WireGuard is a VPN protocol with an efficient, DH-based handshake. Prior attempts at making it PQ heavily relied on Classic McEliece, which has deployment complications. We revisit …
Key exchange in TLS is now mostly PQ! But what about authentication? In this talk, I discussed some of the ongoing work to make the costs of PQ certificates acceptable so that …
The Signal protocol relies on a special handshake protocol, formerly X3DH and now PQXDH, to set up secure conversations. One of its privacy properties, of value to Signal, is …
The Signal protocol relies on a handshake protocol, formerly X3DH and now PQXDH, to set up secure conversations. One of its privacy properties, of value to Signal, is deniability, …
The Signal protocol relies on a special handshake protocol, formerly X3DH and now PQXDH, to set up secure conversations. Prior analysis of these protocols (or proposals for …
I presented a status update on our IETF draft on stateful HBS state management.
In this talk, I explain that although the focus on and progress with post-quantum key exchange is great, that does not mean that we should relax about post-quantum authentication. …
I presented an update on the IETF draft regarding state management for stateful hash-based signature schemes.
In deze presentatie vertel ik over TLS en hoe het op dit moment gaat met de transitie naar post-quantum cryptografie. Post-quantum key exchange wordt al uitgerold, maar …
I gave a guest lecture on TLS and the challenges and ongoing efforts to make it work with post-quantum primitives.