Real-World Post-Quantum Migrations: Lessons Learned and Performance Results
summary
Three production pilots migrate real systems to post‑quantum algorithms: an in‑house app, a Dutch tax message‑queuing TLS gateway, and OCSP with a remote HSM. Code migration edits 293 files changed and ~4,000 lines of code to add two PQ algorithms; making the code crypto‑agile first reduces follow‑on work. A reverse‑proxy using OpenSSL OQS protects TLS when vendors lack PQ support. TLS hybrid configs show about a 20% throughput drop, and remote HSM benchmarks (7 vendors contacted, one workable) find MLDDSA latency comparable to ECDSA once network overhead is accounted for.
AI-written summary · about
chapters (9)
- 0:00Real-world PQC migrations intro
- 1:02Project overview and motivation
- 3:50Four-phase migration process
- 6:37Pilot migration challenges
- 9:05Tax office TLS results
- 12:15OCSP benchmarking with ING
- 15:27Results dissemination
- 20:41Collaboration success factor
- 21:47Q&A hybrid certificates
related talks
47mReal-World Lessons in Post-Quantum Cryptography Migration
30mMigrating and benchmarking a banking application
44mTheory to Practice: Real-World Lessons in Post-Quantum Cryptography Migration
30mPost-Quantum Crypto Integration for Enterprise Applications
27mPost-Quantum Cryptography
30mNavigating the Quantum Readiness Journey: Hands-on Guidance for Starting Your Migration-
41mPreparing for and migrating to a world with PQC
44mPost-quantum cryptography migration strategy for cloud services