These challenges can be addressed only if Sigstore allows for a certain degree of cryptographic agility. To address this, the Sigstore community has developed a design document outlining how to introduce cryptographic agility while maintaining strong security guarantees. The implementationTo enable cryptographic agility across the Sigstore ecosystem, we needed to make coordinated changes that would work together seamlessly. This work proved that our modular architecture can accommodate diverse cryptographic algorithms and provides a solid foundation for future additions, including post-quantum cryptography. Cryptographic flexibility in actionLet’s see this cryptographic flexibility in action by setting up a custom Sigstore deployment.