Mobile user authentication: post quantum trade-offs
· 09:05 – 09:35 Amsterdam time · Blue hall
At itsme, an eIDAS Level High recognised identity scheme, we explored several post-quantum migration strategies for user authentication. Itsme consists of a mobile application installed on the user's phone and a secure backend. In this context, user authentication means proving that the app is running on the same device the user originally registered with, combined with proof of knowledge and/or inherence (typically a PIN or biometrics) established by the user at registration.
Given the current uncertainty around long-term post-quantum algorithm robustness and ecosystem maturity, we focused primarily on hybrid approaches — combining post-quantum cryptography with classical cryptography — to preserve today's security guarantees while building in resilience against future quantum threats.
Beyond algorithm selection, a key challenge is migrating our existing user base to the new cryptographic scheme without compromising security or disrupting the user experience.
In this talk, we will present the different approaches we implemented, give real numbers, discuss the impact each approach has on the user, and weigh the pros and cons of each.
Speakers
- Authentication Technology Architect · Itsme
Roel Peeters earned his PhD in applied cryptography from KU Leuven and was co-founder of nextAuth, which was fully acquired by itsme in 2023. Today, as a Authentication Technology Architect at Itsme, Roel focuses on further developing innovative authentication solutions. He brings deep cryptographic expertise to the forefront of digital security.
Attendance
Open session · first come, first served
Saving interest does not reserve a seat. Admission remains first come, first served.
Save favorite
