Quantum-Resistant Cloud Native Security: Insights from Andrés Vega & Hugo Landau 🔐

Don't miss out! Join us at our next Flagship Conference: KubeCon + CloudNativeCon events in Hong Kong, China (June 10-11); Tokyo, Japan (June 16-17); Hyderabad, India (August 6-7); Atlanta, US (November 10-13). Connect with our current graduated, incubating, and sandbox projects as the community gathers to further the education and advancement of cloud native computing. Learn more at https://kubecon.io

Beyond Classical Cryptography: Building Quantum-Resistant Cloud Native Infrastructure With SPIFFE - Andrés Vega, M42 & Hugo Landau, Messier42

As quantum computing advances, traditional cryptographic systems face unprecedented vulnerabilities. We demonstrate integrating post-quantum cryptography (PQC) into cloud native infrastructure through SPIFFE identities, focusing on networking and security. We'll examine NIST's 2024 PQC standards and their key advantage: improved implementation error resistance.

Our live demonstration showcases end-to-end PQC in Kubernetes using SPIFFE/SPIRE, with L7 filtering, mutual authentication, and quantum-resistant cross-cluster communication. We cover:

* Deployment of PQC-enabled SPIRE, Cilium, and Envoy with Kyber KEM and Dilithium3 X.509 certificates
* Implementation of quantum-resistant (m)TLS
* Cilium network policies for L7 filtering with PQC
* Inter-node traffic security using Envoy mTLS with PQ algorithms

Attendees will gain practical insights and strategies for transitioning their infrastructure to quantum-resistant security in cloud native environments.