Skip to main content
Cryptography

Return to Question

Bumped by Community user
Bumped by Community user
Bumped by Community user
Bumped by Community user
Tweeted twitter.com/StackCrypto/status/1073004735211425792
added 6 characters in body; edited tags
Source Link
Gilles 'SO- stop being evil'
Gilles 'SO- stop being evil'
  • 20.1k
  • 4
  • 53
  • 96

QUIC requires that servers reuse keys so that session resumption works. That breaks many post-quantum key exchange systems.

I am looking for a post-quantum key exchange algorithm with the following properties:

  • Fast (Lattice-based)
  • IND-CCA2
  • The chosen key depends on randomness from both parties (this is important for many uses of channel binding).

QUIC requires that servers reuse keys so that session resumption works. That breaks many post-quantum key exchange systems.

I am looking for a post-quantum key exchange algorithm with the following properties:

  • Fast (Lattice-based)
  • IND-CCA2
  • The chosen key depends on randomness from both parties (this is important for many uses of channel binding).

QUIC requires that servers reuse keys so that session resumption works. That breaks many post-quantum key exchange systems.

I am looking for a post-quantum key exchange algorithm with the following properties:

  • Fast (Lattice-based)
  • IND-CCA2
  • The chosen key depends on randomness from both parties (this is important for many uses of channel binding).
Source Link
Demi
Demi
  • 4.8k
  • 1
  • 20
  • 40

IND-CCA2 post-quantum key exchange

QUIC requires that servers reuse keys so that session resumption works. That breaks many post-quantum key exchange systems.

I am looking for a post-quantum key exchange algorithm with the following properties:

  • Fast (Lattice-based)
  • IND-CCA2
  • The chosen key depends on randomness from both parties (this is important for many uses of channel binding).