Blog on CE Labs

Post-Quantum HPKE

Fri, 31 Jul 2026 00:00:00 +0000

The IETF is working on post-quantum security for HPKE , the scheme used in protocols like TLS ECH, MLS, and Oblivious HTTP. We’ve implemented the draft: it runs today in hpke-rs, part of libcrux , and you can try it live in the demo further down this post. This post covers what changes on the way to post-quantum HPKE, and why the transition may not be a drop-in.

Check Your Post-Quantum Readiness

Fri, 24 Jul 2026 00:00:00 +0000

The post-quantum transition is no longer a future concern. Browsers and cloud providers are negotiating post-quantum key exchange by default for a while now, using the NIST standardized algorithms. The harvest-now, decrypt-later threat means data captured today can be broken once a cryptographically relevant quantum computer exists. None of this is new, but the timelines keep moving closer: Google’s estimates for the resources needed to break classical cryptography have dropped sharply, and the BSI continues to urge organizations to start migrating now. The practical question for most teams is simple: where do we actually stand right now?

Announcing CE Labs

Wed, 24 Jun 2026 00:00:00 +0000

Today we’re launching CE Labs, focused on high-assurance security engineering, spun off from Cryspen . The new independence lets both teams pursue their missions with greater agility: Cryspen continues its work on verification products and the Spectrum EIC Grant initiative , while we concentrate on designing and building systems that are secure from the cryptography up. This is just the start — we’ve got exciting projects underway and plenty to share, so expect more from us here soon.

Pushing the Boundaries of PQC for IoT

Wed, 02 Jul 2025 00:00:00 +0000

We’re dedicated to bringing robust, next-generation cryptography to even the most resource-constrained devices. One direction of ongoing work has focused heavily on implementing and optimizing the NIST-standardized post-quantum cryptographic algorithms, ML-KEM (formerly Kyber) and ML-DSA (formerly Dilithium), along with the SHA-3 hash function, specifically for the Internet of Things (IoT) ecosystem. All of our technical work and results are open source and available on our Github repository .

High Assurance Post-Quantum Cryptography for IoT

Mon, 05 Aug 2024 00:00:00 +0000

We extend the libcrux cryptographic library with support for resource constrained IoT devices. The libcrux-iot library contains high performance, high assurance implementations of post-quantum, as well as classical, cryptographic primitives.