Let’s discuss practical crypto agility in PKI – Hybrid seed based approach

[dennis0906]

Hi all,

As part of our work at Chunk Works, we developed a hybrid cryptography library that combines post-quantum and classical algorithms in a single, seed-based key format without breaking compatibility or requiring downtime.

It will be open-sourced soon, in a dual-licensed format and designed to plug into existing systems (like S3 backends, secure storage, and distributed identity layers).

We’re curious how others in the PKI community view crypto-agility in practice not just on paper.

How are you thinking about key lifecycle management with post-quantum algorithms?

Would you find value in a format that embeds algorithm metadata into public keys?

How do you see self-describing cryptographic identities evolving beyond X.509?

We’re keen to contribute and align efforts toward interoperability and future-proof security.

Happy to share docs, or walk through how we applied it across distributed storage environments.

Let’s open this up what's working for you, and what’s missing today?