Merkle Tree Certificates for Private PKI: Size, Scale, and Transparency in the Post-Quantum Era

Ganesh Mallaya is an accomplished cybersecurity leader at AppViewX, operating at the intersection of product innovation, industry standards, and enterprise adoption. He plays a key role in shaping both the evolution of cryptographic platforms and how organizations implement them in real-world environments, with a focus on Public Key Infrastructure (PKI), certificate lifecycle management, and post-quantum readiness.

As a field-facing technology leader, Ganesh works closely with CISOs and security leaders across global enterprises, acting as a trusted advisor on cyber risk, crypto-agility, and large-scale PKI transformation. His work goes beyond strategy—he actively influences product direction by bringing frontline customer challenges into the design of scalable, automation-first solutions that address modern cryptographic complexity.

Ganesh is an active contributor to global standards and industry initiatives, collaborating with the IETF, CA/Browser Forum, and the PKI Consortium. His contributions span areas such as ACME-based automation, device identity and attestation, and the advancement of hybrid and composite cryptographic models to support the transition to quantum-resistant security.

He is a frequent speaker at leading security and identity conferences, including BSides Seattle and International Cryptographic Module Conference, where he shares practitioner-driven insights on crypto-agility, PKI modernization, and the operational realities of post-quantum adoption. His perspective consistently highlights that the future of cryptography will be defined not just by algorithms, but by the ability to automate, adapt, and operate securely at scale.

John Gray is a Principal Software Developer at Entrust, specializing in PKI architecture, cryptographic protocol implementation, and post-quantum migration strategies. He facilitates the PQC Interoperability project at the IETF and has contributed to post-quantum cryptography standards, including composite signatures and composite key encapsulation mechanisms (KEMs), and authored 5 RFCs with more in process. John also participates in the OASIS PKCS#11 Technical Committee and NIST NCCoE initiatives focused on real-world PQC adoption.