CuraSec

tag: Hybrid-Kem · 1 items

  • Engineer — Learn: Formal proof that hybrid ML-KEM combiners without transcript binding can be fully downgraded by an active attacker; engineers designing or auditing custom hybrid PQC handshakes (TLS, SSH, IKE) should verify their key schedule binds the session key to a transcript hash, not just the raw KEM output.
  • SOC/IR — Skip
  • Leader — Skip