PQC in Practice: Why This, Not That?
summary
Discussion compares Chimera, composite and pure PQC strategies and gives concrete tradeoffs: Chimera certificates for backward interoperability, composite keys when both legacy and PQC must be trusted, and pure PQC for simplicity. Notes practical constraints: OpenSSL tooling lag, TLS short certs and 47-day lifetimes demand automation, and many deployments can use KEMs now but still face harvest-now-decrypt-later risk. Reissue, key management abstraction, and phased rollouts are the actionable paths described.
AI-written summary · about
chapters (15)
- 0:00Welcome
- 1:07Panel introduction
- 2:32Why public key crypto for PQC
- 6:30PQC terms and migration
- 11:06Critical areas for PQC
- 15:00Pure vs composite vs hybrid
- 22:53Dual-key governance challenges
- 25:22S/MIME complexity breakdown
- 27:35Enterprise S/MIME with PQC
- 30:05Upgrading certificates with PQC
- 35:26Q&A: Quantum risk timeline
- 40:10Q&A: Hybrid PQC vulnerabilities
- 44:24Q&A: Pure PQC viability
- 46:36Q&A: Harvest now decrypt later
- 51:00Closing remarks
related talks
30mBuilding Your PQC Lab: Trust But Verify Your PQC Ecosystem
30mInvestigating Post-Quantum Cryptography: building a PQC decision tree for developers
39mPQC at the European Telecommunications Standards Institute ETSI
28mHow The Canadian Government is preparing for PQC
33mExtending or Evolving: Choosing the Path to Quantum Readiness
41mPreparing for and migrating to a world with PQC
15mOne App at a Time: DigiCert's Practical Playbook for the Post-Quantum Transition
48mPreparing for Quantum: A Pragmatic Approach towards Readiness
