Summary
Active technical work is underway to develop Merkle Tree certificates, with significant contributions from major organizations like Google and Cloudflare. Recent discussions from a Google Chrome root program meeting reveal a timeline for the implementation of these certificates, indicating that by late 2026, Chrome aims to have a fully functional test root store. This will allow for testing but not production use of the certificates, with the first acceptance of MTC Certificate Authorities (CAs) expected in early 2027.
A notable aspect of the timeline is that by the second half of 2028, Chrome plans to remove all non-MTC CAs from its root store. This shift signifies a major transition in public key infrastructure (PKI), as it implies that only a select group of CAs that can issue Merkle Tree certificates will be trusted moving forward. The implications of this change could drastically reduce the number of trusted CAs, potentially down to a fraction of the current total.
The urgency behind this transition is driven by the need for quantum-resistant cryptography, as traditional cryptographic methods may soon be vulnerable to quantum computing threats. Experts emphasize that the timeline for adopting these new standards is accelerating, and organizations must adapt to the evolving landscape of digital security. The ongoing developments in PKI are unprecedented, marking a significant shift in how security protocols will be managed in the future.
More from Root Causes: A PKI and Security Podcast
Jason uses a quantum simulator to show us how a cryptographically relevant quantum comptuer (CRQC) would employ Shor's algorithm to attack RSA. Part two of two, with guest Bruno Coulliard.
Jason uses a quantum simulator to show us how a cryptographically relevant quantum comptuer (CRQC) would employ Shor's algorithm to attack RSA. Part one of two, with guest Bruno Coulliard.
In this second of two episodes, Jason walks guest Bruno Coulliard and me through his real-world experience building quantum simulators, including some of the lessons he learned.
In this first of two episodes, Jason walks guest Bruno Coulliard and me through his real-world experience building quantum simulators, including some of the lessons he learned.
Repeat guest Bruno Coulliard of Crypto4A joins us to discuss the accelerating pace of change in digital technology, which is going at a rate unprecedented in human history. How do we as people adjust to the hyperspeed of today's technology landscape? And how do we apply these ideas to cryptography?