First formal Tamarin analysis of Olvid's core: the usual auth/secrecy holds, but eCK and timing side channels still bite.

Signature-free PQ IKE from an authenticated forward-secure KEM, with ROM/QROM proofs and state-exposure resistance.