Navigating the Quantum Readiness Journey: Open-Source Cryptography, PKI and Signing Tools
summary
NIST releases final postquantum algorithms and renames them to mlsa, slh DSA and mlem, which bring larger keys, bigger signatures and key encapsulation mechanisms (KEMs) requiring round trips. NSA sets 2030 code-signing deadline and 2033 for general use, so expect mixed legacy and PQC stacks during upgrades. IETF drafts four certificate paths: hybrids, chameleons, composites, merkle-tree, and OpenSSH v9 already supports PQ key exchange while many HSM vendors lag on PQ key support. Inventory keys, plan crypto-agility, and start issuing test PQ roots now.
AI-written summary · about
chapters (15)
- 0:00Introduction and speaker credentials
- 0:21NIST post-quantum algorithm updates
- 1:05Key differences in new algorithms
- 2:08Impact on the ecosystem
- 2:49Timeline and NSA deadlines
- 3:53Forward secrecy importance
- 4:14Understanding crypto agility
- 5:56Hybrid certificate solutions
- 6:58Chameleon certificates explained
- 7:41Composite certificates overview
- 8:22Merkle tree certificates for TLS
- 9:33Migration plan recommendations
- 10:58Immediate actions to take
- 11:41Post-quantum readiness steps
- 12:45Resources and closing remarks
related talks
46mAchieving Quantum Readiness: A Comprehensive Approach
36mPost-Quantum Cryptography for Digital Signing
33mTransitioning National Security Systems to a Post Quantum Future
24mTransitioning to Post-Quantum Cryptography in IAM
58mPQC Integration in HSMs: From Standards to Strategy
30mNavigating the Quantum Readiness Journey: Hands-on Guidance for Starting Your Migration-
33mExtending or Evolving: Choosing the Path to Quantum Readiness
27mImplementing Post Quantum algorithms in PKCS #11