Files
papers/hanzo-pq-crypto/hanzo-pq-crypto.tex
zeekay f9db4f5737 Publish under the org, not a person
Bylines, paper authorship, correspondence addresses and the founder blurb under
each post named an individual. They name the organisation that published the
work instead: the brand on posts and pages, the research byline on papers, and
research@ in place of a personal address. Both are what these repositories
already used elsewhere — nothing new was coined.

Co-authors are untouched. Where a paper named someone else alongside, they stay
named; only the one byline changed. Bibliography entries, running heads,
PDF metadata and affiliations move with it, so a citation still resolves to
whoever the cited paper names.

Sample and fixture data uses the placeholder name these tests already use
elsewhere, so no assertion changed meaning.
2026-09-01 08:53:13 -07:00

72 lines
2.7 KiB
TeX

% Hanzo Post-Quantum Cryptography: Migration Path for AI Infrastructure
\documentclass[11pt]{article}
\usepackage{../shared/hanzocover}
\usepackage{amsmath, amssymb, amsthm}
\usepackage{mathtools}
\usepackage{bm}
\usepackage{graphicx}
\usepackage{booktabs}
\usepackage{hyperref}
\usepackage{enumitem}
\usepackage{xcolor}
\usepackage{float}
\usepackage{multirow}
\hypersetup{colorlinks=true,linkcolor=black,citecolor=blue,urlcolor=blue}
\newtheorem{theorem}{Theorem}
\newtheorem{lemma}[theorem]{Lemma}
\newtheorem{proposition}[theorem]{Proposition}
\newtheorem{corollary}[theorem]{Corollary}
\newtheorem{definition}{Definition}
\newtheorem{remark}{Remark}
\title{HANZO POST-QUANTUM CRYPTOGRAPHY\\[0.3em]
{\large Migration Path for\\AI Infrastructure}}
\author{
Hanzo AI Research \\
\textit{Hanzo Industries Inc (Techstars '17)} \\
\texttt{[email protected]}
}
\date{March 2026}
\begin{document}
\hanzocoverpage
% ============================================================================
% ABSTRACT
% ============================================================================
\begin{abstract}
We describe the post-quantum cryptographic migration of Hanzo infrastructure,
replacing classical algorithms vulnerable to quantum attack with NIST-standardized
post-quantum alternatives. The migration covers three domains: (i)~ML-KEM
(Module-Lattice-Based Key Encapsulation Mechanism, formerly Kyber) for key
exchange in TLS connections between Hanzo services, client API connections, and
KMS envelope encryption, (ii)~ML-DSA (Module-Lattice-Based Digital Signature
Algorithm, formerly Dilithium) for API request signing, IAM JWT tokens, and
agent credential chains, and (iii)~SLH-DSA (Stateless Hash-Based Digital
Signature Algorithm, formerly SPHINCS+) as a conservative fallback for
long-lived root certificates. We present the hybrid transition strategy where
classical and post-quantum algorithms run in parallel during migration, the
performance impact on Hanzo Gateway request latency (1.2ms increase for ML-KEM
handshake, 0.8ms for ML-DSA verification), and the key size implications for
KMS storage and IAM token payloads. Production deployment began in January 2026
with ML-KEM for inter-service TLS; full migration completes by Q4 2026.
\end{abstract}
% ============================================================================
\input{sections/01-introduction}
\input{sections/02-threat-model}
\input{sections/03-ml-kem-for-key-exchange}
\input{sections/04-ml-dsa-for-digital-signatures}
\input{sections/05-slh-dsa-for-root-certificates}
\input{sections/06-aci-and-blockchain-migration}
\input{sections/07-performance-impact}
\input{sections/08-key-size-and-storage-impact}
\input{sections/09-related-work}
\input{sections/99-conclusion}
\end{document}