Postquantum TLS: Key Exchange and Authentication

This lecture covers the implementation of Post-Quantum Transport Layer Security (TLS) without handshake signatures, focusing on key exchange and authentication using Key Encapsulation Mechanism (KEM). It discusses the challenges of post-quantum signatures, the structure of KEMTLS, and the phases involved in the protocol. The lecture also explores the security analysis, definitions, and postulates related to KEMTLS, emphasizing the security properties, negotiation, deniability, and implementation aspects. Additionally, it addresses the performance measurements, caching of intermediate CA certificates, and the impact on handshake sizes and speed. The presentation concludes with acknowledgments and a roadmap for future improvements.