Post-Quantum Cryptography Alliance - Technical Advisory Council (TAC) Meeting 24th September, 2025

View Recording
Recordings are available on your Open Profile page under Past Meetings
Join the meeting
PQCA Meeting Calendar
Discord Server

Antitrust Policy Notice

Linux Foundation meetings involve participation by industry competitors, and it is the intention of the Linux Foundation to conduct all of its activities in accordance with applicable antitrust and competition laws. It is therefore extremely important that attendees adhere to meeting agendas, and be aware of, and not participate in, any activities that are prohibited under applicable US state, federal or foreign antitrust and competition laws. Examples of types of actions that are prohibited at Linux Foundation meetings and in connection with Linux Foundation activities are described in the Linux Foundation Antitrust Policy available at linuxfoundation.org/antitrust-policy. If you have questions about these matters, please contact your company counsel, or if you are a member of the Linux Foundation, feel free to contact Andrew Updegrove of the firm of Gesmer Updegrove LLP, which provides legal counsel to the Linux Foundation.

Voting Representative Attendance (Alphabetical by 1st name)

Premier Member Representatives

  • Brian Jarvis, Amazon Web Services Inc. [TAC Chair]
  • Norman Ashley, Cisco
  • Yarkin Doroz, NVIDIA
  • JP Lomas, QRL
  • Michael Maximilien, IBM
  • Nicklas Körtge, IBM Research Zurich

### Project Representatives

  • Matthias Kannwischer, TSR

Non-Voting Representative Attendance

Member Companies

  • Andreas Schade, IBM
  • Joe Livingston, IBM
  • Prevek Sharma, University of Waterloo

LF Staff

  • Christina Harter
  • Hart Montgomery
  • Min Yu
  • Ry Jones

Other Attendees

  • Aditya Koranga, NgKore [TAC Vice Chair]
  • Katarina (Siemens)
  • Pedro Uliana (EigenQ)

Meeting Agenda

  1. Motion to change meeting minutes process (GitHub PR-based workflow)

  2. Welcome and introductions (Katarina, Siemens; Pedro, EigenQ)

  3. Follow-ups

    • Tooling WG: update on project transition (IBM review of charter, CBOMKit)

    • Outreach committee update

  4. Lifecycle document annual review

  5. Project metrics and growth planning

  6. Project status updates

    • OQS

    • PQCP

    • Tooling WG / CBOMKit

  7. Other business: Siemens CBOMKit pipeline blog post

Discussion & Updates

GitHub for TAC Meeting Minutes

The TAC discussed a new GitHub-based system for managing agendas and meeting minutes.

  • Ry demonstrated a pull request approach with automated labeling to streamline publication.

  • Christina will implement the new approach, opening PRs ahead of meetings.

  • Brian will populate agendas and confirmed that the upcoming meeting will include a six-month retrospective.

  • Advantages highlighted: durable links in invitations, transparency, and improved tracking of agendas/minutes.

Introduction of 1st Time Attendees

  • Pedro Uliana (EigenQ): working on quantum random number generators and post-quantum cryptography.

  • Katarina (Siemens Health Engineers): shared her work on post-quantum crypto, including a LibOQS-based healthcare protocol prototype and an Azure CI/CD pipeline.

CBOM Kit Project Progress

  • Andreas reported IBM’s approval of legal review and minor charter updates.

  • Hart confirmed that a redlined version would be sent for legal finalization.

  • Katarina expressed interest in joining the technical steering committee.

Outreach Committee Update

  • Christina updated on outreach:

    • Wiki page for past slides/recordings created.

    • October meeting canceled.

    • November meeting will cover the 2026 outreach plan, including a new webinar program.

Lifecycle Document Review

  • Reviewed PR #99 for lifecycle document updates.

  • Aditya approved proposed changes.

  • Yarkin raised questions on TAC involvement in lifecycle changes; the group agreed TAC approval should remain required.

  • Brian will clarify this in the updated document.

Project Health Metrics

  • Projects asked to identify health/maturity metrics, starting with LFX Insights dashboards:

  • Hart will join the next TSC meeting to explain lifecycle metrics.

  • Brian will create issues in project repos and organize a retrospective (using EasyRetro.io).

  • Aditya noted earlier experiments with Google Slides for updates (initiated by Balaji but abandoned).

Project Updates

  • OQS: deferred; no representatives present.

  • PQCP: Matthias reported progress toward a new release, likely next month.

  • Tooling WG / CBOMKit: Andreas confirmed readiness to move forward.

Other Business: Azure CI-CD Cryptography Scanner

  • Katarina presented a new Azure CI/CD pipeline built on CBOMKit to scan cryptographic algorithms in repos and dependencies.

  • Proposed as a CBOMKit sub-project with publication as a blog post.

  • Hart and Andreas agreed to support positioning it as a sub-project.

  • Next steps: blog post draft to be shared with Christina or Hart for review.

Next Steps / Action Items

Action Item Owner Status / Due Date
Implement GitHub-based TAC meeting minutes process and open PRs ahead of meetings Christina Before next meeting
Populate agendas in TAC meeting PRs Brian Before next meeting
Suggest lifecycle doc clarifications (TAC approval required for stage changes) Brian Pending PR update
Create issues in project repos requesting health and maturity metrics Brian Before next meeting
Prepare and run retrospective at next TAC meeting (EasyRetro.io) Brian Next TAC meeting
Send Hart a redlined CBOMKit charter Andreas Before next meeting
Add Katarina to the CBOMKit technical steering committee Andreas Before next meeting
Attend PQCP TAC meeting to explain lifecycle metrics Hart Next PQCP TAC meeting
Finalize Azure CI/CD pipeline blog post draft and send for review Katarina Before next meeting
Work with Andreas to position Azure pipeline as CBOMKit sub-project Katarina Before next meeting

Adjourned: 7:48am PDT.