Post-Quantum Security of IPsec / IKEv2
· 11:15 – 11:40 Amsterdam time · Blue hall
IKEv2 is the key exchange protocol that drives IPsec, the enterprise workhorse VPN. In this talk, I will recap the standardization of extensions that allow us to use IPsec with post-quantum key exchange, and explain what features you need to turn on (or make sure to ask your suppliers for) to be secure against post-quantum adversaries, both for harvest-now decrypt-later and fully post-quantum adversaries. I will support these claims through a security analysis of IKEv2 and its extensions that we submitted to a major academic security conference.
This talk is based on joint work with Benedikt Auerbach, Keitaro Hashimoto, and Shuichi Katsumata.
Speakers
- Senior cryptography researcher · PQShield
Thom obtained his PhD in applied cryptography with distinction from Radboud University, Nijmegen, The Netherlands. He is an expert in using the different characteristics of post-quantum schemes (KEM and signatures) to optimize the performance of protocols, and balancing trade-offs in protocol flow, runtime and bandwidth requirements. In his research, he has extensively explored how post-quantum cryptography can be integrated into real-world protocols, most notably TLS, but also WireGuard and Signal Messenger. Putting academic work into practice, Thom also contributes by participating in standardization efforts in the IETF, including co-chairing the PKI, Trees and Logs (PLANTS) Working Group that is working on modernizing the WebPKI with Merkle Tree Certificates. Thom also presents on and publishes thought leadership, such as the acclaimed PQC Digital Signatures Zoo.
Attendance
Open session · first come, first served
Saving interest does not reserve a seat. Admission remains first come, first served.
Save favorite
