Re: [feature] PQC KEM

PQC is not primary benefit, asymmetric key model is. I=E2=80=99m kinda curi=
ous about how such use case is valid.


29 Jun 2026 at 19:40 by [email protected]:

> On Mon, Jun 29, 2026 at 18:42:03 CEST, Milan Broz wrote:
>
>> On 6/29/26 6:27 PM, [email protected] wrote:
>> > Interested in introducing a new LUKS2 "xwing" keyslot type unlocked by=
 an X-Wing
>> > post-quantum hybrid KEM (ML-KEM-768 + X25519, draft-connolly-cfrg-xwin=
g-kem)
>> > instead of a passphrase to encrypt the kek (volume key)?
>> >=20
>> > 1) asymmetric model won't shine in single user case but will be attrac=
tive in multiple user/image enrollment cases.
>> > 2) if per-device fresh wrapping key is desired
>> >=20
>> >=20
>> > I've implemented such keyslot type and tested.=C2=A0 But don't know if=
 the aforementioned two cases is worth discussion.
>>
>> This is typically something that should be done through LUKS2 external t=
oken while keeping keyslot
>> encryption as it is defined in LUKS. (Maybe you did it that way, no idea=
.)
>>
>> Anyway, what security issue this solves (except "it is PQC")?
>>
>
> That seems to be the key question.=20
>
> Also refer to https://www.cs.auckland.ac.nz/~pgut001/pubs/bollocks.pdf
>
> Arno
>
> --=20
> Arno Wagner,     Dr. sc. techn., Dipl. Inform.,    Email: [email protected]=
e
> GnuPG: ID: CB5D9718  FP: 12D6 C03B 1B30 33BB 13CF  B774 E35C 5FA1 CB5D 97=
18
> ----
> A good decision is based on knowledge and not on numbers. -- Plato
>
> If it's in the news, don't worry about it.  The very definition of=20
> "news" is "something that hardly ever happens." -- Bruce Schneier
>