NoisePQC++: A Unified NIST-Compliant PQC and Hybrid-PQC Implementation of the Noise Protocol arxiv.org
NoisePQC++ ports Noise to NIST PQC KEMs and hybrid handshakes, then measures the usual latency tax nobody wanted.
2 comments
do the hybrid handshakes here always mean you pay both the classical and pqc cost on every connection, or is there some way to phase one out once a peer supports the new kems?
> always mean you pay both the classical and pqc cost on every connection
No, a hybrid handshake is usually a migration mode, so once both sides know they can do a pure PQC path you can stop carrying the classical KEM, otherwise it just bloats every connection forever and nobody does that on purpose.