A New Frontier - The Future of Quantum-Safe Software Supply Chains With Sigstore

Explore the critical intersection of quantum computing threats and software supply chain security in this conference talk that examines how Sigstore is preparing for a post-quantum cryptographic world. Learn about the imminent threat of cryptographically relevant quantum computers and why post-quantum digital signatures are essential for maintaining software integrity beyond traditional "Harvest now; decrypt later" attack scenarios. Discover Sigstore's mission to make software signing invisible infrastructure and examine their latest advancements in integrating the experimental quantum-resistant signature algorithm ML-DSA. Understand the rapidly evolving post-quantum cryptographic landscape and receive actionable insights for making your software supply chain quantum-ready. Review the most current NIST recommendations for post-quantum signing and their implications for software developers and security professionals. Gain perspective on the future of post-quantum signing capabilities within Sigstore and the broader cybersecurity ecosystem as quantum computing continues to advance.