Post-Quantum Crypto Integration for Enterprise Applications
summary
Project Trade-EVs II (BMWK FKZ: 01MV20006A) integrates post‑quantum primitives into real systems and reports practical frictions: PostgreSQL TLS with Kyber and Open Quantum Safe libs requires reverse engineering because ECDH is hardcoded, hybrid handshakes blow up packet size and add RTTs so Kyber wins in LAN but slows in WAN, and key exchange changes break clients; JarSigner with stateful hash signatures forces robust state management and serialization fixes. Recommendation: automated crypto inventory, crypto agility, and a staged migration plan.
AI-written summary · about
chapters (11)
- 0:00Post-Quantum Crypto intro
- 1:49Challenges in Post-Quantum Cryptography
- 4:23NIST PQC standards
- 7:57Global standards & interop
- 11:18Protocol integration & performance
- 15:19Quantum uncertainty & migration
- 18:11Crypto agility & inventory
- 20:59Postgres PQC case study
- 23:30Hash-based signatures
- 25:37Key takeaways
- 27:48Q&A on PQC API
related talks
27mPost-Quantum Cryptography
23mReal-World Post-Quantum Migrations: Lessons Learned and Performance Results
47mReal-World Lessons in Post-Quantum Cryptography Migration
44mTheory to Practice: Real-World Lessons in Post-Quantum Cryptography Migration
24mTransitioning to Post-Quantum Cryptography in IAM
36mPost-Quantum Cryptography for Digital Signing
30mMigrating and benchmarking a banking application
32mCybersecurity in Post Quantum Era