tag: Hybrid-Kem · 1 items
- Engineer — Learn: Formal proof that hybrid ML-KEM combiners without transcript binding can be fully downgraded by an active attacker; engineers designing or auditing custom hybrid PQC handshakes (TLS, SSH, IKE) should verify their key schedule binds the session key to a transcript hash, not just the raw KEM output.
- SOC/IR — Skip
- Leader — Skip