From d9d186bab68495e31b23bc0fb53805d1036feff1 Mon Sep 17 00:00:00 2001 From: Christina Harter Date: Fri, 1 May 2026 08:28:40 -0700 Subject: [PATCH 1/6] agenda/minutes for TAC meeting on May 6, 2026 Signed-off-by: Christina Harter --- meeting-minutes/2026/2026-05-06-TAC.md | 86 ++++++++++++++++++++++++++ 1 file changed, 86 insertions(+) create mode 100644 meeting-minutes/2026/2026-05-06-TAC.md diff --git a/meeting-minutes/2026/2026-05-06-TAC.md b/meeting-minutes/2026/2026-05-06-TAC.md new file mode 100644 index 0000000..156ff6c --- /dev/null +++ b/meeting-minutes/2026/2026-05-06-TAC.md @@ -0,0 +1,86 @@ +--- +layout: default +title: 2026-05-06 TAC Meeting Record +parent: 2026 +grand_parent: Meeting Minutes +--- + +# Post-Quantum Cryptography Alliance - Technical Advisory Council (TAC) Meeting 06 May, 2026 +[**View Recording**] +*Recordings are also available on your [Open Profile](https://openprofile.dev/my-meetings) page under Past Meetings* +[**Join the meeting**](https://zoom-lfx.platform.linuxfoundation.org/meeting/98559442147?password=5e9d28b7-97d4-4628-9087-5f359dbf3d80) +[**PQCA Meeting Calendar**](https://pqca.org/calendar/) +[**Discord Server**](https://discord.pqca.org )) + +--- + +### **Antitrust Policy Notice** + +Linux Foundation meetings involve participation by industry competitors, and it is the intention of the Linux Foundation to conduct all of its activities in accordance with applicable antitrust and competition laws. It is therefore extremely important that attendees adhere to meeting agendas, and be aware of, and not participate in, any activities that are prohibited under applicable US state, federal or foreign antitrust and competition laws. Examples of types of actions that are prohibited at Linux Foundation meetings and in connection with Linux Foundation activities are described in the Linux Foundation Antitrust Policy available at [linuxfoundation.org/antitrust-policy](https://linuxfoundation.org/antitrust-policy). If you have questions about these matters, please contact your company counsel, or if you are a member of the Linux Foundation, feel free to contact Andrew Updegrove of the firm of Gesmer Updegrove LLP, which provides legal counsel to the Linux Foundation. + +--- + +## Voting Representative Attendance (_Alphabetical by 1st name_) +### Premier Member Representatives + +* [ ] Brian Jarvis, AWS +* [ ] Michael Maximilien, IBM +* [ ] Norman Ashley, Cisco (OQS Rep) +* [ ] Sophie Schmieg, Google + + ### Project Representatives +* [ ] Matthias Kannwischer, TCR +* [ ] Hanno Becker, AWS (PQCP) +* [ ] Andreas Schade, IBM (CBOMkit) +* [ ] Aditya Koranga, NgKore \[TAC Chair\] + +## Non-Voting Representative Attendance + +### LF Staff +* [ ] Christina Harter +* [ ] Hart Montgomery +* [ ] Min Yu + +### Other Attendees +* [ ] *Enter other attendees* + +--- +# Meeting Agenda +- LFX Mentorship accepting applications until May 22nd: https://mentorship.lfx.linuxfoundation.org/project/bdbecf7d-baaa-4adc-98a0-2ecbb4e8f05c + +# Discussion & Updates + +### **Introduction of 1st Time Attendees** +xxx + +--- + +### **Discussion Item 1** +xxx + +--- + +### **Project Updates** +- OQS + - +x + +- PQCP + - +x + +- CBOMkit + - +x + +--- + +### **Next Steps / Action Items** + +| Action Item | Owner | Status / Due Date | +|--------------|--------|------------------| +| x | x | x | + +--- + +**Adjourned:** x:xxam PT. From c675c181eff44a62cc4c7dcb57527ec519dd1c19 Mon Sep 17 00:00:00 2001 From: Christina Harter Date: Mon, 4 May 2026 14:06:38 -0700 Subject: [PATCH 2/6] Add Working Group Proposal details to agenda Signed-off-by: Christina Harter --- meeting-minutes/2026/2026-05-06-TAC.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/meeting-minutes/2026/2026-05-06-TAC.md b/meeting-minutes/2026/2026-05-06-TAC.md index 156ff6c..0dd0ef4 100644 --- a/meeting-minutes/2026/2026-05-06-TAC.md +++ b/meeting-minutes/2026/2026-05-06-TAC.md @@ -47,6 +47,12 @@ Linux Foundation meetings involve participation by industry competitors, and it --- # Meeting Agenda - LFX Mentorship accepting applications until May 22nd: https://mentorship.lfx.linuxfoundation.org/project/bdbecf7d-baaa-4adc-98a0-2ecbb4e8f05c +- Working Group Proposal: https://github.com/PQCA/TAC/issues/139 + - Confirm WG Name + - Confirm first members (and a Chair) + - Confirm meeting cadence (meetings open to the public) + - Mailing list? Discord channel? + - Draft Charter: [template here](https://docs.google.com/document/d/1R-bKcAbTbwYWLJ42yGiagGT2uduKlYVNnqSPIgrB24E/edit?usp=sharing) # Discussion & Updates From cb483a27a6176516b0f34b01ce1f9d4cb6d0087c Mon Sep 17 00:00:00 2001 From: Christina Harter Date: Wed, 6 May 2026 07:47:02 -0700 Subject: [PATCH 3/6] Apply suggestion from @AdityaKoranga Co-authored-by: AddyTiv Signed-off-by: Christina Harter --- meeting-minutes/2026/2026-05-06-TAC.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/meeting-minutes/2026/2026-05-06-TAC.md b/meeting-minutes/2026/2026-05-06-TAC.md index 0dd0ef4..462277b 100644 --- a/meeting-minutes/2026/2026-05-06-TAC.md +++ b/meeting-minutes/2026/2026-05-06-TAC.md @@ -53,6 +53,9 @@ Linux Foundation meetings involve participation by industry competitors, and it - Confirm meeting cadence (meetings open to the public) - Mailing list? Discord channel? - Draft Charter: [template here](https://docs.google.com/document/d/1R-bKcAbTbwYWLJ42yGiagGT2uduKlYVNnqSPIgrB24E/edit?usp=sharing) +- Follow up: Invitation to OpenSSF team members for security baseline discussion +- Blog: CBOMkit pipeline +- Project updates # Discussion & Updates From e7d7910b96cc538896d8f7f3a890162c8fc6331b Mon Sep 17 00:00:00 2001 From: Christina Harter Date: Wed, 6 May 2026 09:22:03 -0700 Subject: [PATCH 4/6] Revise TAC meeting minutes for May 6, 2026 Updated attendance and meeting details, including new attendees and action items. Signed-off-by: Christina Harter --- meeting-minutes/2026/2026-05-06-TAC.md | 105 ++++++++++++++++++------- 1 file changed, 76 insertions(+), 29 deletions(-) diff --git a/meeting-minutes/2026/2026-05-06-TAC.md b/meeting-minutes/2026/2026-05-06-TAC.md index 462277b..b929ff8 100644 --- a/meeting-minutes/2026/2026-05-06-TAC.md +++ b/meeting-minutes/2026/2026-05-06-TAC.md @@ -6,7 +6,7 @@ grand_parent: Meeting Minutes --- # Post-Quantum Cryptography Alliance - Technical Advisory Council (TAC) Meeting 06 May, 2026 -[**View Recording**] +[**View Recording**](https://zoom.us/rec/share/Xq0RMk98Eo2ptmiadtDTqltRZ-3rOrhUTx4IWdLHnjxhOPiwh-GEcnPTe8QUIfZ9.JID0sNOfo2LGUDua) *Recordings are also available on your [Open Profile](https://openprofile.dev/my-meetings) page under Past Meetings* [**Join the meeting**](https://zoom-lfx.platform.linuxfoundation.org/meeting/98559442147?password=5e9d28b7-97d4-4628-9087-5f359dbf3d80) [**PQCA Meeting Calendar**](https://pqca.org/calendar/) @@ -23,26 +23,29 @@ Linux Foundation meetings involve participation by industry competitors, and it ## Voting Representative Attendance (_Alphabetical by 1st name_) ### Premier Member Representatives -* [ ] Brian Jarvis, AWS -* [ ] Michael Maximilien, IBM -* [ ] Norman Ashley, Cisco (OQS Rep) -* [ ] Sophie Schmieg, Google +* [x] Brian Jarvis, AWS +* [ ] ~~Michael Maximilien, IBM~~ +* [ ] ~~Norman Ashley, Cisco (OQS Rep)~~ +* [ ] ~~Sophie Schmieg, Google~~ ### Project Representatives -* [ ] Matthias Kannwischer, TCR -* [ ] Hanno Becker, AWS (PQCP) -* [ ] Andreas Schade, IBM (CBOMkit) -* [ ] Aditya Koranga, NgKore \[TAC Chair\] +* [x] Matthias Kannwischer, TCR +* [ ] ~~Hanno Becker, AWS (PQCP)~~ +* [x] Andreas Schade, IBM (CBOMkit) +* [x] Aditya Koranga, NgKore \[TAC Chair\] ## Non-Voting Representative Attendance ### LF Staff -* [ ] Christina Harter -* [ ] Hart Montgomery -* [ ] Min Yu +* [x] Christina Harter +* [x] Hart Montgomery +* [ ] ~~Min Yu~~ ### Other Attendees -* [ ] *Enter other attendees* +* [ ] Andy Warner, Google +* [ ] Katarina, Siemens +* [ ] Matthew Garrow-Fischer, Horizen Labs +* [ ] Sumanth B., Genpact --- # Meeting Agenda @@ -60,36 +63,80 @@ Linux Foundation meetings involve participation by industry competitors, and it # Discussion & Updates ### **Introduction of 1st Time Attendees** -xxx +Sumanth from Genpact introduced himself as a Banking Solutions Architect based in Bangalore with interest in learning more about PQC migration and readiness efforts. Andy noted that Google is also actively working through PQC migration challenges and offered to share several relevant Google blog posts and resources after the meeting. --- +### LFX Mentorship Program Updates +Aditya shared updates on the LFX Mentorship Program proposal to extend language and library support for CBOMkit. The proposal has generated significant community engagement, resulting in a large increase in pull requests submitted to both CBOMkit and Sonar Cryptography repositories. -### **Discussion Item 1** -xxx +Andreas noted concerns around the volume and quality of some submissions, suspecting that several may be AI-generated or low-quality contributions. Aditya clarified that mentee evaluations will begin after the **May 22 application deadline**, at which point the team will review applicants and select participants. --- -### **Project Updates** -- OQS - - -x +### Readiness Tracking Working Group Launch +The primary focus of the meeting was finalizing the launch of the new working group proposed by Andy from Google to track PQC compatibility and readiness across cryptographic libraries, software, and related open-source projects. -- PQCP - - -x +Following prior TAC approval via GitHub issue discussion, the group finalized the working group name as **Readiness Tracking Working Group**. Andy confirmed Google will participate as the initial member organization and agreed to serve as the inaugural chair. -- CBOMkit - - -x +The TAC agreed on the following working group structure: +- **Public working group** open to all interested participants +- **Monthly meetings** to reduce meeting fatigue and align with contributor bandwidth +- GitHub repository and mailing list to be created under PQCA + +Christina offered to support initial setup by creating the GitHub repository and mailing list. Andy will coordinate scheduling for the first meeting and define initial governance and contribution guidelines, including determining what documentation or references can be linked within readiness tracking entries (e.g., technical documentation vs. marketing content). + +The group also discussed how to handle closed-source software and proprietary readiness claims. Andy proposed using standard embargo-style practices for vendors not yet ready to publicly disclose readiness information. + +--- + +### OpenSSF Presentation Follow-Up +Hart previously connected the TAC with the OpenSSF team regarding their security baselines initiative. Aditya agreed to follow up on Hart’s email and propose dates for an upcoming PQCA TAC Meeting presentation from the OpenSSF team. This remains a pending action item from previous meetings. + +--- + +### Blog Review Updates +Christina shared that the **CBOMkit pipeline blog post** has been updated following prior feedback. Katarina confirmed all requested comments had been addressed. + +Aditya and Brian will complete a final review before publication approval. Christina will prompt the content review team for one additional review cycle to move the blog post toward publication. + +--- + +### Project Updates + +#### OQS +No representative present on the call. + +#### CBOMkit +Andreas shared several CBOMkit updates, including: +- New **Open Policy Agent (OPA)** support for external policy evaluation +- Continued expansion of supported libraries and integrations +- New outreach from DB Suster regarding collaboration opportunities + +The team also noted ongoing work to manage contributor quality amid increased project visibility from the mentorship program. + +#### PQCP +Matthias reported that: +- **MLDSA Native memory optimizations** are now complete +- CBMC proofs are also complete +- A new release is expected within the next **1–2 weeks** + +Rust crate bindings and additional integration improvements remain in progress. --- ### **Next Steps / Action Items** | Action Item | Owner | Status / Due Date | -|--------------|--------|------------------| -| x | x | x | +|---|---|---| +| Contact OpenSSF team to schedule participation in an upcoming PQCA TAC Meeting (refer to Hart’s email and suggest dates) | Aditya | Before next TAC meeting | +| Set up mailing list and GitHub repository for the new Readiness Tracking Working Group | Christina | Before first working group meeting | +| Confirm date/time for the first Readiness Tracking Working Group meeting | Andy | Before next TAC meeting | +| Establish contribution/linking guidelines for the Readiness Tracking Working Group (e.g., approved source documentation only) | Andy / Working Group | First working group meeting | +| Notify Aditya or Andy if interested in joining the Readiness Tracking Working Group | All interested members | Ongoing | +| Review updated CBOMkit pipeline blog post to confirm all comments are addressed | Aditya & Brian | Before publication | +| Prompt content review team for final review of the CBOMkit pipeline blog post | Christina | This week | +| Share Google PQC migration blog resources with Sumanth | Andy | After meeting | --- -**Adjourned:** x:xxam PT. +**Adjourned:** 7:38am PT. From 6568a16ee2ae6d6e5fe7e69066135b128efe8357 Mon Sep 17 00:00:00 2001 From: Christina Harter Date: Fri, 8 May 2026 09:15:01 -0700 Subject: [PATCH 5/6] Update meeting-minutes/2026/2026-05-06-TAC.md Co-authored-by: AddyTiv Signed-off-by: Christina Harter --- meeting-minutes/2026/2026-05-06-TAC.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meeting-minutes/2026/2026-05-06-TAC.md b/meeting-minutes/2026/2026-05-06-TAC.md index b929ff8..7eabd44 100644 --- a/meeting-minutes/2026/2026-05-06-TAC.md +++ b/meeting-minutes/2026/2026-05-06-TAC.md @@ -116,7 +116,7 @@ The team also noted ongoing work to manage contributor quality amid increased pr #### PQCP Matthias reported that: -- **MLDSA Native memory optimizations** are now complete +- **mldsa-native memory optimizations** are now complete - CBMC proofs are also complete - A new release is expected within the next **1–2 weeks** From 9423a72816c5940b024cc39d0fe6c4a9032844e7 Mon Sep 17 00:00:00 2001 From: Christina Harter Date: Fri, 8 May 2026 11:31:19 -0700 Subject: [PATCH 6/6] Update meeting-minutes/2026/2026-05-06-TAC.md Co-authored-by: AddyTiv Signed-off-by: Christina Harter --- meeting-minutes/2026/2026-05-06-TAC.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meeting-minutes/2026/2026-05-06-TAC.md b/meeting-minutes/2026/2026-05-06-TAC.md index 7eabd44..836452f 100644 --- a/meeting-minutes/2026/2026-05-06-TAC.md +++ b/meeting-minutes/2026/2026-05-06-TAC.md @@ -110,7 +110,7 @@ No representative present on the call. Andreas shared several CBOMkit updates, including: - New **Open Policy Agent (OPA)** support for external policy evaluation - Continued expansion of supported libraries and integrations -- New outreach from DB Suster regarding collaboration opportunities +- New outreach from DB Systel regarding collaboration opportunities The team also noted ongoing work to manage contributor quality amid increased project visibility from the mentorship program.