Migrating protocols to PQ: the good, the bad, and the ugly
Migrating TLS to PQ seems easy. Just write in “PQ” and “KEM”, and we’re done, right? In this talk, I will show that things are unfortunately not that easy. Just using ML-DSA may …
Migrating TLS to PQ seems easy. Just write in “PQ” and “KEM”, and we’re done, right? In this talk, I will show that things are unfortunately not that easy. Just using ML-DSA may …
The TLS protocol (famous for `https://`) is perhaps the most-used cryptographic protocol. As such, it is extremely important that it gets migrated to post-quantum cryptography. …
I gave an overview of the challenges for transitioning TLS to PQC, and highlighted a number of proposals to mitigate the impact of large post-quantum signatures.
Ph.D. thesis on post-quantum cryptography in TLS. I investigate current proposals for post-quantum TLS, but more importantly we propose a more efficient TLS handshake that makes …
The ubiquitous use of smartphones has contributed to more and more users conducting their online browsing activities through apps, rather than web browsers. In order to provide a …
Conference talk about our publication KEMTLS vs. Post-Quantum TLS: Performance on Embedded Systems at SPACE 2022
We investigate the performance of KEMTLS and PQ instantiations of TLS 1.3 on embedded devices.
We investigate the performance of post-quantum TLS and KEMTLS clients in WolfSSL on embedded systems
Conference presentation of our KEMTLS formal analysis paper at ESORICS 2022
A tale of two models: Formal analysis of KEMTLS in Tamarin Sofia Celi, Jonathan Hoyland, Douglas Stebila and me. Once upon a time... Observation: PQ signatures are quite big and/or …