Protocol
Which TLS versions the endpoint accepted.
For exchanges
See which public keys still need a new plan.
Scan helps exchanges find where their public cryptography is quantum-vulnerable, so they can plan the move to post-quantum cryptography.
Learn the ideas · How a pilot works
Drag or touch the field. It ripples, then settles.
The shift
Today’s public keys were built for today’s computers
01
They are already on the wire
Sites and APIs agree keys in public, then prove who they are with a certificate. The usual algorithms are X25519, ECDSA and RSA.
02
A later machine changes the math
A large enough quantum computer could decrypt traffic recorded under a quantum-vulnerable key exchange. The useful move is to see those algorithms now.
03
The new algorithms exist
ML-KEM and ML-DSA are published NIST standards. Hybrid TLS, such as X25519MLKEM768, is one way a stack starts the move.
What Scan writes down
Four notes from one handshake
Key exchange
A hybrid post-quantum group, or a classical group on its own.
Certificate
The signature algorithm, the key type and the expiry.
A plan
A migration checklist and a CycloneDX CBOM.
Then the hardware
Designed for keys that must outlast today’s math.
The pictures are concept renders. The product you can pilot is Scan.
