Cryptographic Agility: Preparing Modern Apps for Quantum Safety and Beyond
summary
Claims that hard-coded crypto caused Heartbleed fallout—4.5 million health records stolen and 200,000 systems unpatched in 2019—and argues enterprises need inventory plus operational controls now. Recommends policy-driven configuration, observability and library extensibility implemented via proxies and orchestrated management to automate reconfiguration, rotate libraries, and audit compliance. Proposes Project Newcastle as a plugin-style framework supporting five capabilities (discover, policy, deploy, automate, attest) to ease post-quantum transition; work is prototyped and positioned as forthcoming, not yet a shipped product.
AI-written summary · about
chapters (10)
- 0:00Start
- 3:12Current landscape
- 7:09Challenges: The Stakeholders
- 9:39Future landscape benefits
- 10:35Crypto is Everywhere
- 11:01Implementation Flaws
- 12:51Harvest Now, Decrypt Later (HNDL)
- 15:10What can you do now?
- 16:33Project Newcastle
- 17:40ChatGPT Jokes
related talks
05mLightning Talk: Building Quantum-Safe Applications
27mCrypto Agility How it’s both a Critical Component and a Complex Challenge
48mPreparing for Quantum: A Pragmatic Approach towards Readiness
19mAgile is the new black – Why Preparing for Postquantum Crypto also Matters to You!
20mCryptographic Resilience in the Quantum Era
21mCybersecurity in the Age of Quantum
10mSecuring Multi-Cloud APIs Against Quantum Threats
30mPreparing Vulnerability Management for the Post-Quantum Era: From Legacy Cryptography Crypto-Agility