Encryption at Rest – Master Key Based on a Hybrid KEM
summary
A practical design for encrypting data at rest using a key hierarchy and a hybrid KEM built from RFC 9180 and JEP 452 is presented to enable key rotation, limit compromise impact, and ensure long-term confidentiality. The hybrid KEM combines a classical and a post-quantum algorithm so the master key remains secure as long as at least one algorithm stays robust, aligning with IETF recommendations for hybrid schemes and ANSSI guidance for post-quantum transition planning.
AI-written summary · about
chapters (6)
- 0:00Introduction
- 3:55Quantum threat on crypto
- 6:20Hybrid KEM for transition
- 10:42Encrypted data risks
- 12:29Hardware KEM transition
- 13:54Q&A
related talks
51mKey Management 101: DEKs, KEKs, and Credentials Living Together, Oh My!
32mEncryption - A Deeper Review
51mDon’t Throw Away the Key: What Developers Should Know about Encryption
40mPatterns for Encryption in Hybrid Cloud
10mSecuring Multi-Cloud APIs Against Quantum Threats
51mKeynote: Data is a new security boundary
13mEnd-to-End Encryption: The Double Ratchet Algorithm
24mTransitioning to Post-Quantum Cryptography in IAM