Call for Submissions - NIST Workshop on Crypto Agility

[Moody, Dustin (Fed)]

Call for Submissions - NIST Workshop on Crypto Agility

April 17-18, 2025

(Virtual Event Only)

Submission Deadline: March 30, 2025

NIST recently released Cybersecurity White Paper, Considerations for Achieving Crypto Agility - Strategies and Practices. This workshop is to accommodate discussions among stakeholders and inspire development of environment specific crypto agility strategies and guidelines. 

NIST invites proposals of presentations and panels for the crypto agility workshop.

NIST welcomes submissions in the form of discussion papers, surveys, presentations, research, case studies, panel proposals, and participation from all interested parties, including researchers, system architects, implementors, vendors, and users. NIST will post any accepted submissions on the conference website after the conference; however, no formal proceedings will be published.

Topics for submissions include but are not limited to:

• Crypto agility strategies and approaches in your working field, e.g. communication protocols, different hardware platforms, software libraries, APIs, applications, enterprise IT systems, financial service, operational technology (OT) environment, etc.
• Challenges in pursuing crypto agility and solutions, e.g. resource limitations
• Steps or strategies for organizations to pursue crypto agility
• Methods on assessment and evaluation of crypto agility maturity
• Lessons learned in the past transition and what can be done better
• Potential security issues in achieving crypto agility and countermeasures
• Crypto agility requirements in the standards

Additional relevant topics are welcome. In general, NIST will prioritize proposals that reflect practical and operational implementation approaches and examples.

Submissions should be provided electronically, either in PDF or PowerPoint format. Given the limited time for this call, NIST seeks extended abstracts of 1-2 pages describing the proposed presentation. Alternatively, you can submit slides of the proposed presentation. Proposals for panels should include the topics for discussion, as well as proposed panelists and an indication of which panelists have confirmed their participation.

Please submit the following information to crypto-...@nist.gov:

• Name, affiliation, email, phone number (optional), postal address (optional) for the primary submitter
• First name, last name, and affiliation of each co-submitter
• Extended abstract, presentation, or panel proposal in electronic format as an attachment

 

All submissions will be acknowledged. General information about the conference, including registration information, will be available at the conference website: https://cms.csrc.nist.gov/preview/events/2025/crypto-agility-workshop

[John Mattsson]

Hi Dustin,

Great initiative! More focus on crypto agility is definitely needed. The link you sent does not work. The correct link seems to be

https://csrc.nist.gov/events/2025/crypto-agility-workshop

Cheers,
John

--
You received this message because you are subscribed to the Google Groups "pqc-forum" group.
To unsubscribe from this group and stop receiving emails from it, send an email to pqc-forum+...@list.nist.gov.
To view this discussion visit https://groups.google.com/a/list.nist.gov/d/msgid/pqc-forum/PH0PR09MB8667D75EA8FD064A25990E4BE5D02%40PH0PR09MB8667.namprd09.prod.outlook.com.

[John Mattsson]

 

Hi,

These are Ericsson’s comments on NIST CSWP 39.
https://emanjon.github.io/NIST-comments/2025%20-%20CSWP%2039.pdf

 

Looking forward to the workshop. While cryptographic agility offers security benefits, it can also introduce complexity, which is often considered a drawback in security design. I think the document is too negative regarding EAP and crypto agility with protocol versioning, and too positive regarding APIs.

 

I think crypto agility with protocol versioning can work well, I think EAP-AKA’-FS with X25519 and X-Wing are great examples of how EAP can enable cryptographic agility and facilitate migration to PQC, and while APIs are great for testing, they often significantly complicates and delays cryptographic transitions from one algorithm to another.

 

Cheers,

John

[dustin...@nist.gov]

All,

The agenda for the NIST workshop on Crypto Agility is now available:

https://csrc.nist.gov/csrc/media/Events/2025/crypto-agility-workshop/documents/agenda-crypto-agility-2025.pdf

The workshop will be virtual, and will be held in two weeks on April 17-18.  There is no registration fee to attend this workshop, however registration is required.  We will be using the Zoom for Government platform.  The event webpage is:

https://csrc.nist.gov/events/2025/crypto-agility-workshop

Dustin Moody

[dustin...@nist.gov]

Dear ALL,

 

The video for the Crypto Agility workshop is available at the event web site: 

https://csrc.nist.gov/events/2025/crypto-agility-workshop

Thanks,

Dustin Moody

NIST PQC