BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//PKI Consortium//Conference Agenda//EN
CALSCALE:GREGORIAN
METHOD:PUBLISH
X-WR-CALNAME:Post-Quantum Cryptography Conference
X-WR-TIMEZONE:Europe/Amsterdam
BEGIN:VEVENT
UID:agenda-72a44527-93c1-45e3-bb66-23daed245038@ics.pkic.org
SEQUENCE:1
DTSTAMP:20261025T183315Z
DTSTART:20261203T133000Z
DTEND:20261203T140000Z
STATUS:CONFIRMED
SUMMARY:The Layer Nobody Monitors: Entropy Failures in PKI\, from Factorabl
 e Keys to Silent Hardware Faults
DESCRIPTION:The randomness PKI assumes is there fails silently — certific
 ates look valid\, keys look fine\, and nothing alerts until someone goes lo
 oking.\nThis session walks four real entropy failures and the thread connec
 ting them. The 2012 shared-factor research (Heninger et al.\; Lenstra et al
 .) found a meaningful fraction of live TLS and SSH keys factorable by simpl
 e GCD\, because devices generated keys at first boot before the entropy poo
 l filled. The Debian OpenSSL collapse reduced a keyspace to a few thousand 
 possibilities. Taiwan's national smartcards produced factorable keys despit
 e FIPS and Common Criteria certification. And AMD's 2025 Zen 5 RDSEED fault
  (CVE-2025-62626) returned zeros while signaling success — a hardware sou
 rce failing silently on current CPUs.\nThe lesson isn't hardware versus sof
 tware. It's runtime health-testing\, validation that exercises the noise so
 urce\, and no single point of dependence — as PQC and short cert lifetime
 s multiply randomness demand.\n\nSpeakers: Douglass Hill
LOCATION:Room E (10)
CATEGORIES:Room E (10)
URL:https://pkic.org/events/2026/pqc-conference-amsterdam-nl/agenda/
END:VEVENT
END:VCALENDAR