Updates on PQC Migration Efforts by Industry (Q13a)
This talk will aim to provide a status update on PQC Migration Efforts across industry. In particular, it will focus on the MITRE-stood-up PQCC (PQC Coalition), which launched in Summer 2023, and expects have initial products/outputs in early 2024. This is a MITRE-facilitated but industry-driven effort, with a founding member list of AWS, IBM, the Linux Foundation, Microsoft, PQShield, Red Hat, SandboxAQ, the University of Maryland, the University of Waterloo, and the Max-Planck Institute for Security & Privacy. In late 2023, the PQCC aims to onboard additional members (on the order of 12-15 companies/universities/etc.). Additionally, the talk may discuss progress in the sister-effort of the Linux Foundation’s PQSF (Post-Quantum Cryptography Foundation) as of its planned launch date in November/December 2023.
Topics covered include progress in four workstreams:
1) Standards (emphasizing protocol standards and industry verticals)
2) Education (with distinct audiences: graduate students, working professionals, C-suite executives, government policy makers)
3) Implementations (working towards open-source/IP-free, production-quality, formally-verified, and side-channel resistant implementations of PQC)
4) Cryptographic Agility (driving industry development and adoption of a common cryptographic Software Bill of Materials and related technologies)