eprint.iacr.orgpaperVerifiable Post-Quantum TLS Handshake: Recognizing Implementation Errors of Cryptographic Verification Steps
PQCD-TLS is a post-quantum TLS handshake that binds confirmation codes into chained key derivation, so a faulty signature or KEM verification step causes a key mismatch and handshake failure. The authors build confirmation-code frameworks for ML-DSA and Falcon signatures and for ML-KEM, HQC and DAWN, with unpredictability proofs. Across 48 configurations, handshake latency overhead stays below 1%.
TL;DR Proposes PQCD-TLS, which turns silent post-quantum verification bugs into handshake failures using confirmation codes, with proofs and under 1% overhead.
Organisations named here
- confirmation codes
- DAWN
- Falcon
- goto fail
- PQCD-TLS
Technologies named here
- PQCD-TLS
- TLS
- ML-DSA
- ML-KEM
- HQC
Related in AppSec
github.comadvisoryFlowise MCP Security Bypass Enables RCE
huntress.comwriteupInside an Oracle Database SQL Injection Attack | Huntress
github.comrepoOASIS
blog.trailofbits.comwriteup