Post-Quantum Cryptography Alliance - Technical Advisory Council (TAC) Meeting 16th July, 2025

Antitrust Policy Notice

Voting Representative Attendance (Alphabetical by 1st name)

Premier and General Member Representatives

Brian Jarvis, Amazon Web Services Inc. [TAC Chair] Nicklas Körtge (IBM Research Zurich) - Not attended
Norman Ashley, Cisco
Sophie Schmieg, Google (Not attended)

  • Yarkin Doroz, NVIDIA (Not attended)
  • Michael Maximilien (IBM) (Not attended)
  • JP Lomas (QRL) (Not attended)

Project Representatives

  • Norman Ashley, Cisco [OQS]
  • Matthias Kannwischer [PQCP] (TCR)

Non-Voting Representative Attendance

  • Joe Livingston (IBM)
  • Andreas Schade (IBM) (Representing Niklas Kortge)
  • Prevek Sharma (University of waterloo) (Not attended)

LF Staff

  • Hart Montgomery (not attended)
  • Balaji Ethirajulu

Other Attendees

  • Aditya Koranga (CORAN Labs) (TAC Vice chair)
  • Sandip Dholakia - SAP
  • Emily Fox - RedHat
  • Matvii Kistaiev (IntellectEU) - Not attended
  • Miguel Diaz Gonçalves (Portugal customs & Tax authority)
  • Angel Camacho
  • Yann Puech (Qorvo.com) - not attended
  • Sebastian Ganson
  • Shubham Kumar (Telecom industry)

Introduction of 1st time attendees

  • Sandip Dholakia joined from SAP.

Meeting agenda

Brian Jarvis presented the meeting agenda.

  • Welcome and introduction of any new attendees
  • [Andreas / Niklas] CBOMkit demo
  • Tooling WG - Should CBOMkit become a dedicated project?
  • Blog updates (Tooling, PQCP)
  • Follow up from 2025-07-02: Project lifecycle stages for OQS and PQCP
  • Project status updates
    • OQS
    • PQCP
    • Tooling

CBOM kit presentation and demo - Andreas Schade

Andreas Schade presented the CBOM Kit:

  • What is a CBOM Kit and what it consists
  • Demo
    • CBOM kit service and viewer
    • CBOM Kit - action
    • SONAR crypto plugin- feature

Schade also asked about creating a CBOM kit project/TSC structure. Jarvis replied that we have a project lifecycle process and we will follow that process.


PQCA - Blogposts

Two Blogposts are getting ready - Mlkem native and CBOM KIT. Ethirajulu stated that the blogs are sent to the content review committee and once they completed their review, the blogs can be posted in our social media channels and websites.


OQS Update - Norman Ashley

  • LibOQS version 0.14 released.
  • OQS provider 0.10 will be released shortly

PQCP Update - Matthias Kannwischer

  • Project Lifecycle Stage Review (see TSC issue #178)
    • Self evaluation: Growth Stage (striving for Impact Stage soon)
    • Rationale: mlkem-native is adopted by both AWS-LC and liboqs
    • It makes little sense to evaluate PQCP as a whole;
      Our interpretation: At least one sub-project is in Growth Stage
  • mlkem-native release announcement Blog post. Ready to publish?
  • Discussing common documentation standards for PQCP projects
    (see TSC issue #151)
  • mldsa-native: Major progress in CBMC proofs;
    Top-level keygen and verification proven - only missing: signing
  • slhdsa-c: Supports all 12 FIPS 205 parameter sets and ~300 experimental reduced parameter sets under discussion for standardization by NIST.
  • Next PQCP TSC Meeting: 2025-08-07 13:00 UTC

Tools WG Update - No updates


New Business

  • Nil

Open Action Items / Issues Review

  • A request to present an OQS survey. We will present the OQS survey in one of our next meetings.