Due to the threat of powerful quantum computers in the not so distant future, we need to replace our cryptography. We do this migration from old to new cryptography once, and then we are done, right? Not exactly. We have multiple cryptographic migrations behind us and, most likely, multiple in front of us.

A more generic approach is needed to make your organization more flexible such that cryptographic migrations cease to be slow and cumbersome. Cryptographic agility is the recommended as principle to increases your cryptographic maturity. But what does this mean in practice?

This technical talks discusses concrete examples from the Belgian public sector, going from securing communications, to signing documents and even more advanced cryptographic mechanisms. The talk displays cryptographic agility in practice and draws lessons from them. Furthermore, the role and shape of the cryptographic inventory is touched.