PKI Agility and the Difference to Cryptographic Agility: Lessons from the Past and Present
summary
Argues that agility is organizational not just technical, showing concrete past and current failures and fixes: certificate issuance is easy but verification across vendors is the blocker; migration from RSA to ECC encounters ecosystem delays (example: RSA→ECC transition delayed one year); hybrid constructions add operational complexity (example: hybrid secure-boot on the IBM mainframe); PQC can force 2×–20× server-side slowdown depending on configs; recommends inventories, automation, bills of materials and observability to measure where migration will actually break.
AI-written summary · about
chapters (14)
- 0:00PKI vs cryptographic agility
- 1:47Defining agility and myths
- 3:15Cryptographic agility lifecycle
- 5:03Transitioning cryptography challenges
- 7:32Cryptographic phase mismatches
- 9:59Operational agility beyond algorithms
- 11:24Threats to trusted entities
- 13:30Standards and supplier latency
- 14:53Hybrid certificates complexity
- 16:42Post-quantum performance impact
- 18:27RSA to ECC migration case
- 19:30Strategies for crypto agility
- 20:55Wrap-up and key takeaways
- 21:16Q&A: Crypto agility
related talks
38mPKI deployments are as unique as any snowflake; how to build equally flexible PQ migration strategie
19mAgile is the new black – Why Preparing for Postquantum Crypto also Matters to You!
32mand Signatures – no Problem?
34mArchitecting PKI Hierarchies for Graceful PQ Migration
40mDigital Identities - 21 PKI Pitfalls and How Best to Avoid Them
33mPKI PKI and PQC Strategy for Payment Card Industry
48mPreparing for Quantum: A Pragmatic Approach towards Readiness
41mPreparing for and migrating to a world with PQC