BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//PKI Consortium//Conference Agenda//EN
CALSCALE:GREGORIAN
METHOD:PUBLISH
X-WR-CALNAME:Post-Quantum Cryptography Conference
X-WR-TIMEZONE:Europe/Amsterdam
BEGIN:VEVENT
UID:agenda-b7e1ccbc-14b5-40bd-85bf-0c509ceb28b9@ics.pkic.org
SEQUENCE:0
DTSTAMP:20261023T000842Z
DTSTART:20261202T130000Z
DTEND:20261202T132500Z
STATUS:CONFIRMED
SUMMARY:Trust Now\, Forge Later: A Live Exposure Demonstration
DESCRIPTION:Current post-quantum planning is dominated by one clock\, harve
 st-now-decrypt-later (HNDL)\, but for signature infrastructure the binding 
 exposure is trust-now-forge-later (TNFL). Once a cryptographically relevant
  quantum computer arrives\, long-validity signing anchors become forgeable\
 , leading to loss of trust. Using the global passport and national identity
  infrastructure as an empirical model for TNFL exposure analysis and remedi
 ation prioritisation\, this session shows in a live demonstration exactly h
 ow trust could collapse if urgent\, globally coordinated action is not put 
 in place.\n\nThe dataset is the ICAO Master List: the self-signed country s
 igning certificate authority (CSCA) roots that anchor verification of ICAO 
 9303 compliant machine-readable travel documents (MRTDs) worldwide\, publis
 hed as a Cryptographic Message Syntax (CMS) structure and cross-checkable a
 gainst the German Federal Office for Information Security (BSI) list. Both 
 are public and neither requires Public Key Directory (PKD) participation at
  the CSCA layer.\n\nThe demonstration walks through the pipeline end to end
 \, using open tooling only so that anyone can reproduce it: hash and record
  provenance of the source file\; unwrap the CMS encapsulated content and sp
 lit the CscaMasterList into per-certificate DER with a standard-library wal
 ker\; extract algorithm\, key size and validity fields\; then derive three 
 outputs: installed base by algorithm and key-strength band\, the share of a
 nchors whose notAfter extends past a set of CRQC scenario years\, and a fin
 gerprint-level reconciliation between the two source lists. Every figure re
 generates from the script\; none is asserted by hand. Findings are reported
  in aggregate\, without singling out individual issuers.\n\nThe reusable co
 rollary for your own cryptographic estate is to treat the certificate as th
 e asset-register entry\, treat its notAfter field as a stated useful life\,
  and then ask which anchors you are relying on past the point their signatu
 res can be forged. The confidentiality wave of quantum cryptographic exposu
 re\, which dominates current attention\, concentrates at scannable perimete
 rs. The integrity wave\, in contrast\, is distributed across every componen
 t carrying a verifiable signature\, so it surfaces only through inventory\,
  not perimeter scanning.\n\nAttendees leave with a runnable method and an u
 nderstanding of how to apply this to their own PKI estates.\n\n\nSpeakers: 
 Tim D Williams
LOCATION:Red hall
CATEGORIES:Red hall,Demo
URL:https://pkic.org/events/2026/pqc-conference-amsterdam-nl/agenda/
END:VEVENT
END:VCALENDAR