Name: From Crypto Sprawl to Control: A Reference Architecture for PQC-Ready Banking
Start: 2025-10-02T12:00:00Z
End: 2025-10-02T12:00:51.000Z
Location: BrightTALK
Rating: 4.8

Cryptomathic is a leading provider of secure cryptographic solutions, empowering global organizations to safeguard their digital assets and sensitive information. Founded in 1986, Cryptomathic has pioneered advancements in cryptography, offering robust and easy-to-use solutions for key management, digital identities, mobile application security, and payment systems. Trusted by governments, financial institutions, and businesses worldwide, Cryptomathic's innovative technologies ensure compliance, enhance security, and deliver trust in the digital world

This demo shows how Cryptomathic’s Mobile App Security Core (MASC) detects risk conditions on mobile devices in real time. We enable Developer Mode to simulate the early stages of privilege escalation, then walk through the demo app’s Security Analysis Screen and backend portal. The system flags both Developer Mode and an Obscured Event from screen recording, demonstrating how policies can be configured to allow, log, block, or terminate sessions. MASC delivers flexible, policy-driven protection to keep mobile apps and APIs secure.

Mobile Application Security Core: How MASC Detects Privilege Escalation On Mobile Devices

This demo shows how Cryptomathic’s Mobile App Security Core (MASC) protects mobile applications in real time. Using a reference app that simulates a customer environment, the demo walks through detection of device integrity, secure API binding, and event monitoring. 

This demo highlights how the system reacts to conditions such as screen recording (Obscured event) and enforces configurable policies ranging from allow-and-log to blocking or terminating the session. The takeaway is that MASC delivers immediate, flexible, and policy-driven protection at both the app and API layers.

Mobile Application Security Core: Clean Mobile Device With Cryptomathic MASC

This demo showcases Cryptomathic’s Mobile Application Security Core (MASC), an in-app security solution that transforms mobile apps into self-defending fortresses. 

MASC provides layered protection across the entire app lifecycle, combining whitebox cryptography, secure storage, device binding, and runtime application self-protection (RASP). In the demo, you’ll see how the solution detects threats in real time across four categories — OS, Application, Network, and Privacy — and how these events are analyzed through the Assurance Service portal. 

The portal offers visibility into device health, threat logs, and configurable reaction pipelines, showing how organizations can detect, report, or block attacks instantly. The result is a clear view of how MASC helps financial, identity, and other critical sectors protect apps against tampering, fraud, and malicious activity.

Introduction to Cryptomathic's Mobile Application Security Core

This demo showcases the code signing capabilities built into the CrystalKey360 platform. In addition to general key management and data security options, you'll see how to set up application integration to perform basic signature operations using the platform.

See It in Action: End-to-End Code Signing with Centralized Key Control

See crypto-agility in action. In this demo, we upgrade a signing service live from PKCS#1 v1.5 to RSA-PSS without downtime or application changes. Then we take it further, switching seamlessly to the NIST-approved post-quantum standard ML-DSA (FIPS 204). All upgrades happen within the CrystalKey 360 platform, showing how you can stay secure and compliant with evolving algorithms—no service disruption, no integration hassle. Ready to make your environment crypto-agile and PQC-ready? Watch now.

Crypto-Agility in Action: Effortless PQC Updates with Zero Disruption

Mobile applications have become the primary customer touchpoint in banking and finance—and with that, one of the most targeted and vulnerable attack surfaces. Yet too many organizations still treat mobile app security as a one-time effort or rely on outdated practices.

Cryptomathic's mobile app security expert, Fatima Khan walks through four common pitfalls that undermine mobile app security and why a layered, continuous security model is essential in today’s threat landscape.

You’ll learn:

- Why obfuscation alone won’t stop attackers
- The risk of hard-coded secrets and keys
- How lack of runtime checks leaves apps exposed
- Why one-time testing is not enough
- How to build a layered, continuous defense
- Industry best practices and OWASP MASVS.

The Common Pitfalls in Securing Mobile Applications

How do you prepare for a world where today’s cryptography no longer protects your digital assets?

The cryptographic landscape is changing - not only due to the anticipated rise of quantum computing, but also because of regulatory shifts, algorithm deprecations, new compliance or business requirements. Rigid, hardcoded cryptography can't keep pace with this change.

Cryptographic agility is the ability to adapt quickly - to replace or upgrade algorithms, keys, and protocols across your systems without disruptive overhauls. It’s a foundational capability for maintaining long-term digital trust, operational resilience, and compliance - whether you're preparing for quantum threats or responding to conventional risks.

Now is the time for security professionals, architects, and digital leaders to ensure their infrastructure can evolve as fast as the threat landscape.

What you'll learn in this webinar:

   -The Quantum Threat Timeline Understand the progression of quantum computing and why a cryptographic breaking point (Q-Day) is expected in the next decade. Learn what’s at stake for digital infrastructures that rely on classical public-key cryptography.

  -PQC Standards and Use Cases Get a concise overview of the latest post-quantum cryptographic algorithms standardized by NIST, their underlying principles and where they apply - such as secure communications, software updates, and digital identities.

  -Cryptographic Agility - Why It Matters Discover the concept of cryptographic agility: the ability to swiftly adapt, upgrade, and swap cryptographic mechanisms without redesigning entire systems. Learn why agility is the cornerstone of any post-quantum readiness plan.

  -From Planning to Implementation Gain practical insights into how to orchestrate a smooth transition

Cryptographic Agility: A Resilient Path to Post-Quantum Readiness

Sealweb et Cryptomathic s´associent pour expliquer les enjeux en terme d’architecture, d’interopérabilité  et de qualification (au sens de l'art29a eIDASv2) pour offrir de la signature déportée à valeur probante dans le cadre d´eIDAS et ses nouveaux actes d’implémentation.  Nous aborderons aussi l’interopérabilité avec les standards adaptés par les EUDI wallet et le Cloud Signature Consortium pour offrir flexibilité d’usage dans un contexte français, européen et une expérience client optimale.

Déployer La Signature Qualifiée à Distance Sous eIDAS 2

Are You Ready for the Future of Digital Trust?

With eIDAS 2.0 enforcement looming, organizations must rethink their digital identity, trust services, and qualified signing solutions. This high-impact session will provide a clear roadmap to compliance, practical implementation strategies, and insights from industry leaders who are shaping the eIDAS landscape.

Key Takeaways:
- eIDAS 2.0 Unpacked – What’s changing & why it matters for security leaders.
- The Compliance Deadline is Closer Than You Think – What you need to do NOW.
- The Role of Qualified Signature Creation Devices (rQSCDs) – Practical deployment strategies.
- Avoiding Common Pitfalls – Lessons from real-world implementations.
- Live Q&A with Industry Experts – Get the answers to your most pressing questions.

Mastering eIDAS 2.0 -  Stay Compliant, Secure, and Future-Ready

Concrete steps to centralise HSM/KMS, reduce cost, and enforce policy across clouds for both legacy and digital-first services. 

We present the CrystalKey 360 reference architecture and share lessons from modernising operations and establishing Cryptography Centres of Excellence in large banks, showing how to centralise keys, enforce hybrid (classical + PQC) policies, and improve compliance and time to market, often without changing applications.

From Crypto Sprawl to Control: A Reference Architecture for PQC-Ready Banking

Cyber Security

Quantum Computing

Crypto Agility

Banking

Cyber Defence

Key Management

Digital Banking

Digital Transformation

Finance

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

From Crypto Sprawl to Control: A Reference Architecture for PQC-Ready Banking

Presented by

About this talk

Cryptomathic