The PKI Consortium represents a coalescence of the leading figures in digital trust, represented by vendors across the stack from the silicon to the application layer. As a result, its annual Post-Quantum Cryptography (PQC) conference—set this year in Amsterdam from December 1 to 3—is a much-anticipated event, with in-person tickets selling out months in advance.

A shimmering array of cryptographic expertise is packed into one building, making the PQC Conference a goldmine of information for analysts and vendors alike. This blog post highlights some of the most influential technological and strategic updates to look out for and monitor across the course of the event to help attendees—both in-person and virtual—navigate the wealth of knowledge that is set to be on display.

Attending PQC Conference Amsterdam 2026? Book a quick conversation with Senior Research Analyst Aisling Dawson to discuss the future of quantum-safe technologies and how your organization is responding. Let's Connect

Technological Updates to Look Out For

How Vendors Are Approaching Lightweight Cryptographic Implementations

Size and compute constraints remain critical pain points across the industry when it comes to the significantly larger and compute-intensive PQC algorithms. Google’s announcement of more compact Merkle Tree Certificates (MTC) lit the match on lightweight cryptographic implementations earlier this year within the web Public Key Infrastructure (PKI) segment, so updates on how MTCs can be integrated into adjacent applications or markets will be key.

Further, quantum-safe PKI-Internet of Things (IoT) will be another significant area for researchers and industry leaders to dig into with vendors, given the persistent device constraints rearing their heads. Vendors to look out for include browser PKI giants like DigiCert and Sectigo, as well as cryptographic experts from the Utimaco, PQCShield, AppViewX, NIO, and Entrust teams.

How PQC Can Be Bootstrapped Onto Existing Hardware and Deployed Device Fleets

Silicon-based constraints when it comes to instituting system-wide quantum resilience are set to be a hot topic of discussion at the conference, with talks from Infineon and Hitachi here. Given the secure-by-design and Over-the-Air (OTA) update requirements introduced by the European Union (EU) Cyber Resilience Act (CRA), hardware constraints to secure IoT and Industrial IoT (IIoT) devices, embedded microcontrollers, and vehicle networks are a significant talking point.

Additionally, large volumes of existing smart cards and brownfield IoT devices face the same memory and size constraints addressed above. Speaking with industry leaders in Operational Technology (OT) and IIoT settings such as Siemens and Hitachi will be especially vital, as well as those with expertise in OT and Information Technology (IT) settings such as OmniTrust, Keyfactor, and Palo Alto Networks.

How Agentic AI and Quantum Resilience Efforts Are Intersecting

Despite the propounded workflow efficiency gains, Artificial Intelligence (AI) agents are introducing a new identity and governance risk within enterprises, particularly in Continuous Integration/Continuous Delivery (CI/CD) and DevOps pipelines. The contribution of AI agents to the growing proliferation of Non-Human Identities (NHIs) within organizations is forming part of the ballooning crypto sprawl problem. Yet, at the same time, Agentic AI can serve to accelerate PQC readiness by supporting risk assessment, performing behavioral analysis, and identifying compliance gaps.

Understanding how vendors and industry leaders are exploring arguably one of the most influential dynamics within digital trust—that between AI and quantum resilience—is necessary for those working and operating with cryptographic assets. Leading vendors in digital signing, NHI, and AI security are critical contact points for the latest updates here, including IBM, Cryptomathic, etc.

Strategic Updates to Look Out For

How Quantum Readiness Is Measured Within Verticals and Regions

While budget constraints also remain a huge issue, the actionability of PQC migration plans remains a hurdle for those seeking to kickstart their migration. Quantum readiness itself has been a somewhat abstract concept, eluding objective quantification and standardized categorization, while Cryptographic Bills of Materials (CBOMs) provide granular visibility that many organizations still do not know how to act upon. Yet, increasing work by vendors and governments on standards to assess quantum readiness is moving the needle forward when it comes to making PQC readiness more measurable and thus more actionable. That includes vendors like Thales, Keyfactor, Terra Quantum, Encryption Consulting, and QIZ Security, and governments in Singapore and Hong Kong, with their Quantum-Safe Handbook and Quantum Readiness Index and Quantum Preparedness Index, respectively.

How NIST IR 8547 and Regional Regulatory Efforts Are Impacting Operations and Customer Needs

Published at the end of October, the National Institute of Standards and Technology’s (NIST) quantum transition guidance accompanies the U.S. June Executive Orders on Quantum Resilience to produce a top-down framework of quantum transition within the United States with mandated migration activities and timelines targeted exclusively toward federal agencies.

More information on the operational influence of this approach versus the EU’s bottom-up strategy, which encompasses critical infrastructure in a broader sense than strictly federal agencies, will be a critical conversation topic. When it comes to standardization, product validation, and global PQC regulation, speaking with experts from the Crypto4A, Securosys, and IBM teams will be critical.

How Different Segments, Countries, and Regions Look When It Comes to Quantum-Safe Security Posture and Strategy

With regulation providing the most influential impetus for change thus far across the PQC landscape, understanding how vertical and region-specific standards and legislative instruments (e.g., the impending EU Quantum Act, CNSA 2.0, Japan’s CRYPTREC Ciphers List, X9, PKCS#11 v3.2) are shifting customer needs and vendor strategy is a prerequisite for continuing to operate and research this space.

Trust Now, Forge Later (TNFL) Versus Harvest Now, Decrypt Later (HNDL) Timelines

Unlike the HNDL threat, which focuses on confidentiality and is well propounded across the broader security space, TNFL remains underappreciated in mainstream security conversations and requires a different approach and timeline to quantum resilience. For those attending the PKI Consortium PQC Conference, understanding how vendors and industry leaders are tackling the TNFL threat is just as important as the HNDL threat given the risk TNFL poses with regard to the integrity of PKI infrastructure and signed updates.

Conclusion

Another PQC Conference, another year closer to looming quantum deadlines. For a deeper conversation on emerging trends, changes, and technology shifts in cyber and digital security, schedule a brief meeting.