SHARE BluePrint

Quantum Threats and PQC Fundamentals on IBM Z 
Anne Dames, Distinguished Engineer and IBM Z Cryptographic Technology Architect, IBM 

In an era where quantum computing could compromise classical encryption like RSA and ECC, this 50-minute executive overview explains the specific risks to IBM mainframes — including long-lived encrypted datasets and legacy protocols vulnerable to "harvest now, decrypt later" attacks. Attendees gain a clear understanding of NIST's finalized PQC standards (ML-KEM for key encapsulation, ML-DSA for signatures, and SLH-DSA for hash-based backup) and how IBM Z platforms (z16 and z17) already incorporate hardware acceleration via Crypto Express adapters and software support in ICSF as well as crypto agility for System SSL/AT- TLS. Designed for z/OS leaders, the session highlights why proactive assessment is essential now to protect mission-critical data ahead of industry and federal deadlines of 2029 and 2030, respectively. 

The Regulatory Crucible & Technical Realities (Governance Track)
Tom Cosenza, SHARE Board of Directors

The transition to Post-Quantum Cryptography (PQC) is no longer a distant line item—it is an immediate operational and revenue factor. This session breaks down the critical shift to quantum-resistant algorithms driven by expanding mandates This session breaks down the critical shift to quantum-resistant algorithms driven by aggressive federal timelines, such as the new executive directives—EO 14412 (Securing the Nation Against Advanced Cryptographic Attacks) and EO 14413 (Ushering in the Next Frontier of Quantum Innovation). Attendees will examine how these fast-tracked targets, alongside NIST FIPS 203–205, CNSA 2.0, DORA, and new U.S. legislative pressures (H.R. 3259 and H.R. 4942), directly impact z/OS configurations, PKI Services, and System SSL/TLS protocols. The session delivers practical discovery frameworks to mitigate immediate "Harvest Now, Decrypt Later" (HNDL) risks.

Navigating PQC Standards and Global Roadmaps (Technical Track)
Michael Jordan, Distinguished Engineer, Broadcom

This focused 50-minute technical session explores how Post-Quantum Cryptography seamlessly integrates into the IBM Z software and hardware ecosystem. Participants examine hardware acceleration on Crypto Express8S (CEX8S) for ML-KEM and ML-DSA, ICSF's key management capabilities (including hybrid modes and CCA/EP11 APIs), and protocol-level enhancements in System SSL/AT-TLS for quantum-safe TLS 1.3 handshakes. With practical insights into performance trade-offs from larger key sizes and tools, the session equips experienced z/OS architects and admins to evaluate and implement PQC within existing infrastructure—ensuring cryptographic resilience without major overhauls.

Organizing for Execution & Corporate Risk Structure (Governance Track)
Tom Cosenza, SHARE Board of Directors

Moving from cryptographic discovery to enterprise-grade governance requires a fundamental shift in how organizations manage risk. This session provides a practical roadmap for establishing a board-reporting PQC Steering Committee and defining clear, cross-functional accountabilities (including the role of a "PQC Czar"). Participants will explore how to draft actionable crypto-agility policies, audit third-party vendor readiness, and embed PQC into a corporate risk registry to reduce multi-year migration costs.

Practical Migration to PQC on Mainframes (Technical Track)
Tim Hill, VP Software Engineering, Rocket Software

Tailored for teams planning execution, this 50-minute actionable session delivers a high-level roadmap aligned with best practices and federal timelines. Covering discovery via zCDI and SMF records, risk prioritization, hybrid transition planning (classical + PQC), non-production pilots, phased deployment, and ongoing monitoring with zERT, attendees learn to minimize disruption while addressing challenges like legacy retrofits and interoperability. Participants leave empowered to begin inventory today, pilot hybrids in the near term, and achieve full quantum-safe readiness by 2033–2035.

Networking Event

Mix and mingle with other Blueprint attendees; light hors d’oeuvres and drinks will be served. 

Interactive Tabletop Exercises

Put your learning into action in this hands-on working session. Attendees will collaborate in small groups to work through a realistic PQC organizational challenge, applying key concepts and strategies discussed earlier. 

Possible scenarios include: 

• Developing a prioritized, owned roadmap for mainframe cryptographic dependencies while defining acceptable interim controls. 
• Establishing clear governance, testing, and deployment processes for PQC certificates and code-signing across z/OS while maintaining backward compatibility. 
• Defining performance thresholds, selective enablement strategies, and mitigation plans to adopt PQC without breaking operational SLAs. 

Insights from each group will be captured and shared with all Blueprint attendees so everyone benefits from the collective expertise. 

Group Report Out