A Sign of the Times: The Transition to Quantum Secure Authentication
summary
Examines FIDO2 (WebAuthn) migration to post‑quantum primitives with concrete benchmarks: an open‑source end‑to‑end FIDO2 implementation runs PQC on Solo/Nitro firmware and a Cortex‑M33 dev board, showing Dilithium keygen and signatures under 1s while Falcon’s code size is often too large for constrained tokens, and device storage limits matter—SoloKeys ≈50 credentials, U‑Key ≈25. Tests evaluate attestation modes, credential sync (passkeys) tradeoffs, hybrid combos (Dilithium for auth, alternate signature for attestation) and projects a realistic 4–10 year migration timeline.
AI-written summary · about
chapters (10)
- 0:00Post-quantum authentication intro
- 1:13How FIDO2 credentials work
- 4:04FIDO2 attestation modes
- 8:18FIDO2 for post-quantum crypto
- 10:03Hardware token storage limits
- 14:21Post-quantum algorithm benchmarks
- 18:12Open-source FIDO2 plans
- 19:40Migration to post-quantum FIDO2
- 22:54Post-quantum attestation gaps
- 23:37Q&A
related talks
23mEnhancing FIDO2 Security for Safety-Critical Applications: Best Practices and Consid...
30mNavigating the Quantum Readiness Journey: Securing Kubernetes with Quantum-Resis...
27mQuantum-Safe Secure Boot: How hard can it be?
47mWhy FIDO Security Keys & Webauthn are Awesome
21mLeading at the edge: FIDO and the normalization of cryptography
02h 22mFIDO 101
01h 05mChallenges and Opportunities from Quantum-Safe Cryptography
46mAchieving Quantum Readiness: A Comprehensive Approach