Preventing quantum downgrade attacks against IPsec

T1Covered by 1 source · first reported by Cloudflare Blog at 29 Sept, 13:00 UTC

A sophisticated attacker with a quantum computer can exploit a protocol design flaw to downgrade post-quantum IPsec tunnels to classical crypto. We helped the IETF develop a transcript authentication extension to prevent these attacks.

cryptosecurity

Sources

• T1Preventing quantum downgrade attacks against IPsecCloudflare Blog29 Sept, 13:00