Crypto Agility How it’s both a Critical Component and a Complex Challenge
summary
Argues that preparedness requires discovery, centralized policy and automation across keys, certs and secrets, not just swapping algorithms; cites $55B quantum investment, 75 billion devices, 175 ZB data and NIS timelines (2030 deprecate RSA/ECC, 2035 disallow) as drivers. Recommends inventorying assets, assigning accountability, using HSM-backed roots, implementing control plane / data plane (policy distribution vs. crypto ops), adopting birth certificate + operational certificate for IoT, and measuring progress with a CAMM maturity model and automated certificate lifecycle tooling.
AI-written summary · about
chapters (9)
- 0:00Introduction and welcome
- 1:30Defining crypto agility
- 1:59Drivers of crypto agility
- 5:15Challenges in modern environments
- 10:26Dimensions of crypto agility
- 13:58Technical and management layers
- 18:04Business value and strategy
- 20:16Maturity model and takeaways
- 22:07Q&A and session conclusion
related talks
26mCryptographic Agility: Preparing Modern Apps for Quantum Safety and Beyond
19mAgile is the new black – Why Preparing for Postquantum Crypto also Matters to You!
10mSummary and Closing
30mPreparing Vulnerability Management for the Post-Quantum Era: From Legacy Cryptography Crypto-Agility
29m[DISCUSSION] Your cryptography will be broken, prepare yourself now!
48mPreparing for Quantum: A Pragmatic Approach towards Readiness
33mComparing Strategies for Quantum-Safe Cryptography Adoption in Organizations
10mSecuring Multi-Cloud APIs Against Quantum Threats