Every digital system runs on a hidden layer of mathematics it trusts completely. That layer is being replaced, the event that forces the replacement is built never to be seen, and no one has made the crossing itself a field of study.
The Field
Cryptographic transition studies is the interdisciplinary field of how societies replace the cryptography they depend on, uniting the engineering of the swap with its history, economics, law, and geopolitics, and with the practice of carrying one out.
It treats the transition, not the algorithm, as the object of study. The migration to post-quantum cryptography is the field’s founding instance, not its subject. Cryptographic transitions have recurred throughout the history of secret-keeping, and a society that can only improvise each one pays for the improvisation every time.
Why It Matters
Cryptography is the trust beneath everything: the money that moves, the secrets that stay secret, the proof that you are who you say you are. When its foundation is replaced, every one of those is in motion at once.
The hard science is already largely solved. The replacement algorithms have been chosen and the threat is understood. What no one owns is the transition itself: moving an entire civilization off one kind of cryptography and onto another, against a clock no one can see, because a break is worth the most to whoever keeps it quiet. A civilization that waits for proof has already lost the window. This is a problem of judgment under concealment far more than one of engineering, and it is the piece no existing discipline was built to carry.
Why No Discipline Accounts For It
Each adjacent discipline sees one face of the transition, and none accounts for the whole.
Applied cryptography
asks whether a cipher is secure, not how a society moves off one already running at scale.
Security engineering
treats the migration as an implementation task inside a single organization, rather than a phenomenon that recurs.
Science & technology studies
can read cryptography as a social object but has never claimed the transition as one.
Security & policy studies
treat cryptography as statecraft and leave the mathematics a black box.
The transition falls between them, and what decides whether it succeeds lives in how its parts constrain each other, where no single discipline can see it. This field is built to hold the whole of it, claiming none of their ground, only the part that is no one’s.
The Founding Principles
I
LaMarr’s Law The silent break
A cryptographic break is never announced by the party positioned to exploit it, because its worth lasts exactly as long as the target believes it unbroken. Every major break on record stayed hidden, from Enigma to VENONA.
II
The Lag Principle The installed base
Every transition runs past its deadline, because an installed base can only be replaced at the rate it was built, never at the rate the threat arrives. DES and SHA-1 each took more than a decade to retire.
III
The Blind-Window Principle Acting without proof
Because the break is hidden and the migration is slow, the moment when acting is both still possible and already proven necessary never comes. The only sound trigger is arithmetic: how long your secrets must last, plus how long you take to move, set against how far off the break is, never evidence of an attack.
They are falsifiable regularities of the whole structure rather than claims about quantum, which is why they have held across every transition on record, and why no single discipline was looking for them.
Why a Field, Not a Committee
Coordinating a migration is not the same as studying the transition. A working group convenes the specialists and produces the sum of their work, scoped to this instance. A field keeps the transition whole, across every instance, and builds what the specialists have never shared: a common framework, decision rules that hold before the threat is provable, and a text that teaches the whole crossing as one subject.
We have built fields for exactly this before. Operations research was born in the Second World War, when Britain set mathematicians and engineers to problems no single discipline owned. Bioethics emerged as a field only when transplants, life support, and genetic engineering forced decisions no single discipline could make. Cybersecurity itself was first studied as a discipline only in the early 1970s, when computing created a problem that belonged wholly to no existing field. Each was once a gap between disciplines. Each became a field because the gap was large, recurring, and nobody’s.
The Field’s Structure
The replacement of society’s trust infrastructure sits at the intersection of many disciplines by nature, so it cannot be studied honestly from one. The field is a hub across ten, and the ten form a chain rather than a set of parallel tracks: each sets the terms the next depends on, and pulling one link leaves the rest unable to hold.
Cryptographic EngineeringBuilding the replacement trust before the thing it replaces fails.
Security Engineering & Migration PracticeChanging the lock while the door stays in use, across systems that can never go dark.
Governance & Decision Under ConcealmentCommitting to the crossing before anyone can prove it was necessary.
Economics & Game TheoryWhat a secret is worth to someone willing to wait a decade to read it.
Geopolitics & National SecurityWhose mathematics the rest of the world is made to trust.
Law & RegulationWho answers for a secret whose protection quietly expired.
Behavioral & Psychological SecurityWhy capable institutions sleep through a threat they cannot see coming.
Cryptanalysis & the Physics of the BreakThe machine that opens a decade of sealed archives at once.
EthicsA capability whose entire value is that no one admits to holding it.
History of CryptologyEvery past transition was improvised, and the improvisation was paid for every time.
Research Agenda
The field opens a set of problems no single discipline is positioned to answer whole.
Timing a transition under concealment, when the triggering event is designed never to be observed.
Measuring transition lag and the forces that set it, so a migration’s true duration can be estimated rather than hoped.
Harvest-now-decrypt-later as time arbitrage, pricing a secret against the years until it can be read.
The political economy of whose mathematics becomes the standard the world migrates toward.
Why organizations systematically under-respond to slow, abstract, invisible threats.
Metrics that separate a structural transition from a cosmetic one.
Prior Art
This field does not arrive into empty territory. The transition has been circled before, named as a concept, flagged as a research gap, and traced through its own history, and the field builds above that work rather than competing with it.
Jeff Stapleton and Ralph Spencer Poore, “Cryptographic Transitions,” 2006, the first definition of the concept.
D. Ott, K. Paterson, and D. Moreau, “Where Is the Research on Cryptographic Transition and Agility?” Communications of the ACM, 2023.
“Cryptographic Transitions: Historical Considerations,” ISSA Journal, 2022.
MAgiCS, the workshop on Migration and Agility in Cryptographic Systems, co-located with Eurocrypt 2026.
On The Record
Founding paper · forthcoming
Cryptographic Transition Studies: A Framework
The founding paper names the field, argues why no existing discipline accounts for it whole, states the three principles, and maps the sub-disciplines. Preprint and DOI to follow.
Cite as: LaMarr, A. (2026). Cryptographic Transition Studies: A Framework. Preprint forthcoming.
To The Disciplines
This is one of the largest technological transitions any of us will live through, and right now it is run without a shared map, each discipline on its own clock. A change this size, run that way, fails in the seams.
If one of these pillars is yours, keep it, and help build the structure that holds them together. That is how this transition succeeds.