Paulo A L Rego
Paulo Antonio Leal Rego is an Adjunct Professor in the Computing Department at the Federal University of Ceará (UFC). He holds a PhD in Computer Science from the Federal University of Ceará (2016), with a Sandwich Doctorate internship at Cisco Systems Inc, in the United States. He works in the field of Computer Science, with an emphasis on Distributed Systems, Complex Systems Development, and Computer Networks. He is a CNPq productivity fellow in Technological Development and Innovative Extension (DT/C). He is the technical coordinator of the msg gov project.
Sessions
Governments increasingly need messaging that is secure, federated, and independent from foreign proprietary platforms, but turning an open protocol into a deployable government tool raises hard questions about sovereignty, infrastructure, and identity. This talk presents MSG GOV, a Matrix-based messaging platform for the Brazilian federal government. Today, it targets a defined set of public servants rather than the entire population or every government employee — a deliberate, controlled scope as the platform matures. We plan to share the factors that drove the need for a sovereign messaging app in the first place and to dig into how MSG GOV is built and run. The solution is designed to operate on SERPRO's sovereign cloud, the Brazilian government's own cloud infrastructure, with all the operational and trust implications that entail. At the center of the talk is identity: how MSG GOV integrates with gov.br, Brazil's national single-sign-on system, through a dedicated user management module we developed to bridge gov.br authentication with Matrix accounts.
This presentation outlines the development experience of a post-quantum cryptography (PQC) wrapper for the vodozemac library, tailored for its use in MSG
GOV, a Matrix-powered E2EE messenger for the Brazilian federal government. Our wrapper is designed to support multiple PQC algorithms, including ML-KEM and Brazil's state-mandated cryptography. The talk details the practical software engineering challenges associated with the hybrid integration of flexible PQC features into the Matrix protocol, extending both the key agreement and the Double Ratchet algorithm while maintaining backwards compatibility.