Certes wins Frost & Sullivan 2026 post-quantum cryptography recognition for its Cryptographic Abstraction Layer platform
Certes received Frost & Sullivan's 2026 Global Enabling Technology Leadership Recognition in post-quantum cryptography (PQC) after an independent vendor evaluation. This is vendor and industry recognition news, not a security incident. The article frames the underlying risk as "harvest now, decrypt later" attacks, where data intercepted today could be exposed once sufficiently powerful quantum computers exist. Frost & Sullivan says the risk is greatest for data with long regulatory, legal or commercial lifespans. The article presents the Certes platform as a way to protect such data while the multi-year cryptographic migration proceeds.
Detalhes técnicos
- The Cryptographic Abstraction Layer (CAL) sits between applications and infrastructure and moves cryptographic protection out of the underlying stack, so teams can manage cryptographic change centrally.
- The platform has two components: the Certes Enforcement Point (CEP), which encrypts and decrypts in the data path, and the Certes Policy Manager (CPM), which manages policies and controls centrally.
- A policy-specific key architecture gives each application or data flow its own key material, separate rotation schedules and customer-controlled key components. It is combined with quantum-based random number generation and customer-owned keys.
- Layer 4 payload protection encrypts the payload and preserves original network headers, so routing, QoS, monitoring and SD-WAN tools keep working.
- Deployment options include physical appliances, virtual machines on VMware ESXi, KVM, Red Hat and Nutanix AHV, and Windows and Linux agents. Version 7 expands agent and cloud deployment options.
- Additional use cases cited are cryptographic segmentation of IT and OT environments to limit lateral movement, a virtual air gap that isolates critical applications and backups during an active attack, and encryption that keeps sensitive data from internal or external LLMs.
Remediação
The article gives no vulnerability-specific remediation. It advises running protection of long-lived data in parallel with the longer PQC migration, and managing cryptographic change centrally rather than waiting for each vendor to ship quantum-safe updates.
Linha do tempo
-
Certes wins Frost & Sullivan 2026 post-quantum cryptography recognition for its Cryptographic Abstraction Layer platform
ler a análise desta fonte ocultar
Certes received Frost & Sullivan's 2026 Global Enabling Technology Leadership Recognition in post-quantum cryptography (PQC) after an independent vendor evaluation. This is vendor and industry recognition news, not a security incident. The article frames the underlying risk as "harvest now, decrypt later" attacks, where data intercepted today could be exposed once sufficiently powerful quantum computers exist. Frost & Sullivan says the risk is greatest for data with long regulatory, legal or commercial lifespans. The article presents the Certes platform as a way to protect such data while the multi-year cryptographic migration proceeds.
Technical Details
- The Cryptographic Abstraction Layer (CAL) sits between applications and infrastructure and moves cryptographic protection out of the underlying stack, so teams can manage cryptographic change centrally.
- The platform has two components: the Certes Enforcement Point (CEP), which encrypts and decrypts in the data path, and the Certes Policy Manager (CPM), which manages policies and controls centrally.
- A policy-specific key architecture gives each application or data flow its own key material, separate rotation schedules and customer-controlled key components. It is combined with quantum-based random number generation and customer-owned keys.
- Layer 4 payload protection encrypts the payload and preserves original network headers, so routing, QoS, monitoring and SD-WAN tools keep working.
- Deployment options include physical appliances, virtual machines on VMware ESXi, KVM, Red Hat and Nutanix AHV, and Windows and Linux agents. Version 7 expands agent and cloud deployment options.
- Additional use cases cited are cryptographic segmentation of IT and OT environments to limit lateral movement, a virtual air gap that isolates critical applications and backups during an active attack, and encryption that keeps sensitive data from internal or external LLMs.
Remediation
The article gives no vulnerability-specific remediation. It advises running protection of long-lived data in parallel with the longer PQC migration, and managing cryptographic change centrally rather than waiting for each vendor to ship quantum-safe updates.