Skip to main content
FOSDEM PWA

Demystifying Post-Quantum Cryptography: The Hybrid Approach

UB5.132 | Day 1 | 11:00 - 11:25 | Speakers: Rutvik Kshirsagar, Shreyas Mahangade, Clemens Lang

Demystifying Post-Quantum Cryptography: The Hybrid Approach
A picture of a devroom at FOSDEM 2024
Open in browser

Notes

Abstract

  • The pace at which quantum computing is evolving right now, threats of harvest-now-decrypt-later becoming more relevant. The widely deployed classical cryptographic algorithms such as RSA and ECC face a real risk of being broken by quantum attacks, most notably through Shor’s algorithm. This looming threat makes the transition to Post-Quantum Cryptography (PQC) urgent, not as a future project, but as a present-day migration challenge.
  • You may have questions whether the transition to PQC is even necessary at the moment. It is true that quantum computers are years away, but it hardly matters because so many governments, telecom, defense entities worldwide are now requiring a transition.
  • In this talk, we would focus on the practical hybrid transition from classical to quantum-resistant cryptography. We would explore NIST’s PQC standardization efforts through newly selected algorithms particularly ML-KEM (key-exchange), ML-DSA and SLH-DSA (digital signatures) in modern cryptographic infrastructures.
  • The transition from classical crypto to a hybrid model enable organizations to begin adopting PQC today without breaking interoperability or relying on fully quantum-resistant stacks before they’re ready.
  • To make this transition concrete, we will demonstrate a TLS connection with hybrid key-exchange and post-quantum signature, showing how post-quantum and classical algorithms can operate together.

Attachments

Speakers

Rutvik Kshirsagar

Rutvik is working as a Principal Technical Support Engineer at Red Hat. He is passionate about opensource cloud-native tools and infrastructure security. He mainly works with Linux Containers, OpenShift, helping developers, and security admins to adapt cloud-native security best practices in the Kubernetes ecosystem.

Shreyas Mahangade

I am a Tech and Linux Enthusiast currently working at Red Hat Support as SME.

Clemens Lang

Clemens is the Product Owner of the Red Hat Enterprise Crypto Team and currently focusing on the transition to post-quantum cyrptography. He's been working for Red Hat since 2022. Prior to his work at Red Hat, he took care of open source packaging, over-the-air updates and security of infotainment systems at BMW. Clemens has also contributed to the MacPorts project since Google Summer of Code 2011.

Notice: The placeholder video image is licensed under CC BY-SA 4.0. The original image can be found hereChanges made to the image are: Cropped the image to a new ratio, part of the image was cut off.