Foyer
Jump To: PQ Cyber Day (Mon), Crypto Infrastructure Day (Mon), ICMC (Tue-Thu)

PQ Cyber Day will help you prepare now for the threat posed by future quantum computers. Key topics include: Understanding the threat and projected timelines; assessing current encryption vulnerabilities; transitioning to standardized quantum-resistant cryptography; creating effective policies and procedures; ensuring system resilience and backups; engaging with vendors and third-party suppliers; educating team members and stakeholders; complying with regulatory requirements. This special-focus module will include important, actionable information for anyone concerned with cybersecurity in a data-dependent enterprise.
Salon 1-3
![]()
Market Status and Real-World Cryptography
Moderator: Neil Horman, Software Engineer, OpenSSL Corp., United States
09:00 Continental Drift: How the U.S. and EU Are Approaching PQC Migration (Q00a) Sameer Boray, Senior Policy Manager – Trust, Data and Technology, Information Technology Industry Council (ITI)
A look at U.S. and EU strategies for migrating to post‑quantum cryptography.
09:30 NIST PQC Standards: Final Algorithms, Open Gaps, and Timeline Reality (Q00b) Bas Westerbaan, Principal Research Engineer, Cloudflare, Netherlands
An overview of NIST approved algorithms and the status of the transition to NIST PQC standards.
10:00 Real-World PQC Considerations (Q00c) Wil Oxford, Founder and CEO, Anametric, United States
Some of the real-world pitfalls that still await us over the next decade.
10:30 Hybrid Cryptography: Surviving the Transition Period (Q00d) John Gray, Senior Principal Applications Developer, Entrust, Canada
Learn how hybrid cryptography bridges classical and quantum during the transition era.
Foyer
Salon 1-3
![]()
Panel Discussion
11:30 Panel Discussion: the Trials and Tribulations of a PQC Transition (Q01a) Leader: Kevin Micciche, Chief Technologist, Platform Trust, HPE Networking, United States Panelists: Seema Kumar, Director, NPAT Product Management, Post-Quantum Cryptography (PQC) and UI/UX, Hewlett Packard Enterprise, United States; David Hook, VP Software Engineering, Keyfactor/Legion of the Bouncy Castle, Australia; Matt Mickelson, Lead Coordinator, Post-Quantum Cryptography Coalition (PQCC), MITRE, United States; Jeff Andersen, Senior Staff Software Engineer, Google
This panel brings together voices from various experts to discuss how they are approaching the complexities of PQC readiness. Panelists will share first-hand perspectives on balancing compliance deadlines, interoperability with existing ecosystems, and the practical engineering trade-offs required for secure and timely migration.
Foyer/Library
Salon 1-3
![]()
Implementation & Outlook
Moderator: Michele Mosca, Co-founder and CEO, evolutionQ, and Co-founder, Institute for Quantum Computing, Canada
13:30 Are You Ready? A Look at Post Quantum Cryptography‚ Readiness and Pitfalls (Q02a) Jennifer Brady, Senior Principal Security Analyst, Oracle, United States
Assess your readiness and avoid pitfalls in the quantum cryptography transition.
14:00 Crypto Inventory: You Can’t Migrate What You Can’t Find (Q02b) Basil Hess, Senior Research Engineer, IBM Research Europe, Switzerland
Discovering your crypto inventory is key to a successful PQC migration.
14:30 Architecture Resilience and Your HSM Selection (Q02c) Bruno Couillard, Co-Founder & CEO, Crypto4A, Canada
Choose the right HSM to build resilient, trustworthy architectures in a digital world.
15:00 HSM and PCI/FIPS Requirements in the Post-Quantum Era: Certification & Lifecycle (Q02d) Manish Upasani, VP of Product & Strategy, Utimaco, United States
Navigate HSM certification and lifecycle requirements in the post‑quantum era.
Foyer
Salon 1-3
![]()
Panel Discussion
16:00 Panel Discussion: PQC Readiness by 2030? – Trust but Verify in a Diverse Technology Ecosystem (Q03a) Leader: Blair Canavan, Director Alliances, PKI and PQC Portfolio, Thales Group, Canada Panelists: Jaime Gomez, Global Head of the Santander Quantum Threat Program, Santander Digital Services, Spain; Bill Newhouse, Cybersecurity Engineer, National Cybersecurity Center of Excellence, National Institute of Standards and Technology (NIST), United States; Michele Mosca, Co-founder and CEO, evolutionQ, and Co-founder, Institute for Quantum Computing, Canda; Ted Shorter, Chief Technology Officer, Keyfactor, United States
Will we be ready for a CRQC by 2028-2030? This talk will focus on describing critical & identifiable technology areas and gaps in PQC-readiness as the world undertakes the single largest cryptographic uplift in history. This explosion of diverse trusted solutions competes with the priorities of commercial demand, as well as, the gaps in regulatory compliance. Learn how to ask the right questions and provide suitable answers for your PQC journey.


Presenting Sponsor
Crypto Infrastructure Day convenes experts from government, industry, and standards bodies to examine the technologies that underpin trusted systems: Public Key Infrastructure (PKI) for digital trust, PKCS #11 for secure cryptographic operations, and KMIP for enterprise key lifecycle management. You’ll learn how these standards work together to protect sensitive data, enable regulatory compliance, and support modern architectures across cloud and hybrid environments. From certificate authorities to key management servers to hardware security modules, you’ll get a comprehensive view of how to build, manage, and modernize cryptographic infrastructure at scale.
Studio D
![]()
Foundations of Cryptographic Infrastructure
Moderator: Valerie Fenwick, PKCS#11 Technical Committee Co-Chair, OASIS Open, United States
09:00 Beyond PKI: Rethinking Trust in the Quantum Era (K00a) Roberta Faux, Head of Cryptography and Field CTO, Arqit, United States
Rethink digital trust models beyond PKI for a quantum‑resilient future.
09:30 Certificate Authorities, Trust Models, and the Real Risk of Misconfiguration (K00b) Timothy Hollebeek, VP, Industry Standards, DigiCert, United States
Examine how misconfigurations undermine certificate authorities and trust models.
10:00 PKCS #11 Explained: Why This 30-Year-Old Standard Still Runs Your Crypto Stack (K00c) Valerie Fenwick, PKCS#11 Technical Committee Co-Chair, OASIS Open, United States
Explore why PKCS #11 remains essential to modern cryptographic stacks decades later.
10:30 Crypto-Agile PKI in Practice: Building Reliable Trust Paths for the Post-Quantum Transition (K00d) Ganesh Mallaya, Distinguished Architect and Technical Evangelist, AppViewX, United States
Learn how to modernize PKI trust paths for a crypto‑agile, post‑quantum world.
Foyer
Studio D
![]()
Panel Discussion
11:30 Panel Discussion: Operating Cryptography at Scale—Lessons from the Real World (K01a) Leader: Nick Sullivan, Co-Chair, Crypto Forum Research Group (CFRG), Co-Chair, Internet Research Task Force (IRTF) and Principal, Cryptography Consulting, United States Panelists: James Howe, Head of Cryptography, SandboxAQ, United States; Bas Westerbaan, Principal Research Engineer, Cloudflare, Netherlands; Joe Salowey, Co-Chair Transport Layer Security (TLS) Working Group, Internet Engineering Task Force (IETF) and Principal Software Security Engineer, Palo Alto Networks, United States.
Modern systems live or die by how well cryptography is deployed, managed, and maintained at scale—not in theory, but in production. This panel will be a practical, no-nonsense discussion on what actually breaks, what survives, and what organizations consistently underestimate when operating cryptographic systems across large, complex environments. Drawing on real-world experience, the panel will explore key operational challenges such as key management, crypto agility, lifecycle management, and preparing for post-quantum transitions. Expect hard lessons, concrete examples, and guidance you can apply immediately.
Foyer
Studio D
![]()
Key Management and Secure Operations
Moderator: Valerie Fenwick, PKCS#11 Technical Committee Co-Chair, OASIS Open, United States
13:30 X9 Financial PKI Roadmap (K02a) Jeff Stapleton, Executive Director Cybersecurity Researcher, Wells Fargo, United States
Chart the X9 Financial PKI roadmap as an alternative to traditional public PKIs.
14:00 KMIP Demystified: Centralized Key Management Without Centralized Failure (K02b) Tim Hudson, CTO & Technical Director, Cryptsoft, Astralia
Demystify KMIP and learn how centralized key management avoids single points of failure.
14:30 AI-Driven Threats in the Post-Quantum Shift: Operational Insights for Securing Cryptographic Infrastructure (K02c) Chahat Bhatia, Acumen Intertek, India
Operational guidance for defending cryptographic systems against AI-driven, post-quantum threats.
15:00 Secure Firmware Update and Software Signing in Embedded Devices (K02d) Dr. Xin Qiu, Head of Aurora Networks’ PKI Center and Security Solutions, United States
Implement robust firmware update and signing strategies anchored to secure boot.
Foyer
Studio D
![]()
Panel Discussion
16:00 Panel Discussion: the Future of Cryptographic Infrastructure: What Changes, What Doesn’t (K03a) Leader: Burt Kaliski, Senior Vice President and Chief Technology Officer, VeriSign, United States Panelists: Smita Mahapatra, Senior Security Industry Specialist, Amazon Web Services (AWS), United States; Leonard Rosenthol, Chair, C2PA Technical Working Group, Senior Principal Scientist, Adobe Systems, United States; Timothy Hollebeek, VP, Industry Standards, DigiCert, United State; Charles Clancy, Chief Technology Officer & Senior Vice President, General Manager, MITRE Labs, MITRE, United States
As cryptography evolves under pressure from quantum computing, regulatory demands, and growing system complexity, not everything is up for reinvention. Expect a forward-looking but grounded conversation rooted in decades of real-world deployment experience.