Beyond Classical Cryptography: Building Quantum-Resistant Cloud Native... Andrés Vega & Hugo Landau

Don't miss out! Join us at our next Flagship Conference: KubeCon + CloudNativeCon events in Hong Kong, China (June 10-11); Tokyo, Japan (June 16-17); Hyderabad, India (August 6-7); Atlanta, US (November 10-13). Connect with our current graduated, incubating, and sandbox projects as the community gathers to further the education and advancement of cloud native computing. Learn more at https://kubecon.io Beyond Classical Cryptography: Building Quantum-Resistant Cloud Native Infrastructure With SPIFFE - Andrés Vega, M42 & Hugo Landau, Messier42 As quantum computing advances, traditional cryptographic systems face unprecedented vulnerabilities. We demonstrate integrating post-quantum cryptography (PQC) into cloud native infrastructure through SPIFFE identities, focusing on networking and security. We'll examine NIST's 2024 PQC standards and their key advantage: improved implementation error resistance. Our live demonstration showcases end-to-end PQC in Kubernetes using SPIFFE/SPIRE, with L7 filtering, mutual authentication, and quantum-resistant cross-cluster communication. We cover: * Deployment of PQC-enabled SPIRE, Cilium, and Envoy with Kyber KEM and Dilithium3 X.509 certificates * Implementation of quantum-resistant (m)TLS * Cilium network policies for L7 filtering with PQC * Inter-node traffic security using Envoy mTLS with PQ algorithms Attendees will gain practical insights and strategies for transitioning their infrastructure to quantum-resistant security in cloud native environments.