From Connectivity to Cyber Resilience : Defense in Depth for the connected Enterprise#

Yannick Gautier - NI ION NOKIA

• Why: PQC migration is a real, dated obligation for network security programs (harvest-now-decrypt-later), and the slides contain useful framing — cryptographic debt, discovery→assess→prioritize, migration timelines of 5–15+ years by organization size, and the argument that symmetric crypto survives quantum with larger keys while asymmetric is broken (Shor vs Grover).
• What: Nokia's Quantum-Safe Networks pitch: layered, multi-technology key establishment (PQC ML-KEM/ML-DSA per FIPS 203–205, symmetric key infrastructure, optional QKD per ETSI GS 014) with centralized key management (1830 SMS), line-rate encryption at multiple layers, crypto-agility, and sovereignty over entropy. Interesting data point: the estimated qubits needed to break RSA-2048 dropped from ~1 billion (2012) to under 100,000 (2026) across three papers in twelve months.
• How: Defense in depth across application/IP/MPLS/L2/physical layers with different key-establishment architectures (PQC-only via PKI, QKD+symmetric, hybrid PKI+PSK), coordinated key rotation, and certified entropy; ends with four telco monetization models for quantum-safe connectivity.
• Where applicable: Enterprises and carriers with long-lived confidential data and regulated critical-infrastructure obligations. Caveat: the second half is a Nokia portfolio and services pitch (1830 optical line, SMS key management, QSN service models) — take the threat framing and migration methodology, discount the product push.