Working Groups

Members

The PKI Consortium brings together leading organizations committed to trustworthy digital identities and secure communication.

Browse all members →

Post-Quantum Cryptography Conference

Friday March 3, 2023 - Ottawa, Canada - Hybrid

Conference details

On Friday March 3, 2023 the PKI Consortium hosted it's first Post-Quantum PKI conference in Ottawa, Canada.

The conference was open for anyone interested in preparing for Post-Quantum Cryptography and not limited to the members of the PKI Consortium.

Our second Post-Quantum Cryptography Conference will be in Amsterdam (and online), on 7 and 8 November 2023.

Click here for more information and to register for the conference.

Sponsors

We are immensely grateful to our sponsors:

Would you like to sponsor the Post-Quantum PKI conference? Please contact us using this form.

Agenda

Below you can find the agenda, slides and recordings.

Event agenda

Agenda for 2023-03-03, times in America/Toronto
TimePlenary
Event · Toronto
Registration 30 min
Event · Toronto
Event · Toronto
Plenary

Rene PeraltaScientist with the Computer Security Division at NIST

There is a significant probability that, in the coming decades, a large quantum computer can be built. When this happens, much of the cryptography that currently secures communications will have to be replaced by new, quantum resistant, cryptographic standards. For the last several years, NIST has been embarked on a process of selecting new, quantum-resistant, algorithms for public-key cryptography. These algorithms will be the basis for the new standards. I will describe the quantum computer threat and the measures we are taking to address it. Then I will report on the current status of our standardization effort.

Download slides
45 min

Status report on Post-Quantum Cryptography Standardization

Abstract

There is a significant probability that, in the coming decades, a large quantum computer can be built. When this happens, much of the cryptography that currently secures communications will have to be replaced by new, quantum resistant, cryptographic standards. For the last several years, NIST has been embarked on a process of selecting new, quantum-resistant, algorithms for public-key cryptography. These algorithms will be the basis for the new standards. I will describe the quantum computer threat and the measures we are taking to address it. Then I will report on the current status of our standardization effort.

Speakers

Rene Peralta

Scientist with the Computer Security Division at NIST

René Peralta received a B.A. in Economics from Hamilton College in 1978. In 1980 he received a M.S. in Mathematics from the State University of New York at Binghamton. In 1985 he received a Ph.D. in Computer Science from the University of California at Berkeley. For the next 20 years he held various positions in academia, mostly as a professor of cryptology, algorithmics and computational number theory. In 2005 he moved to NIST. He is currently a scientist with the Computer Security Division. Among the projects he is currently involved in are The NIST Randomness Beacon, Circuit Complexity, Privacy Enhancing Cryptography, and Post-Quantum Cryptography.

Event · Toronto
Break 15 min
Event · Toronto
Plenary

Mike OunsworthSoftware Security Architect at Entrust

Just as post quantum is providing challenges for a generation of academic cryptographers, so too is it providing challenges for cryptographic engineers. The new PQC primitives behave differently enough from their RSA and ECC predecessors that they sometimes require substantial protocol and application re-design in order to accommodate them. On top of that we need to engineer for gracefully migrating all of the Internet's systems in a fairly abrupt timeline. This talk will overview IETF progress at integrating PQC into common Internet protocols: challenges, progress, and work yet-to-be-started. I will conclude with my personal research area: PKI PQ/Traditional hybrid modes that enhance both security and migration flexibility.

Download slides
45 min

PQC at the Internet Engineering Task Force (IETF)

Abstract

Just as post quantum is providing challenges for a generation of academic cryptographers, so too is it providing challenges for cryptographic engineers. The new PQC primitives behave differently enough from their RSA and ECC predecessors that they sometimes require substantial protocol and application re-design in order to accommodate them. On top of that we need to engineer for gracefully migrating all of the Internet's systems in a fairly abrupt timeline. This talk will overview IETF progress at integrating PQC into common Internet protocols: challenges, progress, and work yet-to-be-started. I will conclude with my personal research area: PKI PQ/Traditional hybrid modes that enhance both security and migration flexibility.

Speakers

Mike Ounsworth

Software Security Architect at Entrust

Mike Ounsworth is a Software Security Architect at Entrust. His day-job is primarily application security architecture and penetration testing, with research projects in cryptography and post-quantum cryptography. He is leading discussion at IETF around post-quantum transition strategies for Public Key Infrastructure (PKI), including primary and secondary authorship on several Internet Drafts. He holds an M.Sc in Computer Science in robotics and artificial intelligence from McGill University, and an undergraduate degree in Computer Science with concentrations in mathematics and physics from Queen's University. Fun fact: he has a decade of experience coaching the high school level FIRST Robotics Competition.

Event · Toronto
Plenary

Matthew CampagnaChair CYBER QSC (Quantum Safe Cryptography and Security) at ETSI, Senior Principal Engineer at Amazon Web Services (AWS)

ETSI has been working on advocating and developing quantum-safe/post-quantum cryptographic standards since 2013. This presentation will cover the work that has been done at ETSI as well as the current Technical Recommendations and Specifications being developed within ETSI’s TC CYBER’s Working Group on Quantum-Safe Cryptography. The talk will also outline how the work of AWS in ETSI, IETF and submissions to NIST align with our view of PQC migration.

Download slides
45 min

PQC at the European Telecommunications Standards Institute (ETSI)

Abstract

ETSI has been working on advocating and developing quantum-safe/post-quantum cryptographic standards since 2013. This presentation will cover the work that has been done at ETSI as well as the current Technical Recommendations and Specifications being developed within ETSI’s TC CYBER’s Working Group on Quantum-Safe Cryptography. The talk will also outline how the work of AWS in ETSI, IETF and submissions to NIST align with our view of PQC migration.

Speakers

Matthew Campagna

Chair CYBER QSC (Quantum Safe Cryptography and Security) at ETSI, Senior Principal Engineer at Amazon Web Services (AWS)

Matthew Campagna is a Sr. Principal Engineer & Cryptographer for Amazon Web Services Inc.’s. He oversees the design and analysis of cryptographic solutions across AWS. He is a member of the ETSI Security Algorithms Group Experts (SAGE), and Chairman of ETSI TC CYBER’s Quantum Safe Cryptography group. Previously he managed Certicom/BlackBerry’s Cryptography Research Group focused on the development of intellectual property and standardization for elliptic curve cryptography. He holds a doctorate in Mathematics from Wesleyan University.

Event · Toronto
Plenary

Rene PeraltaScientist with the Computer Security Division at NIST
Mike OunsworthSoftware Security Architect at Entrust
Matthew CampagnaChair CYBER QSC (Quantum Safe Cryptography and Security) at ETSI, Senior Principal Engineer at Amazon Web Services (AWS)
Chris HickmanModerator (Chief Security Officer at Keyfactor)

This panel discussion will be moderated by Chris Hickman.

You can submit your questions in our discussion forum, during, before, or after the event. Don't forget to mention the name of the speaker if you want to address the question to a specific person!

30 min

Discussion on standardization

Abstract

This panel discussion will be moderated by Chris Hickman.

You can submit your questions in our discussion forum, during, before, or after the event. Don't forget to mention the name of the speaker if you want to address the question to a specific person!

Speakers

Rene Peralta

Scientist with the Computer Security Division at NIST

René Peralta received a B.A. in Economics from Hamilton College in 1978. In 1980 he received a M.S. in Mathematics from the State University of New York at Binghamton. In 1985 he received a Ph.D. in Computer Science from the University of California at Berkeley. For the next 20 years he held various positions in academia, mostly as a professor of cryptology, algorithmics and computational number theory. In 2005 he moved to NIST. He is currently a scientist with the Computer Security Division. Among the projects he is currently involved in are The NIST Randomness Beacon, Circuit Complexity, Privacy Enhancing Cryptography, and Post-Quantum Cryptography.

Mike Ounsworth

Software Security Architect at Entrust

Mike Ounsworth is a Software Security Architect at Entrust. His day-job is primarily application security architecture and penetration testing, with research projects in cryptography and post-quantum cryptography. He is leading discussion at IETF around post-quantum transition strategies for Public Key Infrastructure (PKI), including primary and secondary authorship on several Internet Drafts. He holds an M.Sc in Computer Science in robotics and artificial intelligence from McGill University, and an undergraduate degree in Computer Science with concentrations in mathematics and physics from Queen's University. Fun fact: he has a decade of experience coaching the high school level FIRST Robotics Competition.

Matthew Campagna

Chair CYBER QSC (Quantum Safe Cryptography and Security) at ETSI, Senior Principal Engineer at Amazon Web Services (AWS)

Matthew Campagna is a Sr. Principal Engineer & Cryptographer for Amazon Web Services Inc.’s. He oversees the design and analysis of cryptographic solutions across AWS. He is a member of the ETSI Security Algorithms Group Experts (SAGE), and Chairman of ETSI TC CYBER’s Quantum Safe Cryptography group. Previously he managed Certicom/BlackBerry’s Cryptography Research Group focused on the development of intellectual property and standardization for elliptic curve cryptography. He holds a doctorate in Mathematics from Wesleyan University.

Chris Hickman

Moderator (Chief Security Officer at Keyfactor)

Chris Hickman is the chief security officer at Keyfactor. As a member of the senior management team, Chris is responsible for establishing & maintaining Keyfactor’s leadership position as a world-class, technical organization with deep security industry expertise. He leads client success initiatives and helps integrate the voice of the customer directly into Keyfactor’s platform and capability set.

Prior to joining Keyfactor, Chris was Director of Technical Services at Alacris, an Ottawa based smartcard and certificate management company, which was sold to Microsoft and is now part of the Microsoft Identity Manager product suite. Chris has worked on PKI projects for organizations and firms including NATO, both the U.S. and Canadian Departments of Defense, Fortune 100 banks and financial institutions, manufacturers, insurance companies, telecommunication providers and retailers. He continues to be a trusted resource for enterprises looking to leverage digital certificates within existing portfolios and new product development.

Event · Toronto
Lunch 60 min
Event · Toronto
Plenary

Sebastian PaulPost-Quantum Cryptography Security Research Engineer at Bosch

In this talk, I will propose and investigate a migration strategy towards post-quantum PKI authentication. Our strategy is based on the concept of "mixed certificate chains" that use different signature algorithms within the same certificate chain. In order to demonstrate the feasibility of our migration strategy, we combine the well-studied and trusted hash-based signature schemes SPHINCS+ and XMSS with elliptic curve cryptography first and subsequently with lattice-based PQC signature schemes (Dilithium and Falcon)

Download slides
30 min

Mixed Certificate Chains for the Transition to Post-Quantum Authentication in PKI

Abstract

In this talk, I will propose and investigate a migration strategy towards post-quantum PKI authentication. Our strategy is based on the concept of "mixed certificate chains" that use different signature algorithms within the same certificate chain. In order to demonstrate the feasibility of our migration strategy, we combine the well-studied and trusted hash-based signature schemes SPHINCS+ and XMSS with elliptic curve cryptography first and subsequently with lattice-based PQC signature schemes (Dilithium and Falcon)

Speakers

Sebastian Paul

Post-Quantum Cryptography Security Research Engineer at Bosch

Sebastian Paul works as a research engineer in Industrial IoT Security at Bosch Research and is currently pursuing his Ph.D. from the Technical University of Darmstadt in the Security in Information Technology (SIT) research group. Sebastian Paul specializes in the integration of Post-Quantum Cryptography into industrial applications and protocols. As Bosch project lead of the publicly funded project FLOQI, he strives to raise awareness of the quantum threat and to ensure Bosch is ready when powerful quantum computers arrive.

Event · Toronto
Plenary

Melanie AndersonDirector, Cryptographic Security and Systems Development at the Canadian Centre for Cyber Security
Jonathan HammellSenior Technical Advisor for Cryptographic Security, and Lead for Cryptographic Standards at the Canadian Centre for Cyber Security

The Canadian Centre for Cyber Security is the lead technical authority for information technology security for the Government of Canada (GC). The Cyber Centre is working within the GC and with Canada's critical infrastructure to ensure a smooth and timely transition to PQC. This presentation will cover our guidance to GC in preparing for the PQC transition, our efforts in international standards to support adoption of PQC, and some considerations that may impact the PQC transition.

Download slides
30 min

How the Canadian Government is preparing for PQC

Abstract

The Canadian Centre for Cyber Security is the lead technical authority for information technology security for the Government of Canada (GC). The Cyber Centre is working within the GC and with Canada's critical infrastructure to ensure a smooth and timely transition to PQC. This presentation will cover our guidance to GC in preparing for the PQC transition, our efforts in international standards to support adoption of PQC, and some considerations that may impact the PQC transition.

Speakers

Melanie Anderson

Director, Cryptographic Security and Systems Development at the Canadian Centre for Cyber Security

Melanie Anderson is the Director of Cryptographic Security and Systems Development, part of the Canadian Centre for Cyber Security at the Communications Security Establishment. Melanie and her team are responsible for evaluating the security of cryptographic products, providing cryptographic advice and guidance, and modernizing the Government of Canada's classified infrastructure. Melanie is Co-Chair of the Women in Cyber and Intelligence (WICI) group at CSE and is passionate about promoting the well-being and interests of women, mentoring and encouraging girls and young women to pursue careers in STEM.

Since joining CSE in 2003, Melanie has served in several positions across the organization. She has held roles as a software developer, a technical trainer, and a Project Manager for IT systems used by Government of Canada clients. She spent four years based in the United States as a technical Liaison for CSE at the National Security Agency and has held leadership roles in Cyber Defence. Prior to assuming her current role, Melanie was the Manager of Cryptographic Systems Development.

Melanie holds a Bachelor of Computer Science from the University of New Brunswick and completed the Senior Executive Fellows Program through the Harvard Kennedy School in 2020.

Jonathan Hammell

Senior Technical Advisor for Cryptographic Security, and Lead for Cryptographic Standards at the Canadian Centre for Cyber Security

Jonathan Hammell is the Senior Technical Advisor for Cryptographic Security and the Lead for Cryptographic Standards at the Canadian Centre for Cyber Security, part of the Communications Security Establishment. Jonathan participates in various international standards organizations, such as the Internet Engineering Task Force (IETF), Working Group 2 of Subcommittee 27 for the ISO/IEC Joint Technical Committee 1, and the Accredited Standards Committee X9. As Senior Technical Advisor, Jonathan is a subject matter expert in cryptography and provides advice and guidance within the Government of Canada and industry partners.

Jonathan started at CSE in 2004 in cryptographic research. He has a BMath from the University of Waterloo, a joint degree from the Department of Combinatorics & Optimization and the David R. Cheriton School of Computer Science. Jonathan received an MSc from the University of Calgary, where he was a member of the Centre for Information Security and Cryptography.

Event · Toronto
Plenary

Gabriele SpiniCryptographer at TNO, HAPKIDO project

Gabriele Spini will present the HAPKIDO project, sector-based plans that help organizations transition towards Quantum Safe (QS) PKIs, including hybrid PKIs that demonstrate how QS solutions will work with existing infrastructures, and governance models that guide organizations towards a QS future. HAPKIDO is already sharing insights with front runners in the telecom, financial and public sectors.

Download slides
30 min

Hybrid Approach for quantum-safe Public Key Infrastructure Development for Organizations (HAPKIDO)

Abstract

Gabriele Spini will present the HAPKIDO project, sector-based plans that help organizations transition towards Quantum Safe (QS) PKIs, including hybrid PKIs that demonstrate how QS solutions will work with existing infrastructures, and governance models that guide organizations towards a QS future. HAPKIDO is already sharing insights with front runners in the telecom, financial and public sectors.

Speakers

Event · Toronto
Plenary

Sebastian PaulPost-Quantum Cryptography Security Research Engineer at Bosch
Melanie AndersonDirector, Cryptographic Security and Systems Development at the Canadian Centre for Cyber Security
Gabriele SpiniCryptographer at TNO, HAPKIDO project
Greg WetmoreModerator (Vice President Product Development at Entrust)

This panel discussion will be moderated by Greg Wetmore.

You can submit your questions in our discussion forum, during, before, or after the event. Don't forget to mention the name of the speaker if you want to address the question to a specific person!

30 min

Preparing for and migrating to a world with Post-Quantum Cryptography

Abstract

This panel discussion will be moderated by Greg Wetmore.

You can submit your questions in our discussion forum, during, before, or after the event. Don't forget to mention the name of the speaker if you want to address the question to a specific person!

Speakers

Sebastian Paul

Post-Quantum Cryptography Security Research Engineer at Bosch

Sebastian Paul works as a research engineer in Industrial IoT Security at Bosch Research and is currently pursuing his Ph.D. from the Technical University of Darmstadt in the Security in Information Technology (SIT) research group. Sebastian Paul specializes in the integration of Post-Quantum Cryptography into industrial applications and protocols. As Bosch project lead of the publicly funded project FLOQI, he strives to raise awareness of the quantum threat and to ensure Bosch is ready when powerful quantum computers arrive.

Melanie Anderson

Director, Cryptographic Security and Systems Development at the Canadian Centre for Cyber Security

Melanie Anderson is the Director of Cryptographic Security and Systems Development, part of the Canadian Centre for Cyber Security at the Communications Security Establishment. Melanie and her team are responsible for evaluating the security of cryptographic products, providing cryptographic advice and guidance, and modernizing the Government of Canada's classified infrastructure. Melanie is Co-Chair of the Women in Cyber and Intelligence (WICI) group at CSE and is passionate about promoting the well-being and interests of women, mentoring and encouraging girls and young women to pursue careers in STEM.

Since joining CSE in 2003, Melanie has served in several positions across the organization. She has held roles as a software developer, a technical trainer, and a Project Manager for IT systems used by Government of Canada clients. She spent four years based in the United States as a technical Liaison for CSE at the National Security Agency and has held leadership roles in Cyber Defence. Prior to assuming her current role, Melanie was the Manager of Cryptographic Systems Development.

Melanie holds a Bachelor of Computer Science from the University of New Brunswick and completed the Senior Executive Fellows Program through the Harvard Kennedy School in 2020.

Greg Wetmore

Moderator (Vice President Product Development at Entrust)

Greg Wetmore leads the global team responsible for building the products that makeup Entrust Strong Identities, Secure Payments, and Trusted Infrastructure solutions. Greg joined Entrust in 2000 and has held a number of leadership positions on the engineering team over that period. Greg is a key industry advisor and speaks regularly on topics like digital identity, IoT, and post-quantum security. Greg holds an Engineering degree from Queen’s University Kingston, Ontario, Canada.

Event · Toronto
Plenary

Paul van BrouwershavenChair PKI Consortium
Download slides
15 min

Summary and closing

Speakers

Event · Toronto
Networking

Rene Peralta

Scientist with the Computer Security Division at NIST

René Peralta received a B.A. in Economics from Hamilton College in 1978. In 1980 he received a M.S. in Mathematics from the State University of New York at Binghamton. In 1985 he received a Ph.D. in Computer Science from the University of California at Berkeley. For the next 20 years he held various positions in academia, mostly as a professor of cryptology, algorithmics and computational number theory. In 2005 he moved to NIST. He is currently a scientist with the Computer Security Division. Among the projects he is currently involved in are The NIST Randomness Beacon, Circuit Complexity, Privacy Enhancing Cryptography, and Post-Quantum Cryptography.

Mike Ounsworth

Software Security Architect at Entrust

Mike Ounsworth is a Software Security Architect at Entrust. His day-job is primarily application security architecture and penetration testing, with research projects in cryptography and post-quantum cryptography. He is leading discussion at IETF around post-quantum transition strategies for Public Key Infrastructure (PKI), including primary and secondary authorship on several Internet Drafts. He holds an M.Sc in Computer Science in robotics and artificial intelligence from McGill University, and an undergraduate degree in Computer Science with concentrations in mathematics and physics from Queen's University. Fun fact: he has a decade of experience coaching the high school level FIRST Robotics Competition.

Matthew Campagna

Chair CYBER QSC (Quantum Safe Cryptography and Security) at ETSI, Senior Principal Engineer at Amazon Web Services (AWS)

Matthew Campagna is a Sr. Principal Engineer & Cryptographer for Amazon Web Services Inc.’s. He oversees the design and analysis of cryptographic solutions across AWS. He is a member of the ETSI Security Algorithms Group Experts (SAGE), and Chairman of ETSI TC CYBER’s Quantum Safe Cryptography group. Previously he managed Certicom/BlackBerry’s Cryptography Research Group focused on the development of intellectual property and standardization for elliptic curve cryptography. He holds a doctorate in Mathematics from Wesleyan University.

Sebastian Paul

Post-Quantum Cryptography Security Research Engineer at Bosch

Sebastian Paul works as a research engineer in Industrial IoT Security at Bosch Research and is currently pursuing his Ph.D. from the Technical University of Darmstadt in the Security in Information Technology (SIT) research group. Sebastian Paul specializes in the integration of Post-Quantum Cryptography into industrial applications and protocols. As Bosch project lead of the publicly funded project FLOQI, he strives to raise awareness of the quantum threat and to ensure Bosch is ready when powerful quantum computers arrive.

Melanie Anderson

Director, Cryptographic Security and Systems Development at the Canadian Centre for Cyber Security

Melanie Anderson is the Director of Cryptographic Security and Systems Development, part of the Canadian Centre for Cyber Security at the Communications Security Establishment. Melanie and her team are responsible for evaluating the security of cryptographic products, providing cryptographic advice and guidance, and modernizing the Government of Canada's classified infrastructure. Melanie is Co-Chair of the Women in Cyber and Intelligence (WICI) group at CSE and is passionate about promoting the well-being and interests of women, mentoring and encouraging girls and young women to pursue careers in STEM.

Since joining CSE in 2003, Melanie has served in several positions across the organization. She has held roles as a software developer, a technical trainer, and a Project Manager for IT systems used by Government of Canada clients. She spent four years based in the United States as a technical Liaison for CSE at the National Security Agency and has held leadership roles in Cyber Defence. Prior to assuming her current role, Melanie was the Manager of Cryptographic Systems Development.

Melanie holds a Bachelor of Computer Science from the University of New Brunswick and completed the Senior Executive Fellows Program through the Harvard Kennedy School in 2020.

Jonathan Hammell

Senior Technical Advisor for Cryptographic Security, and Lead for Cryptographic Standards at the Canadian Centre for Cyber Security

Jonathan Hammell is the Senior Technical Advisor for Cryptographic Security and the Lead for Cryptographic Standards at the Canadian Centre for Cyber Security, part of the Communications Security Establishment. Jonathan participates in various international standards organizations, such as the Internet Engineering Task Force (IETF), Working Group 2 of Subcommittee 27 for the ISO/IEC Joint Technical Committee 1, and the Accredited Standards Committee X9. As Senior Technical Advisor, Jonathan is a subject matter expert in cryptography and provides advice and guidance within the Government of Canada and industry partners.

Jonathan started at CSE in 2004 in cryptographic research. He has a BMath from the University of Waterloo, a joint degree from the Department of Combinatorics & Optimization and the David R. Cheriton School of Computer Science. Jonathan received an MSc from the University of Calgary, where he was a member of the Centre for Information Security and Cryptography.

Chris Hickman

Moderator (Chief Security Officer at Keyfactor)

Chris Hickman is the chief security officer at Keyfactor. As a member of the senior management team, Chris is responsible for establishing & maintaining Keyfactor’s leadership position as a world-class, technical organization with deep security industry expertise. He leads client success initiatives and helps integrate the voice of the customer directly into Keyfactor’s platform and capability set.

Prior to joining Keyfactor, Chris was Director of Technical Services at Alacris, an Ottawa based smartcard and certificate management company, which was sold to Microsoft and is now part of the Microsoft Identity Manager product suite. Chris has worked on PKI projects for organizations and firms including NATO, both the U.S. and Canadian Departments of Defense, Fortune 100 banks and financial institutions, manufacturers, insurance companies, telecommunication providers and retailers. He continues to be a trusted resource for enterprises looking to leverage digital certificates within existing portfolios and new product development.

Greg Wetmore

Moderator (Vice President Product Development at Entrust)

Greg Wetmore leads the global team responsible for building the products that makeup Entrust Strong Identities, Secure Payments, and Trusted Infrastructure solutions. Greg joined Entrust in 2000 and has held a number of leadership positions on the engineering team over that period. Greg is a key industry advisor and speaks regularly on topics like digital identity, IoT, and post-quantum security. Greg holds an Engineering degree from Queen’s University Kingston, Ontario, Canada.

Speakers are prohibited to promote their products or services at this conference.

For more information on this conference, contact the PKI Consortium at feedback@pkic.org