(TR21) (INCYBER) Crypto-agilité : préparer la transition post-quantique

Value of the Information & Strength of the Argument

The discussion provides valuable insights into the practical challenges and strategies for post-quantum transition. The experts argue convincingly that the threat is imminent and that organizations must act now, citing the ‘harvest now, decrypt later’ risk and the long migration timelines. They emphasize the need for crypto-agility, not just as a technical feature but as an architectural principle. The argumentation is solid, grounded in real-world examples like TLS 1.3 and the experiences of Leonardo. However, some claims, such as the specific timelines for quantum computers, are speculative and not backed by detailed evidence. The panel also highlights the importance of hybrid approaches, which is a nuanced and well-reasoned position.

Scientific Rigor, Source Quality, Title Accuracy

The discussion demonstrates a high level of scientific rigor, with experts referencing standards, regulations, and historical precedents. The quality of sources is good, as the participants are directly involved in the field. However, the conversation is largely based on expert opinion rather than peer-reviewed research, and specific citations are sparse. The title accurately reflects the content, focusing on crypto-agility and the post-quantum transition. The forum context adds credibility, but the lack of detailed references slightly reduces the overall rigor.

The title accurately reflects the content, which focuses on crypto-agility and preparing for the post-quantum transition.

7/10

The discussion features recognized experts from ANSSI, Leonardo, Mozilla, and a quantum security consultant, providing authoritative insights. However, the content is largely opinion and experience-based, with limited references to specific studies or verifiable data. The claims are plausible and align with known industry trends, but the lack of detailed citations and the promotional context of the forum slightly reduce the overall reliability.

Markers derived by PSI from the transcript: the creator did not define chapters.

• 02:00Introduction to the topic and the threat of quantum computers.
• 05:00Sami Sissi outlines ANSSI's roadmap and the 2030 recommendation.
• 10:00Discussion on 'harvest now, decrypt later' and the need for early action.
• 15:00Dimitri Vanesch explains the long migration timelines and the importance of crypto-agility.
• 20:00Benjamin Burdouche discusses internet protocols and the evolution of TLS.
• 25:00Definition of hybridization and crypto-agility by Sami Sissi.
• 30:00Roberto De Paolis shares Leonardo's approach to inventory and risk assessment.
• 35:00Discussion on infrastructure and certificate management.
• 40:00Challenges of application updates and the need for a pragmatic approach.
• 45:00Conclusion and call to action for the ecosystem.

• Forum INCYBER Europe — Official website of the forum where the discussion took place.
• INCYBER Europe LinkedIn — LinkedIn page of the forum, providing additional context and updates.

• NIST Post-Quantum Cryptography Standardization — The NIST standardization process is referenced in the discussion as a key driver.
• BSI Post-Quantum Cryptography — The German BSI is mentioned as a counterpart to ANSSI in recommending hybrid approaches.

• Quantum computing timeline uncertainty — The panelists acknowledge that the exact timeline for quantum computers is uncertain, with estimates ranging from 2035 to 2040, which could affect the urgency of migration.