BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//PKI Consortium//Conference Agenda//EN
CALSCALE:GREGORIAN
METHOD:PUBLISH
X-WR-CALNAME:Post-Quantum Cryptography Conference
X-WR-TIMEZONE:Europe/Amsterdam
BEGIN:VEVENT
UID:agenda-b5362695-1cab-49ba-a786-aad728425c95@ics.pkic.org
SEQUENCE:0
DTSTAMP:20261023T000842Z
DTSTART:20261203T133000Z
DTEND:20261203T140000Z
STATUS:CONFIRMED
SUMMARY:Practical Implementation of Hardware-Separated Composite Signatures
  for Large-Scale PKI During the PQC Migration Period
DESCRIPTION:The transition to Post-Quantum Cryptography (PQC) presents a si
 gnificant challenge for organizations operating large-scale Public Key Infr
 astructures (PKIs). While PQC standards are becoming available\, replacing 
 vast numbers of deployed hardware tokens such as smart cards remains operat
 ionally expensive and time-consuming.\n\nIn this session\, we present our i
 mplementation experience with the IETF LAMPS draft "Composite ML-DSA for Us
 e in X.509 Public Key Infrastructure" in a hardware-separated environment f
 or large-scale PKI migration. The approach combines existing smart cards ho
 lding traditional signature keys (e.g.\, RSA) with server-side Hardware Sec
 urity Modules (HSMs) providing PQC signature capabilities (e.g.\, ML-DSA)\,
  enabling organizations to begin introducing PQC without requiring immediat
 e replacement of end-user hardware. We discuss three representative risks o
 bserved during implementation and evaluation: cross-protocol signature comp
 osition\, unintended reuse of composite-signature keys for single-algorithm
  signatures\, and device impersonation across separated trust domains\, and
  present a device-binding architecture that addresses them while maintainin
 g compatibility with the IETF LAMPS composite signature framework.\n\nWe al
 so evaluate the potential operational impact of this approach using a large
 -scale PKI migration model involving tens of millions of certificates\, and
  share architectural considerations\, implementation experiences\, and vali
 dation results from a prototype built using cloud-based HSM services and co
 mmercially available PKI smart cards.\n\n\nSpeakers: Akane Suzuki\, Hiroki 
 Uchiyama
LOCATION:Blue hall
CATEGORIES:Blue hall
URL:https://pkic.org/events/2026/pqc-conference-amsterdam-nl/agenda/
END:VEVENT
END:VCALENDAR