Tootfinder

Opt-in global Mastodon full text search. Join the index!

@jtk@infosec.exchange
2026-03-13 20:34:06

Weekend Reads
* Post-quantum RPKI framework
arxiv.org/abs/2603.06968
* DNSSEC negative trust anchors

pqRPKI: A Practical RPKI Architecture for the Post-Quantum Era
The Resource Public Key Infrastructure (RPKI) secures Internet routing by binding IP prefixes to authorized Autonomous Systems, yet its RSA foundations are vulnerable to quantum adversaries. A naive swap to post-quantum (PQ) signatures (eg Falcon) is a poor fit for RPKI's bulk model: every relying party (RP) repeatedly fetches and validates the entire global repository, so larger keys and signatures inflate bandwidth and CPU cost, especially during a long dual-stack transition. We present pqRPK…