Protocol integration depth
Is this a raw primitive library, or something that actually terminates a real protocol?
Requirements, evidence source, and references
This page is the citable form of this dimension — a finding elsewhere can link straight to the bar it was judged against.
Protocol integration depth
5 requirementsIs this a raw primitive library, or something that actually terminates a real protocol?
Raw algorithm library only, versus integration into TLS, QUIC, SSH or IPsec.
Which protocols are supported, and at which layer the vendor's code sits.
Whether integration is a supported product or a reference sample.
Hybrid key exchange supported, and available in production rather than behind a branch or a flag.
- IETF — Hybrid key exchange in TLS 1.3 (draft-ietf-tls-hybrid-design)search-corroboratedThe interoperability reference for hybrid key exchange. Draft status and the exact codepoint set move; check the datatracker entry before scoring a conformance claim against it.
- ANSSI views on the Post-Quantum Cryptography transition (2023 follow-up)confirmed2026-08-12France's position. Notably requires hybridisation where PQ protection is relevant.
Post-quantum authentication — signatures in the handshake and in the certificate chain — not only key exchange.
Key exchange alone addresses harvest-now-decrypt-later. It does not address a forged chain.
Where PQ authentication is not yet offered, whether the vendor says so plainly.
PQC and hybrid certificate issuance actually reaches a usable chain, including intermediates and revocation.
PKI / CA- CA/Browser Forum — Baseline Requirementssearch-corroboratedApplies to publicly trusted CAs only. Primary text not read in this session.
Integration is documented for practitioners — configuration, supported suites, failure modes — not only announced in a press release.
- IETF — Hybrid key exchange in TLS 1.3 (draft-ietf-tls-hybrid-design)search-corroboratedThe interoperability reference for hybrid key exchange. Draft status and the exact codepoint set move; check the datatracker entry before scoring a conformance claim against it.
- Open Quantum Safe — liboqs and its provider/integration listsearch-corroboratedUsed both as an interoperability reference and as a source of candidate vendors. It is a research project, not a standards body — presence on its list is evidence of integration, never of conformance.