The update cycle of cryptographic standards is usually measured in years, and from the discovery of a vulnerability to industry-wide deployment often takes five to ten years or even longer.