5 years<\/dd><\/dl><\/li><li><p class=\"nrp-find-m\"><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><span class=\"nrp-eql\" title=\"Evidence-quality level, 1 to 5\">EQL 4<\/span><span class=\"nrp-find-id\">RSK-XT10-THR-003<\/span><\/p><h3 class=\"nrp-h4\">Known vulnerabilities in edge devices<\/h3><dl class=\"nrp-dl\"><dt>Driver<\/dt><dd>exploitation of known CVEs<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c4-n13\" id=\"nx-nrp-xt-10-c4-r13\" aria-label=\"Note 13\">13<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c4-n14\" id=\"nx-nrp-xt-10-c4-r14\" aria-label=\"Note 14\">14<\/a><\/sup><\/dd><dt>Exposure<\/dt><dd>routers, gateways, telecom and transport networks<\/dd><dt>Vulnerability<\/dt><dd>slow patching; exposed management planes<\/dd><dt>Capacity<\/dt><dd>catalogues, advisories and hardening guidance<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c4-n13\" aria-label=\"Note 13\">13<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c4-n14\" aria-label=\"Note 14\">14<\/a><\/sup><\/dd><dt>Cascade<\/dt><dd>INF \u2192 ENE, FIN<\/dd><dt>Horizon<\/dt><dd>1 to 5 years<\/dd><\/dl><\/li><li><p class=\"nrp-find-m\"><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"neutral\" aria-hidden=\"true\"><\/span>Inferred<\/span><span class=\"nrp-eql\" title=\"Evidence-quality level, 1 to 5\">EQL 3<\/span><span class=\"nrp-find-id\">RSK-XT10-GOV-004<\/span><\/p><h3 class=\"nrp-h4\">Fragmented timelines and duties<\/h3><dl class=\"nrp-dl\"><dt>Driver<\/dt><dd>different dates in NCSC, NIST draft, EU and CISA material<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c4-n44\" id=\"nx-nrp-xt-10-c4-r44\" aria-label=\"Note 44\">44<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c4-n10\" aria-label=\"Note 10\">10<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c4-n11\" id=\"nx-nrp-xt-10-c4-r11\" aria-label=\"Note 11\">11<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c4-n12\" aria-label=\"Note 12\">12<\/a><\/sup><\/dd><dt>Exposure<\/dt><dd>multinational operators and suppliers<\/dd><dt>Vulnerability<\/dt><dd>duplicate reporting; unclear product duties<\/dd><dt>Capacity<\/dt><dd>standards, roadmaps and shared guidance<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c4-n9\" id=\"nx-nrp-xt-10-c4-r9\" aria-label=\"Note 9\">9<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c4-n11\" aria-label=\"Note 11\">11<\/a><\/sup><\/dd><dt>Cascade<\/dt><dd>GOV \u2192 INF, FIN<\/dd><dt>Horizon<\/dt><dd>1 to 5 years<\/dd><\/dl><\/li><\/ol><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-c4-s2\" aria-labelledby=\"nx-nrp-xt-10-c4-s2-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-c4-s2-h\"><span class=\"nrp-num\">4.2<\/span><span>Capability ladder<\/span><\/h2><p class=\"nrp-stand\">Existence is not readiness. Each of the fifteen capability functions is placed on the ladder by the strongest public evidence for cybersecurity and cryptography at the global level.<\/p><div class=\"nrp-tblw\" id=\"nx-nrp-xt-10-c4-tab1\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table 4.1<\/span><span class=\"nrp-tbl-t\">Capabilities on the ladder of evidence: listed, exists, demonstrated, tested<\/span><\/caption><thead><tr><th scope=\"col\">Function<\/th><th scope=\"col\">Rung<\/th><th scope=\"col\">Level<\/th><th scope=\"col\">Strongest public evidence at baseline<\/th><\/tr><\/thead><tbody><tr><td>Prevention and mitigation<\/td><td><span class=\"nrp-ladder\" aria-hidden=\"true\"><i data-on=\"true\"><\/i><i data-on=\"true\"><\/i><i><\/i><i><\/i><\/span><\/td><td>EXISTS<\/td><td>post-quantum standards and guidance published<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c4-n1\" aria-label=\"Note 1\">1<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c4-n7\" id=\"nx-nrp-xt-10-c4-r7\" aria-label=\"Note 7\">7<\/a><\/sup><\/td><\/tr><tr><td>Monitoring and observation<\/td><td><span class=\"nrp-ladder\" aria-hidden=\"true\"><i data-on=\"true\"><\/i><i data-on=\"true\"><\/i><i><\/i><i><\/i><\/span><\/td><td>EXISTS<\/td><td>exploited-vulnerability catalogue maintained<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c4-n13\" aria-label=\"Note 13\">13<\/a><\/sup><\/td><\/tr><tr><td><a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/nrs\/#nrs-c1\" data-tc=\"NRS-C1 early-warning\" data-tk=\"Nexus risk vocabulary\" data-td=\"Timely, actionable information about an impending hazard that lets people and institutions act to reduce harm before it occurs.\" data-ts=\"NRS-C1\" data-tr=\"draft\">Early warning<\/a><\/td><td><span class=\"nrp-ladder\" aria-hidden=\"true\"><i data-on=\"true\"><\/i><i data-on=\"true\"><\/i><i><\/i><i><\/i><\/span><\/td><td>EXISTS<\/td><td>joint advisories issued by agencies<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c4-n14\" aria-label=\"Note 14\">14<\/a><\/sup><\/td><\/tr><tr><td>Preparedness and planning<\/td><td><span class=\"nrp-ladder\" aria-hidden=\"true\"><i data-on=\"true\"><\/i><i data-on=\"true\"><\/i><i><\/i><i><\/i><\/span><\/td><td>EXISTS<\/td><td>national timelines and the NIST transition draft<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c4-n10\" aria-label=\"Note 10\">10<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c4-n44\" aria-label=\"Note 44\">44<\/a><\/sup><\/td><\/tr><tr><td>Redundancy and reserves<\/td><td><span class=\"nrp-ladder\" aria-hidden=\"true\"><i data-on=\"true\"><\/i><i><\/i><i><\/i><i><\/i><\/span><\/td><td>LISTED<\/td><td>no evidence of fallback algorithms deployed at scale; HQC is a backup standard in preparation<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c4-n6\" id=\"nx-nrp-xt-10-c4-r6\" aria-label=\"Note 6\">6<\/a><\/sup><\/td><\/tr><tr><td>Response<\/td><td><span class=\"nrp-ladder\" aria-hidden=\"true\"><i data-on=\"true\"><\/i><i><\/i><i><\/i><i><\/i><\/span><\/td><td>LISTED<\/td><td>no tested response to a sudden break of a deployed algorithm<\/td><\/tr><tr><td>Continuity of critical services<\/td><td><span class=\"nrp-ladder\" aria-hidden=\"true\"><i data-on=\"true\"><\/i><i><\/i><i><\/i><i><\/i><\/span><\/td><td>LISTED<\/td><td>migration of critical <a class=\"nx-link nx-term\" href=\"https:\/\/docs.therisk.global\/organization\/systems\" data-tc=\"Systems\" data-tk=\"Nexus Standards\" data-td=\"The twenty Nexus systems, NXS-CMD to NXS-LAB\">systems<\/a> not yet reported<\/td><\/tr><tr><td>Recovery<\/td><td><span class=\"nrp-ladder\" aria-hidden=\"true\"><i data-on=\"true\"><\/i><i><\/i><i><\/i><i><\/i><\/span><\/td><td>LISTED<\/td><td>not applicable at baseline for cryptographic break; incident recovery figures are vendor-reported<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c4-n18\" id=\"nx-nrp-xt-10-c4-r18\" aria-label=\"Note 18\">18<\/a><\/sup><\/td><\/tr><tr><td>Adaptation<\/td><td><span class=\"nrp-ladder\" aria-hidden=\"true\"><i data-on=\"true\"><\/i><i data-on=\"true\"><\/i><i><\/i><i><\/i><\/span><\/td><td>EXISTS<\/td><td>framework and agility guidance published<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c4-n9\" aria-label=\"Note 9\">9<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c4-n7\" aria-label=\"Note 7\">7<\/a><\/sup><\/td><\/tr><tr><td><a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/nrs\/#nrs-c1\" data-tc=\"NRS-C1 social-protection\" data-tk=\"Nexus risk vocabulary\" data-td=\"Public policies and programmes that help people manage risk and reduce poverty and vulnerability across their lives.\" data-ts=\"NRS-C1\" data-tr=\"draft\">Social protection<\/a><\/td><td><span class=\"nrp-ladder\" aria-hidden=\"true\"><i data-on=\"true\"><\/i><i><\/i><i><\/i><i><\/i><\/span><\/td><td>LISTED<\/td><td>not applicable at baseline<\/td><\/tr><tr><td>Finance and insurance<\/td><td><span class=\"nrp-ladder\" aria-hidden=\"true\"><i data-on=\"true\"><\/i><i><\/i><i><\/i><i><\/i><\/span><\/td><td>LISTED<\/td><td>cost evidence is from vendors; no insurance data bound<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c4-n18\" aria-label=\"Note 18\">18<\/a><\/sup><\/td><\/tr><tr><td>Institutional coordination<\/td><td><span class=\"nrp-ladder\" aria-hidden=\"true\"><i data-on=\"true\"><\/i><i data-on=\"true\"><\/i><i><\/i><i><\/i><\/span><\/td><td>EXISTS<\/td><td>agencies co-seal advisories; EU and national roadmaps<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c4-n11\" aria-label=\"Note 11\">11<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c4-n14\" aria-label=\"Note 14\">14<\/a><\/sup><\/td><\/tr><tr><td>Technical infrastructure<\/td><td><span class=\"nrp-ladder\" aria-hidden=\"true\"><i data-on=\"true\"><\/i><i data-on=\"true\"><\/i><i><\/i><i><\/i><\/span><\/td><td>EXISTS<\/td><td>open-source and network deployments of hybrid key agreement<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c4-n23\" aria-label=\"Note 23\">23<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c4-n24\" id=\"nx-nrp-xt-10-c4-r24\" aria-label=\"Note 24\">24<\/a><\/sup><\/td><\/tr><tr><td>Workforce<\/td><td><span class=\"nrp-ladder\" aria-hidden=\"true\"><i data-on=\"true\"><\/i><i><\/i><i><\/i><i><\/i><\/span><\/td><td>LISTED<\/td><td>skills needs reported; no gap figure published<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c4-n20\" id=\"nx-nrp-xt-10-c4-r20\" aria-label=\"Note 20\">20<\/a><\/sup><\/td><\/tr><tr><td>Research capacity<\/td><td><span class=\"nrp-ladder\" aria-hidden=\"true\"><i><\/i><i><\/i><i><\/i><i><\/i><\/span><\/td><td>ADEQUATE<\/td><td>public standardisation process and published estimates<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c4-n22\" aria-label=\"Note 22\">22<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c4-n6\" aria-label=\"Note 6\">6<\/a><\/sup><\/td><\/tr><\/tbody><tfoot><tr><td colspan=\"4\">A capability listed in policy is not a tested one; each rung is the strongest public evidence at baseline.<\/td><\/tr><\/tfoot><\/table><\/div><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-c4-notes\" aria-labelledby=\"nx-nrp-xt-10-c4-notes-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-c4-notes-h\"><span>Notes<\/span><\/h2><p class=\"nrp-note\">Numbers are the edition&#8217;s reference numbers, so a note reads the same in every chapter. The full list, with every source and its licence, is in Annex C. <a href=\"https:\/\/therisk.global\/nexus-reports\/editions\/xt-10\/references\/\">Annex C, references<\/a><\/p><ol class=\"nrp-notes\"><li id=\"nx-nrp-xt-10-c4-n22\"><span class=\"nrp-notes-n\">22<\/span><span>Gidney, C., How to factor 2048 bit RSA integers with less than a million noisy qubits, arXiv:2505.15917, submitted 21 May 2025 (abstract page; under one million noisy qubits; under a week; 0.1% gate error; 1 microsecond cycle; 10 microsecond reaction time; the author\u2019s 2019 estimate was about 20 million qubits in 8 hours). arXiv, Ithaca. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c4-r22\" aria-label=\"Back to the first call of note 22\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c4-n1\"><span class=\"nrp-notes-n\">1<\/span><span>NIST (ed.), Module-Lattice-Based Key-Encapsulation Mechanism Standard, FIPS 203 (publication page; final 13 August 2024; ML-KEM-512, ML-KEM-768 and ML-KEM-1024; initial draft 24 August 2023). National Institute of Standards and Technology, Gaithersburg. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c4-r1\" aria-label=\"Back to the first call of note 1\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c4-n10\"><span class=\"nrp-notes-n\">10<\/span><span>UK National Cyber Security Centre (ed.), Timelines for migration to post-quantum cryptography (guidance page; version 1.0, 20 March 2025; milestones 2028, 2031 and 2035). NCSC, London. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c4-r10\" aria-label=\"Back to the first call of note 10\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c4-n12\"><span class=\"nrp-notes-n\">12<\/span><span>CISA (ed.), Post-Quantum Cryptography Initiative (page; key dates, federal inventory duty under 6 U.S.C. 1526, product categories list, references to Executive Orders 14306, 14412 and 14413 and OMB Memorandum M-26-15). Cybersecurity and Infrastructure Security Agency, Arlington. Observation year 2026. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c4-r12\" aria-label=\"Back to the first call of note 12\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c4-n23\"><span class=\"nrp-notes-n\">23<\/span><span>Cloudflare (ed.), The state of the post-quantum Internet in 2025 (blog analysis; late October 2025 majority of human traffic with post-quantum key agreement; 3.7% of origins; 39% of top 100,000 domains in September 2025; ML-DSA-44 about 15 kB; first post-quantum certificates expected in 2026). Cloudflare, San Francisco. Vendor analysis of its own network, weak evidence. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c4-r23\" aria-label=\"Back to the first call of note 23\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c4-n42\"><span class=\"nrp-notes-n\">42<\/span><span>UNVERIFIED, not opened: NIST (ed.), additional digital signature schemes for the post-quantum project (on-ramp), cited from memory; the project page returned an error. National Institute of Standards and Technology, Gaithersburg. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c4-r42\" aria-label=\"Back to the first call of note 42\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c4-n13\"><span class=\"nrp-notes-n\">13<\/span><span>POST-CLOSE, context only: CISA (ed.), Known Exploited Vulnerabilities Catalog (catalogue page; 1,767 results at the read; newest entry added 2026-11-03). Cybersecurity and Infrastructure Security Agency, Arlington. Observation year 2026. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c4-r13\" aria-label=\"Back to the first call of note 13\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c4-n14\"><span class=\"nrp-notes-n\">14<\/span><span>CISA and 22 partner agencies (eds.), Countering Chinese State-Sponsored Actors Compromise of Networks Worldwide to Feed Global Espionage System, advisory AA25-239A (published 27 August 2025; revised 3 September 2025; 23 agencies from 13 countries; known vulnerabilities; no zero-day exploitation observed). Cybersecurity and Infrastructure Security Agency, Arlington. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c4-r14\" aria-label=\"Back to the first call of note 14\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c4-n44\"><span class=\"nrp-notes-n\">44<\/span><span>NIST (ed.), Transition to Post-Quantum Cryptography Standards, NIST IR 8547, initial public draft (draft PDF, November 2024; Tables 2 and 4: for quantum-vulnerable signature and key-establishment schemes at 112 bits of security strength, deprecated after 2030 and disallowed after 2035, and at 128 bits or more, disallowed after 2035; the cover sheet added on withdrawal on 27 October 2026 is not used). National Institute of Standards and Technology, Gaithersburg. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c4-r44\" aria-label=\"Back to the first call of note 44\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c4-n11\"><span class=\"nrp-notes-n\">11<\/span><span>European Commission (ed.), Coordinated Implementation Roadmap for the transition to Post-Quantum Cryptography (library page; published 23 June 2025; the milestones were not on the page). Directorate-General for Communications Networks, Content and Technology, Brussels. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c4-r11\" aria-label=\"Back to the first call of note 11\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c4-n9\"><span class=\"nrp-notes-n\">9<\/span><span>NIST (ed.), The NIST Cybersecurity Framework (CSF) 2.0, NIST CSWP 29 (publication page; 26 February 2024). National Institute of Standards and Technology, Gaithersburg. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c4-r9\" aria-label=\"Back to the first call of note 9\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c4-n7\"><span class=\"nrp-notes-n\">7<\/span><span>NIST (ed.), Recommendations for Key-Encapsulation Mechanisms, SP 800-227 (publication page; final 18 September 2025). National Institute of Standards and Technology, Gaithersburg. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c4-r7\" aria-label=\"Back to the first call of note 7\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c4-n6\"><span class=\"nrp-notes-n\">6<\/span><span>NIST (ed.), NIST selects HQC as fifth algorithm for post-quantum encryption (news item, 11 March 2025; backup to ML-KEM; draft standard expected in about a year; final standard expected in 2027). National Institute of Standards and Technology, Gaithersburg. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c4-r6\" aria-label=\"Back to the first call of note 6\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c4-n18\"><span class=\"nrp-notes-n\">18<\/span><span>IBM and Ponemon Institute (eds.), Cost of a <a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/nrs\/#nrs-h51\" data-tc=\"NHS-1 cyber.intrusion.data-breach\" data-tk=\"Information and cyber-physical systems \u00b7 Malicious compromise\" data-td=\"Unauthorised access to, or release of, personal, commercial or operational data.\" data-ts=\"NRS-H51\" data-tr=\"draft\" data-tx=\"https:\/\/risksindex.com\/hazards\/cyber\/\" data-txl=\"Information and cyber-physical systems\">Data Breach<\/a> Report 2026 (landing page; global average USD 4.99 million, up 12%; AI-driven attacks up 56%). IBM, Armonk. Vendor report, weak evidence; the full report was not opened. Observation year 2026. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c4-r18\" aria-label=\"Back to the first call of note 18\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c4-n24\"><span class=\"nrp-notes-n\">24<\/span><span>OpenSSH project (ed.), Post-quantum cryptography in OpenSSH (documentation page; sntrup761x25519-sha512 from 9.0; mlkem768x25519-sha256 added in 9.9 and default in 10.0; warning from 10.1). OpenBSD Project. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c4-r24\" aria-label=\"Back to the first call of note 24\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c4-n20\"><span class=\"nrp-notes-n\">20<\/span><span>ISC2 (ed.), 2025 Cybersecurity Workforce Study (page; published 4 December 2025; 16,029 respondents; 59% critical or significant skills needs, up from 44%; no workforce gap estimate). ISC2, Alexandria. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c4-r20\" aria-label=\"Back to the first call of note 20\">back<\/a><\/span><\/li><\/ol><\/section><\/div><div class=\"nrp-part\" id=\"nx-nrp-xt-10-part-scenario\"><header class=\"nrp-chap-head\" id=\"nx-nrp-xt-10-c5-top\"><ul class=\"nrp-eyerow\"><li class=\"nf-ui-eyebrow\"><a href=\"https:\/\/therisk.global\/nexus-reports\/editions\/xt-10\/\">Cybersecurity and Advanced Cryptography 2026<\/a><\/li><li class=\"nf-ui-eyebrow\">Chapter 5<\/li><\/ul><span class=\"nrp-rule\" aria-hidden=\"true\"><\/span><h2 class=\"pp-hero-title\">Signature lag while key agreement migrates<\/h2><p class=\"nrp-lede\">A conditional statement under stated assumptions, never a prediction.<\/p><p class=\"nrp-chap-meta\"><span>2 min read<\/span><span>0 figures<\/span><span>0 tables<\/span><span>2 notes<\/span><span>NR-XTECH-CRYPTO-GLOBAL-2026-BASELINE<\/span><\/p><\/header><section class=\"nrp-block\" id=\"nx-nrp-xt-10-c5-s1\" aria-labelledby=\"nx-nrp-xt-10-c5-s1-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-c5-s1-h\"><span class=\"nrp-num\">5.1<\/span><span>Assumptions<\/span><\/h2><p class=\"nrp-stand\">Scenario SCN-XT10-SIG-01: what is assumed, and what is held constant.<\/p><dl class=\"nrp-dl\"><dt>Baseline<\/dt><dd>the 2026 reference state in this edition<\/dd><dt>Drivers<\/dt><dd>key agreement is widely hybrid while signatures, certificates and long-life devices stay on current methods, and a hardware milestone arrives sooner than planned<\/dd><dt>Analogues<\/dt><dd>the fall in resource estimates from 2019 to 2025; the 2024 standards<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c5-n22\" id=\"nx-nrp-xt-10-c5-r22\" aria-label=\"Note 22\">22<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c5-n1\" id=\"nx-nrp-xt-10-c5-r1\" aria-label=\"Note 1\">1<\/a><\/sup><\/dd><dt>Interventions<\/dt><dd>none modelled: the specification describes the unmitigated case<\/dd><dt>Run state<\/dt><dd>narrative specification; quantified run scheduled for 2027<\/dd><\/dl><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-c5-s2\" aria-labelledby=\"nx-nrp-xt-10-c5-s2-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-c5-s2-h\"><span class=\"nrp-num\">5.2<\/span><span>The cascade, step by step<\/span><\/h2><ol class=\"nrp-rows\"><li><span class=\"nrp-rows-i\">1<\/span><p class=\"nrp-rows-t\">INF \u2192 DAT<\/p><p class=\"nrp-rows-x\">a hardware milestone lowers confidence in public-key signatures<\/p><p class=\"nrp-rows-m\">2025<\/p><\/li><li><span class=\"nrp-rows-i\">2<\/span><p class=\"nrp-rows-t\">DAT \u2192 INF<\/p><p class=\"nrp-rows-x\">long-life devices and certificates cannot be updated quickly<\/p><p class=\"nrp-rows-m\">2025<\/p><\/li><li><span class=\"nrp-rows-i\">3<\/span><p class=\"nrp-rows-t\">INF \u2192 FIN<\/p><p class=\"nrp-rows-x\">operators re-prioritise migration spending<\/p><p class=\"nrp-rows-m\">2026<\/p><\/li><li><span class=\"nrp-rows-i\">4<\/span><p class=\"nrp-rows-t\">GOV \u2192 INF<\/p><p class=\"nrp-rows-x\">national timelines and reporting duties diverge<\/p><p class=\"nrp-rows-m\">2026<\/p><\/li><li><span class=\"nrp-rows-i\">5<\/span><p class=\"nrp-rows-t\">INF \u2192 HLT<\/p><p class=\"nrp-rows-x\">archived records and device identities become the first exposure<\/p><p class=\"nrp-rows-m\">2026<\/p><\/li><li><span class=\"nrp-rows-i\">6<\/span><p class=\"nrp-rows-t\">FIN \u2192 INF<\/p><p class=\"nrp-rows-x\">spending shifts to inventory and agility<\/p><p class=\"nrp-rows-m\">2026<\/p><\/li><\/ol><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-c5-s3\" aria-labelledby=\"nx-nrp-xt-10-c5-s3-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-c5-s3-h\"><span class=\"nrp-num\">5.3<\/span><span>The scenario as a table of steps<\/span><\/h2><p class=\"nx-p\">How the shock in scenario SCN-XT10-SIG-01 would travel through Cybersecurity and Advanced Cryptography&#8217;s coupled <a class=\"nx-link nx-term\" href=\"https:\/\/docs.therisk.global\/organization\/systems\" data-tc=\"Systems\" data-tk=\"Nexus Standards\" data-td=\"The twenty Nexus systems, NXS-CMD to NXS-LAB\">systems<\/a>, step by step, under the assumptions the edition states.<\/p><div class=\"nx-table-wrap\"><table class=\"nx-table\" data-stack=\"true\"><thead><tr><th scope=\"col\">Step<\/th><th scope=\"col\">What happens<\/th><th scope=\"col\">Source<\/th><\/tr><\/thead><tbody><tr><td data-label=\"Step\">01 Infrastructure to dat<\/td><td data-label=\"What happens\">A hardware milestone lowers confidence in public-key signatures. Analogue or source: 2025.<\/td><td data-label=\"Source\">Edition XT-10, scenario SCN-XT10-SIG-01, step 1<\/td><\/tr><tr><td data-label=\"Step\">02 DAT to infrastructure<\/td><td data-label=\"What happens\">Long-life devices and certificates cannot be updated quickly. Analogue or source: 2025.<\/td><td data-label=\"Source\">Edition XT-10, scenario SCN-XT10-SIG-01, step 2<\/td><\/tr><tr><td data-label=\"Step\">03 Infrastructure to finance<\/td><td data-label=\"What happens\">Operators re-prioritise migration spending. Analogue or source: 2026.<\/td><td data-label=\"Source\">Edition XT-10, scenario SCN-XT10-SIG-01, step 3<\/td><\/tr><tr><td data-label=\"Step\">04 Governance to infrastructure<\/td><td data-label=\"What happens\">National timelines and reporting duties diverge. Analogue or source: 2026.<\/td><td data-label=\"Source\">Edition XT-10, scenario SCN-XT10-SIG-01, step 4<\/td><\/tr><tr><td data-label=\"Step\">05 Infrastructure to health<\/td><td data-label=\"What happens\">Archived records and device identities become the first exposure. Analogue or source: 2026.<\/td><td data-label=\"Source\">Edition XT-10, scenario SCN-XT10-SIG-01, step 5<\/td><\/tr><tr><td data-label=\"Step\">06 Finance to infrastructure<\/td><td data-label=\"What happens\">Spending shifts to inventory and agility. Analogue or source: 2026.<\/td><td data-label=\"Source\">Edition XT-10, scenario SCN-XT10-SIG-01, step 6<\/td><\/tr><\/tbody><\/table><\/div><p class=\"nx-note nx-mt-2\">A teaching model of a conditional scenario under the edition&#8217;s stated assumptions: not a forecast, not a prediction and not a warning. Sources: <a class=\"nx-link\" href=\"https:\/\/therisk.global\/nexus-reports\/editions\/xt-10\/scenario\/\" rel=\"noopener\">Cybersecurity and Advanced Cryptography 2026, scenario SCN-XT10-SIG-01<\/a> (2026); Cybersecurity and Advanced Cryptography 2026, references (NR-CIT-1) (2026).<\/p><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-c5-notes\" aria-labelledby=\"nx-nrp-xt-10-c5-notes-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-c5-notes-h\"><span>Notes<\/span><\/h2><p class=\"nrp-note\">Numbers are the edition&#8217;s reference numbers, so a note reads the same in every chapter. The full list, with every source and its licence, is in Annex C. <a href=\"https:\/\/therisk.global\/nexus-reports\/editions\/xt-10\/references\/\">Annex C, references<\/a><\/p><ol class=\"nrp-notes\"><li id=\"nx-nrp-xt-10-c5-n22\"><span class=\"nrp-notes-n\">22<\/span><span>Gidney, C., How to factor 2048 bit RSA integers with less than a million noisy qubits, arXiv:2505.15917, submitted 21 May 2025 (abstract page; under one million noisy qubits; under a week; 0.1% gate error; 1 microsecond cycle; 10 microsecond reaction time; the author\u2019s 2019 estimate was about 20 million qubits in 8 hours). arXiv, Ithaca. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c5-r22\" aria-label=\"Back to the first call of note 22\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c5-n1\"><span class=\"nrp-notes-n\">1<\/span><span>NIST (ed.), Module-Lattice-Based Key-Encapsulation Mechanism Standard, FIPS 203 (publication page; final 13 August 2024; ML-KEM-512, ML-KEM-768 and ML-KEM-1024; initial draft 24 August 2023). National Institute of Standards and Technology, Gaithersburg. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c5-r1\" aria-label=\"Back to the first call of note 1\">back<\/a><\/span><\/li><\/ol><\/section><\/div><div class=\"nrp-part\" id=\"nx-nrp-xt-10-part-lenses-and-readings\"><header class=\"nrp-chap-head\" id=\"nx-nrp-xt-10-c6-top\"><ul class=\"nrp-eyerow\"><li class=\"nf-ui-eyebrow\"><a href=\"https:\/\/therisk.global\/nexus-reports\/editions\/xt-10\/\">Cybersecurity and Advanced Cryptography 2026<\/a><\/li><li class=\"nf-ui-eyebrow\">Chapter 6<\/li><\/ul><span class=\"nrp-rule\" aria-hidden=\"true\"><\/span><h2 class=\"pp-hero-title\">Readings from the other desks<\/h2><p class=\"nrp-lede\">The cybersecurity and cryptography baseline is read through each steward\u2019s lens, then once as a whole. Each lens is a projection of reviewed findings, not a separate argument. The other desks&#8217; own editions of this subject are listed first, as cross-references, not copies.<\/p><p class=\"nrp-chap-meta\"><span>15 min read<\/span><span>0 figures<\/span><span>8 tables<\/span><span>35 notes<\/span><span>NR-XTECH-CRYPTO-GLOBAL-2026-BASELINE<\/span><\/p><\/header><section class=\"nrp-block\" id=\"nx-nrp-xt-10-c6-s1\" aria-labelledby=\"nx-nrp-xt-10-c6-s1-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-c6-s1-h\"><span class=\"nrp-num\">6.1<\/span><span>The other desks&#8217; editions of this subject<\/span><\/h2><p class=\"nrp-stand\">Federation: each desk writes its own edition for the subjects in its remit. Until a desk releases, its edition shows its frame and the reading this edition printed for it.<\/p><div class=\"nrp-tblw\"><table class=\"nrp-tbl\"><thead><tr><th scope=\"col\">Desk<\/th><th scope=\"col\">Edition<\/th><th scope=\"col\">State<\/th><th scope=\"col\">Identifier<\/th><\/tr><\/thead><tbody><tr data-host=\"true\"><th scope=\"row\">GCRI Systems Evidence<\/th><td>No edition of this subject at this desk in the 2026 Baseline cycle<\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"neutral\" aria-hidden=\"true\"><\/span>Not in this cycle<\/span><\/td><td class=\"nrp-mono\"><\/td><\/tr><tr><th scope=\"row\">GRF Public Deliberation<\/th><td>Outside this desk&#8217;s remit<\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"neutral\" aria-hidden=\"true\"><\/span>Not in remit<\/span><\/td><td class=\"nrp-mono\"><\/td><\/tr><tr><th scope=\"row\">GRA Capital Readiness<\/th><td>Outside this desk&#8217;s remit<\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"neutral\" aria-hidden=\"true\"><\/span>Not in remit<\/span><\/td><td class=\"nrp-mono\"><\/td><\/tr><tr><th scope=\"row\">Standards Progress<\/th><td>No edition of this subject at this desk in the 2026 Baseline cycle<\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"neutral\" aria-hidden=\"true\"><\/span>Not in this cycle<\/span><\/td><td class=\"nrp-mono\"><\/td><\/tr><tr><th scope=\"row\">Academy Capability<\/th><td>No edition of this subject at this desk in the 2026 Baseline cycle<\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"neutral\" aria-hidden=\"true\"><\/span>Not in this cycle<\/span><\/td><td class=\"nrp-mono\"><\/td><\/tr><tr><th scope=\"row\">Index Measurement<\/th><td>Outside this desk&#8217;s remit<\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"neutral\" aria-hidden=\"true\"><\/span>Not in remit<\/span><\/td><td class=\"nrp-mono\"><\/td><\/tr><\/tbody><\/table><\/div><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-c6-s2\" aria-labelledby=\"nx-nrp-xt-10-c6-s2-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-c6-s2-h\"><span class=\"nrp-num\">6.2<\/span><span>Three lenses<\/span><\/h2><p class=\"nrp-stand\">One edition, read by each steward. The lens of this site comes first.<\/p><div class=\"nrp-cards\" data-n=\"3\"><article class=\"nf-ui-card nrp-card\" data-host=\"true\"><p class=\"nf-ui-eyebrow\">GCRI \u00b7 KEY T<\/p><h3 class=\"nf-ui-title\" data-level=\"card\">Technical Truth<\/h3><p>The evidence supports reading cybersecurity and cryptography as protective infrastructure under change. Standards are finalised, key agreement has moved, and signatures and long-life devices have not. Evidence is strongest for standards and official threat records, and weakest for migration progress, cost and workforce.<\/p><p class=\"nrp-note\">CRY-001 \u00b7 GOV-004 \u00b7 INF-005 \u00b7 SYS-012<\/p><\/article><article class=\"nf-ui-card nrp-card\"><p class=\"nf-ui-eyebrow\">GRF \u00b7 KEY M<\/p><h3 class=\"nf-ui-title\" data-level=\"card\">Public Meaning<\/h3><p>For most people the story arrives as a message about encryption, a breach notice or a ransomware headline. The baseline asks that public debate separate standards from deployment, and ordinary vulnerabilities from distant machines.<\/p><p class=\"nrp-note\">CRY-001 \u00b7 THR-009 \u00b7 INF-006<\/p><\/article><article class=\"nf-ui-card nrp-card\"><p class=\"nf-ui-eyebrow\">GRA \u00b7 KEY F<\/p><h3 class=\"nf-ui-title\" data-level=\"card\">Capital Meaning<\/h3><p>Readiness implications only. Breach and ransomware costs come from vendors and are weak evidence<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c6-n18\" id=\"nx-nrp-xt-10-c6-r18\" aria-label=\"Note 18\">18<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c6-n19\" id=\"nx-nrp-xt-10-c6-r19\" aria-label=\"Note 19\">19<\/a><\/sup>. Migration has costs that fall on operators. Nothing here is advice, a rating or an approval.<\/p><p class=\"nrp-note\">FIN-010 \u00b7 CRY-001<\/p><\/article><article class=\"nf-ui-card nrp-card\"><p class=\"nf-ui-eyebrow\">NEXUS<\/p><h3 class=\"nf-ui-title\" data-level=\"card\">Synthesis<\/h3><p>Cryptography is well described by standards and thinly measured as a system. The 2027 programme should bind migration progress, publish a comparable deployment table and test the signature pathway before the next hardware milestone.<\/p><p class=\"nrp-note\">SYS-012 \u00b7 C-01 \u00b7 C-02<\/p><\/article><\/div><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-c6-s3\" aria-labelledby=\"nx-nrp-xt-10-c6-s3-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-c6-s3-h\"><span class=\"nrp-num\">6.3<\/span><span>Standards, Academy and steward contributions<\/span><\/h2><p class=\"nrp-stand\">How the <a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/\" data-tc=\"Nexus Standards\" data-tk=\"Nexus Standards\" data-td=\"The foundation standards\">Nexus Standards<\/a> drafts, the Risk Academy and the three stewards feed each quarterly edition for cybersecurity and cryptography. The standards are a preparatory working draft (2026) and are cited as drafts, never as adopted standards.<\/p><div class=\"nrp-tblw\" id=\"nx-nrp-xt-10-c6-tab1\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table 6.1<\/span><span class=\"nrp-tbl-t\">The quarterly rhythm every edition follows<\/span><\/caption><thead><tr><th scope=\"col\">Quarter<\/th><th scope=\"col\">Edition<\/th><th scope=\"col\">Question<\/th><th scope=\"col\">Boundary<\/th><\/tr><\/thead><tbody><tr><td>Q1<\/td><td>State and Agenda<\/td><td>What matters this year, and what is the starting position?<\/td><td>observed baseline stays distinct from planned work<\/td><\/tr><tr><td>Q2<\/td><td>Evidence and Build<\/td><td>What new evidence and capability exist?<\/td><td>a configured capability is not a validated result<\/td><\/tr><tr><td>Q3<\/td><td><a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/nrs\/#nrs-c1\" data-tc=\"NRS-C1 stress-test\" data-tk=\"Nexus risk vocabulary\" data-td=\"An assessment of how a system, portfolio or institution would perform under severe but plausible adverse scenarios, to find weaknesses before they are revealed by events.\" data-ts=\"NRS-C1\" data-tr=\"draft\">Stress Test<\/a> and Readiness<\/td><td>What do scenarios and tests show?<\/td><td>simulated loss or performance is not observed impact<\/td><\/tr><tr><td>Q4<\/td><td>Annual Synthesis and Renewal<\/td><td>What changed in the year, and what renews?<\/td><td>release follows review, not event publicity deadlines<\/td><\/tr><\/tbody><\/table><\/div><div class=\"nrp-tblw\" id=\"nx-nrp-xt-10-c6-tab2\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table 6.2<\/span><span class=\"nrp-tbl-t\">Who contributes what each quarter<\/span><\/caption><thead><tr><th scope=\"col\">Steward or body<\/th><th scope=\"col\">Role<\/th><th scope=\"col\">Contribution route<\/th><\/tr><\/thead><tbody><tr><td>GCRI Canada<\/td><td>Lead Institution and Consortium Secretariat; publisher of record; technical truth (key T)<\/td><td>science and practice communities \u00b7 GCRI gateway<\/td><\/tr><tr><td>The Global Risks Forum (GRF)<\/td><td>leadership, dialogue and the <a class=\"nx-link\" href=\"https:\/\/docs.therisk.global\/organization\/programme\/universe\">Universe<\/a> programme; public meaning (key M)<\/td><td>policy, Universe and national adoption \u00b7 GRF gateway<\/td><\/tr><tr><td>The Global Risks Alliance (GRA)<\/td><td>finance, insurance and development readiness; capital meaning (key F)<\/td><td>finance and insurance \u00b7 GRA gateway<\/td><\/tr><tr><td>Nexus Standards<\/td><td>preparatory drafts on vocabulary, hazards, indicators and methods<\/td><td>Standards site \u00b7 working groups HAZ, IND, MTH, FIN, AI<\/td><\/tr><tr><td>Risk Academy<\/td><td>learning pathways tied to the agenda questions<\/td><td>Academy gateway \u00b7 learning by review<\/td><\/tr><tr><td>Nexus Standards and Academy<\/td><td>technology chapter inputs: GCRI evidence, NXS standards, RA capability<\/td><td>technology editorial board<\/td><\/tr><\/tbody><\/table><\/div><div class=\"nrp-split\"><div><h3 class=\"nrp-h3\">Standards drafts used in this edition<\/h3><ul class=\"nrp-list\"><li>Risk vocabulary NRS-C1 (424 terms) for terms in the glossary<\/li><li>Hazard atlas NHS-1 1.1.0 (905 hazards in 120 families) for risk objects<\/li><li>Seven risk classes: global, catastrophic, existential, emerging, planetary, exponential, frontier-tech<\/li><\/ul><\/div><div><h3 class=\"nrp-h3\">Standards calendar to watch<\/h3><ul class=\"nrp-list\"><li>Founding calls from 20 October 2026; working groups meet from 5 November 2026<\/li><li>Inaugural Global Standards Council session, 12 January 2027<\/li><li>Quarterly reviews in March, June, September and December, aligned with each edition<\/li><\/ul><\/div><\/div><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">boundary<\/p><p>Nothing here certifies. A Nexus attestation records an evaluation under a mandate; it confers no certification, endorsement or approval. Adoption of any standard is a decision of the competent standards body.<\/p><\/aside><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-c6-s4\" aria-labelledby=\"nx-nrp-xt-10-c6-s4-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-c6-s4-h\"><span class=\"nrp-num\">6.4<\/span><span>GCRI reading: the model card<\/span><\/h2><p class=\"nrp-p\">GCRI&#8217;s reading of this edition is its model card: what the national model is, what it computes and where it stops. It is printed in full in Annex A, with the methods it belongs to. <a href=\"https:\/\/therisk.global\/nexus-reports\/editions\/xt-10\/methodology\/\">Annex A, methodology<\/a><\/p><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-c6-s5\" aria-labelledby=\"nx-nrp-xt-10-c6-s5-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-c6-s5-h\"><span class=\"nrp-num\">6.5<\/span><span>Global Risks Forum reading: editorial essays<\/span><\/h2><p class=\"nrp-stand\">Four signed essays by the <a class=\"nx-link\" href=\"https:\/\/docs.therisk.global\/organization\/programme\/reports\">Reports<\/a> editorial team set out the positions this edition takes. They are interpretation, labelled as such; the evidence they draw on is in the findings register.<\/p><div class=\"nrp-cards\"><article class=\"nf-ui-card nrp-card\"><p class=\"nf-ui-eyebrow\">NIST finished three standards in 2024. Deployment is a different record, and it is moving at different speeds for key agreement and signatures. Keeping them apart avoids both alarm and complacency.<\/p><h3 class=\"nf-ui-title\" data-level=\"card\">EDITORIAL ESSAY \u00b7 01<\/h3><p>Standards are not deployment<\/p><\/article><article class=\"nf-ui-card nrp-card\"><p class=\"nf-ui-eyebrow\">Exploited known vulnerabilities, ransomware and fraud account for the reported harm. A distant machine is a planning question; an unpatched router is an incident now.<\/p><h3 class=\"nf-ui-title\" data-level=\"card\">EDITORIAL ESSAY \u00b7 02<\/h3><p>Ordinary causes dominate<\/p><\/article><article class=\"nf-ui-card nrp-card\"><p class=\"nf-ui-eyebrow\">Telemetry from vendors is useful and unaudited. This edition labels each vendor figure and asks for primary data before costs and payments are compared.<\/p><h3 class=\"nf-ui-title\" data-level=\"card\">EDITORIAL ESSAY \u00b7 03<\/h3><p>Vendor evidence needs a label<\/p><\/article><article class=\"nf-ui-card nrp-card\"><p class=\"nf-ui-eyebrow\">No consolidated series of migration progress was found. A shared indicator table would show where inventory, signatures and devices are stuck.<\/p><h3 class=\"nf-ui-title\" data-level=\"card\">EDITORIAL ESSAY \u00b7 04<\/h3><p>Measurement is the missing layer<\/p><\/article><\/div><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">boundary<\/p><p>Essays are signed views of the editorial team. Contributed articles from regional consortia, national pathways and invited experts begin with the 2027 global edition, each with its own review route and disclosures.<\/p><\/aside><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-c6-s6\" aria-labelledby=\"nx-nrp-xt-10-c6-s6-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-c6-s6-h\"><span class=\"nrp-num\">6.6<\/span><span>Global Risks Alliance reading: 2027 cybersecurity and cryptography readiness pack<\/span><\/h2><p class=\"nrp-stand\">The registers that open the 2027 global cycle. At baseline each is initialised from this edition.<\/p><div class=\"nrp-tblw\" id=\"nx-nrp-xt-10-c6-tab3\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table 6.3<\/span><span class=\"nrp-tbl-t\">2027 cybersecurity and cryptography readiness pack<\/span><\/caption><thead><tr><th scope=\"col\">Item<\/th><th scope=\"col\">Register<\/th><th scope=\"col\">State at baseline<\/th><th scope=\"col\">First 2027 entry<\/th><\/tr><\/thead><tbody><tr><td>E1<\/td><td>Cybersecurity and Cryptography risk state delta<\/td><td>baseline set by this edition<\/td><td>changes against the baseline<\/td><\/tr><tr><td>E2<\/td><td>WEFH+B state delta<\/td><td>five global system readings set<\/td><td>indicator updates and freshness<\/td><\/tr><tr><td>E3<\/td><td>Agenda and Portfolio movement<\/td><td>eight agenda items \u00b7 6 proposed objects<\/td><td>admission decisions<\/td><\/tr><tr><td>E4<\/td><td>Federation delivery register<\/td><td>national chapters in preparation<\/td><td>national chapters<\/td><\/tr><tr><td>E5<\/td><td>Consortium capability register<\/td><td>national consortia forming<\/td><td>first contributions<\/td><\/tr><tr><td>E6<\/td><td>Leadership questions and challenges<\/td><td>none yet<\/td><td>first challenge log<\/td><\/tr><tr><td>E7<\/td><td>Foundry technical state<\/td><td>national environments prepared<\/td><td>first federation cut<\/td><\/tr><tr><td>E8<\/td><td>Publication candidates<\/td><td>twelve findings carried forward<\/td><td>PUBLISH \u00b7 HOLD dispositions<\/td><\/tr><tr><td>E9<\/td><td>Universe readiness<\/td><td>one candidate mission<\/td><td>admission and role spine<\/td><\/tr><tr><td>E10<\/td><td>Correction register<\/td><td>none<\/td><td>first federation-wide cycle<\/td><\/tr><\/tbody><\/table><\/div><h3 class=\"nrp-h3\">Publication dispositions<\/h3><ul class=\"nrp-chips\"><li class=\"nf-ui-chip\">Publish<\/li><li class=\"nf-ui-chip\">Hold<\/li><li class=\"nf-ui-chip\">Needs evidence<\/li><li class=\"nf-ui-chip\">Restricted<\/li><li class=\"nf-ui-chip\">Superseded<\/li><\/ul><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">boundary<\/p><p>Programme progress is not real-world risk improvement. These registers record the work of the Nexus programme; they report on no state or organisation.<\/p><\/aside><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-c6-s7\" aria-labelledby=\"nx-nrp-xt-10-c6-s7-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-c6-s7-h\"><span class=\"nrp-num\">6.7<\/span><span>Nexus Standards reading: standards and regulatory watch<\/span><\/h2><p class=\"nrp-stand\">Instruments and published guidance that shape the <a class=\"nx-link nx-term\" href=\"https:\/\/docs.therisk.global\/organization\/systems\" data-tc=\"Systems\" data-tk=\"Nexus Standards\" data-td=\"The twenty Nexus systems, NXS-CMD to NXS-LAB\">systems<\/a> in this edition, by status on the retrieval date. The edition assesses no one\u2019s compliance.<\/p><ul class=\"nrp-chips\"><li class=\"nf-ui-chip\">IN FORCE<\/li><li class=\"nf-ui-chip\">PUBLISHED<\/li><li class=\"nf-ui-chip\">DRAFT<\/li><li class=\"nf-ui-chip\">PUBLISHED \u00b7 VOLUNTARY<\/li><\/ul><div class=\"nrp-tblw\" id=\"nx-nrp-xt-10-c6-tab4\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table 6.4<\/span><span class=\"nrp-tbl-t\">Standards and regulatory watch<\/span><\/caption><thead><tr><th scope=\"col\">Instrument<\/th><th scope=\"col\">Body<\/th><th scope=\"col\">Scope<\/th><th scope=\"col\">Status<\/th><th scope=\"col\">Relevance<\/th><\/tr><\/thead><tbody><tr><td>FIPS 203, 204 and 205<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c6-n1\" id=\"nx-nrp-xt-10-c6-r1\" aria-label=\"Note 1\">1<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c6-n2\" id=\"nx-nrp-xt-10-c6-r2\" aria-label=\"Note 2\">2<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c6-n3\" id=\"nx-nrp-xt-10-c6-r3\" aria-label=\"Note 3\">3<\/a><\/sup><\/td><td>NIST<\/td><td>US, used globally<\/td><td>PUBLISHED 2024<\/td><td>post-quantum algorithms<\/td><\/tr><tr><td>NIST IR 8547 initial public draft<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c6-n44\" id=\"nx-nrp-xt-10-c6-r44\" aria-label=\"Note 44\">44<\/a><\/sup><\/td><td>NIST<\/td><td>US<\/td><td>DRAFT 2024<\/td><td>migration<\/td><\/tr><tr><td>NIST SP 800-227<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c6-n7\" id=\"nx-nrp-xt-10-c6-r7\" aria-label=\"Note 7\">7<\/a><\/sup><\/td><td>NIST<\/td><td>US<\/td><td>PUBLISHED 2025<\/td><td>key-encapsulation guidance<\/td><\/tr><tr><td>NIST SP 800-232<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c6-n8\" id=\"nx-nrp-xt-10-c6-r8\" aria-label=\"Note 8\">8<\/a><\/sup><\/td><td>NIST<\/td><td>US<\/td><td>PUBLISHED 2025<\/td><td>lightweight cryptography<\/td><\/tr><tr><td>NIST CSF 2.0<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c6-n9\" id=\"nx-nrp-xt-10-c6-r9\" aria-label=\"Note 9\">9<\/a><\/sup><\/td><td>NIST<\/td><td>global, voluntary<\/td><td>PUBLISHED \u00b7 VOLUNTARY<\/td><td>risk outcomes<\/td><\/tr><tr><td>NCSC migration timelines<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c6-n10\" id=\"nx-nrp-xt-10-c6-r10\" aria-label=\"Note 10\">10<\/a><\/sup><\/td><td>UK NCSC<\/td><td>UK<\/td><td>PUBLISHED 2025<\/td><td>timeline<\/td><\/tr><tr><td>EU coordinated roadmap<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c6-n11\" id=\"nx-nrp-xt-10-c6-r11\" aria-label=\"Note 11\">11<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c6-n31\" id=\"nx-nrp-xt-10-c6-r31\" aria-label=\"Note 31\">31<\/a><\/sup><\/td><td>European Commission and Member States<\/td><td>EU<\/td><td>PUBLISHED 2025<\/td><td>migration milestones<\/td><\/tr><tr><td>CNSA 2.0<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c6-n30\" id=\"nx-nrp-xt-10-c6-r30\" aria-label=\"Note 30\">30<\/a><\/sup><\/td><td>NSA<\/td><td>US national security systems<\/td><td>PUBLISHED<\/td><td>migration timetable<\/td><\/tr><tr><td>Cyber Resilience Act<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c6-n27\" id=\"nx-nrp-xt-10-c6-r27\" aria-label=\"Note 27\">27<\/a><\/sup><\/td><td>European Union<\/td><td>EU<\/td><td>IN FORCE \u00b7 STAGED<\/td><td>product duties<\/td><\/tr><tr><td>SEC cybersecurity disclosure rules<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c6-n21\" id=\"nx-nrp-xt-10-c6-r21\" aria-label=\"Note 21\">21<\/a><\/sup><\/td><td>US SEC<\/td><td>US listed companies<\/td><td>IN FORCE<\/td><td>incident disclosure<\/td><\/tr><\/tbody><\/table><\/div><div class=\"nrp-split\"><div><h3 class=\"nrp-h3\">Changed since 2024<\/h3><ul class=\"nrp-list\"><li>Post-close, context only: NIST published the final IR 8547 transition report on 27 October 2026<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c6-n5\" id=\"nx-nrp-xt-10-c6-r5\" aria-label=\"Note 5\">5<\/a><\/sup><\/li><li>NIST published SP 800-227 on key encapsulation in September 2025 and SP 800-232 on lightweight cryptography in August 2025<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c6-n7\" aria-label=\"Note 7\">7<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c6-n8\" aria-label=\"Note 8\">8<\/a><\/sup><\/li><li>The UK NCSC published its migration timelines in March 2025<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c6-n10\" aria-label=\"Note 10\">10<\/a><\/sup><\/li><\/ul><\/div><div><h3 class=\"nrp-h3\">To watch in 2027<\/h3><ul class=\"nrp-list\"><li>The HQC draft standard expected about a year after March 2025<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c6-n6\" id=\"nx-nrp-xt-10-c6-r6\" aria-label=\"Note 6\">6<\/a><\/sup><\/li><li>National roadmaps due under the EU coordinated roadmap<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c6-n11\" aria-label=\"Note 11\">11<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c6-n31\" aria-label=\"Note 31\">31<\/a><\/sup><\/li><li>Staged application dates of the EU Cyber Resilience Act<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c6-n27\" aria-label=\"Note 27\">27<\/a><\/sup><\/li><\/ul><\/div><\/div><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">evidence<\/p><p>Status is read from the issuing body on the retrieval date. Instruments open for signature or awaiting ratification are labelled as such; a change in status opens a review task for every finding that relies on the instrument.<\/p><\/aside><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-c6-s8\" aria-labelledby=\"nx-nrp-xt-10-c6-s8-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-c6-s8-h\"><span class=\"nrp-num\">6.8<\/span><span>Risk Academy reading: literature and evidence review, science and assessments<\/span><\/h2><p class=\"nrp-stand\">The review behind this edition covers cybersecurity and cryptography assessments, peer-reviewed science and the institutional reports that bind its findings. Systematic reviews for each agenda item begin in 2027.<\/p><h3 class=\"nrp-h3\">Review protocol<\/h3><dl class=\"nrp-dl\"><dt>Question<\/dt><dd>What does the published evidence establish about cybersecurity and advanced cryptography as infrastructure and its couplings?<\/dd><dt>Sources searched<\/dt><dd>preprints and journals; standards bodies and agencies; roadmaps and regulation; threat and cost reports<\/dd><dt>Window<\/dt><dd>releases available at evidence close, 30 September 2026<\/dd><dt>Selection<\/dt><dd>sources that bind or contextualise a finding in this edition<\/dd><dt>Next step<\/dt><dd>systematic reviews for agenda items 01 to 05 in 2027<\/dd><\/dl><div class=\"nrp-tblw\" id=\"nx-nrp-xt-10-c6-tab5\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table 6.5<\/span><span class=\"nrp-tbl-t\">Peer-reviewed science and preprints<\/span><\/caption><thead><tr><th scope=\"col\">Reference<\/th><th scope=\"col\">Type<\/th><th scope=\"col\">Year<\/th><th scope=\"col\">Role<\/th><th scope=\"col\">Used for<\/th><\/tr><\/thead><tbody><tr><td>Gidney<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c6-n22\" id=\"nx-nrp-xt-10-c6-r22\" aria-label=\"Note 22\">22<\/a><\/sup><\/td><td>preprint<\/td><td>2025<\/td><td>supports<\/td><td>resource estimate<\/td><\/tr><tr><td>Shor<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c6-n37\" id=\"nx-nrp-xt-10-c6-r37\" aria-label=\"Note 37\">37<\/a><\/sup><\/td><td>journal article<\/td><td>1997<\/td><td>framework<\/td><td>factoring algorithm<\/td><\/tr><tr><td>Mosca<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c6-n38\" id=\"nx-nrp-xt-10-c6-r38\" aria-label=\"Note 38\">38<\/a><\/sup><\/td><td>journal article<\/td><td>2018<\/td><td>framework<\/td><td>migration timing<\/td><\/tr><\/tbody><\/table><\/div><div class=\"nrp-tblw\" id=\"nx-nrp-xt-10-c6-tab6\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table 6.6<\/span><span class=\"nrp-tbl-t\">Institutional flagships<\/span><\/caption><thead><tr><th scope=\"col\">Reference<\/th><th scope=\"col\">Issuer<\/th><th scope=\"col\">Year<\/th><th scope=\"col\">Role<\/th><th scope=\"col\">Used for<\/th><\/tr><\/thead><tbody><tr><td>Signal triple ratchet post<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c6-n25\" id=\"nx-nrp-xt-10-c6-r25\" aria-label=\"Note 25\">25<\/a><\/sup><\/td><td>protocol post<\/td><td>2025<\/td><td>context<\/td><td>messaging design<\/td><\/tr><tr><td>Apple PQ3 post<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c6-n26\" id=\"nx-nrp-xt-10-c6-r26\" aria-label=\"Note 26\">26<\/a><\/sup><\/td><td>protocol post<\/td><td>2024<\/td><td>context<\/td><td>messaging design<\/td><\/tr><tr><td>OpenSSH page<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c6-n24\" id=\"nx-nrp-xt-10-c6-r24\" aria-label=\"Note 24\">24<\/a><\/sup><\/td><td>project documentation<\/td><td>2025<\/td><td>supports<\/td><td>protocol default<\/td><\/tr><tr><td>RFC 8446<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c6-n43\" id=\"nx-nrp-xt-10-c6-r43\" aria-label=\"Note 43\">43<\/a><\/sup><\/td><td>IETF standard<\/td><td>2018<\/td><td>framework<\/td><td>TLS 1.3<\/td><\/tr><\/tbody><\/table><\/div><div class=\"nrp-tblw\" id=\"nx-nrp-xt-10-c6-tab7\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table 6.7<\/span><span class=\"nrp-tbl-t\">Standards, policy and strategies<\/span><\/caption><thead><tr><th scope=\"col\">Reference<\/th><th scope=\"col\">Issuer<\/th><th scope=\"col\">Year<\/th><th scope=\"col\">Role<\/th><th scope=\"col\">Used for<\/th><\/tr><\/thead><tbody><tr><td>NIST FIPS 203, 204 and 205<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c6-n1\" aria-label=\"Note 1\">1<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c6-n2\" aria-label=\"Note 2\">2<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c6-n3\" aria-label=\"Note 3\">3<\/a><\/sup><\/td><td>NIST<\/td><td>2024<\/td><td>supports<\/td><td>standards<\/td><\/tr><tr><td>NIST IR 8547 initial draft<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c6-n44\" aria-label=\"Note 44\">44<\/a><\/sup><\/td><td>NIST<\/td><td>2024<\/td><td>supports<\/td><td>transition plan<\/td><\/tr><tr><td>NCSC timelines<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c6-n10\" aria-label=\"Note 10\">10<\/a><\/sup><\/td><td>UK NCSC<\/td><td>2025<\/td><td>supports<\/td><td>timeline<\/td><\/tr><tr><td>EU roadmap page<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c6-n11\" aria-label=\"Note 11\">11<\/a><\/sup><\/td><td>European Commission<\/td><td>2025<\/td><td>supports<\/td><td>roadmap date<\/td><\/tr><tr><td>CSF 2.0<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c6-n9\" aria-label=\"Note 9\">9<\/a><\/sup><\/td><td>NIST<\/td><td>2024<\/td><td>context<\/td><td>risk framework<\/td><\/tr><tr><td>NIST IR 8545<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c6-n32\" id=\"nx-nrp-xt-10-c6-r32\" aria-label=\"Note 32\">32<\/a><\/sup><\/td><td>NIST<\/td><td>2025<\/td><td>context<\/td><td>fourth-round status<\/td><\/tr><tr><td>NIST SP 1800-38<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c6-n39\" id=\"nx-nrp-xt-10-c6-r39\" aria-label=\"Note 39\">39<\/a><\/sup><\/td><td>NIST NCCoE<\/td><td>2023<\/td><td>context<\/td><td>migration practice guide<\/td><\/tr><tr><td>OMB M-23-02<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c6-n41\" id=\"nx-nrp-xt-10-c6-r41\" aria-label=\"Note 41\">41<\/a><\/sup><\/td><td>US OMB<\/td><td>2022<\/td><td>context<\/td><td>federal inventory memorandum<\/td><\/tr><\/tbody><\/table><\/div><div class=\"nrp-tblw\" id=\"nx-nrp-xt-10-c6-tab8\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table 6.8<\/span><span class=\"nrp-tbl-t\">Threat, cost and field overviews<\/span><\/caption><thead><tr><th scope=\"col\">Reference<\/th><th scope=\"col\">Issuer<\/th><th scope=\"col\">Year<\/th><th scope=\"col\">Role<\/th><th scope=\"col\">Used for<\/th><\/tr><\/thead><tbody><tr><td>FBI IC3 report<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c6-n15\" id=\"nx-nrp-xt-10-c6-r15\" aria-label=\"Note 15\">15<\/a><\/sup><\/td><td>FBI<\/td><td>2025<\/td><td>supports<\/td><td>complaints and losses<\/td><\/tr><tr><td>ENISA Threat Landscape 2025<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c6-n16\" id=\"nx-nrp-xt-10-c6-r16\" aria-label=\"Note 16\">16<\/a><\/sup><\/td><td>ENISA<\/td><td>2025<\/td><td>supports<\/td><td>incident count<\/td><\/tr><tr><td>Cost of a <a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/nrs\/#nrs-h51\" data-tc=\"NHS-1 cyber.intrusion.data-breach\" data-tk=\"Information and cyber-physical systems \u00b7 Malicious compromise\" data-td=\"Unauthorised access to, or release of, personal, commercial or operational data.\" data-ts=\"NRS-H51\" data-tr=\"draft\" data-tx=\"https:\/\/risksindex.com\/hazards\/cyber\/\" data-txl=\"Information and cyber-physical systems\">Data Breach<\/a> 2026<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c6-n18\" aria-label=\"Note 18\">18<\/a><\/sup><\/td><td>IBM<\/td><td>2026<\/td><td>context<\/td><td>vendor cost<\/td><\/tr><tr><td>Crypto crime ransomware analysis<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c6-n19\" aria-label=\"Note 19\">19<\/a><\/sup><\/td><td>Chainalysis<\/td><td>2026<\/td><td>context<\/td><td>vendor payments<\/td><\/tr><tr><td>Workforce study<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c6-n20\" id=\"nx-nrp-xt-10-c6-r20\" aria-label=\"Note 20\">20<\/a><\/sup><\/td><td>ISC2<\/td><td>2025<\/td><td>supports<\/td><td>skills needs<\/td><\/tr><tr><td>Data Breach Investigations page<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c6-n17\" id=\"nx-nrp-xt-10-c6-r17\" aria-label=\"Note 17\">17<\/a><\/sup><\/td><td>Verizon<\/td><td>2026<\/td><td>context<\/td><td>vendor sample<\/td><\/tr><tr><td>Digital Defense Report<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c6-n36\" id=\"nx-nrp-xt-10-c6-r36\" aria-label=\"Note 36\">36<\/a><\/sup><\/td><td>Microsoft<\/td><td>2025<\/td><td>context<\/td><td>vendor report<\/td><\/tr><\/tbody><\/table><\/div><div class=\"nrp-split\"><div><h3 class=\"nrp-h3\">Where the evidence agrees<\/h3><ul class=\"nrp-list\"><li>Post-quantum standards are finalised and migration should begin<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c6-n1\" aria-label=\"Note 1\">1<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c6-n10\" aria-label=\"Note 10\">10<\/a><\/sup><\/li><li>Exploited known vulnerabilities recur across sources<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c6-n14\" id=\"nx-nrp-xt-10-c6-r14\" aria-label=\"Note 14\">14<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c6-n17\" aria-label=\"Note 17\">17<\/a><\/sup><\/li><li>Signatures are harder to migrate than key agreement<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c6-n23\" id=\"nx-nrp-xt-10-c6-r23\" aria-label=\"Note 23\">23<\/a><\/sup><\/li><\/ul><\/div><div><h3 class=\"nrp-h3\">Where it is unsettled<\/h3><ul class=\"nrp-list\"><li>When a cryptographically relevant machine could exist<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c6-n22\" aria-label=\"Note 22\">22<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c6-n38\" aria-label=\"Note 38\">38<\/a><\/sup><\/li><li>How fast sectors are migrating, since no common series exists<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c6-n12\" id=\"nx-nrp-xt-10-c6-r12\" aria-label=\"Note 12\">12<\/a><\/sup><\/li><li>How vendor cost and payment estimates compare with primary data<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c6-n18\" aria-label=\"Note 18\">18<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c6-n19\" aria-label=\"Note 19\">19<\/a><\/sup><\/li><\/ul><\/div><\/div><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">PREPRINTS<\/p><p>Three sources<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c6-n24\" aria-label=\"Note 24\">24<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c6-n25\" aria-label=\"Note 25\">25<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c6-n26\" aria-label=\"Note 26\">26<\/a><\/sup> are preprints and are labelled as not peer-reviewed. They contextualise findings; none binds a finding on its own.<\/p><\/aside><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-c6-notes\" aria-labelledby=\"nx-nrp-xt-10-c6-notes-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-c6-notes-h\"><span>Notes<\/span><\/h2><p class=\"nrp-note\">Numbers are the edition&#8217;s reference numbers, so a note reads the same in every chapter. The full list, with every source and its licence, is in Annex C. <a href=\"https:\/\/therisk.global\/nexus-reports\/editions\/xt-10\/references\/\">Annex C, references<\/a><\/p><ol class=\"nrp-notes\"><li id=\"nx-nrp-xt-10-c6-n18\"><span class=\"nrp-notes-n\">18<\/span><span>IBM and Ponemon Institute (eds.), Cost of a <a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/nrs\/#nrs-h51\" data-tc=\"NHS-1 cyber.intrusion.data-breach\" data-tk=\"Information and cyber-physical systems \u00b7 Malicious compromise\" data-td=\"Unauthorised access to, or release of, personal, commercial or operational data.\" data-ts=\"NRS-H51\" data-tr=\"draft\" data-tx=\"https:\/\/risksindex.com\/hazards\/cyber\/\" data-txl=\"Information and cyber-physical systems\">Data Breach<\/a> Report 2026 (landing page; global average USD 4.99 million, up 12%; AI-driven attacks up 56%). IBM, Armonk. Vendor report, weak evidence; the full report was not opened. Observation year 2026. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c6-r18\" aria-label=\"Back to the first call of note 18\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c6-n19\"><span class=\"nrp-notes-n\">19<\/span><span>Chainalysis (ed.), ransomware analysis (blog page; more than USD 820 million on-chain in 2025, down 8% from an updated USD 892 million for 2024; original 2024 estimate USD 813 million). Chainalysis, New York. Vendor estimate, weak evidence. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c6-r19\" aria-label=\"Back to the first call of note 19\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c6-n1\"><span class=\"nrp-notes-n\">1<\/span><span>NIST (ed.), Module-Lattice-Based Key-Encapsulation Mechanism Standard, FIPS 203 (publication page; final 13 August 2024; ML-KEM-512, ML-KEM-768 and ML-KEM-1024; initial draft 24 August 2023). National Institute of Standards and Technology, Gaithersburg. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c6-r1\" aria-label=\"Back to the first call of note 1\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c6-n2\"><span class=\"nrp-notes-n\">2<\/span><span>NIST (ed.), Module-Lattice-Based Digital Signature Standard, FIPS 204 (publication page; final 13 August 2024; ML-DSA). National Institute of Standards and Technology, Gaithersburg. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c6-r2\" aria-label=\"Back to the first call of note 2\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c6-n3\"><span class=\"nrp-notes-n\">3<\/span><span>NIST (ed.), Stateless Hash-Based Digital Signature Standard, FIPS 205 (publication page; final 13 August 2024; SLH-DSA, based on SPHINCS+). National Institute of Standards and Technology, Gaithersburg. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c6-r3\" aria-label=\"Back to the first call of note 3\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c6-n44\"><span class=\"nrp-notes-n\">44<\/span><span>NIST (ed.), Transition to Post-Quantum Cryptography Standards, NIST IR 8547, initial public draft (draft PDF, November 2024; Tables 2 and 4: for quantum-vulnerable signature and key-establishment schemes at 112 bits of security strength, deprecated after 2030 and disallowed after 2035, and at 128 bits or more, disallowed after 2035; the cover sheet added on withdrawal on 27 October 2026 is not used). National Institute of Standards and Technology, Gaithersburg. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c6-r44\" aria-label=\"Back to the first call of note 44\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c6-n7\"><span class=\"nrp-notes-n\">7<\/span><span>NIST (ed.), Recommendations for Key-Encapsulation Mechanisms, SP 800-227 (publication page; final 18 September 2025). National Institute of Standards and Technology, Gaithersburg. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c6-r7\" aria-label=\"Back to the first call of note 7\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c6-n8\"><span class=\"nrp-notes-n\">8<\/span><span>NIST (ed.), Ascon-Based Lightweight Cryptography Standards for Constrained Devices, SP 800-232 (publication page; final 13 August 2025; Ascon-AEAD128, Ascon-Hash256, Ascon-XOF128, Ascon-CXOF128). National Institute of Standards and Technology, Gaithersburg. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c6-r8\" aria-label=\"Back to the first call of note 8\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c6-n9\"><span class=\"nrp-notes-n\">9<\/span><span>NIST (ed.), The NIST Cybersecurity Framework (CSF) 2.0, NIST CSWP 29 (publication page; 26 February 2024). National Institute of Standards and Technology, Gaithersburg. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c6-r9\" aria-label=\"Back to the first call of note 9\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c6-n10\"><span class=\"nrp-notes-n\">10<\/span><span>UK National Cyber Security Centre (ed.), Timelines for migration to post-quantum cryptography (guidance page; version 1.0, 20 March 2025; milestones 2028, 2031 and 2035). NCSC, London. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c6-r10\" aria-label=\"Back to the first call of note 10\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c6-n11\"><span class=\"nrp-notes-n\">11<\/span><span>European Commission (ed.), Coordinated Implementation Roadmap for the transition to Post-Quantum Cryptography (library page; published 23 June 2025; the milestones were not on the page). Directorate-General for Communications Networks, Content and Technology, Brussels. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c6-r11\" aria-label=\"Back to the first call of note 11\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c6-n31\"><span class=\"nrp-notes-n\">31<\/span><span>UNVERIFIED, not opened: NIS Cooperation Group (ed.), Coordinated Implementation Roadmap for the Transition to Post-Quantum Cryptography (national roadmaps by the end of 2026, high-risk use cases by 2030, as many <a class=\"nx-link nx-term\" href=\"https:\/\/docs.therisk.global\/organization\/systems\" data-tc=\"Systems\" data-tk=\"Nexus Standards\" data-td=\"The twenty Nexus systems, NXS-CMD to NXS-LAB\">systems<\/a> as feasible by 2035), taken from secondary summaries in an earlier edition of this series; the milestones were not on the page read. European Commission, Brussels. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c6-r31\" aria-label=\"Back to the first call of note 31\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c6-n30\"><span class=\"nrp-notes-n\">30<\/span><span>UNVERIFIED, not opened: NSA (ed.), Commercial National Security Algorithm Suite 2.0 advisory and FAQ, cited from memory; the NSA pages returned an access error and no date is used. National Security Agency, Fort Meade. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c6-r30\" aria-label=\"Back to the first call of note 30\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c6-n27\"><span class=\"nrp-notes-n\">27<\/span><span>UNVERIFIED, not opened: European Union, Regulation (EU) 2024\/2847 on horizontal cybersecurity requirements for products with digital elements (Cyber Resilience Act; in force 10 December 2024; reporting duties from 11 September 2026; main obligations from 11 December 2027), dates taken from law-firm search summaries; the Official Journal page returned no text. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c6-r27\" aria-label=\"Back to the first call of note 27\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c6-n21\"><span class=\"nrp-notes-n\">21<\/span><span>US Securities and Exchange Commission (ed.), SEC adopts rules on cybersecurity risk management, strategy, governance and incident disclosure by public companies (press release 2023-139; adopted 26 July 2023; Form 8-K Item 1.05 within four business days of a materiality determination). SEC, Washington. Observation year 2023. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c6-r21\" aria-label=\"Back to the first call of note 21\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c6-n5\"><span class=\"nrp-notes-n\">5<\/span><span>POST-CLOSE, context only: NIST (ed.), Transition to Post-Quantum Cryptography Standards, NIST IR 8547, final (publication page; document history 27 October 2026, after the 30 September evidence close; abstract refers to Executive Order 14412 and OMB Memorandum M-26-15; no dates on the page; PDF not opened). National Institute of Standards and Technology, Gaithersburg. Observation year 2026. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c6-r5\" aria-label=\"Back to the first call of note 5\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c6-n6\"><span class=\"nrp-notes-n\">6<\/span><span>NIST (ed.), NIST selects HQC as fifth algorithm for post-quantum encryption (news item, 11 March 2025; backup to ML-KEM; draft standard expected in about a year; final standard expected in 2027). National Institute of Standards and Technology, Gaithersburg. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c6-r6\" aria-label=\"Back to the first call of note 6\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c6-n22\"><span class=\"nrp-notes-n\">22<\/span><span>Gidney, C., How to factor 2048 bit RSA integers with less than a million noisy qubits, arXiv:2505.15917, submitted 21 May 2025 (abstract page; under one million noisy qubits; under a week; 0.1% gate error; 1 microsecond cycle; 10 microsecond reaction time; the author\u2019s 2019 estimate was about 20 million qubits in 8 hours). arXiv, Ithaca. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c6-r22\" aria-label=\"Back to the first call of note 22\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c6-n37\"><span class=\"nrp-notes-n\">37<\/span><span>UNVERIFIED, not opened: Shor, P.W., Polynomial-time algorithms for prime factorization and discrete logarithms on a quantum computer, SIAM Journal on Computing 26(5), 1484 to 1509, 1997, cited from memory. Observation year 1997. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c6-r37\" aria-label=\"Back to the first call of note 37\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c6-n38\"><span class=\"nrp-notes-n\">38<\/span><span>UNVERIFIED, not opened: Mosca, M., Cybersecurity in an era with quantum computers: will we be ready?, IEEE Security and Privacy 16(5), 38 to 41, 2018, cited from memory. Observation year 2018. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c6-r38\" aria-label=\"Back to the first call of note 38\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c6-n25\"><span class=\"nrp-notes-n\">25<\/span><span>Signal (ed.), Signal Protocol and Post-Quantum Ratchets, SPQR triple ratchet (blog post, 2 October 2025; ML-KEM 768; gradual rollout; formal verification). Signal Messenger, Mountain View. Vendor announcement, weak evidence. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c6-r25\" aria-label=\"Back to the first call of note 25\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c6-n26\"><span class=\"nrp-notes-n\">26<\/span><span>Apple (ed.), iMessage with PQ3: The new state of the art in quantum-secure messaging at scale (security blog post, 21 February 2024; Kyber-1024 and Kyber-768 hybrid with P-256; level 3 on its own scale). Apple, Cupertino. Vendor announcement, weak evidence. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c6-r26\" aria-label=\"Back to the first call of note 26\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c6-n24\"><span class=\"nrp-notes-n\">24<\/span><span>OpenSSH project (ed.), Post-quantum cryptography in OpenSSH (documentation page; sntrup761x25519-sha512 from 9.0; mlkem768x25519-sha256 added in 9.9 and default in 10.0; warning from 10.1). OpenBSD Project. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c6-r24\" aria-label=\"Back to the first call of note 24\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c6-n43\"><span class=\"nrp-notes-n\">43<\/span><span>UNVERIFIED, not opened: Rescorla, E., The Transport Layer Security (TLS) Protocol Version 1.3, RFC 8446, Internet Engineering Task Force, August 2018, cited from memory. Observation year 2018. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c6-r43\" aria-label=\"Back to the first call of note 43\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c6-n32\"><span class=\"nrp-notes-n\">32<\/span><span>UNVERIFIED, not opened: NIST (ed.), Status Report on the Fourth Round of the NIST Post-Quantum Cryptography Standardization Process, NIST IR 8545, March 2025, cited from memory. National Institute of Standards and Technology, Gaithersburg. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c6-r32\" aria-label=\"Back to the first call of note 32\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c6-n39\"><span class=\"nrp-notes-n\">39<\/span><span>UNVERIFIED, not opened: NIST National Cybersecurity Center of Excellence (ed.), Migration to Post-Quantum Cryptography, NIST SP 1800-38, cited from memory. National Institute of Standards and Technology, Gaithersburg. Observation year 2023. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c6-r39\" aria-label=\"Back to the first call of note 39\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c6-n41\"><span class=\"nrp-notes-n\">41<\/span><span>UNVERIFIED, not opened: US Office of Management and Budget (ed.), Memorandum M-23-02, Migrating to Post-Quantum Cryptography, November 2022, cited from memory. OMB, Washington. Observation year 2022. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c6-r41\" aria-label=\"Back to the first call of note 41\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c6-n15\"><span class=\"nrp-notes-n\">15<\/span><span>Federal Bureau of Investigation, Internet Crime Complaint Center (ed.), 2024 Internet Crime Report (859,532 complaints; USD 16.6 billion losses, up 33%; 256,256 complaints with a loss; 3,156 ransomware complaints; 263,455 cyber-threat complaints and USD 1.571 billion; 4,878 critical-infrastructure complaints). FBI, Washington. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c6-r15\" aria-label=\"Back to the first call of note 15\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c6-n16\"><span class=\"nrp-notes-n\">16<\/span><span>European Union Agency for Cybersecurity (ed.), ENISA Threat Landscape 2025 (publication page; period 1 July 2024 to 30 June 2025; 4,875 incidents analysed; version 1.3 of 22 September 2026 corrected figures; PDF not opened). ENISA, Athens. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c6-r16\" aria-label=\"Back to the first call of note 16\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c6-n20\"><span class=\"nrp-notes-n\">20<\/span><span>ISC2 (ed.), 2025 Cybersecurity Workforce Study (page; published 4 December 2025; 16,029 respondents; 59% critical or significant skills needs, up from 44%; no workforce gap estimate). ISC2, Alexandria. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c6-r20\" aria-label=\"Back to the first call of note 20\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c6-n17\"><span class=\"nrp-notes-n\">17<\/span><span>Verizon (ed.), 2026 Data Breach Investigations Report (landing page; period 1 November 2024 to 31 October 2025; 48% of breaches involve ransomware; 31% begin with exploited vulnerabilities). Verizon Business, New York. Vendor report, weak evidence; the full report was not opened. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c6-r17\" aria-label=\"Back to the first call of note 17\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c6-n36\"><span class=\"nrp-notes-n\">36<\/span><span>UNVERIFIED, not opened: Microsoft (ed.), Microsoft Digital Defense Report 2025, cited from memory; the page returned an error. Microsoft, Redmond. Vendor report, weak evidence. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c6-r36\" aria-label=\"Back to the first call of note 36\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c6-n14\"><span class=\"nrp-notes-n\">14<\/span><span>CISA and 22 partner agencies (eds.), Countering Chinese State-Sponsored Actors Compromise of Networks Worldwide to Feed Global Espionage System, advisory AA25-239A (published 27 August 2025; revised 3 September 2025; 23 agencies from 13 countries; known vulnerabilities; no zero-day exploitation observed). Cybersecurity and Infrastructure Security Agency, Arlington. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c6-r14\" aria-label=\"Back to the first call of note 14\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c6-n23\"><span class=\"nrp-notes-n\">23<\/span><span>Cloudflare (ed.), The state of the post-quantum Internet in 2025 (blog analysis; late October 2025 majority of human traffic with post-quantum key agreement; 3.7% of origins; 39% of top 100,000 domains in September 2025; ML-DSA-44 about 15 kB; first post-quantum certificates expected in 2026). Cloudflare, San Francisco. Vendor analysis of its own network, weak evidence. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c6-r23\" aria-label=\"Back to the first call of note 23\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c6-n12\"><span class=\"nrp-notes-n\">12<\/span><span>CISA (ed.), Post-Quantum Cryptography Initiative (page; key dates, federal inventory duty under 6 U.S.C. 1526, product categories list, references to Executive Orders 14306, 14412 and 14413 and OMB Memorandum M-26-15). Cybersecurity and Infrastructure Security Agency, Arlington. Observation year 2026. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c6-r12\" aria-label=\"Back to the first call of note 12\">back<\/a><\/span><\/li><\/ol><\/section><\/div><div class=\"nrp-part\" id=\"nx-nrp-xt-10-part-agenda\"><header class=\"nrp-chap-head\" id=\"nx-nrp-xt-10-c7-top\"><ul class=\"nrp-eyerow\"><li class=\"nf-ui-eyebrow\"><a href=\"https:\/\/therisk.global\/nexus-reports\/editions\/xt-10\/\">Cybersecurity and Advanced Cryptography 2026<\/a><\/li><li class=\"nf-ui-eyebrow\">Chapter 7<\/li><\/ul><span class=\"nrp-rule\" aria-hidden=\"true\"><\/span><h2 class=\"pp-hero-title\">The 2027 agenda<\/h2><p class=\"nrp-lede\">Eight bounded questions open the 2027 cybersecurity and cryptography agenda. Each comes from a baseline finding, names the initiative that will carry it and the first output due in the 2027 cybersecurity and cryptography edition.<\/p><p class=\"nrp-chap-meta\"><span>5 min read<\/span><span>0 figures<\/span><span>6 tables<\/span><span>3 notes<\/span><span>NR-XTECH-CRYPTO-GLOBAL-2026-BASELINE<\/span><\/p><\/header><section class=\"nrp-block\" id=\"nx-nrp-xt-10-c7-s1\" aria-labelledby=\"nx-nrp-xt-10-c7-s1-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-c7-s1-h\"><span class=\"nrp-num\">7.1<\/span><span>Questions for the operational series<\/span><\/h2><ol class=\"nrp-rows\"><li><span class=\"nrp-rows-i\">C-01<\/span><p class=\"nrp-rows-t\">How far has each sector inventoried its cryptography, and how fast is migration to post-quantum methods in each sector?<\/p><p class=\"nrp-rows-m\">INI-XT10-INV-01 \u00b7 inventory and migration; first output: sector migration register.<\/p><\/li><li><span class=\"nrp-rows-i\">C-02<\/span><p class=\"nrp-rows-t\">How many certificates and signatures in deployed <a class=\"nx-link nx-term\" href=\"https:\/\/docs.therisk.global\/organization\/systems\" data-tc=\"Systems\" data-tk=\"Nexus Standards\" data-td=\"The twenty Nexus systems, NXS-CMD to NXS-LAB\">systems<\/a> can move to post-quantum methods, and at what size and cost?<\/p><p class=\"nrp-rows-m\">INI-XT10-SIG-02 \u00b7 signatures and certificates; first output: deployment table.<\/p><\/li><li><span class=\"nrp-rows-i\">C-03<\/span><p class=\"nrp-rows-t\">What share of embedded and long-life devices can receive cryptographic updates?<\/p><p class=\"nrp-rows-m\">INI-XT10-EDG-03 \u00b7 long-life devices; first output: device update map.<\/p><\/li><li><span class=\"nrp-rows-i\">C-04<\/span><p class=\"nrp-rows-t\">How long do exploited vulnerabilities stay open, and how does that compare across sources?<\/p><p class=\"nrp-rows-m\">INI-XT10-KEV-04 \u00b7 exploitation and patching; first output: time-to-fix series.<\/p><\/li><li><span class=\"nrp-rows-i\">C-05<\/span><p class=\"nrp-rows-t\">How can migration progress be measured on a common basis?<\/p><p class=\"nrp-rows-m\">INI-XT10-MSR-05 \u00b7 migration measurement; first output: indicator table.<\/p><\/li><li><span class=\"nrp-rows-i\">C-06<\/span><p class=\"nrp-rows-t\">Which national roadmaps set migration dates, and how do they differ?<\/p><p class=\"nrp-rows-m\">To be admitted in 2027; first output: roadmap overlay.<\/p><\/li><li><span class=\"nrp-rows-i\">C-07<\/span><p class=\"nrp-rows-t\">What workforce exists for cryptographic migration and incident response?<\/p><p class=\"nrp-rows-m\">To be admitted in 2027; first output: scoping note.<\/p><\/li><li><span class=\"nrp-rows-i\">C-08<\/span><p class=\"nrp-rows-t\">Which readiness capabilities have been tested in real migrations, and which are only planned?<\/p><p class=\"nrp-rows-m\">Readiness capability register; first output: rung evidence for 15 functions.<\/p><\/li><\/ol><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-c7-s2\" aria-labelledby=\"nx-nrp-xt-10-c7-s2-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-c7-s2-h\"><span class=\"nrp-num\">7.2<\/span><span>Portfolio proposed for the Q1 2027 alignment<\/span><\/h2><p class=\"nrp-stand\">Five initiatives and one Universe mission candidate are proposed for the 2027 cybersecurity and cryptography portfolio. They are programme objects: no partner, funder or member is attached to them in this edition.<\/p><div class=\"nrp-tblw\" id=\"nx-nrp-xt-10-c7-tab1\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table 7.1<\/span><span class=\"nrp-tbl-t\">Objects proposed for the first operational quarter<\/span><\/caption><thead><tr><th scope=\"col\">ID<\/th><th scope=\"col\">Object<\/th><th scope=\"col\">Kind<\/th><th scope=\"col\">Question<\/th><th scope=\"col\">State<\/th><\/tr><\/thead><tbody><tr><td><span class=\"nrp-mono\">INI-XT10-INV-01<\/span><\/td><td>Inventory and migration<\/td><td>Initiative<\/td><td>C-01<\/td><td>PROPOSED<\/td><\/tr><tr><td><span class=\"nrp-mono\">INI-XT10-SIG-02<\/span><\/td><td>Signatures and certificates<\/td><td>Initiative<\/td><td>C-02<\/td><td>PROPOSED<\/td><\/tr><tr><td><span class=\"nrp-mono\">INI-XT10-EDG-03<\/span><\/td><td>Long-life devices<\/td><td>Initiative<\/td><td>C-03<\/td><td>PROPOSED<\/td><\/tr><tr><td><span class=\"nrp-mono\">INI-XT10-KEV-04<\/span><\/td><td>Exploitation and patching<\/td><td>Initiative<\/td><td>C-04<\/td><td>PROPOSED<\/td><\/tr><tr><td><span class=\"nrp-mono\">INI-XT10-MSR-05<\/span><\/td><td>Migration measurement<\/td><td>Initiative<\/td><td>C-05<\/td><td>PROPOSED<\/td><\/tr><tr><td><span class=\"nrp-mono\">MSN-XT10-2027-01<\/span><\/td><td>Signature lag Universe mission<\/td><td>Mission<\/td><td>C-02<\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"caution\" aria-hidden=\"true\"><\/span>Candidate<\/span><\/td><\/tr><\/tbody><\/table><\/div><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-c7-s3\" aria-labelledby=\"nx-nrp-xt-10-c7-s3-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-c7-s3-h\"><span class=\"nrp-num\">7.3<\/span><span>The pathway<\/span><\/h2><p class=\"nrp-stand\">The cybersecurity and cryptography edition reads national readiness chapters, the coupled sector reports on cyber and digital <a class=\"nx-link nx-term\" href=\"https:\/\/docs.therisk.global\/organization\/systems\" data-tc=\"Systems\" data-tk=\"Nexus Standards\" data-td=\"The twenty Nexus systems, NXS-CMD to NXS-LAB\">systems<\/a>, and the global edition through one governed evidence graph. At baseline the federation is designed; the global energy and lifeline editions are drafted. This page states what exists today and what comes next.<\/p><ol class=\"nrp-rows\"><li><span class=\"nrp-rows-i\">01<\/span><p class=\"nrp-rows-t\">National readiness chapters<\/p><p class=\"nrp-rows-x\">cyber and cryptographic readiness in each national edition<\/p><p class=\"nrp-rows-m\">IN PREPARATION \u00b7 national baselines<\/p><\/li><li><span class=\"nrp-rows-i\">02<\/span><p class=\"nrp-rows-t\">Sector couplings<\/p><p class=\"nrp-rows-x\">GS-13 cyber and digital \u00b7 XT-02 quantum \u00b7 SR-10 systemic cyber risk<\/p><p class=\"nrp-rows-m\">GS-13 DRAFTED \u00b7 sector baselines<\/p><\/li><li><span class=\"nrp-rows-i\">03<\/span><p class=\"nrp-rows-t\">Technology system model<\/p><p class=\"nrp-rows-x\">cryptography, deployment, threat, workforce, governance<\/p><p class=\"nrp-rows-m\">v0 SPECIFIED \u00b7 v1 with federation evidence<\/p><\/li><li><span class=\"nrp-rows-i\">04<\/span><p class=\"nrp-rows-t\">Strategic links<\/p><p class=\"nrp-rows-x\">SR-02 lifeline systems \u00b7 SR-13 strategic technology<\/p><p class=\"nrp-rows-m\">PLANNED \u00b7 strategic baselines<\/p><\/li><li><span class=\"nrp-rows-i\">05<\/span><p class=\"nrp-rows-t\">Universe<\/p><p class=\"nrp-rows-x\">annual proving environment<\/p><p class=\"nrp-rows-m\">CANDIDATE MISSION \u00b7 mandate in 2027<\/p><\/li><li><span class=\"nrp-rows-i\">06<\/span><p class=\"nrp-rows-t\">XT-10 report<\/p><p class=\"nrp-rows-x\">this series<\/p><p class=\"nrp-rows-m\">BASELINE DRAFT \u00b7 2027 annual edition<\/p><\/li><li><span class=\"nrp-rows-i\">07<\/span><p class=\"nrp-rows-t\">Evidence and correction<\/p><p class=\"nrp-rows-x\">one graph, many projections<\/p><p class=\"nrp-rows-m\">OPEN \u00b7 first correction cycle in 2027<\/p><\/li><\/ol><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-c7-s4\" aria-labelledby=\"nx-nrp-xt-10-c7-s4-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-c7-s4-h\"><span class=\"nrp-num\">7.4<\/span><span>Universe 2027: evidence pack for the cybersecurity and cryptography candidate mission<\/span><\/h2><ol class=\"nrp-rows\"><li><span class=\"nrp-rows-i\">01<\/span><p class=\"nrp-rows-x\">Mandate<\/p><\/li><li><span class=\"nrp-rows-i\">02<\/span><p class=\"nrp-rows-x\">Core Build \u00b7 1 month<\/p><\/li><li><span class=\"nrp-rows-i\">03<\/span><p class=\"nrp-rows-x\">Action \u00b7 1 week<\/p><\/li><li><span class=\"nrp-rows-i\">04<\/span><p class=\"nrp-rows-x\">Evidence seal<\/p><\/li><li><span class=\"nrp-rows-i\">05<\/span><p class=\"nrp-rows-x\">Portfolio correction<\/p><\/li><li><span class=\"nrp-rows-i\">06<\/span><p class=\"nrp-rows-x\">Next mandate<\/p><\/li><\/ol><div class=\"nrp-tblw\" id=\"nx-nrp-xt-10-c7-tab2\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table 7.2<\/span><span class=\"nrp-tbl-t\">Universe 2027: evidence pack for the cybersecurity and cryptography candidate mission<\/span><\/caption><thead><tr><th scope=\"col\">Item<\/th><th scope=\"col\">Record<\/th><th scope=\"col\">State<\/th><th scope=\"col\">Timing<\/th><\/tr><\/thead><tbody><tr><td>F1<\/td><td>Annual mandate record<\/td><td>PLANNED<\/td><td>after the Q2 2027 alignment<\/td><\/tr><tr><td>F2<\/td><td>Core Build record<\/td><td>PLANNED<\/td><td>one month before the exercise<\/td><\/tr><tr><td>F3<\/td><td>Exercise evidence<\/td><td>PLANNED<\/td><td>during the Action week<\/td><\/tr><tr><td>F4<\/td><td>Decision packets<\/td><td>PLANNED<\/td><td>exercise state only<\/td><\/tr><tr><td>F5<\/td><td>Proof receipts<\/td><td>PLANNED<\/td><td>scoped to each recorded check<\/td><\/tr><tr><td>F6<\/td><td>After-action report<\/td><td>PLANNED<\/td><td>within one quarter<\/td><\/tr><tr><td>F7<\/td><td>Upgrade docket<\/td><td>PLANNED<\/td><td>routed to the Portfolio<\/td><\/tr><tr><td>F8<\/td><td>Portfolio renewal<\/td><td>PLANNED<\/td><td>2027 global annual edition<\/td><\/tr><tr><td>F9<\/td><td>Public synthesis<\/td><td>PLANNED<\/td><td>public-safe extracts only<\/td><\/tr><\/tbody><\/table><\/div><h3 class=\"nrp-h3\">Mission<\/h3><dl class=\"nrp-dl\"><dt>ID<\/dt><dd>MSN-XT10-2027-01 \u00b7 Signature lag Universe mission<\/dd><dt>Role spine<\/dt><dd>Leadership sponsor \u00b7 Institutional anchor \u00b7 Mission lead: drawn from national pathways<\/dd><dt>Receiving actors<\/dt><dd>to be identified with the mandate<\/dd><\/dl><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">boundary<\/p><p>Simulation success is not deployment approval; demonstration is not certification; finance readiness is not financing secured.<\/p><\/aside><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-c7-s5\" aria-labelledby=\"nx-nrp-xt-10-c7-s5-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-c7-s5-h\"><span class=\"nrp-num\">7.5<\/span><span>Handoffs and routing<\/span><\/h2><p class=\"nrp-stand\">Where the baseline\u2019s findings go next. A handoff routes a finding for awareness, review or work; it transfers no authority.<\/p><div class=\"nrp-tblw\" id=\"nx-nrp-xt-10-c7-tab3\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table 7.3<\/span><span class=\"nrp-tbl-t\">Handoffs and routing<\/span><\/caption><thead><tr><th scope=\"col\">Finding<\/th><th scope=\"col\">Routed to<\/th><th scope=\"col\">Purpose<\/th><th scope=\"col\">Class<\/th><\/tr><\/thead><tbody><tr><td>CRY-001 \u00b7 standards<\/td><td>INI-XT10-INV-01<\/td><td>inventory and migration<\/td><td>PUBLIC<\/td><\/tr><tr><td>CRY-002 \u00b7 HQC backup<\/td><td>INI-XT10-INV-01<\/td><td>inventory and migration<\/td><td>PUBLIC<\/td><\/tr><tr><td>GOV-004 \u00b7 NCSC timelines<\/td><td>regional consortia<\/td><td>roadmap overlay<\/td><td>PUBLIC<\/td><\/tr><tr><td>INF-005 \u00b7 deployment<\/td><td>INI-XT10-SIG-02<\/td><td>signatures and certificates<\/td><td>PUBLIC<\/td><\/tr><tr><td>INF-006 \u00b7 protocol defaults<\/td><td>INI-XT10-EDG-03<\/td><td>long-life devices<\/td><td>PUBLIC<\/td><\/tr><tr><td>THR-008 \u00b7 exploitation<\/td><td>INI-XT10-KEV-04<\/td><td>exploitation and patching<\/td><td>PUBLIC<\/td><\/tr><tr><td>FIN-010 \u00b7 cost<\/td><td>INI-XT10-MSR-05<\/td><td>migration measurement<\/td><td>PUBLIC<\/td><\/tr><tr><td>SYS-012 \u00b7 compound pathway<\/td><td>MSN-XT10-2027-01<\/td><td>Universe candidate<\/td><td>CONSORTIUM<\/td><\/tr><\/tbody><\/table><\/div><div class=\"nrp-tblw\" id=\"nx-nrp-xt-10-c7-tab4\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table 7.4<\/span><span class=\"nrp-tbl-t\">Routing rules by publication class<\/span><\/caption><thead><tr><th scope=\"col\">Class<\/th><th scope=\"col\">Where it goes<\/th><th scope=\"col\">Who can see it<\/th><\/tr><\/thead><tbody><tr><td>PUBLIC<\/td><td>the published edition and its evidence bundle<\/td><td>anyone<\/td><\/tr><tr><td>CONSORTIUM<\/td><td>governed rooms of the federation<\/td><td>consortium members under agreement<\/td><\/tr><tr><td>CONTROLLED<\/td><td>need-to-know channels<\/td><td>named competent actors only<\/td><\/tr><\/tbody><\/table><\/div><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">CODES ARE NOT JOINS<\/p><p>Series codes in this edition (XT-10 and its relatives) are Reports codes. Codes in other indices can look alike. This edition makes no join on a code alone: a join needs a registry record that names both subjects.<\/p><\/aside><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">boundary<\/p><p>Handoffs carry findings to Nexus programme objects and steward reviews. States and organisations receive public editions as published; nothing here instructs them.<\/p><\/aside><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-c7-s6\" aria-labelledby=\"nx-nrp-xt-10-c7-s6-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-c7-s6-h\"><span class=\"nrp-num\">7.6<\/span><span>Feeds and signal register<\/span><\/h2><div class=\"nrp-tblw\" id=\"nx-nrp-xt-10-c7-tab5\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table 7.5<\/span><span class=\"nrp-tbl-t\">Feeds watched from 2027<\/span><\/caption><thead><tr><th scope=\"col\">Feed<\/th><th scope=\"col\">Producer<\/th><th scope=\"col\">Latency<\/th><th scope=\"col\">Feeds into<\/th><\/tr><\/thead><tbody><tr><td>NIST post-quantum project pages<\/td><td>NIST<\/td><td>per release<\/td><td>CRY-001<\/td><\/tr><tr><td>NCSC guidance pages<\/td><td>UK NCSC<\/td><td>per release<\/td><td>GOV-004<\/td><\/tr><tr><td>CISA KEV catalogue and advisories<\/td><td>CISA<\/td><td>continuous<\/td><td>THR-008<\/td><\/tr><tr><td>FBI IC3 annual report<\/td><td>FBI<\/td><td>annual<\/td><td>THR-009<\/td><\/tr><tr><td>ENISA threat landscape<\/td><td>ENISA<\/td><td>annual<\/td><td>THR-008<\/td><\/tr><tr><td>Network and project deployment notes<\/td><td>vendors and open-source projects<\/td><td>per event<\/td><td>INF-005<\/td><\/tr><tr><td>Breach cost and payment reports<\/td><td>vendors<\/td><td>annual<\/td><td>FIN-010<\/td><\/tr><\/tbody><\/table><\/div><h3 class=\"nrp-h3\">Escalation routes<\/h3><ul class=\"nrp-chips\"><li class=\"nf-ui-chip\">none \u00b7 keep monitoring<\/li><li class=\"nf-ui-chip\">research question<\/li><li class=\"nf-ui-chip\">project<\/li><li class=\"nf-ui-chip\">risk object<\/li><li class=\"nf-ui-chip\">annual publication<\/li><li class=\"nf-ui-chip\">signal report<\/li><\/ul><div class=\"nrp-tblw\" id=\"nx-nrp-xt-10-c7-tab6\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table 7.6<\/span><span class=\"nrp-tbl-t\">Signals at baseline<\/span><\/caption><thead><tr><th scope=\"col\">ID<\/th><th scope=\"col\">Signal<\/th><th scope=\"col\">Corroboration<\/th><th scope=\"col\">Systems<\/th><th scope=\"col\">Route<\/th><\/tr><\/thead><tbody><tr><td>SIG-XT10-001<\/td><td>NIST IR 8547 draft proposes 2030 and 2035 transition dates<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c7-n44\" id=\"nx-nrp-xt-10-c7-r44\" aria-label=\"Note 44\">44<\/a><\/sup><\/td><td>PARTIAL<\/td><td>DAT \u00b7 GOV<\/td><td>research question C-01<\/td><\/tr><tr><td>SIG-XT10-002<\/td><td>Hybrid key agreement on most human traffic to one network<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c7-n23\" id=\"nx-nrp-xt-10-c7-r23\" aria-label=\"Note 23\">23<\/a><\/sup><\/td><td>PARTIAL<\/td><td>INF<\/td><td>research question C-02<\/td><\/tr><tr><td>SIG-XT10-003<\/td><td>Ransomware payments fell about 8% in 2025<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c7-n19\" id=\"nx-nrp-xt-10-c7-r19\" aria-label=\"Note 19\">19<\/a><\/sup><\/td><td>PARTIAL<\/td><td>FIN \u00b7 INF<\/td><td>research question C-04<\/td><\/tr><\/tbody><\/table><\/div><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">boundary<\/p><p>A signal is not a warning. Signal records never substitute for official alerting or early-warning authorities, and they bypass no publication control.<\/p><\/aside><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-c7-notes\" aria-labelledby=\"nx-nrp-xt-10-c7-notes-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-c7-notes-h\"><span>Notes<\/span><\/h2><p class=\"nrp-note\">Numbers are the edition&#8217;s reference numbers, so a note reads the same in every chapter. The full list, with every source and its licence, is in Annex C. <a href=\"https:\/\/therisk.global\/nexus-reports\/editions\/xt-10\/references\/\">Annex C, references<\/a><\/p><ol class=\"nrp-notes\"><li id=\"nx-nrp-xt-10-c7-n44\"><span class=\"nrp-notes-n\">44<\/span><span>NIST (ed.), Transition to Post-Quantum Cryptography Standards, NIST IR 8547, initial public draft (draft PDF, November 2024; Tables 2 and 4: for quantum-vulnerable signature and key-establishment schemes at 112 bits of security strength, deprecated after 2030 and disallowed after 2035, and at 128 bits or more, disallowed after 2035; the cover sheet added on withdrawal on 27 October 2026 is not used). National Institute of Standards and Technology, Gaithersburg. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c7-r44\" aria-label=\"Back to the first call of note 44\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c7-n23\"><span class=\"nrp-notes-n\">23<\/span><span>Cloudflare (ed.), The state of the post-quantum Internet in 2025 (blog analysis; late October 2025 majority of human traffic with post-quantum key agreement; 3.7% of origins; 39% of top 100,000 domains in September 2025; ML-DSA-44 about 15 kB; first post-quantum certificates expected in 2026). Cloudflare, San Francisco. Vendor analysis of its own network, weak evidence. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c7-r23\" aria-label=\"Back to the first call of note 23\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c7-n19\"><span class=\"nrp-notes-n\">19<\/span><span>Chainalysis (ed.), ransomware analysis (blog page; more than USD 820 million on-chain in 2025, down 8% from an updated USD 892 million for 2024; original 2024 estimate USD 813 million). Chainalysis, New York. Vendor estimate, weak evidence. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c7-r19\" aria-label=\"Back to the first call of note 19\">back<\/a><\/span><\/li><\/ol><\/section><\/div><div class=\"nrp-part\" id=\"nx-nrp-xt-10-part-systems-in-depth\"><header class=\"nrp-chap-head\" id=\"nx-nrp-xt-10-c8-top\"><ul class=\"nrp-eyerow\"><li class=\"nf-ui-eyebrow\"><a href=\"https:\/\/therisk.global\/nexus-reports\/editions\/xt-10\/\">Cybersecurity and Advanced Cryptography 2026<\/a><\/li><li class=\"nf-ui-eyebrow\">Chapter 8<\/li><\/ul><span class=\"nrp-rule\" aria-hidden=\"true\"><\/span><h2 class=\"pp-hero-title\">Systems in depth<\/h2><p class=\"nrp-lede\">One section per system: its state at evidence close, its exposures and what the operational series will watch.<\/p><p class=\"nrp-chap-meta\"><span>9 min read<\/span><span>0 figures<\/span><span>5 tables<\/span><span>25 notes<\/span><span>NR-XTECH-CRYPTO-GLOBAL-2026-BASELINE<\/span><\/p><\/header><section class=\"nrp-block\" id=\"nx-nrp-xt-10-c8-s1\" aria-labelledby=\"nx-nrp-xt-10-c8-s1-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-c8-s1-h\"><span class=\"nrp-num\">8.1<\/span><span>Cryptographic platforms and protocols<\/span><\/h2><p class=\"nrp-stand\">Cryptography reaches users through protocols and libraries. Evidence is strongest for standards texts and open-source defaults, and weakest for signatures and embedded devices.<\/p><div class=\"pp-cells nrp-cells-3\"><div class=\"nrp-cell\"><span class=\"pp-metric\">3<\/span><span class=\"nrp-cell-u\">standards<\/span><p>finalised by NIST in 2024<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c8-n1\" id=\"nx-nrp-xt-10-c8-r1\" aria-label=\"Note 1\">1<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c8-n2\" id=\"nx-nrp-xt-10-c8-r2\" aria-label=\"Note 2\">2<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c8-n3\" id=\"nx-nrp-xt-10-c8-r3\" aria-label=\"Note 3\">3<\/a><\/sup><\/p><\/div><div class=\"nrp-cell\"><span class=\"pp-metric\">3<\/span><span class=\"nrp-cell-u\">parameter sets<\/span><p>ML-KEM 512, 768 and 1024<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c8-n1\" aria-label=\"Note 1\">1<\/a><\/sup><\/p><\/div><div class=\"nrp-cell\"><span class=\"pp-metric\">10.0<\/span><span class=\"nrp-cell-u\">version<\/span><p>OpenSSH release that made mlkem768x25519 the default<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c8-n24\" id=\"nx-nrp-xt-10-c8-r24\" aria-label=\"Note 24\">24<\/a><\/sup><\/p><\/div><\/div><div class=\"nrp-tblw\" id=\"nx-nrp-xt-10-c8-tab1\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table 8.1<\/span><span class=\"nrp-tbl-t\">State at baseline<\/span><\/caption><thead><tr><th scope=\"col\">Component<\/th><th scope=\"col\">State<\/th><th scope=\"col\">Evidence<\/th><th scope=\"col\">Status<\/th><\/tr><\/thead><tbody><tr><td>Key establishment<\/td><td>ML-KEM standardised; HQC selected as backup<\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c8-n1\" aria-label=\"Note 1\">1<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c8-n6\" id=\"nx-nrp-xt-10-c8-r6\" aria-label=\"Note 6\">6<\/a><\/sup><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><\/tr><tr><td>Secure shell<\/td><td>post-quantum default since version 9.0; warning from 10.1<\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c8-n24\" aria-label=\"Note 24\">24<\/a><\/sup><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><\/tr><tr><td>Messaging<\/td><td>hybrid post-quantum steps described by two providers<\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c8-n25\" id=\"nx-nrp-xt-10-c8-r25\" aria-label=\"Note 25\">25<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c8-n26\" id=\"nx-nrp-xt-10-c8-r26\" aria-label=\"Note 26\">26<\/a><\/sup><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><\/tr><tr><td>Signatures and certificates<\/td><td>standards exist; deployment lags<\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c8-n2\" aria-label=\"Note 2\">2<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c8-n3\" aria-label=\"Note 3\">3<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c8-n23\" id=\"nx-nrp-xt-10-c8-r23\" aria-label=\"Note 23\">23<\/a><\/sup><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><\/tr><\/tbody><\/table><\/div><div class=\"nrp-split\"><div><h3 class=\"nrp-h3\">Couplings<\/h3><ul class=\"nrp-list\"><li>CRY \u2192 INF deployment<\/li><li>INF \u2192 DAT exposure<\/li><li>GOV \u2192 INF timelines<\/li><\/ul><\/div><div><h3 class=\"nrp-h3\">Evidence to bind in 2027<\/h3><ul class=\"nrp-list\"><li>signature deployment<\/li><li>device update capability<\/li><\/ul><\/div><\/div><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">WHAT TO WATCH<\/p><p>The HQC draft; first post-quantum certificates; changes in protocol defaults.<\/p><\/aside><h3 class=\"nrp-h3\">Related editions<\/h3><ul class=\"nrp-chips\"><li class=\"nf-ui-chip\">GLB Global Systems<\/li><li class=\"nf-ui-chip\">GS-13 Cyber and Digital Systems<\/li><li class=\"nf-ui-chip\">SR-10 Digital Public Infrastructure and Systemic Cyber Risk<\/li><li class=\"nf-ui-chip\">XT-02 Quantum Technologies<\/li><li class=\"nf-ui-chip\">XT-01 Artificial Intelligence and Agentic Systems<\/li><li class=\"nf-ui-chip\">XT-11 Blockchain and Distributed Ledgers<\/li><\/ul><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">boundary<\/p><p>This chapter describes published standards and deployments. It endorses no product and forecasts no capability date.<\/p><\/aside><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-c8-s2\" aria-labelledby=\"nx-nrp-xt-10-c8-s2-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-c8-s2-h\"><span class=\"nrp-num\">8.2<\/span><span>Performance, bandwidth and energy of cryptography<\/span><\/h2><p class=\"nrp-stand\">Post-quantum objects are larger than the ones they replace. The cost shows first in handshakes and certificate chains.<\/p><div class=\"pp-cells nrp-cells-3\"><div class=\"nrp-cell\"><span class=\"pp-metric\">\u224815<\/span><span class=\"nrp-cell-u\">kB<\/span><p>ML-DSA-44 signature size added to a TLS handshake<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c8-n23\" aria-label=\"Note 23\">23<\/a><\/sup><\/p><\/div><div class=\"nrp-cell\"><span class=\"pp-metric\">\u22487<\/span><span class=\"nrp-cell-u\">kB<\/span><p>FN-DSA-512 signature size added, as stated<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c8-n23\" aria-label=\"Note 23\">23<\/a><\/sup><\/p><\/div><div class=\"nrp-cell\"><span class=\"pp-metric\">\u224815<\/span><span class=\"nrp-cell-u\">%<\/span><p>handshake slowdown from adding 9 kB, as stated<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c8-n23\" aria-label=\"Note 23\">23<\/a><\/sup><\/p><\/div><\/div><div class=\"nrp-tblw\" id=\"nx-nrp-xt-10-c8-tab2\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table 8.2<\/span><span class=\"nrp-tbl-t\">State at baseline<\/span><\/caption><thead><tr><th scope=\"col\">Component<\/th><th scope=\"col\">State<\/th><th scope=\"col\">Evidence<\/th><th scope=\"col\">Status<\/th><\/tr><\/thead><tbody><tr><td>Handshake size<\/td><td>larger signatures add kilobytes to each connection<\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c8-n23\" aria-label=\"Note 23\">23<\/a><\/sup><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><\/tr><tr><td>Lightweight methods<\/td><td>NIST published Ascon-based standards for constrained devices<\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c8-n8\" id=\"nx-nrp-xt-10-c8-r8\" aria-label=\"Note 8\">8<\/a><\/sup><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><\/tr><tr><td>Key-encapsulation use<\/td><td>NIST guidance on secure use published in 2025<\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c8-n7\" id=\"nx-nrp-xt-10-c8-r7\" aria-label=\"Note 7\">7<\/a><\/sup><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><\/tr><tr><td>Energy cost<\/td><td>not published on a common basis for migration<\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c8-n23\" aria-label=\"Note 23\">23<\/a><\/sup><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"neutral\" aria-hidden=\"true\"><\/span>Expert input<\/span><\/td><\/tr><\/tbody><\/table><\/div><div class=\"nrp-split\"><div><h3 class=\"nrp-h3\">Couplings<\/h3><ul class=\"nrp-list\"><li>INF \u2192 CLI energy and bandwidth<\/li><li>CRY \u2192 INF performance<\/li><li>ENE \u2194 INF facility power<\/li><\/ul><\/div><div><h3 class=\"nrp-h3\">Evidence to bind in 2027<\/h3><ul class=\"nrp-list\"><li>energy cost of migration<\/li><li>device performance limits<\/li><\/ul><\/div><\/div><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">WHAT TO WATCH<\/p><p>New signature schemes under evaluation; browser performance targets; lightweight standard adoption.<\/p><\/aside><h3 class=\"nrp-h3\">Related editions<\/h3><ul class=\"nrp-chips\"><li class=\"nf-ui-chip\">GLB Global Systems<\/li><li class=\"nf-ui-chip\">GS-13 Cyber and Digital Systems<\/li><li class=\"nf-ui-chip\">SR-10 Digital Public Infrastructure and Systemic Cyber Risk<\/li><li class=\"nf-ui-chip\">XT-02 Quantum Technologies<\/li><li class=\"nf-ui-chip\">XT-01 Artificial Intelligence and Agentic Systems<\/li><li class=\"nf-ui-chip\">XT-11 Blockchain and Distributed Ledgers<\/li><\/ul><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">boundary<\/p><p>This chapter describes published measurements from one network and standards texts. It assesses no vendor or product.<\/p><\/aside><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-c8-s3\" aria-labelledby=\"nx-nrp-xt-10-c8-s3-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-c8-s3-h\"><span class=\"nrp-num\">8.3<\/span><span>Modules, devices and supply chain<\/span><\/h2><p class=\"nrp-stand\">Long-life devices and validated modules limit how fast cryptography can change. The sources read give no supply figures.<\/p><div class=\"pp-cells nrp-cells-3\"><div class=\"nrp-cell\"><span class=\"pp-metric\">NOT BOUND<\/span><span class=\"nrp-cell-u\">entries<\/span><p>CISA KEV count at the close<\/p><\/div><div class=\"nrp-cell\"><span class=\"pp-metric\">23<\/span><span class=\"nrp-cell-u\">agencies<\/span><p>co-sealed the 2025 router advisory<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c8-n14\" id=\"nx-nrp-xt-10-c8-r14\" aria-label=\"Note 14\">14<\/a><\/sup><\/p><\/div><div class=\"nrp-cell\"><span class=\"pp-metric\">0<\/span><span class=\"nrp-cell-u\">zero-days<\/span><p>observed in that campaign, as stated<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c8-n14\" aria-label=\"Note 14\">14<\/a><\/sup><\/p><\/div><\/div><div class=\"nrp-tblw\" id=\"nx-nrp-xt-10-c8-tab3\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table 8.3<\/span><span class=\"nrp-tbl-t\">State at baseline<\/span><\/caption><thead><tr><th scope=\"col\">Component<\/th><th scope=\"col\">State<\/th><th scope=\"col\">Evidence<\/th><th scope=\"col\">Status<\/th><\/tr><\/thead><tbody><tr><td>Edge devices<\/td><td>routers and gateways compromised through known vulnerabilities<\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c8-n14\" aria-label=\"Note 14\">14<\/a><\/sup><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><\/tr><tr><td>Validated modules<\/td><td>transition of older module validations runs through 2026 per the CISA page<\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c8-n12\" id=\"nx-nrp-xt-10-c8-r12\" aria-label=\"Note 12\">12<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c8-n33\" id=\"nx-nrp-xt-10-c8-r33\" aria-label=\"Note 33\">33<\/a><\/sup><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><\/tr><tr><td>Product duties<\/td><td>EU product law adds reporting duties in stages<\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c8-n27\" id=\"nx-nrp-xt-10-c8-r27\" aria-label=\"Note 27\">27<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c8-n40\" id=\"nx-nrp-xt-10-c8-r40\" aria-label=\"Note 40\">40<\/a><\/sup><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><\/tr><tr><td>Chip and module supply<\/td><td>not bound<\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c8-n12\" aria-label=\"Note 12\">12<\/a><\/sup><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"neutral\" aria-hidden=\"true\"><\/span>Expert input<\/span><\/td><\/tr><\/tbody><\/table><\/div><div class=\"nrp-split\"><div><h3 class=\"nrp-h3\">Couplings<\/h3><ul class=\"nrp-list\"><li>INF \u2192 ENE edge exposure<\/li><li>GOV \u2192 INF product duties<\/li><li>MIN \u2192 INF module supply<\/li><\/ul><\/div><div><h3 class=\"nrp-h3\">Evidence to bind in 2027<\/h3><ul class=\"nrp-list\"><li>device update capability<\/li><li>module and chip supply<\/li><\/ul><\/div><\/div><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">WHAT TO WATCH<\/p><p>Product-law reporting start dates; KEV additions; module validation changes.<\/p><\/aside><h3 class=\"nrp-h3\">Related editions<\/h3><ul class=\"nrp-chips\"><li class=\"nf-ui-chip\">GLB Global Systems<\/li><li class=\"nf-ui-chip\">GS-13 Cyber and Digital Systems<\/li><li class=\"nf-ui-chip\">SR-10 Digital Public Infrastructure and Systemic Cyber Risk<\/li><li class=\"nf-ui-chip\">XT-02 Quantum Technologies<\/li><li class=\"nf-ui-chip\">XT-01 Artificial Intelligence and Agentic Systems<\/li><li class=\"nf-ui-chip\">XT-11 Blockchain and Distributed Ledgers<\/li><\/ul><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">boundary<\/p><p>This chapter describes public guidance and advisories. It assesses no manufacturer, state or validation decision.<\/p><\/aside><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-c8-s4\" aria-labelledby=\"nx-nrp-xt-10-c8-s4-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-c8-s4-h\"><span class=\"nrp-num\">8.4<\/span><span>Economy, cost and workforce<\/span><\/h2><p class=\"nrp-stand\">Cost and workforce evidence is thin and partly from vendors. The figures below are weak evidence and are read as such.<\/p><div class=\"pp-cells nrp-cells-3\"><div class=\"nrp-cell\"><span class=\"pp-metric\">4.99<\/span><span class=\"nrp-cell-u\">USD million<\/span><p>average breach cost, vendor study 2026<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c8-n18\" id=\"nx-nrp-xt-10-c8-r18\" aria-label=\"Note 18\">18<\/a><\/sup><\/p><\/div><div class=\"nrp-cell\"><span class=\"pp-metric\">820<\/span><span class=\"nrp-cell-u\">USD million<\/span><p>on-chain ransomware payments floor, 2025<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c8-n19\" id=\"nx-nrp-xt-10-c8-r19\" aria-label=\"Note 19\">19<\/a><\/sup><\/p><\/div><div class=\"nrp-cell\"><span class=\"pp-metric\">59<\/span><span class=\"nrp-cell-u\">%<\/span><p>respondents with critical or significant skills needs, 2025<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c8-n20\" id=\"nx-nrp-xt-10-c8-r20\" aria-label=\"Note 20\">20<\/a><\/sup><\/p><\/div><\/div><div class=\"nrp-tblw\" id=\"nx-nrp-xt-10-c8-tab4\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table 8.4<\/span><span class=\"nrp-tbl-t\">State at baseline<\/span><\/caption><thead><tr><th scope=\"col\">Component<\/th><th scope=\"col\">State<\/th><th scope=\"col\">Evidence<\/th><th scope=\"col\">Status<\/th><\/tr><\/thead><tbody><tr><td>Breach cost<\/td><td>USD 4.99 million average, up 12%, from a vendor study<\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c8-n18\" aria-label=\"Note 18\">18<\/a><\/sup><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><\/tr><tr><td>Ransomware payments<\/td><td>more than USD 820 million on-chain in 2025; vendor estimate<\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c8-n19\" aria-label=\"Note 19\">19<\/a><\/sup><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><\/tr><tr><td>Workforce<\/td><td>skills needs up from 44% to 59%; no gap figure<\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c8-n20\" aria-label=\"Note 20\">20<\/a><\/sup><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><\/tr><tr><td>Losses to the FBI<\/td><td>USD 16.6 billion in 2024, mostly fraud<\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c8-n15\" id=\"nx-nrp-xt-10-c8-r15\" aria-label=\"Note 15\">15<\/a><\/sup><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><\/tr><\/tbody><\/table><\/div><div class=\"nrp-split\"><div><h3 class=\"nrp-h3\">Couplings<\/h3><ul class=\"nrp-list\"><li>INF \u2192 FIN cost<\/li><li>FIN \u2192 DAT migration spending<\/li><li>HLT \u2192 INF workforce<\/li><\/ul><\/div><div><h3 class=\"nrp-h3\">Evidence to bind in 2027<\/h3><ul class=\"nrp-list\"><li>primary cost data<\/li><li>workforce size<\/li><\/ul><\/div><\/div><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">WHAT TO WATCH<\/p><p>The next IC3 report; vendor annual reports; national workforce statistics.<\/p><\/aside><h3 class=\"nrp-h3\">Related editions<\/h3><ul class=\"nrp-chips\"><li class=\"nf-ui-chip\">GLB Global Systems<\/li><li class=\"nf-ui-chip\">GS-13 Cyber and Digital Systems<\/li><li class=\"nf-ui-chip\">SR-10 Digital Public Infrastructure and Systemic Cyber Risk<\/li><li class=\"nf-ui-chip\">XT-02 Quantum Technologies<\/li><li class=\"nf-ui-chip\">XT-01 Artificial Intelligence and Agentic Systems<\/li><li class=\"nf-ui-chip\">XT-11 Blockchain and Distributed Ledgers<\/li><\/ul><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">boundary<\/p><p>This chapter describes cost and workforce figures as reported. It gives no investment or insurance advice and endorses no company.<\/p><\/aside><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-c8-s5\" aria-labelledby=\"nx-nrp-xt-10-c8-s5-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-c8-s5-h\"><span class=\"nrp-num\">8.5<\/span><span>Security, cryptography and governance watch<\/span><\/h2><p class=\"nrp-stand\">Governance is moving on three fronts: migration timelines, product and incident duties, and cybercrime law. Dates differ by authority.<\/p><div class=\"pp-cells nrp-cells-3\"><div class=\"nrp-cell\"><span class=\"pp-metric\">2035<\/span><span class=\"nrp-cell-u\">milestone<\/span><p>NCSC date to finish migration<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c8-n10\" id=\"nx-nrp-xt-10-c8-r10\" aria-label=\"Note 10\">10<\/a><\/sup><\/p><\/div><div class=\"nrp-cell\"><span class=\"pp-metric\">11 Sep 2026<\/span><span class=\"nrp-cell-u\">date<\/span><p>EU product law reporting duties start, per commentary<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c8-n27\" aria-label=\"Note 27\">27<\/a><\/sup><\/p><\/div><div class=\"nrp-cell\"><span class=\"pp-metric\">4<\/span><span class=\"nrp-cell-u\">business days<\/span><p>SEC filing window after a materiality determination<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c8-n21\" id=\"nx-nrp-xt-10-c8-r21\" aria-label=\"Note 21\">21<\/a><\/sup><\/p><\/div><\/div><div class=\"nrp-tblw\" id=\"nx-nrp-xt-10-c8-tab5\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table 8.5<\/span><span class=\"nrp-tbl-t\">State at baseline<\/span><\/caption><thead><tr><th scope=\"col\">Component<\/th><th scope=\"col\">State<\/th><th scope=\"col\">Evidence<\/th><th scope=\"col\">Status<\/th><\/tr><\/thead><tbody><tr><td>Migration timelines<\/td><td>NCSC 2028, 2031 and 2035; NIST transition draft; EU roadmap<\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c8-n10\" aria-label=\"Note 10\">10<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c8-n11\" id=\"nx-nrp-xt-10-c8-r11\" aria-label=\"Note 11\">11<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c8-n44\" id=\"nx-nrp-xt-10-c8-r44\" aria-label=\"Note 44\">44<\/a><\/sup><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><\/tr><tr><td>Product and entity duties<\/td><td>EU product law and network security directive<\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c8-n27\" aria-label=\"Note 27\">27<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c8-n28\" id=\"nx-nrp-xt-10-c8-r28\" aria-label=\"Note 28\">28<\/a><\/sup><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><\/tr><tr><td>Disclosure<\/td><td>US listed companies disclose material incidents within four business days of the determination<\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c8-n21\" aria-label=\"Note 21\">21<\/a><\/sup><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><\/tr><tr><td>Cybercrime law<\/td><td>a UN convention opened for signature in October 2025; counts of signatories differ by source<\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-c8-n29\" id=\"nx-nrp-xt-10-c8-r29\" aria-label=\"Note 29\">29<\/a><\/sup><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><\/tr><\/tbody><\/table><\/div><div class=\"nrp-split\"><div><h3 class=\"nrp-h3\">Couplings<\/h3><ul class=\"nrp-list\"><li>GOV \u2192 INF timelines<\/li><li>GOV \u2192 TRD cross-border duties<\/li><li>INF \u2192 DAT exposure<\/li><\/ul><\/div><div><h3 class=\"nrp-h3\">Evidence to bind in 2027<\/h3><ul class=\"nrp-list\"><li>text of national roadmaps<\/li><li>migration progress by sector<\/li><\/ul><\/div><\/div><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">WHAT TO WATCH<\/p><p>National roadmaps; staged product-law dates; entry into force of the UN convention; the final IR 8547 PDF (post-close, context only).<\/p><\/aside><h3 class=\"nrp-h3\">Related editions<\/h3><ul class=\"nrp-chips\"><li class=\"nf-ui-chip\">GLB Global Systems<\/li><li class=\"nf-ui-chip\">GS-13 Cyber and Digital Systems<\/li><li class=\"nf-ui-chip\">SR-10 Digital Public Infrastructure and Systemic Cyber Risk<\/li><li class=\"nf-ui-chip\">XT-02 Quantum Technologies<\/li><li class=\"nf-ui-chip\">XT-01 Artificial Intelligence and Agentic Systems<\/li><li class=\"nf-ui-chip\">XT-11 Blockchain and Distributed Ledgers<\/li><\/ul><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">boundary<\/p><p>This chapter describes standards and law in public sources. It confers no approval on any product and assesses no government or company.<\/p><\/aside><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-c8-notes\" aria-labelledby=\"nx-nrp-xt-10-c8-notes-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-c8-notes-h\"><span>Notes<\/span><\/h2><p class=\"nrp-note\">Numbers are the edition&#8217;s reference numbers, so a note reads the same in every chapter. The full list, with every source and its licence, is in Annex C. <a href=\"https:\/\/therisk.global\/nexus-reports\/editions\/xt-10\/references\/\">Annex C, references<\/a><\/p><ol class=\"nrp-notes\"><li id=\"nx-nrp-xt-10-c8-n1\"><span class=\"nrp-notes-n\">1<\/span><span>NIST (ed.), Module-Lattice-Based Key-Encapsulation Mechanism Standard, FIPS 203 (publication page; final 13 August 2024; ML-KEM-512, ML-KEM-768 and ML-KEM-1024; initial draft 24 August 2023). National Institute of Standards and Technology, Gaithersburg. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c8-r1\" aria-label=\"Back to the first call of note 1\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c8-n2\"><span class=\"nrp-notes-n\">2<\/span><span>NIST (ed.), Module-Lattice-Based Digital Signature Standard, FIPS 204 (publication page; final 13 August 2024; ML-DSA). National Institute of Standards and Technology, Gaithersburg. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c8-r2\" aria-label=\"Back to the first call of note 2\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c8-n3\"><span class=\"nrp-notes-n\">3<\/span><span>NIST (ed.), Stateless Hash-Based Digital Signature Standard, FIPS 205 (publication page; final 13 August 2024; SLH-DSA, based on SPHINCS+). National Institute of Standards and Technology, Gaithersburg. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c8-r3\" aria-label=\"Back to the first call of note 3\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c8-n24\"><span class=\"nrp-notes-n\">24<\/span><span>OpenSSH project (ed.), Post-quantum cryptography in OpenSSH (documentation page; sntrup761x25519-sha512 from 9.0; mlkem768x25519-sha256 added in 9.9 and default in 10.0; warning from 10.1). OpenBSD Project. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c8-r24\" aria-label=\"Back to the first call of note 24\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c8-n6\"><span class=\"nrp-notes-n\">6<\/span><span>NIST (ed.), NIST selects HQC as fifth algorithm for post-quantum encryption (news item, 11 March 2025; backup to ML-KEM; draft standard expected in about a year; final standard expected in 2027). National Institute of Standards and Technology, Gaithersburg. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c8-r6\" aria-label=\"Back to the first call of note 6\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c8-n25\"><span class=\"nrp-notes-n\">25<\/span><span>Signal (ed.), Signal Protocol and Post-Quantum Ratchets, SPQR triple ratchet (blog post, 2 October 2025; ML-KEM 768; gradual rollout; formal verification). Signal Messenger, Mountain View. Vendor announcement, weak evidence. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c8-r25\" aria-label=\"Back to the first call of note 25\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c8-n26\"><span class=\"nrp-notes-n\">26<\/span><span>Apple (ed.), iMessage with PQ3: The new state of the art in quantum-secure messaging at scale (security blog post, 21 February 2024; Kyber-1024 and Kyber-768 hybrid with P-256; level 3 on its own scale). Apple, Cupertino. Vendor announcement, weak evidence. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c8-r26\" aria-label=\"Back to the first call of note 26\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c8-n23\"><span class=\"nrp-notes-n\">23<\/span><span>Cloudflare (ed.), The state of the post-quantum Internet in 2025 (blog analysis; late October 2025 majority of human traffic with post-quantum key agreement; 3.7% of origins; 39% of top 100,000 domains in September 2025; ML-DSA-44 about 15 kB; first post-quantum certificates expected in 2026). Cloudflare, San Francisco. Vendor analysis of its own network, weak evidence. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c8-r23\" aria-label=\"Back to the first call of note 23\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c8-n8\"><span class=\"nrp-notes-n\">8<\/span><span>NIST (ed.), Ascon-Based Lightweight Cryptography Standards for Constrained Devices, SP 800-232 (publication page; final 13 August 2025; Ascon-AEAD128, Ascon-Hash256, Ascon-XOF128, Ascon-CXOF128). National Institute of Standards and Technology, Gaithersburg. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c8-r8\" aria-label=\"Back to the first call of note 8\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c8-n7\"><span class=\"nrp-notes-n\">7<\/span><span>NIST (ed.), Recommendations for Key-Encapsulation Mechanisms, SP 800-227 (publication page; final 18 September 2025). National Institute of Standards and Technology, Gaithersburg. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c8-r7\" aria-label=\"Back to the first call of note 7\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c8-n14\"><span class=\"nrp-notes-n\">14<\/span><span>CISA and 22 partner agencies (eds.), Countering Chinese State-Sponsored Actors Compromise of Networks Worldwide to Feed Global Espionage System, advisory AA25-239A (published 27 August 2025; revised 3 September 2025; 23 agencies from 13 countries; known vulnerabilities; no zero-day exploitation observed). Cybersecurity and Infrastructure Security Agency, Arlington. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c8-r14\" aria-label=\"Back to the first call of note 14\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c8-n12\"><span class=\"nrp-notes-n\">12<\/span><span>CISA (ed.), Post-Quantum Cryptography Initiative (page; key dates, federal inventory duty under 6 U.S.C. 1526, product categories list, references to Executive Orders 14306, 14412 and 14413 and OMB Memorandum M-26-15). Cybersecurity and Infrastructure Security Agency, Arlington. Observation year 2026. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c8-r12\" aria-label=\"Back to the first call of note 12\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c8-n33\"><span class=\"nrp-notes-n\">33<\/span><span>UNVERIFIED, not opened: NIST (ed.), Security Requirements for Cryptographic Modules, FIPS 140-3, cited from memory. National Institute of Standards and Technology, Gaithersburg. Observation year 2019. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c8-r33\" aria-label=\"Back to the first call of note 33\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c8-n27\"><span class=\"nrp-notes-n\">27<\/span><span>UNVERIFIED, not opened: European Union, Regulation (EU) 2024\/2847 on horizontal cybersecurity requirements for products with digital elements (Cyber Resilience Act; in force 10 December 2024; reporting duties from 11 September 2026; main obligations from 11 December 2027), dates taken from law-firm search summaries; the Official Journal page returned no text. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c8-r27\" aria-label=\"Back to the first call of note 27\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c8-n40\"><span class=\"nrp-notes-n\">40<\/span><span>UNVERIFIED, not opened: European Union, Commission Implementing Regulation (EU) 2024\/482 establishing the European scheme for cybersecurity of ICT products (EUCC), cited from memory. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c8-r40\" aria-label=\"Back to the first call of note 40\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c8-n18\"><span class=\"nrp-notes-n\">18<\/span><span>IBM and Ponemon Institute (eds.), Cost of a <a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/nrs\/#nrs-h51\" data-tc=\"NHS-1 cyber.intrusion.data-breach\" data-tk=\"Information and cyber-physical systems \u00b7 Malicious compromise\" data-td=\"Unauthorised access to, or release of, personal, commercial or operational data.\" data-ts=\"NRS-H51\" data-tr=\"draft\" data-tx=\"https:\/\/risksindex.com\/hazards\/cyber\/\" data-txl=\"Information and cyber-physical systems\">Data Breach<\/a> Report 2026 (landing page; global average USD 4.99 million, up 12%; AI-driven attacks up 56%). IBM, Armonk. Vendor report, weak evidence; the full report was not opened. Observation year 2026. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c8-r18\" aria-label=\"Back to the first call of note 18\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c8-n19\"><span class=\"nrp-notes-n\">19<\/span><span>Chainalysis (ed.), ransomware analysis (blog page; more than USD 820 million on-chain in 2025, down 8% from an updated USD 892 million for 2024; original 2024 estimate USD 813 million). Chainalysis, New York. Vendor estimate, weak evidence. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c8-r19\" aria-label=\"Back to the first call of note 19\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c8-n20\"><span class=\"nrp-notes-n\">20<\/span><span>ISC2 (ed.), 2025 Cybersecurity Workforce Study (page; published 4 December 2025; 16,029 respondents; 59% critical or significant skills needs, up from 44%; no workforce gap estimate). ISC2, Alexandria. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c8-r20\" aria-label=\"Back to the first call of note 20\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c8-n15\"><span class=\"nrp-notes-n\">15<\/span><span>Federal Bureau of Investigation, Internet Crime Complaint Center (ed.), 2024 Internet Crime Report (859,532 complaints; USD 16.6 billion losses, up 33%; 256,256 complaints with a loss; 3,156 ransomware complaints; 263,455 cyber-threat complaints and USD 1.571 billion; 4,878 critical-infrastructure complaints). FBI, Washington. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c8-r15\" aria-label=\"Back to the first call of note 15\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c8-n10\"><span class=\"nrp-notes-n\">10<\/span><span>UK National Cyber Security Centre (ed.), Timelines for migration to post-quantum cryptography (guidance page; version 1.0, 20 March 2025; milestones 2028, 2031 and 2035). NCSC, London. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c8-r10\" aria-label=\"Back to the first call of note 10\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c8-n21\"><span class=\"nrp-notes-n\">21<\/span><span>US Securities and Exchange Commission (ed.), SEC adopts rules on cybersecurity risk management, strategy, governance and incident disclosure by public companies (press release 2023-139; adopted 26 July 2023; Form 8-K Item 1.05 within four business days of a materiality determination). SEC, Washington. Observation year 2023. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c8-r21\" aria-label=\"Back to the first call of note 21\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c8-n11\"><span class=\"nrp-notes-n\">11<\/span><span>European Commission (ed.), Coordinated Implementation Roadmap for the transition to Post-Quantum Cryptography (library page; published 23 June 2025; the milestones were not on the page). Directorate-General for Communications Networks, Content and Technology, Brussels. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c8-r11\" aria-label=\"Back to the first call of note 11\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c8-n44\"><span class=\"nrp-notes-n\">44<\/span><span>NIST (ed.), Transition to Post-Quantum Cryptography Standards, NIST IR 8547, initial public draft (draft PDF, November 2024; Tables 2 and 4: for quantum-vulnerable signature and key-establishment schemes at 112 bits of security strength, deprecated after 2030 and disallowed after 2035, and at 128 bits or more, disallowed after 2035; the cover sheet added on withdrawal on 27 October 2026 is not used). National Institute of Standards and Technology, Gaithersburg. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c8-r44\" aria-label=\"Back to the first call of note 44\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c8-n28\"><span class=\"nrp-notes-n\">28<\/span><span>UNVERIFIED, not opened: European Union, Directive (EU) 2022\/2555 on measures for a high common level of cybersecurity across the Union (NIS2), cited from memory without figures. Observation year 2022. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c8-r28\" aria-label=\"Back to the first call of note 28\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-c8-n29\"><span class=\"nrp-notes-n\">29<\/span><span>UNVERIFIED, not opened: United Nations, Convention against Cybercrime (opened for signature in Hanoi on 25 October 2025; signatory counts of 65, 72, 74 and 75 appear in news and press summaries; entry into force on the ninetieth day after the fortieth ratification), taken from search summaries; the UNODC page returned an error. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-c8-r29\" aria-label=\"Back to the first call of note 29\">back<\/a><\/span><\/li><\/ol><\/section><\/div><div class=\"nrp-part\" id=\"nx-nrp-xt-10-part-methodology\"><header class=\"nrp-chap-head\" id=\"nx-nrp-xt-10-ca-top\"><ul class=\"nrp-eyerow\"><li class=\"nf-ui-eyebrow\"><a href=\"https:\/\/therisk.global\/nexus-reports\/editions\/xt-10\/\">Cybersecurity and Advanced Cryptography 2026<\/a><\/li><li class=\"nf-ui-eyebrow\">Annex A<\/li><\/ul><span class=\"nrp-rule\" aria-hidden=\"true\"><\/span><h2 class=\"pp-hero-title\">Methodology<\/h2><p class=\"nrp-lede\">How the edition was made: methods, the model card, the evidence cut and its age, the acceptance record and the glossary.<\/p><p class=\"nrp-chap-meta\"><span>14 min read<\/span><span>0 figures<\/span><span>13 tables<\/span><span>19 notes<\/span><span>NR-XTECH-CRYPTO-GLOBAL-2026-BASELINE<\/span><\/p><\/header><section class=\"nrp-block\" id=\"nx-nrp-xt-10-ca-s1\" aria-labelledby=\"nx-nrp-xt-10-ca-s1-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-ca-s1-h\"><span class=\"nrp-num\">A.1<\/span><span>Methods<\/span><\/h2><p class=\"nrp-stand\">The global baseline uses published values and four simple derivations. Each is shown in full so that any reader can reproduce it.<\/p><div class=\"nrp-tblw\" id=\"nx-nrp-xt-10-ca-tab1\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table A.1<\/span><span class=\"nrp-tbl-t\">Methods<\/span><\/caption><thead><tr><th scope=\"col\">No.<\/th><th scope=\"col\">Derivation<\/th><th scope=\"col\">Calculation<\/th><th scope=\"col\">Result<\/th><\/tr><\/thead><tbody><tr><td>(1)<\/td><td>Fall in estimated qubits for RSA-2048, 2019 to 2025<\/td><td>20 \u00f7 1<\/td><td>about 20 times<\/td><\/tr><tr><td>(2)<\/td><td>Share of FBI reported losses from cyber threats, 2024<\/td><td>1.571 \u00f7 16.6<\/td><td>about 9.5%<\/td><\/tr><tr><td>(3)<\/td><td>Share of FBI complaints that reported a loss, 2024<\/td><td>256,256 \u00f7 859,532<\/td><td>about 29.8%<\/td><\/tr><tr><td>(4)<\/td><td>Change in on-chain ransomware payments, 2024 to 2025<\/td><td>(820 \u2212 892) \u00f7 892<\/td><td>about \u22128%, a floor<\/td><\/tr><\/tbody><\/table><\/div><div class=\"nrp-tblw\" id=\"nx-nrp-xt-10-ca-tab2\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table A.2<\/span><span class=\"nrp-tbl-t\">Coupling strength scale (matrix and model card)<\/span><\/caption><thead><tr><th scope=\"col\">Strength<\/th><th scope=\"col\">Definition<\/th><\/tr><\/thead><tbody><tr><td>STRONG<\/td><td>a disruption in the source system has historically changed the target system\u2019s service or output within one season, in more than one region<\/td><\/tr><tr><td>MODERATE<\/td><td>an effect is documented but buffered or slower<\/td><\/tr><tr><td>WEAK<\/td><td>an effect is plausible but not documented at global scale<\/td><\/tr><\/tbody><\/table><\/div><div class=\"nrp-tblw\" id=\"nx-nrp-xt-10-ca-tab3\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table A.3<\/span><span class=\"nrp-tbl-t\">Status grammar<\/span><\/caption><thead><tr><th scope=\"col\">Label<\/th><th scope=\"col\">Rule<\/th><\/tr><\/thead><tbody><tr><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><td>value as issued by its source, with year<\/td><\/tr><tr><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"neutral\" aria-hidden=\"true\"><\/span>Inferred<\/span><\/td><td>reasoned from cited evidence; never a measurement<\/td><\/tr><tr><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"neutral\" aria-hidden=\"true\"><\/span>Estimated<\/span><\/td><td>Nexus analytical value with stated method<\/td><\/tr><tr><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"caution\" aria-hidden=\"true\"><\/span>Scenario<\/span><\/td><td>conditional on stated assumptions<\/td><\/tr><tr><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"neutral\" aria-hidden=\"true\"><\/span>Expert input<\/span><\/td><td>structured editorial judgement awaiting evidence<\/td><\/tr><\/tbody><\/table><\/div><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-ca-s2\" aria-labelledby=\"nx-nrp-xt-10-ca-s2-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-ca-s2-h\"><span class=\"nrp-num\">A.2<\/span><span>Model card, Cybersecurity and Cryptography System Model v0<\/span><\/h2><dl class=\"nrp-dl\"><dt>Model ID<\/dt><dd>MDL-XT10-CRYPTO \u00b7 v0.1<\/dd><dt>Purpose<\/dt><dd>represent cybersecurity and cryptography as protective infrastructure coupled to networks, devices, finance, workforce and regulation<\/dd><dt>Family<\/dt><dd>graph-based system of <a class=\"nx-link nx-term\" href=\"https:\/\/docs.therisk.global\/organization\/systems\" data-tc=\"Systems\" data-tk=\"Nexus Standards\" data-td=\"The twenty Nexus systems, NXS-CMD to NXS-LAB\">systems<\/a><\/dd><dt>Inputs<\/dt><dd>the cited sources of this edition; no proprietary data<\/dd><dt>Method<\/dt><dd>expert-specified coupling strengths (STRONG \u00b7 MODERATE \u00b7 WEAK) from assessments and analogue events<\/dd><dt>Validation<\/dt><dd>none yet, first validation against federation evidence in 2027<\/dd><dt>Uncertainty<\/dt><dd>qualitative; strengths are hypotheses, not measurements<\/dd><dt>Domain of validity<\/dt><dd>global scale; not for asset-, site- or country-level use<\/dd><dt>Reproducibility<\/dt><dd>strength table and sources published in this edition<\/dd><\/dl><div class=\"pp-cells nrp-cells-3\"><div class=\"nrp-cell\"><span class=\"pp-metric\">20<\/span><span class=\"nrp-cell-u\">couplings<\/span><p>typed in v0<\/p><\/div><div class=\"nrp-cell\"><span class=\"pp-metric\">0<\/span><span class=\"nrp-cell-u\">strong<\/span><p>documented within one season<\/p><\/div><div class=\"nrp-cell\"><span class=\"pp-metric\">0<\/span><span class=\"nrp-cell-u\">moderate<\/span><p>documented, buffered<\/p><\/div><div class=\"nrp-cell\"><span class=\"pp-metric\">20<\/span><span class=\"nrp-cell-u\">weak<\/span><p>plausible, undocumented<\/p><\/div><\/div><div class=\"nrp-split\"><div><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">SUITABLE FOR<\/p><p>framing the 2027 agenda; choosing which couplings to measure first; explaining the difference between finished standards and deployed migration.<\/p><\/aside><\/div><div><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">NOT SUITABLE FOR<\/p><p>quantitative loss estimates, country comparisons or rankings, operational decisions, or any claim about a specific asset.<\/p><\/aside><\/div><\/div><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">VERSIONING<\/p><p>Models are immutable by version. A change to any coupling, rule or weight produces v0.2 with its own card and correction note.<\/p><\/aside><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-ca-s3\" aria-labelledby=\"nx-nrp-xt-10-ca-s3-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-ca-s3-h\"><span class=\"nrp-num\">A.3<\/span><span>The baseline evidence cut<\/span><\/h2><p class=\"nrp-stand\">Every Nexus edition is published from a frozen evidence cut. The global baseline cut is documentary: it pins the exact edition of every source cited. Federation cuts begin with the first national Foundry cuts in 2027.<\/p><dl class=\"nrp-dl\"><dt>Cut ID<\/dt><dd>DC-XTECH-CRYPTO-GLOBAL-2026-B0<\/dd><dt>Type<\/dt><dd>baseline documentary cut<\/dd><dt>Resolution policy<\/dt><dd>pinned \u00b7 as of 30 September 2026<\/dd><dt>Sources pinned<\/dt><dd>44 cited sources, each at the edition and access date in the references<\/dd><dt>Model runs<\/dt><dd>none at baseline, analytical values are stated with their method<\/dd><dt>Digest<\/dt><dd>computed at <a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/nrs\/#nrs-h5\" data-tc=\"NHS-1 atmo.thermal.hard-freeze\" data-tk=\"Atmosphere and weather \u00b7 Thermal extremes\" data-td=\"Air temperature falling well below freezing for hours, killing crops, bursting pipes and stopping water flow.\" data-ts=\"NRS-H5\" data-tr=\"draft\" data-tx=\"https:\/\/risksindex.com\/hazards\/atmo\/\" data-txl=\"Atmosphere and weather\">freeze<\/a> and recorded in the publication record<\/dd><dt>Supersedes<\/dt><dd>nothing, first cut of the series<\/dd><dt>Superseded by<\/dt><dd>the 2027 cybersecurity and cryptography annual cut<\/dd><\/dl><h3 class=\"nrp-h3\">Lineage<\/h3><ol class=\"nrp-rows\"><li><span class=\"nrp-rows-i\">01<\/span><p class=\"nrp-rows-x\">source edition<\/p><\/li><li><span class=\"nrp-rows-i\">02<\/span><p class=\"nrp-rows-x\">pinned citation<\/p><\/li><li><span class=\"nrp-rows-i\">03<\/span><p class=\"nrp-rows-x\">finding<\/p><\/li><li><span class=\"nrp-rows-i\">04<\/span><p class=\"nrp-rows-x\">page<\/p><\/li><li><span class=\"nrp-rows-i\">05<\/span><p class=\"nrp-rows-x\">publication record<\/p><\/li><\/ol><div class=\"nrp-tblw\" id=\"nx-nrp-xt-10-ca-tab4\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table A.4<\/span><span class=\"nrp-tbl-t\">From the baseline cut to the federation cut<\/span><\/caption><thead><tr><th scope=\"col\">Element<\/th><th scope=\"col\">Baseline 2026<\/th><th scope=\"col\">2027 global annual<\/th><\/tr><\/thead><tbody><tr><td>Sources<\/td><td>cited global publications, pinned by edition<\/td><td>national, regional and sector cuts through one graph<\/td><\/tr><tr><td>Analysis<\/td><td>stated methods and editorial estimates<\/td><td>typed analysis specifications<\/td><\/tr><tr><td>Models<\/td><td>Cybersecurity and Cryptography System Model v0 specification<\/td><td>model runs with receipts<\/td><\/tr><tr><td>Findings<\/td><td>twelve baseline findings<\/td><td>findings re-bound to federation evidence<\/td><\/tr><tr><td>Review<\/td><td>five passes scheduled<\/td><td>five passes on the exact digest<\/td><\/tr><\/tbody><\/table><\/div><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-ca-s4\" aria-labelledby=\"nx-nrp-xt-10-ca-s4-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-ca-s4-h\"><span class=\"nrp-num\">A.4<\/span><span>Evidence age and coverage<\/span><\/h2><p class=\"nrp-stand\">A 2026 global edition rests on evidence observed in many different years. This page shows each time base, so that no single year label hides older evidence.<\/p><div class=\"nrp-tblw\" id=\"nx-nrp-xt-10-ca-tab5\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table A.5<\/span><span class=\"nrp-tbl-t\">Evidence age and coverage<\/span><\/caption><thead><tr><th scope=\"col\">Indicator<\/th><th scope=\"col\">Observed<\/th><th scope=\"col\">Released<\/th><th scope=\"col\">Cadence<\/th><th scope=\"col\">Next release<\/th><\/tr><\/thead><tbody><tr><td>Post-quantum standards<\/td><td>2024<\/td><td>Aug 2024<\/td><td>periodic<\/td><td>HQC draft<\/td><\/tr><tr><td>Transition report<\/td><td>2024 draft \u00b7 2026 final<\/td><td>Nov 2024 \u00b7 Oct 2026<\/td><td>periodic<\/td><td>next revision<\/td><\/tr><tr><td>NCSC timelines<\/td><td>2025<\/td><td>Mar 2025<\/td><td>periodic<\/td><td>next revision<\/td><\/tr><tr><td>EU roadmap<\/td><td>2025<\/td><td>Jun 2025<\/td><td>periodic<\/td><td>national roadmaps<\/td><\/tr><tr><td>Deployment analysis<\/td><td>2025<\/td><td>Oct 2025<\/td><td>continuous<\/td><td>next annual review<\/td><\/tr><tr><td>KEV count<\/td><td>2026<\/td><td>page read 2026-11-03<\/td><td>continuous<\/td><td>daily additions<\/td><\/tr><tr><td>FBI complaints and losses<\/td><td>2024<\/td><td>Apr 2025<\/td><td>annual<\/td><td>next annual report<\/td><\/tr><tr><td>Breach cost<\/td><td>2026<\/td><td>2026 report<\/td><td>annual<\/td><td>next annual report<\/td><\/tr><\/tbody><\/table><\/div><div class=\"nrp-tblw\" id=\"nx-nrp-xt-10-ca-tab6\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table A.6<\/span><span class=\"nrp-tbl-t\">Coverage by system at baseline<\/span><\/caption><thead><tr><th scope=\"col\">System<\/th><th scope=\"col\">Coverage<\/th><th scope=\"col\">Thinnest dimension<\/th><\/tr><\/thead><tbody><tr><td>Standards<\/td><td>GOOD<\/td><td>migration progress<\/td><\/tr><tr><td>Deployment<\/td><td>PARTIAL<\/td><td>signatures and devices<\/td><\/tr><tr><td>Governance<\/td><td>PARTIAL<\/td><td>roadmap text and dates<\/td><\/tr><tr><td>Threat records<\/td><td>PARTIAL<\/td><td>common incident basis<\/td><\/tr><tr><td>Cost<\/td><td>THIN<\/td><td>primary cost data<\/td><\/tr><tr><td>Workforce<\/td><td>THIN<\/td><td>size and gap<\/td><\/tr><tr><td>Supply<\/td><td>THIN<\/td><td>module and chip supply<\/td><\/tr><tr><td>Advanced cryptography<\/td><td>THIN<\/td><td>homomorphic encryption and zero-knowledge deployment<\/td><\/tr><\/tbody><\/table><\/div><div class=\"nrp-tblw\" id=\"nx-nrp-xt-10-ca-tab7\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table A.7<\/span><span class=\"nrp-tbl-t\">Designed empty states: what is not bound, what would fill it and why<\/span><\/caption><thead><tr><th scope=\"col\">Field<\/th><th scope=\"col\">Source that would fill it<\/th><th scope=\"col\">Blocker<\/th><\/tr><\/thead><tbody><tr><td>Post-quantum migration progress by sector and country<\/td><td>national agencies, regulators, sector bodies<\/td><td>no consolidated series found; CISA collects inventories but publishes no totals on the page read<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-ca-n12\" id=\"nx-nrp-xt-10-ca-r12\" aria-label=\"Note 12\">12<\/a><\/sup><\/td><\/tr><tr><td>Signature and certificate deployment on a common basis<\/td><td>certificate transparency data, browser and operating-system vendors<\/td><td>only one vendor analysis read; it expects first post-quantum certificates in 2026<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-ca-n23\" id=\"nx-nrp-xt-10-ca-r23\" aria-label=\"Note 23\">23<\/a><\/sup><\/td><\/tr><tr><td>Share of embedded and long-life devices that can receive cryptographic updates<\/td><td>device makers, sector regulators<\/td><td>not retrieved; no figure used<\/td><\/tr><tr><td>Milestones in the EU coordinated roadmap, from the primary document<\/td><td>European Commission roadmap document<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-ca-n11\" id=\"nx-nrp-xt-10-ca-r11\" aria-label=\"Note 11\">11<\/a><\/sup><\/td><td>the library page was read and states no milestones; dates come from secondary summaries<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-ca-n31\" id=\"nx-nrp-xt-10-ca-r31\" aria-label=\"Note 31\">31<\/a><\/sup><\/td><\/tr><tr><td>NSA CNSA 2.0 timetable from the NSA documents<\/td><td>NSA CNSA 2.0 publications<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-ca-n30\" id=\"nx-nrp-xt-10-ca-r30\" aria-label=\"Note 30\">30<\/a><\/sup><\/td><td>the NSA pages returned an access error; no date is used<\/td><\/tr><tr><td>NIST IR 8547 final text, including any dates for deprecating algorithms<\/td><td>NIST IR 8547 final PDF<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-ca-n5\" id=\"nx-nrp-xt-10-ca-r5\" aria-label=\"Note 5\">5<\/a><\/sup><\/td><td>published 27 October 2026, after the evidence close (post-close, context only); the page states no dates and the PDF was not opened; the baseline binds the November 2024 draft<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-ca-n44\" id=\"nx-nrp-xt-10-ca-r44\" aria-label=\"Note 44\">44<\/a><\/sup><\/td><\/tr><tr><td>Verizon DBIR statistics from the report itself<\/td><td>Verizon <a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/nrs\/#nrs-h51\" data-tc=\"NHS-1 cyber.intrusion.data-breach\" data-tk=\"Information and cyber-physical systems \u00b7 Malicious compromise\" data-td=\"Unauthorised access to, or release of, personal, commercial or operational data.\" data-ts=\"NRS-H51\" data-tr=\"draft\" data-tx=\"https:\/\/risksindex.com\/hazards\/cyber\/\" data-txl=\"Information and cyber-physical systems\">Data Breach<\/a> Investigations Report 2026<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-ca-n17\" id=\"nx-nrp-xt-10-ca-r17\" aria-label=\"Note 17\">17<\/a><\/sup><\/td><td>only the landing page was read; the sample size is not stated there<\/td><\/tr><tr><td>IBM Cost of a Data Breach details such as detection time<\/td><td>IBM report<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-ca-n18\" id=\"nx-nrp-xt-10-ca-r18\" aria-label=\"Note 18\">18<\/a><\/sup><\/td><td>the landing page gives the average cost and a few findings only<\/td><\/tr><tr><td>Chainalysis payments from the full report and off-chain payments<\/td><td>Chainalysis report and law-enforcement data<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-ca-n19\" id=\"nx-nrp-xt-10-ca-r19\" aria-label=\"Note 19\">19<\/a><\/sup><\/td><td>one blog page read; on-chain only; the 2024 total was revised<\/td><\/tr><tr><td>Time from vulnerability disclosure to exploitation on a common basis<\/td><td>CISA, vendors, CVE Program<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-ca-n13\" id=\"nx-nrp-xt-10-ca-r13\" aria-label=\"Note 13\">13<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-ca-n34\" id=\"nx-nrp-xt-10-ca-r34\" aria-label=\"Note 34\">34<\/a><\/sup><\/td><td>the CVE metrics page returned no figures; no series found<\/td><\/tr><tr><td>Global incident counts on a common basis<\/td><td>ENISA, Europol, national agencies<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-ca-n16\" id=\"nx-nrp-xt-10-ca-r16\" aria-label=\"Note 16\">16<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-ca-n35\" id=\"nx-nrp-xt-10-ca-r35\" aria-label=\"Note 35\">35<\/a><\/sup><\/td><td>the ENISA page gives a count of 4,875 incidents for the EU period; Europol was not retrieved<\/td><\/tr><tr><td>Cybersecurity workforce size and gap<\/td><td>ISC2, national statistics<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-ca-n20\" id=\"nx-nrp-xt-10-ca-r20\" aria-label=\"Note 20\">20<\/a><\/sup><\/td><td>ISC2 published no gap estimate in 2025; no other series read<\/td><\/tr><tr><td>Deployment of homomorphic encryption, zero-knowledge proofs and multiparty computation<\/td><td>standards bodies, vendors, national agencies<\/td><td>not retrieved; no figure used<\/td><\/tr><tr><td>Export-control and regulatory effects on cryptographic products<\/td><td>national authorities<\/td><td>not reviewed<\/td><\/tr><\/tbody><\/table><\/div><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-ca-s5\" aria-labelledby=\"nx-nrp-xt-10-ca-s5-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-ca-s5-h\"><span class=\"nrp-num\">A.5<\/span><span>Evidence cards, two anchor sources<\/span><\/h2><div class=\"nrp-cards\"><article class=\"nf-ui-card nrp-card\"><p class=\"nf-ui-eyebrow\">Published by the UK National Cyber Security Centre on 20 March 2025, version 1.0. Periodic guidance. Role: binds GOV-004. Coverage: UK guidance for organisations.<\/p><h3 class=\"nf-ui-title\" data-level=\"card\">EVD-XT10-001<\/h3><p>NCSC migration timelines<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-ca-n10\" id=\"nx-nrp-xt-10-ca-r10\" aria-label=\"Note 10\">10<\/a><\/sup><\/p><\/article><article class=\"nf-ui-card nrp-card\"><p class=\"nf-ui-eyebrow\">Issued by the US National Institute of Standards and Technology on 13 August 2024. One-off. Role: binds CRY-001 and the standards tiles. Coverage: US federal standards used globally.<\/p><h3 class=\"nf-ui-title\" data-level=\"card\">EVD-XT10-002<\/h3><p>NIST FIPS 203, 204 and 205 pages<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-ca-n1\" id=\"nx-nrp-xt-10-ca-r1\" aria-label=\"Note 1\">1<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-ca-n2\" id=\"nx-nrp-xt-10-ca-r2\" aria-label=\"Note 2\">2<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-ca-n3\" id=\"nx-nrp-xt-10-ca-r3\" aria-label=\"Note 3\">3<\/a><\/sup><\/p><\/article><\/div><div class=\"nrp-tblw\" id=\"nx-nrp-xt-10-ca-tab8\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table A.8<\/span><span class=\"nrp-tbl-t\">Quality dimensions at baseline<\/span><\/caption><thead><tr><th scope=\"col\">Dimension<\/th><th scope=\"col\">EVD-XT10-001<\/th><th scope=\"col\">EVD-XT10-002<\/th><\/tr><\/thead><tbody><tr><td>Completeness<\/td><td>three milestone years; no sector detail<\/td><td>three standards; HQC backup in preparation<\/td><\/tr><tr><td>Timeliness<\/td><td>published March 2025<\/td><td>issued at publication<\/td><\/tr><tr><td>Revision<\/td><td>version 1.0 at the read<\/td><td>errata noted for future revision<\/td><\/tr><tr><td>Method transparency<\/td><td>guidance text public<\/td><td>selection process published<\/td><\/tr><tr><td>External validation<\/td><td>agency authority<\/td><td>public review rounds<\/td><\/tr><\/tbody><\/table><\/div><h3 class=\"nrp-h3\">Evidence cards to follow in 2027<\/h3><ul class=\"nrp-list\"><li>NIST IR 8547 final<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-ca-n5\" aria-label=\"Note 5\">5<\/a><\/sup>: dates for algorithms, if any, in the PDF<\/li><li>European Commission<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-ca-n11\" aria-label=\"Note 11\">11<\/a><\/sup>: roadmap document with milestones<\/li><li>NSA<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-ca-n30\" aria-label=\"Note 30\">30<\/a><\/sup>: CNSA 2.0 documents<\/li><li>Verizon<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-ca-n17\" aria-label=\"Note 17\">17<\/a><\/sup> and IBM<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-ca-n18\" aria-label=\"Note 18\">18<\/a><\/sup>: full reports<\/li><\/ul><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-ca-s6\" aria-labelledby=\"nx-nrp-xt-10-ca-s6-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-ca-s6-h\"><span class=\"nrp-num\">A.6<\/span><span>Publication acceptance record<\/span><\/h2><p class=\"nrp-stand\">Editorial self-check at evidence close. Every applicable item carries a disposition; the remaining items are review, approval and deposit.<\/p><div class=\"nrp-tblw\" id=\"nx-nrp-xt-10-ca-tab9\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table A.9<\/span><span class=\"nrp-tbl-t\">Publication acceptance record<\/span><\/caption><thead><tr><th scope=\"col\">Group<\/th><th scope=\"col\">Area<\/th><th scope=\"col\">Items<\/th><th scope=\"col\">Pass<\/th><th scope=\"col\">N\/A<\/th><th scope=\"col\">Pending<\/th><\/tr><\/thead><tbody><tr><td>D1<\/td><td>Identity and scope<\/td><td>8<\/td><td>8<\/td><td>0<\/td><td>0<\/td><\/tr><tr><td>D2<\/td><td>Source and data<\/td><td>12<\/td><td>9<\/td><td>1<\/td><td>2<\/td><\/tr><tr><td>D3<\/td><td>Analysis and models<\/td><td>12<\/td><td>3<\/td><td>8<\/td><td>1<\/td><\/tr><tr><td>D4<\/td><td>Findings and claims<\/td><td>9<\/td><td>8<\/td><td>0<\/td><td>1<\/td><\/tr><tr><td>D5<\/td><td>Figures, tables, maps<\/td><td>10<\/td><td>6<\/td><td>2<\/td><td>2<\/td><\/tr><tr><td>D6<\/td><td>Editorial and citations<\/td><td>10<\/td><td>8<\/td><td>0<\/td><td>2<\/td><\/tr><tr><td>D7<\/td><td>Review and approval<\/td><td>13<\/td><td>0<\/td><td>0<\/td><td>13<\/td><\/tr><tr><td>D8<\/td><td>Artefact and design<\/td><td>12<\/td><td>7<\/td><td>0<\/td><td>5<\/td><\/tr><tr><td>D9<\/td><td>Registry and release<\/td><td>9<\/td><td>0<\/td><td>0<\/td><td>9<\/td><\/tr><\/tbody><\/table><\/div><div class=\"nrp-split\"><div><h3 class=\"nrp-h3\">Publication gate<\/h3><dl class=\"nrp-dl\"><dt>Conditions met<\/dt><dd>14 of 23 at evidence close<\/dd><dt>Blocking problems<\/dt><dd>none recorded<\/dd><dt>Open conditions<\/dt><dd>reviews, approval of the exact digest, deposit, registry pointer<\/dd><\/dl><\/div><div><h3 class=\"nrp-h3\">Not applicable at baseline<\/h3><dl class=\"nrp-dl\"><dt>Model runs<\/dt><dd>first runs in Q1 2027<\/dd><dt>Maps<\/dt><dd>plates in Q2 2027<\/dd><dt>Waivers<\/dt><dd>none<\/dd><\/dl><\/div><\/div><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">evidence<\/p><p>Dispositions are recorded item by item in the machine-readable checklist. A FAIL on any item blocks release.<\/p><\/aside><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-ca-s7\" aria-labelledby=\"nx-nrp-xt-10-ca-s7-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-ca-s7-h\"><span class=\"nrp-num\">A.7<\/span><span>Status words<\/span><\/h2><div class=\"nrp-tblw\" id=\"nx-nrp-xt-10-ca-tab10\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table A.10<\/span><span class=\"nrp-tbl-t\">The status every value carries<\/span><\/caption><thead><tr><th scope=\"col\">Status<\/th><th scope=\"col\">What it means<\/th><\/tr><\/thead><tbody><tr><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"positive\" aria-hidden=\"true\"><\/span>Observed<\/span><\/td><td>Measured directly and published by the source.<\/td><\/tr><tr><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><td>Published statistics of an official or institutional source.<\/td><\/tr><tr><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Declared<\/span><\/td><td>Stated by the body concerned; not independently measured.<\/td><\/tr><tr><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"neutral\" aria-hidden=\"true\"><\/span>Estimated<\/span><\/td><td>A Nexus estimate from cited evidence, with its method in Annex A.<\/td><\/tr><tr><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"neutral\" aria-hidden=\"true\"><\/span>Modelled<\/span><\/td><td>Produced by a stated model from cited inputs.<\/td><\/tr><tr><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"neutral\" aria-hidden=\"true\"><\/span>Inferred<\/span><\/td><td>Reasoned from cited evidence; not measured.<\/td><\/tr><tr><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"caution\" aria-hidden=\"true\"><\/span>Forecast<\/span><\/td><td>A projection by the cited source.<\/td><\/tr><tr><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"caution\" aria-hidden=\"true\"><\/span>Simulated<\/span><\/td><td>A simulation result under stated assumptions.<\/td><\/tr><tr><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"caution\" aria-hidden=\"true\"><\/span>Scenario<\/span><\/td><td>A conditional statement under stated assumptions; never a prediction.<\/td><\/tr><tr><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"neutral\" aria-hidden=\"true\"><\/span>Expert input<\/span><\/td><td>Expert judgement, recorded with its basis.<\/td><\/tr><tr><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"caution\" aria-hidden=\"true\"><\/span>Candidate<\/span><\/td><td>Proposed for a later edition; not yet evidence.<\/td><\/tr><\/tbody><tfoot><tr><td colspan=\"2\">Evidence-quality levels (EQL 1 to 5) grade the source behind a value; they are not a score of the subject.<\/td><\/tr><\/tfoot><\/table><\/div><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-ca-s8\" aria-labelledby=\"nx-nrp-xt-10-ca-s8-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-ca-s8-h\"><span class=\"nrp-num\">A.8<\/span><span>How the edition is made, released and corrected<\/span><\/h2><p class=\"nx-p\">Every edition is built from a sealed evidence cut, reviewed under three keys, signed and deposited before any site shows it as published; corrections go to <a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/\" data-tc=\"Nexus Standards\" data-tk=\"Nexus Standards\" data-td=\"The foundation standards\">Nexus Standards<\/a> as change proposals and feed the next cut.<\/p><div class=\"nx-table-wrap\"><table class=\"nx-table\" data-stack=\"true\"><thead><tr><th scope=\"col\">Step<\/th><th scope=\"col\">What happens<\/th><th scope=\"col\">Source<\/th><\/tr><\/thead><tbody><tr><td data-label=\"Step\">01 Evidence arrives from the pillars<\/td><td data-label=\"What happens\">Foundry seals observations and indicator series, Universe hands over after-action and scenario findings, and contributions are screened at every gateway, including this site&#8217;s.<\/td><td data-label=\"Source\"><\/td><\/tr><tr><td data-label=\"Step\">02 The cut is sealed<\/td><td data-label=\"What happens\">On the cut date the evidence is pinned under one identifier, so anyone can rebuild the edition from exactly what it was built on.<\/td><td data-label=\"Source\"><\/td><\/tr><tr><td data-label=\"Step\">03 The edition is assembled<\/td><td data-label=\"What happens\">The edition is drafted from its template and content pack. Agents may draft; they never publish and never decide.<\/td><td data-label=\"Source\"><\/td><\/tr><tr><td data-label=\"Step\">04 The keys turn<\/td><td data-label=\"What happens\">At the publisher of record the truth key comes first: every value is checked against its source or stated method before the meaning and capital keys turn. No edition moves on until every key has been turned by a named steward.<\/td><td data-label=\"Source\"><\/td><\/tr><tr><td data-label=\"Step\">05 The gate opens<\/td><td data-label=\"What happens\">A named approver releases one exact digest of the edition; any change after this point is a new version, never a silent edit.<\/td><td data-label=\"Source\"><\/td><\/tr><tr><td data-label=\"Step\">06 Signed and deposited<\/td><td data-label=\"What happens\">The PDF, the web edition and the data bundle are signed together with a manifest and an RO-Crate description, and deposited on Zenodo with a concept and a version DOI.<\/td><td data-label=\"Source\"><\/td><\/tr><tr><td data-label=\"Step\">07 Published on its desk&#8217;s site<\/td><td data-label=\"What happens\">Only then does the edition show as published on its desk&#8217;s Reports site, and the Collection lists it as a part.<\/td><td data-label=\"Source\"><\/td><\/tr><tr><td data-label=\"Step\">08 Corrections go to Standards<\/td><td data-label=\"What happens\">Method and correction findings go to Nexus Standards as change proposals; citations, corrections and new contributions feed the next evidence cut.<\/td><td data-label=\"Source\"><\/td><\/tr><\/tbody><\/table><\/div><p class=\"nx-note nx-mt-2\">A teaching model of the process, not a forecast and not a record of any run; dates and counts on this page come from the programme record. Sources: <a class=\"nx-link\" href=\"https:\/\/therisk.global\/nexus-reports\/governance\/\" rel=\"noopener\">Reports governance at GCRI Canada<\/a> (2026); Zenodo, repository of record for Reports deposits (2026).<\/p><p class=\"nrp-note\">Lifecycle, one state at a time: Draft, Computed, Evidence bound, Reviewed, Approved for release, Published, Corrected, Superseded. This edition is a draft.<\/p><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-ca-s9\" aria-labelledby=\"nx-nrp-xt-10-ca-s9-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-ca-s9-h\"><span class=\"nrp-num\">A.9<\/span><span>Glossary and abbreviations<\/span><\/h2><div class=\"nrp-tblw\" id=\"nx-nrp-xt-10-ca-tab11\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table A.11<\/span><span class=\"nrp-tbl-t\">Series terms<\/span><\/caption><thead><tr><th scope=\"col\">Term<\/th><th scope=\"col\">Meaning<\/th><\/tr><\/thead><tbody><tr><td>Baseline Edition<\/td><td>the inaugural annual edition that fixes the reference state for the series<\/td><\/tr><tr><td>WEFH+B<\/td><td>water, energy, food, health and biodiversity, the <a class=\"nx-link nx-term\" href=\"https:\/\/docs.therisk.global\/organization\/governance-in-operation\/national-nexus\" data-tc=\"National Nexus\" data-tk=\"Nexus Standards\" data-td=\"The national model: the NNC, the NLC and the NWG as its three participation pillars, with the National Desk, Model and Portfolio and the NSC as the standards function of the NNC (OR-13)\">national nexus<\/a> core<\/td><\/tr><tr><td>Coupling<\/td><td>a typed dependency through which one system transmits to another<\/td><\/tr><tr><td><a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/nrs\/#nrs-c1\" data-tc=\"NRS-C1 protection-gap\" data-tk=\"Nexus risk vocabulary\" data-td=\"The difference between total economic losses from hazards and the share covered by insurance or other pre-arranged protection, leaving households, firms and governments to absorb the rest.\" data-ts=\"NRS-C1\" data-tr=\"draft\" data-tg=\"https:\/\/globalriskalliance.com\/glossary\/protection-gap\/\" data-tgl=\"Global Risks Alliance glossary\">Protection gap<\/a><\/td><td>the share of losses not covered by insurance<\/td><\/tr><tr><td>Capability ladder<\/td><td>LISTED \u2192 EXISTS \u2192 ADEQUATE \u2192 TESTED \u2192 DEMONSTRATED<\/td><\/tr><tr><td>EQL<\/td><td>evidence-quality level, 1\u20135<\/td><\/tr><tr><td>Evidence cut<\/td><td>a frozen resolution of exact sources and versions<\/td><\/tr><tr><td>NNC \u00b7 NLC \u00b7 NWG<\/td><td>National Nexus Consortium \u00b7 National Leadership Council \u00b7 National Working Groups<\/td><\/tr><\/tbody><\/table><\/div><div class=\"nrp-tblw\" id=\"nx-nrp-xt-10-ca-tab12\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table A.12<\/span><span class=\"nrp-tbl-t\">Abbreviations used in this edition<\/span><\/caption><thead><tr><th scope=\"col\">Abbreviation<\/th><th scope=\"col\">Expansion<\/th><\/tr><\/thead><tbody><tr><td>CBOM<\/td><td>cryptographic bill of materials<\/td><\/tr><tr><td>CVE<\/td><td>Common Vulnerabilities and Exposures<\/td><\/tr><tr><td>FIPS<\/td><td>Federal Information Processing Standard<\/td><\/tr><tr><td>HQC<\/td><td>Hamming quasi-cyclic key-encapsulation method<\/td><\/tr><tr><td>IC3<\/td><td>FBI Internet Crime Complaint Center<\/td><\/tr><tr><td>IR<\/td><td>NIST Internal Report<\/td><\/tr><tr><td>KEV<\/td><td>Known Exploited Vulnerabilities<\/td><\/tr><tr><td>ML-DSA<\/td><td>module-lattice digital signature algorithm<\/td><\/tr><tr><td>ML-KEM<\/td><td>module-lattice key-encapsulation mechanism<\/td><\/tr><tr><td>NCSC<\/td><td>UK National Cyber Security Centre<\/td><\/tr><tr><td>SLH-DSA<\/td><td>stateless hash-based digital signature algorithm<\/td><\/tr><tr><td>TLS<\/td><td>Transport Layer Security<\/td><\/tr><\/tbody><\/table><\/div><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-ca-s10\" aria-labelledby=\"nx-nrp-xt-10-ca-s10-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-ca-s10-h\"><span class=\"nrp-num\">A.10<\/span><span>Technical annex<\/span><\/h2><div class=\"nrp-tblw\" id=\"nx-nrp-xt-10-ca-tab13\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table A.13<\/span><span class=\"nrp-tbl-t\">Technical annex<\/span><\/caption><thead><tr><th scope=\"col\">Item<\/th><th scope=\"col\">Annex<\/th><th scope=\"col\">Contents<\/th><th scope=\"col\">Status<\/th><\/tr><\/thead><tbody><tr><td>A.1<\/td><td>Indicator definitions<\/td><td>the global indicator set, with units and sources<\/td><td>IN THIS EDITION<\/td><\/tr><tr><td>A.2<\/td><td>Coupling strengths<\/td><td>the twenty-cell matrix and its rationale<\/td><td>IN THIS EDITION<\/td><\/tr><tr><td>A.3<\/td><td>Scenario specification<\/td><td>SCN-XT10-SIG-01 assumptions and signposts<\/td><td>IN THIS EDITION<\/td><\/tr><tr><td>A.4<\/td><td>Capability placements<\/td><td>rung evidence for fifteen functions<\/td><td>IN THIS EDITION<\/td><\/tr><tr><td>A.5<\/td><td>Model diagnostics<\/td><td>first runs and validation<\/td><td>2027<\/td><\/tr><tr><td>A.6<\/td><td>Sensitivity analyses<\/td><td>influence of coupling strengths<\/td><td>2027<\/td><\/tr><tr><td>A.7<\/td><td>Cluster notes<\/td><td>cards for the major deployment and threat clusters<\/td><td>2027<\/td><\/tr><tr><td>A.8<\/td><td>Review statements<\/td><td>pass-by-pass review record<\/td><td>AT RELEASE<\/td><\/tr><\/tbody><\/table><\/div><h3 class=\"nrp-h3\">A.1 \u00b7 indicator definition: post-quantum share of human traffic<\/h3><dl class=\"nrp-dl\"><dt>Construct<\/dt><dd>share of human-initiated web requests to one network that use hybrid post-quantum key agreement<\/dd><dt>Unit<\/dt><dd>percent of requests<\/dd><dt>Method<\/dt><dd>vendor measurement on its own network, excluding automated traffic<\/dd><dt>Source<\/dt><dd>Cloudflare analysis, 2025<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-ca-n23\" aria-label=\"Note 23\">23<\/a><\/sup><\/dd><dt>Uncertainty<\/dt><dd>the post states a majority and later over 50%; no exact value was read<\/dd><dt>Known limits<\/dt><dd>one network; client support drives the figure; signatures are not covered<\/dd><\/dl><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">evidence<\/p><p>Annexes carry the same evidence, review and correction rules as the chapters and are versioned with the edition.<\/p><\/aside><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-ca-notes\" aria-labelledby=\"nx-nrp-xt-10-ca-notes-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-ca-notes-h\"><span>Notes<\/span><\/h2><p class=\"nrp-note\">Numbers are the edition&#8217;s reference numbers, so a note reads the same in every chapter. The full list, with every source and its licence, is in Annex C. <a href=\"https:\/\/therisk.global\/nexus-reports\/editions\/xt-10\/references\/\">Annex C, references<\/a><\/p><ol class=\"nrp-notes\"><li id=\"nx-nrp-xt-10-ca-n12\"><span class=\"nrp-notes-n\">12<\/span><span>CISA (ed.), Post-Quantum Cryptography Initiative (page; key dates, federal inventory duty under 6 U.S.C. 1526, product categories list, references to Executive Orders 14306, 14412 and 14413 and OMB Memorandum M-26-15). Cybersecurity and Infrastructure Security Agency, Arlington. Observation year 2026. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-ca-r12\" aria-label=\"Back to the first call of note 12\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-ca-n23\"><span class=\"nrp-notes-n\">23<\/span><span>Cloudflare (ed.), The state of the post-quantum Internet in 2025 (blog analysis; late October 2025 majority of human traffic with post-quantum key agreement; 3.7% of origins; 39% of top 100,000 domains in September 2025; ML-DSA-44 about 15 kB; first post-quantum certificates expected in 2026). Cloudflare, San Francisco. Vendor analysis of its own network, weak evidence. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-ca-r23\" aria-label=\"Back to the first call of note 23\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-ca-n11\"><span class=\"nrp-notes-n\">11<\/span><span>European Commission (ed.), Coordinated Implementation Roadmap for the transition to Post-Quantum Cryptography (library page; published 23 June 2025; the milestones were not on the page). Directorate-General for Communications Networks, Content and Technology, Brussels. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-ca-r11\" aria-label=\"Back to the first call of note 11\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-ca-n31\"><span class=\"nrp-notes-n\">31<\/span><span>UNVERIFIED, not opened: NIS Cooperation Group (ed.), Coordinated Implementation Roadmap for the Transition to Post-Quantum Cryptography (national roadmaps by the end of 2026, high-risk use cases by 2030, as many <a class=\"nx-link nx-term\" href=\"https:\/\/docs.therisk.global\/organization\/systems\" data-tc=\"Systems\" data-tk=\"Nexus Standards\" data-td=\"The twenty Nexus systems, NXS-CMD to NXS-LAB\">systems<\/a> as feasible by 2035), taken from secondary summaries in an earlier edition of this series; the milestones were not on the page read. European Commission, Brussels. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-ca-r31\" aria-label=\"Back to the first call of note 31\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-ca-n30\"><span class=\"nrp-notes-n\">30<\/span><span>UNVERIFIED, not opened: NSA (ed.), Commercial National Security Algorithm Suite 2.0 advisory and FAQ, cited from memory; the NSA pages returned an access error and no date is used. National Security Agency, Fort Meade. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-ca-r30\" aria-label=\"Back to the first call of note 30\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-ca-n5\"><span class=\"nrp-notes-n\">5<\/span><span>POST-CLOSE, context only: NIST (ed.), Transition to Post-Quantum Cryptography Standards, NIST IR 8547, final (publication page; document history 27 October 2026, after the 30 September evidence close; abstract refers to Executive Order 14412 and OMB Memorandum M-26-15; no dates on the page; PDF not opened). National Institute of Standards and Technology, Gaithersburg. Observation year 2026. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-ca-r5\" aria-label=\"Back to the first call of note 5\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-ca-n44\"><span class=\"nrp-notes-n\">44<\/span><span>NIST (ed.), Transition to Post-Quantum Cryptography Standards, NIST IR 8547, initial public draft (draft PDF, November 2024; Tables 2 and 4: for quantum-vulnerable signature and key-establishment schemes at 112 bits of security strength, deprecated after 2030 and disallowed after 2035, and at 128 bits or more, disallowed after 2035; the cover sheet added on withdrawal on 27 October 2026 is not used). National Institute of Standards and Technology, Gaithersburg. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-ca-r44\" aria-label=\"Back to the first call of note 44\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-ca-n17\"><span class=\"nrp-notes-n\">17<\/span><span>Verizon (ed.), 2026 <a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/nrs\/#nrs-h51\" data-tc=\"NHS-1 cyber.intrusion.data-breach\" data-tk=\"Information and cyber-physical systems \u00b7 Malicious compromise\" data-td=\"Unauthorised access to, or release of, personal, commercial or operational data.\" data-ts=\"NRS-H51\" data-tr=\"draft\" data-tx=\"https:\/\/risksindex.com\/hazards\/cyber\/\" data-txl=\"Information and cyber-physical systems\">Data Breach<\/a> Investigations Report (landing page; period 1 November 2024 to 31 October 2025; 48% of breaches involve ransomware; 31% begin with exploited vulnerabilities). Verizon Business, New York. Vendor report, weak evidence; the full report was not opened. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-ca-r17\" aria-label=\"Back to the first call of note 17\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-ca-n18\"><span class=\"nrp-notes-n\">18<\/span><span>IBM and Ponemon Institute (eds.), Cost of a Data Breach Report 2026 (landing page; global average USD 4.99 million, up 12%; AI-driven attacks up 56%). IBM, Armonk. Vendor report, weak evidence; the full report was not opened. Observation year 2026. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-ca-r18\" aria-label=\"Back to the first call of note 18\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-ca-n19\"><span class=\"nrp-notes-n\">19<\/span><span>Chainalysis (ed.), ransomware analysis (blog page; more than USD 820 million on-chain in 2025, down 8% from an updated USD 892 million for 2024; original 2024 estimate USD 813 million). Chainalysis, New York. Vendor estimate, weak evidence. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-ca-r19\" aria-label=\"Back to the first call of note 19\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-ca-n13\"><span class=\"nrp-notes-n\">13<\/span><span>POST-CLOSE, context only: CISA (ed.), Known Exploited Vulnerabilities Catalog (catalogue page; 1,767 results at the read; newest entry added 2026-11-03). Cybersecurity and Infrastructure Security Agency, Arlington. Observation year 2026. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-ca-r13\" aria-label=\"Back to the first call of note 13\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-ca-n34\"><span class=\"nrp-notes-n\">34<\/span><span>UNVERIFIED, not opened: CVE Program (ed.), CVE metrics page; the page returned no figures. MITRE, Bedford. Observation year 2026. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-ca-r34\" aria-label=\"Back to the first call of note 34\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-ca-n16\"><span class=\"nrp-notes-n\">16<\/span><span>European Union Agency for Cybersecurity (ed.), ENISA Threat Landscape 2025 (publication page; period 1 July 2024 to 30 June 2025; 4,875 incidents analysed; version 1.3 of 22 September 2026 corrected figures; PDF not opened). ENISA, Athens. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-ca-r16\" aria-label=\"Back to the first call of note 16\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-ca-n35\"><span class=\"nrp-notes-n\">35<\/span><span>UNVERIFIED, not opened: Europol (ed.), Internet Organised Crime Threat Assessment 2025, cited from memory; the page returned an error. Europol, The Hague. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-ca-r35\" aria-label=\"Back to the first call of note 35\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-ca-n20\"><span class=\"nrp-notes-n\">20<\/span><span>ISC2 (ed.), 2025 Cybersecurity Workforce Study (page; published 4 December 2025; 16,029 respondents; 59% critical or significant skills needs, up from 44%; no workforce gap estimate). ISC2, Alexandria. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-ca-r20\" aria-label=\"Back to the first call of note 20\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-ca-n10\"><span class=\"nrp-notes-n\">10<\/span><span>UK National Cyber Security Centre (ed.), Timelines for migration to post-quantum cryptography (guidance page; version 1.0, 20 March 2025; milestones 2028, 2031 and 2035). NCSC, London. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-ca-r10\" aria-label=\"Back to the first call of note 10\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-ca-n1\"><span class=\"nrp-notes-n\">1<\/span><span>NIST (ed.), Module-Lattice-Based Key-Encapsulation Mechanism Standard, FIPS 203 (publication page; final 13 August 2024; ML-KEM-512, ML-KEM-768 and ML-KEM-1024; initial draft 24 August 2023). National Institute of Standards and Technology, Gaithersburg. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-ca-r1\" aria-label=\"Back to the first call of note 1\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-ca-n2\"><span class=\"nrp-notes-n\">2<\/span><span>NIST (ed.), Module-Lattice-Based Digital Signature Standard, FIPS 204 (publication page; final 13 August 2024; ML-DSA). National Institute of Standards and Technology, Gaithersburg. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-ca-r2\" aria-label=\"Back to the first call of note 2\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-ca-n3\"><span class=\"nrp-notes-n\">3<\/span><span>NIST (ed.), Stateless Hash-Based Digital Signature Standard, FIPS 205 (publication page; final 13 August 2024; SLH-DSA, based on SPHINCS+). National Institute of Standards and Technology, Gaithersburg. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-ca-r3\" aria-label=\"Back to the first call of note 3\">back<\/a><\/span><\/li><\/ol><\/section><\/div><div class=\"nrp-part\" id=\"nx-nrp-xt-10-part-data\"><header class=\"nrp-chap-head\" id=\"nx-nrp-xt-10-cb-top\"><ul class=\"nrp-eyerow\"><li class=\"nf-ui-eyebrow\"><a href=\"https:\/\/therisk.global\/nexus-reports\/editions\/xt-10\/\">Cybersecurity and Advanced Cryptography 2026<\/a><\/li><li class=\"nf-ui-eyebrow\">Annex B<\/li><\/ul><span class=\"nrp-rule\" aria-hidden=\"true\"><\/span><h2 class=\"pp-hero-title\">Data appendix<\/h2><p class=\"nrp-lede\">The indicator set with its sources, the source registers, the licences of every kind of material and the formats of the edition.<\/p><p class=\"nrp-chap-meta\"><span>10 min read<\/span><span>0 figures<\/span><span>8 tables<\/span><span>21 notes<\/span><span>NR-XTECH-CRYPTO-GLOBAL-2026-BASELINE<\/span><\/p><\/header><section class=\"nrp-block\" id=\"nx-nrp-xt-10-cb-s1\" aria-labelledby=\"nx-nrp-xt-10-cb-s1-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-cb-s1-h\"><span class=\"nrp-num\">B.1<\/span><span>The indicator set<\/span><\/h2><div class=\"nrp-tblw\" id=\"nx-nrp-xt-10-cb-tab1\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table B.1<\/span><span class=\"nrp-tbl-t\">Global baseline indicator set<\/span><\/caption><thead><tr><th scope=\"col\">Indicator<\/th><th scope=\"col\">Value<\/th><th scope=\"col\">Unit<\/th><th scope=\"col\">Year<\/th><th scope=\"col\">State<\/th><th scope=\"col\">Source<\/th><\/tr><\/thead><tbody><tr><td>NIST post-quantum standards finalised<\/td><td><span class=\"nrp-mono\">3<\/span><\/td><td>standards<\/td><td>2024<\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cb-n1\" id=\"nx-nrp-xt-10-cb-r1\" aria-label=\"Note 1\">1<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cb-n2\" id=\"nx-nrp-xt-10-cb-r2\" aria-label=\"Note 2\">2<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cb-n3\" id=\"nx-nrp-xt-10-cb-r3\" aria-label=\"Note 3\">3<\/a><\/sup><\/td><\/tr><tr><td>ML-KEM parameter sets<\/td><td><span class=\"nrp-mono\">3<\/span><\/td><td>sets<\/td><td>2024<\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cb-n1\" aria-label=\"Note 1\">1<\/a><\/sup><\/td><\/tr><tr><td>NIST IR 8547 initial draft published<\/td><td><span class=\"nrp-mono\">12 Nov<\/span><\/td><td>date<\/td><td>2024<\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cb-n44\" id=\"nx-nrp-xt-10-cb-r44\" aria-label=\"Note 44\">44<\/a><\/sup><\/td><\/tr><tr><td>NIST IR 8547 draft: algorithms disallowed after<\/td><td><span class=\"nrp-mono\">2035<\/span><\/td><td>year<\/td><td>2024<\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cb-n44\" aria-label=\"Note 44\">44<\/a><\/sup><\/td><\/tr><tr><td>Post-close, context only: NIST IR 8547 final published<\/td><td><span class=\"nrp-mono\">27 Oct<\/span><\/td><td>date<\/td><td>2026<\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cb-n5\" id=\"nx-nrp-xt-10-cb-r5\" aria-label=\"Note 5\">5<\/a><\/sup><\/td><\/tr><tr><td>HQC selection announced<\/td><td><span class=\"nrp-mono\">11 Mar<\/span><\/td><td>date<\/td><td>2025<\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cb-n6\" id=\"nx-nrp-xt-10-cb-r6\" aria-label=\"Note 6\">6<\/a><\/sup><\/td><\/tr><tr><td>NCSC first milestone<\/td><td><span class=\"nrp-mono\">2028<\/span><\/td><td>year<\/td><td>2025<\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cb-n10\" id=\"nx-nrp-xt-10-cb-r10\" aria-label=\"Note 10\">10<\/a><\/sup><\/td><\/tr><tr><td>NCSC last milestone<\/td><td><span class=\"nrp-mono\">2035<\/span><\/td><td>year<\/td><td>2025<\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cb-n10\" aria-label=\"Note 10\">10<\/a><\/sup><\/td><\/tr><tr><td>RSA-2048 noisy-qubit estimate<\/td><td><span class=\"nrp-mono\">&lt;1<\/span><\/td><td>million<\/td><td>2025<\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cb-n22\" id=\"nx-nrp-xt-10-cb-r22\" aria-label=\"Note 22\">22<\/a><\/sup><\/td><\/tr><tr><td>Assumed gate error in estimate<\/td><td><span class=\"nrp-mono\">0.1<\/span><\/td><td>%<\/td><td>2025<\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cb-n22\" aria-label=\"Note 22\">22<\/a><\/sup><\/td><\/tr><tr><td>Origin servers supporting post-quantum key agreement<\/td><td><span class=\"nrp-mono\">3.7<\/span><\/td><td>%<\/td><td>2025<\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cb-n23\" id=\"nx-nrp-xt-10-cb-r23\" aria-label=\"Note 23\">23<\/a><\/sup><\/td><\/tr><tr><td>ML-DSA-44 signature added to a TLS handshake<\/td><td><span class=\"nrp-mono\">\u224815<\/span><\/td><td>kB<\/td><td>2025<\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cb-n23\" aria-label=\"Note 23\">23<\/a><\/sup><\/td><\/tr><tr><td>CISA KEV entries<\/td><td><span class=\"nrp-mono\">NOT BOUND<\/span><\/td><td>entries<\/td><td>2026<\/td><td>NOT BOUND<\/td><td><\/td><\/tr><tr><td>Agencies co-sealing the 2025 advisory<\/td><td><span class=\"nrp-mono\">23<\/span><\/td><td>agencies<\/td><td>2025<\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cb-n14\" id=\"nx-nrp-xt-10-cb-r14\" aria-label=\"Note 14\">14<\/a><\/sup><\/td><\/tr><tr><td>FBI complaints<\/td><td><span class=\"nrp-mono\">859,532<\/span><\/td><td>complaints<\/td><td>2024<\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cb-n15\" id=\"nx-nrp-xt-10-cb-r15\" aria-label=\"Note 15\">15<\/a><\/sup><\/td><\/tr><tr><td>FBI reported losses<\/td><td><span class=\"nrp-mono\">16.6<\/span><\/td><td>USD billion<\/td><td>2024<\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cb-n15\" aria-label=\"Note 15\">15<\/a><\/sup><\/td><\/tr><tr><td>Incidents analysed in the ENISA period<\/td><td><span class=\"nrp-mono\">4,875<\/span><\/td><td>incidents<\/td><td>2025<\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cb-n16\" id=\"nx-nrp-xt-10-cb-r16\" aria-label=\"Note 16\">16<\/a><\/sup><\/td><\/tr><\/tbody><\/table><\/div><div class=\"nrp-actions nrp-noprint\"><a class=\"nf-ui-btn\" data-variant=\"secondary\" href=\"data:text\/csv;charset=utf-8,Indicator%2CValue%2CUnit%2CYear%2CState%2CSource%0ANIST%20post-quantum%20standards%20finalised%2C3%2Cstandards%2C2024%2CREPORTED%2C%5B1%5D%20%5B2%5D%20%5B3%5D%0AML-KEM%20parameter%20sets%2C3%2Csets%2C2024%2CREPORTED%2C%5B1%5D%0ANIST%20IR%208547%20initial%20draft%20published%2C12%20Nov%2Cdate%2C2024%2CREPORTED%2C%5B44%5D%0ANIST%20IR%208547%20draft%3A%20algorithms%20disallowed%20after%2C2035%2Cyear%2C2024%2CREPORTED%2C%5B44%5D%0A%22Post-close%2C%20context%20only%3A%20NIST%20IR%208547%20final%20published%22%2C27%20Oct%2Cdate%2C2026%2CREPORTED%2C%5B5%5D%0AHQC%20selection%20announced%2C11%20Mar%2Cdate%2C2025%2CREPORTED%2C%5B6%5D%0ANCSC%20first%20milestone%2C2028%2Cyear%2C2025%2CREPORTED%2C%5B10%5D%0ANCSC%20last%20milestone%2C2035%2Cyear%2C2025%2CREPORTED%2C%5B10%5D%0ARSA-2048%20noisy-qubit%20estimate%2C%3C1%2Cmillion%2C2025%2CREPORTED%2C%5B22%5D%0AAssumed%20gate%20error%20in%20estimate%2C0.1%2C%25%2C2025%2CREPORTED%2C%5B22%5D%0AOrigin%20servers%20supporting%20post-quantum%20key%20agreement%2C3.7%2C%25%2C2025%2CREPORTED%2C%5B23%5D%0AML-DSA-44%20signature%20added%20to%20a%20TLS%20handshake%2C%E2%89%8815%2CkB%2C2025%2CREPORTED%2C%5B23%5D%0ACISA%20KEV%20entries%2CNOT%20BOUND%2Centries%2C2026%2CNOT%20BOUND%2C%0AAgencies%20co-sealing%20the%202025%20advisory%2C23%2Cagencies%2C2025%2CREPORTED%2C%5B14%5D%0AFBI%20complaints%2C%22859%2C532%22%2Ccomplaints%2C2024%2CREPORTED%2C%5B15%5D%0AFBI%20reported%20losses%2C16.6%2CUSD%20billion%2C2024%2CREPORTED%2C%5B15%5D%0AIncidents%20analysed%20in%20the%20ENISA%20period%2C%224%2C875%22%2Cincidents%2C2025%2CREPORTED%2C%5B16%5D%0A\" download=\"NR-XTECH-CRYPTO-GLOBAL-2026-BASELINE-indicators.csv\"><svg class=\"nrp-i\" viewBox=\"0 0 24 24\" aria-hidden=\"true\" focusable=\"false\"><path d=\"M12 15V3\"\/><path d=\"M21 15v4a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2v-4\"\/><path d=\"m7 10 5 5 5-5\"\/><\/svg>Indicators, CSV<\/a><a class=\"nf-ui-btn\" data-variant=\"secondary\" href=\"data:application\/json;charset=utf-8,%7B%0A%20%22edition%22%3A%20%22NR-XTECH-CRYPTO-GLOBAL-2026-BASELINE%22%2C%0A%20%22title%22%3A%20%22Exponential%20Technology%20Report%202026%3A%20Cybersecurity%20and%20Advanced%20Cryptography%22%2C%0A%20%22status%22%3A%20%22Draft%20under%20stewardship%20review%3B%20not%20yet%20released%22%2C%0A%20%22licence%22%3A%20%22CC-BY-4.0%20for%20the%20edition%20table%3B%20each%20value%20keeps%20its%20source's%20licence%22%2C%0A%20%22columns%22%3A%20%5B%0A%20%20%22Indicator%22%2C%0A%20%20%22Value%22%2C%0A%20%20%22Unit%22%2C%0A%20%20%22Year%22%2C%0A%20%20%22State%22%2C%0A%20%20%22Source%22%0A%20%5D%2C%0A%20%22rows%22%3A%20%5B%0A%20%20%5B%0A%20%20%20%22NIST%20post-quantum%20standards%20finalised%22%2C%0A%20%20%20%223%22%2C%0A%20%20%20%22standards%22%2C%0A%20%20%20%222024%22%2C%0A%20%20%20%22REPORTED%22%2C%0A%20%20%20%22%5B1%5D%20%5B2%5D%20%5B3%5D%22%0A%20%20%5D%2C%0A%20%20%5B%0A%20%20%20%22ML-KEM%20parameter%20sets%22%2C%0A%20%20%20%223%22%2C%0A%20%20%20%22sets%22%2C%0A%20%20%20%222024%22%2C%0A%20%20%20%22REPORTED%22%2C%0A%20%20%20%22%5B1%5D%22%0A%20%20%5D%2C%0A%20%20%5B%0A%20%20%20%22NIST%20IR%208547%20initial%20draft%20published%22%2C%0A%20%20%20%2212%20Nov%22%2C%0A%20%20%20%22date%22%2C%0A%20%20%20%222024%22%2C%0A%20%20%20%22REPORTED%22%2C%0A%20%20%20%22%5B44%5D%22%0A%20%20%5D%2C%0A%20%20%5B%0A%20%20%20%22NIST%20IR%208547%20draft%3A%20algorithms%20disallowed%20after%22%2C%0A%20%20%20%222035%22%2C%0A%20%20%20%22year%22%2C%0A%20%20%20%222024%22%2C%0A%20%20%20%22REPORTED%22%2C%0A%20%20%20%22%5B44%5D%22%0A%20%20%5D%2C%0A%20%20%5B%0A%20%20%20%22Post-close%2C%20context%20only%3A%20NIST%20IR%208547%20final%20published%22%2C%0A%20%20%20%2227%20Oct%22%2C%0A%20%20%20%22date%22%2C%0A%20%20%20%222026%22%2C%0A%20%20%20%22REPORTED%22%2C%0A%20%20%20%22%5B5%5D%22%0A%20%20%5D%2C%0A%20%20%5B%0A%20%20%20%22HQC%20selection%20announced%22%2C%0A%20%20%20%2211%20Mar%22%2C%0A%20%20%20%22date%22%2C%0A%20%20%20%222025%22%2C%0A%20%20%20%22REPORTED%22%2C%0A%20%20%20%22%5B6%5D%22%0A%20%20%5D%2C%0A%20%20%5B%0A%20%20%20%22NCSC%20first%20milestone%22%2C%0A%20%20%20%222028%22%2C%0A%20%20%20%22year%22%2C%0A%20%20%20%222025%22%2C%0A%20%20%20%22REPORTED%22%2C%0A%20%20%20%22%5B10%5D%22%0A%20%20%5D%2C%0A%20%20%5B%0A%20%20%20%22NCSC%20last%20milestone%22%2C%0A%20%20%20%222035%22%2C%0A%20%20%20%22year%22%2C%0A%20%20%20%222025%22%2C%0A%20%20%20%22REPORTED%22%2C%0A%20%20%20%22%5B10%5D%22%0A%20%20%5D%2C%0A%20%20%5B%0A%20%20%20%22RSA-2048%20noisy-qubit%20estimate%22%2C%0A%20%20%20%22%3C1%22%2C%0A%20%20%20%22million%22%2C%0A%20%20%20%222025%22%2C%0A%20%20%20%22REPORTED%22%2C%0A%20%20%20%22%5B22%5D%22%0A%20%20%5D%2C%0A%20%20%5B%0A%20%20%20%22Assumed%20gate%20error%20in%20estimate%22%2C%0A%20%20%20%220.1%22%2C%0A%20%20%20%22%25%22%2C%0A%20%20%20%222025%22%2C%0A%20%20%20%22REPORTED%22%2C%0A%20%20%20%22%5B22%5D%22%0A%20%20%5D%2C%0A%20%20%5B%0A%20%20%20%22Origin%20servers%20supporting%20post-quantum%20key%20agreement%22%2C%0A%20%20%20%223.7%22%2C%0A%20%20%20%22%25%22%2C%0A%20%20%20%222025%22%2C%0A%20%20%20%22REPORTED%22%2C%0A%20%20%20%22%5B23%5D%22%0A%20%20%5D%2C%0A%20%20%5B%0A%20%20%20%22ML-DSA-44%20signature%20added%20to%20a%20TLS%20handshake%22%2C%0A%20%20%20%22%E2%89%8815%22%2C%0A%20%20%20%22kB%22%2C%0A%20%20%20%222025%22%2C%0A%20%20%20%22REPORTED%22%2C%0A%20%20%20%22%5B23%5D%22%0A%20%20%5D%2C%0A%20%20%5B%0A%20%20%20%22CISA%20KEV%20entries%22%2C%0A%20%20%20%22NOT%20BOUND%22%2C%0A%20%20%20%22entries%22%2C%0A%20%20%20%222026%22%2C%0A%20%20%20%22NOT%20BOUND%22%2C%0A%20%20%20%22%22%0A%20%20%5D%2C%0A%20%20%5B%0A%20%20%20%22Agencies%20co-sealing%20the%202025%20advisory%22%2C%0A%20%20%20%2223%22%2C%0A%20%20%20%22agencies%22%2C%0A%20%20%20%222025%22%2C%0A%20%20%20%22REPORTED%22%2C%0A%20%20%20%22%5B14%5D%22%0A%20%20%5D%2C%0A%20%20%5B%0A%20%20%20%22FBI%20complaints%22%2C%0A%20%20%20%22859%2C532%22%2C%0A%20%20%20%22complaints%22%2C%0A%20%20%20%222024%22%2C%0A%20%20%20%22REPORTED%22%2C%0A%20%20%20%22%5B15%5D%22%0A%20%20%5D%2C%0A%20%20%5B%0A%20%20%20%22FBI%20reported%20losses%22%2C%0A%20%20%20%2216.6%22%2C%0A%20%20%20%22USD%20billion%22%2C%0A%20%20%20%222024%22%2C%0A%20%20%20%22REPORTED%22%2C%0A%20%20%20%22%5B15%5D%22%0A%20%20%5D%2C%0A%20%20%5B%0A%20%20%20%22Incidents%20analysed%20in%20the%20ENISA%20period%22%2C%0A%20%20%20%224%2C875%22%2C%0A%20%20%20%22incidents%22%2C%0A%20%20%20%222025%22%2C%0A%20%20%20%22REPORTED%22%2C%0A%20%20%20%22%5B16%5D%22%0A%20%20%5D%0A%20%5D%0A%7D\" download=\"NR-XTECH-CRYPTO-GLOBAL-2026-BASELINE-indicators.json\"><svg class=\"nrp-i\" viewBox=\"0 0 24 24\" aria-hidden=\"true\" focusable=\"false\"><path d=\"M12 15V3\"\/><path d=\"M21 15v4a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2v-4\"\/><path d=\"m7 10 5 5 5-5\"\/><\/svg>Indicators, JSON<\/a><\/div><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">NOTES<\/p><p>Values are rounded as published. Vendor values are labelled in the findings. Values from references that were not opened carry an UNVERIFIED reference and are listed in the notes. A machine-readable copy of this table is published with the evidence bundle at release.<\/p><\/aside><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-cb-s2\" aria-labelledby=\"nx-nrp-xt-10-cb-s2-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-cb-s2-h\"><span class=\"nrp-num\">B.2<\/span><span>Global source register<\/span><\/h2><p class=\"nrp-stand\">The governed source set behind this edition. Each source keeps its authority, coverage, cadence and role; categories describe origin, not truth.<\/p><h3 class=\"nrp-h3\">Domains bound by the register<\/h3><ul class=\"nrp-chips\"><li class=\"nf-ui-chip\">INF<\/li><li class=\"nf-ui-chip\">DAT<\/li><li class=\"nf-ui-chip\">FIN<\/li><li class=\"nf-ui-chip\">TRD<\/li><li class=\"nf-ui-chip\">HLT<\/li><li class=\"nf-ui-chip\">ENE<\/li><li class=\"nf-ui-chip\">WAT<\/li><li class=\"nf-ui-chip\">MIN<\/li><li class=\"nf-ui-chip\">CLI<\/li><li class=\"nf-ui-chip\">FOO<\/li><\/ul><div class=\"nrp-tblw\" id=\"nx-nrp-xt-10-cb-tab3\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table B.3<\/span><span class=\"nrp-tbl-t\">Global source register<\/span><\/caption><thead><tr><th scope=\"col\">Source<\/th><th scope=\"col\">Category<\/th><th scope=\"col\">Coverage<\/th><th scope=\"col\">Period<\/th><th scope=\"col\">Cadence<\/th><th scope=\"col\">Role<\/th><\/tr><\/thead><tbody><tr><td>NIST FIPS pages<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cb-n1\" aria-label=\"Note 1\">1<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cb-n2\" aria-label=\"Note 2\">2<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cb-n3\" aria-label=\"Note 3\">3<\/a><\/sup><\/td><td>national standards body<\/td><td>US and global<\/td><td>2024<\/td><td>one-off<\/td><td>standards<\/td><\/tr><tr><td>NIST IR 8547 draft<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cb-n44\" aria-label=\"Note 44\">44<\/a><\/sup><\/td><td>national standards body<\/td><td>US<\/td><td>2024<\/td><td>periodic<\/td><td>transition<\/td><\/tr><tr><td>NCSC timelines<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cb-n10\" aria-label=\"Note 10\">10<\/a><\/sup><\/td><td>national agency<\/td><td>UK<\/td><td>2025<\/td><td>periodic<\/td><td>timeline<\/td><\/tr><tr><td>European Commission page<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cb-n11\" id=\"nx-nrp-xt-10-cb-r11\" aria-label=\"Note 11\">11<\/a><\/sup><\/td><td>EU institution<\/td><td>EU<\/td><td>2025<\/td><td>continuous<\/td><td>roadmap<\/td><\/tr><tr><td>CISA KEV catalogue<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cb-n13\" id=\"nx-nrp-xt-10-cb-r13\" aria-label=\"Note 13\">13<\/a><\/sup><\/td><td>national agency<\/td><td>global entries<\/td><td>2026<\/td><td>continuous<\/td><td>exploitation<\/td><\/tr><tr><td>FBI IC3 report<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cb-n15\" aria-label=\"Note 15\">15<\/a><\/sup><\/td><td>national agency<\/td><td>US complaints<\/td><td>2024<\/td><td>annual<\/td><td>losses<\/td><\/tr><tr><td>ENISA threat landscape<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cb-n16\" aria-label=\"Note 16\">16<\/a><\/sup><\/td><td>EU agency<\/td><td>EU<\/td><td>2025<\/td><td>annual<\/td><td>incidents<\/td><\/tr><tr><td>Cloudflare analysis<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cb-n23\" aria-label=\"Note 23\">23<\/a><\/sup><\/td><td>vendor<\/td><td>one network<\/td><td>2025<\/td><td>continuous<\/td><td>deployment<\/td><\/tr><tr><td>IBM Cost of a <a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/nrs\/#nrs-h51\" data-tc=\"NHS-1 cyber.intrusion.data-breach\" data-tk=\"Information and cyber-physical systems \u00b7 Malicious compromise\" data-td=\"Unauthorised access to, or release of, personal, commercial or operational data.\" data-ts=\"NRS-H51\" data-tr=\"draft\" data-tx=\"https:\/\/risksindex.com\/hazards\/cyber\/\" data-txl=\"Information and cyber-physical systems\">Data Breach<\/a><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cb-n18\" id=\"nx-nrp-xt-10-cb-r18\" aria-label=\"Note 18\">18<\/a><\/sup><\/td><td>vendor<\/td><td>global sample<\/td><td>2026<\/td><td>annual<\/td><td>cost<\/td><\/tr><tr><td>ISC2 workforce study<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cb-n20\" id=\"nx-nrp-xt-10-cb-r20\" aria-label=\"Note 20\">20<\/a><\/sup><\/td><td>professional body<\/td><td>global survey<\/td><td>2025<\/td><td>annual<\/td><td>skills<\/td><\/tr><\/tbody><\/table><\/div><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">FIXTURE PROHIBITION<\/p><p>No demonstration or reference-cartographic fixture is used as evidence in this edition. The publication gate checks every binding against this register.<\/p><\/aside><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-cb-s3\" aria-labelledby=\"nx-nrp-xt-10-cb-s3-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-cb-s3-h\"><span class=\"nrp-num\">B.3<\/span><span>Regional reading, cybersecurity and cryptography across ten clusters<\/span><\/h2><p class=\"nrp-stand\">Regional plates follow with the regional editions. This page gives the regional reading of cybersecurity and cryptographic readiness in table form and ranks no region.<\/p><div class=\"nrp-tblw\" id=\"nx-nrp-xt-10-cb-tab4\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table B.4<\/span><span class=\"nrp-tbl-t\">Regional reading, cybersecurity and cryptography across ten clusters<\/span><\/caption><thead><tr><th scope=\"col\">Region<\/th><th scope=\"col\">Principal hazards<\/th><th scope=\"col\">Systems most exposed<\/th><th scope=\"col\">Baseline evidence<\/th><\/tr><\/thead><tbody><tr><td>North America<\/td><td>federal migration directives; standards authorship; incident reporting<\/td><td>cryptography, threat<\/td><td>NIST<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cb-n44\" aria-label=\"Note 44\">44<\/a><\/sup>; FBI<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cb-n15\" aria-label=\"Note 15\">15<\/a><\/sup>; CISA<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cb-n12\" id=\"nx-nrp-xt-10-cb-r12\" aria-label=\"Note 12\">12<\/a><\/sup><\/td><\/tr><tr><td>South America<\/td><td>migration planning<\/td><td>cryptography<\/td><td>regional evidence (not bound)<\/td><\/tr><tr><td>Europe<\/td><td>EU roadmap, Cyber Resilience Act and national timelines<\/td><td>cryptography, regulation<\/td><td>European Commission<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cb-n11\" aria-label=\"Note 11\">11<\/a><\/sup>; NCSC<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cb-n10\" aria-label=\"Note 10\">10<\/a><\/sup>; ENISA<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cb-n16\" aria-label=\"Note 16\">16<\/a><\/sup><\/td><\/tr><tr><td>Eurasia<\/td><td>national standards programmes<\/td><td>cryptography<\/td><td>regional evidence (not bound)<\/td><\/tr><tr><td>Middle East and North Africa<\/td><td>national programmes<\/td><td>threat<\/td><td>regional evidence (not bound)<\/td><\/tr><tr><td>Africa<\/td><td>skills and access<\/td><td>workforce<\/td><td>regional evidence (not bound)<\/td><\/tr><tr><td>South Asia<\/td><td>national programmes<\/td><td>cryptography, skills<\/td><td>regional evidence (not bound)<\/td><\/tr><tr><td>East Asia<\/td><td>national standards programmes<\/td><td>cryptography<\/td><td>regional evidence (not bound)<\/td><\/tr><tr><td>ASEAN<\/td><td>regional cooperation; the UN convention was opened for signature in Hanoi in 2025<\/td><td>governance<\/td><td>UN convention<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cb-n29\" id=\"nx-nrp-xt-10-cb-r29\" aria-label=\"Note 29\">29<\/a><\/sup><\/td><\/tr><tr><td>Oceania-Pacific<\/td><td>co-sealed the 2025 advisory with partners<\/td><td>threat<\/td><td>CISA<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cb-n14\" aria-label=\"Note 14\">14<\/a><\/sup><\/td><\/tr><\/tbody><\/table><\/div><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">MAP PLATES WITH THE REGIONAL EDITIONS<\/p><p>Each plate will carry its boundary source and version, projection, resolution, classification, uncertainty encoding and public-safe transform, with text and table alternatives.<\/p><\/aside><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">boundary<\/p><p>Regional readings summarise the cited evidence. They are not risk ratings of any region or country.<\/p><\/aside><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-cb-s4\" aria-labelledby=\"nx-nrp-xt-10-cb-s4-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-cb-s4-h\"><span class=\"nrp-num\">B.4<\/span><span>Cluster card: hybrid key-agreement deployment<\/span><\/h2><ul class=\"nrp-chips\"><li class=\"nf-ui-chip\">deployment<\/li><li class=\"nf-ui-chip\">key agreement<\/li><li class=\"nf-ui-chip\">protocols<\/li><li class=\"nf-ui-chip\">signatures<\/li><\/ul><dl class=\"nrp-dl\"><dt>Systems in view<\/dt><dd>web protocol, secure shell, messaging protocols, content networks<\/dd><dt>Defining events<\/dt><dd>OpenSSH 10.0 default and the 2025 network measurement<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cb-n23\" aria-label=\"Note 23\">23<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cb-n24\" id=\"nx-nrp-xt-10-cb-r24\" aria-label=\"Note 24\">24<\/a><\/sup><\/dd><dt>Couplings<\/dt><dd>GOV \u2192 INF timelines; INF \u2192 DAT exposure<\/dd><dt>Capability evidence<\/dt><dd>open-source defaults and protocol designs reported<sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cb-n24\" aria-label=\"Note 24\">24<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cb-n25\" id=\"nx-nrp-xt-10-cb-r25\" aria-label=\"Note 25\">25<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-xt-10-cb-n26\" id=\"nx-nrp-xt-10-cb-r26\" aria-label=\"Note 26\">26<\/a><\/sup><\/dd><dt>Gaps<\/dt><dd>signature deployment; embedded devices; sector totals<\/dd><dt>Agenda items<\/dt><dd>C-02 \u00b7 C-03<\/dd><\/dl><div class=\"nrp-cards\"><article class=\"nf-ui-card nrp-card\"><p class=\"nf-ui-eyebrow\">Hybrid key agreement is on by default in major open-source and network deployments, and most human traffic to one large network used it in late 2025 [23] [24].<\/p><h3 class=\"nf-ui-title\" data-level=\"card\">KEY AGREEMENT<\/h3><p>Wide hybrid deployment<\/p><\/article><article class=\"nf-ui-card nrp-card\"><p class=\"nf-ui-eyebrow\">Apple and Signal describe ongoing post-quantum rekeying in their messaging protocols [25] [26].<\/p><h3 class=\"nf-ui-title\" data-level=\"card\">MESSAGING<\/h3><p>Post-quantum protocol steps<\/p><\/article><article class=\"nf-ui-card nrp-card\"><p class=\"nf-ui-eyebrow\">Signatures add size to every handshake, and trust in new certificates is not expected to be broad before 2027 [23].<\/p><h3 class=\"nf-ui-title\" data-level=\"card\">SIGNATURES<\/h3><p>The harder step<\/p><\/article><\/div><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">evidence<\/p><p>Cluster cards are generated for the major deployment and threat clusters in 2027. Hybrid key agreement is shown first because it is the best documented step.<\/p><\/aside><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-cb-s5\" aria-labelledby=\"nx-nrp-xt-10-cb-s5-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-cb-s5-h\"><span class=\"nrp-num\">B.5<\/span><span>How countries appear in the cybersecurity and cryptography edition<\/span><\/h2><p class=\"nrp-stand\">Countries enter the cybersecurity and cryptography edition through the readiness chapters of their own national editions, on one card grammar. They are read against peer distributions and thresholds, never ranked.<\/p><div class=\"nrp-tblw\" id=\"nx-nrp-xt-10-cb-tab5\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table B.5<\/span><span class=\"nrp-tbl-t\">How countries appear in the cybersecurity and cryptography edition<\/span><\/caption><thead><tr><th scope=\"col\">Card field<\/th><th scope=\"col\">What it shows<\/th><th scope=\"col\">Source<\/th><\/tr><\/thead><tbody><tr><td>WEFH+B state<\/td><td>each core system against peer distribution bands<\/td><td>national edition<\/td><\/tr><tr><td>Couplings<\/td><td>the national dependency matrix<\/td><td>national edition<\/td><\/tr><tr><td>Risk objects<\/td><td>the national risk portfolio<\/td><td>national edition<\/td><\/tr><tr><td>Capability rungs<\/td><td>the national capability ladder<\/td><td>national edition<\/td><\/tr><tr><td>Evidence age<\/td><td>oldest and newest source dates<\/td><td>national source register<\/td><\/tr><\/tbody><\/table><\/div><h3 class=\"nrp-h3\">Editions in the 2026 Baseline programme<\/h3><div class=\"pp-cells nrp-cells-3\"><div class=\"nrp-cell\"><span class=\"pp-metric\">26<\/span><span class=\"nrp-cell-u\">national<\/span><p>countries and unions<\/p><\/div><div class=\"nrp-cell\"><span class=\"pp-metric\">10<\/span><span class=\"nrp-cell-u\">regional<\/span><p>clusters<\/p><\/div><div class=\"nrp-cell\"><span class=\"pp-metric\">16<\/span><span class=\"nrp-cell-u\">global<\/span><p>flagship and sector<\/p><\/div><div class=\"nrp-cell\"><span class=\"pp-metric\">14<\/span><span class=\"nrp-cell-u\">strategic<\/span><p><a class=\"nx-link nx-term\" href=\"https:\/\/docs.therisk.global\/organization\/systems\" data-tc=\"Systems\" data-tk=\"Nexus Standards\" data-td=\"The twenty Nexus systems, NXS-CMD to NXS-LAB\">systems<\/a> reports<\/p><\/div><div class=\"nrp-cell\"><span class=\"pp-metric\">20<\/span><span class=\"nrp-cell-u\">frontier<\/span><p>technology reports<\/p><\/div><\/div><h3 class=\"nrp-h3\">How to read a country card<\/h3><ul class=\"nrp-list\"><li>Each system is shown against the distribution of its peers, with thresholds where they exist<\/li><li>Couplings and risk objects come from the country\u2019s own national edition<\/li><li>Capability rungs record evidence, not a judgement of institutions<\/li><li>Evidence age is printed, so older national data are visible as such<\/li><\/ul><div class=\"nrp-tblw\" id=\"nx-nrp-xt-10-cb-tab6\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table B.6<\/span><span class=\"nrp-tbl-t\">National Baseline Editions in the 2026 programme<\/span><\/caption><thead><tr><th scope=\"col\">Wave<\/th><th scope=\"col\">Countries and unions<\/th><th scope=\"col\">State<\/th><\/tr><\/thead><tbody><tr><td>W0<\/td><td>Canada<\/td><td>ISSUED<\/td><\/tr><tr><td>W1<\/td><td>United States, United Kingdom, France, Germany, Italy, Japan, European Union, Switzerland<\/td><td>PLANNED<\/td><\/tr><tr><td>W2<\/td><td>Mexico, Brazil, Argentina, T\u00fcrkiye, Russian Federation, Saudi Arabia, United Arab Emirates, South Africa, Senegal, Kenya, African Union, India, China, Republic of Korea, Indonesia, Singapore, Australia<\/td><td>PLANNED<\/td><\/tr><\/tbody><\/table><\/div><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">boundary<\/p><p>External rankings, where cited, keep their own method and source. Nexus never converts them into a rating, and each country\u2019s ownership of its national edition is unaffected by its appearance here.<\/p><\/aside><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-cb-s6\" aria-labelledby=\"nx-nrp-xt-10-cb-s6-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-cb-s6-h\"><span class=\"nrp-num\">B.6<\/span><span>Licences<\/span><\/h2><div class=\"nrp-tblw\" id=\"nx-nrp-xt-10-cb-tab7\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table B.7<\/span><span class=\"nrp-tbl-t\">Licences of each kind of material<\/span><\/caption><thead><tr><th scope=\"col\">Material<\/th><th scope=\"col\">Licence<\/th><\/tr><\/thead><tbody><tr><td>Text<\/td><td>CC BY 4.0<\/td><\/tr><tr><td>Data<\/td><td>on the licence of each source; Nexus tables CC BY 4.0<\/td><\/tr><tr><td>Figures<\/td><td>Nexus figures CC BY 4.0; third-party as credited<\/td><\/tr><tr><td>Maps<\/td><td>boundary source and licence printed on each plate<\/td><\/tr><tr><td>Metadata<\/td><td>CC0 1.0, as Zenodo publishes it<\/td><\/tr><tr><td>Third-party data, figures and text<\/td><td>The source&#8217;s own licence, credited where it is used; never relicensed<\/td><\/tr><\/tbody><tfoot><tr><td colspan=\"2\">Nexus-authored text, tables and figures: CC BY 4.0 (SPDX CC-BY-4.0). Map plates print their boundary source and licence.<\/td><\/tr><\/tfoot><\/table><\/div><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-cb-s7\" aria-labelledby=\"nx-nrp-xt-10-cb-s7-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-cb-s7-h\"><span class=\"nrp-num\">B.7<\/span><span>Formats and provenance<\/span><\/h2><div class=\"nrp-tblw\" id=\"nx-nrp-xt-10-cb-tab8\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table B.8<\/span><span class=\"nrp-tbl-t\">This edition in every format<\/span><\/caption><thead><tr><th scope=\"col\">Format<\/th><th scope=\"col\">Kind<\/th><th scope=\"col\">State<\/th><th scope=\"col\">What it is<\/th><th scope=\"col\">Identifier<\/th><\/tr><\/thead><tbody><tr><td>Web edition<\/td><td><span class=\"nrp-mono\">HTML<\/span><\/td><td><span class=\"nx-nr-out-s\" data-state=\"here\">On this site<\/span><\/td><td>Draft in stewardship review; every value resolves to its source.<\/td><td><span class=\"nrp-mono\">NR-XTECH-CRYPTO-GLOBAL-2026-BASELINE-v1.0.0<\/span><\/td><\/tr><tr><td>Print edition<\/td><td><span class=\"nrp-mono\">PDF<\/span><\/td><td><span class=\"nx-nr-out-s\" data-state=\"release\">At release<\/span><\/td><td>A4 portrait \u00b7 screen, print and archival PDF, signed with the web edition at release.<\/td><td><span class=\"nrp-mono\">NR-XTECH-CRYPTO-GLOBAL-2026-BASELINE-v1.0.0<\/span><\/td><\/tr><tr><td>Indicator data<\/td><td><span class=\"nrp-mono\">CSV \u00b7 JSON<\/span><\/td><td><span class=\"nx-nr-out-s\" data-state=\"here\">On this site<\/span><\/td><td>17 indicators with unit, year, status and source; the machine-readable copy ships with the evidence bundle at release.<\/td><td><span class=\"nrp-mono\">NR-XTECH-CRYPTO-GLOBAL-2026-BASELINE data release v1<\/span><\/td><\/tr><tr><td>Figures<\/td><td><span class=\"nrp-mono\">SVG \u00b7 PNG<\/span><\/td><td><span class=\"nx-nr-out-s\" data-state=\"here\">On this site<\/span><\/td><td>4 on the web edition: headline figure, figure 1.3, coupling instrument, capability ladder.<\/td><td><span class=\"nrp-mono\">FIG-XTECH-CRYPTO-GLOBAL-2026-BASELINE-*<\/span><\/td><\/tr><tr><td>Slides<\/td><td><span class=\"nrp-mono\">PDF<\/span><\/td><td><span class=\"nx-nr-out-s\" data-state=\"none\">Not recorded<\/span><\/td><td>No slide deck is recorded for this edition.<\/td><td><span class=\"nrp-mono\"><\/span><\/td><\/tr><tr><td>Evidence brief<\/td><td><span class=\"nrp-mono\">HTML \u00b7 PDF<\/span><\/td><td><span class=\"nx-nr-out-s\" data-state=\"none\">Not recorded<\/span><\/td><td>No evidence brief is recorded for this edition.<\/td><td><span class=\"nrp-mono\"><\/span><\/td><\/tr><tr><td>Dataset with DOI<\/td><td><span class=\"nrp-mono\">DataCite<\/span><\/td><td><span class=\"nx-nr-out-s\" data-state=\"release\">At release<\/span><\/td><td>Concept and version DOI are minted at deposit; none is recorded yet.<\/td><td><span class=\"nrp-mono\"><\/span><\/td><\/tr><\/tbody><\/table><\/div><h3 class=\"nrp-h3\">Provenance<\/h3><dl class=\"nrp-dl\"><dt>Edition pack<\/dt><dd>The edition&#8217;s content pack (JSON), from which the print and web editions are built<\/dd><dt>Evidence cut<\/dt><dd>DC-XTECH-CRYPTO-GLOBAL-2026-B0, closed 30 September 2026<\/dd><dt>Reproducibility<\/dt><dd>sourced values cited; analytical values reproducible from stated parameters<\/dd><dt>Self-check<\/dt><dd>14 of 23 at evidence close; a fail on any item blocks release<\/dd><dt>Review<\/dt><dd>five passes scheduled before release (in Annex C)<\/dd><dt>Publisher of record<\/dt><dd>GCRI for the Nexus Consortium<\/dd><dt>Corrections<\/dt><dd>Registry correction pathway; upheld corrections are published as notices with a new version<\/dd><\/dl><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-cb-notes\" aria-labelledby=\"nx-nrp-xt-10-cb-notes-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-cb-notes-h\"><span>Notes<\/span><\/h2><p class=\"nrp-note\">Numbers are the edition&#8217;s reference numbers, so a note reads the same in every chapter. The full list, with every source and its licence, is in Annex C. <a href=\"https:\/\/therisk.global\/nexus-reports\/editions\/xt-10\/references\/\">Annex C, references<\/a><\/p><ol class=\"nrp-notes\"><li id=\"nx-nrp-xt-10-cb-n1\"><span class=\"nrp-notes-n\">1<\/span><span>NIST (ed.), Module-Lattice-Based Key-Encapsulation Mechanism Standard, FIPS 203 (publication page; final 13 August 2024; ML-KEM-512, ML-KEM-768 and ML-KEM-1024; initial draft 24 August 2023). National Institute of Standards and Technology, Gaithersburg. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-cb-r1\" aria-label=\"Back to the first call of note 1\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-cb-n2\"><span class=\"nrp-notes-n\">2<\/span><span>NIST (ed.), Module-Lattice-Based Digital Signature Standard, FIPS 204 (publication page; final 13 August 2024; ML-DSA). National Institute of Standards and Technology, Gaithersburg. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-cb-r2\" aria-label=\"Back to the first call of note 2\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-cb-n3\"><span class=\"nrp-notes-n\">3<\/span><span>NIST (ed.), Stateless Hash-Based Digital Signature Standard, FIPS 205 (publication page; final 13 August 2024; SLH-DSA, based on SPHINCS+). National Institute of Standards and Technology, Gaithersburg. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-cb-r3\" aria-label=\"Back to the first call of note 3\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-cb-n44\"><span class=\"nrp-notes-n\">44<\/span><span>NIST (ed.), Transition to Post-Quantum Cryptography Standards, NIST IR 8547, initial public draft (draft PDF, November 2024; Tables 2 and 4: for quantum-vulnerable signature and key-establishment schemes at 112 bits of security strength, deprecated after 2030 and disallowed after 2035, and at 128 bits or more, disallowed after 2035; the cover sheet added on withdrawal on 27 October 2026 is not used). National Institute of Standards and Technology, Gaithersburg. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-cb-r44\" aria-label=\"Back to the first call of note 44\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-cb-n5\"><span class=\"nrp-notes-n\">5<\/span><span>POST-CLOSE, context only: NIST (ed.), Transition to Post-Quantum Cryptography Standards, NIST IR 8547, final (publication page; document history 27 October 2026, after the 30 September evidence close; abstract refers to Executive Order 14412 and OMB Memorandum M-26-15; no dates on the page; PDF not opened). National Institute of Standards and Technology, Gaithersburg. Observation year 2026. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-cb-r5\" aria-label=\"Back to the first call of note 5\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-cb-n6\"><span class=\"nrp-notes-n\">6<\/span><span>NIST (ed.), NIST selects HQC as fifth algorithm for post-quantum encryption (news item, 11 March 2025; backup to ML-KEM; draft standard expected in about a year; final standard expected in 2027). National Institute of Standards and Technology, Gaithersburg. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-cb-r6\" aria-label=\"Back to the first call of note 6\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-cb-n10\"><span class=\"nrp-notes-n\">10<\/span><span>UK National Cyber Security Centre (ed.), Timelines for migration to post-quantum cryptography (guidance page; version 1.0, 20 March 2025; milestones 2028, 2031 and 2035). NCSC, London. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-cb-r10\" aria-label=\"Back to the first call of note 10\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-cb-n22\"><span class=\"nrp-notes-n\">22<\/span><span>Gidney, C., How to factor 2048 bit RSA integers with less than a million noisy qubits, arXiv:2505.15917, submitted 21 May 2025 (abstract page; under one million noisy qubits; under a week; 0.1% gate error; 1 microsecond cycle; 10 microsecond reaction time; the author\u2019s 2019 estimate was about 20 million qubits in 8 hours). arXiv, Ithaca. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-cb-r22\" aria-label=\"Back to the first call of note 22\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-cb-n23\"><span class=\"nrp-notes-n\">23<\/span><span>Cloudflare (ed.), The state of the post-quantum Internet in 2025 (blog analysis; late October 2025 majority of human traffic with post-quantum key agreement; 3.7% of origins; 39% of top 100,000 domains in September 2025; ML-DSA-44 about 15 kB; first post-quantum certificates expected in 2026). Cloudflare, San Francisco. Vendor analysis of its own network, weak evidence. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-cb-r23\" aria-label=\"Back to the first call of note 23\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-cb-n14\"><span class=\"nrp-notes-n\">14<\/span><span>CISA and 22 partner agencies (eds.), Countering Chinese State-Sponsored Actors Compromise of Networks Worldwide to Feed Global Espionage System, advisory AA25-239A (published 27 August 2025; revised 3 September 2025; 23 agencies from 13 countries; known vulnerabilities; no zero-day exploitation observed). Cybersecurity and Infrastructure Security Agency, Arlington. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-cb-r14\" aria-label=\"Back to the first call of note 14\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-cb-n15\"><span class=\"nrp-notes-n\">15<\/span><span>Federal Bureau of Investigation, Internet Crime Complaint Center (ed.), 2024 Internet Crime Report (859,532 complaints; USD 16.6 billion losses, up 33%; 256,256 complaints with a loss; 3,156 ransomware complaints; 263,455 cyber-threat complaints and USD 1.571 billion; 4,878 critical-infrastructure complaints). FBI, Washington. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-cb-r15\" aria-label=\"Back to the first call of note 15\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-cb-n16\"><span class=\"nrp-notes-n\">16<\/span><span>European Union Agency for Cybersecurity (ed.), ENISA Threat Landscape 2025 (publication page; period 1 July 2024 to 30 June 2025; 4,875 incidents analysed; version 1.3 of 22 September 2026 corrected figures; PDF not opened). ENISA, Athens. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-cb-r16\" aria-label=\"Back to the first call of note 16\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-cb-n11\"><span class=\"nrp-notes-n\">11<\/span><span>European Commission (ed.), Coordinated Implementation Roadmap for the transition to Post-Quantum Cryptography (library page; published 23 June 2025; the milestones were not on the page). Directorate-General for Communications Networks, Content and Technology, Brussels. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-cb-r11\" aria-label=\"Back to the first call of note 11\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-cb-n13\"><span class=\"nrp-notes-n\">13<\/span><span>POST-CLOSE, context only: CISA (ed.), Known Exploited Vulnerabilities Catalog (catalogue page; 1,767 results at the read; newest entry added 2026-11-03). Cybersecurity and Infrastructure Security Agency, Arlington. Observation year 2026. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-cb-r13\" aria-label=\"Back to the first call of note 13\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-cb-n18\"><span class=\"nrp-notes-n\">18<\/span><span>IBM and Ponemon Institute (eds.), Cost of a <a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/nrs\/#nrs-h51\" data-tc=\"NHS-1 cyber.intrusion.data-breach\" data-tk=\"Information and cyber-physical systems \u00b7 Malicious compromise\" data-td=\"Unauthorised access to, or release of, personal, commercial or operational data.\" data-ts=\"NRS-H51\" data-tr=\"draft\" data-tx=\"https:\/\/risksindex.com\/hazards\/cyber\/\" data-txl=\"Information and cyber-physical systems\">Data Breach<\/a> Report 2026 (landing page; global average USD 4.99 million, up 12%; AI-driven attacks up 56%). IBM, Armonk. Vendor report, weak evidence; the full report was not opened. Observation year 2026. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-cb-r18\" aria-label=\"Back to the first call of note 18\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-cb-n20\"><span class=\"nrp-notes-n\">20<\/span><span>ISC2 (ed.), 2025 Cybersecurity Workforce Study (page; published 4 December 2025; 16,029 respondents; 59% critical or significant skills needs, up from 44%; no workforce gap estimate). ISC2, Alexandria. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-cb-r20\" aria-label=\"Back to the first call of note 20\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-cb-n12\"><span class=\"nrp-notes-n\">12<\/span><span>CISA (ed.), Post-Quantum Cryptography Initiative (page; key dates, federal inventory duty under 6 U.S.C. 1526, product categories list, references to Executive Orders 14306, 14412 and 14413 and OMB Memorandum M-26-15). Cybersecurity and Infrastructure Security Agency, Arlington. Observation year 2026. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-cb-r12\" aria-label=\"Back to the first call of note 12\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-cb-n29\"><span class=\"nrp-notes-n\">29<\/span><span>UNVERIFIED, not opened: United Nations, Convention against Cybercrime (opened for signature in Hanoi on 25 October 2025; signatory counts of 65, 72, 74 and 75 appear in news and press summaries; entry into force on the ninetieth day after the fortieth ratification), taken from search summaries; the UNODC page returned an error. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-cb-r29\" aria-label=\"Back to the first call of note 29\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-cb-n24\"><span class=\"nrp-notes-n\">24<\/span><span>OpenSSH project (ed.), Post-quantum cryptography in OpenSSH (documentation page; sntrup761x25519-sha512 from 9.0; mlkem768x25519-sha256 added in 9.9 and default in 10.0; warning from 10.1). OpenBSD Project. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-cb-r24\" aria-label=\"Back to the first call of note 24\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-cb-n25\"><span class=\"nrp-notes-n\">25<\/span><span>Signal (ed.), Signal Protocol and Post-Quantum Ratchets, SPQR triple ratchet (blog post, 2 October 2025; ML-KEM 768; gradual rollout; formal verification). Signal Messenger, Mountain View. Vendor announcement, weak evidence. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-cb-r25\" aria-label=\"Back to the first call of note 25\">back<\/a><\/span><\/li><li id=\"nx-nrp-xt-10-cb-n26\"><span class=\"nrp-notes-n\">26<\/span><span>Apple (ed.), iMessage with PQ3: The new state of the art in quantum-secure messaging at scale (security blog post, 21 February 2024; Kyber-1024 and Kyber-768 hybrid with P-256; level 3 on its own scale). Apple, Cupertino. Vendor announcement, weak evidence. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-xt-10-cb-r26\" aria-label=\"Back to the first call of note 26\">back<\/a><\/span><\/li><\/ol><\/section><\/div><div class=\"nrp-part\" id=\"nx-nrp-xt-10-part-references\"><header class=\"nrp-chap-head\" id=\"nx-nrp-xt-10-cc-top\"><ul class=\"nrp-eyerow\"><li class=\"nf-ui-eyebrow\"><a href=\"https:\/\/therisk.global\/nexus-reports\/editions\/xt-10\/\">Cybersecurity and Advanced Cryptography 2026<\/a><\/li><li class=\"nf-ui-eyebrow\">Annex C<\/li><\/ul><span class=\"nrp-rule\" aria-hidden=\"true\"><\/span><h2 class=\"pp-hero-title\">References and record<\/h2><p class=\"nrp-lede\">Every source the edition rests on, the publication record, the corrections log and the open record.<\/p><p class=\"nrp-chap-meta\"><span>15 min read<\/span><span>0 figures<\/span><span>1 table<\/span><span>0 notes<\/span><span>NR-XTECH-CRYPTO-GLOBAL-2026-BASELINE<\/span><\/p><\/header><section class=\"nrp-block\" id=\"nx-nrp-xt-10-cc-s1\" aria-labelledby=\"nx-nrp-xt-10-cc-s1-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-cc-s1-h\"><span class=\"nrp-num\">C.1<\/span><span>44 sources<\/span><\/h2><p class=\"nrp-stand\">NR-CIT-1, editor first. A DOI is linked where the source has one; Nexus records carry a <a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/uni\/\" data-tc=\"UNI\" data-tk=\"Nexus Standards\" data-td=\"The universal identifier of every Nexus artifact (NS-1)\">UNI<\/a> once the catalogue allocates it (NS-1).<\/p><ol class=\"nrp-notes\"><li id=\"nx-nrp-xt-10-ref-1\"><span class=\"nrp-notes-n\">1<\/span><span>NIST (ed.), Module-Lattice-Based Key-Encapsulation Mechanism Standard, FIPS 203 (publication page; final 13 August 2024; ML-KEM-512, ML-KEM-768 and ML-KEM-1024; initial draft 24 August 2023). National Institute of Standards and Technology, Gaithersburg. Observation year 2024. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in the summary, chapter 1, chapter 2, chapter 3, chapter 4, chapter 5, chapter 6, chapter 8<\/span><\/span><\/li><li id=\"nx-nrp-xt-10-ref-2\"><span class=\"nrp-notes-n\">2<\/span><span>NIST (ed.), Module-Lattice-Based Digital Signature Standard, FIPS 204 (publication page; final 13 August 2024; ML-DSA). National Institute of Standards and Technology, Gaithersburg. Observation year 2024. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in the summary, chapter 1, chapter 2, chapter 3, chapter 6, chapter 8<\/span><\/span><\/li><li id=\"nx-nrp-xt-10-ref-3\"><span class=\"nrp-notes-n\">3<\/span><span>NIST (ed.), Stateless Hash-Based Digital Signature Standard, FIPS 205 (publication page; final 13 August 2024; SLH-DSA, based on SPHINCS+). National Institute of Standards and Technology, Gaithersburg. Observation year 2024. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in the summary, chapter 1, chapter 2, chapter 3, chapter 6, chapter 8<\/span><\/span><\/li><li id=\"nx-nrp-xt-10-ref-4\"><span class=\"nrp-notes-n\">4<\/span><span>POST-CLOSE, context only: NIST (ed.), Transition to Post-Quantum Cryptography Standards, NIST IR 8547, initial public draft (publication page; published 12 November 2024; the page states no deprecation dates and records the draft as obsoleted on 27 October 2026). National Institute of Standards and Technology, Gaithersburg. Observation year 2024. Accessed 2026-11-03.<\/span><\/li><li id=\"nx-nrp-xt-10-ref-5\"><span class=\"nrp-notes-n\">5<\/span><span>POST-CLOSE, context only: NIST (ed.), Transition to Post-Quantum Cryptography Standards, NIST IR 8547, final (publication page; document history 27 October 2026, after the 30 September evidence close; abstract refers to Executive Order 14412 and OMB Memorandum M-26-15; no dates on the page; PDF not opened). National Institute of Standards and Technology, Gaithersburg. Observation year 2026. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in chapter 6<\/span><\/span><\/li><li id=\"nx-nrp-xt-10-ref-6\"><span class=\"nrp-notes-n\">6<\/span><span>NIST (ed.), NIST selects HQC as fifth algorithm for post-quantum encryption (news item, 11 March 2025; backup to ML-KEM; draft standard expected in about a year; final standard expected in 2027). National Institute of Standards and Technology, Gaithersburg. Observation year 2025. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in the summary, chapter 1, chapter 2, chapter 4, chapter 6, chapter 8<\/span><\/span><\/li><li id=\"nx-nrp-xt-10-ref-7\"><span class=\"nrp-notes-n\">7<\/span><span>NIST (ed.), Recommendations for Key-Encapsulation Mechanisms, SP 800-227 (publication page; final 18 September 2025). National Institute of Standards and Technology, Gaithersburg. Observation year 2025. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in the summary, chapter 2, chapter 4, chapter 6, chapter 8<\/span><\/span><\/li><li id=\"nx-nrp-xt-10-ref-8\"><span class=\"nrp-notes-n\">8<\/span><span>NIST (ed.), Ascon-Based Lightweight Cryptography Standards for Constrained Devices, SP 800-232 (publication page; final 13 August 2025; Ascon-AEAD128, Ascon-Hash256, Ascon-XOF128, Ascon-CXOF128). National Institute of Standards and Technology, Gaithersburg. Observation year 2025. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in chapter 6, chapter 8<\/span><\/span><\/li><li id=\"nx-nrp-xt-10-ref-9\"><span class=\"nrp-notes-n\">9<\/span><span>NIST (ed.), The NIST Cybersecurity Framework (CSF) 2.0, NIST CSWP 29 (publication page; 26 February 2024). National Institute of Standards and Technology, Gaithersburg. Observation year 2024. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in chapter 4, chapter 6<\/span><\/span><\/li><li id=\"nx-nrp-xt-10-ref-10\"><span class=\"nrp-notes-n\">10<\/span><span>UK National Cyber Security Centre (ed.), Timelines for migration to post-quantum cryptography (guidance page; version 1.0, 20 March 2025; milestones 2028, 2031 and 2035). NCSC, London. Observation year 2025. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in the summary, chapter 1, chapter 2, chapter 3, chapter 4, chapter 6, chapter 8<\/span><\/span><\/li><li id=\"nx-nrp-xt-10-ref-11\"><span class=\"nrp-notes-n\">11<\/span><span>European Commission (ed.), Coordinated Implementation Roadmap for the transition to Post-Quantum Cryptography (library page; published 23 June 2025; the milestones were not on the page). Directorate-General for Communications Networks, Content and Technology, Brussels. Observation year 2025. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in chapter 3, chapter 4, chapter 6, chapter 8<\/span><\/span><\/li><li id=\"nx-nrp-xt-10-ref-12\"><span class=\"nrp-notes-n\">12<\/span><span>CISA (ed.), Post-Quantum Cryptography Initiative (page; key dates, federal inventory duty under 6 U.S.C. 1526, product categories list, references to Executive Orders 14306, 14412 and 14413 and OMB Memorandum M-26-15). Cybersecurity and Infrastructure Security Agency, Arlington. Observation year 2026. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in chapter 4, chapter 6, chapter 8<\/span><\/span><\/li><li id=\"nx-nrp-xt-10-ref-13\"><span class=\"nrp-notes-n\">13<\/span><span>POST-CLOSE, context only: CISA (ed.), Known Exploited Vulnerabilities Catalog (catalogue page; 1,767 results at the read; newest entry added 2026-11-03). Cybersecurity and Infrastructure Security Agency, Arlington. Observation year 2026. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in the summary, chapter 1, chapter 3, chapter 4<\/span><\/span><\/li><li id=\"nx-nrp-xt-10-ref-14\"><span class=\"nrp-notes-n\">14<\/span><span>CISA and 22 partner agencies (eds.), Countering Chinese State-Sponsored Actors Compromise of Networks Worldwide to Feed Global Espionage System, advisory AA25-239A (published 27 August 2025; revised 3 September 2025; 23 agencies from 13 countries; known vulnerabilities; no zero-day exploitation observed). Cybersecurity and Infrastructure Security Agency, Arlington. Observation year 2025. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in the summary, chapter 1, chapter 2, chapter 3, chapter 4, chapter 6, chapter 8<\/span><\/span><\/li><li id=\"nx-nrp-xt-10-ref-15\"><span class=\"nrp-notes-n\">15<\/span><span>Federal Bureau of Investigation, Internet Crime Complaint Center (ed.), 2024 Internet Crime Report (859,532 complaints; USD 16.6 billion losses, up 33%; 256,256 complaints with a loss; 3,156 ransomware complaints; 263,455 cyber-threat complaints and USD 1.571 billion; 4,878 critical-infrastructure complaints). FBI, Washington. Observation year 2024. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in the summary, chapter 1, chapter 2, chapter 3, chapter 6, chapter 8<\/span><\/span><\/li><li id=\"nx-nrp-xt-10-ref-16\"><span class=\"nrp-notes-n\">16<\/span><span>European Union Agency for Cybersecurity (ed.), ENISA Threat Landscape 2025 (publication page; period 1 July 2024 to 30 June 2025; 4,875 incidents analysed; version 1.3 of 22 September 2026 corrected figures; PDF not opened). ENISA, Athens. Observation year 2025. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in chapter 6<\/span><\/span><\/li><li id=\"nx-nrp-xt-10-ref-17\"><span class=\"nrp-notes-n\">17<\/span><span>Verizon (ed.), 2026 <a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/nrs\/#nrs-h51\" data-tc=\"NHS-1 cyber.intrusion.data-breach\" data-tk=\"Information and cyber-physical systems \u00b7 Malicious compromise\" data-td=\"Unauthorised access to, or release of, personal, commercial or operational data.\" data-ts=\"NRS-H51\" data-tr=\"draft\" data-tx=\"https:\/\/risksindex.com\/hazards\/cyber\/\" data-txl=\"Information and cyber-physical systems\">Data Breach<\/a> Investigations Report (landing page; period 1 November 2024 to 31 October 2025; 48% of breaches involve ransomware; 31% begin with exploited vulnerabilities). Verizon Business, New York. Vendor report, weak evidence; the full report was not opened. Observation year 2025. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in chapter 2, chapter 6<\/span><\/span><\/li><li id=\"nx-nrp-xt-10-ref-18\"><span class=\"nrp-notes-n\">18<\/span><span>IBM and Ponemon Institute (eds.), Cost of a Data Breach Report 2026 (landing page; global average USD 4.99 million, up 12%; AI-driven attacks up 56%). IBM, Armonk. Vendor report, weak evidence; the full report was not opened. Observation year 2026. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in the summary, chapter 1, chapter 2, chapter 3, chapter 4, chapter 6, chapter 8<\/span><\/span><\/li><li id=\"nx-nrp-xt-10-ref-19\"><span class=\"nrp-notes-n\">19<\/span><span>Chainalysis (ed.), ransomware analysis (blog page; more than USD 820 million on-chain in 2025, down 8% from an updated USD 892 million for 2024; original 2024 estimate USD 813 million). Chainalysis, New York. Vendor estimate, weak evidence. Observation year 2025. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in chapter 1, chapter 2, chapter 3, chapter 6, chapter 7, chapter 8<\/span><\/span><\/li><li id=\"nx-nrp-xt-10-ref-20\"><span class=\"nrp-notes-n\">20<\/span><span>ISC2 (ed.), 2025 Cybersecurity Workforce Study (page; published 4 December 2025; 16,029 respondents; 59% critical or significant skills needs, up from 44%; no workforce gap estimate). ISC2, Alexandria. Observation year 2025. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in the summary, chapter 1, chapter 2, chapter 4, chapter 6, chapter 8<\/span><\/span><\/li><li id=\"nx-nrp-xt-10-ref-21\"><span class=\"nrp-notes-n\">21<\/span><span>US Securities and Exchange Commission (ed.), SEC adopts rules on cybersecurity risk management, strategy, governance and incident disclosure by public companies (press release 2023-139; adopted 26 July 2023; Form 8-K Item 1.05 within four business days of a materiality determination). SEC, Washington. Observation year 2023. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in chapter 1, chapter 6, chapter 8<\/span><\/span><\/li><li id=\"nx-nrp-xt-10-ref-22\"><span class=\"nrp-notes-n\">22<\/span><span>Gidney, C., How to factor 2048 bit RSA integers with less than a million noisy qubits, arXiv:2505.15917, submitted 21 May 2025 (abstract page; under one million noisy qubits; under a week; 0.1% gate error; 1 microsecond cycle; 10 microsecond reaction time; the author\u2019s 2019 estimate was about 20 million qubits in 8 hours). arXiv, Ithaca. Observation year 2025. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in the summary, chapter 1, chapter 2, chapter 3, chapter 4, chapter 5, chapter 6<\/span><\/span><\/li><li id=\"nx-nrp-xt-10-ref-23\"><span class=\"nrp-notes-n\">23<\/span><span>Cloudflare (ed.), The state of the post-quantum Internet in 2025 (blog analysis; late October 2025 majority of human traffic with post-quantum key agreement; 3.7% of origins; 39% of top 100,000 domains in September 2025; ML-DSA-44 about 15 kB; first post-quantum certificates expected in 2026). Cloudflare, San Francisco. Vendor analysis of its own network, weak evidence. Observation year 2025. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in the summary, chapter 1, chapter 2, chapter 3, chapter 4, chapter 6, chapter 7, chapter 8<\/span><\/span><\/li><li id=\"nx-nrp-xt-10-ref-24\"><span class=\"nrp-notes-n\">24<\/span><span>OpenSSH project (ed.), Post-quantum cryptography in OpenSSH (documentation page; sntrup761x25519-sha512 from 9.0; mlkem768x25519-sha256 added in 9.9 and default in 10.0; warning from 10.1). OpenBSD Project. Observation year 2025. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in the summary, chapter 1, chapter 2, chapter 4, chapter 6, chapter 8<\/span><\/span><\/li><li id=\"nx-nrp-xt-10-ref-25\"><span class=\"nrp-notes-n\">25<\/span><span>Signal (ed.), Signal Protocol and Post-Quantum Ratchets, SPQR triple ratchet (blog post, 2 October 2025; ML-KEM 768; gradual rollout; formal verification). Signal Messenger, Mountain View. Vendor announcement, weak evidence. Observation year 2025. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in chapter 1, chapter 6, chapter 8<\/span><\/span><\/li><li id=\"nx-nrp-xt-10-ref-26\"><span class=\"nrp-notes-n\">26<\/span><span>Apple (ed.), iMessage with PQ3: The new state of the art in quantum-secure messaging at scale (security blog post, 21 February 2024; Kyber-1024 and Kyber-768 hybrid with P-256; level 3 on its own scale). Apple, Cupertino. Vendor announcement, weak evidence. Observation year 2024. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in chapter 1, chapter 6, chapter 8<\/span><\/span><\/li><li id=\"nx-nrp-xt-10-ref-27\"><span class=\"nrp-notes-n\">27<\/span><span>UNVERIFIED, not opened: European Union, Regulation (EU) 2024\/2847 on horizontal cybersecurity requirements for products with digital elements (Cyber Resilience Act; in force 10 December 2024; reporting duties from 11 September 2026; main obligations from 11 December 2027), dates taken from law-firm search summaries; the Official Journal page returned no text. Observation year 2024. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in chapter 1, chapter 6, chapter 8<\/span><\/span><\/li><li id=\"nx-nrp-xt-10-ref-28\"><span class=\"nrp-notes-n\">28<\/span><span>UNVERIFIED, not opened: European Union, Directive (EU) 2022\/2555 on measures for a high common level of cybersecurity across the Union (NIS2), cited from memory without figures. Observation year 2022. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in chapter 8<\/span><\/span><\/li><li id=\"nx-nrp-xt-10-ref-29\"><span class=\"nrp-notes-n\">29<\/span><span>UNVERIFIED, not opened: United Nations, Convention against Cybercrime (opened for signature in Hanoi on 25 October 2025; signatory counts of 65, 72, 74 and 75 appear in news and press summaries; entry into force on the ninetieth day after the fortieth ratification), taken from search summaries; the UNODC page returned an error. Observation year 2025. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in chapter 8<\/span><\/span><\/li><li id=\"nx-nrp-xt-10-ref-30\"><span class=\"nrp-notes-n\">30<\/span><span>UNVERIFIED, not opened: NSA (ed.), Commercial National Security Algorithm Suite 2.0 advisory and FAQ, cited from memory; the NSA pages returned an access error and no date is used. National Security Agency, Fort Meade. Observation year 2025. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in chapter 6<\/span><\/span><\/li><li id=\"nx-nrp-xt-10-ref-31\"><span class=\"nrp-notes-n\">31<\/span><span>UNVERIFIED, not opened: NIS Cooperation Group (ed.), Coordinated Implementation Roadmap for the Transition to Post-Quantum Cryptography (national roadmaps by the end of 2026, high-risk use cases by 2030, as many <a class=\"nx-link nx-term\" href=\"https:\/\/docs.therisk.global\/organization\/systems\" data-tc=\"Systems\" data-tk=\"Nexus Standards\" data-td=\"The twenty Nexus systems, NXS-CMD to NXS-LAB\">systems<\/a> as feasible by 2035), taken from secondary summaries in an earlier edition of this series; the milestones were not on the page read. European Commission, Brussels. Observation year 2025. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in chapter 6<\/span><\/span><\/li><li id=\"nx-nrp-xt-10-ref-32\"><span class=\"nrp-notes-n\">32<\/span><span>UNVERIFIED, not opened: NIST (ed.), Status Report on the Fourth Round of the NIST Post-Quantum Cryptography Standardization Process, NIST IR 8545, March 2025, cited from memory. National Institute of Standards and Technology, Gaithersburg. Observation year 2025. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in chapter 2, chapter 6<\/span><\/span><\/li><li id=\"nx-nrp-xt-10-ref-33\"><span class=\"nrp-notes-n\">33<\/span><span>UNVERIFIED, not opened: NIST (ed.), Security Requirements for Cryptographic Modules, FIPS 140-3, cited from memory. National Institute of Standards and Technology, Gaithersburg. Observation year 2019. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in chapter 8<\/span><\/span><\/li><li id=\"nx-nrp-xt-10-ref-34\"><span class=\"nrp-notes-n\">34<\/span><span>UNVERIFIED, not opened: CVE Program (ed.), CVE metrics page; the page returned no figures. MITRE, Bedford. Observation year 2026. Accessed 2026-11-03.<\/span><\/li><li id=\"nx-nrp-xt-10-ref-35\"><span class=\"nrp-notes-n\">35<\/span><span>UNVERIFIED, not opened: Europol (ed.), Internet Organised Crime Threat Assessment 2025, cited from memory; the page returned an error. Europol, The Hague. Observation year 2025. Accessed 2026-11-03.<\/span><\/li><li id=\"nx-nrp-xt-10-ref-36\"><span class=\"nrp-notes-n\">36<\/span><span>UNVERIFIED, not opened: Microsoft (ed.), Microsoft Digital Defense Report 2025, cited from memory; the page returned an error. Microsoft, Redmond. Vendor report, weak evidence. Observation year 2025. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in chapter 6<\/span><\/span><\/li><li id=\"nx-nrp-xt-10-ref-37\"><span class=\"nrp-notes-n\">37<\/span><span>UNVERIFIED, not opened: Shor, P.W., Polynomial-time algorithms for prime factorization and discrete logarithms on a quantum computer, SIAM Journal on Computing 26(5), 1484 to 1509, 1997, cited from memory. Observation year 1997. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in chapter 2, chapter 6<\/span><\/span><\/li><li id=\"nx-nrp-xt-10-ref-38\"><span class=\"nrp-notes-n\">38<\/span><span>UNVERIFIED, not opened: Mosca, M., Cybersecurity in an era with quantum computers: will we be ready?, IEEE Security and Privacy 16(5), 38 to 41, 2018, cited from memory. Observation year 2018. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in chapter 6<\/span><\/span><\/li><li id=\"nx-nrp-xt-10-ref-39\"><span class=\"nrp-notes-n\">39<\/span><span>UNVERIFIED, not opened: NIST National Cybersecurity Center of Excellence (ed.), Migration to Post-Quantum Cryptography, NIST SP 1800-38, cited from memory. National Institute of Standards and Technology, Gaithersburg. Observation year 2023. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in chapter 6<\/span><\/span><\/li><li id=\"nx-nrp-xt-10-ref-40\"><span class=\"nrp-notes-n\">40<\/span><span>UNVERIFIED, not opened: European Union, Commission Implementing Regulation (EU) 2024\/482 establishing the European scheme for cybersecurity of ICT products (EUCC), cited from memory. Observation year 2024. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in chapter 8<\/span><\/span><\/li><li id=\"nx-nrp-xt-10-ref-41\"><span class=\"nrp-notes-n\">41<\/span><span>UNVERIFIED, not opened: US Office of Management and Budget (ed.), Memorandum M-23-02, Migrating to Post-Quantum Cryptography, November 2022, cited from memory. OMB, Washington. Observation year 2022. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in chapter 6<\/span><\/span><\/li><li id=\"nx-nrp-xt-10-ref-42\"><span class=\"nrp-notes-n\">42<\/span><span>UNVERIFIED, not opened: NIST (ed.), additional digital signature schemes for the post-quantum project (on-ramp), cited from memory; the project page returned an error. National Institute of Standards and Technology, Gaithersburg. Observation year 2025. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in chapter 4<\/span><\/span><\/li><li id=\"nx-nrp-xt-10-ref-43\"><span class=\"nrp-notes-n\">43<\/span><span>UNVERIFIED, not opened: Rescorla, E., The Transport Layer Security (TLS) Protocol Version 1.3, RFC 8446, Internet Engineering Task Force, August 2018, cited from memory. Observation year 2018. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in chapter 6<\/span><\/span><\/li><li id=\"nx-nrp-xt-10-ref-44\"><span class=\"nrp-notes-n\">44<\/span><span>NIST (ed.), Transition to Post-Quantum Cryptography Standards, NIST IR 8547, initial public draft (draft PDF, November 2024; Tables 2 and 4: for quantum-vulnerable signature and key-establishment schemes at 112 bits of security strength, deprecated after 2030 and disallowed after 2035, and at 128 bits or more, disallowed after 2035; the cover sheet added on withdrawal on 27 October 2026 is not used). National Institute of Standards and Technology, Gaithersburg. Observation year 2024. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in the summary, chapter 1, chapter 2, chapter 3, chapter 4, chapter 6, chapter 7, chapter 8<\/span><\/span><\/li><\/ol><\/section><section class=\"nrp-block\" id=\"nx-nrp-xt-10-cc-s2\" aria-labelledby=\"nx-nrp-xt-10-cc-s2-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-cc-s2-h\"><span class=\"nrp-num\">C.2<\/span><span>Publication record<\/span><\/h2><div class=\"nrp-split\"><div><h3 class=\"nrp-h3\">Publication<\/h3><dl class=\"nrp-dl\"><dt>Title<\/dt><dd>Exponential Technology Report 2026: Cybersecurity and Advanced Cryptography, Baseline Edition<\/dd><dt>Series<\/dt><dd>Reports \u00b7 Exponential Technology Series XT-10<\/dd><dt>Edition<\/dt><dd>Baseline Edition 2026 \u00b7 inaugural annual<\/dd><dt>Version<\/dt><dd>v1.0.0 \u00b7 draft for stewardship review<\/dd><dt>Publication ID<\/dt><dd>NR-XTECH-CRYPTO-GLOBAL-2026-BASELINE-v1.0.0<\/dd><dt>Evidence close<\/dt><dd>30 September 2026<\/dd><dt>Publication date<\/dt><dd>October 2026<\/dd><dt>DOI<\/dt><dd>concept and version DOI at deposit<\/dd><\/dl><\/div><div><h3 class=\"nrp-h3\">Publisher<\/h3><dl class=\"nrp-dl\"><dt>Publisher of record<\/dt><dd>The Global Centre for Risk and Innovation (GCRI), for the Nexus Consortium<\/dd><dt>Place<\/dt><dd>Toronto<\/dd><dt>Editor<\/dt><dd>Saeed Valadbaygi, Chief Steward and Managing Editor<\/dd><dt>Stewards<\/dt><dd>GCRI \u00b7 technical truth \u00b7 GRF \u00b7 public meaning \u00b7 GRA \u00b7 capital meaning<\/dd><dt>Licence<\/dt><dd>text CC BY 4.0; data on the terms of each source<\/dd><dt>Copyright<\/dt><dd>\u00a9 2026 GCRI \u00b7 Nexus Consortium<\/dd><dt>Language<\/dt><dd>English (en-GB) source edition<\/dd><dt>Correspondence<\/dt><dd>Registry correction pathway \u00b7 editorial office<\/dd><\/dl><\/div><\/div><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">DISCLAIMER<\/p><p>This edition is published for research, planning and public understanding. It is not a government assessment, an official warning, a rating, a certification, investment advice or an operational authorisation. Reasonable care has been taken with every source; consult the cited originals before relying on any value.<\/p><\/aside><h3 class=\"nrp-h3\">Colophon<\/h3><dl class=\"nrp-dl\"><dt>Format<\/dt><dd>A4 portrait \u00b7 screen, print and archival PDF<\/dd><dt>Typefaces<\/dt><dd>Space Grotesk (display) \u00b7 Geist (text) \u00b7 IBM Plex Sans Italic (standfirsts) \u00b7 IBM Plex Mono (data)<\/dd><dt>Design standard<\/dt><dd>Reports Foundational Edition, Volume I, Part VII<\/dd><dt>Accessibility<\/dt><dd>tagged PDF and HTML targets; text alternatives for every figure<\/dd><dt>Production<\/dt><dd>Reports editorial team, GCRI<\/dd><\/dl><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">HOW TO CORRECT THIS EDITION<\/p><p>Report errors, omissions or objections through the Registry correction pathway. Each report is logged and answered; upheld corrections are published as notices with a new version, and the original remains resolvable.<\/p><\/aside><h3 class=\"nrp-h3\">Release path for this version<\/h3><div class=\"nrp-tblw\" id=\"nx-nrp-xt-10-cc-tab1\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table C.1<\/span><span class=\"nrp-tbl-t\">Release path for this version<\/span><\/caption><thead><tr><th scope=\"col\">Step<\/th><th scope=\"col\">What happens<\/th><th scope=\"col\">When<\/th><\/tr><\/thead><tbody><tr><td>Draft<\/td><td>editorial self-check complete at evidence close<\/td><td>October 2026<\/td><\/tr><tr><td>Steward review<\/td><td>five passes on the exact draft (keys T \u00b7 M \u00b7 F \u00b7 N)<\/td><td>Q4 2026<\/td><\/tr><tr><td>Approval<\/td><td>publication authority approves the exact digest<\/td><td>before release<\/td><\/tr><tr><td>Deposit<\/td><td>concept and version DOI minted; registry pointer set<\/td><td>at release<\/td><\/tr><tr><td>Succession<\/td><td>the 2027 cybersecurity and cryptography edition reports changes against this baseline<\/td><td>2027<\/td><\/tr><\/tbody><\/table><\/div><div class=\"nrp-split\"><div><dl class=\"nrp-dl\"><dt>Current version<\/dt><dd>v1.0.0 draft, stewardship review<\/dd><dt>Previous edition<\/dt><dd>none, first edition of the series<\/dd><dt>Next edition<\/dt><dd>NR-XTECH-CRYPTO-GLOBAL-2027-v1.0.0<\/dd><\/dl><\/div><div><dl class=\"nrp-dl\"><dt>Latest version<\/dt><dd>resolve the concept DOI or the registry record<\/dd><dt>Correction route<\/dt><dd>Registry correction pathway<\/dd><dt>Notice types<\/dt><dd>erratum \u00b7 addendum \u00b7 supersession \u00b7 withdrawal<\/dd><\/dl><\/div><\/div><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">NO CORRECTIONS \u2260 NO LIMITS<\/p><p>The absence of corrections does not mean the absence of limitations. Limitations and uncertainty are stated where they arise in the edition.<\/p><\/aside><\/section><div id=\"nx-nr-xt-10-corrections\"><section class=\"nrp-block\" id=\"nx-nrp-xt-10-cc-s3\" aria-labelledby=\"nx-nrp-xt-10-cc-s3-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-cc-s3-h\"><span class=\"nrp-num\">C.3<\/span><span>Corrections log<\/span><\/h2><div class=\"nx-nr-corr\"><p class=\"nx-nr-corr-sum\"><span class=\"nx-nr-corr-n\">0<\/span><span>correction notices. No edition has been released yet, so none can be corrected; the log below lists each edition&#8217;s current version.<\/span><\/p><div class=\"nx-table-wrap\"><table class=\"nx-table nx-rd-table\" data-stack=\"true\"><thead><tr><th scope=\"col\">Edition<\/th><th scope=\"col\">Version<\/th><th scope=\"col\">Date<\/th><th scope=\"col\">State<\/th><th scope=\"col\">Change<\/th><th scope=\"col\">Notice<\/th><\/tr><\/thead><tbody><tr><td data-label=\"Edition\"><span class=\"nx-rd-code\">XT-10<\/span><\/td><td data-label=\"Version\" class=\"nx-rd-mono\">NR-XTECH-CRYPTO-GLOBAL-2026-BASELINE-v1.0.0<\/td><td data-label=\"Date\">October 2026<\/td><td data-label=\"State\">Draft<\/td><td data-label=\"Change\">Baseline Edition 2026, inaugural annual edition,<\/td><td data-label=\"Notice\">None<\/td><\/tr><\/tbody><\/table><\/div><p class=\"nx-rd-source\">Notice types: erratum, addendum, supersession, withdrawal. A correction is a new version with a published notice; the earlier version stays resolvable, and no edition is ever edited in silence.<\/p><\/div><\/section><\/div><div id=\"nx-nr-xt-10-outputs\"><section class=\"nrp-block\" id=\"nx-nrp-xt-10-cc-s4\" aria-labelledby=\"nx-nrp-xt-10-cc-s4-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-cc-s4-h\"><span class=\"nrp-num\">C.4<\/span><span>Open record<\/span><\/h2><div class=\"nx-nr-os\"><div class=\"nx-nr-os-card\"><h3>This edition&#8217;s open record<\/h3><dl class=\"nx-nr-os-kv\"><dt>Publication ID<\/dt><dd>NR-XTECH-CRYPTO-GLOBAL-2026-BASELINE-v1.0.0<\/dd><dt>Desk identifier and series alias<\/dt><dd>NR-XTC-XT-10-2026-BL<\/dd><dt>Collection<\/dt><dd>None<\/dd><dt>DOI<\/dt><dd>Concept and version DOI at deposit, on Zenodo with DataCite metadata<\/dd><dt>Versions<\/dt><dd>Each correction is a new version (isNewVersionOf); the concept DOI resolves to the latest<\/dd><dt>Bundle<\/dt><dd>RO-Crate 1.2 with CITATION.cff, CodeMeta and PROV-O provenance; a signed manifest<\/dd><dt>Licence<\/dt><dd><a class=\"nx-link\" href=\"https:\/\/creativecommons.org\/licenses\/by\/4.0\/\" rel=\"noopener\">CC BY 4.0<\/a> (SPDX CC-BY-4.0) for original material; metadata CC0 1.0<\/dd><\/dl><\/div><div class=\"nx-nr-os-card\"><h3>Credit and identity<\/h3><dl class=\"nx-nr-os-kv\"><dt>ORCID<\/dt><dd>Your iD in the deposit and the contribution record; DataCite can then add the work to your ORCID record<\/dd><dt>ROR<\/dt><dd>Your organisation by its ROR identifier, never by a typed name alone<\/dd><dt>CRediT<\/dt><dd>Conceptualization, Data curation, Formal analysis, Investigation, Methodology, Software, Validation, Visualisation, Writing, review and editing<\/dd><dt>Account<\/dt><dd>None needed to contribute; never a password<\/dd><\/dl><\/div><div class=\"nx-nr-os-card\"><h3>Find and follow<\/h3><p class=\"nx-p\">Search the open indexes for Cybersecurity and Advanced Cryptography; software is cited by its SWHID from Software Heritage, and a quantified scenario run is preregistered on OSF before it is run. Annotation is your choice: Hypothesis opens this page in its own viewer.<\/p><ul class=\"nx-nr-os-links\"><li><a href=\"https:\/\/openalex.org\/works?search=Nexus%20Reports%20Cybersecurity%20and%20Advanced%20Cryptography\" rel=\"noopener\">OpenAlex<\/a><\/li><li><a href=\"https:\/\/explore.openaire.eu\/search\/find?fv0=Nexus%20Reports%20Cybersecurity%20and%20Advanced%20Cryptography&amp;f0=q\" rel=\"noopener\">OpenAIRE<\/a><\/li><li><a href=\"https:\/\/search.crossref.org\/search\/works?q=Nexus%20Reports%20Cybersecurity%20and%20Advanced%20Cryptography\" rel=\"noopener\">Crossref<\/a><\/li><li><a href=\"https:\/\/commons.datacite.org\/?query=Nexus%20Reports%20Cybersecurity%20and%20Advanced%20Cryptography\" rel=\"noopener\">DataCite Commons<\/a><\/li><li><a href=\"https:\/\/zenodo.org\/search?q=Nexus%20Reports%20Cybersecurity%20and%20Advanced%20Cryptography\" rel=\"noopener\">Zenodo<\/a><\/li><li><a href=\"https:\/\/archive.softwareheritage.org\/\" rel=\"noopener\">Software Heritage<\/a><\/li><li><a href=\"https:\/\/osf.io\/prereg\/\" rel=\"noopener\">OSF preregistration<\/a><\/li><li><a href=\"https:\/\/via.hypothes.is\/https:\/\/therisk.global\/nexus-reports\/editions\/xt-10\/\" rel=\"noopener\">Annotate with Hypothesis<\/a><\/li><\/ul><\/div><div class=\"nx-nr-os-card\"><h3>Mirrors and harvest<\/h3><p class=\"nx-p\">The DOI is canonical. At release each signed bundle is also given an IPFS content identifier and a bloxberg anchor as mirrors; both are listed in the record once they exist. Zenodo exposes every record over OAI-PMH, and reviews and endorsements can arrive through COAR Notify where the repository supports it.<\/p><\/div><\/div><div class=\"nx-mt-3\"><figure class=\"nx-nr-code\"><figcaption class=\"nx-nr-code-cap\">InvenioRDM metadata for a contribution on Cybersecurity and Advanced Cryptography, prefilled from this page<\/figcaption><pre class=\"nx-nr-pre\" tabindex=\"0\"><code>{&#10;  &quot;metadata&quot;: {&#10;    &quot;resource_type&quot;: {&#10;      &quot;id&quot;: &quot;dataset&quot;&#10;    },&#10;    &quot;title&quot;: &quot;Evidence on Cybersecurity and Advanced Cryptography for Nexus Reports&quot;,&#10;    &quot;publication_date&quot;: &quot;YYYY-MM-DD&quot;,&#10;    &quot;creators&quot;: [&#10;      {&#10;        &quot;person_or_org&quot;: {&#10;          &quot;type&quot;: &quot;personal&quot;,&#10;          &quot;family_name&quot;: &quot;Your family name&quot;,&#10;          &quot;given_name&quot;: &quot;Your given name&quot;,&#10;          &quot;identifiers&quot;: [&#10;            {&#10;              &quot;scheme&quot;: &quot;orcid&quot;,&#10;              &quot;identifier&quot;: &quot;0000-0000-0000-0000&quot;&#10;            }&#10;          ]&#10;        },&#10;        &quot;affiliations&quot;: [&#10;          {&#10;            &quot;id&quot;: &quot;ROR identifier of your organisation&quot;&#10;          }&#10;        ]&#10;      }&#10;    ],&#10;    &quot;description&quot;: &quot;What it is, where its record is kept and how it bears on Exponential Technology Report 2026: Cybersecurity and Advanced Cryptography.&quot;,&#10;    &quot;rights&quot;: [&#10;      {&#10;        &quot;id&quot;: &quot;cc-by-4.0&quot;&#10;      }&#10;    ],&#10;    &quot;subjects&quot;: [&#10;      {&#10;        &quot;subject&quot;: &quot;Nexus Reports&quot;&#10;      },&#10;      {&#10;        &quot;subject&quot;: &quot;Cybersecurity and Advanced Cryptography&quot;&#10;      },&#10;      {&#10;        &quot;subject&quot;: &quot;Exponential Technology Report \u00b7 XT-10&quot;&#10;      }&#10;    ],&#10;    &quot;related_identifiers&quot;: [&#10;      {&#10;        &quot;identifier&quot;: &quot;https:\/\/therisk.global\/nexus-reports\/editions\/xt-10\/&quot;,&#10;        &quot;scheme&quot;: &quot;url&quot;,&#10;        &quot;relation_type&quot;: {&#10;          &quot;id&quot;: &quot;issupplementto&quot;&#10;        },&#10;        &quot;resource_type&quot;: {&#10;          &quot;id&quot;: &quot;publication-report&quot;&#10;        }&#10;      }&#10;    ],&#10;    &quot;version&quot;: &quot;1.0.0&quot;&#10;  },&#10;  &quot;custom_fields&quot;: {},&#10;  &quot;access&quot;: {&#10;    &quot;record&quot;: &quot;public&quot;,&#10;    &quot;files&quot;: &quot;public&quot;&#10;  },&#10;  &quot;files&quot;: {&#10;    &quot;enabled&quot;: true&#10;  },&#10;  &quot;parent&quot;: {&#10;    &quot;communities&quot;: {&#10;      &quot;default&quot;: &quot;nexusreports&quot;&#10;    }&#10;  }&#10;}<\/code><\/pre><\/figure><\/div><div class=\"nx-nr-os-hook\" data-nx-research-hub=\"slot\" data-nx-research-context=\"{&quot;org&quot;:&quot;GCRI&quot;,&quot;site&quot;:&quot;gcri&quot;,&quot;url&quot;:&quot;https:\/\/therisk.global\/nexus-reports\/editions\/xt-10\/&quot;,&quot;kind&quot;:&quot;edition&quot;,&quot;subject&quot;:&quot;Cybersecurity and Advanced Cryptography&quot;,&quot;series&quot;:[&quot;Exponential Technology Report \u00b7 XT-10&quot;]}\" hidden><\/div><\/section><\/div><div id=\"nx-nr-xt-10-pillars\"><section class=\"nrp-block\" id=\"nx-nrp-xt-10-cc-s5\" aria-labelledby=\"nx-nrp-xt-10-cc-s5-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-xt-10-cc-s5-h\"><span class=\"nrp-num\">C.5<\/span><span>Where this edition sits among the six pillars<\/span><\/h2><p class=\"nrp-stand\">Foundry seals the evidence and Universe tests it; Reports publishes it; Standards takes its corrections and Academy teaches from it.<\/p><ol class=\"nx-pl-list\"><li data-pillar=\"foundry\" data-hue=\"infrastructure\"><span class=\"nx-pl-dot\" aria-hidden=\"true\"><\/span><strong>F03 Sealed observations and indicator series<\/strong> <span class=\"nx-pl-in\">Foundry<\/span> Sealed observations and indicator series behind a profile (closeout).<\/li><li data-pillar=\"universe\" data-hue=\"water\"><span class=\"nx-pl-dot\" aria-hidden=\"true\"><\/span><strong>F04 After-action and scenario findings for<\/strong> <span class=\"nx-pl-in\">Universe<\/span> After-action and scenario findings for chapters 10 and 13 (after action review).<\/li><li data-pillar=\"foundry\" data-hue=\"infrastructure\"><span class=\"nx-pl-dot\" aria-hidden=\"true\"><\/span><strong>F05 National Portfolio movement for chapter<\/strong> <span class=\"nx-pl-in\">Foundry<\/span> National Portfolio movement for chapter 11 (after action review).<\/li><li data-pillar=\"standards\" data-hue=\"biodiversity\"><span class=\"nx-pl-dot\" aria-hidden=\"true\"><\/span><strong>Applied in editions<\/strong> <span class=\"nx-pl-in\">Standards<\/span> <a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/\" data-tc=\"Nexus Standards\" data-tk=\"Nexus Standards\" data-td=\"The foundation standards\">Nexus Standards<\/a>: applied in editions.<\/li><li data-pillar=\"reports\" data-hue=\"energy\"><span class=\"nx-pl-dot\" aria-hidden=\"true\"><\/span><strong>XT-10 edition<\/strong> <span class=\"nx-pl-in\">Reports<\/span> Cybersecurity and Advanced Cryptography 2026, published in every format with its sources, citation and corrections.<\/li><li data-pillar=\"standards\" data-hue=\"biodiversity\"><span class=\"nx-pl-dot\" aria-hidden=\"true\"><\/span><strong>F06 Method and correction findings as change<\/strong> <span class=\"nx-pl-in\">Standards<\/span> Method and correction findings as change proposals (correction).<\/li><li data-pillar=\"universe\" data-hue=\"water\"><span class=\"nx-pl-dot\" aria-hidden=\"true\"><\/span><strong>F12 Q4 synthesis informs the next-year<\/strong> <span class=\"nx-pl-in\">Universe<\/span> Q4 synthesis informs the next-year mandate (renewal).<\/li><li data-pillar=\"academy\" data-hue=\"risk\"><span class=\"nx-pl-dot\" aria-hidden=\"true\"><\/span><strong>Taught in the open<\/strong> <span class=\"nx-pl-in\">Academy<\/span> Risk Academy: taught in the open.<\/li><\/ol><p class=\"nx-caption\"><span>What Foundry and Universe hand to this edition, and what it hands to Standards, Universe and Academy. From the programme spine; XT-10 is a drafted Baseline Edition, so these handoffs run from its first operational quarter.<\/span><\/p><ul class=\"nx-pl-legend\" aria-label=\"Pillars\"><li data-pillar=\"labs\" data-hue=\"social\"><span class=\"nx-pl-dot\" aria-hidden=\"true\"><\/span><a class=\"nx-link\" href=\"https:\/\/therisk.global\/nexus-labs\/\">Labs<\/a><\/li><li data-pillar=\"foundry\" data-hue=\"infrastructure\"><span class=\"nx-pl-dot\" aria-hidden=\"true\"><\/span><a class=\"nx-link\" href=\"https:\/\/therisk.global\/nexus-foundry\/\">Foundry<\/a><\/li><li data-pillar=\"universe\" data-hue=\"water\"><span class=\"nx-pl-dot\" aria-hidden=\"true\"><\/span><a class=\"nx-link\" href=\"https:\/\/universe.nexus\/\">Universe<\/a><\/li><li data-pillar=\"standards\" data-hue=\"biodiversity\"><span class=\"nx-pl-dot\" aria-hidden=\"true\"><\/span><a class=\"nx-link\" href=\"https:\/\/nexustandards.com\/\">Nexus Standards<\/a><\/li><li data-pillar=\"reports\" data-hue=\"energy\"><span class=\"nx-pl-dot\" aria-hidden=\"true\"><\/span><a class=\"nx-link\" href=\"https:\/\/therisk.global\/nexus-reports\/\">Reports<\/a><\/li><li data-pillar=\"academy\" data-hue=\"risk\"><span class=\"nx-pl-dot\" aria-hidden=\"true\"><\/span><a class=\"nx-link\" href=\"https:\/\/risksacademy.com\/\">Risk Academy<\/a><\/li><\/ul><div class=\"nx-table-wrap\"><table class=\"nx-table nx-rd-table\" data-stack=\"true\"><thead><tr><th scope=\"col\">Handoff<\/th><th scope=\"col\">Between<\/th><th scope=\"col\">What crosses, and when<\/th><\/tr><\/thead><tbody><tr data-pillar=\"foundry\"><td><span class=\"nx-rd-code\">F03<\/span><\/td><td>Foundry to Reports<\/td><td>Sealed observations and indicator series behind a profile (closeout).<\/td><\/tr><tr data-pillar=\"universe\"><td><span class=\"nx-rd-code\">F04<\/span><\/td><td>Universe to Reports<\/td><td>After-action and scenario findings for chapters 10 and 13 (after action review).<\/td><\/tr><tr data-pillar=\"foundry\"><td><span class=\"nx-rd-code\">F05<\/span><\/td><td>Foundry to Reports<\/td><td>National Portfolio movement for chapter 11 (after action review).<\/td><\/tr><tr data-pillar=\"standards\"><td><span class=\"nx-rd-code\">Ring<\/span><\/td><td>Nexus Standards to Reports<\/td><td>Nexus Standards: applied in editions.<\/td><\/tr><tr data-pillar=\"standards\"><td><span class=\"nx-rd-code\">F06<\/span><\/td><td>Reports to Nexus Standards<\/td><td>Method and correction findings as change proposals (correction).<\/td><\/tr><tr data-pillar=\"universe\"><td><span class=\"nx-rd-code\">F12<\/span><\/td><td>Reports to Universe<\/td><td>Q4 synthesis informs the next-year mandate (renewal).<\/td><\/tr><tr data-pillar=\"academy\"><td><span class=\"nx-rd-code\">Ring<\/span><\/td><td>Reports to Risk Academy<\/td><td>Risk Academy: taught in the open.<\/td><\/tr><\/tbody><\/table><\/div><\/section><\/div><\/div><\/article><\/div><\/div><div class=\"nrp-noprint\"><section id=\"nx-sec-nr-gateway\" class=\"nx-section\" data-hue=\"systemic\" data-tone=\"alt\" aria-labelledby=\"nx-nr-gateway-h\"><div class=\"nx-container\"><div class=\"nx-section-head\"><div class=\"nx-eyebrow-row\"><span class=\"nx-eyebrow\">Reports<\/span><span class=\"nx-rule\" aria-hidden=\"true\"><\/span><span class=\"nx-eyebrow\">Contribute<\/span><\/div><h2 id=\"nx-nr-gateway-h\" class=\"nx-section-title\">Send evidence or a correction on Cybersecurity and Advanced Cryptography.<\/h2><p class=\"nx-lede\">Reports is the Consortium&#8217;s quarterly publication, written by six desks. This page sits with the GCRI <a class=\"nx-link nx-term\" href=\"https:\/\/docs.therisk.global\/organization\/systems\" data-tc=\"Systems\" data-tk=\"Nexus Standards\" data-td=\"The twenty Nexus systems, NXS-CMD to NXS-LAB\">Systems<\/a> Evidence desk. What you know about this subject can become evidence, a case or a correction in the next edition, credited to you and published under CC BY 4.0 where it is your own work. Sent to the wrong desk, it is forwarded, not refused.<\/p><div class=\"nx-chips\"><span class=\"nx-chip\">GCRI Systems Evidence desk<\/span><span class=\"nx-chip\">Exponential Technology<\/span><\/div><\/div><div class=\"nx-section-body\"><ul class=\"nx-dest\"><li><a class=\"nx-dest-card\" href=\"https:\/\/therisk.global\/nexus-reports\/write-to-us\/contact\/\"><span class=\"nx-dest-top\"><span class=\"nx-dest-rel\">Email<\/span><span class=\"nx-dest-host\">Gateway GW-GCRI<\/span><\/span><span class=\"nx-dest-title\">Send it from this page<\/span><span class=\"nx-dest-why\">Evidence, a correction, a case, a method, a review, a translation or profile input. It arrives tagged with this page, so the editor who owns it receives it.<\/span><span class=\"nx-dest-go\" aria-hidden=\"true\"><svg class=\"nx-arrow\" viewBox=\"0 0 16 16\" aria-hidden=\"true\"><path d=\"M3 8h10M9 4l4 4-4 4\"\/><\/svg><\/span><\/a><\/li><li><a class=\"nx-dest-card\" href=\"https:\/\/therisk.global\/nexus-reports\/open-science\/#nx-sec-zenodo\"><span class=\"nx-dest-top\"><span class=\"nx-dest-rel\">Zenodo<\/span><span class=\"nx-dest-host\">Open deposit<\/span><\/span><span class=\"nx-dest-title\">Deposit it and submit to the community<\/span><span class=\"nx-dest-why\">Publish your own record on Zenodo with your ORCID iD, then submit it to the Reports community there. Curators review it; the DOI stays yours.<\/span><span class=\"nx-dest-go\" aria-hidden=\"true\"><svg class=\"nx-arrow\" viewBox=\"0 0 16 16\" aria-hidden=\"true\"><path d=\"M3 8h10M9 4l4 4-4 4\"\/><\/svg><\/span><\/a><\/li><li><a class=\"nx-dest-card\" href=\"https:\/\/therisk.global\/nexus-reports\/contribute\/#nx-sec-routing\"><span class=\"nx-dest-top\"><span class=\"nx-dest-rel\">Reports<\/span><span class=\"nx-dest-host\">GCRI<\/span><\/span><span class=\"nx-dest-title\">See which desk takes what you have<\/span><span class=\"nx-dest-why\">The routing table opens the contribution page: what you have, the desk that takes it, how each contribution is reviewed and credited, and the licence.<\/span><span class=\"nx-dest-go\" aria-hidden=\"true\"><svg class=\"nx-arrow\" viewBox=\"0 0 16 16\" aria-hidden=\"true\"><path d=\"M3 8h10M9 4l4 4-4 4\"\/><\/svg><\/span><\/a><\/li><\/ul><div class=\"nx-live-slot\" data-nxf-slot=\"contribute\" data-nxf-kind=\"workflow\" data-nxf-resource=\"nexus:\/\/gcri\/nexus-reports\/editions\/xt-10\/full#contribute\" data-nxf-title=\"Contribute evidence\" data-nxf-height=\"480\" hidden><\/div><p class=\"nx-note nx-mt-3\">Never send personal data, sensitive infrastructure detail or anything you have no right to share. A contribution is reviewed before use; sending it confers no authorship or editorial rights, and sponsorship never buys a finding.<\/p><\/div><\/div><\/section><\/div><p class=\"nx-note\" data-nr-rights=\"true\"><a class=\"nx-link\" rel=\"license\" href=\"https:\/\/creativecommons.org\/licenses\/by\/4.0\/\">CC BY 4.0<\/a> Free to read. Text and figures: CC BY 4.0. Data: CC0 1.0. Authors keep copyright. Published by GCRI Canada.<\/p><section class=\"nx-section nx-deeper-band\" aria-labelledby=\"nx-deeper-therisk-global-nexus-reports-editions-xt-10-full-h\"><div class=\"nx-container\"><nav class=\"nx-deeper\" aria-labelledby=\"nx-deeper-therisk-global-nexus-reports-editions-xt-10-full-h\" data-nx-deeper=\"3\" data-nx-resources=\"1 1 1\"><h2 class=\"nx-deeper-h\" id=\"nx-deeper-therisk-global-nexus-reports-editions-xt-10-full-h\">Go deeper<\/h2><ul><li><a href=\"https:\/\/docs.therisk.global\/organization\/model\/scenarios\/urban-flood\" data-ext><span class=\"nx-deeper-k\">Documentation:<\/span> Urban flood<span class=\"nx-deeper-x\" aria-hidden=\"true\">\u2197<\/span><span class=\"nx-deeper-sr\"> (opens another site)<\/span><\/a><\/li><li><a href=\"https:\/\/risksacademy.com\/risk-science\/risk-information-standards\/\" data-ext><span class=\"nx-deeper-k\">Academy:<\/span> Risk information standards and interoperability<span class=\"nx-deeper-x\" aria-hidden=\"true\">\u2197<\/span><span class=\"nx-deeper-sr\"> (opens another site)<\/span><\/a><\/li><li><a href=\"https:\/\/nexustandards.com\/data\/identification-standards\/\" data-ext><span class=\"nx-deeper-k\">Standards:<\/span> Identification (the UNI)<span class=\"nx-deeper-x\" aria-hidden=\"true\">\u2197<\/span><span class=\"nx-deeper-sr\"> (opens another site)<\/span><\/a><\/li><\/ul><\/nav><\/div><\/section><\/div><\/div><script class=\"_iub_cs_skip\">window.__nxMount ? window.__nxMount(document.currentScript) : null;<\/script><style>@media print { @page { margin: 20mm 17mm 20mm 17mm; @top-left { content: \"Nexus Reports\"; font: 500 7.5pt \"IBM Plex Mono\", monospace; color: #4a4a4a; } @top-right { content: \"Exponential Technology Report 2026: Cybersecurity and Advanced Cryptography \\0000b7  Baseline Edition 2026\"; font: 400 7.5pt \"IBM Plex Sans\", sans-serif; color: #4a4a4a; } @bottom-left { content: \"NR-XTECH-CRYPTO-GLOBAL-2026-BASELINE \\0000b7  Draft, not released\"; font: 400 7pt \"IBM Plex Mono\", monospace; color: #4a4a4a; } @bottom-center { content: \"CC BY 4.0. Free to read. Authors keep copyright.\"; font: 400 6.5pt \"IBM Plex Sans\", sans-serif; color: #4a4a4a; } @bottom-right { content: counter(page) \" \/ \" counter(pages); font: 500 7.5pt \"IBM Plex Mono\", monospace; color: #000000; } } @page :first { @top-left { content: none; } @top-right { content: none; } } html, body { background: #ffffff; } nexus-header, nexus-footer, #wpadminbar, .site-header, .site-footer, #masthead, #colophon, .sidebar, .widget-area, .comments-area, .post-navigation, .entry-meta, .page-header, .elementor-location-header, .elementor-location-footer, body > header, body > footer { display: none; } .nxe-host { margin: 0; padding: 0; } }<\/style><script>(function () { var D = document; function hosts(f) { var h = D.querySelectorAll(\".nxe-host\"); for (var i = 0; i < h.length; i++) { f(h[i].shadowRoot ? h[i].shadowRoot : h[i]); } } function reveal() { hosts(function (r) { var b = r.querySelectorAll(\"[data-nrp-act][hidden]\"); for (var i = 0; i < b.length; i++) { b[i].hidden = false; } }); } function say(el, t) { var p = el; while (p) { var l = p.querySelector ? p.querySelector(\".nrp-live\") : null; if (l) { l.textContent = t; return; } p = p.parentElement; } } D.addEventListener(\"click\", function (e) { var path = e.composedPath ? e.composedPath() : [e.target]; for (var i = 0; i < path.length; i++) { var el = path[i]; var act = el.getAttribute ? el.getAttribute(\"data-nrp-act\") : null; if (act === \"print\") { window.print(); return; } if (act === \"copy\") { var t = el.getAttribute(\"data-nrp-text\"); if (navigator.clipboard) { navigator.clipboard.writeText(t).then(function () { say(el, \"Copied.\"); }, function () { say(el, \"CLIPBOARD_UNAVAILABLE: select the text and copy it.\"); }); } else { say(el, \"CLIPBOARD_UNAVAILABLE: select the text and copy it.\"); } return; } } }); if (D.readyState === \"loading\") { D.addEventListener(\"DOMContentLoaded\", reveal); } else { reveal(); } addEventListener(\"load\", reveal); setTimeout(reveal, 1500); })();<\/script>\n\n\n<script type=\"application\/ld+json\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Report\",\"@id\":\"https:\/\/therisk.global\/nexus-reports\/editions\/xt-10\/full\/#report\",\"name\":\"Cybersecurity and Advanced Cryptography 2026: complete edition\",\"headline\":\"Cybersecurity and Advanced Cryptography 2026: complete edition\",\"description\":\"The complete Exponential Technology Report 2026: Cybersecurity and Advanced Cryptography at one address: cover, imprint, contents.\",\"inLanguage\":\"en\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/therisk.global\/nexus-reports\/editions\/xt-10\/full\/#webpage\"},\"author\":{\"@id\":\"https:\/\/therisk.global\/#organization\",\"@type\":\"Organization\",\"name\":\"The Global Centre for Risk and Innovation\",\"url\":\"https:\/\/therisk.global\/\",\"alternateName\":\"GCRI\"},\"publisher\":{\"@id\":\"https:\/\/therisk.global\/#organization\"},\"license\":\"https:\/\/creativecommons.org\/licenses\/by\/4.0\/\",\"isAccessibleForFree\":true,\"creativeWorkStatus\":\"Draft\"}]}<\/script>\n\n<!-- nx-rev:b8bf7685b1615914 -->\n<!-- nx-shared:cf17354188ef -->\n<!-- nx-path:\/editions\/xt-10\/full\/ -->","protected":false},"excerpt":{"rendered":"<p>The complete Exponential Technology Report 2026: Cybersecurity and Advanced Cryptography at one address: cover, imprint, contents.<\/p>\n","protected":false},"author":0,"featured_media":0,"parent":708,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_buddyx_sub_header_visibility":"","_buddyx_sub_header_title_visibility":"","_hide_show_side_panel":"","_buddyxpro_page_sidebar":"","_buddyxpro_page_disable_header":"","_buddyxpro_page_disable_footer":"","_buddyxpro_page_content_width":"","_buddyxpro_page_header_style":"","_buddyxpro_page_color_mode":"","_buddyxpro_page_loader":"","_nx_seo_description":"The complete Exponential Technology Report 2026: Cybersecurity and Advanced Cryptography at one address: cover, imprint, contents.","_nx_seo_title":"Cybersecurity and Advanced Cryptography 2026 | Reports GCRI","_nx_seo_image":"","_nx_seo_jsonld":"{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/therisk.global\/nexus-reports\/editions\/xt-10\/full\/#webpage\",\"url\":\"https:\/\/therisk.global\/nexus-reports\/editions\/xt-10\/full\/\",\"name\":\"Cybersecurity and Advanced Cryptography 2026: complete edition\",\"creativeWorkStatus\":\"Draft\",\"description\":\"The complete Exponential Technology Report 2026: Cybersecurity and Advanced Cryptography at one address: cover, imprint, contents.\",\"inLanguage\":\"en\",\"isPartOf\":{\"@id\":\"https:\/\/therisk.global\/nexus-reports\/#website\"},\"license\":\"https:\/\/creativecommons.org\/licenses\/by\/4.0\/\",\"publisher\":{\"@id\":\"https:\/\/therisk.global\/#organization\"},\"breadcrumb\":{\"@id\":\"https:\/\/therisk.global\/nexus-reports\/editions\/xt-10\/full\/#breadcrumbs\"}},{\"@type\":\"Report\",\"@id\":\"https:\/\/therisk.global\/nexus-reports\/editions\/xt-10\/full\/#complete\",\"name\":\"Cybersecurity and Advanced Cryptography 2026\",\"url\":\"https:\/\/therisk.global\/nexus-reports\/editions\/xt-10\/full\/\",\"identifier\":[{\"@type\":\"PropertyValue\",\"propertyID\":\"NR\",\"value\":\"NR-XTECH-CRYPTO-GLOBAL-2026-BASELINE-v1.0.0\"},{\"@type\":\"PropertyValue\",\"propertyID\":\"NR-alias\",\"value\":\"NR-XTC-XT-10-2026-BL\"}],\"reportNumber\":\"NR-XTECH-CRYPTO-GLOBAL-2026-BASELINE\",\"version\":\"1.0.0\",\"inLanguage\":\"en\",\"license\":\"https:\/\/creativecommons.org\/licenses\/by\/4.0\/\",\"creativeWorkStatus\":\"Draft\",\"publisher\":{\"@id\":\"https:\/\/therisk.global\/#organization\"},\"editor\":{\"@type\":\"Person\",\"name\":\"Saeed Valadbaygi\",\"jobTitle\":\"Chief Steward and Managing Editor\",\"affiliation\":{\"@id\":\"https:\/\/therisk.global\/#organization\"}},\"author\":{\"@id\":\"https:\/\/therisk.global\/#organization\"},\"isPartOf\":{\"@id\":\"https:\/\/therisk.global\/nexus-reports\/editions\/xt-10\/#report\"}},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/therisk.global\/nexus-reports\/#website\",\"url\":\"https:\/\/therisk.global\/nexus-reports\/\",\"name\":\"Reports \u00b7 GCRI\",\"publisher\":{\"@id\":\"https:\/\/therisk.global\/#organization\"}},{\"@type\":\"Organization\",\"@id\":\"https:\/\/therisk.global\/#organization\",\"name\":\"The Global Centre for Risk and Innovation\",\"alternateName\":\"GCRI\",\"url\":\"https:\/\/therisk.global\/\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/therisk.global\/nexus-reports\/editions\/xt-10\/full\/#breadcrumbs\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Reports\",\"item\":\"https:\/\/therisk.global\/nexus-reports\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Editions: the Reports catalogue\",\"item\":\"https:\/\/therisk.global\/nexus-reports\/editions\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Exponential Technology Report 2026: Cybersecurity and Advanced Cryptography\",\"item\":\"https:\/\/therisk.global\/nexus-reports\/editions\/xt-10\/\"},{\"@type\":\"ListItem\",\"position\":4,\"name\":\"Cybersecurity and Advanced Cryptography 2026: complete edition\",\"item\":\"https:\/\/therisk.global\/nexus-reports\/editions\/xt-10\/full\/\"}]}]}","_nx_i18n_locale":"","_nx_i18n_group":"","nexus_page_kind":"","footnotes":"","_nrp_robots":"noindex","_nrp_edition":"708","_nx_seo_image_alt":"","_nx_seo_canonical":"https:\/\/therisk.global\/nexus-reports\/editions\/xt-10\/full\/","_nx_seo_robots":"noindex,follow","_nx_seo_schema_type":"Report"},"class_list":["post-1693","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/therisk.global\/nexus-reports\/wp-json\/wp\/v2\/pages\/1693","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/therisk.global\/nexus-reports\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/therisk.global\/nexus-reports\/wp-json\/wp\/v2\/types\/page"}],"replies":[{"embeddable":true,"href":"https:\/\/therisk.global\/nexus-reports\/wp-json\/wp\/v2\/comments?post=1693"}],"version-history":[{"count":0,"href":"https:\/\/therisk.global\/nexus-reports\/wp-json\/wp\/v2\/pages\/1693\/revisions"}],"up":[{"embeddable":true,"href":"https:\/\/therisk.global\/nexus-reports\/wp-json\/wp\/v2\/pages\/708"}],"wp:attachment":[{"href":"https:\/\/therisk.global\/nexus-reports\/wp-json\/wp\/v2\/media?parent=1693"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}