Learn
active
Transcript-Bound Hybrid PQC Combiners Proven Downgrade-Resilient
- Engineer — Learn: Formal proof that hybrid ML-KEM combiners without transcript binding can be fully downgraded by an active attacker; engineers designing or auditing custom hybrid PQC handshakes (TLS, SSH, IKE) should verify their key schedule binds the session key to a transcript hash, not just the raw KEM output.
- SOC/IR — Skip
- Leader — Skip
This entry was curated and judged by AI (Claude) with automated enrichment
(CISA KEV / EPSS / public PoC). Verify against the original source before
acting. Found a bad verdict?
Report it —
confirmed errors go to the corrections log.