@misc{qgpl-toolkit-spec,
  author       = {{The Open Reality Initiative}},
  title        = {{QGPL Compliance Toolkit Specification} (Draft v0.5.1)},
  year         = {2026},
  howpublished = {Repository specification},
  url          = {https://github.com/Grigaliunas/qgpl},
  note         = {docs/COMPLIANCE-TOOLKIT-SPEC.md}
}

@misc{qgpl-conformance-fixture,
  author       = {{The Open Reality Initiative}},
  title        = {{QGPL Compliance Toolkit Conformance Fixture} (spec-0.4)},
  year         = {2026},
  howpublished = {Repository conformance fixture},
  url          = {https://github.com/Grigaliunas/qgpl},
  note         = {docs/conformance/spec-0.4/}
}

@inproceedings{newman2022sigstore,
  author    = {Newman, Zachary and Meyers, John Speed and Torres-Arias, Santiago and others},
  title     = {{Sigstore}: Software Signing for Everybody},
  booktitle = {Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security (CCS '22)},
  year      = {2022},
  month     = nov,
  pages     = {2353--2367},
  publisher = {Association for Computing Machinery},
  doi       = {10.1145/3548606.3560596},
  url       = {https://doi.org/10.1145/3548606.3560596}
}

@inproceedings{torresarias2019intoto,
  author    = {Torres-Arias, Santiago and Afzali, Hammad and Kuppusamy, Trishank Karthik and Curtmola, Reza and Cappos, Justin},
  title     = {{in-toto}: Providing Farm-to-Table Guarantees for Bits and Bytes},
  booktitle = {28th USENIX Security Symposium (USENIX Security 19)},
  year      = {2019},
  pages     = {1393--1410},
  address   = {Santa Clara, CA},
  publisher = {USENIX Association},
  month     = aug,
  isbn      = {978-1-939133-06-9},
  url       = {https://www.usenix.org/conference/usenixsecurity19/presentation/torres-arias}
}

@misc{slsa2026,
  author       = {{OpenSSF}},
  title        = {{Supply-chain Levels for Software Artifacts (SLSA)}},
  year         = {2026},
  howpublished = {Project specification and guidance},
  url          = {https://slsa.dev/},
  note         = {Accessed 2026-05-24}
}

@misc{fsf2007gplv3,
  author       = {{Free Software Foundation}},
  title        = {{GNU General Public License, Version 3}},
  year         = {2007},
  month        = jun,
  day          = {29},
  url          = {https://www.gnu.org/licenses/gpl-3.0.html}
}

@misc{creativecommons2013cc-by-sa,
  author       = {{Creative Commons}},
  title        = {{Attribution-ShareAlike 4.0 International (CC BY-SA 4.0)}},
  year         = {2013},
  url          = {https://creativecommons.org/licenses/by-sa/4.0/}
}

@misc{opendatacommons2009odbl,
  author       = {{Open Knowledge Foundation}},
  title        = {{Open Database License (ODbL) v1.0}},
  year         = {2009},
  url          = {https://opendatacommons.org/licenses/odbl/1-0/}
}

@misc{rfc8785,
  author       = {Rundgren, Anders and Jordan, Bret and Erdtman, Samuel},
  title        = {{JSON Canonicalization Scheme (JCS)}},
  howpublished = {RFC 8785},
  year         = {2020},
  month        = jun,
  doi          = {10.17487/RFC8785},
  url          = {https://www.rfc-editor.org/rfc/rfc8785.html}
}

@misc{nist2024fips203,
  author       = {{National Institute of Standards and Technology}},
  title        = {{Module-Lattice-Based Key-Encapsulation Mechanism Standard}},
  howpublished = {FIPS PUB 203},
  year         = {2024},
  month        = aug,
  doi          = {10.6028/NIST.FIPS.203},
  url          = {https://doi.org/10.6028/NIST.FIPS.203}
}

@misc{nist2024fips204,
  author       = {{National Institute of Standards and Technology}},
  title        = {{Module-Lattice-Based Digital Signature Standard}},
  howpublished = {FIPS PUB 204},
  year         = {2024},
  month        = aug,
  doi          = {10.6028/NIST.FIPS.204},
  url          = {https://doi.org/10.6028/NIST.FIPS.204}
}

@misc{nist2024fips205,
  author       = {{National Institute of Standards and Technology}},
  title        = {{Stateless Hash-Based Digital Signature Standard}},
  howpublished = {FIPS PUB 205},
  year         = {2024},
  month        = aug,
  doi          = {10.6028/NIST.FIPS.205},
  url          = {https://doi.org/10.6028/NIST.FIPS.205}
}

@techreport{nist2020sp800208,
  author      = {Cooper, David and Apon, Daniel and Dang, Quynh and Davidson, Michael and Dworkin, Morris and Miller, Carl},
  title       = {{Recommendation for Stateful Hash-Based Signature Schemes}},
  institution = {National Institute of Standards and Technology},
  type        = {NIST Special Publication},
  number      = {800-208},
  year        = {2020},
  month       = oct,
  doi         = {10.6028/NIST.SP.800-208},
  url         = {https://doi.org/10.6028/NIST.SP.800-208}
}

@techreport{mosca2023quantum-threat,
  author      = {Mosca, Michele and Piani, Marco},
  title       = {{Quantum Threat Timeline Report 2023}},
  institution = {Global Risk Institute},
  year        = {2023},
  month       = dec,
  url         = {https://globalriskinstitute.org/publication/2023-quantum-threat-timeline-report/}
}

@article{mosca2018cybersecurity,
  author  = {Mosca, Michele},
  title   = {Cybersecurity in an Era with Quantum Computers: Will We Be Ready?},
  journal = {IEEE Security \& Privacy},
  volume  = {16},
  number  = {5},
  pages   = {38--41},
  year    = {2018},
  doi     = {10.1109/MSP.2018.3761723}
}

@misc{ounsworth2026composite-mldsa,
  author       = {Ounsworth, Mike and Gray, John and Pala, Massimiliano and Klau{\ss}ner, Jan and Fluhrer, Scott},
  title        = {{Composite Module-Lattice-Based Digital Signature Algorithm (ML-DSA) for use in X.509 Public Key Infrastructure}},
  howpublished = {Internet-Draft draft-ietf-lamps-pq-composite-sigs-19},
  year         = {2026},
  month        = apr,
  url          = {https://datatracker.ietf.org/doc/draft-ietf-lamps-pq-composite-sigs/},
  note         = {Work in progress, revision 19}
}

@misc{ietf2025rfc9794,
  author       = {Driscoll, F. and Parsons, M. and Hale, B.},
  title        = {{Terminology for Post-Quantum Traditional Hybrid Schemes}},
  howpublished = {RFC 9794},
  year         = {2025},
  month        = jun,
  doi          = {10.17487/RFC9794},
  url          = {https://www.rfc-editor.org/rfc/rfc9794.html}
}

@inproceedings{shor1994algorithms,
  author    = {Shor, Peter W.},
  title     = {Algorithms for Quantum Computation: Discrete Logarithms and Factoring},
  booktitle = {Proceedings of the 35th Annual Symposium on Foundations of Computer Science},
  year      = {1994},
  pages     = {124--134},
  publisher = {IEEE Computer Society},
  doi       = {10.1109/SFCS.1994.365700}
}

@inproceedings{grover1996fast,
  author    = {Grover, Lov K.},
  title     = {A Fast Quantum Mechanical Algorithm for Database Search},
  booktitle = {Proceedings of the Twenty-Eighth Annual ACM Symposium on Theory of Computing},
  year      = {1996},
  pages     = {212--219},
  publisher = {Association for Computing Machinery},
  doi       = {10.1145/237814.237866}
}

@article{bernstein2017postquantum,
  author  = {Bernstein, Daniel J. and Lange, Tanja},
  title   = {Post-Quantum Cryptography},
  journal = {Nature},
  volume  = {549},
  number  = {7671},
  pages   = {188--194},
  year    = {2017},
  doi     = {10.1038/nature23461}
}

@inproceedings{bos2018kyber,
  author    = {Bos, Joppe W. and Ducas, L{\'e}o and Kiltz, Eike and Lepoint, Tancr{\`e}de and Lyubashevsky, Vadim and Schanck, John M. and Schwabe, Peter and Seiler, Gregor and Stehl{\'e}, Damien},
  title     = {{CRYSTALS-Kyber}: A CCA-Secure Module-Lattice-Based KEM},
  booktitle = {2018 IEEE European Symposium on Security and Privacy (EuroS\&P)},
  year      = {2018},
  pages     = {353--367},
  publisher = {IEEE},
  doi       = {10.1109/EuroSP.2018.00032}
}

@article{ducas2018dilithium,
  author  = {Ducas, L{\'e}o and Kiltz, Eike and Lepoint, Tancr{\`e}de and Lyubashevsky, Vadim and Schwabe, Peter and Seiler, Gregor and Stehl{\'e}, Damien},
  title   = {{CRYSTALS-Dilithium}: A Lattice-Based Digital Signature Scheme},
  journal = {IACR Transactions on Cryptographic Hardware and Embedded Systems},
  volume  = {2018},
  number  = {1},
  pages   = {238--268},
  year    = {2018},
  doi     = {10.13154/tches.v2018.i1.238-268}
}

@inproceedings{bernstein2015sphincs,
  author    = {Bernstein, Daniel J. and Hopwood, Daira and H{\"u}lsing, Andreas and Lange, Tanja and Niederhagen, Ruben and Papachristodoulou, Louiza and Schneider, Michael and Schwabe, Peter and Wilcox-O'Hearn, Zooko},
  title     = {{SPHINCS}: Practical Stateless Hash-Based Signatures},
  booktitle = {Advances in Cryptology -- EUROCRYPT 2015},
  year      = {2015},
  pages     = {368--397},
  publisher = {Springer},
  doi       = {10.1007/978-3-662-46800-5_15}
}

@inproceedings{hulsing2013xmss,
  author    = {H{\"u}lsing, Andreas and Busold, Christoph and Buchmann, Johannes},
  title     = {{Forward Secure Signatures on Smart Cards}},
  booktitle = {Selected Areas in Cryptography -- SAC 2012},
  year      = {2013},
  pages     = {66--84},
  publisher = {Springer},
  doi       = {10.1007/978-3-642-35999-6_5}
}

@misc{rfc8391,
  author       = {H{\"u}lsing, Andreas and Butin, Denis and Gazdag, Stefan-Lukas and Rijneveld, Joost and Mohaisen, Aziz},
  title        = {{XMSS}: eXtended Merkle Signature Scheme},
  howpublished = {RFC 8391},
  year         = {2018},
  month        = may,
  doi          = {10.17487/RFC8391},
  url          = {https://www.rfc-editor.org/rfc/rfc8391.html}
}

@misc{rfc8554,
  author       = {McGrew, David and Curcio, Michael and Fluhrer, Scott},
  title        = {{Leighton-Micali Hash-Based Signatures}},
  howpublished = {RFC 8554},
  year         = {2019},
  month        = apr,
  doi          = {10.17487/RFC8554},
  url          = {https://www.rfc-editor.org/rfc/rfc8554.html}
}

@inproceedings{bindel2017transitioning,
  author    = {Bindel, Nina and Brendel, Jacqueline and Fischlin, Marc and Goncalves, Brian and Stebila, Douglas},
  title     = {Transitioning to a Quantum-Resistant Public Key Infrastructure},
  booktitle = {Post-Quantum Cryptography},
  year      = {2017},
  pages     = {384--405},
  publisher = {Springer},
  doi       = {10.1007/978-3-319-59879-6_22}
}

@article{wilkinson2016fair,
  author  = {Wilkinson, Mark D. and Dumontier, Michel and Aalbersberg, I. Jsbrand Jan and Appleton, Gabrielle and Axton, Myles and Baak, Arie and Blomberg, Niklas and Boiten, Jan-Willem and da Silva Santos, Luiz Bonino and Bourne, Philip E. and others},
  title   = {The {FAIR} Guiding Principles for Scientific Data Management and Stewardship},
  journal = {Scientific Data},
  volume  = {3},
  pages   = {160018},
  year    = {2016},
  doi     = {10.1038/sdata.2016.18}
}

@misc{force112014data-citation,
  author       = {{FORCE11}},
  title        = {{Joint Declaration of Data Citation Principles}},
  year         = {2014},
  doi          = {10.25490/a97f-egyk},
  url          = {https://doi.org/10.25490/a97f-egyk}
}

@misc{okafor2022sok,
  author    = {Okafor, Chinenye and Schorlemmer, Taylor R. and Torres-Arias, Santiago},
  title     = {{SoK}: Analysis of Software Supply Chain Security by Establishing Secure Design Properties},
  publisher = {Association for Computing Machinery},
  year      = {2022},
  month     = nov,
  pages     = {15--24},
  doi       = {10.1145/3560835.3564556},
  url       = {https://doi.org/10.1145/3560835.3564556}
}

@misc{spdx2022spec,
  author       = {{SPDX Working Group}},
  title        = {{SPDX Specification, Version 2.3}},
  year         = {2022},
  url          = {https://spdx.github.io/spdx-spec/v2.3/}
}

@misc{liboqs2026,
  author       = {{Open Quantum Safe Project}},
  title        = {{liboqs}: C Library for Quantum-Resistant Cryptographic Algorithms},
  year         = {2026},
  url          = {https://github.com/open-quantum-safe/liboqs},
  note         = {Accessed 2026-05-24}
}

@misc{quantcrypt2025,
  author       = {Aroshas, R.},
  title        = {{QuantCrypt}: Cross-platform {Python} library for {Post-Quantum} Cryptography using precompiled {PQClean} binaries},
  year         = {2025},
  url          = {https://pypi.org/project/quantcrypt/},
  note         = {v1.0.1; wraps NIST FIPS 203/204/205 reference parameter sets}
}

% ==========================================================================
% Recent sources (2021--2026) -- PQ transition, supply chain, hybrids,
% FAIR data, copyleft. Retrieved and verified via scite.ai.
% ==========================================================================

% --- PQ migration / crypto-agility ---------------------------------------
@article{campbell2025enterprise,
  author  = {Campbell, Robert},
  title   = {Enterprise Migration to Post-Quantum Cryptography: Timeline Analysis and Strategic Frameworks},
  journal = {Computers},
  volume  = {15}, number = {1}, pages = {9}, year = {2025},
  doi     = {10.3390/computers15010009},
  url     = {https://doi.org/10.3390/computers15010009}
}

@article{hasan2024framework,
  author  = {Hasan, Khondokar Fida and Simpson, Leonie and Baee, Mir Ali Rezazadeh and others},
  title   = {A Framework for Migrating to Post-Quantum Cryptography: Security Dependency Analysis and Case Studies},
  journal = {IEEE Access},
  volume  = {12}, pages = {23427--23450}, year = {2024},
  doi     = {10.1109/ACCESS.2024.3360412},
  url     = {https://doi.org/10.1109/ACCESS.2024.3360412}
}

@article{dekkaki2024exploring,
  author  = {Cherkaoui Dekkaki, Kanza and Tasic, Igor and Cano, Maria-Dolores},
  title   = {Exploring Post-Quantum Cryptography: Review and Directions for the Transition Process},
  journal = {Technologies},
  volume  = {12}, number = {12}, pages = {241}, year = {2024},
  doi     = {10.3390/technologies12120241},
  url     = {https://doi.org/10.3390/technologies12120241}
}

@inproceedings{zeydan2022recent,
  author    = {Zeydan, Engin and T{\"u}rk, Yekta and Aksoy, Berkin and others},
  title     = {Recent Advances in Post-Quantum Cryptography for Networks: A Survey},
  booktitle = {2022 Seventh International Conference on Mobile and Secure Services (MobiSecServ)},
  pages     = {1--8}, year = {2022}, publisher = {IEEE},
  doi       = {10.1109/MobiSecServ50855.2022.9727214},
  url       = {https://doi.org/10.1109/MobiSecServ50855.2022.9727214}
}

@inproceedings{thakur2024enterprise,
  author    = {Thakur, Meena Singh Dilip and Vidhani, Kumar and Syed, Habeeb Basha},
  title     = {Enterprise Post Quantum Cryptography Migration Tools},
  booktitle = {2024 16th International Conference on Communication Systems and Networks (COMSNETS)},
  pages     = {327--329}, year = {2024}, publisher = {IEEE},
  doi       = {10.1109/COMSNETS59351.2024.10427442},
  url       = {https://doi.org/10.1109/COMSNETS59351.2024.10427442}
}

@misc{chhetri2025survey,
  author       = {Chhetri, Gaurab and Somvanshi, Shriyank and Hebli, Pavan and others},
  title        = {Post-Quantum Cryptography and Quantum-Safe Security: A Comprehensive Survey},
  howpublished = {arXiv preprint arXiv:2510.10436}, year = {2025},
  doi          = {10.48550/arXiv.2510.10436},
  url          = {https://doi.org/10.48550/arXiv.2510.10436}
}

% --- Harvest-now, decrypt-later ------------------------------------------
@article{kagai2025hndl,
  author  = {Kagai, Francis and Branch, Philip and But, Jason},
  title   = {Harvest-Now, Decrypt-Later: A Temporal Cybersecurity Risk in the Quantum Transition},
  journal = {Telecom},
  volume  = {6}, number = {4}, pages = {100}, year = {2025},
  doi     = {10.3390/telecom6040100},
  url     = {https://doi.org/10.3390/telecom6040100}
}

@misc{blancoromero2026hndl,
  author       = {Blanco-Romero, Javier and Almenares Mendoza, Florina and Garc{\'i}a Rubio, Carlos},
  title        = {On the Practical Feasibility of Harvest-Now, Decrypt-Later Attacks},
  howpublished = {arXiv preprint arXiv:2603.01091}, year = {2026},
  doi          = {10.48550/arXiv.2603.01091},
  url          = {https://doi.org/10.48550/arXiv.2603.01091}
}

@techreport{mascelli2025hndl,
  author      = {Mascelli, Jillian and Rodden, Megan},
  title       = {``Harvest Now Decrypt Later'': Examining Post-Quantum Cryptography and the Data Privacy Risks for Distributed Ledger Networks},
  institution = {Board of Governors of the Federal Reserve System},
  type        = {Finance and Economics Discussion Series},
  number      = {2025-093}, year = {2025},
  doi         = {10.17016/FEDS.2025.093},
  url         = {https://doi.org/10.17016/FEDS.2025.093}
}

% --- Software supply-chain integrity -------------------------------------
@misc{xia2023sbom,
  author       = {Xia, Boming and Bi, Tingting and Xing, Zhenchang and others},
  title        = {An Empirical Study on Software Bill of Materials: Where We Stand and the Road Ahead},
  howpublished = {arXiv preprint arXiv:2301.05362}, year = {2023},
  doi          = {10.48550/arXiv.2301.05362},
  url          = {https://doi.org/10.48550/arXiv.2301.05362}
}

@inproceedings{gan2025sentry,
  author    = {Gan, Andrew and Ghodsi, Zahra},
  title     = {Sentry: Authenticating Machine Learning Artifacts on the Fly},
  booktitle = {Proceedings of the 2025 ACM SIGSAC Conference on Computer and Communications Security (CCS '25)},
  pages     = {3550--3563}, year = {2025}, publisher = {ACM},
  doi       = {10.1145/3719027.3765070},
  url       = {https://doi.org/10.1145/3719027.3765070}
}

@article{zhou2024sca,
  author  = {Zhou, Xin and Xu, Jinwei and Li, Xiaokang and others},
  title   = {A blockchain-based and microservices-architected software composition analysis system},
  journal = {Journal of Software: Evolution and Process},
  volume  = {36}, number = {10}, year = {2024},
  doi     = {10.1002/smr.2675},
  url     = {https://doi.org/10.1002/smr.2675}
}

@article{kagizmandere2024sbom,
  author  = {Ka{\u{g}}{\i}zmandere, {\"O}mercan and Arslan, Halil},
  title   = {Vulnerability analysis based on {SBOMs}: A model proposal for automated vulnerability scanning for {CI/CD} pipelines},
  journal = {International Journal of Information Security Science},
  volume  = {13}, number = {2}, pages = {33--42}, year = {2024},
  doi     = {10.55859/ijiss.1455039},
  url     = {https://doi.org/10.55859/ijiss.1455039}
}

% --- ML-DSA / lattice / Falcon implementations ---------------------------
@article{kim2022dilithium,
  author  = {Kim, YoungBeom and Song, Jingyo and Youn, Taek-Young},
  title   = {Crystals-Dilithium on {ARMv8}},
  journal = {Security and Communication Networks},
  volume  = {2022}, pages = {5226390}, year = {2022},
  doi     = {10.1155/2022/5226390},
  url     = {https://doi.org/10.1155/2022/5226390}
}

@article{truong2024mldsa,
  author  = {Truong, Quang and Duong-Ngoc, Phap and Lee, Hanho},
  title   = {Efficient Low-Latency Hardware Architecture for Module-Lattice-Based Digital Signature Standard},
  journal = {IEEE Access},
  volume  = {12}, year = {2024},
  doi     = {10.1109/ACCESS.2024.3370470},
  url     = {https://doi.org/10.1109/ACCESS.2024.3370470}
}

@article{lee2024falcon,
  author  = {Lee, Yong-Seok and Youn, Jonghee M. and Nam, Kevin and others},
  title   = {An Efficient Hardware/Software Co-Design for {FALCON} on Low-End Embedded Systems},
  journal = {IEEE Access},
  volume  = {12}, year = {2024},
  doi     = {10.1109/ACCESS.2024.3387489},
  url     = {https://doi.org/10.1109/ACCESS.2024.3387489}
}

% --- SLH-DSA / hash-based signatures -------------------------------------
@article{li2022hashrevisited,
  author  = {Li, Lingyun and Lu, Xianhui and Wang, Kunpeng},
  title   = {Hash-based signature revisited},
  journal = {Cybersecurity},
  volume  = {5}, number = {1}, year = {2022},
  doi     = {10.1186/s42400-022-00117-w},
  url     = {https://doi.org/10.1186/s42400-022-00117-w}
}

@article{roy2025pqsig,
  author  = {Roy, Kumar Sekhar and Singh, Shweta and Srivathsa, Preethi Preethino},
  title   = {Post-Quantum Digital Signatures for Enhanced Medical Image Security},
  journal = {IET Quantum Communication},
  volume  = {6}, number = {1}, year = {2025},
  doi     = {10.1049/qtc2.70006},
  url     = {https://doi.org/10.1049/qtc2.70006}
}

@article{marchsreiter2025blockchain,
  author  = {Marchsreiter, Dominik},
  title   = {Towards quantum-safe blockchain: Exploration of {PQC} and public-key recovery on embedded systems},
  journal = {IET Blockchain},
  volume  = {5}, number = {1}, year = {2025},
  doi     = {10.1049/blc2.12094},
  url     = {https://doi.org/10.1049/blc2.12094}
}

% --- Hybrid / composite signatures ---------------------------------------
@article{kwon2024compact,
  author  = {Kwon, Hee-Yong and Bajuna, Indra and Lee, Mun-Kyu},
  title   = {Compact Hybrid Signature for Secure Transition to Post-Quantum Era},
  journal = {IEEE Access},
  volume  = {12}, year = {2024},
  doi     = {10.1109/ACCESS.2024.3374645},
  url     = {https://doi.org/10.1109/ACCESS.2024.3374645}
}

@article{ricci2024hybridkeys,
  author  = {Ricci, Sara and Dobi{\'a}{\v{s}}, Patrik and Malina, Luk{\'a}{\v{s}} and others},
  title   = {Hybrid Keys in Practice: Combining Classical, Quantum and Post-Quantum Cryptography},
  journal = {IEEE Access},
  volume  = {12}, year = {2024},
  doi     = {10.1109/ACCESS.2024.3364520},
  url     = {https://doi.org/10.1109/ACCESS.2024.3364520}
}

@article{muller2024saml,
  author  = {M{\"u}ller, Johannes and Oupick{\'y}, Jan},
  title   = {Post-quantum {XML} and {SAML} Single Sign-On},
  journal = {Proceedings on Privacy Enhancing Technologies},
  number  = {2024(4)}, year = {2024},
  doi     = {10.56553/popets-2024-0128},
  url     = {https://doi.org/10.56553/popets-2024-0128}
}

% --- Post-quantum TLS / transport ----------------------------------------
@article{alnahawi2024pqtls,
  author  = {Alnahawi, Nouri and M{\"u}ller, Johannes and Oupick{\'y}, Jan and others},
  title   = {A Comprehensive Survey on Post-Quantum {TLS}},
  journal = {IACR Communications in Cryptology},
  volume  = {1}, number = {2}, year = {2024},
  doi     = {10.62056/ahee0iuc},
  url     = {https://doi.org/10.62056/ahee0iuc}
}

@article{tzinos2022tls,
  author  = {Tzinos, Iraklis and Limniotis, Konstantinos and Kolokotronis, Nicholas},
  title   = {Evaluating the performance of post-quantum secure algorithms in the {TLS} protocol},
  journal = {Journal of Surveillance, Security and Safety},
  volume  = {3}, year = {2022},
  doi     = {10.20517/jsss.2022.15},
  url     = {https://doi.org/10.20517/jsss.2022.15}
}

@inproceedings{lonc2023cits,
  author    = {Lonc, Brigitte and Aubry, Alexandre and Bakhti, Hafeda and others},
  title     = {Feasibility and Benchmarking of Post-Quantum Cryptography in the Cooperative {ITS} Ecosystem},
  booktitle = {2023 IEEE Vehicular Networking Conference (VNC)},
  pages     = {215--222}, year = {2023}, publisher = {IEEE},
  doi       = {10.1109/VNC57357.2023.10136335},
  url       = {https://doi.org/10.1109/VNC57357.2023.10136335}
}

% --- Quantum threat / Shor resource estimates ----------------------------
@article{liu2023rsacracking,
  author  = {Liu, Xia and Yang, Huan and Yang, Li},
  title   = {Feasibility Analysis of Cracking {RSA} with Improved Quantum Circuits of the Shor's Algorithm},
  journal = {Security and Communication Networks},
  volume  = {2023}, pages = {2963110}, year = {2023},
  doi     = {10.1155/2023/2963110},
  url     = {https://doi.org/10.1155/2023/2963110}
}

@article{larasati2023quantum,
  author  = {Larasati, Harashta Tatimma and Putranto, Dedy Septono Catur and Wardhani, Rini Wisnu and others},
  title   = {Depth Optimization of {FLT}-Based Quantum Inversion Circuit},
  journal = {IEEE Access},
  volume  = {11}, pages = {54910--54927}, year = {2023},
  doi     = {10.1109/ACCESS.2023.3280632},
  url     = {https://doi.org/10.1109/ACCESS.2023.3280632}
}

@article{farooq2023resilience,
  author  = {Farooq, Sana and Altaf, Ayesha and Iqbal, Faiza and others},
  title   = {Resilience Optimization of Post-Quantum Cryptography Key Encapsulation Algorithms},
  journal = {Sensors},
  volume  = {23}, number = {12}, pages = {5379}, year = {2023},
  doi     = {10.3390/s23125379},
  url     = {https://doi.org/10.3390/s23125379}
}

% --- FAIR / research-data integrity --------------------------------------
@article{wilkinson2022fairgov,
  author  = {Wilkinson, Mark D. and Sansone, Susanna-Assunta and M{\'e}ndez, Eva and others},
  title   = {Community-driven governance of {FAIRness} assessment: an open issue, an open discussion},
  journal = {Open Research Europe},
  volume  = {2}, pages = {146}, year = {2022},
  doi     = {10.12688/openreseurope.15364.1},
  url     = {https://doi.org/10.12688/openreseurope.15364.1}
}

@article{goldblum2025pennsieve,
  author  = {Goldblum, Zack and Xu, Zhida and Shi, Haoer and others},
  title   = {Pennsieve: A Collaborative Platform for Translational Neuroscience and Beyond},
  journal = {Scientific Data},
  volume  = {12}, number = {1}, year = {2025},
  doi     = {10.1038/s41597-025-06075-5},
  url     = {https://doi.org/10.1038/s41597-025-06075-5}
}

@article{kirkpatrick2023fairist,
  author  = {Kirkpatrick, Christine R. and Coakley, Kevin and Christopher, Julianne and others},
  title   = {Engaging with Researchers and Raising Awareness of {FAIR} and Open Science through the {FAIR+} Implementation Survey Tool ({FAIRIST})},
  journal = {Data Science Journal},
  volume  = {22}, pages = {32}, year = {2023},
  doi     = {10.5334/dsj-2023-032},
  url     = {https://doi.org/10.5334/dsj-2023-032}
}

% --- Open-source licensing / copyleft ------------------------------------
@misc{pfeiffer2022license,
  author       = {Pfeiffer, Rolf-Helge},
  title        = {License Incompatibilities in Software Ecosystems},
  howpublished = {arXiv preprint arXiv:2203.01634}, year = {2022},
  doi          = {10.48550/arXiv.2203.01634},
  url          = {https://doi.org/10.48550/arXiv.2203.01634}
}

@misc{papoutsoglou2021licensing,
  author       = {Papoutsoglou, Maria and Kapitsaki, Georgia M. and German, Daniel M.},
  title        = {An analysis of open source software licensing questions in {Stack Exchange} sites},
  howpublished = {arXiv preprint arXiv:2110.00361}, year = {2021},
  doi          = {10.48550/arXiv.2110.00361},
  url          = {https://doi.org/10.48550/arXiv.2110.00361}
}

@article{qiu2021violation,
  author  = {Qiu, Shi and German, Daniel M. and Inoue, Katsuro},
  title   = {Empirical Study on Dependency-related License Violation in the {JavaScript} Package Ecosystem},
  journal = {Journal of Information Processing},
  volume  = {29}, pages = {296--304}, year = {2021},
  doi     = {10.2197/ipsjjip.29.296},
  url     = {https://doi.org/10.2197/ipsjjip.29.296}
}

@incollection{harutyunyan2022governance,
  author    = {Harutyunyan, Nikolay},
  title     = {Open Source Software Governance: Distilling and Applying Industry Best Practices},
  booktitle = {Open Source Systems},
  pages     = {73--90}, year = {2022}, publisher = {Springer},
  doi       = {10.1007/978-3-030-83128-8_5},
  url       = {https://doi.org/10.1007/978-3-030-83128-8_5}
}