Hybrid PQC Digital Signatures and SSI
summary
A hybrid implementation embeds ML‑DSA and ECDSA in parallel inside a cloned WaltID SSI stack, using Kotlin/Java with BouncyCastle; a Java Security provider, JOSE functions and SSI protocol glue get added. Verification of ML‑DSA is fast but public keys and signatures balloon (ECDSA ~66 bytes vs ML‑DSA ~3 KB), requiring database and config changes. The team produces working test‑environment builds of both pure‑PQC and hybrid stacks after a nine‑month project.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 1:03Presenter introduction
- 2:08Self-sovereign identity stack
- 4:14SSI security and regulations
- 7:02Hybrid cryptography approach
- 9:33Hybrid SSI implementation
- 12:48Challenges and crypto agility
- 15:40Project results and plans
- 17:29Zero-knowledge proofs in SSI
- 19:58Q&A
related talks
27mImplementing Post Quantum algorithms in PKCS #11
59mPost-quantum cryptography for .NET developers
28mQuantum Proofing Sigstore: A Tale of Three Approaches
22mPost-Quantum API Security: Preparing your APIs for Q-day
46mFrom Theory to Practice: Real-World Lessons in Post-Quantum Cryptography Migration
47mReal-World Lessons in Post-Quantum Cryptography Migration
13mNavigating the Quantum Readiness Journey: Open-Source Cryptography, PKI and Signing Tools
32mPQC in OpenSSL Library