Implementation of the IETF draft Merkle Tree Certificates for TLS which proposes a new certificate type for TLS. Merkle Tree Certificates are designed to avoid big Post-Quantum (PQ) signatures where possible while still being safe1 against an advisory with a powerful quantum computer.
This project aims for compatibility with the CA implementation of bwesterb/mtc. It will be used by (a fork of) rustls to explore the practicality of the IETF draft. This is part of my Master's thesis.
Footnotes
-
Merkle Tree Certificates focus on the security of the certificate but not on the encryption of the TLS traffic. ↩