3_PQC Impact on eIDAS.pdf

1、Post Quantum CryptographyImplications for eIDs and Trust ServicesDateLocation17thCA-Day,SplitAuthorJan Klauner25/09/2025Part of the Bundesdruckeri groupWho of YOU has actively used PQC today?25/09/2025Part of the Bundesdruckeri groupEveryone uses Post-Quantum-Crypto!Messengers have adopted PQCWhatsA

2、pp,Signal,iMessage adapted their protocols,use hybrid key exchange with ML-KEMBig parts of the web adopted PQCChrome,Firefox,use hybrid key exchange with ML-KEM by default.Content Delivery Network Cloudflare serves 20%of the web content and offers hybrid key exchange with ML-KEM2025 Valenta:Why the

3、Internet isnt ready for Post-Quantum Certificates29/09/2025Part of the Bundesdruckeri groupeIDASPQC Migration going well?29/09/20254Heterogeneous systemMany different stakeholders with varying(performance)constraints and update cyclesProtocol ossificationDespite being designed to be upgradeable,any

4、flexibility that isnt used in practice is probably broken,because of faulty implementationsMixed signalsMassive amount of new work on PQC appears like it is still not ready,even for expertsHybrids as European requirementCATSAeIDSigSEUDI WalletValSPresSPart of the Bundesdruckeri groupEU Roadmap follo

5、wingCommissions Recommendation on PQC29/09/2025Milestones for high-risk and medium-risk use casesRisk-based approach to planningStarting date is not a moving target anymorePart of the Bundesdruckeri group29/09/20256Part of the Bundesdruckeri groupDo I need to act?29/09/20257banks,hospitals,telecom p

6、roviders,car manufacturers,etc.web shops,building companies,schools,etc.IT infrastructure providers,standard organizations,etc.The PQC Migration Handbook,December 2024Part of the Bundesdruckeri groupDo I need to act?29/09/20258banks,hospitals,telecom providers