{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,20]],"date-time":"2026-10-20T16:51:29Z","timestamp":1792515089751,"version":"4.5.0"},"publisher-location":"New York, NY, USA","reference-count":105,"publisher":"ACM","license":[{"start":{"date-parts":[[2020,10,30]],"date-time":"2020-10-30T00:00:00Z","timestamp":1604016000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/100011199","name":"European Research Council","doi-asserted-by":"publisher","award":["ERC StG 805031 (EPOQUE)"],"award-info":[{"award-number":["ERC StG 805031 (EPOQUE)"]}],"id":[{"id":"10.13039\/100011199","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100000038","name":"Natural Sciences and Engineering Research Council of Canada","doi-asserted-by":"publisher","award":["RGPIN-2016-05146"],"award-info":[{"award-number":["RGPIN-2016-05146"]}],"id":[{"id":"10.13039\/501100000038","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2020,10,30]]},"DOI":"10.1145\/3372297.3423350","type":"proceedings-article","created":{"date-parts":[[2021,3,4]],"date-time":"2021-03-04T16:21:21Z","timestamp":1614874881000},"page":"1461-1480","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":165,"title":["Post-Quantum TLS Without Handshake Signatures"],"prefix":"10.1145","author":[{"given":"Peter","family":"Schwabe","sequence":"first","affiliation":[{"name":"Max Planck Institute for Security and Privacy & Radboud University, Bochum, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Douglas","family":"Stebila","sequence":"additional","affiliation":[{"name":"University of Waterloo, Waterloo, ON, Canada"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Thom","family":"Wiggers","sequence":"additional","affiliation":[{"name":"Radboud University, Nijmegen, Netherlands"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2020,11,2]]},"reference":[{"key":"e_1_3_2_2_1_1","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813707"},{"key":"e_1_3_2_2_2_1","volume-title":"USENIX Security","author":"Alkim Erdem","year":"2016","unstructured":"Erdem Alkim , L\u00e9o Ducas , Thomas P\u00f6ppelmann , and Peter Schwabe . 2016. Post-quantum Key Exchange - A New Hope . In USENIX Security 2016 , Thorsten Holz and Stefan Savage (Eds.). USENIX Association , 327--343. Erdem Alkim, L\u00e9o Ducas, Thomas P\u00f6ppelmann, and Peter Schwabe. 2016. Post-quantum Key Exchange - A New Hope. In USENIX Security 2016, Thorsten Holz and Stefan Savage (Eds.). USENIX Association, 327--343."},{"key":"e_1_3_2_2_3_1","volume-title":"Rafael Misoczki, Edoardo Persichetti, Nicolas Sendrier, Jean-Pierre Tillich, Gilles Z\u00e9mor, and Valentin Vasseur.","author":"Aragon Nicolas","year":"2019","unstructured":"Nicolas Aragon , Paulo Barreto , Slim Bettaieb , Loic Bidoux , Olivier Blazy , Jean-Christophe Deneuville , Phillipe Gaborit , Shay Gueron , Tim Guneysu , Carlos Aguilar Melchor , Rafael Misoczki, Edoardo Persichetti, Nicolas Sendrier, Jean-Pierre Tillich, Gilles Z\u00e9mor, and Valentin Vasseur. 2019 . BIKE. Technical Report. National Institute of Standards and Technology . available at https:\/\/csrc.nist.gov\/projects\/post-quantum-cryptography\/round-2-submissions. Nicolas Aragon, Paulo Barreto, Slim Bettaieb, Loic Bidoux, Olivier Blazy, Jean-Christophe Deneuville, Phillipe Gaborit, Shay Gueron, Tim Guneysu, Carlos Aguilar Melchor, Rafael Misoczki, Edoardo Persichetti, Nicolas Sendrier, Jean-Pierre Tillich, Gilles Z\u00e9mor, and Valentin Vasseur. 2019. BIKE. Technical Report. National Institute of Standards and Technology. available at https:\/\/csrc.nist.gov\/projects\/post-quantum-cryptography\/round-2-submissions."},{"key":"e_1_3_2_2_4_1","doi-asserted-by":"publisher","DOI":"10.1007\/11818175_36"},{"key":"e_1_3_2_2_5_1","volume-title":"30th","author":"Bellare Mihir","unstructured":"Mihir Bellare , Ran Canetti , and Hugo Krawczyk . 1998. A Modular Approach to the Design and Analysis of Authentication and Key Exchange Protocols (Extended Abstract) . In 30th ACM STOC. ACM Press , 419--428. https:\/\/doi.org\/10.1145\/276698.276854 10.1145\/276698.276854 Mihir Bellare, Ran Canetti, and Hugo Krawczyk. 1998. A Modular Approach to the Design and Analysis of Authentication and Key Exchange Protocols (Extended Abstract). In 30th ACM STOC. ACM Press, 419--428. https:\/\/doi.org\/10.1145\/276698.276854"},{"key":"e_1_3_2_2_6_1","volume-title":"Entity Authentication and Key Distribution. In CRYPTO'93 (LNCS","volume":"249","author":"Bellare Mihir","year":"1994","unstructured":"Mihir Bellare and Phillip Rogaway . 1994 . Entity Authentication and Key Distribution. In CRYPTO'93 (LNCS , Vol. 773), Douglas R. Stinson (Ed.). Springer, Heidelberg, 232-- 249 . https:\/\/doi.org\/10.1007\/3--540--48329--2_21 10.1007\/3--540--48329--2_21 Mihir Bellare and Phillip Rogaway. 1994. Entity Authentication and Key Distribution. In CRYPTO'93 (LNCS, Vol. 773), Douglas R. Stinson (Ed.). Springer, Heidelberg, 232--249. https:\/\/doi.org\/10.1007\/3--540--48329--2_21"},{"key":"e_1_3_2_2_7_1","volume-title":"Long Way. In CHES 2014 (LNCS","volume":"92","author":"Benger Naomi","unstructured":"Naomi Benger , Joop van de Pol , Nigel P. Smart , and Yuval Yarom . 2014. \u201cOoh Aah... Just a Little Bit\u201d: A Small Amount of Side Channel Can Go a Long Way. In CHES 2014 (LNCS , Vol. 8731), Lejla Batina and Matthew Robshaw (Eds.). Springer, Heidelberg, 75-- 92 . https:\/\/doi.org\/10.1007\/978--3--662--44709--3_5 10.1007\/978--3--662--44709--3_5 Naomi Benger, Joop van de Pol, Nigel P. Smart, and Yuval Yarom. 2014. \u201cOoh Aah... Just a Little Bit\u201d: A Small Amount of Side Channel Can Go a Long Way. In CHES 2014 (LNCS, Vol. 8731), Lejla Batina and Matthew Robshaw (Eds.). Springer, Heidelberg, 75--92. https:\/\/doi.org\/10.1007\/978--3--662--44709--3_5"},{"key":"e_1_3_2_2_8_1","doi-asserted-by":"publisher","DOI":"10.1007\/11745853_14"},{"key":"e_1_3_2_2_9_1","unstructured":"Daniel J. Bernstein. 2019. Re: [pqc-forum] new quantum cryptanalysis of CSIDH. Posting to the NIST pqc-forum mailing list. https:\/\/groups.google.com\/a\/list.nist.gov\/forum\/#!original\/pqc-forum\/svm1kDy6c54\/0gFOLitbAgAJ. Daniel J. Bernstein. 2019. Re: [pqc-forum] new quantum cryptanalysis of CSIDH. Posting to the NIST pqc-forum mailing list. https:\/\/groups.google.com\/a\/list.nist.gov\/forum\/#!original\/pqc-forum\/svm1kDy6c54\/0gFOLitbAgAJ."},{"key":"e_1_3_2_2_10_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-17656-3_15"},{"key":"e_1_3_2_2_11_1","volume-title":"Downgrade Resilience in Key-Exchange Protocols. In 2016 IEEE Symposium on Security and Privacy. IEEE Computer Society Press, 506--525","author":"Bhargavan Karthikeyan","year":"2016","unstructured":"Karthikeyan Bhargavan , Christina Brzuska , C\u00e9dric Fournet , Matthew Green , Markulf Kohlweiss , and Santiago Zanella-B\u00e9guelin . 2016 . Downgrade Resilience in Key-Exchange Protocols. In 2016 IEEE Symposium on Security and Privacy. IEEE Computer Society Press, 506--525 . https:\/\/doi.org\/10.1109\/SP.2016.37 10.1109\/SP.2016.37 Karthikeyan Bhargavan, Christina Brzuska, C\u00e9dric Fournet, Matthew Green, Markulf Kohlweiss, and Santiago Zanella-B\u00e9guelin. 2016. Downgrade Resilience in Key-Exchange Protocols. In 2016 IEEE Symposium on Security and Privacy. IEEE Computer Society Press, 506--525. https:\/\/doi.org\/10.1109\/SP.2016.37"},{"key":"e_1_3_2_2_12_1","volume-title":"INDOCRYPT 2018 (LNCS","volume":"168","author":"Biasse Jean-Franc","unstructured":"Jean-Franc cois Biasse , Annamaria Iezzi , and Michael J . Jacobson Jr. 2018. A Note on the Security of CSIDH . In INDOCRYPT 2018 (LNCS , Vol. 11356), Debrup Chakraborty and Tetsu Iwata (Eds.). Springer, Heidelberg, 153-- 168 . https:\/\/doi.org\/10.1007\/978--3-030-05378--9_9 10.1007\/978--3-030-05378--9_9 Jean-Franc cois Biasse, Annamaria Iezzi, and Michael J. Jacobson Jr. 2018. A Note on the Security of CSIDH. In INDOCRYPT 2018 (LNCS, Vol. 11356), Debrup Chakraborty and Tetsu Iwata (Eds.). Springer, Heidelberg, 153--168. https:\/\/doi.org\/10.1007\/978--3-030-05378--9_9"},{"key":"e_1_3_2_2_13_1","volume-title":"Biederman and Nicolas Dichtel","author":"Eric","year":"2013","unstructured":"Eric W. Biederman and Nicolas Dichtel . 2013 . https:\/\/man7.org\/linux\/man-pages\/man8\/ip-netns.8.html textttman ip netns. Eric W. Biederman and Nicolas Dichtel. 2013. https:\/\/man7.org\/linux\/man-pages\/man8\/ip-netns.8.html textttman ip netns."},{"key":"e_1_3_2_2_14_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-25510-7_12"},{"key":"e_1_3_2_2_15_1","unstructured":"Joseph Birr-Pixton. [n.d.]. A modern TLS library in Rust. https:\/\/github.com\/ctz\/rustls (accessed 2020-04--23). Joseph Birr-Pixton. [n.d.]. A modern TLS library in Rust. https:\/\/github.com\/ctz\/rustls (accessed 2020-04--23)."},{"key":"e_1_3_2_2_16_1","unstructured":"Joseph Birr-Pixton. 2019. TLS performance: rustls versus OpenSSL. https:\/\/jbp.io\/2019\/07\/01\/rustls-vs-openssl-performance.html Joseph Birr-Pixton. 2019. TLS performance: rustls versus OpenSSL. https:\/\/jbp.io\/2019\/07\/01\/rustls-vs-openssl-performance.html"},{"key":"#cr-split#-e_1_3_2_2_17_1.1","doi-asserted-by":"crossref","unstructured":"Ethan Blanton Vern Paxson and Mark Allman. 2009. TCP Congestion Control. RFC 5681. https:\/\/doi.org\/10.17487\/RFC5681 10.17487\/RFC5681","DOI":"10.17487\/rfc5681"},{"key":"#cr-split#-e_1_3_2_2_17_1.2","doi-asserted-by":"crossref","unstructured":"Ethan Blanton Vern Paxson and Mark Allman. 2009. TCP Congestion Control. RFC 5681. https:\/\/doi.org\/10.17487\/RFC5681","DOI":"10.17487\/rfc5681"},{"key":"e_1_3_2_2_18_1","volume-title":"Advances in Cryptology -- EUROCRYPT 2020 (LNCS","author":"Bonnetain Xavier","year":"2018","unstructured":"Xavier Bonnetain and Andr\u00e9 Schrottenloher . 2020. Quantum Security Analysis of CSIDH . In Advances in Cryptology -- EUROCRYPT 2020 (LNCS , Vol. 12106), Anne Canteaut and Yuval Ishai (Eds.). Springer, 493-- 522 . https:\/\/eprint.iacr.org\/ 2018 \/537. Xavier Bonnetain and Andr\u00e9 Schrottenloher. 2020. Quantum Security Analysis of CSIDH. In Advances in Cryptology -- EUROCRYPT 2020 (LNCS, Vol. 12106), Anne Canteaut and Yuval Ishai (Eds.). Springer, 493--522. https:\/\/eprint.iacr.org\/2018\/537."},{"key":"e_1_3_2_2_19_1","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2018.00032"},{"key":"e_1_3_2_2_20_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.40"},{"key":"e_1_3_2_2_21_1","volume-title":"IJACT","volume":"1","author":"Boyd Colin","year":"2009","unstructured":"Colin Boyd , Yvonne Cliff , Juan Manuel Gonzalez Nieto , and Kenneth G. Paterson . 2009. One-round key exchange in the standard model . IJACT , Vol. 1 ( 2009 ), 181--199. Issue 3. Colin Boyd, Yvonne Cliff, Juan Manuel Gonzalez Nieto, and Kenneth G. Paterson. 2009. One-round key exchange in the standard model. IJACT, Vol. 1 (2009), 181--199. Issue 3."},{"key":"#cr-split#-e_1_3_2_2_22_1.1","doi-asserted-by":"crossref","unstructured":"Robert T. Braden. 1989. Requirements for Internet Hosts - Communication Layers. RFC 1122. https:\/\/doi.org\/10.17487\/RFC1122 10.17487\/RFC1122","DOI":"10.17487\/rfc1122"},{"key":"#cr-split#-e_1_3_2_2_22_1.2","doi-asserted-by":"crossref","unstructured":"Robert T. Braden. 1989. Requirements for Internet Hosts - Communication Layers. RFC 1122. https:\/\/doi.org\/10.17487\/RFC1122","DOI":"10.17487\/rfc1122"},{"key":"e_1_3_2_2_23_1","volume-title":"Remote Timing Attacks Are Still Practical. In ESORICS 2011 (LNCS","volume":"371","author":"Brumley Billy Bob","year":"2011","unstructured":"Billy Bob Brumley and Nicola Tuveri . 2011 . Remote Timing Attacks Are Still Practical. In ESORICS 2011 (LNCS , Vol. 6879), Vijay Atluri and Claudia D'iaz (Eds.). Springer, Heidelberg, 355-- 371 . https:\/\/doi.org\/10.1007\/978--3--642--23822--2_20 10.1007\/978--3--642--23822--2_20 Billy Bob Brumley and Nicola Tuveri. 2011. Remote Timing Attacks Are Still Practical. In ESORICS 2011 (LNCS, Vol. 6879), Vijay Atluri and Claudia D'iaz (Eds.). Springer, Heidelberg, 355--371. https:\/\/doi.org\/10.1007\/978--3--642--23822--2_20"},{"key":"e_1_3_2_2_25_1","volume-title":"ACM CCS 2011","author":"Brzuska Christina","year":"2046","unstructured":"Christina Brzuska , Marc Fischlin , Bogdan Warinschi , and Stephen C. Williams . 2011. Composability of Bellare-Rogaway key exchange protocols . In ACM CCS 2011 , Yan Chen, George Danezis, and Vitaly Shmatikov (Eds.). ACM Press, 51--62. https:\/\/doi.org\/10.1145\/ 2046 707.2046716 10.1145\/2046707.2046716 Christina Brzuska, Marc Fischlin, Bogdan Warinschi, and Stephen C. Williams. 2011. Composability of Bellare-Rogaway key exchange protocols. In ACM CCS 2011, Yan Chen, George Danezis, and Vitaly Shmatikov (Eds.). ACM Press, 51--62. https:\/\/doi.org\/10.1145\/2046707.2046716"},{"key":"e_1_3_2_2_26_1","unstructured":"A. Casanova J.-C. Faug\u00e8re G. Macario-Rat J. Patarin L. Perret and J. Ryckeghem. 2019. GeMSS. Technical Report. National Institute of Standards and Technology. available at https:\/\/csrc.nist.gov\/projects\/post-quantum-cryptography\/round-2-submissions. A. Casanova J.-C. Faug\u00e8re G. Macario-Rat J. Patarin L. Perret and J. Ryckeghem. 2019. GeMSS. Technical Report. National Institute of Standards and Technology. available at https:\/\/csrc.nist.gov\/projects\/post-quantum-cryptography\/round-2-submissions."},{"key":"e_1_3_2_2_27_1","volume-title":"CSIDH: An Efficient Post-Quantum Commutative Group Action. In ASIACRYPT","author":"Castryck Wouter","year":"2018","unstructured":"Wouter Castryck , Tanja Lange , Chloe Martindale , Lorenz Panny , and Joost Renes . 2018 . CSIDH: An Efficient Post-Quantum Commutative Group Action. In ASIACRYPT 2018, Part III (LNCS, Vol . 11274), Thomas Peyrin and Steven Galbraith (Eds.). Springer , Heidelberg, 395--427. https:\/\/doi.org\/10.1007\/978--3-030-03332--3_15 10.1007\/978--3-030-03332--3_15 Wouter Castryck, Tanja Lange, Chloe Martindale, Lorenz Panny, and Joost Renes. 2018. CSIDH: An Efficient Post-Quantum Commutative Group Action. In ASIACRYPT 2018, Part III (LNCS, Vol. 11274), Thomas Peyrin and Steven Galbraith (Eds.). Springer, Heidelberg, 395--427. https:\/\/doi.org\/10.1007\/978--3-030-03332--3_15"},{"key":"e_1_3_2_2_28_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-29959-0_20"},{"key":"#cr-split#-e_1_3_2_2_29_1.1","doi-asserted-by":"crossref","unstructured":"Yuchung Cheng Jerry Chu Sivasankar Radhakrishnan and Arvind Jain. 2014. TCP Fast Open. RFC 7413. https:\/\/doi.org\/10.17487\/RFC7413 10.17487\/RFC7413","DOI":"10.17487\/rfc7413"},{"key":"#cr-split#-e_1_3_2_2_29_1.2","doi-asserted-by":"crossref","unstructured":"Yuchung Cheng Jerry Chu Sivasankar Radhakrishnan and Arvind Jain. 2014. TCP Fast Open. RFC 7413. https:\/\/doi.org\/10.17487\/RFC7413","DOI":"10.17487\/rfc7413"},{"key":"e_1_3_2_2_30_1","unstructured":"David Cooper Daniel Apon Quynh Dang Michael Davidson Morris Dworkin and Carl Miller. 2019. SP 800--208 (Draft) -- Recommendation for Stateful Hash-Based Signature Schemes. Technical Report. NIST. https:\/\/csrc.nist.gov\/publications\/detail\/sp\/800--208\/draft. David Cooper Daniel Apon Quynh Dang Michael Davidson Morris Dworkin and Carl Miller. 2019. SP 800--208 (Draft) -- Recommendation for Stateful Hash-Based Signature Schemes. Technical Report. NIST. https:\/\/csrc.nist.gov\/publications\/detail\/sp\/800--208\/draft."},{"key":"e_1_3_2_2_31_1","unstructured":"Eric Crockett Christian Paquin and Douglas Stebila. 2019. Prototyping post-quantum and hybrid key exchange and authentication in TLS and SSH. Workshop Record of the Second PQC Standardization Conference. https:\/\/csrc.nist.gov\/CSRC\/media\/Events\/Second-PQC-Standardization-Conference\/documents\/accepted-papers\/stebila-prototyping-post-quantum.pdf. Eric Crockett Christian Paquin and Douglas Stebila. 2019. Prototyping post-quantum and hybrid key exchange and authentication in TLS and SSH. Workshop Record of the Second PQC Standardization Conference. https:\/\/csrc.nist.gov\/CSRC\/media\/Events\/Second-PQC-Standardization-Conference\/documents\/accepted-papers\/stebila-prototyping-post-quantum.pdf."},{"key":"e_1_3_2_2_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/1180405.1180454"},{"key":"e_1_3_2_2_33_1","volume-title":"On the Tight Security of TLS 1.3: Theoretically-Sound Cryptographic Parameters for Real-World Deployments. Journal of Cryptology","author":"Diemert Denis","year":"2020","unstructured":"Denis Diemert and Tibor Jager . 2020. On the Tight Security of TLS 1.3: Theoretically-Sound Cryptographic Parameters for Real-World Deployments. Journal of Cryptology ( 2020 ). https:\/\/eprint.iacr.org\/2020\/726 To appear. Denis Diemert and Tibor Jager. 2020. On the Tight Security of TLS 1.3: Theoretically-Sound Cryptographic Parameters for Real-World Deployments. Journal of Cryptology (2020). https:\/\/eprint.iacr.org\/2020\/726 To appear."},{"key":"e_1_3_2_2_34_1","volume-title":"Technical Report","author":"Ding Jintai","unstructured":"Jintai Ding , Ming-Shing Chen , Albrecht Petzoldt , Dieter Schmidt , and Bo-Yin Yang . 2019. Rainbow. Technical Report . National Institute of Standards and Technology . available at https:\/\/csrc.nist.gov\/projects\/post-quantum-cryptography\/round-2-submissions. Jintai Ding, Ming-Shing Chen, Albrecht Petzoldt, Dieter Schmidt, and Bo-Yin Yang. 2019. Rainbow. Technical Report. National Institute of Standards and Technology. available at https:\/\/csrc.nist.gov\/projects\/post-quantum-cryptography\/round-2-submissions."},{"key":"e_1_3_2_2_35_1","volume-title":"Composability and On-Line Deniability of Authentication. In TCC 2009 (LNCS","volume":"162","author":"Dodis Yevgeniy","year":"2009","unstructured":"Yevgeniy Dodis , Jonathan Katz , Adam Smith , and Shabsi Walfish . 2009 . Composability and On-Line Deniability of Authentication. In TCC 2009 (LNCS , Vol. 5444), Omer Reingold (Ed.). Springer, Heidelberg, 146-- 162 . https:\/\/doi.org\/10.1007\/978--3--642-00457--5_10 10.1007\/978--3--642-00457--5_10 Yevgeniy Dodis, Jonathan Katz, Adam Smith, and Shabsi Walfish. 2009. Composability and On-Line Deniability of Authentication. In TCC 2009 (LNCS, Vol. 5444), Omer Reingold (Ed.). Springer, Heidelberg, 146--162. https:\/\/doi.org\/10.1007\/978--3--642-00457--5_10"},{"key":"e_1_3_2_2_36_1","volume-title":"WireGuard: Next Generation Kernel Network Tunnel. In NDSS","author":"Donenfeld Jason A.","year":"2017","unstructured":"Jason A. Donenfeld . 2017 . WireGuard: Next Generation Kernel Network Tunnel. In NDSS 2017. The Internet Society. Jason A. Donenfeld. 2017. WireGuard: Next Generation Kernel Network Tunnel. In NDSS 2017. The Internet Society."},{"key":"e_1_3_2_2_37_1","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813653"},{"key":"e_1_3_2_2_39_1","volume-title":"ACISP 15 (LNCS","author":"Dowling Benjamin","year":"1996","unstructured":"Benjamin Dowling and Douglas Stebila . 2015. Modelling Ciphersuite and Version Negotiation in the TLS Protocol . In ACISP 15 (LNCS , Vol. 9144), Ernest Foo and Douglas Stebila (Eds.). Springer, Heidelberg, 270-- 288 . https:\/\/doi.org\/10.1007\/978--3--319-- 1996 2--7_16 10.1007\/978--3--319--19962--7_16 Benjamin Dowling and Douglas Stebila. 2015. Modelling Ciphersuite and Version Negotiation in the TLS Protocol. In ACISP 15 (LNCS, Vol. 9144), Ernest Foo and Douglas Stebila (Eds.). Springer, Heidelberg, 270--288. https:\/\/doi.org\/10.1007\/978--3--319--19962--7_16"},{"key":"e_1_3_2_2_40_1","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660308"},{"key":"e_1_3_2_2_42_1","unstructured":"National Institute for Standards and Technology. 2016. Submission Requirements and Evaluation Criteria for the Post-Quantum Cryptography Standardization Process. https:\/\/csrc.nist.gov\/CSRC\/media\/Projects\/Post-Quantum-Cryptography\/documents\/call-for-proposals-final-dec-2016.pdf. National Institute for Standards and Technology. 2016. Submission Requirements and Evaluation Criteria for the Post-Quantum Cryptography Standardization Process. https:\/\/csrc.nist.gov\/CSRC\/media\/Projects\/Post-Quantum-Cryptography\/documents\/call-for-proposals-final-dec-2016.pdf."},{"key":"e_1_3_2_2_43_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-30057-8_28"},{"key":"e_1_3_2_2_44_1","volume-title":"Secure Integration of Asymmetric and Symmetric Encryption Schemes. In CRYPTO'99 (LNCS","volume":"554","author":"Fujisaki Eiichiro","year":"1999","unstructured":"Eiichiro Fujisaki and Tatsuaki Okamoto . 1999 . Secure Integration of Asymmetric and Symmetric Encryption Schemes. In CRYPTO'99 (LNCS , Vol. 1666), Michael J. Wiener (Ed.). Springer, Heidelberg, 537-- 554 . https:\/\/doi.org\/10.1007\/3--540--48405--1_34 10.1007\/3--540--48405--1_34 Eiichiro Fujisaki and Tatsuaki Okamoto. 1999. Secure Integration of Asymmetric and Symmetric Encryption Schemes. In CRYPTO'99 (LNCS, Vol. 1666), Michael J. Wiener (Ed.). Springer, Heidelberg, 537--554. https:\/\/doi.org\/10.1007\/3--540--48405--1_34"},{"key":"e_1_3_2_2_45_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-53887-6_3"},{"key":"e_1_3_2_2_46_1","first-page":"923","article-title":"Efficient Implementation of Password-based Authenticated Key Exchange from RLWE and Post-Quantum TLS","volume":"20","author":"Gao Xinwei","year":"2018","unstructured":"Xinwei Gao , Jintai Ding , Lin Li , Saraswathy RV, and Jiqiang Liu . 2018 . Efficient Implementation of Password-based Authenticated Key Exchange from RLWE and Post-Quantum TLS . Int. J. Netw. Secur. , Vol. 20 , 5 (2018), 923 -- 930 . Xinwei Gao, Jintai Ding, Lin Li, Saraswathy RV, and Jiqiang Liu. 2018. Efficient Implementation of Password-based Authenticated Key Exchange from RLWE and Post-Quantum TLS. Int. J. Netw. Secur., Vol. 20, 5 (2018), 923--930.","journal-title":"Int. J. Netw. Secur."},{"key":"e_1_3_2_2_47_1","volume-title":"Billy Bob Brumley, and Yuval Yarom","author":"Garc'ia Cesar Pereida","year":"2016","unstructured":"Cesar Pereida Garc'ia , Billy Bob Brumley, and Yuval Yarom . 2016 . \u201cMake Sure DSA Signing Exponentiations Really are Constant-Time\u201d. In ACM CCS 2016, Edgar R. Weippl, Stefan Katzenbeisser, Christopher Kruegel, Andrew C. Myers, and Shai Halevi (Eds.). ACM Press , 1639--1650. https:\/\/doi.org\/10.1145\/2976749.2978420 10.1145\/2976749.2978420 Cesar Pereida Garc'ia, Billy Bob Brumley, and Yuval Yarom. 2016. \u201cMake Sure DSA Signing Exponentiations Really are Constant-Time\u201d. In ACM CCS 2016, Edgar R. Weippl, Stefan Katzenbeisser, Christopher Kruegel, Andrew C. Myers, and Shai Halevi (Eds.). ACM Press, 1639--1650. https:\/\/doi.org\/10.1145\/2976749.2978420"},{"key":"e_1_3_2_2_48_1","unstructured":"Google. [n.d.]. BoringSSL. https:\/\/boringssl.googlesource.com\/boringssl\/ Google. [n.d.]. BoringSSL. https:\/\/boringssl.googlesource.com\/boringssl\/"},{"key":"e_1_3_2_2_50_1","unstructured":"Stephen Hemminger Fabio Ludovici and Hagen Paul Pfeiffer. 2011. https:\/\/man7.org\/linux\/man-pages\/man8\/tc-netem.8.html textttman ip netem. Stephen Hemminger Fabio Ludovici and Hagen Paul Pfeiffer. 2011. https:\/\/man7.org\/linux\/man-pages\/man8\/tc-netem.8.html textttman ip netem."},{"key":"e_1_3_2_2_51_1","doi-asserted-by":"crossref","unstructured":"Paul E. Hoffman. 2002. SMTP Service Extension for Secure SMTP over Transport Layer Security. IETF RFC 3207. https:\/\/rfc-editor.org\/rfc\/rfc3207.txt. Paul E. Hoffman. 2002. SMTP Service Extension for Secure SMTP over Transport Layer Security. IETF RFC 3207. https:\/\/rfc-editor.org\/rfc\/rfc3207.txt.","DOI":"10.17487\/rfc3207"},{"key":"e_1_3_2_2_52_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-70500-2_12"},{"key":"e_1_3_2_2_53_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-66787-4_12"},{"key":"e_1_3_2_2_54_1","unstructured":"Andreas H\u00fclsing Joost Rijneveld John M. Schanck and Peter Schwabe. 2017b. NTRU-KEM-HRSS17: Algorithm Specification and Supporting Documentation. Submission to the NIST Post-Quantum Cryptography Standardization Project. https:\/\/cryptojedi.org\/papers\/#ntrukemnist. Andreas H\u00fclsing Joost Rijneveld John M. Schanck and Peter Schwabe. 2017b. NTRU-KEM-HRSS17: Algorithm Specification and Supporting Documentation. Submission to the NIST Post-Quantum Cryptography Standardization Project. https:\/\/cryptojedi.org\/papers\/#ntrukemnist."},{"key":"e_1_3_2_2_55_1","doi-asserted-by":"crossref","unstructured":"Andreas H\u00fclsing Denis Butin Stefan-Lukas Gazdag Joost Rijneveld and Aziz Mohaisen. 2018. XMSS: eXtended Merkle Signature Scheme. IETF RFC 8391. https:\/\/rfc-editor.org\/rfc\/rfc8391.txt. Andreas H\u00fclsing Denis Butin Stefan-Lukas Gazdag Joost Rijneveld and Aziz Mohaisen. 2018. XMSS: eXtended Merkle Signature Scheme. IETF RFC 8391. https:\/\/rfc-editor.org\/rfc\/rfc8391.txt.","DOI":"10.17487\/RFC8391"},{"key":"e_1_3_2_2_56_1","volume-title":"2021 (to appear). Post-quantum WireGuard. In 2021 IEEE Symposium on Security and Privacy","author":"H\u00fclsing Andreas","year":"2020","unstructured":"Andreas H\u00fclsing , Kai-Chun Ning , Peter Schwabe , Florian Weber , and Philip R. Zimmermann . 2021 (to appear). Post-quantum WireGuard. In 2021 IEEE Symposium on Security and Privacy \". IEEE Computer Society Press . http:\/\/eprint.iacr.org\/ 2020 \/379. Andreas H\u00fclsing, Kai-Chun Ning, Peter Schwabe, Florian Weber, and Philip R. Zimmermann. 2021 (to appear). Post-quantum WireGuard. In 2021 IEEE Symposium on Security and Privacy\". IEEE Computer Society Press. http:\/\/eprint.iacr.org\/2020\/379."},{"key":"e_1_3_2_2_57_1","volume-title":"QUIC: A UDP-Based Multiplexed and Secure Transport. Internet-Draft draft-ietf-quic-transport-29. Internet Engineering Task Force. https:\/\/datatracker.ietf.org\/doc\/html\/draft-ietf-quic-transport-29","author":"Iyengar Jana","year":"2020","unstructured":"Jana Iyengar and Martin Thomson . 2020 . QUIC: A UDP-Based Multiplexed and Secure Transport. Internet-Draft draft-ietf-quic-transport-29. Internet Engineering Task Force. https:\/\/datatracker.ietf.org\/doc\/html\/draft-ietf-quic-transport-29 Jana Iyengar and Martin Thomson. 2020. QUIC: A UDP-Based Multiplexed and Secure Transport. Internet-Draft draft-ietf-quic-transport-29. Internet Engineering Task Force. https:\/\/datatracker.ietf.org\/doc\/html\/draft-ietf-quic-transport-29"},{"key":"e_1_3_2_2_58_1","volume-title":"On the Security of TLS-DHE in the Standard Model. In CRYPTO 2012 (LNCS","volume":"293","author":"Jager Tibor","year":"2012","unstructured":"Tibor Jager , Florian Kohlar , Sven Sch\"age, and J\u00f6rg Schwenk . 2012 . On the Security of TLS-DHE in the Standard Model. In CRYPTO 2012 (LNCS , Vol. 7417), Reihaneh Safavi-Naini and Ran Canetti (Eds.). Springer, Heidelberg, 273-- 293 . https:\/\/doi.org\/10.1007\/978--3--642--32009--5_17 10.1007\/978--3--642--32009--5_17 Tibor Jager, Florian Kohlar, Sven Sch\"age, and J\u00f6rg Schwenk. 2012. On the Security of TLS-DHE in the Standard Model. In CRYPTO 2012 (LNCS, Vol. 7417), Reihaneh Safavi-Naini and Ran Canetti (Eds.). Springer, Heidelberg, 273--293. https:\/\/doi.org\/10.1007\/978--3--642--32009--5_17"},{"key":"e_1_3_2_2_59_1","volume-title":"Minerva: Lattice attacks strike again. https:\/\/minerva.crocs.fi.muni.cz\/ (accessed 2020-04--30).","author":"Jancar Jan","year":"2019","unstructured":"Jan Jancar , Petr Svenda , and Vladimir Sedlacek . 2019 . Minerva: Lattice attacks strike again. https:\/\/minerva.crocs.fi.muni.cz\/ (accessed 2020-04--30). Jan Jancar, Petr Svenda, and Vladimir Sedlacek. 2019. Minerva: Lattice attacks strike again. https:\/\/minerva.crocs.fi.muni.cz\/ (accessed 2020-04--30)."},{"key":"e_1_3_2_2_60_1","volume-title":"Basil Hess, Amir Jalali, Brian Koziel, Brian LaMacchia, Patrick Longa, Michael Naehrig, Joost Renes, Vladimir Soukharev, David Urbanik, and Geovandro Pereira.","author":"Jao David","year":"2019","unstructured":"David Jao , Reza Azarderakhsh , Matthew Campagna , Craig Costello , Luca De Feo , Basil Hess, Amir Jalali, Brian Koziel, Brian LaMacchia, Patrick Longa, Michael Naehrig, Joost Renes, Vladimir Soukharev, David Urbanik, and Geovandro Pereira. 2019 . SIKE. Technical Report. National Institute of Standards and Technology . available at https:\/\/csrc.nist.gov\/projects\/post-quantum-cryptography\/round-2-submissions. David Jao, Reza Azarderakhsh, Matthew Campagna, Craig Costello, Luca De Feo, Basil Hess, Amir Jalali, Brian Koziel, Brian LaMacchia, Patrick Longa, Michael Naehrig, Joost Renes, Vladimir Soukharev, David Urbanik, and Geovandro Pereira. 2019. SIKE. Technical Report. National Institute of Standards and Technology. available at https:\/\/csrc.nist.gov\/projects\/post-quantum-cryptography\/round-2-submissions."},{"key":"e_1_3_2_2_61_1","doi-asserted-by":"crossref","unstructured":"Simon Josefsson. 2006. Storing Certificates in the Domain Name System (DNS). IETF RFC 4398. https:\/\/rfc-editor.org\/rfc\/rfc4398.txt. Simon Josefsson. 2006. Storing Certificates in the Domain Name System (DNS). IETF RFC 4398. https:\/\/rfc-editor.org\/rfc\/rfc4398.txt.","DOI":"10.17487\/rfc4398"},{"key":"e_1_3_2_2_62_1","unstructured":"Matthias Kannwischer Joost Rijneveld Peter Schwabe Douglas Stebila and Thom Wiggers. [n.d.]. PQClean: clean portable tested implementations of post-quantum cryptography. https:\/\/github.com\/pqclean\/pqclean Matthias Kannwischer Joost Rijneveld Peter Schwabe Douglas Stebila and Thom Wiggers. [n.d.]. PQClean: clean portable tested implementations of post-quantum cryptography. https:\/\/github.com\/pqclean\/pqclean"},{"key":"e_1_3_2_2_63_1","doi-asserted-by":"crossref","unstructured":"Charlie Kaufmann Paul E. Hoffman Yoav Nir and Pasi Eronen. 2014. Internet Key Exchange Protocol Version 2 (IKEv2). IETF RFC 7296. https:\/\/rfc-editor.org\/rfc\/rfc7296.txt. Charlie Kaufmann Paul E. Hoffman Yoav Nir and Pasi Eronen. 2014. Internet Key Exchange Protocol Version 2 (IKEv2). IETF RFC 7296. https:\/\/rfc-editor.org\/rfc\/rfc7296.txt.","DOI":"10.17487\/rfc7296"},{"key":"e_1_3_2_2_64_1","unstructured":"Franziskus Kiefer and Krzysztof Kwiatkowski. 2018. Hybrid ECDHE-SIDH Key Exchange for TLS. Internet-Draft draft-kiefer-tls-ecdhe-sidh-00. Internet Engineering Task Force. https:\/\/datatracker.ietf.org\/doc\/html\/draft-kiefer-tls-ecdhe-sidh-00 Work in Progress. Franziskus Kiefer and Krzysztof Kwiatkowski. 2018. Hybrid ECDHE-SIDH Key Exchange for TLS. Internet-Draft draft-kiefer-tls-ecdhe-sidh-00. Internet Engineering Task Force. https:\/\/datatracker.ietf.org\/doc\/html\/draft-kiefer-tls-ecdhe-sidh-00 Work in Progress."},{"key":"e_1_3_2_2_65_1","doi-asserted-by":"publisher","DOI":"10.1109\/NDSS.1996.492418"},{"key":"e_1_3_2_2_66_1","volume-title":"Authenticated Diffie-Hellman and Its Use in the IKE Protocols. In CRYPTO 2003 (LNCS","volume":"425","author":"Krawczyk Hugo","year":"2003","unstructured":"Hugo Krawczyk . 2003 . SIGMA: The \u201cSIGn-and-MAc\u201d Approach to Authenticated Diffie-Hellman and Its Use in the IKE Protocols. In CRYPTO 2003 (LNCS , Vol. 2729), Dan Boneh (Ed.). Springer, Heidelberg, 400-- 425 . https:\/\/doi.org\/10.1007\/978--3--540--45146--4_24 10.1007\/978--3--540--45146--4_24 Hugo Krawczyk. 2003. SIGMA: The \u201cSIGn-and-MAc\u201d Approach to Authenticated Diffie-Hellman and Its Use in the IKE Protocols. In CRYPTO 2003 (LNCS, Vol. 2729), Dan Boneh (Ed.). Springer, Heidelberg, 400--425. https:\/\/doi.org\/10.1007\/978--3--540--45146--4_24"},{"key":"e_1_3_2_2_67_1","volume-title":"HMQV: A High-Performance Secure Diffie-Hellman Protocol. In CRYPTO 2005 (LNCS","volume":"566","author":"Krawczyk Hugo","year":"2005","unstructured":"Hugo Krawczyk . 2005 a . HMQV: A High-Performance Secure Diffie-Hellman Protocol. In CRYPTO 2005 (LNCS , Vol. 3621), Victor Shoup (Ed.). Springer, Heidelberg, 546-- 566 . https:\/\/doi.org\/10.1007\/11535218_33 10.1007\/11535218_33 Hugo Krawczyk. 2005 a. HMQV: A High-Performance Secure Diffie-Hellman Protocol. In CRYPTO 2005 (LNCS, Vol. 3621), Victor Shoup (Ed.). Springer, Heidelberg, 546--566. https:\/\/doi.org\/10.1007\/11535218_33"},{"key":"e_1_3_2_2_69_1","volume-title":"Cryptographic Extraction and Key Derivation: The HKDF Scheme. In CRYPTO 2010 (LNCS","volume":"648","author":"Krawczyk Hugo","year":"2010","unstructured":"Hugo Krawczyk . 2010 . Cryptographic Extraction and Key Derivation: The HKDF Scheme. In CRYPTO 2010 (LNCS , Vol. 6223), Tal Rabin (Ed.). Springer, Heidelberg, 631-- 648 . https:\/\/doi.org\/10.1007\/978--3--642--14623--7_34 10.1007\/978--3--642--14623--7_34 Hugo Krawczyk. 2010. Cryptographic Extraction and Key Derivation: The HKDF Scheme. In CRYPTO 2010 (LNCS, Vol. 6223), Tal Rabin (Ed.). Springer, Heidelberg, 631--648. https:\/\/doi.org\/10.1007\/978--3--642--14623--7_34"},{"key":"e_1_3_2_2_70_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-40041-4_24"},{"key":"e_1_3_2_2_71_1","volume-title":"Proc. IEEE European Symposium on Security and Privacy (EuroS&P) 2016","author":"Krawczyk Hugo","year":"2017","unstructured":"Hugo Krawczyk and Hoeteck Wee . 2017 . The OPTLS Protocol and TLS 1.3 . In Proc. IEEE European Symposium on Security and Privacy (EuroS&P) 2016 . IEEE. https:\/\/eprint.iacr.org\/2015\/978.pdf. Hugo Krawczyk and Hoeteck Wee. 2017. The OPTLS Protocol and TLS 1.3. In Proc. IEEE European Symposium on Security and Privacy (EuroS&P) 2016. IEEE. https:\/\/eprint.iacr.org\/2015\/978.pdf."},{"key":"e_1_3_2_2_72_1","volume-title":"OPTLS revisited. Master's thesis","author":"Kuhnen Wouter","unstructured":"Wouter Kuhnen . 2018. OPTLS revisited. Master's thesis . Radboud University . https:\/\/www.ru.nl\/publish\/pages\/769526\/thesis-final.pdf. Wouter Kuhnen. 2018. OPTLS revisited. Master's thesis. Radboud University. https:\/\/www.ru.nl\/publish\/pages\/769526\/thesis-final.pdf."},{"key":"e_1_3_2_2_73_1","volume-title":"Workshop Record of the Second PQC Standardization Conference. https:\/\/csrc.nist.gov\/CSRC\/media\/Events\/Second-PQC-Standardization-Conference\/documents\/accepted-papers\/kwiatkowski-measuring-tls.pdf.","author":"Kwiatkowski Krzysztof","year":"2019","unstructured":"Krzysztof Kwiatkowski , Nick Sullivan , Adam Langley , Dave Levin , and Alan Mislove . 2019 . Measuring TLS key exchange with post-quantum KEM . Workshop Record of the Second PQC Standardization Conference. https:\/\/csrc.nist.gov\/CSRC\/media\/Events\/Second-PQC-Standardization-Conference\/documents\/accepted-papers\/kwiatkowski-measuring-tls.pdf. Krzysztof Kwiatkowski, Nick Sullivan, Adam Langley, Dave Levin, and Alan Mislove. 2019. Measuring TLS key exchange with post-quantum KEM. Workshop Record of the Second PQC Standardization Conference. https:\/\/csrc.nist.gov\/CSRC\/media\/Events\/Second-PQC-Standardization-Conference\/documents\/accepted-papers\/kwiatkowski-measuring-tls.pdf."},{"key":"e_1_3_2_2_74_1","unstructured":"Kris Kwiatkowski and Luke Valenta. 2019. The TLS Post-Quantum Experiment. Post on the Cloudflare blog. https:\/\/blog.cloudflare.com\/the-tls-post-quantum-experiment\/. Kris Kwiatkowski and Luke Valenta. 2019. The TLS Post-Quantum Experiment. Post on the Cloudflare blog. https:\/\/blog.cloudflare.com\/the-tls-post-quantum-experiment\/."},{"key":"e_1_3_2_2_75_1","unstructured":"Adam Langley. 2016. CECPQ1 results. Blog post. https:\/\/www.imperialviolet.org\/2016\/11\/28\/cecpq1.html. Adam Langley. 2016. CECPQ1 results. Blog post. https:\/\/www.imperialviolet.org\/2016\/11\/28\/cecpq1.html."},{"key":"e_1_3_2_2_76_1","unstructured":"Adam Langley. 2018. CECPQ2. Blog post. https:\/\/www.imperialviolet.org\/2018\/12\/12\/cecpq2.html. Adam Langley. 2018. CECPQ2. Blog post. https:\/\/www.imperialviolet.org\/2018\/12\/12\/cecpq2.html."},{"key":"e_1_3_2_2_77_1","unstructured":"Linux textttman-pages project. [n.d.]. tcp - TCP protocol. https:\/\/man7.org\/linux\/man-pages\/man7\/tcp.7.html Linux textttman-pages project. [n.d.]. tcp - TCP protocol. https:\/\/man7.org\/linux\/man-pages\/man7\/tcp.7.html"},{"key":"e_1_3_2_2_78_1","volume-title":"Technical Report","author":"Lyubashevsky Vadim","unstructured":"Vadim Lyubashevsky , L\u00e9o Ducas , Eike Kiltz , Tancr\u00e8de Lepoint , Peter Schwabe , Gregor Seiler , and Damien Stehl\u00e9 . 2019. CRYSTALS- DILITHIUM. Technical Report . National Institute of Standards and Technology . available at https:\/\/csrc.nist.gov\/projects\/post-quantum-cryptography\/round-2-submissions. Vadim Lyubashevsky, L\u00e9o Ducas, Eike Kiltz, Tancr\u00e8de Lepoint, Peter Schwabe, Gregor Seiler, and Damien Stehl\u00e9. 2019. CRYSTALS-DILITHIUM. Technical Report. National Institute of Standards and Technology. available at https:\/\/csrc.nist.gov\/projects\/post-quantum-cryptography\/round-2-submissions."},{"key":"e_1_3_2_2_79_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-49100-4_11"},{"key":"e_1_3_2_2_80_1","volume-title":"NIST Second PQC Standardization Conference. https:\/\/csrc.nist.gov\/Presentations\/2019\/the-2nd-round-of-the-nist-pqc-standardization-proc","author":"Moody Dustin","year":"2019","unstructured":"Dustin Moody . 2019 . The 2nd Round of the NIST PQC Standardization Process -- Opening Remarks . In NIST Second PQC Standardization Conference. https:\/\/csrc.nist.gov\/Presentations\/2019\/the-2nd-round-of-the-nist-pqc-standardization-proc Dustin Moody. 2019. The 2nd Round of the NIST PQC Standardization Process -- Opening Remarks. In NIST Second PQC Standardization Conference. https:\/\/csrc.nist.gov\/Presentations\/2019\/the-2nd-round-of-the-nist-pqc-standardization-proc"},{"key":"#cr-split#-e_1_3_2_2_81_1.1","doi-asserted-by":"crossref","unstructured":"John Nagle. 1984. Congestion Control in IP\/TCP Internetworks. RFC 896. https:\/\/doi.org\/10.17487\/RFC0896 10.17487\/RFC0896","DOI":"10.17487\/rfc0896"},{"key":"#cr-split#-e_1_3_2_2_81_1.2","doi-asserted-by":"crossref","unstructured":"John Nagle. 1984. Congestion Control in IP\/TCP Internetworks. RFC 896. https:\/\/doi.org\/10.17487\/RFC0896","DOI":"10.17487\/rfc0896"},{"key":"e_1_3_2_2_82_1","doi-asserted-by":"crossref","unstructured":"Chris Newman. 1999. Using TLS with IMAP POP3 and ACAP. IETF RFC 2595. https:\/\/rfc-editor.org\/rfc\/rfc2595.txt. Chris Newman. 1999. Using TLS with IMAP POP3 and ACAP. IETF RFC 2595. https:\/\/rfc-editor.org\/rfc\/rfc2595.txt.","DOI":"10.17487\/rfc2595"},{"key":"e_1_3_2_2_83_1","unstructured":"OpenSSL. [n.d.]. OpenSSL: The Open Source toolkit for SSL\/TLS. https:\/\/www.openssl.org\/ (accessed 2020-04--23). OpenSSL. [n.d.]. OpenSSL: The Open Source toolkit for SSL\/TLS. https:\/\/www.openssl.org\/ (accessed 2020-04--23)."},{"key":"e_1_3_2_2_84_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-44223-1_5"},{"key":"e_1_3_2_2_85_1","volume-title":"Advances in Cryptology -- EUROCRYPT 2020 (LNCS","author":"Peikert Chris","year":"2018","unstructured":"Chris Peikert . 2020. He Gives C-Sieves on the CSIDH . In Advances in Cryptology -- EUROCRYPT 2020 (LNCS , Vol. 12106), Anne Canteaut and Yuval Ishai (Eds.). Springer, 463-- 492 . https:\/\/eprint.iacr.org\/ 2018 \/537. Chris Peikert. 2020. He Gives C-Sieves on the CSIDH. In Advances in Cryptology -- EUROCRYPT 2020 (LNCS, Vol. 12106), Anne Canteaut and Yuval Ishai (Eds.). Springer, 463--492. https:\/\/eprint.iacr.org\/2018\/537."},{"key":"e_1_3_2_2_86_1","unstructured":"Trevor Perrin. 2018. Noise Protocol Framework. https:\/\/noiseprotocol.org\/noise.html (accessed 2020-05-01). Trevor Perrin. 2018. Noise Protocol Framework. https:\/\/noiseprotocol.org\/noise.html (accessed 2020-05-01)."},{"key":"e_1_3_2_2_87_1","unstructured":"Trevor Perrin and Moxie Marlinspike. 2016. The Double Ratchet Algorithm. https:\/\/signal.org\/docs\/specifications\/doubleratchet\/doubleratchet.pdf. Trevor Perrin and Moxie Marlinspike. 2016. The Double Ratchet Algorithm. https:\/\/signal.org\/docs\/specifications\/doubleratchet\/doubleratchet.pdf."},{"key":"e_1_3_2_2_88_1","volume-title":"Technical Report","author":"Prest Thomas","unstructured":"Thomas Prest , Pierre-Alain Fouque , Jeffrey Hoffstein , Paul Kirchner , Vadim Lyubashevsky , Thomas Pornin , Thomas Ricosset , Gregor Seiler , William Whyte , and Zhenfei Zhang . 2019. FALCON. Technical Report . National Institute of Standards and Technology . available at https:\/\/csrc.nist.gov\/projects\/post-quantum-cryptography\/round-2-submissions. Thomas Prest, Pierre-Alain Fouque, Jeffrey Hoffstein, Paul Kirchner, Vadim Lyubashevsky, Thomas Pornin, Thomas Ricosset, Gregor Seiler, William Whyte, and Zhenfei Zhang. 2019. FALCON. Technical Report. National Institute of Standards and Technology. available at https:\/\/csrc.nist.gov\/projects\/post-quantum-cryptography\/round-2-submissions."},{"key":"e_1_3_2_2_89_1","doi-asserted-by":"crossref","unstructured":"Eric Rescorla. 2000. HTTP over TLS. IETF RFC 2818. https:\/\/rfc-editor.org\/rfc\/rfc2818.txt. Eric Rescorla. 2000. HTTP over TLS. IETF RFC 2818. https:\/\/rfc-editor.org\/rfc\/rfc2818.txt.","DOI":"10.17487\/rfc2818"},{"key":"e_1_3_2_2_90_1","doi-asserted-by":"crossref","unstructured":"Eric Rescorla. 2018. The Transport Layer Security (TLS) Protocol Version 1.3. IETF RFC 8446. https:\/\/rfc-editor.org\/rfc\/rfc8446.txt. Eric Rescorla. 2018. The Transport Layer Security (TLS) Protocol Version 1.3. IETF RFC 8446. https:\/\/rfc-editor.org\/rfc\/rfc8446.txt.","DOI":"10.17487\/RFC8446"},{"key":"e_1_3_2_2_91_1","unstructured":"Eric Rescorla Kazuho Oku Nick Sullivan and Christopher A. Wood. 2020 a. TLS Encrypted Client Hello. Internet-Draft draft-ietf-tls-esni-07. Internet Engineering Task Force. https:\/\/datatracker.ietf.org\/doc\/html\/draft-ietf-tls-esni-07 Work in Progress. Eric Rescorla Kazuho Oku Nick Sullivan and Christopher A. Wood. 2020 a. TLS Encrypted Client Hello. Internet-Draft draft-ietf-tls-esni-07. Internet Engineering Task Force. https:\/\/datatracker.ietf.org\/doc\/html\/draft-ietf-tls-esni-07 Work in Progress."},{"key":"e_1_3_2_2_92_1","unstructured":"Eric Rescorla and Nick Sullivan. 2018. Semi-Static Diffie-Hellman Key Establishment for TLS 1.3. Internet-Draft. Internet Engineering Task Force. https:\/\/tools.ietf.org\/html\/draft-rescorla-tls13-semistatic-dh-00. Eric Rescorla and Nick Sullivan. 2018. Semi-Static Diffie-Hellman Key Establishment for TLS 1.3. Internet-Draft. Internet Engineering Task Force. https:\/\/tools.ietf.org\/html\/draft-rescorla-tls13-semistatic-dh-00."},{"key":"e_1_3_2_2_93_1","unstructured":"Eric Rescorla Nick Sullivan and Christopher A. Wood. 2020 b. Semi-Static Diffie-Hellman Key Establishment for TLS 1.3. Internet-Draft. Internet Engineering Task Force. https:\/\/tools.ietf.org\/html\/draft-rescorla-tls-semistatic-dh-02. Eric Rescorla Nick Sullivan and Christopher A. Wood. 2020 b. Semi-Static Diffie-Hellman Key Establishment for TLS 1.3. Internet-Draft. Internet Engineering Task Force. https:\/\/tools.ietf.org\/html\/draft-rescorla-tls-semistatic-dh-02."},{"key":"e_1_3_2_2_94_1","doi-asserted-by":"publisher","DOI":"10.1145\/359340.359342"},{"key":"e_1_3_2_2_95_1","doi-asserted-by":"crossref","unstructured":"Stefan Santesson and Hannes Tschofenig. 2016. Transport Layer Security (TLS) Cached Information Extension. IETF RFC 7924. https:\/\/rfc-editor.org\/rfc\/rfc7924.txt. Stefan Santesson and Hannes Tschofenig. 2016. Transport Layer Security (TLS) Cached Information Extension. IETF RFC 7924. https:\/\/rfc-editor.org\/rfc\/rfc7924.txt.","DOI":"10.17487\/RFC7924"},{"key":"e_1_3_2_2_96_1","volume-title":"Technical Report","author":"Schwabe Peter","unstructured":"Peter Schwabe , Roberto Avanzi , Joppe Bos , L\u00e9o Ducas , Eike Kiltz , Tancr\u00e8de Lepoint , Vadim Lyubashevsky , John M. Schanck , Gregor Seiler , and Damien Stehl\u00e9 . 2019. CRYSTALS- KYBER. Technical Report . National Institute of Standards and Technology . available at https:\/\/csrc.nist.gov\/projects\/post-quantum-cryptography\/round-2-submissions. Peter Schwabe, Roberto Avanzi, Joppe Bos, L\u00e9o Ducas, Eike Kiltz, Tancr\u00e8de Lepoint, Vadim Lyubashevsky, John M. Schanck, Gregor Seiler, and Damien Stehl\u00e9. 2019. CRYSTALS-KYBER. Technical Report. National Institute of Standards and Technology. available at https:\/\/csrc.nist.gov\/projects\/post-quantum-cryptography\/round-2-submissions."},{"key":"e_1_3_2_2_97_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.24203"},{"key":"e_1_3_2_2_99_1","unstructured":"Brian Smith. [n.d.] a. Ring. https:\/\/github.com\/briansmith\/ring Brian Smith. [n.d.] a. Ring. https:\/\/github.com\/briansmith\/ring"},{"key":"e_1_3_2_2_100_1","unstructured":"Brian Smith. [n.d.] b. WebPKI. https:\/\/github.com\/briansmith\/webpki Brian Smith. [n.d.] b. WebPKI. https:\/\/github.com\/briansmith\/webpki"},{"key":"e_1_3_2_2_101_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-11659-4_15"},{"key":"e_1_3_2_2_102_1","volume-title":"Post-quantum Key Exchange for the Internet and the Open Quantum Safe Project. In SAC 2016 (LNCS","volume":"37","author":"Stebila Douglas","year":"2016","unstructured":"Douglas Stebila and Michele Mosca . 2016 . Post-quantum Key Exchange for the Internet and the Open Quantum Safe Project. In SAC 2016 (LNCS , Vol. 10532), Roberto Avanzi and Howard M. Heys (Eds.). Springer, Heidelberg, 14-- 37 . https:\/\/doi.org\/10.1007\/978--3--319--69453--5_2 10.1007\/978--3--319--69453--5_2 Douglas Stebila and Michele Mosca. 2016. Post-quantum Key Exchange for the Internet and the Open Quantum Safe Project. In SAC 2016 (LNCS, Vol. 10532), Roberto Avanzi and Howard M. Heys (Eds.). Springer, Heidelberg, 14--37. https:\/\/doi.org\/10.1007\/978--3--319--69453--5_2"},{"key":"e_1_3_2_2_103_1","unstructured":"Douglas Steblia Scott Fluhrer and Shay Gueron. 2020. Hybrid key exchange in TLS 1.3. Internet-Draft draft-ietf-tls-hybrid-design-00. Internet Engineering Task Force. https:\/\/datatracker.ietf.org\/doc\/html\/draft-ietf-tls-hybrid-design-00 Work in Progress. Douglas Steblia Scott Fluhrer and Shay Gueron. 2020. Hybrid key exchange in TLS 1.3. Internet-Draft draft-ietf-tls-hybrid-design-00. Internet Engineering Task Force. https:\/\/datatracker.ietf.org\/doc\/html\/draft-ietf-tls-hybrid-design-00 Work in Progress."},{"key":"e_1_3_2_2_104_1","unstructured":"the Open Quantum Safe project. [n.d.]. Open Quantum Safe. https:\/\/openquantumsafe.org the Open Quantum Safe project. [n.d.]. Open Quantum Safe. https:\/\/openquantumsafe.org"},{"key":"e_1_3_2_2_105_1","unstructured":"William Whyte Zhenfei Zhang Scott Fluhrer and Oscar Garcia-Morchon. 2017. Quantum-Safe Hybrid (QSH) Key Exchange for Transport Layer Security (TLS) version 1.3. Internet-Draft draft-whyte-qsh-tls13-06. Internet Engineering Task Force. https:\/\/datatracker.ietf.org\/doc\/html\/draft-whyte-qsh-tls13-06 Work in Progress. William Whyte Zhenfei Zhang Scott Fluhrer and Oscar Garcia-Morchon. 2017. Quantum-Safe Hybrid (QSH) Key Exchange for Transport Layer Security (TLS) version 1.3. Internet-Draft draft-whyte-qsh-tls13-06. Internet Engineering Task Force. https:\/\/datatracker.ietf.org\/doc\/html\/draft-whyte-qsh-tls13-06 Work in Progress."},{"key":"e_1_3_2_2_106_1","doi-asserted-by":"publisher","DOI":"10.1007\/s13389-017-0152-y"},{"key":"e_1_3_2_2_108_1","volume-title":"CANS 19 (LNCS","author":"Zhang Zhengyu","unstructured":"Zhengyu Zhang , Puwen Wei , and Haiyang Xue . 2019 b. Tighter Security Proofs for Post-quantum Key Encapsulation Mechanism in the Multi-challenge Setting . In CANS 19 (LNCS , Vol. 11829), Yi Mu, Robert H. Deng, and Xinyi Huang (Eds.). Springer, Heidelberg, 141-- 160 . https:\/\/doi.org\/10.1007\/978--3-030--31578--8_8 10.1007\/978--3-030--31578--8_8 Zhengyu Zhang, Puwen Wei, and Haiyang Xue. 2019 b. Tighter Security Proofs for Post-quantum Key Encapsulation Mechanism in the Multi-challenge Setting. In CANS 19 (LNCS, Vol. 11829), Yi Mu, Robert H. Deng, and Xinyi Huang (Eds.). Springer, Heidelberg, 141--160. https:\/\/doi.org\/10.1007\/978--3-030--31578--8_8"}],"event":{"name":"CCS '20: 2020 ACM SIGSAC Conference on Computer and Communications Security","location":"Virtual Event USA","acronym":"CCS '20","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3372297.3423350","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3372297.3423350","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T22:02:20Z","timestamp":1750197740000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3372297.3423350"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,10,30]]},"references-count":105,"alternative-id":["10.1145\/3372297.3423350","10.1145\/3372297"],"URL":"https:\/\/doi.org\/10.1145\/3372297.3423350","relation":{},"subject":[],"published":{"date-parts":[[2020,10,30]]},"assertion":[{"value":"2020-11-02","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}