Transcript-Bound Hybrid PQC Combiners Proven Downgrade-Resilient

Mon, 21 Sep 2026 18:11:48 +0000

Engineer — Learn: Formal proof that hybrid ML-KEM combiners without transcript binding can be fully downgraded by an active attacker; engineers designing or auditing custom hybrid PQC handshakes (TLS, SSH, IKE) should verify their key schedule binds the session key to a transcript hash, not just the raw KEM output.
SOC/IR — Skip
Leader — Skip

Hybrid-Kem on CuraSec