PKI Agility and the Difference to Cryptographic Agility - Lessons from the Past and Present

Learn about PKI agility and its distinction from cryptographic agility through this 24-minute conference presentation that challenges the common misconception that cryptographic agility is purely a technical problem. Explore how agility requirements are context-dependent and organizational in nature, representing a subset of broader organizational agility. Discover different types of PKI agility classified according to specific needs, including replacing underlying cryptographic algorithms, understanding why size matters, re-issuing certificates, replacing certificate hierarchies, reacting to key compromise, and migrating to quantum safety. Examine concrete examples demonstrating how lack of agility impacts various dimensions differently, drawing from lessons spanning 20 years from the RSA to ECC transition and experience gained from deploying hybrid systems in sensitive government projects. Gain insights from more recent developments, including the hybrid secure-boot mechanism on IBM mainframes, presented by Michael Osborne, CTO IBM Quantum Safe at IBM Research.