Paper-Conference

WireGuard is a VPN protocol with an efficient, DH-based handshake. Prior attempts at making it PQ heavily relied on Classic McEliece, which has deployment complications. We revisit PQ WireGuard and manage to get rid of one of the uses of Classic McEliece by providing optimized KEMs. We also fix a flaw in the security of post-quantum WireGuard, which assumed KEM binding properties not necessarily provided by Classic McEliece.

The Signal protocol relies on a special handshake protocol, formerly X3DH and now PQXDH, to set up secure conversations. One of its …

The Signal protocol relies on a special handshake protocol, formerly X3DH and now PQXDH, to set up secure conversations. Prior analysis …

The ubiquitous use of smartphones has contributed to more and more users conducting their online browsing activities through apps, …

We investigate the performance of KEMTLS and PQ instantiations of TLS 1.3 on embedded devices.

We prove the security of KEMTLS in two Tamarin models. One mode is based on the Cremers et al. model of TLS 1.3; the other closely resembles our pen-and-paper proofs. These models allow us to analyse KEMTLS, and its extension KEMTLS-PDK from different angles.

KEMTLS (CCS 2020) is a novel alternative to the Transport Layer Security (TLS) handshake that integrates post-quantum algorithms. It …