A testbed for evaluating post-quantum algorithms for the DNS
summary
SIDN Labs builds a PQC-testbed for DNS that deploys DNSSEC with candidate post‑quantum algorithms, aims to be public next year, and measures real impacts: signature and public‑key bloat against UDP packet limits (roughly 12200‑byte signature and 64‑byte public key targets from legacy constraints), signing load (about 11,000 signatures per 30 minutes for the NL zone), validation latency, and HSM support for protected keys.
AI-written summary · about
chapters (10)
- 0:00Welcome
- 1:06Speaker intro
- 2:09DNS basics
- 7:42DNS security gaps
- 10:29DNSSEC integrity
- 14:42DNSSEC key management
- 15:03Post-quantum DNSSEC requirements
- 21:09Post-quantum DNSSEC testbed
- 24:42Testbed goals and plans
- 25:26Q&A
related talks
36mPost-Quantum Cryptography for Digital Signing
13mNavigating the Quantum Readiness Journey: Open-Source Cryptography, PKI and Signing Tools
23mOverview of the NIST Post Quantum Algorithms
27mA Longitudinal, End-to-End View of the DNSSEC Ecosystem
58mPQC Integration in HSMs: From Standards to Strategy
28mDarwin & Protocols
24mNQSN Singapore: Quantum-Safe Network Testbed with Versatile Reference Applications
01h 27mDNS at 30