Update on end-to-end PKI and HSM integrations with ML-DSA

on YouTube ↗24m

" summary

Benchmarks show HSM behavior varies wildly: some REST or soft HSMs handle tens to hundreds of certificates per second while others drop to ~70 or a few dozen; LMS throughput can be LMS performance <1–5 sig/s on some devices and fails under parallel requests on others. Payload signing limits differ (cloud HSMs may enforce a 4KB limit; tests found payload limits vary 4KB–600MB). PKCS#11 v3.1 supports LMS today and PKCS#11 v3.1 and draft 3.2 adds ML-DSA support, but API and stateful-signature quirks require careful engineering.

AI-written summary · about

" chapters (10)

1. 0:00Welcome
2. 1:03Introduction
3. 2:29PKI migration goals and use cases
4. 3:59HSM types and performance
5. 7:55Testing ML-DSA and LMS with HSMs
6. 12:56Signing size limitations
7. 16:07Lessons learned
8. 19:45HSM integration APIs
9. 21:55Recommendations and future outlook
10. 23:24Q&A

" related talks

• 24mReal-World Readiness for PQC: Gaps, Gains, and GroundworkTomas Gustavsson · Post-Quantum Cryptography Conference 2025
• 29mCrunching the Numbers Post Quantum Algorithm PerformanceTomas Gustavsson · Post-Quantum Cryptography Conference Amsterdam 2023
• 28mMixed Certificate Chains for the Transition to Post Quantum Authentication in PKISebastian Paul · Post-Quantum Cryptography Conference Ottawa 2023
• 35mThe internet is ready for some PQC certificatesShane Kelly · Post-Quantum Cryptography Conference 2025
• 28mQuantum-safe PKI for the German administrationKaveh Bashiri · Post-Quantum Cryptography Conference Amsterdam 2023
• 27mImplementing Post Quantum algorithms in PKCS #11Bob Relyea · DevConf.CZ 2025
• 58mPQC Integration in HSMs: From Standards to StrategyGiuseppe Damiano, John Buselli, Bruno Couillard, Blair Canavan, Nils Gerhardt, Zsolt Rózsahegyi · Post-Quantum Cryptography Conference 2025
• 24mHSM Advances Supporting quantum-safe PKI AutomationOlivier Couillard · Post-Quantum Cryptography Conference 2025