Post-Quantum Cryptography for Sigstore

Future-Proofing Software Supply Chain Security: Post-Quantum Cryptography for Sigstore Post-quantum cryptography (PQC) is rapidly transitioning from a theoretical exploration to an immediate infrastructure necessity. With recent advancements accelerating the estimated arrival of cryptographically relevant quantum computers (CRQCs), industry leaders like Google and Cloudflare have expedited their migration timelines to 2029, and governments have pushed up timelines to 2030 as well. To stay ahead of this threat, Sigstore is adjusting our timeline to support PQC algorithms immediately.