From Noise to Clarity: Adding Intelligence to the PQC Migration
summary
Presents an automated, context‑aware triage that enriches asset inventories by cross‑referencing an expert‑curated cryptographic knowledge base with existing tools like Qualys, CrowdStrike, ServiceNow and AWS KMS, and filters out developer sample keys and third‑party noise to surface production risk. Demonstrates a public dataset and website opencryptography.com built from 15,000 Docker image scans, shows per‑object issues and history, and claims it reduces years to months for PQC inventory and prioritization.
AI-written summary · about
chapters (21)
- 0:00Introduction to the postquantum cryptography conference
- 1:48Intelligence in PQC migration
- 2:54Government mandates
- 4:03Challenges of discovering cryptography in large organizations
- 5:28Existing tools for discovery
- 6:32Filtering crypto noise
- 8:20Reducing crypto noise
- 10:49From inventories to PQC plans
- 11:09Announcing OpenCryptography.com database
- 13:20OpenCryptography.com benefits
- 14:45Crypto inventory strategies
- 15:27Q&A with James
- 16:09Discovery priorities
- 17:35OpenCryptography.com formats
- 18:38GitHub crypto discovery
- 20:23Blind spots in inventories
- 21:57HSM metadata issues
- 23:00Docker image prioritization
- 24:02Crypto discovery tools scope
- 25:07Legacy systems handling
- 25:50Conference closing
related talks
22mSecurity vs Dev Experience Threat … or Opportunity
30mInvestigating Post-Quantum Cryptography: building a PQC decision tree for developers
01h 01mDefendable Products: How we try to improve security in our products
26mOnline Quantum-safe Readiness Tool
47mHow to 10X Your Company’s Security (Without a Series D)
30mNavigating the New AI Security Landscape
31mFrom Noise to Notes: Orchestrating SAST with Developers... (Adrián Puente Z.)
57mDev-first security: From code to cloud, and back to code (PRT291)