
8/4/2022 · Bas Westerbaan, Christopher Patton, Peter Wu
What this post added
Introduced experimental support for hybrid post-quantum key agreements (X25519Kyber512Draft00 and X25519Kyber768Draft00) in TLS handshakes for test domains. Open-sourced forks of BoringSSL and Go with PQC support to enable client-side experimentation and performance analysis. Detailed the on-wire packet flow differences between classical and hybrid PQC key exchanges. Explained the underlying hybrid design using X25519 and Kyber, and the TLS group identifiers used. Highlighted performance characteristics and potential trade-offs of Kyber compared to classical key agreements.