A flurry of research and reporting is the first step toward a coherent crypto policy, while action remains months or years in the future.