MS
Murugiah Souppaya
— On the schedule —
Architecting the Agility Layer: Forging a Common Crypto API for the Post-Quantum Era
The global migration to Post-Quantum Cryptography (PQC) represents the most disruptive shift in digital cryptographic infrastructure history. While cryptographic agility, defined in NIST CSWP 39 as the seamless replacement of algorithms without breaking operational continuity, is widely recognized as the foundational defense strategy, execution remains a daunting challenge for practitioners. The primary obstacle is complexity of cryptographic API: a lack of standardized abstractions across core cryptographic libraries forces developers to rewrite brittle integration logic for every application. This panel brings together the foundational architects shaping global security infrastructure to discuss a critical enabler: the development of a Common Crypto API. Featuring the leads of OpenSSL, Bouncy Castle, EJBCA, and InfoSec Global, this session moves beyond theoretical agility to address the practical engineering realities of unified abstractions. Attendees, including enterprise decision-makers, open-source contributors, and security engineers, will gain a clear understanding of how harmonized API frameworks lower the barrier to entry for PQC and future cryptographic evolutions. Participants will walk away with a collaborative roadmap detailing how the ecosystem could plan to align provider architectures, PKI engineering, and commercial implementation to secure our collective digital infrastructure.
— Compositor's note —
Murugiah Souppaya is a Distinguished Technologist at HP Security Lab, where he leads strategic advanced development projects to help customers adopt state of the art endpoint security capabilities to further enterprise zero trust and security outcomes. He collaborates with HP’s security researchers, technologist and business leaders to shape long-term cybersecurity technology roadmaps, working across the organization. Murugiah works closely with HP go-to-market teams and leading customers to articulate HP’s security vision and collaborate on technology deployment roadmaps. Before joining HP, Murugiah served as a Computer Scientist at the National Institute of Standards and Technology (NIST), where he developed cybersecurity standards and partnered with government and industry stakeholders to build practical solutions for U.S. federal agencies and regulated sectors. His contributions supported major initiatives in Zero Trust Architecture, post quantum cryptography (PQC) migration, Cryptographic Module Validation Program (CMVP) automation, software supply chain security, hardware enabled protections, and secure cloud, endpoint, and IoT systems.