November 7 and 8, 2023 - Amsterdam, The Netherlands | Online
Conference details
On November 7 and 8, 2023 the PKI Consortium hosted their second hybrid Post-Quantum Cryptography (PQC) Conference in Amsterdam, the Netherlands.
The conference welcomed business leaders, industry experts, and representatives from various public and private sectors interested in PQC, offering a diverse program featuring keynote speeches, breakout sessions, panel discussions, and workshops.
The conference was open for anyone interested in preparing for Post-Quantum Cryptography and not limited to the members of the PKI Consortium.
Are you interested in sponsoring the next Post-Quantum Cryptography Conference? For further details regarding sponsorship opportunities within the PKI Consortium and specifically for the PQC Conference, please reach out to us.
Agenda
The presentations can be downloaded by clicking on the session titles. The recordings are embedded below and can also be accessed via the PKI Consortium’s YouTube channel.
Event agenda
No locations found.
No locations found.
Event time · AmsterdamYour time
Agenda for 2023-11-07, times in Europe/Amsterdam
Time
Amsterdam
TimeAmsterdamYour time
Plenary
Breakout
CET
Registration 30 min
CET
Plenary
CET
Plenary
The U.S. National Institute of Standards and Technology (NIST) has been actively engaged in the solicitation, evaluation, and standardization of quantum-resistant public-key cryptographic algorithms. This year, in August, marked a significant milestone as NIST released a request for comments on the first three draft Federal Information Processing Standards (FIPS) for Post-Quantum Cryptography, following their successful completion of the initial four evaluation rounds.
In this presentation, Mr. Bill Newhouse and Dr. Dustin Moody from NIST will provide a comprehensive update, offering insights into the status of standardization, and the development of practices to ease migration from quantum-vulnerable public-key cryptography to quantum-resistant public-key cryptography.
Furthermore, in his Wednesday presentation, Dr. Dustin Moody will offer a more comprehensive examination of the standardization process for additional signature schemes. The first round of candidates was unveiled in July, and during his presentation, Dr. Moody will illuminate the various approaches taken and the feedback received since their initial announcement.
CET
Break 30 min
CET
PlenaryGovernance
Considering the rapidly evolving landscape in the realm of quantum computing and its potential implications for cybersecurity, this talk delves into the governance and regulatory framework surrounding Post-Quantum Cryptography in the United States.
The backdrop for this discussion is the enactment of HR 7535, known as the "Quantum Computing Cybersecurity Preparedness Act," on December 21, 2022, by President Joe Biden. Among its many facets, this legislation underscores the critical role of cryptography in ensuring the national security of the United States and the continued functionality of its economy.
Mr. Bill Newhouse, will provide valuable insights into how the United States is proactively preparing both its federal government and a spectrum of organizations, with a particular focus on those supporting critical infrastructure, for the era of Post-Quantum Cryptography. This presentation highlights the collaborative efforts of key entities, including the Cybersecurity and Infrastructure Security Agency (CISA), the National Security Agency (NSA), and the National Institute of Standards and Technology (NIST), in shaping the governance and regulatory landscape that will govern Post-Quantum Cryptography within the nation.
BreakoutAlgorithms
Lattices are underlying three out of the four new PQC standards of the NIST: Kyber, Dilithium and Falcon. But what is a lattice? What kind of computation does it involves? What are the challenges related to implementing such schemes?
This talk aims at giving an overview at the principles of lattice-based cryptography, covering both public key encryption and digital signature.
* This is a 40 minute session
CET
Plenary
The rapid development of quantum computing creates a new set of challenges for European cybersecurity. In recent years, the European Union has pursued an ambitious cybersecurity agenda but nevertheless, there are still questions about the current framework’s fitness to respond to these new challenges. Particularly worrisome is the advent of quantum attacks on encryption that risk rendering current cryptographic systems obsolete as they are in use. In July 2023, the European Policy Centre, with the support of Quantum Delta NL, published a discussion paper in which it analyses the criticality of preparing for quantum attacks on encryption by the creation of a new quantum cybersecurity agenda that improves technical and political coordination between EU member states and EU bodies and institutions for the transition to post-quantum cryptography and the future use of other quantum-safe technologies.
The European Policy Centre (EPC) is an independent, not-for-profit think tank dedicated to fostering European integration through analysis and debate, supporting and challenging decision-makers at all levels to make informed decisions based on evidence and analysis, and providing a platform for engaging partners, stakeholders and citizens in EU policy-making and in the debate about the future of Europe.
Breakout
* Continuation of the session about Lattice-based cryptography
CET
PlenaryGovernance
In the point of view of the Federal Office for Information Security in Germany (BSI), the question of "if" or "when" there will be quantum computers is no longer paramount. First post-quantum algorithms have been selected by NIST for standardisation and post-quantum cryptography will be used by default. Therefore, the migration to post-quantum cryptography should be pushed forward.
In this presentation, the BSI will expound upon its post-quantum cryptography policy and roadmap. We will emphasize the significance of the migration to post-quantum algorithms in safeguarding critical digital infrastructure, data, and communications. The presentation will elucidate the BSI’s approach, outlining the trajectory of post-quantum cryptography adoption as the default cryptographic standard.
BreakoutAlgorithms
Stateful hash based signatures provide thorough security and a high level of maturity.
However, their requirement of proper handling the state of the key raises concerns for certain use cases. In this talk we want to shade some light on the state handling challenge and how an ideal solution should look like to allow a smooth transition into the PQC era.
* This is a 40 minute session
CET
PlenaryGovernance
We will present the plans of ANSSI for transition to quantum-safe cryptography. The existence of the threat of quantum computing requires initiating this transition as soon as possible while ensuring that no security regression is possible. In this spirit, we will explain our three-step roadmap towards quantum-safe algorithms, while listing a few of the technical orientations which can already be determined.
Breakout
* Continuation of the session about Stateful Hash-Based Signature Schemes
CET
PlenaryGovernance
In this presentation, we will delve into the Dutch central governments’ approach to mitigate the risks of quantum technology. Quantum resilient Cryptography governance and regulation can help in mitigating these risks. Positioned at the forefront of quantum-resilient cryptography, a resource was crafted that extends beyond theoretical discussions, offering organizations concrete steps and invaluable advice. Because of our approach this will not only reach the government, but also IT-providers, and (vital) sectors in the Netherlands.
The commitment to fortifying global cybersecurity is exemplified by the Dutch PQC Migration Handbook. This indispensable resource equips organizations with pragmatic guidance on how to proactively mitigate the imminent threat posed by quantum computers to today’s cryptographic systems.
Join us to discover how the Dutch central government is diligently preparing for transition to quantum-resilient cryptographic solutions.
BreakoutAlgorithms
Last summer, several lattice-based schemes were chosen for standardization in NIST's effort to standardize post-quantum cryptography. The process of selecting candidates is however not over, with the focus now being primarily on code-based and multivariate schemes. In this talk I will discuss code-based cryptosystems, their basic design principles, security and challenges. I will focus on the candidates remaining in the NIST competition - the well-established KEM designs, but also the new emerging signature designs.
* This is a 40 minute session
CET
PlenaryGovernance
An engaging Q&A session on the global Governance and Regulation of Post-Quantum Cryptography. In this panel discussion, esteemed speakers from previous sessions will come together to answer your burning questions and provide a comprehensive overview of how various nations are addressing the impending quantum threat.
Discover how nations are navigating the intricate balance between innovation and security, and gain valuable insights into the diverse regulatory approaches that have emerged. Whether you're interested in the regulatory intricacies of a specific region or seeking a broader understanding of global efforts, this Q&A session promises to offer a wealth of knowledge and expert perspectives on the Governance and Regulation of Post-Quantum Cryptography worldwide. Don't miss this opportunity to engage with our panelists and explore the evolving landscape of quantum cybersecurity governance.
Breakout
* Continuation of the previous session
CET
Lunch 60 min
CET
Plenary
The whole industry is working on standardizing and implementing post-quantum cryptography, in order to mitigate the risk from future quantum computers. One question that is (and will probably remain) unanswered is “when are quantum computers going to be powerful enough to break cryptography?”. At the same time, there are regular press releases about new methods of breaking cryptography in the short term. These publications often cause panic and confusion which is counter-productive to the process of mitigating the quantum risk.
In this presentation we give a high-level description on how quantum algorithms work, and what still needs to happen before such algorithms can be implemented on real hardware. A simple model can be used to make sense of past and future announcements on the nearing moment of the cryptopocalypse (the point at which quantum computing becomes powerful enough to use Shor's algorithm to crack public-key cryptography). We discuss some of the examples from the past year.
BreakoutAlgorithms
The Leighton-Micali Signature (LMS) system is a stateful hash-based signature scheme whose security relies on properties of hash functions, standing at a comfortable security level against attackers in possession of quantum computers. As such, LMS has been standardized by NIST in SP-800-208 and is regarded as a suitable post-quantum signature algorithm in industry.
At its core, generating an LMS private key and obtaining its corresponding public key involves computing an exponential number of hashes and eventually representing large Merkle trees in memory. Moreover, signing with this key later requires recovering subsets of the hashes computed at key generation time. Sequential, high memory approaches to these operations achieve best signature speed, but make LMS key generation prohibitively slow and resource-intensive. While there are a number of hardware-oriented efforts to optimize LMS, some open-source software implementations do not take advantage of known memory trade-offs and opt for small parameter sets.
In this talk, we describe how to make LMS key generation procedure faster with SIMD hashing (by adapting the low-memory iterative algorithm of RFC8554) and recall algorithms that trade off signature speed against succinct representations of private keys in memory.
CET
PlenaryTechnical
Explore the differences between classic and post-quantum algorithms, comparing security levels, sizes and signature speeds. Hardware Security Modules are benchmarked to show real numbers.
Breakout
Post-quantum cryptography brought a lot of new aspects into cryptography. This includes but is not limited to the facts that schemes are build on new mathematical structures (or rather not widely used in cryptography thus far), security proofs rely on new techniques as well as a deep understanding of said new structures, and implementations have to include and protect new algorithms. In addition, mathematical proofs of security get generally more complex and implementations have to protect against more and more attack vectors. This makes the whole development prone to error. An approach to deal with the added complexity and add reliable security guarantees is the use of computers to machine-check security proofs and implementations. In this talk I will discuss the challenges, and present ongoing projects aiming at machine-checking security proofs and implementations of PQC in EasyCrypt, and Jasmine within the Formosa Crypto consortium.
CET
Plenary
Take a practical and insightful look at the recommendations available to organizations for transitioning to quantum-safe cryptography. We'll explore the primary sources of information that organization leaders should consider, effective messaging strategies to secure executive engagement, and the need to address preconceived notions. Furthermore, we will compare various recommendations to develop a comprehensive transition plan.
This talk aims to provide a balanced and informative perspective on the critical topic of quantum-safe cryptography adoption, offering valuable insights for organizations preparing for the post-quantum cybersecurity era.
Breakout
We recognize that there are many uncertainties on how organizations can overcome quantum-safe transition challenges. By dissecting quantum-safe transition into a series of stages, we use the concept of growth models which allows us to understand how organizations can be arranged and evolve over time toward quantum-safe. During the presentation, we share our research findings on different stages of quantum-safe transition and discuss how organizations across diverse sectors may be involved in these stages of transition.
CET
Break 30 min
CET
PlenaryIndustry
We are at a pivotal moment in cybersecurity. Browsers are preparing to (and may already have) enable(d) post-quantum encryption by default to counter the store-now-decrypt-later threat. What once was the subject of futuristic tech demos, will soon become the baseline expectation for security. Encryption is only half the story. Post-quantum certificates are much more challenging to deploy. In this talk, we will take measure of the current state, and the challenges that lay ahead for the public Web and its PKI.
BreakoutIndustry
The GSMA Post Quantum Telco Network Task Force has been dedicated to exploring the implications of Post-Quantum Cryptography (PQC) within the telecommunications space. Our mission extends beyond theoretical discussions, focusing on the tangible impacts on Network Operators and the broader telco supply chain.
The task force is a collaborative effort involving more than 50 companies representing operators, government and the wider Telco supply chain, including over 20 major network operators globally.
Earlier this year, we published a comprehensive Post Quantum Telco Network Impact Assessment Whitepaper. Building on this groundwork, we are now actively developing Quantum Risk Management guidelines tailored specifically to the telecommunications industry. Additionally, we are crafting best practice guidelines that delve into Telco use cases, with a particular emphasis on Public Key Infrastructure (PKI) implications.
In this presentation, we will provide insights into our findings and ongoing initiatives, shedding light on the practical steps being taken to ensure the resilience and security of Telco networks in the age of quantum computing. Our comprehensive approach ensures that the telecommunications industry is well-prepared to face the security challenges and opportunities presented by the quantum era.
CET
PlenaryIndustry
Quantum computing promises to build computers capable of solving complex problems much faster than today’s computers. This will benefit to many real-world applications such AI, machine learning, optimization problems, complex financial modelling etc. However, upcoming quantum computers will have a crypto-apocalyptic impact on cybersecurity, as they will allow breaking most public-key encryption algorithms in use today. Many applications rely on these encryption algorithms to ensure the security of our sensitive data. To survive in the quantum era, applications must migrate to quantum safe schemes, and preparing for this migration must already start now. In this talk, I will present our work, which was supported by the German Federal Ministry for Economic Affairs and Climate Action (BMWK) in the project Trade-EVs II (FKZ: 01MV20006A), and discuss our experience in integrating post-quantum crypto in enterprise applications. I’ll first describe quantum-safe TLS to secure the communication for PostgreSQL which is an open-source client-server database. Then I’ll continue with hash-based signature for digitally signing software packages with a focus on JarSigner which is an open-source for signing JAR files.
BreakoutTechnical
This session will outline the tactical steps for establishing and building or accessing a Post-Quantum Crypto (PQC) test environment. With the increasing volume of ecosystem options available and emerging, now is the time to identify and test against your priority enterprise applications and use cases. This session will identify and highlight some of the key challenges addressing PKI, Code Signing, IoT, and TLS use cases. To summarize, best practices and strategies being implemented in the real-world will be shared to provide attendees with concrete examples for leveraging a PQC test environment.
CET
Plenary
CET
Networking
Event time · AmsterdamYour time
Agenda for 2023-11-08, times in Europe/Amsterdam
Time
Amsterdam
TimeAmsterdamYour time
Plenary
Breakout
CET
Registration 30 min
CET
PlenaryHardware
Post-quantum crypto standards are coming: it doesn’t matter if you believe in quantum computers or not. What is the impact on the billions of embedded devices as used in automotive or IoT? Using some typical embedded use-cases we outline the challenges and show some recent solutions in this area.
BreakoutTechnical
DNS is an fundamental Internet service that translates human-readable names to IP addresses. It is secured using DNSSEC, an extension that provides authentication and integrity through the use of cryptographic signatures. The inherent limitations of the DNS protocol lead to requirements for the signing algoritms, specifically in terms of key size and signature size. This leads to challenges when deploying post-quantum algoritms. SIDN Labs is setting up a testbed in which developers, network researchers, and DNS operators can experiment with PQC algorithms and DNSSEC. Ultimately, the goal is to evaluate existing post-quantum cryptographic algorithms developers for use in DNS. In this presentation, we discuss some challenges and our progress on setting up a PQC-testbed for DNS.
CET
Plenary
In the fast-approaching post-quantum era, mobile ecosystems, including smartphones, grapple with the formidable task of integrating advanced cryptographic methods. The main challenge lies in the resource-intensive nature of post-quantum cryptography, requiring increased computational power and hardware acceleration. This urgency is driven by the rising threat of quantum computing, making a swift transition to post-quantum cryptography imperative for robust data protection. During the presentation, we will delve into a case study of implementing SPHINCS within the mobile ecosystem, demonstrating that leveraging existing hardware resources is a viable approach but we still need improvements in hardware.
BreakoutTechnical
Post-quantum signature algorithms are far from drop-in replacements for the WebPKI. In this technical talk we will first size up the current offering, and the schemes on the horizon. Then we will cover the current work-arounds being discussed to keep the WebPKI running: from smaller changes such as shipping intermediates with browsers, to more ambitious proposals such Merkle Tree Certificates.
CET
PlenaryHardware
In this session experts from several hardware vendors will debate about Post-Quantum Cryptography in hardware cryptographic modules, such as HSMs, tokens, smartcards, etc.
Breakout
This interactive session builds upon the presentation "Unlocking the Quantum-Resilient Cryptography Strategy for the Dutch central government" from Tuesday, November 7th. During this session, you can participate in an interactive discussion about the major challenges we face in preparing for the migration to quantum-resilient cryptography.
CET
Break 30 min
CET
PlenaryPKI
Convincing the board of the urgency and importance of PQC can be challenging, especially when there are competing priorities and limited resources.
One possible way to sell PQC to the board is by combining it with a zero trust journey, which is a holistic approach to cybersecurity that assumes no trust in any entity, whether internal or external, and verifies every request and transaction. A zero trust journey can help organizations achieve better security outcomes, such as reducing the attack surface, enhancing visibility and control, and improving compliance and resilience. By aligning PQC with a zero trust journey, organizations can demonstrate how PQC can support and enable their strategic goals, such as digital transformation, innovation, and customer satisfaction.
In this presentation, we will discuss how to leverage the benefits of a zero trust journey to make a compelling case for PQC. We will also share some best practices and tips on how to plan and execute a successful PQC transition that is aligned with a zero trust journey.
Breakout
Authentication is one of the most important security goals on the Internet and in the quantum era requires transitioning. Due to the complexity and scale of large systems, post-quantum migration time is often long. We’ll exemplify the challenges and timelines of authentication migrations using FIDO2, enabling the audience to assess the transition time of their own authentication systems.
CET
PlenaryPKI
The BSI is in control of the root certification authority of the public administration Public Key Infrastructure (PKI). This PKI is an essential element of the German government’s business processes at federal, state and municipal levels. For instance, subscribers of this PKI receive a signed certificate corresponding to a cryptographic key pair, which is used for identification, encryption, the creation of electronic signatures and other applications.
Currently, this PKI is based on RSA-4096. Hence, its security is threatened by the potential development of cryptographically relevant quantum computers. In order to address this threat, a full migration to a PKI based on quantum-safe cryptographic primitives has to be carried out.
Due to the variety of use-cases within this PKI, a number of technical requirements concerning performance, security and interoperability have to be taken into account in this migration. The goal of the talk is to discuss these requirements in detail and to present several concepts and possible solutions. In particular, we argue that a parallelized migration approach is essential in order to ensure constant availability of the system. Moreover, we discuss why standardized, stateful hash-based signature schemes such as XMSS or LMS are promising candidates for the root-CA-level in the PKI hierarchy.
Breakout
Symmetric encryption algorithms, such as AES256, are already considered to be post-quantum secure, meaning that they are resistant to attack by quantum computers. This fact is often overlooked in discussions about post-quantum cryptography, but it is important to remember that symmetric encryption can be used to protect data even if quantum computers become powerful enough to break asymmetric encryption algorithms. In this presentation we will explore how symmetric encryption algorithms can be used to protect existing asymmetric implementations.
CET
PlenaryPKI
In this session you will get an overview of the impact of PQC to PCI Standards (such as ANSI X9, and ISO TC68 standards applicable to PKI in the financial services/payment card industry) and the steps taken to prepare them for a world with Post-Quantum Cryptography.
Breakout
Symmetric cryptographic primitives such as AES are simple, efficient and secure – even in a post-quantum world – which makes them interesting for a variation of purposes where we need secure encryption, but with strong constraints to computing power and storage. Traditionally a downside of these algorithms has been their static, long-term keys, making it hard to achieve security properties such as forward secrecy without negotiating a new key every time.
In this talk we will look at a number of protocols that achieve symmetric authenticated key exchange: we propose new methods of key evolution that guarantee full forward secrecy, while also taking care of key synchronization between the involved parties. This makes them very suitable for IoT devices, or other settings where efficient post-quantum cryptography is required.
CET
PlenaryPKI
In the evolving landscape of cybersecurity, the emergence of quantum computing poses a substantial threat to the established foundations of trust services, particularly in the context of Qualified Trust Services governed by the eIDAS regulation. Join us for an insightful presentation by the Dutch Authority for Digital Infrastructure, the supervisory authority for Trust Service Providers in the Netherlands.
In this session, we will explore the intricate interplay between Post-Quantum Cryptography and Trust Services, shedding light on the unique challenges posed by the quantum threat. Discover how the eIDAS regulation, which governs Qualified Trust Services, faces significant implications in the quantum era. Gain valuable insights into the proactive strategies and regulatory considerations essential for maintaining trust and security in a quantum-affected landscape.
Join us to navigate the crucial intersection of Post-Quantum Cryptography and Trust Services, as we delve into the Dutch perspective and the broader implications for the global trust ecosystem.
Breakout
Blockchain technology was created to make the storage of data or transactions more secure. It has revolutionized the way we process transactions with improved security, efficiency, and transparency. PKI is the security backbone of blockchain technology to ensure the integrity and trustworthiness of a blockchain network. In the world of cryptocurrencies, private keys are used by the payer to sign and initiate a transaction. It is also used by a validator to sign and assure the world that a transaction has been validated. RSA and ECC are the most commonly used algorithms in the current PKI ecosystem. It has been proven for over 40 years that the private key cannot be reverse engineered back from its public key even using the most powerful super computer today. However, the rapid development of quantum computing is posing security threats to PKI because its excessive power can derive the private key back from its public key. This breaks the backbone of blockchain security because transactions cannot be trusted anymore. In this session we will cover quantum threats to blockchain. We will also demonstrate some practical implementations of PQC that have been performed to convert an existing blockchain network to become quantum-safe.
CET
Lunch 60 min
CET
PlenaryAlgorithms
In this presentation, Dr. Dustin Moody, a distinguished expert from the U.S. National Institute of Standards and Technology (NIST), will take you on a deep dive into NIST's standardization efforts for additional signature schemes.
With the first round of additional signature scheme candidates announced in July, Dr. Moody will shed light on various approaches, including Code-based, Isogeny, Lattice-based, Multivariate, and others. He will also share insights into the feedback received since their initial announcement.
This session promises to provide valuable insights, expert analysis, and a comprehensive understanding of NIST's ongoing mission to strengthen our digital future against the quantum threat.
BreakoutTechnical
Now that the quantum era is upon us, the question arises: How do you ensure your organisation is “quantum-ready”? With some many candidates and standards to choose from, which algorithms are the right fit for your applications? Join this informative session to explore the development of a comprehensive decision tree by experts from various organizations, including dcypher, TNO, CWI, NXP, Compumatica, Technolution, and Fox-IT.
During this session, we’ll delve into the underlying motivations, thought processes and important takeaways regarding the creation of this decision tree. Gain insights into how to navigate the complexities of post-quantum cryptography and discover a practical tool designed to simplify the decision-making process for quantum-ready organisations.
CET
Plenary
Recent advances in quantum computing, factoring algorithms, and hybrid compute approaches toward development of cryptographically relevant quantum computers have made the need to proactively defend our enterprises from this threat an immediate requirement.
Today there are a variety of approaches toward mitigating this risk that are being considered, developed, and deployed around the world. There are leading sectors and trailing sectors in terms of adoption, and there are different algorithms and architectures being relied on in various parts of the world. The constant message from government and industry is to 'Start Now' and while that is good, we need to consider what's next.
With the variety of approaches and levels of maturity, there is a global move to agree upon a common maturity index that would support a common vocabulary, improve quantum defenses, consistently measure progress, share knowledge, and prioritize actions and budgets.
These maturity index levels would cover initial risk and strategy, discovery and inventory, crypto ecosystem, architectures, testing, trials, roll outs, and a steady state managed operation. Included in each of these levels would be reference to approaches such as CBOMs, crypto agility, quantum key distribution, algorithm selection, and more.
This talk will provide an introduction to the maturity index concept for quantum, an update on what else is happening around the world, and provide an invitation to participate in both the definitions, adoptions, and benefits of a globally accepted post quantum maturity index.
BreakoutTechnical
Within the HAPKIDO project we aim to develop a roadmap for hybrid Quantum-Safe Public-Key Infrastructures. Next to TLS many other digital services rely on PKIs for their security; one important example is the electronic signatures on documents, which are standardized in PAdES and have legal value in many countries. One of the services which provides PAdES support is the european Digital Signing Service (DSS). To support the transition to quantum-safe PKIs we have created an extension for DSS, which allows users to use a hybrid certificate to sign and validate a PDF-document. In this presentation we will show our work and explain some of the decisions that we made in the process.
CET
Plenary
After TCP/IP, X.509 is probably the most widely deployed technology in modern networking. Use cases of X.509 from the incredibly mainstream to the incredibly niche are as diverse as the Internet itself. This talk will classify different types of PKI deployments according to the types of challenges that they will face during PQ transition including discoverability of the crypto in use (cryptographic bill of materials CBOM), hardware lock-in, which, depending where it is in your network, leads to different types of migration challenges, and the security properties needing during the migration. We will then survey a suite of crypto discovery and transition tools discussing which migration types and security properties they address.
BreakoutTechnical
While it's clear that a coming CRQC is a threat to encrypted data already now, its threat potential on today's signature applications seems not well understood. We will show PKI based use cases where we believe it's already an issue and needs to be addressed. Also we present hybrid mechanisms that can resolve the issue and discuss their pros and cons.
CET
Break 30 min
CET
Plenary
As we wrap up this two-day conference, our experts will come together to address your queries, offer further insights, and engage in a meaningful exchange of ideas. Whether you seek to delve deeper into specific topics discussed during the conference or have broader inquiries about the quantum landscape, this session is your opportunity to connect with the experts who have shared their wisdom and expertise over the past two days.
Join us for a collaborative and enlightening Q&A session that tries to provide clarity, foster discussion, and leave you with a comprehensive understanding of the quantum computing and cryptography landscape. Don't miss this final chance to engage with our speakers and conference chairs in a vibrant exchange of knowledge.
CET
Plenary
As our two-day conference journey draws to a close, join us for a captivating recap session where our chairs will guide you through a comprehensive review of the insights, revelations, and pivotal moments that have unfolded throughout this event.
In this engaging retrospective, we will revisit the highlights, key takeaways, and thought-provoking discussions that have enriched our understanding of the quantum landscape. Our conference chairs will synthesize the wealth of knowledge shared by our esteemed presenters, encapsulating the essence of their presentations and the responses to your insightful questions.
This recap promises to be a valuable opportunity to distill the essence of this conference, offering a holistic perspective on the critical issues, emerging trends, and future directions in the field of quantum computing and cryptography.
CET
Plenary
CET
Networking
This conference would not be possible without the organizational support of the Post-Quantum Cryptography Working Group and in particular the following organizations:
For more information on this conference, contact the PKI Consortium at feedback@pkic.org
{"/api/v1/members/applications/form":{"categories":[{"code":"A","label":"Certification Authorities and Trust Service Providers","description":"Included on a trust list maintained by the PKI Consortium.","displayOrder":10,"isIndividual":false,"requiresUniversityEmail":false,"isVoting":true,"active":true,"workflowVersionId":"00000000000040008000000000000084","revision":0,"updatedAt":"2026-09-29T15:11:09.977Z","fee":null,"eligibleWorkingGroupIds":["20000000-0000-4000-8000-000000000003","20000000-0000-4000-8000-000000000004","20000000-0000-4000-8000-000000000005","20000000-0000-4000-8000-000000000006","20000000-0000-4000-8000-000000000007","20000000-0000-4000-8000-000000000008"]},{"code":"B","label":"Trust list supervisory entities","description":"Entities that supervise and maintain a list contained in a PKI Consortium trust list.","displayOrder":20,"isIndividual":false,"requiresUniversityEmail":false,"isVoting":true,"active":true,"workflowVersionId":"00000000000040008000000000000084","revision":0,"updatedAt":"2026-09-29T15:11:09.977Z","fee":null,"eligibleWorkingGroupIds":["20000000-0000-4000-8000-000000000003","20000000-0000-4000-8000-000000000004","20000000-0000-4000-8000-000000000005","20000000-0000-4000-8000-000000000006","20000000-0000-4000-8000-000000000008"]},{"code":"C","label":"Industry regulators and supervisory bodies","description":null,"displayOrder":30,"isIndividual":false,"requiresUniversityEmail":false,"isVoting":true,"active":true,"workflowVersionId":"00000000000040008000000000000084","revision":0,"updatedAt":"2026-09-29T15:11:09.977Z","fee":null,"eligibleWorkingGroupIds":["20000000-0000-4000-8000-000000000003","20000000-0000-4000-8000-000000000004","20000000-0000-4000-8000-000000000005","20000000-0000-4000-8000-000000000006","20000000-0000-4000-8000-000000000008"]},{"code":"D","label":"Conformity assessment bodies and auditors","description":null,"displayOrder":40,"isIndividual":false,"requiresUniversityEmail":false,"isVoting":true,"active":true,"workflowVersionId":"00000000000040008000000000000084","revision":0,"updatedAt":"2026-09-29T15:11:09.977Z","fee":null,"eligibleWorkingGroupIds":["20000000-0000-4000-8000-000000000003","20000000-0000-4000-8000-000000000004","20000000-0000-4000-8000-000000000005","20000000-0000-4000-8000-000000000006","20000000-0000-4000-8000-000000000008"]},{"code":"E","label":"Standards developing organizations","description":null,"displayOrder":50,"isIndividual":false,"requiresUniversityEmail":false,"isVoting":true,"active":true,"workflowVersionId":"00000000000040008000000000000084","revision":0,"updatedAt":"2026-09-29T15:11:09.977Z","fee":null,"eligibleWorkingGroupIds":["20000000-0000-4000-8000-000000000003","20000000-0000-4000-8000-000000000004","20000000-0000-4000-8000-000000000005","20000000-0000-4000-8000-000000000006","20000000-0000-4000-8000-000000000008"]},{"code":"F","label":"PKI or cryptographic software and device providers","description":null,"displayOrder":60,"isIndividual":false,"requiresUniversityEmail":false,"isVoting":true,"active":true,"workflowVersionId":"00000000000040008000000000000084","revision":0,"updatedAt":"2026-09-29T15:11:09.977Z","fee":null,"eligibleWorkingGroupIds":["20000000-0000-4000-8000-000000000003","20000000-0000-4000-8000-000000000004","20000000-0000-4000-8000-000000000005","20000000-0000-4000-8000-000000000006","20000000-0000-4000-8000-000000000008"]},{"code":"G","label":"Relying-party software providers","description":null,"displayOrder":70,"isIndividual":false,"requiresUniversityEmail":false,"isVoting":true,"active":true,"workflowVersionId":"00000000000040008000000000000084","revision":0,"updatedAt":"2026-09-29T15:11:09.977Z","fee":null,"eligibleWorkingGroupIds":["20000000-0000-4000-8000-000000000003","20000000-0000-4000-8000-000000000004","20000000-0000-4000-8000-000000000005","20000000-0000-4000-8000-000000000006","20000000-0000-4000-8000-000000000008"]},{"code":"H1","label":"Government entities with a general PKI or cryptography interest","description":"For entities that do not fall under category C.","displayOrder":80,"isIndividual":false,"requiresUniversityEmail":false,"isVoting":false,"active":true,"workflowVersionId":"00000000000040008000000000000084","revision":0,"updatedAt":"2026-09-29T15:11:09.977Z","fee":null,"eligibleWorkingGroupIds":["20000000-0000-4000-8000-000000000003","20000000-0000-4000-8000-000000000004","20000000-0000-4000-8000-000000000005","20000000-0000-4000-8000-000000000006","20000000-0000-4000-8000-000000000008"]},{"code":"H2","label":"PKI or cryptography consultancy organizations","description":null,"displayOrder":90,"isIndividual":false,"requiresUniversityEmail":false,"isVoting":false,"active":true,"workflowVersionId":"00000000000040008000000000000084","revision":0,"updatedAt":"2026-09-29T15:11:09.977Z","fee":null,"eligibleWorkingGroupIds":["20000000-0000-4000-8000-000000000003","20000000-0000-4000-8000-000000000004","20000000-0000-4000-8000-000000000005","20000000-0000-4000-8000-000000000006","20000000-0000-4000-8000-000000000008"]},{"code":"H3","label":"PKI or cryptography research organizations","description":null,"displayOrder":100,"isIndividual":false,"requiresUniversityEmail":false,"isVoting":false,"active":true,"workflowVersionId":"00000000000040008000000000000084","revision":0,"updatedAt":"2026-09-29T15:11:09.977Z","fee":null,"eligibleWorkingGroupIds":["20000000-0000-4000-8000-000000000003","20000000-0000-4000-8000-000000000004","20000000-0000-4000-8000-000000000005","20000000-0000-4000-8000-000000000006","20000000-0000-4000-8000-000000000008"]},{"code":"H4","label":"Universities with PKI or cryptography programs","description":null,"displayOrder":110,"isIndividual":false,"requiresUniversityEmail":false,"isVoting":false,"active":true,"workflowVersionId":"00000000000040008000000000000084","revision":0,"updatedAt":"2026-09-29T15:11:09.977Z","fee":null,"eligibleWorkingGroupIds":["20000000-0000-4000-8000-000000000003","20000000-0000-4000-8000-000000000004","20000000-0000-4000-8000-000000000005","20000000-0000-4000-8000-000000000006","20000000-0000-4000-8000-000000000008"]},{"code":"H5","label":"PhD students researching PKI or cryptography","description":"Requires an institutional or university email address.","displayOrder":120,"isIndividual":true,"requiresUniversityEmail":true,"isVoting":false,"active":true,"workflowVersionId":"00000000000040008000000000000084","revision":0,"updatedAt":"2026-09-29T15:11:09.977Z","fee":null,"eligibleWorkingGroupIds":["20000000-0000-4000-8000-000000000003","20000000-0000-4000-8000-000000000004","20000000-0000-4000-8000-000000000005","20000000-0000-4000-8000-000000000006","20000000-0000-4000-8000-000000000008"]},{"code":"H6","label":"Unaffiliated independent PKI or cryptography consultants","description":"For qualified consultants who are not affiliated with any organization.","displayOrder":130,"isIndividual":true,"requiresUniversityEmail":false,"isVoting":false,"active":true,"workflowVersionId":"00000000000040008000000000000084","revision":0,"updatedAt":"2026-09-29T15:11:09.977Z","fee":null,"eligibleWorkingGroupIds":["20000000-0000-4000-8000-000000000003","20000000-0000-4000-8000-000000000004","20000000-0000-4000-8000-000000000005","20000000-0000-4000-8000-000000000006","20000000-0000-4000-8000-000000000008"]},{"code":"H7","label":"Unaffiliated independent PKI or cryptography researchers","description":"For qualified researchers who are not affiliated with any organization.","displayOrder":140,"isIndividual":true,"requiresUniversityEmail":false,"isVoting":false,"active":true,"workflowVersionId":"00000000000040008000000000000084","revision":0,"updatedAt":"2026-09-29T15:11:09.977Z","fee":null,"eligibleWorkingGroupIds":["20000000-0000-4000-8000-000000000003","20000000-0000-4000-8000-000000000004","20000000-0000-4000-8000-000000000005","20000000-0000-4000-8000-000000000006","20000000-0000-4000-8000-000000000008"]},{"code":"H8","label":"Private PKI operators","description":"Organizations operating a private PKI governed by formal policies and practices.","displayOrder":150,"isIndividual":false,"requiresUniversityEmail":false,"isVoting":false,"active":true,"workflowVersionId":"00000000000040008000000000000084","revision":0,"updatedAt":"2026-09-29T15:11:09.977Z","fee":null,"eligibleWorkingGroupIds":["20000000-0000-4000-8000-000000000003","20000000-0000-4000-8000-000000000004","20000000-0000-4000-8000-000000000005","20000000-0000-4000-8000-000000000006","20000000-0000-4000-8000-000000000008"]}],"form":{"id":"14449758bc83687fa53ba7a044717144","title":"PKI Consortium Membership Application","description":"Application form for prospective PKI Consortium members.","fields":[{"id":"bfba8e98f8dbb75a64c09321f7c2715e","key":"job_title","label":"Role / Job Title","fieldType":"text","required":true,"options":[],"optionSource":null,"validation":{},"sortOrder":10,"updatedAt":"2026-09-29T15:11:09.977Z","archivedAt":null},{"id":"8eb31c73f25d9473b4a0c3c1543a2e19","key":"linkedin","label":"Professional profile (e.g., LinkedIn)","fieldType":"url","required":false,"options":[],"optionSource":null,"validation":{"placeholder":"https://www.linkedin.com/in/your-name or your employer's page about you"},"sortOrder":20,"updatedAt":"2026-09-29T15:11:09.977Z","archivedAt":null},{"id":"ba52044954701ba8eb4d533324a5af2b","key":"organization_website","label":"Organization Website","fieldType":"url","required":false,"options":[],"optionSource":null,"validation":{},"sortOrder":30,"updatedAt":"2026-09-29T15:11:09.977Z","archivedAt":null},{"id":"6bb2647786608d79d8a4b189403cce5f","key":"about_yourself","label":"About Yourself","fieldType":"textarea","required":false,"options":[],"optionSource":null,"validation":{},"sortOrder":40,"updatedAt":"2026-09-29T15:11:09.977Z","archivedAt":null},{"id":"426cfe8c2d77ed4d2ea98a629f722802","key":"about_organization","label":"About Your Organization","fieldType":"textarea","required":false,"options":[],"optionSource":null,"validation":{},"sortOrder":50,"updatedAt":"2026-09-29T15:11:09.977Z","archivedAt":null},{"id":"9bd75aaadca3e146fc9bf3c585cd2f0c","key":"reason","label":"Why do you want to join PKI Consortium?","fieldType":"textarea","required":true,"options":[],"optionSource":null,"validation":{},"sortOrder":60,"updatedAt":"2026-09-29T15:11:09.977Z","archivedAt":null},{"id":"d852debb2095ea681dbd9fe3ef4ab5e9","key":"working_groups","label":"Working Groups of Interest","fieldType":"multi_select","required":false,"options":[{"value":"20000000-0000-4000-8000-000000000007","label":"CA Working Group","active":true},{"value":"20000000-0000-4000-8000-000000000008","label":"CBOM Profiles Working Group","active":true},{"value":"20000000-0000-4000-8000-000000000004","label":"Cryptographic Module Working Group","active":true},{"value":"20000000-0000-4000-8000-000000000005","label":"PKI Maturity Model Working Group","active":true},{"value":"20000000-0000-4000-8000-000000000003","label":"Post-Quantum Cryptography Working Group","active":true},{"value":"20000000-0000-4000-8000-000000000006","label":"Training and Certification Working Group","active":true}],"optionSource":"active_working_groups","validation":{"uiWidget":"checkboxes"},"sortOrder":70,"updatedAt":"2026-09-29T15:11:09.977Z","archivedAt":null},{"id":"3106cfa67906e2c6e11e18d09c412289","key":"contribution_type","label":"How do you expect to participate?","fieldType":"select","required":false,"options":[{"value":"active","label":"Actively contribute to the consortium and its mission","active":true},{"value":"observer","label":"Observe without actively contributing","active":true}],"optionSource":null,"validation":{"helpText":"Members are not required to attend every meeting or participate in every activity."},"sortOrder":80,"updatedAt":"2026-09-29T15:11:09.977Z","archivedAt":null},{"id":"0e9be883768b990098f157e45e06b6de","key":"wants_to_present","label":"I would like to introduce myself, my organization, and our participation goals to the consortium","fieldType":"boolean","required":false,"options":[],"optionSource":null,"validation":{},"sortOrder":90,"updatedAt":"2026-09-29T15:11:09.977Z","archivedAt":null},{"id":"50a061744dc94ee9bff527ff5e3d4147","key":"interested_in_sponsoring","label":"I would like to discuss sponsoring or donating to the consortium","fieldType":"boolean","required":false,"options":[],"optionSource":null,"validation":{"helpText":"Membership has no fee; sponsorships and donations support the consortium."},"sortOrder":100,"updatedAt":"2026-09-29T15:11:09.977Z","archivedAt":null},{"id":"acfd0323186b01e715ff79ac75284bf4","key":"agrees_bylaws","label":"I and my organization (if applicable) agree to follow the PKI Consortium Bylaws","fieldType":"boolean","required":true,"options":[],"optionSource":null,"validation":{"referenceLink":{"href":"/bylaws/","label":"Read the PKI Consortium Bylaws"},"requireTrue":true},"sortOrder":110,"updatedAt":"2026-09-29T15:11:09.977Z","archivedAt":null},{"id":"3a3ed756be4b7868f4414eb45246bb78","key":"agrees_code_of_conduct","label":"I and my organization (if applicable) agree to follow the PKI Consortium Code of Conduct","fieldType":"boolean","required":true,"options":[],"optionSource":null,"validation":{"referenceLink":{"href":"/code-of-conduct/","label":"Read the PKI Consortium Code of Conduct"},"requireTrue":true},"sortOrder":120,"updatedAt":"2026-09-29T15:11:09.977Z","archivedAt":null},{"id":"ddc89d688610999892ee862677aa8253","key":"agrees_ipr_policy","label":"I and my organization (if applicable) agree to follow the PKI Consortium IPR Policy","fieldType":"boolean","required":true,"options":[],"optionSource":null,"validation":{"referenceLink":{"href":"/ipr/","label":"Read the PKI Consortium IPR Policy"},"requireTrue":true},"sortOrder":130,"updatedAt":"2026-09-29T15:11:09.977Z","archivedAt":null},{"id":"c8849a91e5f122835d8b8a0f5e64183e","key":"warranted_authority","label":"I represent and warrant that I have authority to submit this application and agree to be bound by these terms","fieldType":"boolean","required":true,"options":[],"optionSource":null,"validation":{"requireTrue":true},"sortOrder":140,"updatedAt":"2026-09-29T15:11:09.977Z","archivedAt":null}],"key":"membership-application"}},"/api/v1/sponsors/tiers?sponsorType=consortium":{"sponsorType":"consortium","tiers":[{"tier":"Bronze"},{"tier":"Silver"},{"tier":"Gold"},{"tier":"Platinum"},{"tier":"Titanium"},{"tier":"Diamond"}],"visibility":"public"},"/api/v1/sponsors/tiers?sponsorType=event":{"sponsorType":"event","tiers":[{"tier":"Ambassador"},{"tier":"Innovator"},{"tier":"Inspirator"},{"tier":"Leader"}],"visibility":"public"}}
