PQC / CRYPTO-AGILITY / CBOM

Protocol Pressure Map.

Additional page sections

Scores protocol migration pressure from exposure, difficulty, business criticality and data lifetime.

Version 1.1 Beta Protected engine Protocol pressure heatmap
PURPOSE

Decision supported.

Scores protocol migration pressure from exposure, difficulty, business criticality and data lifetime.

Intended user

research, assurance and technical review teams

Output status

Preliminary outputHuman review requiredNot certification
USE CASES

Where this instrument fits.

  • Prioritize protocol families for PQC review
  • Identify high-pressure cryptographic surfaces
  • Plan pilots and supplier reviews
  • Explain why inventory must precede migration
INPUTS

Required input fields.

  • TLS/mTLS pressure (required): Low, Material, Critical
  • SSH pressure (required): Low, Material, Critical
  • VPN/IPsec pressure (required): Low, Material, Critical
  • Code/document signing pressure (required): Low, Material, Critical
  • PKI/CA pressure (required): Low, Material, Critical
  • OIDC/SAML/IAM pressure (required): Low, Material, Critical
  • Backups/archives pressure (required): Low, Material, Critical
  • Embedded/IoT pressure (required): Low, Material, Critical

Data handling: this interface uses the L2ET protected same-origin instrument engine. Do not enter confidential, regulated, privileged, incident, medical or sensitive operational data.

METHOD

Heatmap logic.

Creates a heatmap from exposure, migration difficulty, business criticality and data lifetime proxies for key protocol families.

Source families

PQC protocol migrationPKI modernizationcrypto-agility

Assumptions

  • Protocol pressure is approximate.
  • Implementation details may change priority.
  • Hidden protocol dependencies may exist.
INTERACTIVE INSTRUMENT

Protocol pressure heatmap.

Use the controls below to generate a preliminary artifact. The output is intentionally bounded and requires human review.

OUTPUT ARTIFACT

Protocol pressure heatmap.

The generated artifact includes findings, assumptions, limitations, recommended next actions and exportable structured output.

Export options

Copy outputMarkdownJSON
EXAMPLE

Example input and output.

Example input

TLS, signing and PKI are critical while IoT is low pressure.

Example output

Outputs heatmap showing PKI, TLS and signing as first review surfaces.

LIMITATIONS

What this tool does not do.

  • Does not inspect traffic.
  • Does not prove algorithm use.
  • Does not prescribe final migration sequence.

This instrument does not provide legal, medical, cryptographic, engineering, regulatory or compliance certification.

RELATED METHOD

Method and workflow links.

Read the family method note for assumptions, output artifacts, update policy and review boundaries.

Open methodology Open family

RELATED TOOLS

Suggested workflow sequence.

Post-Quantum Readiness Dashboard

Classifies quantum-safe readiness stage and identifies the first evidence actions for post-quantum transition.

open instrument →

Crypto Exposure Mapper

Maps user-entered assets, algorithms, protocols and data lifetimes into a quantum-vulnerable dependency inventory.

open instrument →

CBOM Builder

Builds a manual cryptographic bill of materials draft with algorithms, operations, owners, evidence and migration candidates.

open instrument →
CHANGELOG

Version history.

  • v1.1 - Research-grade instrument template, method notes, assumptions, limitations, example and export actions added.
  • Last updated: 2026-05-27.
  • Maturity state: Beta.