Quantum-Resistant Kubernetes - Realities, Risks and Versioning Pitfalls

Explore the practical implementation of Post-Quantum Cryptography in Kubernetes environments through this 25-minute conference talk that examines real-world challenges and opportunities in quantum-resistant computing. Discover how Go 1.24+ enables ML-KEM by default and how Kubernetes v1.33+ inherits quantum resistance for key exchange operations. Learn about the current state of PQC standardization including ML-KEM (FIPS-203) and understand how Kubernetes already benefits from PQC key exchange capabilities. Examine critical downgrade risks arising from mismatched Go versions, particularly the differences between Go 1.23's X25519Kyber768Draft00 and Go 1.24's X25519MLKEM768 implementations. Investigate the "tldr.fail" issue where large PQC key shares can disrupt TLS handshakes due to packet size limitations. Gain insights into navigating the PQC transition with evidence-based examples from the Kubernetes ecosystem, providing valuable guidance for maintainers and advanced users working with quantum-resistant technologies in cloud-native environments.