Retaining Cryptographic Control When Agentic AI Accelerates PQC Migration
· 14:30 – 15:00 Amsterdam time · Room D (9)
As organisations use AI to accelerate PQC migration, they risk creating a new form of crypto sprawl: AI-generated code that embeds algorithms, key references, provider choices, and local policy assumptions. This session shows how policy-bound cryptographic interfaces, CI/CD guardrails, and intent-level APIs can help teams use AI without losing cryptographic control.
As organisations prepare for PQC migration, agentic AI introduces a new governance risk: coding agents can generate cryptographic integrations faster than security teams can review, approve, and manage them. Without clear constraints, AI-generated applications may hard-code algorithms, key references, provider calls, fallback logic, and local policy assumptions across the software estate. The result can be greater crypto sprawl, reduced crypto agility, and new obstacles to controlled PQC migration.
This session presents an architecture and API approach for using AI safely in PQC migration programmes. Instead of allowing AI-generated applications to make cryptographic decisions, applications should express cryptographic intent while policy, key association, provider routing, algorithm selection, audit, and lifecycle management remain centrally governed. The session covers CI/CD guardrails, coding standards, policy-controlled migration from classical to post-quantum algorithms, and evidence collection for CBOM and phased cutover planning. Attendees will leave with a practical model for preventing AI-generated crypto sprawl while still using AI to accelerate PQC readiness.
Speakers
- EVP Product Line Management · Cryptomathic
Guillaume Forget is Executive Vice President, Product Lines at Cryptomathic, where he leads product strategy and direction across the company’s portfolio of cryptographic and digital trust solutions.
With more than 20 years of experience in electronic signatures, remote signing, and cryptographic trust services, Guillaume is a recognised industry leader in the e-signature space. He also serves on the Executive Committee of the Cloud Signature Consortium, contributing to the development and adoption of open standards for cloud-based digital signatures.
His work focuses on helping organisations design secure, scalable, and standards-based trust architectures that can support evolving requirements, including crypto-agility, governed cryptographic services, and post-quantum transition readiness.
Attendance
Open session · first come, first served
Saving interest does not reserve a seat. Admission remains first come, first served.
Save favorite
