October 7-9, 2025
October 7-9, 2025
REGISTER
NOW
BECOME A
SPONSOR
SPEAKERS
OUR MISSION
“We believe everyone should have access to security and privacy tools, whoever they are, wherever they are or whatever their personal beliefs are, as a fundamental human right.”
OUR MISSION
“We believe everyone should have access to security and privacy tools, whoever they are, wherever they are or whatever their personal beliefs are, as a fundamental human right.”
REGISTER
NOW
BECOME A
SPONSOR
SPEAKERS
Agenda 2025


Tuesday, October 7 Wednesday, October 8 Thursday, October 9
Filter by track: All | Business Value & Enterprise Adoption | Community, Contribution & the Future | Security, Compliance & the Law | Technical Deep Dive & Innovation

Tuesday, October 7

Prague/
Technical Deep Dive & Innovation		 Cracow/
Business Value & Enterprise Adoption		 Belvedere I/
Security, Compliance & the Law		 Belvedere IV/
Community, Contribution & the Future
9:00 AM
9:00 AM 15min
Welcome to the OpenSSL Conference Prague 2025
Tim Hudson, Matt Caswell, Hana Andersen
 
 
 
9:15 AM 35min
OpenSSL Foundation - Delivering the Mission: How We Help Deliver Privacy and Security Tools to Everyone
Matt Caswell
 
 
9:30 AM
 
 
 
 
9:50 AM 5min
Transition Break
 
9:55 AM 35min
OpenSSL Corporation
Tim Hudson, Anton Arapov
10:00 AM
 
 
 
 
 
10:30 AM
10:30 AM 30min
Coffee Break
10:30 AM 30min
Coffee Break
10:30 AM 30min
Coffee Break
10:30 AM 30min
Coffee Break
 
 
 
 
 
11:00 AM
11:00 AM 30min
Post-Quantum Interoperability in Action: How Collaboration is Shaping the PQC Future of Cybersecurity
Tomas Gustavsson
Technical Deep Dive & Innovation
11:00 AM 30min
OpenSSL in the Age of Hyperscalers: Oracle’s Perspective
Forrest Rae
Business Value & Enterprise Adoption
11:00 AM 30min
How Is the European Commission Planning to Break Cryptography This Time?
Marcel Kolaja
Security, Compliance & the Law
11:00 AM 30min
Tao of Open Souce Cryptography in China
Paul Yang
Community, Contribution & the Future
 
 
 
 
 
11:30 AM
11:30 AM 5min
Transition Break
11:30 AM 5min
Transition Break
11:30 AM 5min
Transition Break
11:30 AM 5min
Transition Break
 
11:35 AM 40min
Why Quantum Cryptanalysis is Bollocks
Peter Gutmann
Technical Deep Dive & Innovation
11:35 AM 40min
Why Small Businesses Don’t Take Security Seriously - And How to Fix That with 3 Simple Shifts
Brandan Payne
Business Value & Enterprise Adoption
11:35 AM 40min
The Privacy, The Secrecy and The Contradiction of NIS2 Framework
Rodrigo Panchiniak Fernandes
Security, Compliance & the Law
11:35 AM 40min
State of the OpenSSL Community as of 3.6
Jon Ericson
Community, Contribution & the Future
 
 
 
 
12:00 PM
 
 
 
12:15 PM 75min
Lunch Break
12:15 PM 75min
Lunch Break
12:15 PM 75min
Lunch Break
12:15 PM 75min
Lunch Break
 
 
12:30 PM
 
 
 
 
 
1:00 PM
 
 
 
 
 
1:30 PM
1:30 PM 40min
Privacy-Aware Computation: FHE, ZKP and MPC
Bill Buchanan
Technical Deep Dive & Innovation
1:30 PM 40min
Taking the OpenSSL into the PKCS#11 World and Vice Versa
Jakub Jelen
Business Value & Enterprise Adoption
1:30 PM 40min
Building a Cloud-Native Private CA with OpenSSL and CloudHSM: A Secure, Self-Serve PKI Architecture
Ranjan Kathuria
Security, Compliance & the Law
1:30 PM 20min
We Are Standing With the Polar Bears
Radana Dungelova
Community, Contribution & the Future
 
 
 
 
1:50 PM 20min
Distributed Governance with Loomio
Robert Guthrie, Anton Arapov
 
2:00 PM
 
 
2:10 PM 5min
Transition Break
2:10 PM 5min
Transition Break
2:10 PM 5min
Transition Break
2:10 PM 5min
Transition Break
 
2:15 PM 40min
Attacking and Defending Active Directory with OpenSSL: TLS, Certs, and Smartcard Chaos
Darryl G. Baker
Technical Deep Dive & Innovation
2:15 PM 40min
The Value of OpenSSL Providers in a Business Context
Brian Will
Business Value & Enterprise Adoption
2:15 PM 40min
PQC-Secure Distributed WSCA for EUDI Wallets
Aivo Kalu
Security, Compliance & the Law
2:15 PM 40min
Implementing oqsprovider
Michael Baentsch
Community, Contribution & the Future
 
 
2:30 PM
 
 
 
 
3:00 PM
3:00 PM 30min
Coffee Break
3:00 PM 30min
Coffee Break
3:00 PM 30min
Coffee Break
3:00 PM 30min
Coffee Break
 
 
 
 
 
3:30 PM
3:30 PM 45min
Fast, Constant-Time, Correct: Pick Three
Daniel J. Bernstein
Technical Deep Dive & Innovation
3:30 PM 30min
Replication of Quantum Factorisation Records on an 8-bit Home Computer, an Abacus, and a Dog
Stephan Neuhaus
Technical Deep Dive & Innovation
3:30 PM 45min
PANEL DISCUSSION
Legal and Commercial Pitfalls of Poor Open Source Management
Tim Hudson, Lina Böcker, Hayden Delaney, Tereza Formanová
Security, Compliance & the Law
3:30 PM 15min
Helping Calm the Panic About PQC: Join an Open Source Project
Norman Ashley
Community, Contribution & the Future
 
 
 
3:45 PM 30min
Leveraging OpenSSL: Building Compliance Confidence
Jaroslav Řezník
Security, Compliance & the Law
 
 
4:00 PM
4:00 PM 15min
Cryptographic Design Choices of OpenSSL Library and Their Automated Analysis
Lukasz Chmielewski
Technical Deep Dive & Innovation
 
 
 
4:15 PM 5min
Transition Break
4:15 PM 5min
Transition Break
4:15 PM 5min
Transition Break
4:15 PM 5min
Transition Break
 
4:20 PM 40min
Symmetric Keys: Beyond the Raw Bytes
Dmitry Belyavskiy
Technical Deep Dive & Innovation
4:20 PM 40min
Mission Impossible: Common Cryptography at Scale in a Diverse Enterprise
Jeff Johnson
Business Value & Enterprise Adoption
4:20 PM 40min
From Bug to Breach: Legal Lessons in Cryptographic Failures
Ashley Pusey
Security, Compliance & the Law
4:20 PM 40min
The Python Cryptographic Authority's OpenSSL Experience
Alex Gaynor, Paul Kehrer
Community, Contribution & the Future
 
4:30 PM
 
 
 
 
 

Wednesday, October 8

Prague/
Technical Deep Dive & Innovation		 Cracow/
Business Value & Enterprise Adoption		 Belvedere I/
Security, Compliance & the Law		 Belvedere IV/
Community, Contribution & the Future
9:00 AM
9:00 AM 50min
Side-Channel Leakage Verification Using Statistical Approach
Alicja Kario
Technical Deep Dive & Innovation
9:00 AM 50min
Adopting OpenSSL for the Enterprise Software
Thanigai Nallathambi
Business Value & Enterprise Adoption
9:00 AM 50min
The Use of OpenSSL in Common Criteria and FIPS 140 Certifications
Martin Ukrop, Vladimir Penaz
Security, Compliance & the Law
9:00 AM 50min
PANEL DISCUSSION
The Garden of Forking Paths: OpenSSL Edition
Anton Arapov, Dmitry Belyavskiy, Bob Beck, Alex Gaynor, Pedro Monreal, James Fuller
Community, Contribution & the Future
 
 
 
 
 
9:30 AM
 
 
 
 
9:55 AM 5min
Transition Break
9:55 AM 5min
Transition Break
9:55 AM 5min
Transition Break
9:55 AM 5min
Transition Break
10:00 AM
10:00 AM 30min
DNSSEC, the DANE PKI and OpenSSL
Viktor Dukhovni
Technical Deep Dive & Innovation
10:00 AM 30min
Red Hat's Path to Post-Quantum Cryptography with OpenSSL
Clemens Lang
Business Value & Enterprise Adoption
10:00 AM 30min
Navigating the FIPS 140-3 Certification Process – Tips for Developers and Integrators
Jason Lawlor
Security, Compliance & the Law
10:00 AM 30min
PANEL DISCUSSION
OpenSSL Committers
Matt Caswell, Dmitry Belyavskiy, Nicola Tuveri, Frederik Wedel-Heinen, David von Oheimb
 
 
 
 
 
10:30 AM
10:30 AM 30min
Coffee Break
10:30 AM 30min
Coffee Break
10:30 AM 30min
Coffee Break
10:30 AM 30min
Coffee Break
 
 
 
 
 
11:00 AM
11:00 AM 40min
The Road from Academic Research to OpenSSL Contributions
Nicky Mouha
Technical Deep Dive & Innovation
11:00 AM 40min
Using OpenSSL and Bouncy Castle for OT PKI Solutions
David von Oheimb
Technical Deep Dive & Innovation
11:00 AM 40min
Post-Quantum Cryptography (PQC) in China and the Development of PQC in Tongsuo
Yuchen Wang
Security, Compliance & the Law
11:00 AM 40min
PANEL DISCUSSION
OpenSSL Corporation - BAC
Kateřina Míčová, Billy Brumley, James Bourne, Jeff Johnson
Community, Contribution & the Future
 
 
 
 
 
11:30 AM
 
 
11:40 AM 5min
Transition Break
11:40 AM 5min
Transition Break
11:40 AM 5min
Transition Break
11:40 AM 5min
Transition Break
 
11:45 AM 45min
Making OpenSSL Approachable: Interactive Labs, Automation, and AI Insights
Aaron Escamilla
Technical Deep Dive & Innovation
11:45 AM 45min
Threat Modeling OpenSSL-Based Systems: A Hands-On Collaborative Workshop
Narayan Ram Narayanan
Technical Deep Dive & Innovation
11:45 AM 45min
Should Governments Pay for Open Source Maintenance? A European Answer
Nicholas Gates
Security, Compliance & the Law
11:45 AM 45min
PANEL DISCUSSION
OpenSSL Corporation - TAC
Kateřina Míčová, Aditya Koranga, Dmitry Belyavskiy, Nicola Tuveri, Paul Yang
Community, Contribution & the Future
 
 
12:00 PM
 
 
 
 
 
12:30 PM
12:30 PM 60min
Lunch Break
12:30 PM 60min
Lunch Break
12:30 PM 60min
Lunch Break
12:30 PM 60min
Lunch Break
 
 
 
 
 
1:00 PM
 
 
 
 
 
1:30 PM
1:30 PM 50min
PQConnect: Automated Post-Quantum End-to-End Tunnels
Tanja Lange
Technical Deep Dive & Innovation
1:30 PM 50min
Cryptographic Lifecycle Management: Discovery and Agility
Vladimir Soukharev
Technical Deep Dive & Innovation
1:30 PM 25min
Crypto-Agility: How It’s Both a Critical Component and a Complex Challenge
Joshua Schweiger
1:30 PM 20min
A Quick Dive into Email Forensics
Anežka Lábusová
Community, Contribution & the Future
 
 
 
 
1:50 PM 5min
Transition Break
 
1:55 PM 25min
Security Certification and New Cryptographic Constructions
Vashek Matyas
Security, Compliance & the Law
1:55 PM 25min
LUKS2 Open-source Disk Encryption and OpenSSL
Milan Brož
Community, Contribution & the Future
2:00 PM
 
 
 
 
2:20 PM 5min
Transition Break
2:20 PM 5min
Transition Break
2:20 PM 5min
Transition Break
2:20 PM 5min
Transition Break
 
2:25 PM 35min
Post-Quantum Ready: Integrating OpenSSL, Bouncy Castle, and QKD via KMIP for Future-Proof Key Management
Eric Ye
Technical Deep Dive & Innovation
2:25 PM 35min
Understanding Vectorization Through a New XTS Implementation
Dan Pittman
Technical Deep Dive & Innovation
2:25 PM 35min
Open and Secure
Nikita Tripathi
Security, Compliance & the Law
2:25 PM 35min
Building Excellent ASN.1 Tooling
Nico Williams
Community, Contribution & the Future
2:30 PM
 
 
 
 
 
3:00 PM
3:00 PM 30min
Coffee Break
3:00 PM 30min
Coffee Break
3:00 PM 30min
Coffee Break
3:00 PM 30min
Coffee Break
 
 
 
 
 
3:30 PM
3:30 PM 30min
The Adoption of Cloud Services Like SaaS, IaaS and PaaS
Krishna Narayanaswamy
3:30 PM 30min
Securing the Long Haul: Challenges with Long-Lived TLS 1.3 and QUIC Sessions
Yaroslav Rosomakho
Technical Deep Dive & Innovation
3:30 PM 30min
Securing Video Calls with QKD
Frederik Wedel-Heinen
Security, Compliance & the Law
3:30 PM 60min
PANEL DISCUSSION
BACs and TACs
Jon Ericson, James Bourne, Nicola Tuveri
Community, Contribution & the Future
 
 
 
 
 
4:00 PM
4:00 PM 5min
Transition Break
4:00 PM 5min
Transition Break
4:00 PM 5min
Transition Break
 
4:05 PM 25min
Post-Quantum Cryptography in Practice: Real-World Implementation with Firefox, OpenSSL, and Rust-Based Solutions
Akif Mehmood, Francesco Rollo
Technical Deep Dive & Innovation
4:05 PM 30min
The Open Quantum Safe Project, and Other Post-Quantum Research Projects
Douglas Stebila
Technical Deep Dive & Innovation
4:05 PM 25min
Post-Quantum Cryptography: Migration, Challenges and the Role of OpenSSL
Rodrigo Martín Sánchez-Ledesma
Security, Compliance & the Law
 
 
 
 
4:30 PM
4:30 PM 5min
Transition Break
4:30 PM 5min
Transition Break
4:30 PM 5min
Transition Break
 
4:35 PM 25min
OpenSSL Providers in the Automotive Environment
Peter Schmidberger, Dragan Zuvic
Technical Deep Dive & Innovation
4:35 PM 25min
OpenSSL as a Strategic Enabler: Building Scalable Security for OEM Threat Intelligence
Daniel T. Ashby
4:35 PM 25min
Terms of GitHub: What You Ship Might Sue You
Ashley Pusey
Security, Compliance & the Law
4:35 PM 25min
The Anatomy of a Broken Standards Body
Peter Gutmann
Security, Compliance & the Law
 
 
 
 

Thursday, October 9

Prague/
Technical Deep Dive & Innovation		 Cracow/
Business Value & Enterprise Adoption		 Belvedere I/
Security, Compliance & the Law		 Belvedere IV/
Community, Contribution & the Future
9:00 AM
9:00 AM 50min
Bouncy Castle and a Post-Quantum Future: API Changes, Protocol Issues, and Performance
David Hook
Technical Deep Dive & Innovation
9:00 AM 50min
OpenSSL in the Postfix MTA
Viktor Dukhovni
Technical Deep Dive & Innovation
9:00 AM 50min
Leveraging FedRAMP as a Transformative Tool for Organizations. From Checkbox to Culture
Bernie Leung, Sapna Paul, Bron Torres
Security, Compliance & the Law
9:00 AM 30min
Beyond the Filesystem: A Robust Approach to Key Storage
Marcel Dasen
 
 
 
 
 
9:30 AM
9:30 AM 20min
Network Traffic Encryptor on Linux Platform
Jan Havlín
Technical Deep Dive & Innovation
 
 
 
 
9:50 AM 5min
Transition Break
9:50 AM 5min
Transition Break
9:50 AM 5min
Transition Break
9:50 AM 5min
Transition Break
 
9:55 AM 30min
Constant-Time BIGNUM Is Bollocks
Billy Brumley
Technical Deep Dive & Innovation
9:55 AM 30min
Protocol Migration in Practice: From Classical to Post-Quantum Cryptography with OpenSSL
Shubham Kumar, Shankar Malik
Technical Deep Dive & Innovation
9:55 AM 30min
How I Met Your Algorithm: A Post-Quantum Love Story
Aditya Koranga
Security, Compliance & the Law
9:55 AM 30min
So Many Crypto Libraries, One FIPS 140-3 Certified Implementation!
Anthony Hu
Technical Deep Dive & Innovation
10:00 AM
 
 
 
 
10:30 AM
10:30 AM 30min
Coffee Break
10:30 AM 30min
Coffee Break
10:30 AM 30min
Coffee Break
10:30 AM 30min
Coffee Break
 
 
 
 
 
11:00 AM
11:00 AM 40min
Encrypted ClientHello - Lessons Learned from Trying to Do Something That Was Probably Too Complicated
Stephen Farrell
Technical Deep Dive & Innovation
11:00 AM 40min
Model-Side Confidential Inference: Leveraging OpenSSL for End-to-End Encrypted AI Inference Pipelines
Tarique Aman Aziz, Navinya Shende
Technical Deep Dive & Innovation
11:00 AM 55min
Post-Quantum Trails: An Educational Boardgame about Migration to PQC
Jelizaveta Vakarjuk, Petr Muzikant
Security, Compliance & the Law
11:00 AM 30min
Shape Shifting: Crypto Agility in the Rigid Compliance World
Norman Ashley, Ryan Hooper
Technical Deep Dive & Innovation
 
 
 
 
 
11:30 AM
11:30 AM 25min
I am going to break all the things
Bob Beck
Technical Deep Dive & Innovation
 
 
11:40 AM 5min
Transition Break
11:40 AM 5min
Transition Break
 
11:45 AM 45min
Performance Tuning With OpenSSL
Tomas Mraz
Technical Deep Dive & Innovation
11:45 AM 15min
Transition Break
 
 
11:55 AM 5min
Transition Break
11:55 AM 5min
Transition Break
12:00 PM
12:00 PM 30min
In-Situ Performance Measurement of Crypto-Algorithms in TLS v1.3
Martin Schmatz
Technical Deep Dive & Innovation
12:00 PM 30min
Oh! Won't Someone Think of the Identification Infrastructure!
Jussipekka Leiwo
Security, Compliance & the Law
12:00 PM 30min
Building an SP-800-90-B Compliant Entropy Provider
Jake Maynard, Adam Gorak
Technical Deep Dive & Innovation
 
 
 
 
 
12:30 PM
12:30 PM 60min
Lunch Break
12:30 PM 60min
Lunch Break
12:30 PM 60min
Lunch Break
12:30 PM 60min
Lunch Break
 
 
 
 
 
1:00 PM
 
 
 
 
 
1:30 PM
1:30 PM 40min
Insights into TLS performance: Evaluating OpenSSL 1.1.1 through 3.4 in Firewall Deployments
William Bellingrath
Technical Deep Dive & Innovation
1:30 PM 40min
Exploiting Hardware-Backed Keys With the New EVP_SKEY API
Holger Dengler, Reinhard Buendgen
Technical Deep Dive & Innovation
1:30 PM 40min
Software Acquisition Guide for Supply Chain Security Assessment
Sridhar Balasubramanian
Security, Compliance & the Law
1:30 PM 40min
Ensuring Security of Post‑Quantum Cryptography on Embedded Devices: Formal Verification and Side‑Channel Protection Challenges
Reza Azarderakhsh
Technical Deep Dive & Innovation
 
 
 
 
 
2:00 PM
 
 
2:10 PM 5min
Transition Break
2:10 PM 5min
Transition Break
2:10 PM 5min
Transition Break
2:10 PM 5min
Transition Break
 
2:15 PM 45min
High-Assurance Post-Quantum Cryptography
Karthik Bhargavan
Technical Deep Dive & Innovation
2:15 PM 45min
12+ Years of Shipping OpenSSL in Linux Distributions - Past, Current, and Future Challenges and Transitions
Dimitri John Ledkov
Technical Deep Dive & Innovation
2:15 PM 40min
How to hypersecure your development enviroment.
Rene Malmgren
Security, Compliance & the Law
2:15 PM 40min
Threat Modeling and Incident Response in OpenSSL-Based Systems
Mehri Yahyaei
Technical Deep Dive & Innovation
 
 
2:30 PM
 
 
 
 
 
3:00 PM
3:00 PM 30min
Coffee Break
3:00 PM 30min
Coffee Break
3:00 PM 30min
Coffee Break
3:00 PM 30min
Coffee Break
 
 
 
 
 
3:30 PM
3:30 PM 50min
QUBIP: OpenSSL Providers in Rust (for the PQC transition)
Nicola Tuveri
Technical Deep Dive & Innovation
3:30 PM 50min
Making Confidential AI Possible with End-to-End Encrypted Vector Databases
Nicolas Dupont
Technical Deep Dive & Innovation
3:30 PM 50min
Postquantum Cryptography in TLS
Jakub Onderka
Security, Compliance & the Law
3:30 PM 50min
OpenSSL Integration in .NET - The Good and the Challenging
Radek Zikmund
Technical Deep Dive & Innovation
 
 
 
 
 
4:00 PM
 
 
 
 
4:20 PM 10min
Transition Break
4:20 PM 10min
Transition Break
4:20 PM 10min
Transition Break
4:20 PM 10min
Transition Break
 
4:30 PM
4:30 PM 30min
OpenSSL Conference 2025 Close
Hana Andersen, Tim Hudson, Matt Caswell