The TLS protocol (famous for https://) is perhaps the most-used cryptographic protocol. As such, it is extremely important that it gets migrated to post-quantum cryptography. Fortunately, the TLS working group, browsers like Chrome and Firefox, and service providers like Cloudflare are making headway to solve the problem. Chrome on desktop computer already prefers Kyber768+X25519 key exchange by default! So, just migrate the certificates, and we’re done, right?

Ph.D. thesis on post-quantum cryptography in TLS. I investigate current proposals for post-quantum TLS, but more importantly we propose a more efficient TLS handshake that makes use of trade-offs presented by post-quantum cryptographic primitives (which were not as profound in pre-quantum primitives). This more efficient protocol we call KEMTLS. Benchmarks in several different settings for all variants of post-quantum TLS show that KEMTLS is efficient, and we also have an extensive analysis of the security of KEMTLS.