Crypto-Agile Architecture
Cryptography gets built in as a permanent assumption, and the migration deadline then arrives against a rewrite.
What it does
Systems built so the cryptographic primitive is a swappable component: it can be replaced without rewriting what sits on top of it.
Capabilities
- Cryptography treated as a component, not an assumption
- The primitive replaceable without rewriting above it
- The preparation that survives a real migration deadline
In use

In practice
A payments platform signs every transaction with one algorithm, called directly from eleven services. When a post-quantum standard is adopted, a crypto-agile system changes the primitive in one place, runs old and new signatures side by side through the migration, and retires the old one without rewriting what sits on top.
Built from

