post-quantum

Merkle Tree Certificates: The Third Iteration of Web PKI

Nov 10, 202612 min readIvan Ristic

Post-quantum signatures and shorter certificate lifetimes threaten to overwhelm Certificate Transparency. Merkle Tree Certificates are the redesign of Web PKI built to fix it.

Read more
post-quantum

Beyond Post-Quantum Bloat: Engineering Strategies to Contain TLS Handshakes

Nov 9, 20265 min readIvan Ristic

Post-quantum cryptography makes TLS handshakes bigger. Here's how to shrink the payload and cut down on full handshakes, starting today.

Read more
post-quantum

A closer look at the performance of ML-KEM

Sep 1, 20266 min readIvan Ristic

ML-KEM barely moves the CPU needle, but it adds real bytes to every TLS handshake. Here's what changes when hybrid key establishment goes live.

Read more
post-quantum

Effect of post-quantum algorithms on networking performance

Aug 24, 20269 min readIvan Ristic

ML-KEM and ML-DSA don't cost much extra CPU, but they add real round trips. Here's how post-quantum handshakes change TLS latency, congestion windows, and middlebox behavior.

Read more
post-quantum

Post-quantum key establishment, ten years later

Aug 17, 20267 min readIvan Ristic

Post-quantum key establishment is now standard in TLS 1.3, but only 11% of origin servers are protected. Here's where hybrid ML-KEM adoption really stands.

Read more
post-quantum

Why post-quantum signatures are breaking TLS handshake limits

Aug 3, 20268 min readIvan Ristic

Post-quantum signature sizes are up to 34x larger than ECDSA. Here's why ML-DSA certificate chains blow past the 14.5 KB TCP congestion window.

Read more

Showing 6 of 6 articles

Browse archive