TLS (Product): news timeline & CVEs

Benchmarking Post-Quantum Cryptography in Lightweight Virtualization Environments on Embedded Hardware

Study finds container overhead is tiny for PQC, while algorithm choice can swing TLS energy by 1000x.

Researchers measured post-quantum signature and key-encapsulation primitives on embedded ARM under native execution, Docker, and a Unikraft unikernel on QEMU, covering about 70 parameter sets plus classical baselines. Container overhead was negligible for primitive computation; unikernel overhead was small for most families, moderate for BIKE, HQC, and MAYO (1.28–1.53×), and extreme for Falcon signing (17.8–19.2×). Per-operation energy tracked runtime. In TLS 1.3, environment differences faded once expensive post-quantum algorithms dominated, and algorithm choice changed handshake energy by up to three orders of magnitude.

arXiv cs.CRSep 20, 22:24 UTC · 6d agoResearch

Transcript-Bound Combiners for Downgrade-Resilient Hybrid Post-Quantum Key Establishment: Definition, Proof, and Embedded-Device Cost

Researchers prove transcript-bound hybrid KEM combiners stop downgrade attacks, adding one hash and no extra messages.

Hybrid key establishment with ML-KEM and classical Diffie-Hellman protects the session key but not negotiation integrity when deployed without a handshake transcript. The paper defines a combiner-layer security game and proves that a combiner ignoring the transcript can be downgraded with certainty, while binding the session key and confirmation tag to a transcript hash blocks such attempts up to a negligible term for a 256-bit hash. On Cortex-M4, transcript binding adds one hash per party—about 11.8% of handshake computation and 1.5% of radio-inclusive energy—with no extra messages or bytes. Measurements come from a released harness that passes a 30-check validation gate.

arXiv cs.CRSep 18, 03:37 UTC · 9d agoResearch

TLS

Timeline2 articles

Appears with

Benchmarking Post-Quantum Cryptography in Lightweight Virtualization Environments on Embedded Hardware

Transcript-Bound Combiners for Downgrade-Resilient Hybrid Post-Quantum Key Establishment: Definition, Proof, and Embedded-Device Cost