Kemtls

KEMTLS with Delayed Forward Identity Protection in (Almost) a Single Round

The recent KEMTLS protocol (Schwabe, Stebila and Wiggers,CCS’20) is a promising design for a quantum-safe TLS handshake protocol. Focused on the web setting, wherein clients learn …

felix-gunther
Invited Lecture: TLS and Post-Quantum (Applied Cryptography, Radboud University) featured image

Invited Lecture: TLS and Post-Quantum (Applied Cryptography, Radboud University)

Invited lecture about TLS, its history and making TLS post quantum. I also discuss KEMTLS.

avatar
Thom Wiggers

More efficient post-quantum KEMTLS with pre-distributed public keys

We make KEMTLS more efficient in scenarios where the client already has the server's long-term public key, for example through caching or because it's pre-installed.

Peter Schwabe

Implementing and Measuring KEMTLS

KEMTLS (CCS 2020) is a novel alternative to the Transport Layer Security (TLS) handshake that integrates post-quantum algorithms. It uses a key encapsulation mechanism (KEM) for …

Sofía Celi
KEMTLS: securing TLS connections from quantum adversaries featured image

KEMTLS: securing TLS connections from quantum adversaries

Talk about KEMTLS on Cloudflare TV

avatar
Thom Wiggers
Post-Quantum TLS without handshake signatures at RWC 2021 featured image

Post-Quantum TLS without handshake signatures at RWC 2021

Talk about Post-Quantum TLS without Handshake Signatures at RWC 2021 (virtual).

avatar
Thom Wiggers
Post-Quantum TLS without handshake signatures featured image

Post-Quantum TLS without handshake signatures

Conference talk about Post-Quantum TLS without Handshake Signatures at ACM CCS (virtual).

avatar
Thom Wiggers
Post-Quantum TLS without handshake signatures featured image

Post-Quantum TLS without handshake signatures

Talk about Post-Quantum TLS without Handshake Signatures at the Lorentz Workshop (virtual)

avatar
Thom Wiggers
Lunch talk: Post-Quantum TLS without handshake signatures featured image

Lunch talk: Post-Quantum TLS without handshake signatures

Department Lunch Talk about KEMTLS

avatar
Thom Wiggers

Post-Quantum TLS without handshake signatures

We present an alternative to TLS 1.3, by authenticating using only Key-Encapsulation Mechanisms. This allows us to get rid of handshake signatures, as post-quantum signature …

Peter Schwabe