X9.146 Quantum TLS
summary
Draft X9.146 adds a new client hello extension so TLS can negotiate certificate formats (classic, alternate/chimera, composite, chameleon, or both signatures). Proof‑of‑concept code using BouncyCastle and wolfSSL (keyfactor/OpenSSL work ongoing) implements the happy path and shows the key result: alternate certificates do not work with unmodified clients, TLS must be extended. Error handling, formal security analysis and backend key‑management for dual private keys remain unresolved; beta testing shows functionality but not production readiness.
AI-written summary · about
chapters (11)
- 0:00Conference overview
- 1:11Expert panel introduction
- 2:14X9.146 draft standard
- 5:03TLS extension for hybrid certs
- 8:33Migration challenges
- 12:46Certificate negotiation process
- 17:02Testing results and next steps
- 21:16Security implications
- 25:52Hybrid certificate use cases
- 28:44IETF collaboration
- 31:44Q&A
related talks
47mQuantum-Safe TLS in Practice With Open Quantum Safe & OpenSSL 3
58mLet's Go Quantum
14mJust the Cryptography You Need to Know for TLS
27mPost-Quantum Cryptography
13mNavigating the Quantum Readiness Journey: Open-Source Cryptography, PKI and Signing Tools
45mUnlocking The Secrets Of TLS
55mUnlocking The Secrets Of TLS
28mA Deep Dive Into Advanced TLS