Commvault: Why Crypto Agility Is Essential for Quantum Readiness

Name: Commvault: Why Crypto Agility Is Essential for Quantum Readiness
Uploaded: 2026-07-21T11:22:06-04:00
Duration: 50 s
Description: As post-quantum cryptography standards continue to evolve, organizations need more than a single quantum-resistant algorithm. They need the ability to adapt. In this STRIVE clip, Michael Fasulo explains why crypto agility is becoming a foundational req...

Commvault

07/21/2026

0 (0%)

Report Like Favorite

TL;DR

Crypto agility allows organizations to swap cryptographic algorithms as standards evolve, rather than being locked into a single post-quantum solution.
SIKE, a post-quantum algorithm, passed three rounds of NIST evaluation before being broken with a single-core CPU — proving no algorithm is permanently safe.
NIST's ongoing work on FIPS 203, 204, and 205 means PQC standards are still maturing, and long-term quantum readiness requires architectural flexibility.

Summary

In this short clip from Commvault's STRIVE series, Michael Fasulo makes the case for crypto agility as a foundational requirement in any post-quantum cryptography (PQC) strategy. Rather than treating quantum readiness as a one-time algorithm swap, Fasulo argues that organizations must build the structural flexibility to change cryptographic algorithms as standards evolve. He illustrates this with the cautionary example of SIKE — a post-quantum algorithm that survived three full rounds of NIST evaluation before researchers cracked it using a single-core CPU. The lesson is stark: even algorithms that appear robust under rigorous scrutiny can fail unexpectedly. Unlike traditional cryptographic upgrades where the response is simply increasing cipher size, crypto agility enables organizations to swap algorithms entirely without overhauling their security architecture. As NIST continues refining its FIPS 203, 204, and 205 recommendations, the PQC landscape remains in flux, and any organization that locks into a single algorithm today may find itself exposed tomorrow. Crypto agility is the hedge against that uncertainty.

Chapters

0:00 - Crypto Agility Introduced
0:06 - Agility vs. Traditional Cryptography
0:16 - NIST PQC Standards Overview
0:36 - SIKE Failure and Key Lesson

Key Quotes

0:04 "I think that's really where we differentiate ourselves, right? ..."
0:11 "Crypto agility allows us to switch."
0:36 "Cyc made it through three rounds, and then they were able to actually crack it with like a single core CPU."
0:42 "So, you just never know."

FAQ

What is crypto agility and why does it matter for quantum readiness?

Crypto agility is the ability to switch cryptographic algorithms without requiring a full architectural overhaul. It matters for quantum readiness because post-quantum cryptography standards are still evolving — algorithms considered secure today may be broken in the future, as demonstrated by the SIKE algorithm failing after three rounds of NIST evaluation.

What happened to the SIKE algorithm?

SIKE was a post-quantum algorithm that advanced through three rounds of NIST's evaluation process for quantum-resistant standards. Despite that scrutiny, researchers were ultimately able to crack it using a single-core CPU, illustrating that no algorithm should be assumed permanently secure.

Categories:

Tags:

Show more Show less

TL;DR

Summary

Chapters

Key Quotes

FAQ

Illumio + Netskope: Zero Trust in the Age of AI Autonomy

Ask Your Cloud Anything: Unlocking Governance Silos in your Environments

Insights from Attackers During the FIFA World Cup: A HUMAN Dialogue

Becoming Agent Ready: Insights from Cyera's Expertise