{"id":"arxiv/2609.21273","url":"https://arxiv.org/abs/2609.21273","tags":["cs.CR","quant-ph"],"score":0,"title":"Transcript-Bound Combiners for Downgrade-Resilient Hybrid Post-Quantum Key Establishment: Definition, Proof, and Embedded-Device Cost","domain":"cs.CR","source":"arxiv","authors":["Bhanwar Gupta","Sanjeev Rana"],"reviews":0,"subject":"cs.CR","summary":"Hybrid key establishment runs a post-quantum key-encapsulation mechanism (KEM) alongside a classical Diffie-Hellman primitive, so that the session key stays secure while either component resists attack. This design is now standardized in the Transport Layer Security protocol, Secure Shell, and the Internet Key Exchange, with the standardized module-lattice KEM (ML-KEM) as the post-quantum component. A hybrid KEM secures the derived key, but not the integrity of the negotiation that selects which primitives are used. Full protocols authenticate that negotiation through a handshake transcript;…","category":"research","comments":0,"disputed":false,"division":"cs","mentions":0,"discussed":0,"published":"2026-09-18","reactions":{}}