Mixed Certificate Chains for the Transition to Post-Quantum Authentication in PKI

Explore a proposed migration strategy towards post-quantum PKI authentication in this 28-minute conference talk. Delve into the concept of "mixed certificate chains" that utilize different signature algorithms within the same certificate chain. Examine the feasibility of this migration strategy through the combination of well-studied hash-based signature schemes SPHINCS+ and XMSS with elliptic curve cryptography, and subsequently with lattice-based PQC signature schemes like Dilithium and Falcon. Gain insights from Sebastian Paul, a Post-Quantum Cryptography Security Research Engineer at Bosch, as he presents this innovative approach to transitioning PKI systems into the post-quantum era.

Mixed Certificate Chains for the Transition to Post Quantum Authentication in PKI