Securing Data in the Quantum Era: From the Root of Trust to Protecting Ecosystems
summary
HSMs act as a practical entry point for post‑quantum deployment, shipping with round‑three algorithms and supporting hybrid X.509 certificates while experiments add FPGA acceleration for performance. A concrete method shares state among HSMs to make stateful LMS/XMSS appear stateless, so only the user unlock key and an admin integrity key need migration to PQC for file encryption. Key management splits into key injection (device identities) and enterprise lifecycle, and a funded inter‑banking EIX research project prototypes protocol changes. Standards and FIPS workflows still evolve.
AI-written summary · about
chapters (11)
- 0:00Welcome
- 1:04Postquantum cryptography & HSMs
- 3:11CNSA 2.0 and PQC adoption
- 5:37Hardware acceleration & HSM security
- 7:23Hash-based algorithms & HSM integration
- 8:48PKI migration to quantum-safe
- 11:37Key management challenges
- 16:16Encrypting data securely
- 22:22Securing banking ecosystems
- 25:37HSMs summary & challenges
- 27:04Q&A
related talks
46mAchieving Quantum Readiness: A Comprehensive Approach
24mHSM Advances Supporting quantum-safe PKI Automation
13mNavigating the Quantum Readiness Journey: Open-Source Cryptography, PKI and Signing Tools
30mNavigating the Quantum Readiness Journey: Hands-on Guidance for Starting Your Migration-
51mKey Management 101: DEKs, KEKs, and Credentials Living Together, Oh My!
32mCybersecurity in Post Quantum Era
32mCare and Feeding of HSMs: Key Management in Hard Mode
27mSecurity++: Hide Your Secrets via a Distributed Hardware Security Mod...