Theory to Practice: Real-World Lessons in Post-Quantum Cryptography Migration
summary
Shows concrete migration steps for Java: use a four-layer inventory (dependencies, source/framework, keystores, runtime evidence) to find hidden crypto; demo finds 22 crypto touchpoints in one Spring Boot service and an anonymized estate has 200 services and ~3,000 touchpoints. Recommends hybrid TLS on JDK 27 with X25519 ML-KEM-768, uses Bouncy Castle and JDK Flight Recorder for proof, and measures ~2 KB handshake overhead and phased key-exchange-first rollout.
AI-written summary · about
chapters (8)
- 0:00PQC migration in Java
- 3:22Why PQC matters now
- 9:51Java PQC support
- 13:06Hidden crypto in Java apps
- 27:55Prioritize key exchange
- 33:36Crypto agility for migration
- 36:55Rollout strategy
- 41:53Next steps and closing
related talks
47mReal-World Lessons in Post-Quantum Cryptography Migration
46mFrom Theory to Practice: Real-World Lessons in Post-Quantum Cryptography Migration
23mReal-World Post-Quantum Migrations: Lessons Learned and Performance Results
30mMigrating and benchmarking a banking application
30mPost-Quantum Crypto Integration for Enterprise Applications
51mJava and Post-Quantum Cryptography
48mSecure Java Applications against Quantum Threats
24mTransitioning to Post-Quantum Cryptography in IAM