PQC at the Internet Engineering Task Force IETF
summary
IETF is updating TLS, X.509, CMS, CMP and many other specs to accept NIST PQ primitives; eight active Internet-Drafts and a new pqip coordination WG support the work. A PKI hackathon produces interoperable artifacts with OpenSSL, Bouncy Castle and libpki plus five vendors, proving chain parsing/verification across implementations. Practical problems include TLS handshake bloat that exceeds a ~5 KB server hello, LMS key‑exhaustion and no‑backup rules, CMP becoming a 3 roundtrip protocol, and CMS being ready for deployment.
AI-written summary · about
chapters (8)
- 0:00Introduction and agenda
- 2:22IETF scope and organization
- 7:11Challenges of the migration
- 13:57LMS implementation hurdles
- 16:27The impact of KEMs
- 19:01Protocol case studies
- 26:54Hybrid migration strategies
- 34:09Q&A session
related talks
23mPQC Interoperability Project
32mPQC in OpenSSL Library
13mNavigating the Quantum Readiness Journey: Open-Source Cryptography, PKI and Signing Tools
27mTurning Quantum Threats into Opportunities: Modernizing WebPKI with QUIC and Metrics-Driven Insights
29mPQC Standardization at the Internet Engineering Task Force (IETF)
27mHow ETSI is Preparing for PQC
27mThe PQC Landscape: Protocols and Standards
29mOpening