I gave the presentation “The Post-Quantum Apocalypse Is Already Upon Us” at the 4th International Workshop on Trends in Digital Identity (TDI 2026) in Verona, Italy. My talk abstract was:

“The future is already here — it’s just not evenly distributed” is an apt description of the impact of quantum computers on cryptography and its use in our identity systems. We all know that quantum computers are predicted to be able to break the cryptographic algorithms used in today’s identity systems (RSA, Elliptic Curve, etc.) at some unknown point in the future. But this possibility has huge implications right now. “Disruptive” is an understatement. Every piece of software using cryptography has to be updated before Cryptographically Relevant Quantum Computers (CRQCs) are created (and we don’t know when that will be). “Store now — decrypt later” attacks require action now, not later. Are you using software and protocols that may never be updated for the post-quantum world (such as SAML)? Are you comfortable with your migration path to fully quantum-safe software? This presentation will help you evaluate what you need to do when and how and why to avoid being a victim of the Post-Quantum Apocalypse.

This resulted in an active and useful discussion on what the practical barriers are to updating our computing environments to be secure in the advent of Cryptographically Relevant Quantum Computers (CRQCs), and why it’s critical to start now. Topics included cryptographic algorithms, standards, updating software, and possibly the most difficult thing of all – acting in the presence of uncertainty.

See the presentation deck I used (pptx) (pdf).

Thanks to the FBK Center for Cybersecurity for the great event!