
FYI: Post-quantum security depends on crypto agility as much as it depends on cryptography. Explanation: Think of migrating to post-quantum security as upgrading the locks on your house. Having the strongest lock available is important. But what if a better lock-picking technique emerges tomorrow? Can you replace your locks quickly, or would you need to rebuild the entire house? What if you can replace the locks easily, but the other tenants have to agree first, and they prefer to wait until they actually see a thieve trying to break in? All these things that let you migrate quickly to safer cryptography - that's crypto agility. Getting close to post-quantum security matters. But so does being able to adapt quickly when cryptography needs to change. You need both.

