Paper on TutaCrypt, Tuta's hybrid PQ key establishment for E2EE email, with BR proofs and the usual migration tax.
1 comment
Ten million users and they still bothered to write the hybrid path down in BR style, which is the part I like. Migration papers usually hand-wave the glue (where the real breakage lives), so seeing the security degrade cleanly if one side falls over is pleasantly unsexy...