Post-Quantum HSMs: Shipped, Validated, or Roadmap?
· 14:00 – 15:00 Amsterdam time · Red hall
Post-quantum cryptography has moved from standardization to procurement and deployment, with HSM providers central to what customers can implement. This panel brings providers together to distinguish what is available and validated today from what remains on a roadmap, and to explain what customers should require now.
The timing is no longer abstract. In the United States, Executive Order 14412 directs the FAR Council to propose post-quantum FIPS requirements for covered contractors by December 31, 2030, while federal high-value assets and high-impact systems must transition key establishment by that date and digital signatures by 2031. In the European Union, the Coordinated Implementation Roadmap expects national strategies and cryptographic inventories to be underway, and transition planning and pilots to have begun, by December 31, 2026, with high-risk use cases transitioned by the end of 2030. The Cyber Resilience Act adds product-security and vulnerability-handling obligations that will influence HSM procurement. Buyers therefore face an immediate question: how can they procure platforms today without creating lock-in, revalidation costs, or another hardware migration later?
Panelists will address FIPS 140-3 validation and EUCC/Common Criteria certification, including EAL4 and applicable augmented assurance components, for HSMs supporting ML-KEM, ML-DSA, and SLH-DSA; firmware versions and approved operating modes; standards-based crypto-agile interfaces; hybrid key and certificate handling; partition and key portability; and audit evidence. They will also discuss why migrations stall at cryptographic discovery and what customers should expect from vendors on hardware provenance, supply-chain dependencies, and delivery timelines.
Attendees will leave with practical criteria for separating deployable capability from roadmap claims, writing stronger procurement requirements, and identifying choices that could create lock-in or require later revalidation.
Speakers
- Executive Vice President Engineering · Securosys SA
Marcel is the Executive Vice President Engineering at Securosys SA and represents the organization at the PKI Consortium.
- CEO · i4p informatics
CEO of i4p informatics, vendor of the Common Criteria EAL4+ certified Trident HSM. We started as HSM users running NetLock, Hungary's first qualified trust service provider. We lived the reality of trust services from the inside, and knew we could build a better HSM. That's how i4p was born.
Today we bring that operator's mindset to everything we do: fast, responsive support, agile development, and a genuine love for cryptography. We're not a mammoth, we're a team that knows this market because we came from it.
I also chair the Cryptomodule Working Group of the PKI Consortium. 30 years in cybersecurity, PKI, and trust services
Bruno Couillard
Panelist- CEO & co-founder · Crypto4A
Bruno Couillard is a technology entrepreneur and cybersecurity executive focused on shaping the future of digital trust in the quantum era. As Co-Founder and CEO of Crypto4A, he leads the development of advanced quantum-safe cryptographic infrastructure designed to secure critical systems against both current and emerging threats.
Driven by a vision of trusted digital ecosystems built on resilient cryptography, Bruno has helped position Crypto4A as an innovator in secure hardware, cryptographic modernization, and post-quantum readiness. His leadership combines strategic foresight with a deep understanding of how security, standards, and infrastructure must evolve to support governments, enterprises, and critical industries in an increasingly interconnected world.
Bruno is a strong advocate for sovereign cybersecurity capability, ecosystem collaboration, and practical pathways toward quantum-resilient security architectures. Through his work, he continues to champion the advancement of trusted digital infrastructure capable of supporting the next generation of secure global systems.
- Research - Business Development Executive/Offering Manager · IBM
John Buselli is Global Offering Manager for IBM Quantum Safe at IBM Research, where he works with enterprises, regulators, and technology providers on the move to post-quantum cryptography. His focus is the practical side of migration including cryptographic discovery and inventory, crypto-agility, and the global regulatory deadlines and advisory guidelines now driving PKI and HSM roadmaps.
John is active in global consortia and standards efforts advancing quantum-safe adoption. He chairs the Commercialization & Use Cases Technical Advisory Committee at the Quantum Economic Development Consortium (QED-C) and is an advocate for cryptographic bills of materials (CBOMs) as a foundation for migration planning. He speaks frequently on cryptographic resilience and operational risk.
Before joining IBM Research in 2014, John built initial markets for early-stage software companies acquired by HP, Symantec, and IBM.
- VP of Product Management · Entrust
Giuseppe is currently the Vice President of Product Management for the HSM product offering at Entrust. With over 30 years of experience, he is a senior expert in developing and managing PKI solutions and infrastructures, data security, and electronic payment systems.
Giuseppe is also an ETSI member. He has actively contributed defining one of the first technical API standard for Cloud Signature services. The standard was adopted by the Cloud Signature Consortium and by ETSI: https://cloudsignatureconsortium.org/2019/04/02/etsi-collaboration/ (opens in a new tab).
Furthermore, he has contributed to write one of the first proposal for Distributed Ledger Timestamp based on a standard PKI format and blockchain evidence: https://www.ietf.org/id/draft-intesigroup-dlts-03.html (opens in a new tab)
Attendance
Open session · first come, first served
Saving interest does not reserve a seat. Admission remains first come, first served.
Save favorite
