Integrating PQC in OpenSSL & Firefox via Loadable Modules for Cryptographic Agility
summary
Demonstrates a working integration: OpenSSL 3.2 + nginx uses a Rust Aurora provider that loads external PQC libs, and a Firefox fork uses a Rust qryptotoken PKCS#11 soft-token (derived from Kryoptic) to enable mutual TLS 1.3 with hybrid key exchange and signatures (e.g. ML-KEM-768 and ML-DSA-65-Ed25519). The team builds shallow loadable modules, ran a live demo from Fedora 42 connecting to Finnish and Italian servers, and shows certificate import, client cert presentation and successful PQC negotiation.
AI-written summary · about
chapters (12)
- 0:00Qubit project introduction
- 2:34Project partners timeline
- 6:28Server-side PQC architecture
- 9:19Firefox client-side changes
- 11:28Live demo setup
- 13:37TLS server authentication use case
- 16:49Mutual TLS authentication use case
- 18:38Open Quantum Safe interop
- 20:45Demo conclusions hybrid feasibility
- 21:30Aurora and Crypto Token recap
- 22:54Resources future work
- 23:38Q&A
related talks
32mPQC in OpenSSL Library
24mHybrid Quantum-Safe Cryptography for Electric Vehicle Charging Infrastructure
17mPostquantum algorithms in Fedora now and soon
44mPQC at the Internet Engineering Task Force IETF
24mReal-World Readiness for PQC: Gaps, Gains, and Groundwork
30mPost-Quantum Crypto Integration for Enterprise Applications
23mReal-World Post-Quantum Migrations: Lessons Learned and Performance Results
41mPreparing for and migrating to a world with PQC