Using quantum-safe hybrid certificates for signing documents
summary
HAPKIDO work produces a Java proof of concept that extends the open-source DSS extension to create Catalyst hybrid PAdES signatures: a classical signature is placed on the PDF then a post‑quantum signature covers the document plus that signature. Implementation uses a p12 keystore and Bouncy Castle’s Falcon-512 for the PQ part, supports timestamps, and validates both signatures. Findings: migration and validators expect one algorithmand libraries and ecosystems must change to support hybrid certificates.
AI-written summary · about
chapters (8)
- 0:00Welcome
- 1:10Quantum-safe hybrid certificates
- 3:17Quantum threats to contracts
- 8:41PDF signing standards
- 13:44Hybrid signatures with DSS
- 19:11Hybrid migration lessons
- 21:43Future hybrid PDF signing
- 23:30Q&A
related talks
20mHybrid Approach for quantim safe PKI Development for Organizations HAPKIDO
26mCrypto-Agile PKI: A Strategic Blueprint for Post-Quantum Trust
31mHybrid PQC E-Mail Communication: Easing Migration Pain
27mPost-Quantum Cryptography
36mPost-Quantum Cryptography for Digital Signing
39mPQC at the European Telecommunications Standards Institute ETSI
51mJava and Post-Quantum Cryptography
13mNavigating the Quantum Readiness Journey: Open-Source Cryptography, PKI and Signing Tools