liveBook · Manning

Hybrid key exchange scheme

As explained in Real-World Cryptography

A hybrid cryptographic scheme combines post-quantum and pre-quantum cryptographic mechanisms in one operation or protocol.

A hybrid key exchange scheme combines a current cryptographic mechanism with a post-quantum mechanism, then derives one shared secret from both results. It keeps protection if one family is later broken: an attacker must still defeat the other mechanism. section 14.4 section 14.5

A hybrid protocol typically follows these steps:

  • Perform a conventional key exchange, such as X25519. section 14.4
  • Perform a post-quantum key exchange, such as Kyber. section 14.5
  • Mix both outputs with HKDF to produce one shared secret. section 14.4

TLS experiments

Google and Cloudflare tested hybrid TLS connections with a small percentage of Chrome users in 2018 and 2019. The experiments combined X25519 with New Hope, then HRSS or SIKE, and fed both outputs into HKDF. section 14.4

The same defensive pattern applies to signatures: signing with both Ed25519 and Dilithium preserves a second barrier if either scheme fails. Hybrid designs are a transition strategy for data that must remain protected for a long time. section 14.4 section 14.5

How Real-World Cryptography covers it

How deep it goes
Explains dual mechanisms, combined key derivation, and signature variants without descending into primitive internals.
Examples
Uses X25519 with Kyber, dual Ed25519–Dilithium signatures, and Google–Cloudflare TLS experiments.
What you can do after
Apply it by combining conventional and post-quantum outputs before deriving a shared secret, or by attaching both signature types.
How it connects
Connects post-quantum cryptography, pre-quantum cryptography, key exchange, digital signatures, HKDF, and TLS.
Cover of Real-World Cryptography
liveBookmanning.com
Read Real-World Cryptography on liveBook Get the book at manning.com

Related concepts

This explainer was generated by Manning's knowledge graph from the text of Real-World Cryptography. The section links point to the parts of the book it draws on.