Norman Ashley

— On the schedule —

Navigating the Post-Quantum Transition: Integrating FAEST and Classic McEliece into libOQS

As the cryptographic community accelerates its migration toward quantum-resistant standards, the importance of having a space for experimental, modular, and functional libraries has never been greater. This presentation explores the practical challenges and technical implementation details of integrating two distinct Post-Quantum Cryptographic (PQC) algorithms—FAEST and an updated implementation of Classic McEliece—into the libOQS (Open Quantum Safe) framework. The session will begin with a brief introduction to libOQS and demonstarte how it can bridge the gap between theoretical PQC research and real-world application. We will provide a high-level overview of the selected algorithms: FAEST, a symmetric-based signature scheme, and the updated version of Classic McEliece. The core of the talk will focus on the end-to-end integration lifecycle, covering the following technical milestones: Architectural Alignment: Mapping algorithm-specific requirements to the libOQS API to ensure consistency and modularity. Build System Integration: Navigating the complexities of integrating external C-based implementations into the existing build pipeline. OQS Provider Integration: Extending the utility of these algorithms by integrating them into the OQS Provider, enabling their seamless use within the OpenSSL. Testing with OpenSSL: Implementing rigorous cross-platform testing protocols to ensure functional correctness and evaluating performance trade-offs within OpenSSL-based environments. Attendees will gain actionable insights into the hurdles of PQC integration, common pitfalls in cross-platform cryptographic development, and best practices for contributing to open-source security libraries. Whether you are a security researcher, a developer, or a system architect preparing for the post-quantum era, this session will provide a clear, technical roadmap for bringing new PQC primitives into your production-ready toolsets. By the end of the session, participants will understand not just the "how-to" of integration, but the broader implications for securing the future of digital communication.