Defence organisations hold decades of cryptographic debt across firmware, protocols, key management systems, and classified networks. This session equips security architecture teams with the tools and methodologies to locate every instance of classical cryptography and build a risk-prioritised migration roadmap before CNSA 2.0 deadlines arrive.
Most defence organisations cannot answer a basic question: where is classical cryptography deployed across our systems? RSA and ECDSA appear in TLS termination, VPN tunnels, code signing, firmware verification, satellite uplink encryption, and dozens of embedded subsystems. Many of these instances are undocumented, buried in legacy configurations, or hidden inside third-party firmware that predates any quantum risk awareness.
This workshop introduces structured discovery methodologies for building a complete Cryptographic Bill of Materials (CBOM). Participants examine static analysis tools such as IBM Quantum Safe Explorer and Keyfactor EJBCA scanner alongside network traffic inspection techniques for identifying cipher suites in classified and unclassified environments. The session covers binary analysis for embedded cryptography in real-time operating systems, risk scoring frameworks that combine data sensitivity with algorithm vulnerability, and practical sequencing strategies for migration across weapons systems, C2 infrastructure, logistics, and administrative tiers.
Deep Dive Session structure with scheduled breaks. Content is configurable to your organisation's technical level and operational environment.
| # | Session | Topics |
|---|---|---|
| 1 | Cryptographic Discovery in Defence Environments Why legacy crypto is invisible and how to find it |
|
| 2 | Discovery Methodologies and Tooling Passive, active, and hybrid scanning techniques |
|
| Break, after 60 min | ||
| 3 | Prioritisation and Risk-Based Migration Planning From inventory to actionable migration roadmap |
|
| 4 | Discussion and Next Steps Applying discovery findings to your organisation |
|
Workshops are designed and delivered by QSECDEF in collaboration with sector specialists. All facilitators have direct experience in both quantum technologies and defence systems.
Workshop design and delivery
QSECDEF brings world-leading expertise in post-quantum cryptography, quantum computing strategy, and defence-grade security assessment. Our advisory membership spans 600+ organisations and 1,200+ professionals working at the intersection of quantum technologies and critical infrastructure security.
Domain expertise and operational validation
Defence workshops are co-delivered with sector specialists who bring direct operational experience in defence organisations. This ensures workshop content is grounded in regulatory, operational, and technical realities specific to the sector.
Sessions are configured around your organisation's technical level, operational environment, and regulatory jurisdiction. Get in touch to discuss requirements and schedule a date.
Contact Us