JG
John Gray
— On the schedule —
Composites Aren’t Optional: Designing PKI for the Post-Quantum Transition and Beyond
The post-quantum transition will last years—if not decades—requiring PKI systems to securely straddle classical and quantum-safe worlds. This session explores composite algorithms as a first-class PKI design pattern rather than a temporary workaround. Drawing from standards work and interoperability testing, it highlights real-world constraints in certificates, protocols, and tooling, and provides practical guidance for deploying composites in a way that preserves security, interoperability, and future agility.
— Compositor's note —
John Gray is a Senior Staff Software Developer at Entrust, specializing in PKI architecture, cryptographic protocol implementation, and post-quantum migration strategies. He facilitates the PQC Interoperability project at the IETF and has contributed to post-quantum cryptography standards, including composite signatures and composite key encapsulation mechanisms (KEMs). John also participates in the OASIS PKCS#11 Technical Committee and NIST NCCoE initiatives focused on real-world PQC adoption.