Perspectives on the transition to PQC in the financial sector
summary
Updates regulatory timelines (CNSA2, DORA, PCI‑DSS 12.33 with enforcement 2025) and cites a US estimate of $7.1B (~1% IT) for PQC transition; defines crypto agility as a combined technical and business measure. Banks run a three‑wave roadmap aligned to CNSA2, start with discovery and TLS hardening (hand‑audit of 9,000 Apache instances finds TLS 1.3 gaps but only IE11 client loss), pilot batched long‑term signing with SLHDSA for contract immutability, and open‑source tools (PTO and Crypton) plus a certificate inventory in CMDB that already works.
AI-written summary · about
chapters (10)
- 0:00Welcome
- 1:46PQC transition 2024 update
- 9:05Crypto procrastination and Mosca’s theorem
- 15:29Regulatory crypto requirements
- 20:30Three-wave PQC adoption plan
- 25:10TLS evolution and discovery
- 26:16Quantum-safe signatures with SLH-DSA
- 28:27Open-source PQC tools
- 31:21Key takeaways and vendor wish list
- 32:48Q&A
related talks
33mPKI PKI and PQC Strategy for Payment Card Industry
48mPreparing for Quantum: A Pragmatic Approach towards Readiness
07mEverything You Trust Online Could Break — F5 Labs on Q-Day
24mTransitioning to Post-Quantum Cryptography in IAM
27mHow ETSI is Preparing for PQC
30mPreparing Vulnerability Management for the Post-Quantum Era: From Legacy Cryptography Crypto-Agility
20mNavigating National Cyber Resilience in the Quantum Era
44mQuantum Cyber Risk: How Deep and How Wide?