Architecting PKI Hierarchies for Graceful Post-Quantum Migration

Watch a technical talk exploring the complexities of designing Public Key Infrastructure (PKI) hierarchies for the transition to post-quantum cryptography (PQC). Learn how traditional approaches to algorithm selection become more challenging in a post-quantum world, where different layers of the PKI may require varying algorithms based on specific needs - from long-term security at root CAs to performance optimization at issuing CAs and bandwidth efficiency for end entities. Discover a comprehensive toolbox of migration mechanisms for X.509 and examine practical example PKI hierarchies that demonstrate how to effectively navigate algorithm choices during the transition to PQC. Software Security Architect Mike Ounsworth from Entrust presents this 34-minute discussion on implementing hybrid approaches that balance security requirements with migration flexibility across different use cases.