BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//PKI Consortium//Conference Agenda//EN
CALSCALE:GREGORIAN
METHOD:PUBLISH
X-WR-CALNAME:Post-Quantum Cryptography Conference
X-WR-TIMEZONE:Europe/Amsterdam
BEGIN:VEVENT
UID:agenda-c536867c-642a-40db-9ae0-1a392fe8dd21@ics.pkic.org
SEQUENCE:1
DTSTAMP:20261025T183315Z
DTSTART:20261202T133000Z
DTEND:20261202T140000Z
STATUS:CONFIRMED
SUMMARY:Bridging the Gap: A Hybrid TPM Strategy for Post-Quantum Virtual Sm
 art Cards
DESCRIPTION:Though NIST finalized ML-KEM and ML-DSA some time ago\, the ind
 ustry is still facing a dilemma: how to secure hardware against future thre
 ats without waiting for silicon updates. While the Trusted Computing Group 
 (TCG) released the TPM 2.0 Library Specification v185 in March 2026 with na
 tive PQC support\, the reality of enterprise deployment is that most existi
 ng hardware remains on pre-PQC TPMs.\n\nThis session moves beyond theoretic
 al migration paths to dissect a real-world\, production-grade implementatio
 n of a hybrid Virtual Smart Card architecture. We detail our transition fro
 m Microsoft's Virtual Smart Card ecosystem to a custom\, standard TPM-based
  solution. The core of the discussion focuses on a stop-gap but robust hybr
 id model: leveraging software-based post-quantum algorithms (ML-KEM and ML-
 DSA) for cryptographic operations while utilizing the existing TPM for the 
 secure storage of PQC private keys.\n\nWe look at why hardware-based key pr
 otection is significantly more secure than software-based storage\, compari
 ng pure software key storage against TPM-sealed keys and the attack surface
  each presents (lateral movement\, memory scraping\, offline extraction)\, 
 along with honest caveats about where the hybrid model still has gaps compa
 red to fully native TPM computation. We then turn to key lifecycle manageme
 nt across mixed algorithm sets: generation\, backup\, rotation\, and revoca
 tion\, and what worked smoothly versus where the hybrid model introduces ge
 nuine complexity.\n\nThe session concludes with a frank assessment of when 
 to wait for native TCG v185 hardware\, what it actually brings to the table
 \, and what pitfalls to avoid during the transition. Attendees will leave w
 ith a concrete blueprint for implementing crypto-agility in constrained env
 ironments and criteria for deciding when to migrate from software-hybrid mo
 dels to native TPM 2.0 v185 hardware based on threat modeling and resource 
 availability.\n\n\nSpeakers: Zsolt Makádi
LOCATION:Room C (8)
CATEGORIES:Room C (8)
URL:https://pkic.org/events/2026/pqc-conference-amsterdam-nl/agenda/
END:VEVENT
END:VCALENDAR