Post-Quantum Cryptography Conference Austin 2025
2025-01-15..2025-01-16
-- online --
who it's for
security engineers, pki engineers, cryptography engineers, security architects, compliance officers, financial sector security teams, hsm vendors
topics
CRYSTALS-Kyber key exchange; CRYSTALS-Dilithium and SPHINCS+ signatures; hybrid PQC certificates; pqc migration planning and timelines; PKI hierarchy design for PQC; hsm quantum readiness and limits; crypto discovery and certificate inventory; PQC interoperability and benchmarking; TLS handshake size impacts; quantum key distribution (QKD) overview; standards: NIST IETF ETSI updates; code signing and firmware migration
| title | author | length |
|---|---|---|
| Opening | Paul van Brouwershaven, Albert de Ruiter | 28m |
PKI Consortium reports rapid growth from seven founding organizations to over 160 members and 2,000–3,000 conference registrants and outlines concrete outputs… | ||
| Quantum Computing: Between Hope and Hype | Scott Aaronson | 34m |
Claims that two‑qubit gate fidelities have reached 99.9% two-qubit fidelity and that Google demonstrated a surface‑code protected logical qubit on a 103-qubit… | ||
| NIST Post-Quantum Cryptography Update | Bill Newhouse, Andrew Regenscheid | 01h 02m |
NIST finalizes FIPS 203/204/205 (Aug 2024) standardizing CRYSTALS-Kyber (KEM), CRYSTALS-Dilithium (signatures) and SPHINCS+ (hash-based signatures), plans… | ||
| Transitioning National Security Systems to a Post Quantum Future | Morgan Stern | 33m |
National Security Systems adopt the final cnsa 2.0 suite and a concrete timeline: new NSS acquisitions must be QR-capable starting 2027, systems must be… | ||
| Migrating and benchmarking a banking application | Alessandro Amadori | 30m |
A Java bank personal-communication channel is migrated to post-quantum primitives by replacing all key-exchange and signature operations with PQC counterparts… | ||
| ELI5: Implementing Digital Certificates for a Post-Quantum World | Tim Callan | 23m |
Predicts workable private CA deployments that interoperate with standards around spring 2026 and public CA support a few months later, warns that lack of… | ||
| Architecting PKI Hierarchies for Graceful PQ Migration | Mike Ounsworth | 34m |
Argues that migration is a toolbox not one solution: Flag Day (switch everything at once) is simplest but rarely possible; staged migrations use hybrids, mixed… | ||
| Strategies for Transitioning to Future-Proof Cryptography | Lory Thorpe, Jaime Gómez García, Scott Stuewe, Samantha Mabey | 39m |
Panelists report concrete steps and gaps: industry groups formed a Europol Quantum Safe Financial Forum with more than 40 organizations; risk assessments begun… | ||
| Update on end-to-end PKI and HSM integrations with ML-DSA | Tomas Gustavsson | 24m |
Benchmarks show HSM behavior varies wildly: some REST or soft HSMs handle tens to hundreds of certificates per second while others drop to ~70 or a few dozen… | ||
| 2025 is Here - How to get your PQC Readiness Plan Underway | Blair Canavan | 31m |
2025 shifts from planning to targeted action: NIST-approved PQC is live and organizations are running crypto discovery to find unknown keys, certificates, and… | ||
| Online Quantum-safe Readiness Tool | Ini Kong | 26m |
An online questionnaire maps organizational readiness for post‑quantum transition to seven dimensions (collaboration, awareness, governance/policy, PQC… | ||
| X9 Financial PKI: PQC Readiness and Crypto-Agility for Financial Services | Jeff Stapleton | 29m |
X9 launches a Financial PKI with a vendor-hosted root, issuing CAs, RA, repository and OCSP/CRL; architecture supports TLS, device and transaction use (ATMs… | ||
| Hybrid PQC E-Mail Communication: Easing Migration Pain | Jan Klaußner | 31m |
Prototype implements a Certificate Authority, Certificate Management System and an extended open‑source e‑mail client with a Microsoft Outlook integration… | ||
| Quantum-Safe Secure Boot: How hard can it be? | Axel York Poschmann | 27m |
Claims that secure boot must start transitioning now because of a 2030 deprecation deadline for RSA/ECDSA, documents conflicting national requirements that… | ||
| Making PQ Signatures work in the WebPKI | Luke Valenta | 55m |
Post‑quantum drop‑in signatures blow up TLS handshakes (hash‑based up to ~50 KB, ML‑DSA ~14–20 KB), so the proposal evaluates practical mitigations: Merkle… | ||
| PQC Standardization at the Internet Engineering Task Force (IETF) | Mike Ounsworth | 29m |
Registers for ML-DSA/SLH-DSA/ML-KEM and LMS/XMSS/composite hybrids exist but many code points still need RFCs; TLS hybrids are already deployed in Chrome while… | ||
| PQC Interoperability Project | Corey Bonnell | 23m |
Project documents a hackathon-born effort (started IETF 2022) that produces an artifact repository of X.509 archives, a set of prototype OIDs (migrated to NIST… | ||
| ETSI ESI and Quantum-Safe Cryptography | Inigo Barreira | 35m |
ETSI ESI says nearly all signature, timestamping, preservation and trusted‑list standards require updates for quantum‑safe cryptography and proposes a concrete… | ||
| Lessons Learned from Testing Millions of Servers for Post-Quantum Compatibility | Syed Suleman Ahmad | 35m |
Cloudflare-run scans and a large-scale web study test post-quantum TLS hybrids using a BoringSSL fork and Cloud Radar, finding 34% origin servers break when… | ||
| How much will ML-DSA Signatures affect Web Metrics after all? | Panos Kampanakis, Mila Anastasova | 27m |
Claim: ML-DSA adds about ~15KB to the TLS handshake, measured impact using WebPageTest.org and Chrome under 4G/cable/3G profiles. Results show TLS-only time… | ||
| The impact of ML-KEM and ML-DSA on mTLS connection Time-to-Last-Byte | Mila Anastasova, Panos Kampanakis | 29m |
Measured mTLS using ML-KEM and ML-DSA shows large certificate sizes break small TCP congestion windows and add round trips: a 22 kilobyte certificate exceeds a… | ||
| X9.146 Quantum TLS | Jeff Stapleton, David Hook, Mike Ounsworth | 32m |
Draft X9.146 adds a new client hello extension so TLS can negotiate certificate formats (classic, alternate/chimera, composite, chameleon, or both signatures)… | ||
| Hybrid PQC Digital Signatures and SSI | Erik Hieta-aho | 23m |
A hybrid implementation embeds ML‑DSA and ECDSA in parallel inside a cloned WaltID SSI stack, using Kotlin/Java with BouncyCastle; a Java Security provider… | ||
| Quantum Key Distribution – What is done and what is to come | Jan Klaußner | 22m |
Bundesdruckerei’s Qu-Gov testbed wires QKD devices into a Berlin star network through a telecom hub and shows basic operation but clear limits: dark fiber only… | ||
| Is your HSM quantum-ready? Here’s what you need to know! | Bruno Couillard | 28m |
Claims that every deployed HSM must be replaced unless it uses quantum-safe root keys and algorithms, supports quantum-safe firmware updates, and exposes PQC… | ||
| Securing Data in the Quantum Era: From the Root of Trust to Protecting Ecosystems | Nils Gerhardt | 37m |
HSMs act as a practical entry point for post‑quantum deployment, shipping with round‑three algorithms and supporting hybrid X.509 certificates while… | ||
| NIST National Cybersecurity Center of Excellence’s Migration to Post-Quantum Cryptography Project | Bill Newhouse | 33m |
NCCoE runs a lab collaboration of 40+ companies that actually puts vendor tools into testbeds and runs SISA’s eight federal use cases (expecting ~55 more) to… | ||
| Why the Internet isn’t ready for Post-Quantum Certificates | Luke Valenta | 29m |
NIST standards are final and browsers ship post‑quantum key agreement, and Cloudflare reports over 30% of human connections using PQ key agreement, but… | ||
| PQC in FIPS 140-3, status and roadmap | Jonathan Smith | 32m |
Current state: approved PQC algorithms have required ACVP automated tests and production algorithm certificates can appear within days; three PQC algorithms… | ||
| Perspectives on the transition to PQC in the financial sector | Jaime Gómez García | 41m |
Updates regulatory timelines (CNSA2, DORA, PCI‑DSS 12.33 with enforcement 2025) and cites a US estimate of $7.1B (~1% IT) for PQC transition; defines crypto… | ||
| Closing remarks for day 1 | Paul van Brouwershaven, Albert de Ruiter | 03m |
Conference day one closes with concrete logistics and sponsors listed: sponsors: PQ Shield, ssl.com, inTrust, Keyfactor, HID Global and organizational support… | ||
| To Hybrid or Not to Hybrid: Navigating the PQC Transition | Andrew Regenscheid, Garfield Jones, Lory Thorpe, Ralph Spencer Poore | 23m |
Panel argues specifics: NSA-level guidance treats MLKM as the evaluated, preferred KEM and says hybrid gives no extra algorithmic security and adds attack… | ||
| Communication among Financial Institutions: What are the available answers to the quantum threat? | Giuseppe Bruno | 27m |
Sets up cloud VPNs (Amazon VMs) across G7 capitals and proves intercontinental quantum-safe channels over IPSec IKEv2, testing three approaches: QKD… | ||
| Curriculum Development for Post-Quantum Workforce Development Programs | José Hernández Pérez | 24m |
Gives a concrete curriculum: a 6.5-month sample with two 2-hour sessions/week (first 1.5 months = 24 hours, ~10% of work time) organized as… | ||
| Is CBOM Enough? | Roman Cinkais | 30m |
CBOM is a CycloneDX extension standardized six months ago (CycloneDX v1.6) that encodes algorithms, keys, certificates and protocol references as… | ||
| Practical Insights from Following NIST SP 1800-38B | Alexander Löw | 32m |
Real-world implementation follows NIST SP 1800-38B by building a continuous cryptographic inventory fed by agent and agentless discovery, SBOM/CBOM exports and… | ||
| Update on the NIST standardization of additional signature schemes | Andrew Regenscheid | 36m |
NIST opens an on‑ramp that receives 50 proposals with 40 complete submissions and advances 14 candidates to a second round (announced Oct 2024); about 10… | ||
| Accelerated Quantum Supercomputing and Post-Quantum Cryptography | Yarkin Doroz | 26m |
A GPU-based PQC library implements ML Cam and mlsa (distributed as an object file, not FIPS-tested or fully open source) and targets high-throughput TLS… | ||
| Hardware Cryptographic Modules | Bruno Couillard, Ed Reynolds, Eric Amador, Nils Gerhardt, John Buselli | 35m |
Panel reports concrete steps for PQC on HSMs: vendors prioritize firmware signing and PKI integration, offer firmware field upgrade delivery of NIST-approved… | ||
| Extending or Evolving: Choosing the Path to Quantum Readiness | Bill Newhouse, Tomas Gustavsson, Ralph Spencer Poore | 33m |
Panelists state that standards work has produced three final PQC algorithms and one draft, and recommend migration guided by those specs; discovery tools are… | ||
| Crypto Asset Discovery Tooling – an Overview of Capabilities, Characteristics and Gaps | Alessandro Amadori | 25m |
Research run from early 2024 produces a prototype Cryptographic Asset Discovery (CAD) project and a nine‑level maturity model; the practical minimum is levels… | ||
| Closing remarks for day 2 | Paul van Brouwershaven, Albert de Ruiter | 15m |
Conference closes with concrete follow ups: recordings go live in batches on YouTube and the conference site, and slides and PDFs available in a few weeks… | ||
| nothing matches | ||