We are the Real World PQC workshop.

Our aim is to bring together the industry, academia and standardization bodies to think about the tasks we will encounter ahead of integrating post-quantum algorithms to the networks, protocols and systems we use today. Our aim will be informed by sharing knowledge about the latest advances of cryptanalysis, the state of different algorithms, and implementation concerns.

We believe it is very important to start organizing around this topic now as we begin to face the challenges of migrating our systems to post-quantum cryptography. Welcome to the first instantiation of our workshop!

STEERING COMMITTEE

Daniel Apon
MITRE

Sofia Celi
Brave

James Howe
SandboxAQ

Marc Manzano
SandboxAQ

Brian Vohaska
MITRE

SPEAKERS

Carlos Aguilar, SandboxAQ

Daniel Apon, MITRE

Martin Albrecht

Martin Albrecht, SandboxAQ

Sophia Celi

Sofía Celi, Brave

Charles Clancy, MITRE

Craig Costello

Craig Costello, Microsoft Research

Leo Ducas

Léo Ducas, CWI

Scott Fluhrer

Scott Fluhrer, Cisco Systems

Daniel Genkin

Daniel Genkin, Georgia Tech

James Howe

James Howe, SandboxAQ

Andreas Hulsing

Andreas Hülsing, Eindhoven University of Technology

Panos

Panos Kampanakis, Amazon

Tancrède Lepoint

Tancrède Lepoint, Amazon

Patrick Longa

Patrick Longa, Microsoft Research

Vadim Lyubashevsky

Vadim Lyubashevsky, IBM Research

Marc Manzano

Marc Manzano, SandboxAQ

Chloe Martindale

Chloe Martindale, University of Bristol

Rafael Misoczki

Rafael Misoczki, Meta

Dustin Moody

Dustin Moody, NIST

Ray Perlner

Ray Perlner, NIST

Thomas Pornin

Thomas Pornin, NCC Group

Thomas Prest

Thomas Prest, PQShield

Melissa Rossi

Mélissa Rossi, ANSSI

Tobias schneider

Tobias Schneider, NXP Semiconductors

Peter Schwabe

Peter Schwabe, Max Planck Institute for Security and Privacy, Radboud University

Douglas Stebila

Douglas Stebila, University of Waterloo

Ward Beullens

Ward Beullens, IBM Research

SCHEDULE

Time Activity
8:50 – 9:00 am Workshop Kick-Off – Daniel Apon (MITRE)
9:00 – 9:15 am Opening Remarks – Charles Clancy (MITRE)
9:15 – 9:45 am Invited Talk #1
NIST and PQC – Dustin Moody (NIST)
9:45 – 10:45 am Lessons Learned Talks of the selected candidates
9:45 am – Kyber – Peter Schwabe (Max Planck Institute for Security and Privacy)
10:00 am – Dilithium – Vadim Lyubashevsky (IBM Research)
10:15 am – Falcon – Thomas Prest (PQShield)
10:30 am – SPHINCS+ – Andreas Hülsing (Eindhoven University of Technology)
10:45 – 11:00 am Coffee Break
11:00 – 11:30 am Invited Talk #2
IETF Efforts in PQC – Douglas Stebila (University of Waterloo)
11:30 – 12:15 pm Roundtable #1 –  Implementation and side channels
Moderator: James Howe
Participants: Thomas Pornin (NCC), Tobias Schneider (NXP), Daniel Genkin (Georgia Tech), Mélissa Rossi (ANSSI), Patrick Longa (Microsoft Research)
12:15 – 1:30 pm Lunch Break
1:30 – 2:00 pm Invited Talk #3
ANSSI’s recommendations on the migration plan – Mélissa Rossi (ANSSI)
2:00 – 3:00 pm Roundtable #2 – Industry side discussion
Moderator: Marc Manzano
Participants: Carlos Aguilar (SandboxAQ), Rafael Misoczki (Meta), Craig Costello (Microsoft), Panos Kampanakis (AWS), Tancrède Lepoint (AWS), Scott Fluhrer (Cisco)
3:00 – 3:15 pm Coffee Break
3:15 – 4:00 pm Roundtable #3 – Current state of cryptanalysis
Moderator: Daniel Apon
Participants: Ward Beullens (IBM Research), Chloe Martindale (University of Bristol), Martin Albrecht (SandboxAQ, King’s College London), Leo Ducas (CWI), Ray Perlner (NIST)
4:00 – 4:30 pm Invited Talk #4
The bright present and future of lattice-based zero-knowledge proofs – Vadim Lyubashevsky (IBM Research)
4:30 – 5:15 pm Recent Results / Lightning Talks: GlowingMoltenHotRealPQC
(5 minute slots) Submissions open: please see below for information.
Moderator: Sofía Celi
5:15 – 5:30 pm Closing remarks  – Sofía Celi (Brave)

8:50 – 9:00 am

Workshop Kick-Off

Daniel Apon (MITRE)

9:00 – 9:15 am

 
Opening Remarks

Charles Clancy (MITRE)

9:15 – 9:45 am

Invited Talk #1

NIST and PQC

Dustin Moody (NIST)

9:45 – 10:45 am

Lessons Learned

Talks of the selected candidates

9:45 am – Kyber

                    Peter Schwabe (MPI-SP)

10:00 am – Dilithium

                    Vadim Lyubashevsky (IBM)

10:15 am – Falcon

                     Thomas Prest (PQShield)

10:30 am – SPHINCS+

                      Andreas Hülsing (TU/e)

10:45 – 11:00 am

Coffee Break

11:00 – 11:30 am

Invited Talk #2

IETF Efforts in PQC

Douglas Stebila (University of Waterloo)

11:30 – 12:15 pm

Roundtable #1 – 

Implementation and side channels

Moderator: James Howe

Participants: Thomas Pornin (NCC),

Tobias Schneider (NXP),

Daniel Genkin (Georgia Tech),

Mélissa Rossi (ANSSI),

Patrick Longa (Microsoft Research)

12:15 – 1:30 pm

Lunch Break

1:30 – 2:00 pm

Invited Talk #3

ANSSI’s recommendations on the 
migration plan

Mélissa Rossi (ANSSI)

2:00 – 3:00 pm

Roundtable #2 –

Industry side discussion

Moderator: Marc Manzano

Participants: Carlos Aguilar (SandboxAQ),

Rafael Misoczki (Meta),

Craig Costello (Microsoft),

Panos Kampanakis (AWS),

Tancrède Lepoint (AWS),

Scott Fluhrer (Cisco)

3:00 – 3:15 pm

Coffee Break

3:15 – 4:00 pm

Roundtable #3 –

Current state of cryptanalysis

Moderator: Daniel Apon

Participants: Ward Beullens (IBM),

Chloe Martindale (University of Bristol),

Martin Albrecht (SandboxAQ, KCL),

Leo Ducas (CWI),

Ray Perlner (NIST)

4:00 – 4:30 pm

Invited Talk #4

The bright present and future 
of lattice-based zero-knowledge
proofs

Vadim Lyubashevsky (IBM)

4:30 – 5:15 pm

Recent Results / Lightning Talks:

GlowingMoltenHotRealPQC

(5 minute slots)

Submissions open: please see below 
for information.

Moderator: Sofía Celi

5:15 – 5:30 pm

 
Closing remarks

Sofía Celi (Brave)

REGISTRATION

Registration is closed!

Register over: https://na.eventscloud.com/ereg/newreg.php?eventid=725607&

Lightning Talks

Time Talk
16:30 – 16:36 Post-Quantum Designated-Verifier zk-SNARKs with 5KB Proofs – Muhammed Esgin (Monash University)
16:36 – 16:42 A Post-Quantum Round-Optimal Oblivious PRF from Isogenies – Andrea Basso (University of Bristol/University of Birmingham)
16:42 – 16:48 Anonymity of NIST PQC KEMs – Keita Xagawa (NTT Social Informatics Laboratories)
16:48 – 16:54 K-Waay: Fast and Deniable Post-Quantum X3DH without Ring Signatures – Daniel Collins (EPFL)
16:54 – 17:00 Rosenpass – Hybrid post-quantum security for WireGuard in practice – Karolin Varner
17:00 – 17:06 Batch signatures: revisited – Carlos Aguilar (Sandbox AQ)
17:06 – 17:12 Quantum-Resistance in the Upcoming NIST Call for Threshold Schemes – Luís Brandão (NIST/Strativia)
17:12 – 17:18 PQC with NFC – Brian Vohaska and Nikolai Chernyy

16:30 – 16:36

 
Post-Quantum Designated-Verifier 
zk-SNARKs with 5KB Proofs

Muhammed Esgin (Monash University)

16:36 – 16:42

 
A Post-Quantum Round-Optimal 
Oblivious PRF from Isogenies

Andrea Basso (University of Bristol)

16:42 – 16:48

 
Anonymity of NIST PQC KEMs

Keita Xagawa (NTT)

16:48 – 16:54

 
K-Waay: Fast and Deniable 
Post-Quantum X3DH without 
Ring Signatures

Daniel Collins (EPFL)

16:54 – 17:00

 
Rosenpass – Hybrid post-quantum 
security for WireGuard 
in practice

Karolin Varner

17:00 – 17:06

 
Batch signatures: revisited

Carlos Aguilar (Sandbox AQ)

17:06 – 17:12

 
Quantum-Resistance in the 
Upcoming NIST Call for 
Threshold Schemes

Luís Brandão (NIST/Strativia)

17:12 – 17:18

 
PQC with NFC

Brian Vohaska (MITRE)

Nikolai Chernyy (SandboxAQ)

Muhammed Esgin, Monash University

Andrea Basso, University of Bristol/University of Birmingham

Keita Xagawa, NTT Social Informatics Laboratories

Daniel Collins, EPFL

Karolin Varner

Luís Brandão, NIST/Strativia

LOCATION

TOC Ariake Convention Hall

3 Chome-5-7 Ariake, 江東区 Koto City (Koto-ku)
Tokyo 135-0063

THANK YOU TO OUR SPONSORS!

ORGANIZED BY: