Agenda

In the age of AI, security requires more than just policy—it demands verifiable cryptographic proof. Join us to explore the next generation of trusted infrastructure, built to secure your most sensitive assets without slowing down innovation.

In this session, we will:

• Unveil Confidential External Key Manager: Learn how to maintain complete possession and control of your keys within a highly performant, verifiable, and confidential environment.
• Demonstrate Single-Tenant Cloud HSM: Discover a new standard for cryptographic isolation, offering absolute control over dedicated HSM clusters with zero operational overhead.
• Simplify Compliance & Resiliency: See how Cloud HSM for Google Workspace streamlines compliance for regulated enterprises, alongside new resiliency features for Secret Manager.

Quantum cryptography isn’t a distant concept; it’s an active, deployable technology that will define the future of secure communication.

This presentation explores how quantum mechanics is reshaping cybersecurity. We’ll cover the limitations of classical encryption in a post-quantum world, the principles behind Quantum Key Distribution (QKD), and real-world implementations already in use. Attendees will also get a glimpse into the quantum-safe future being built today by governments and enterprises globally.

Nation-states are today collecting encrypted organizational communications with one goal: decrypt them when quantum computers arrive. This confirmed strategy—Harvest Now, Decrypt Later—is named in NSA/CISA joint advisories and attributed to nation-state actors including China’s Volt Typhoon and Salt Typhoon groups. Meanwhile, every commercial Quantum Key Distribution system ever independently tested has been defeated through hardware attacks. And in July 2022, a NIST Post-Quantum Cryptography finalist was completely destroyed by a classical laptop attack in 62 minutes.

This session is a practitioner’s field guide to the quantum threat landscape for IT security engineers. No physics background required. We cover six threat domains: HNDL campaigns and which data categories are already at risk; Shor’s and Grover’s algorithms and their precise impact on RSA, ECDH, AES-128, and SHA-256;three physical attacks that defeated commercial QKD hardware with confirmed evidence; implementation vulnerabilities in the surviving NIST PQC standards including timing side-channels in ML-KEM; and a specific week-by-week enterprise migration roadmap based on the 2024 NIST standards.

This session is the result of deep research into published attack papers, hardware demonstrations, and the NIST PQC standardization process—distilled into intelligence that IT security teams can act on immediately.

While “Q-Day” may still feel like a distant milestone, the adversarial playbook has already shifted: encrypted enterprise data intercepted today will be decrypted by tomorrow’s quantum computers. This “Harvest Now, Decrypt Later” reality turns quantum readiness from a theoretical future exercise into an immediate operational mandate.

In this fireside chat, Michael Klieman (VP of Product Management at Entrust and co-founder of Haderaq) cuts through the industry hype to examine the practical frontlines of post-quantum cryptography (PQC). We’ll explore the real engineering and cryptographic friction points enterprise security leaders face right now—from managing oversized PQC keys and certificate bloat to operationalizing true crypto-agility across legacy infrastructure. Attendees will walk away with an unvarnished assessment of current quantum risks, actionable insights into post-NIST algorithm deployment, and a pragmatic roadmap to modernize machine identities and PKI before time runs out.

This session examines where the first quantum-related lawsuits are likely to come from, which legal theories are most likely to survive early dismissal, and how the litigation landscape may develop as quantum decryption events begin to occur. Using existing data breach litigation, regulatory enforcement actions, and negligence doctrine as reference points, the panel develops a practical roadmap for a risk that many organizations have not yet assessed.

The discussion begins with claims that are already foreseeable:

• Federal contractors that fail to meet the 2030 post-quantum cryptography deadline
• Software vendors that make quantum-ready representations they cannot support
• Organizations that continue to protect long-life data, such as health records, financial records, and legal communications, with legacy cryptography while harvested data remains vulnerable to future decryption

The panel then addresses a more difficult question. When a quantum decryption event occurs, what must a plaintiff prove? The discussion covers standing, timing of harm, statutes of limitation, and evidentiary requirements. These issues have not yet been tested in court, but there is no reason to assume that quantum-related harms will remain outside the legal system.

The foundation for future negligence claims already exists. Four attorneys will examine how these claims may develop and provide technical practitioners with a practical view of the litigation risks that quantum computing may create.

Artificial Intelligence is no longer just a driver of productivity—it is the primary battlefield of modern global conflict. Yet, the foundation supporting today’s AI—from encrypted data pipelines and sovereign compute clusters to decentralized model training—relies on classical public-key cryptography that is fundamentally vulnerable to quantum adversaries. This session connects geopolitical volatility with the immediate risks to model integrity, data sovereignty, and cognitive security at the intersection of AI and quantum computing.

We will examine how major powers (such as China, Russia, and the EU) are racing toward “Harvest Now, Decrypt Later” strategies targeting proprietary model weights, training datasets, and semiconductor supply chains. The discussion then pivots to the integration of Agentic AI in critical infrastructure, highlighting how adversaries are pairing automated exploit engines with side-channel attacks to compromise post-quantum implementations. Join us for a forward-looking strategy that moves beyond ethical frameworks to deliver a battle-tested roadmap for crypto-agility, PQC migration, and model alignment in an era of unprecedented quantum-enabled disruption.

The post-quantum transition is no longer simply a standards discussion. New U.S. government direction is widening the conversation, particularly for critical infrastructure and the organizations that support it. Yet policy cannot expose hidden dependencies or safely migrate complex environments. This keynote examines the gap between direction and execution, and shows why discovery, ownership, automation, and crypto agility must become enduring enterprise capabilities.