Overcoming Challenges in Post-Quantum Cryptography Adoption
summary
Cisco reports practical migration experience and lists concrete obstacles: PQC public keys and signatures are much larger, hybrid stacks and HSM firmware are immature, and deployment needs rollback and observability plans. Operational showstoppers include CNSA 2.0 mandate (PQC only after Dec 2031), fragile LMS stateful keys requiring strict state management across HSMs, and long-lived hardware with 30 year device life that cannot be easily updated, forcing early design and PKI lifespan choices.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 1:24Cisco’s PQC journey
- 5:02Quantum threat risks
- 8:58CNSA 2.0 compliance
- 10:02PQC development challenges
- 13:52PQC migration strategies
- 14:55NIST algorithms overview
- 17:42PQC performance impacts
- 20:36Hash-based algorithm risks
- 23:22Industry collaboration
related talks
13mNavigating the Quantum Readiness Journey: Open-Source Cryptography, PKI and Signing Tools
33mExtending or Evolving: Choosing the Path to Quantum Readiness
48mPreparing for Quantum: A Pragmatic Approach towards Readiness
53mPanel: Migrating to Post-Quantum Schemes
10mSummary and Closing
47mReal-World Lessons in Post-Quantum Cryptography Migration
22mPost Quantum Policy and Roadmap of the BSI
28mHow The Canadian Government is preparing for PQC