TLS v1.3 for PQC

Caute_cautim — Thu, 25 Jan 2024 22:52:28 GMT

Hi All

What's the issue?
Everything in TLS, including versions 1.2 and 1.3 is sent using data records with a limit in size. That limit was established long ago, but PQC algorithms may have larger public key sizes and cyphertexts. So, a modification to TLS1.3 might be needed to allow for larger data records.

The discussion section of the "Hybrid key exchange in TLS 1.3" draft RFC (https://lnkd.in/da5vbMac, draft-ietf-tls-hybrid-design-09) by Douglas Stebila, Scott Fluhrer and Shay Gueron explains that, although some post-quantum KEMs have larger public keys and/or ciphertexts (Classic McEliece's smallest parameter set has public key size 261,120 bytes), all defined parameter sets for Kyber have public keys and ciphertexts that fall within the TLS constraints (2^16-1 bytes).

Regards

Caute_Cautim

Re: TLS v1.3 for PQC

Early_Adopter — Fri, 26 Jan 2024 01:44:13 GMT

Need to get my TLS OOB ready for PQC or my TLAs might require LMW and my data be SOI just as my CEO goes AFK!

Once the business lingo is fixed with the bigwigs I can have a nice leisurely digest of Pot Quantum Cryptography via the Request For Comments… 😛

topic TLS v1.3 for PQC in Tech Talk

TLS v1.3 for PQC

Re: TLS v1.3 for PQC