Navigating the Quantum Readiness Journey: Securing Kubernetes with Quantum-Resis...
summary
Demo builds an EJBCA PKI issuing Dilithium root and subordinate CAs, then runs an Open Quantum Safe Apache server and OQS curl client using hybrid TLS and post‑quantum certs; the handshake works end‑to‑end. NIST finalizes algorithms July 2024 and US procurement shifts by 2030. Expect larger objects (EC chain ~224 bytes vs Dilithium ~8 KB) and modest performance change (RSA‑3072 issuance ~800 cert/s vs Dilithium ~700 cert/s). Inventory, crypto agility, and staged migrations are the actionable next steps.
AI-written summary · about
chapters (20)
- 0:00Quantum threat and speaker
- 1:03Quantum computers and risks
- 3:13Post-quantum cryptography migration
- 4:18NIST post-quantum standards
- 6:27Impact on protocols and hardware
- 7:29Global regulations and timelines
- 8:31Migration recommendations
- 10:16Crypto agility necessity
- 11:21Cloud-native and PKI relevance
- 12:46Avoiding cryptographic shortcuts
- 14:34Migration plan and hybrid TLS
- 16:45Hybrid certificates and tech
- 17:52Post-quantum algorithms performance
- 19:20Starting migration journey
- 20:46Live demo setup and PKI
- 24:51Automating PKI with YAML/REST
- 26:13Post-quantum TLS server cert
- 27:39Deploying hybrid TLS test
- 28:42Migration tools and resources
- 29:24Call to action and closing
related talks
34mQuantum-Ready Kubernetes: How Do We Get There?
15mSecuring Cloud Native Infra for the Post-Quantum Era
13mNavigating the Quantum Readiness Journey: Open-Source Cryptography, PKI and Signing Tools
30mB’Envoy-age to Pre-Quantum Encryption
30mNavigating the Quantum Readiness Journey: Hands-on Guidance for Starting Your Migration-
05mLightning Talk: Building Quantum-Safe Applications
22mPost-Quantum API Security: Preparing your APIs for Q-day
01h 05mChallenges and Opportunities from Quantum-Safe Cryptography