OpenSSL Conference

OpenSSL Conference

Postquantum cryptography in TLS
2025-10-09 , Belvedere I/ Security, Compliance & the Law

The National Cyber and Information Security Agency of the Czech Republic has confirmed that “harvest now, decrypt later” attacks are no longer a theoretical threat—they are already a reality. In this talk, I will demonstrate how to protect sensitive data by integrating post-quantum key exchange into the TLS protocol. This hybrid approach, combining classical and quantum-resistant algorithms, is already supported by major web browsers and several TLS libraries. Attendees will learn how to adopt these mechanisms today to provide practical, forward-compatible security in the face of emerging quantum threats.


The National Cyber and Information Security Agency of the Czech Republic has confirmed that “harvest now, decrypt later” attacks are no longer a theoretical threat—they are already a reality. In this talk, I will demonstrate how to protect sensitive data by integrating post-quantum key exchange into the TLS protocol. This hybrid approach, combining classical and quantum-resistant algorithms, is already supported by major web browsers and several TLS libraries. Attendees will learn how to adopt these mechanisms today to provide practical, forward-compatible security in the face of emerging quantum threats.

Jakub Onderka is a member of GovCERT.CZ, a government unit within the National Cyber and Information Security Authority responsible for managing cybersecurity incidents affecting critical infrastructure in the Czech Republic. In his role, he has contributed to implementing post-quantum key exchange mechanisms in the TLS protocol, enhancing the security of Portal NUKIB—the primary communication platform for cybersecurity in Czechia.