BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//PKI Consortium//Conference Agenda//EN
CALSCALE:GREGORIAN
METHOD:PUBLISH
X-WR-CALNAME:Post-Quantum Cryptography Conference
X-WR-TIMEZONE:Europe/Amsterdam
BEGIN:VEVENT
UID:agenda-8f322cea-216e-4ca1-8fac-f43ecbdab7dc@ics.pkic.org
SEQUENCE:0
DTSTAMP:20261023T000842Z
DTSTART:20261203T143000Z
DTEND:20261203T151500Z
STATUS:CONFIRMED
SUMMARY:Making ML-DSA Work for Machine-to-Machine mTLS: Field Notes from an
  End-to-End Post-Quantum PKI
DESCRIPTION:Most post-quantum migration programs have done the easy part - 
 hybrid key exchange - and then hit a wall at authentication. Getting ML-DSA
  certificates working for real machine-to-machine identity\, with a PKI tha
 t can issue\, renew\, and revoke them\, is where timelines slip: the certif
 icates are large\, lifecycle tooling is immature\, and almost no one has ru
 n mutual TLS where both sides authenticate with post-quantum credentials.\n
 \nThis is a practitioner field report from an organization that has built a
 nd now operates exactly that - an end-to-end post-quantum machine-identity 
 stack: an ML-DSA-65 CA hierarchy\, post-quantum-only mutual TLS enforced at
  the edge\, automated enrollment and short-lived issuance\, and OCSP/CRL re
 vocation that takes effect in real time. We share what it actually took\, s
 o teams planning the authentication phase of their own migration know what 
 they are walking into.\n\nAttendees leave with: a realistic picture of the 
 authentication half of PQC migration - what is production-ready today and w
 hat is still blocked on standards (IETF LAMPS composite certificates\, post
 -quantum identity tokens)\; where ML-DSA certificate and signature sizes ac
 tually cause problems - handshake payloads\, buffers\, issuance throughput 
 - measured against classical TLS 1.3\; how to tell a genuinely post-quantum
 -only deployment from a post-quantum key exchange sitting in front of class
 ical certificates\, and how to verify it\; a certificate-lifecycle model fo
 r machine identity - constrained enrollment\, automated issuance\, real-tim
 e revocation - and the operational decisions that matter\; and a practical 
 set of questions to put to your CAs\, HSM vendors\, and platform teams befo
 re committing to an approach.\n\nThe session is for PKI\, platform\, and se
 curity teams responsible for the machine-identity and mTLS portion of their
  post-quantum migration. It assumes working knowledge of TLS 1.3 and certif
 icate PKI\; no prior post-quantum background is required.\n\n\nSpeakers: Ru
 men Doynov\, Alexander Shestakov
LOCATION:Blue hall
CATEGORIES:Blue hall
URL:https://pkic.org/events/2026/pqc-conference-amsterdam-nl/agenda/
END:VEVENT
END:VCALENDAR