Protocol Migration in Practice: From Classical to Post-Quantum Cryptography with OpenSSL

Quantum computing poses an imminent threat to today's cryptographic protocols, requiring urgent migration to post-quantum cryptography. Most projects include common protocols like TLS, mTLS, QUIC, SSH, OAuth, IPSec and many more in their security implementation. This session demonstrates practical implementation of these protocols and approaches to migrating them using OpenSSL's post-quantum capabilities (ML-KEM for key generation and ML-DSA for signatures). The presentation introduces a prototype framework that implements security protocols with both classical and post-quantum algorithms, enabling developers to understand protocol mechanics, migration challenges, and hybrid approaches. The framework uses OpenSSL and open source libraries such as LibOQS, OQS Provider, and StrongSwan to showcase real-world PQC integration. The session explores the working of these migrations with existing open source projects, demonstrating real-world PQC integration patterns. Attendees will gain hands-on experience with PQC implementation and leave with actionable guidance for migration projects.