Migrating protocols to PQ: the good, the bad, and the ugly
Migrating TLS to PQ seems easy. Just write in “PQ” and “KEM”, and we’re done, right? In this talk, I will show that things are unfortunately not that easy. Just using ML-DSA may …
Extended Key Update FATT Report
I presented a Formal Analysis Triage Team report on Extended Key Usage (EKU) in the TLS working group session.
Fully PQ TLS in the WWW
Key exchange in TLS is now mostly PQ! But what about authentication? In this talk, I discussed some of the ongoing work to make the costs of PQ certificates acceptable so that …
Comprehensive Deniability Analysis of Signal Handshake Protocols: X3DH, PQXDH to Fully Post-Quantum with Deniable Ring Signatures
Conference talk presenting a unified framework for deniability analysis of Signal handshake protocols, including a deniable ring signature from Falcon/MAYO.
Bundled Authenticated Key Exchange: A Concrete Treatment of (Post-Quantum) Signal's Handshake Protocol
Conference talk presenting the BAKE framework for Signal's handshake protocols, covering X3DH, PQXDH, and the fully post-quantum RingXKEM.
Hash-based Signatures: State and Backup Management draft-ietf-pquip-hbs-state-00
I presented a status update on our IETF draft on stateful HBS state management, now adopted as a PQUIP working group document.
How Are We Going to Afford Post-Quantum Authentication?
Invited talk for Comcast Research's Monthly Research Presentation Series on the costs and challenges of post-quantum authentication.
Hash-based Signatures: State and Backup Management draft-wiggers-hbs-state-01
I presented a status update on our IETF draft on stateful HBS state management.
How are we going to afford post-quantum authentication?
In this talk, I explain that although the focus on and progress with post-quantum key exchange is great, that does not mean that we should relax about post-quantum authentication. …
Update on State Management Recommendations draft-wiggers-hbs-state-00
I presented an update on the IETF draft regarding state management for stateful hash-based signature schemes.