Securing Cloud Native Infra for the Post-Quantum Era
summary
Claims concrete outcomes: NIST-approved Kyber and Dilithium are usable in Kubernetes now via hybrid TLS handshakes, ingress-first migration proves easiest to deploy, and operators automate cert rotation with KMS (including AWS PQ KMS pilots). Expect performance hits: roughly 3–5x handshake overhead, certificate sizes up to 10x, and measured latency increases of 2–4x in early adopters. Service-mesh mTLS, etcd encryption and image signing are migratable but library maturity (~60%) forces staged rollout and rollback flags.
AI-written summary · about
chapters (16)
- 0:00Introduction to Quantum Resistant Kubernetes
- 0:28Understanding the Quantum Threat
- 1:03Kubernetes Security Vulnerabilities
- 1:59Impact of Quantum Computing on Cloud Security
- 3:18Post-Quantum Cryptography (PQC) Overview
- 4:24Implementing PQC in Kubernetes
- 5:11Securing Ingress Controllers
- 5:55Hardening Service Mesh
- 6:56Protecting Secrets and ETCD
- 7:37Challenges in PQC Adoption
- 8:59Migration Strategies for Post-Quantum Era
- 10:20Observability in Post-Quantum Environments
- 11:09Case Studies and Early Adopters
- 12:19Roadmap and Open Source Initiatives
- 13:04Call to Action: Preparing for the Quantum Era
- 14:06Conclusion and Final Thoughts
related talks
44mPost-quantum cryptography migration strategy for cloud services
34mBeyond Classical Cryptography: Building Quantum-Resistant Cloud Native Infrastructure With SPIFFE
30mNavigating the Quantum Readiness Journey: Securing Kubernetes with Quantum-Resis...
24mTransitioning to Post-Quantum Cryptography in IAM
10mSecuring Multi-Cloud APIs Against Quantum Threats
34mQuantum-Ready Kubernetes: How Do We Get There?
28mBirth of the Post-Quantum Internet
05mLightning Talk: Building Quantum-Safe Applications