Panel Discussion: From Algorithms to Agility—the Case for a Common Cryptographic Interface (R31b)
The NIST CSWP 39: Considerations for Achieving Crypto Agility provides a comprehensive overview of current strategies and practices for enabling cryptographic agility. It emphasizes the ability to seamlessly replace and adapt cryptographic algorithms within protocols, applications, and infrastructures without disrupting ongoing operations. The document addresses key challenges, trade-offs, and operational mechanisms necessary to maintain both security and interoperability while identifying critical areas that require further advancement. One of the major areas highlighted during the NIST Crypto Agility Workshop and reflected in CSWP 39 is the need for a common cryptographic API: a universal interface that bridges existing cryptographic frameworks. Such an API would abstract complex cryptographic operations, thereby supporting operational crypto agility, enhancing interoperability, and enabling smooth transitions between algorithms without being constrained by the unique characteristics of individual implementations. This panel will explore essential considerations for defining operational use cases, establishing a minimum set of requirements, and identifying stakeholders who would benefit from a common crypto API. The discussion will emphasize backward compatibility with widely deployed cryptographic APIs while also ensuring support for emerging cryptographic functions and algorithms. Attendees will have an opportunity to influence and contribute to the community-driven development of such an API.