Re: [feature] PQC KEM

[cyper@tutanota.com]

PQC is not primary benefit, asymmetric key model is. I’m kinda curious about how such use case is valid.


29 Jun 2026 at 19:40 by wagner@arnowagner.info:

> On Mon, Jun 29, 2026 at 18:42:03 CEST, Milan Broz wrote:
>
>> On 6/29/26 6:27 PM, cyper@tutanota.com wrote:
>> > Interested in introducing a new LUKS2 "xwing" keyslot type unlocked by an X-Wing
>> > post-quantum hybrid KEM (ML-KEM-768 + X25519, draft-connolly-cfrg-xwing-kem)
>> > instead of a passphrase to encrypt the kek (volume key)?
>> > 
>> > 1) asymmetric model won't shine in single user case but will be attractive in multiple user/image enrollment cases.
>> > 2) if per-device fresh wrapping key is desired
>> > 
>> > 
>> > I've implemented such keyslot type and tested.  But don't know if the aforementioned two cases is worth discussion.
>>
>> This is typically something that should be done through LUKS2 external token while keeping keyslot
>> encryption as it is defined in LUKS. (Maybe you did it that way, no idea.)
>>
>> Anyway, what security issue this solves (except "it is PQC")?
>>
>
> That seems to be the key question. 
>
> Also refer to https://www.cs.auckland.ac.nz/~pgut001/pubs/bollocks.pdf
>
> Arno
>
> -- 
> Arno Wagner,     Dr. sc. techn., Dipl. Inform.,    Email: arno@wagner.name
> GnuPG: ID: CB5D9718  FP: 12D6 C03B 1B30 33BB 13CF  B774 E35C 5FA1 CB5D 9718
> ----
> A good decision is based on knowledge and not on numbers. -- Plato
>
> If it's in the news, don't worry about it.  The very definition of 
> "news" is "something that hardly ever happens." -- Bruce Schneier
>