Working Groups

Members

The PKI Consortium brings together leading organizations committed to trustworthy digital identities and secure communication.

Browse all members →

Operationalizing PQC: Proposing a Common Crypto API for Agile PKI and Machine Identity

· 10:45 – 11:40 Amsterdam time · Blue hall

NIST has finalized its first working set of post-quantum cryptography standards. The NIST CSWP-39 paper has shifted the enterprise conversation from algorithm selection to cryptographic agility. For application development, PKI, HSM, and machine identity teams, the more challenging issue is no longer which algorithm to choose. Instead, it’s a structural problem: heterogeneous Certificate Authorities, HSMs, certificate lifecycle platforms, and application stacks each independently absorb migration complexity, with no shared abstraction to coordinate the transition.

This session proposes a Common Crypto API: a standardized abstraction layer that separates responsibility across four tiers, ensuring that no single team or vendor owns the entire migration.

  • Cryptographers and library maintainers are responsible for the primitive layer, developing, patching, and replacing algorithms and/or libraries without forcing downstream rewrites.
  • PKI, HSM, and machine identity teams operationalize transitions through certificate profiles, key protection models, and lifecycle automation.
  • Governance boards define and enforce crypto policy centrally, adapting to new threats and regulations without touching every application integration.
  • Application developers consume organizations’ approved cryptographic capabilities through a stable interface, insulated from algorithm or entire crypto library updates or changes.

The Common Crypto API will help separate the responsibilities of cryptographic migration and management while simultaneously serving as an interoperability layer connecting all stakeholders to achieve crypto agility.

Attendees will leave with a working model for de-siloing PQC migration responsibility and the opportunity to shape a cross-vendor interoperability blueprint by providing input to extending existing crypto API standards or developing a new one.

Speakers

Ganesh Mallaya is an accomplished cybersecurity leader at AppViewX, operating at the intersection of product innovation, industry standards, and enterprise adoption. He plays a key role in shaping both the evolution of cryptographic platforms and how organizations implement them in real-world environments, with a focus on Public Key Infrastructure (PKI), certificate lifecycle management, and post-quantum readiness.

As a field-facing technology leader, Ganesh works closely with CISOs and security leaders across global enterprises, acting as a trusted advisor on cyber risk, crypto-agility, and large-scale PKI transformation. His work goes beyond strategy—he actively influences product direction by bringing frontline customer challenges into the design of scalable, automation-first solutions that address modern cryptographic complexity.

Ganesh is an active contributor to global standards and industry initiatives, collaborating with the IETF, CA/Browser Forum, and the PKI Consortium. His contributions span areas such as ACME-based automation, device identity and attestation, and the advancement of hybrid and composite cryptographic models to support the transition to quantum-resistant security.

He is a frequent speaker at leading security and identity conferences, including BSides Seattle and International Cryptographic Module Conference, where he shares practitioner-driven insights on crypto-agility, PKI modernization, and the operational realities of post-quantum adoption. His perspective consistently highlights that the future of cryptography will be defined not just by algorithms, but by the ability to automate, adapt, and operate securely at scale.

Tomas Gustavsson has a MSc from KTH in Stockholm and has been researching and implementing PKI systems since 1994. He is the founder of and still a developer of the open source enterprise PKI project EJBCA and a contributor to numerous open source projects. As a co-founder of PrimeKey, Tomas is passionate about helping users worldwide find the best possible PKI and digital signature solutions. He has worked with customers deploying PKI solutions across the world during the last 20 years.

  • VP, Cryptographic Technology · Keyfactor

Vladimir Soukharev is VP of Cryptographic Technology at Keyfactor. He is focused on cryptographic research and development and is inspired by continuous innovation. Vladimir obtained his Ph.D. from the University of Waterloo’s David R. Cheriton School of Computer Science, specializing in cryptography, security and privacy under the supervision of David Jao. He was part of the Centre for Applied Cryptographic Research, CryptoWorks21 and has contributed and published works at world-renowned conferences and in journals, such as PQCrypto, Financial Cryptography and the Journal of Mathematical Cryptology. He is also contributing to and is part of government initiatives and standards related to PQC and cryptographic migration, which include NCCoE, NIST, and Quantum-Safe Canada. As a contributor to global cryptographic standards, he co-authored NIST SP 1800-38B, which covers the cryptographic discovery practices for PQC migration. Dr. Soukharev has dedicated his career to advancing the design and application of secure cryptographic systems for complex, high-stakes environments with main focus on Cryptographic Posture Management, Cryptographic Agility, and PQC. He currently serves as VP, Cryptographic Technology at Keyfactor and leads the cryptographic team.

  • Global Head of Cryptography and Quantum Threat Program · Santander Digital Services

Jaime Gómez García is a recognized expert in quantum security, with an extensive professional background within the financial sector. He is known for advancing strategic awareness, industry coordination, and practical adoption of quantum-safe cryptography, helping organizations and critical infrastructures prepare for the transition to the quantum era.

His influence in the field has been recognized through multiple distinctions, including inclusion in Quantum Security 25: The Top 25 Most Influential People in Quantum Security (2026), the 2025 Quantum Leap Award from Keyfactor, and recognition as LinkedIn Top Voice (2024-2025) and Quantum Top Voices (2022–2024).

Currently, Jaime serves as the Global Head of the Santander Quantum Threat Program, addressing the transition to a quantum-safe economy. Additionally, he holds the role of Chair of the Europol Quantum Safe Financial Forum, working to facilitate collaboration and coordinate the transition to quantum-safe cryptography within the financial sector.

  • CEO & co-founder · Crypto4A

Bruno Couillard is a technology entrepreneur and cybersecurity executive focused on shaping the future of digital trust in the quantum era. As Co-Founder and CEO of Crypto4A, he leads the development of advanced quantum-safe cryptographic infrastructure designed to secure critical systems against both current and emerging threats.

Driven by a vision of trusted digital ecosystems built on resilient cryptography, Bruno has helped position Crypto4A as an innovator in secure hardware, cryptographic modernization, and post-quantum readiness. His leadership combines strategic foresight with a deep understanding of how security, standards, and infrastructure must evolve to support governments, enterprises, and critical industries in an increasingly interconnected world.

Bruno is a strong advocate for sovereign cybersecurity capability, ecosystem collaboration, and practical pathways toward quantum-resilient security architectures. Through his work, he continues to champion the advancement of trusted digital infrastructure capable of supporting the next generation of secure global systems.

Attendance

Open session · first come, first served

Saving interest does not reserve a seat. Admission remains first come, first served.

Save favorite

Event calendar · Download session calendar · Full agenda