Quantum-Resilient Systems Engineering
Browse series · RSS · Atom
Start here: first entry.
Quantum Threat Modeling for Infrastructure: What Changes, What Doesn’t
Adversarial-first deep dive (January 2025): Quantum Threat Modeling for Infrastructure: What Changes, What Doesn’t.
Hybrid Key Management: Rotations Across Algorithm Families
Spec-driven research note (February 2025): Hybrid Key Management: Rotations Across Algorithm Families.
Quantum-Safe Secure Boot: Firmware Roots and PQ Signatures
Engineering notebook entry (March 2025): Quantum-Safe Secure Boot: Firmware Roots and PQ Signatures.
PQC for Blockchain Signatures: Wallet UX, Size, and Verification Cost
Adversarial-first deep dive (April 2025): PQC for Blockchain Signatures: Wallet UX, Size, and Verification Cost.
Quantum-Resilient Identity: Device + Human, Online + Offline
Adversarial-first deep dive (May 2025): Quantum-Resilient Identity: Device + Human, Online + Offline.
BFT with PQ Primitives: When Crypto Costs Dominate
Spec-driven research note (June 2025): BFT with PQ Primitives: When Crypto Costs Dominate.
no_std Crypto in Rust: Determinism, Side Channels, and Constraints
Engineering notebook entry (July 2025): no_std Crypto in Rust: Determinism, Side Channels, and Constraints.
Quantum-Safe VPN Design: Lessons from Implementing a PQ IPSec Stack
Threat-model-first analysis (August 2025): Quantum-Safe VPN Design: Lessons from Implementing a PQ IPSec Stack.
Operationalizing PQC: Monitoring, Rollback, and Incident Response
Spec-driven research note (September 2025): Operationalizing PQC: Monitoring, Rollback, and Incident Response.
Post-Quantum DoS Surfaces: Handshakes, Amplification, and Mitigations
Adversarial-first deep dive (October 2025): Post-Quantum DoS Surfaces: Handshakes, Amplification, and Mitigations.
Long-Lived Secrets: Forward Secrecy, KEMs, and Key Erasure
Design memo (November 2025): Long-Lived Secrets: Forward Secrecy, KEMs, and Key Erasure.
Research Frontiers: Composability, Proofs, and Future Primitives
Threat-model-first analysis (December 2025): Research Frontiers: Composability, Proofs, and Future Primitives.
Stateful Signatures Are a Distributed Systems Problem: XMSS/LMS Without Index Reuse
Deep dive (April 2026): stateful hash-based signatures look like “just PQC”, but one index reuse is a catastrophic key-management failure. Model the invariant, then build the allocator like a consensus component.
The Leaf Is the Hot Path: Signature Placement in Post-Quantum TLS (ML-DSA vs SLH-DSA)
Paper note (April 2026): experiments show SLH-DSA in the server leaf collapses TLS 1.3 handshakes by ~10^3×. PQ migration is a certificate-hierarchy and cost-concentration problem, not an algorithm swap.
Hybrid Schemes and Protocol Agility
Deep dive (April 2026): hybrid key establishment is a narrow hedge (HNDL), not “post-quantum TLS”. The hard part is suite identity, transcript binding, and AND-semantics for dual signatures.