draft-yusef-tls-pqt-dual-certs

Post-Quantum Traditional (PQ/T) Hybrid Authentication with Dual Certificates in TLS 1.3

groupnone stateactive pages27 rev01 expires2026-06-20 canonicalhttps://datatracker.ietf.org/doc/draft-yusef-tls-pqt-dual-certs/
This document extends the TLS 1.3 authentication mechanism to allow the negotiation and use of two signature algorithms to enable dual- algorithm hybrid authentication, ensuring that an attacker would need to break both algorithms to compromise the session. The two signature algorithms come from two independent certificates that together produce a single Certificate and CertificateVerify message.