Classical Acceptance Is Not Hybrid Authentication: How Deployed X.509 Validation Stacks Treat Hybrid Certificates

Beyond Object Authentication: Context-Closed Post-Quantum Authentication for the WebPKI

LRp is instantiated, a two-plane post-quantum construction that authenticates mutable CA-context state in an update plane while the warm path carries only state-local dependency references selected by explicit profile negotiation.

Combining Post-Quantum Cryptography and Quantum Key Distribution: Taxonomy, Constructions, Proofs, Standards, Deployments and Open Problems

Post-quantum cryptography (PQC) and quantum key distribution (QKD) address the quantum threat from opposite directions: PQC replaces vulnerable public-key algorithms with schemes believed to resist quantum cryptanalysis, while QKD derives keys whose secrecy rests on physical assumptions rather than computational ones....

CryptoCensus: Cryptographic Posture and Post-Quantum Readiness of Docker Hub

Under a draft schedule from the National Institute of Standards and Technology (NIST), affected systems would stop using Rivest–Shamir–Adleman (RSA) and elliptic-curve cryptography after 2035. Traffic recorded today can be decrypted once a sufficiently large quantum computer exists. How far published container images h...

Design and Comparative Evaluation of a Hybrid Post-Quantum Key Exchange Protocol for Quantum-Resistant Onion Routing Networks

The migration from classically secure key agreement to post-quantum cryptography (PQC) is now a practical engineering problem rather than a distant theoretical one and anonymity networks face a particularly acute version of it. Traffic captured today on the Tor network can be archived and decrypted years later once a c...

A Post-Quantum Cryptography Recommendation System with TLS Validation for Heterogeneous Environments

Backward-Compatible Hybrid Post-Quantum Qualified Electronic Signatures: Embedding ML-DSA-65 in PAdES for eIDAS

This work presents an architecture and implementation for hybrid, QES-shaped PAdES that embeds a FIPS 204 ML-DSA-65 signature as an RFC 9882 CMS SignedData counter-signature in the unsignedAttrs of a classical ECDSA-P256 PAdES signature, and maps it to eIDAS 2.0, ETSI and CEN and state its limitations.