Post-Quantum Cryptography for Digital Signing
summary
Post-quantum signing moves from theory into tooling: NIST-selected algorithms like ML-DSA and competing choices such as SLH-DSA are being integrated into TLS and signing stacks, but signatures balloon to ~2–4 KB and implementations remain unvetted at scale. Open-source work proves concepts—Sigstore adds plugin paths, Trail of Bits and others ship Pure Go libs—while governments push timelines (US guidance targets quantum resistance by 2035), so expect phased adoption and crypto agility workarounds.
AI-written summary · about
chapters (14)
- 0:00Post-quantum cryptography intro
- 3:30Quantum threat to encryption
- 8:15Y2K lessons for quantum
- 10:02Quantum break timeline
- 11:27NIST post-quantum standards
- 14:00ML-KEM and ML-DSA
- 16:51Global crypto standards chaos
- 18:58Why crypto agility matters
- 20:05SIG store for software signing
- 22:37Trail of Bits crypto proposal
- 24:49SIG store quantum-ready
- 25:31Start preparing now
- 25:54Steps for developers
- 27:00Q&A
related talks
13mNavigating the Quantum Readiness Journey: Open-Source Cryptography, PKI and Signing Tools
30mCoping with post-quantum signatures in the WebPKI
23mOverview of the NIST Post Quantum Algorithms
27mPost-Quantum Cryptography
32mCybersecurity in Post Quantum Era
30mPost-Quantum Crypto Integration for Enterprise Applications
19mAgile is the new black – Why Preparing for Postquantum Crypto also Matters to You!
26mCrypto-Agile PKI: A Strategic Blueprint for Post-Quantum Trust