PKI deployments are as unique as any snowflake; how to build equally flexible PQ migration strategie
summary
Classifies PKI deployments by concrete migration risks — discoverability gaps (use CBOM), hardware lock‑in, reachability and refresh cycles — and ties each to concrete tools: inventorying keys and certificates, composite certificates for dual‑security, alt public key and chameleon delta descriptors, externalized public keys and soft flag day rollouts. Industry is building RFC drafts and tooling now; hybrid and composite builds exist as proofs of concept but full ecosystem support and compliant validations lag, so techniques work in pilots but require recipes before wide rollout.
AI-written summary · about
chapters (8)
- 0:00Postquantum PKI migration intro
- 1:08Transitioning to postquantum PKI
- 3:39PKI use cases for migration
- 7:07Migration needs assessment
- 13:10Postquantum migration tools
- 20:39Hybrid certificate mechanisms
- 30:55PQ migration challenges
- 32:45Q&A on downgrade attacks
related talks
34mArchitecting PKI Hierarchies for Graceful PQ Migration
24mPKI Agility and the Difference to Cryptographic Agility: Lessons from the Past and Present
24mTransitioning to Post-Quantum Cryptography in IAM
26mFrom Inventory to Action: Navigating the Next Phase of PQC Transition
26mA structured approach to the quantum safe transformation
40mDigital Identities - 21 PKI Pitfalls and How Best to Avoid Them
20mHybrid Approach for quantim safe PKI Development for Organizations HAPKIDO
56mIoT: Taking PKI Where No PKI Has Gone Before