Public Key Infrastructure Consortium (PKI Consortium)

Trusted digital assets and communication for everyone and everything

The slides and recordings of the presentations at our second Post-Quantum Cryptography Conference are now accessible for your reference. Click on the title of the session in the agenda to download the slides.

PKI Consortium

The PKI Consortium is comprised of leading organizations that are committed to improve, create and collaborate on generic, industry or use-case specific policies, procedures, best practices, standards and tools that advance trust in assets and communication for everyone and everything using Public Key Infrastructure (PKI) as well as the security of the internet in general. By engaging with users, regulators, supervisory bodies and other interested or relying parties the consortium can address actual issues. [learn more…]

Public Key Infrastructure

Public Key Infrastructure (PKI) defines the foundation for most modern security systems and provides Confidentiality, Integrity, Authenticity and Non-repudiation. It relies on public key cryptography, a universally accepted asymmetric technology that enables entities to securely communicate using an insecure transport or media, reliably link the data to the signatory and protects the integrity of the data while proving guarantees about the existence of the data at the time of signature creation.

A list of cryptographic devices that includes support for remote key attestations
March 22, 2024 by Tomas Gustavsson (Keyfactor) Remote Key Attestation
The PKI Consortium is managing a a list of cryptographic devices that includes support for remote key attestations, without endorsing their implementation or quality.

Second Post-Quantum Cryptography Conference: Register now to join us in Amsterdam or Online!
August 31, 2023 by Paul van Brouwershaven (Digitorus) Paul van Brouwershaven (Entrust) Conference Post-Quantum Cryptography PQC
Join us on November 7 and 8, either in-person at the Meervaart in Amsterdam or remotely online. Explore the forefront of Post-Quantum Cryptography with renowned speakers from NIST, ENISA, BSI, and more. Registration is free and open to all, not limited to PKI Consortium members.

Introducing first PKI Maturity Model (PKIMM)
August 10, 2023 by Roman Cinkais (3Key Company) Maturity model PKIMM
The PKI Consortium publishes initial draft of the PKI maturity model with related resources to help the industry build mature and future proof PKI including guidelines on how to evaluate the assessment and provide reporting to relying parties. The PKI maturity model is recognized as a standard for evaluation, planning, and comparison between different PKI implementations. In this blog post we are going to introduce the model.

Balancing Privacy and Security: Lessons Learned from Telegram’s Controversy

On Sunday August 25th, 2024, Pavel Durov, the 39-year-old Russian-born billionaire and CEO of Telegram was arrested at a French airport as part of a broad investigation into criminal activities on the messaging platform. Telegram’s non-cooperation to share data with investigators led to allegations that it may be inadvertently facilitating illegal activities such as money […] Published on Friday September 6, 2024 at blog.01com.com

Everything You Need To Know About PKI-as-a-Service (PKIaaS)

PKI-as-a-service involves deploying and managing an organization’s Public Key Infrastructure (PKI) on a cloud-based platform. This service handles the entire PKI lifecycle, from setting up a Certificate Authority (CA) to issuing, managing, and revoking end-entity certificates for user’s devices or domains. Features such as better flexibility, automated procedures, and lower overhead make it simple for […] Published on Friday September 6, 2024 at www.encryptionconsulting.com

Managing Certificate Chaos After Google’s Entrust Distrust

When Google decided to stop trusting new TLS certificates from Entrust, it didn’t just create a technical challenge—it unleashed an operational crisis for many organizations. If your business uses Entrust TLS certificates, you are facing one of two realities right now. If you are using a certificate lifecycle management (CLM) platform that provides Certificate Authority […] The post Managing Certificate Chaos After Google’s Entrust Distrust first appeared on Accutive Security. Published on Thursday September 5, 2024 at accutivesecurity.com

The Challenges Organizations Face with NIS 2 and DORA

NIS 2 and DORA are undoubtedly a positive development in cyber security. However, they also raise a number of questions and challenges. Read More … Published on Sunday September 1, 2024 at creaplus.com

The art and science behind Microsoft threat hunting: Part 3

In this blog post, read how Microsoft Incident Response leverages three types of threat intelligence to enhance incident response scenarios. The post The art and science behind Microsoft threat hunting: Part 3 appeared first on Microsoft Security Blog. Published on Wednesday August 28, 2024 at www.microsoft.com

Data Masking Challenges in Complex Data Environments and How to Tackle them

As a database administrator, you don’t just maintain systems—you protect your organization’s most sensitive data. With the rise of AI, big data, and ever-tightening regulations, the challenge isn’t just in securing data; it’s in making sure that data remains accessible and usable. As data spreads across multiple formats and systems, data masking has become increasingly […] The post Data Masking Challenges in Complex Data Environments and How to Tackle them first appeared on Accutive Security. Published on Wednesday August 28, 2024 at accutivesecurity.com

Peach Sandstorm deploys new custom Tickler malware in long-running intelligence gathering operations

Between April and July 2024, Microsoft observed Iranian state-sponsored threat actor Peach Sandstorm deploying a new custom multi-stage backdoor, which we named Tickler. Tickler has been used in attacks against targets in the satellite, communications equipment, oil and gas, as well as federal and state government sectors in the United States and the United Arab […] The post Peach Sandstorm deploys new custom Tickler malware in long-running intelligence gathering operations appeared first on Microsoft Security Blog. Published on Wednesday August 28, 2024 at www.microsoft.com

How Microsoft Entra ID supports US government agencies in meeting identity security requirements

United States Government agencies are adopting Microsoft Entra ID to consolidate siloed identity solutions, reduce operational complexity, and improve control and visibility across all users. The post How Microsoft Entra ID supports US government agencies in meeting identity security requirements appeared first on Microsoft Security Blog. Published on Monday August 26, 2024 at www.microsoft.com

Microsoft AI Tour: Hear the latest product innovations to elevate your security strategy

The Microsoft AI Tour is coming to a city near you. Join a free, one-day tour event to learn how we are making AI deployment more secure. The post Microsoft AI Tour: Hear the latest product innovations to elevate your security strategy appeared first on Microsoft Security Blog. Published on Thursday August 22, 2024 at www.microsoft.com

Microsoft again ranked number one in modern endpoint security market share

IDC Worldwide Corporate Endpoint Security Market Shares report for 2023 ranks Microsoft number one in market share with a 40.7% increase in share over last year. The post Microsoft again ranked number one in modern endpoint security market share appeared first on Microsoft Security Blog. Published on Wednesday August 21, 2024 at www.microsoft.com

How to Implement GDPR Data Masking Without Sacrificing Data Usability

If you work with customer data, ensuring GDPR compliance by masking all your PII is crucial. But GDPR data masking is not just about meeting regulatory requirements; it involves navigating complex challenges to both protect data and maintain its usability. GDPR mandates that PII must be protected through techniques like anonymization and pseudonymization, which involve […] The post How to Implement GDPR Data Masking Without Sacrificing Data Usability first appeared on Accutive Security. Published on Tuesday August 20, 2024 at accutivesecurity.com

AI Performance: Measuring Success Beyond the Hype

AI can be a game-changer, but it's crucial to measure its real impact – the "AI performance" – to ensure investments pay off. Read More … Published on Tuesday August 20, 2024 at creaplus.com

Understanding the Importance of HSMs in Achieving PCI DSS Compliance

Payment Card Industry Data Security Standard, generally called PCI DSS, is a security standard created to reduce fraudulent activities related to payment cards. These standards were designed to ensure that all the vendors with cardholder information maintain a secure environment and protect this data from cyber threats and vulnerabilities. As more organizations work towards making […] Published on Friday August 16, 2024 at www.encryptionconsulting.com

To Revoke or Not to Revoke: Balancing Security with Performance and Operational Complexity

The post To Revoke or Not to Revoke: Balancing Security with Performance and Operational Complexity appeared first on PKI Solutions. Published on Friday August 16, 2024 at www.pkisolutions.com

In-Depth Analysis of FIPS 205: Stateless Hash-Based Digital Signature Standard

The Federal Information Processing Standards Publication (FIPS) 205 introduces a groundbreaking approach to digital signatures with its Stateless Hash-Based Digital Signature (SLH-DSA) Standard. Our blog presents the framework for digital signatures, leveraging hash-based techniques to enhance both security and efficiency in cryptographic systems. Overview of SLH-DSA FIPS 205, or the Stateless Hash-Based Digital Signature Standard, […] Published on Tuesday August 13, 2024 at www.encryptionconsulting.com

Understanding FIPS 204: The Module-Lattice-Based Digital Signature Standard

The Federal Information Processing Standards Publication (FIPS) 204 introduces the Module-Lattice-Based Digital Signature Standard. This standard is designed to address the growing need for security in an era where traditional cryptographic methods may be vulnerable to quantum computing attacks. Here’s a detailed overview of FIPS 204, its purpose, and its implications for modern cryptographic practices. […] Published on Tuesday August 13, 2024 at www.encryptionconsulting.com

Iron Mountain's SigningHub case study | Ascertia | Blog

Iron Mountain was founded over 70 years ago, serving as a strategic partner in storage and information management. It's trusted by over 225,000 organisations worldwide, including 90% of the Fortune 1000. Published on Tuesday August 13, 2024 at blog.ascertia.com

Synthetic vs. Realistic Data for Gen AI & LLM?

How are you training your generative AI models? In AI and machine learning (AI-ML), the type of data you choose can make or break your model’s performance. Whether you opt for real production data, synthetic data, or masked data, each choice has its unique impact on your model’s accuracy and effectiveness. This article dives into […] The post Synthetic vs. Realistic Data for Gen AI & LLM? first appeared on Accutive Security. Published on Tuesday August 13, 2024 at accutivesecurity.com

In-Depth Overview of FIPS 203: The Module-Lattice-Based Key-Encapsulation Mechanism Standard

The Federal Information Processing Standards (FIPS) 203 publication introduces the Module-Lattice-Based Key-Encapsulation Mechanism (ML-KEM) Standard, which provides a cutting-edge cryptographic framework designed to secure data against emerging quantum computing threats. Our blog explores the core elements, parameter sets, implementation differences, and practical considerations outlined in the FIPS 203 standard. Introduction to ML-KEM ML-KEM is a […] Published on Tuesday August 13, 2024 at www.encryptionconsulting.com

Your Guide to The New Federal Quantum Action Plan

As quantum computing continues to advance, the potential threat it poses to traditional cryptography has become a significant concern for governments and organizations worldwide. Recognizing the urgency of preparing for this new era of cryptography, the U.S. Federal Government has taken decisive steps to develop and implement a detailed Post-Quantum Cryptography (PQC) migration strategy. Please […] Published on Monday August 12, 2024 at www.encryptionconsulting.com

Race Against Time: Preparing for The Inevitable Q-Day

There is no questioning that the development of quantum computers will potentially enhance various aspects of our life. However, they also introduce problems that undermine the security of our data, threatening the cybersecurity we rely on. “Q-Day” refers to the day when quantum computers reach the power and qubit reliability enough to render current encryption […] Published on Friday August 9, 2024 at blog.01com.com

Chained for attack: OpenVPN vulnerabilities discovered leading to RCE and LPE

Microsoft researchers found multiple vulnerabilities in OpenVPN that could lead to an attack chain allowing remote code execution and local privilege escalation. This attack chain could enable attackers to gain full control over targeted endpoints, potentially resulting in data breaches, system compromise, and unauthorized access to sensitive information. The post Chained for attack: OpenVPN vulnerabilities discovered leading to RCE and LPE appeared first on Microsoft Security Blog. Published on Thursday August 8, 2024 at www.microsoft.com

Why Do Enterprises Need HSM Support?

Most, if not all, organizations in today’s world have or require a Hardware Security Module, or HSM, for their day-to-day security operations. Whether it be for security standards or just following best practices, HSM has become an inseparable part of the majority of organization’s security platforms. Configuring these devices is a crucial and relatively painless […] Published on Thursday August 8, 2024 at www.encryptionconsulting.com

Best Data Masking Tools Gartner (Updated 2024) : Comparing top-rated tools

Choosing the right data masking tools can be overwhelming with many options available in the market. Gartner Peer Insights lists over 20 vendors in the data masking category alone, and making sense of these reviews to make an informed decision can be challenging. In this guide, we simplify the process by examining the top data […] The post Best Data Masking Tools Gartner (Updated 2024) : Comparing top-rated tools first appeared on Accutive Security. Published on Wednesday August 7, 2024 at accutivesecurity.com

How Microsoft and NIST are collaborating to advance the Zero Trust Implementation

Both Microsoft and the National Institute of Standards and Technology (NIST) National Cyber security Center of Excellence (NCCoE) have translated the Zero Trust Architecture (ZTA) and Security Model into practical and actionable deployment. In this blog post, we explore details of their collaboration on a Zero Trust (ZT) implementation and what this learning pathway means for your organization. The post How Microsoft and NIST are collaborating to advance the Zero Trust Implementation appeared first on Microsoft Security Blog. Published on Tuesday August 6, 2024 at www.microsoft.com