A Drop-in KEM Replacement for Client Signatures in Post-Quantum SSH
This work presents a drop-in KEM-based user-authentication method for SSH that replaces client public-key signatures with a session-bound challenge-response proof, and shows that KEM-based authentication is competitive with compact signature-based authentication under representative network settings, while reducing med...