Paper pairs ML-KEM and BGV for encrypted health-data processing
The authors select parameters and show feasibility with a proof-of-concept aimed at an embedded use case.
Stories per day · 30 days
3 RSS
Relatedpost-quantum12tls4cryptography3ml-dsa3dtls2lazarus2openssl2south-korea2automotive1benchmark1bgv1classic-mceliece1cloudflare1crossweb-ex1cubridge1data-sovereignty1dihedral-coset-problem1falcon1
25 stories, newest first · one card per story
Stories tagged #ml-kem
NIST publishes post-quantum cryptography transition guidance
NISTIR 8547 sets federal high-value key-establishment work for 2030 and signatures for 2031, with a 2035 overall target.
1
Study compares Kyber, Dilithium and FALCON in simulated vehicle links
Rural V2V and urban V2X runs also include an ECDSA/ECDH baseline measured in the same setup.
Survey maps lattice assumptions if the Dihedral Coset Problem falls
A refuted 2026 quantum-algorithm claim frames which assumptions would move and which deployed parameters would not.
OpenSSL 4.1.0 adds DTLS 1.3 and post-quantum speedups
The October 23 feature release is not a security patch and documents four DTLS issues still awaiting a fix.
OpenSSL 4.1.0 adds DTLS 1.3 and ships four known DTLS bugs
Two bugs can misreport connection state, one can abort handshakes after packet loss, and KeyUpdate can drop a lost NewSessionTicket.
Cloudflare opens closed beta of post-quantum GeoKey Manager
Hybrid ML-KEM-768 and X25519 keep TLS private keys unwrappable only in a chosen region; general availability is planned for Q1 2027.
2
Study compares eight ways to carry large PQC KEMs in IKEv2
Across 126,500 handshakes, no design fully offsets key size, and Classic McEliece fails under hard loss.
Lazarus uses ML-KEM-1024 to hide payloads in Operation FlashHole
Securelist says at least three South Korean organizations were hit, with the earliest evidence in July 2025.
4
Lazarus uses ML-KEM to deliver malware in FlashHole attacks
Kaspersky says phishing led to in-memory loaders and the Cubridge backdoor at South Korean firms, starting in July 2025.
Full-PQC TLS 1.3 beats classical handshakes on constrained devices
On wolfSSL, ML-KEM-512 with ML-DSA-44 was 41% faster than X25519 with RSA-PSS on the Pico W and 8.9 times faster on the ESP32.
Using TLS to protect data
NCSC guidance urges TLS 1.3 with hybrid post-quantum key exchange and retirement of legacy SSL and TLS.
Benchmarking Post-Quantum Key Encapsulation in S3-Compatible Object Storage under Client Concurrency
ML-KEM object encryption cuts S3-store throughput by about 4-5% only when client CPUs are saturated.
Post-Quantum Session Establishment for Matter over Thread: Message Size, Transport, and Protocol Options
Drop-in post-quantum CASE for Matter over Thread exceeds the 1178-byte limit and slows handshakes.
HPQ-AKE: A Provably Secure Sign-Less Hybrid Authenticated Key Exchange Protocol for Bandwidth-Constrained IoT and Edge Networks
HPQ-AKE replaces transcript signatures with dual KEMs, cutting modeled IoT handshake size 56.4% versus hybrid TLS 1.3.
System-Level Optimization Beyond Cryptographic Kernels: An ML-KEM Case Study on Arm Cortex-M7
Researchers cut ML-KEM cycles on Arm Cortex-M7 by up to 74.6% with system-level optimizations.
Support for modern cryptographic algorithms in Workers
Cloudflare Workers Web Crypto now supports ML-KEM and ML-DSA post-quantum algorithms behind a compatibility flag.
2
Is your domain using post-quantum encryption? Now you can see for yourself
Cloudflare adds per-domain post-quantum TLS telemetry to Logpush, Log Explorer, and HTTP Traffic Analytics dashboards.
9
The Price of Peeking: Anytime-Valid Leakage Detection on ML-KEM EM Traces
Anytime-valid betting tests detect ML-KEM electromagnetic leakage while controlling false alarms under repeated looks.
Pinpointing Super-Quadratic Quantum Enumeration Speedups: Exact and Certified Evaluation of the Guessing-Moment Exponent under Product-Distribution Advice
Researchers give an exact method to measure super-quadratic quantum speedups from product side-channel advice.
Transcript-Bound Combiners for Downgrade-Resilient Hybrid Post-Quantum Key Establishment: Definition, Proof, and Embedded-Device Cost
Researchers prove transcript-bound hybrid KEM combiners stop downgrade attacks, adding one hash and no extra messages.
GAUGE: A Formal Framework for Measuring Cryptographic Security under Heterogeneous Adversary Cost Models
GAUGE frames cryptographic security as profiles over adversary cost models, certifying a ranking reversal between ML-KEM-512 and AES-128 from a 4–5% memory pricing shift.
Getting ahead of ‘harvest-now-decrypt-later’: Post-quantum cryptography planning
Opinion piece urges organizations to begin post-quantum cryptography migration now, citing harvest-now-decrypt-later risk and NIST deadlines.
4
OpenSSL’s new alpha build speeds up post-quantum crypto
OpenSSL 4.1.0 alpha1 adds DTLS 1.3 support and speeds up ML-DSA and ML-KEM post-quantum operations across several architectures.
3