Managing Cryptographic Transitions: Crypto‑Agility as an Enabler and a Challenge#
nog.fi meeting 2026.06 digest Program Core pick 16–17 June 2026
Markus Rautell (VTT)
- Why: PQC migration will land squarely on identity and network-security infrastructure — passkey, token, and certificate stacks all need swappable primitives. This talk frames the architectural problem that precedes any migration plan.
- What: A position talk: cryptographic primitives offer temporary rather than permanent protection, PQC transition timelines are external and time-critical, and system architectures are still widely designed so that cryptographic updates are risky, slow, and resource-intensive; crypto-agility is hard but the work must continue. (from abstract only)
- How: Architectural/design discussion rather than a specific mechanism — the abstract offers no concrete technique.
- Where applicable: Broadly applicable to any system with long-lived cryptographic dependencies (identity, DNSSEC, TLS, control-plane protocols). Conceptual rather than deployable — treat it as framing for migration planning, from a research organization's perspective.
