Name: Beyond Classical Cryptography: Building Quantum-Resistant Cloud Native Infrastructure With SPIFFE - Andrés Vega, M42 & Hugo Landau, Messier42
Start: 2025-04-04T11:45:00+0100
End: 2025-04-04T12:15:00+0100

In-person
1-4 April 2025
Learn More and Register to Attend

The Sched app allows you to build your schedule but is not a substitute for your event registration. You must be registered for KubeCon + CloudNativeCon Europe 2025 to participate in the sessions. If you have not registered but would like to join us, please go to the event registration page to purchase a registration.

Please note: This schedule is automatically displayed in British Summer Time (BST) (UTC +1). To see the schedule in your preferred timezone, please select from the drop-down menu to the right, above "Filter by Date." The schedule is subject to change and session seating is available on a first-come, first-served basis.

Friday April 4, 2025 11:45 - 12:15 BST

Platinum Suite | Level 3 | Room 1-2

As quantum computing advances, traditional cryptographic systems face unprecedented vulnerabilities. We demonstrate integrating post-quantum cryptography (PQC) into cloud native infrastructure through SPIFFE identities, focusing on networking and security. We'll examine NIST's 2024 PQC standards and their key advantage: improved implementation error resistance.

Our live demonstration showcases end-to-end PQC in Kubernetes using SPIFFE/SPIRE, with L7 filtering, mutual authentication, and quantum-resistant cross-cluster communication. We cover:

* Deployment of PQC-enabled SPIRE, Cilium, and Envoy with Kyber KEM and Dilithium3 X.509 certificates
* Implementation of quantum-resistant (m)TLS
* Cilium network policies for L7 filtering with PQC
* Inter-node traffic security using Envoy mTLS with PQ algorithms

Attendees will gain practical insights and strategies for transitioning their infrastructure to quantum-resistant security in cloud native environments.

Speakers

Andrés Vega

Founder and CEO, M42

Maintainer, contributor, and author.

Hugo Landau

Chief Engineer, Messier42

An experienced software engineer with a background in internet security and cryptography technologies, Hugo has developed assorted cryptography, PKI and security infrastructure. He is also an OpenSSL committer, a Namecoin developer, has contributed to the ACME standards process and... Read More →

Friday April 4, 2025 11:45 - 12:15 BST
Platinum Suite | Level 3 | Room 1-2

Maintainer Track, SPIFFE

KubeCon + CloudNativeCon Europe 2025

Andrés Vega

Hugo Landau

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!