mirror of
https://github.com/hanzoai/papers.git
synced 2026-11-03 02:27:30 +00:00
Bylines, paper authorship, correspondence addresses and the founder blurb under each post named an individual. They name the organisation that published the work instead: the brand on posts and pages, the research byline on papers, and research@ in place of a personal address. Both are what these repositories already used elsewhere — nothing new was coined. Co-authors are untouched. Where a paper named someone else alongside, they stay named; only the one byline changed. Bibliography entries, running heads, PDF metadata and affiliations move with it, so a citation still resolves to whoever the cited paper names. Sample and fixture data uses the placeholder name these tests already use elsewhere, so no assertion changed meaning.
72 lines
2.7 KiB
TeX
72 lines
2.7 KiB
TeX
% Hanzo Post-Quantum Cryptography: Migration Path for AI Infrastructure
|
|
\documentclass[11pt]{article}
|
|
\usepackage{../shared/hanzocover}
|
|
\usepackage{amsmath, amssymb, amsthm}
|
|
\usepackage{mathtools}
|
|
\usepackage{bm}
|
|
\usepackage{graphicx}
|
|
\usepackage{booktabs}
|
|
\usepackage{hyperref}
|
|
\usepackage{enumitem}
|
|
\usepackage{xcolor}
|
|
\usepackage{float}
|
|
\usepackage{multirow}
|
|
|
|
\hypersetup{colorlinks=true,linkcolor=black,citecolor=blue,urlcolor=blue}
|
|
|
|
\newtheorem{theorem}{Theorem}
|
|
\newtheorem{lemma}[theorem]{Lemma}
|
|
\newtheorem{proposition}[theorem]{Proposition}
|
|
\newtheorem{corollary}[theorem]{Corollary}
|
|
\newtheorem{definition}{Definition}
|
|
\newtheorem{remark}{Remark}
|
|
|
|
\title{HANZO POST-QUANTUM CRYPTOGRAPHY\\[0.3em]
|
|
{\large Migration Path for\\AI Infrastructure}}
|
|
\author{
|
|
Hanzo AI Research \\
|
|
\textit{Hanzo Industries Inc (Techstars '17)} \\
|
|
\texttt{[email protected]}
|
|
}
|
|
\date{March 2026}
|
|
|
|
\begin{document}
|
|
|
|
\hanzocoverpage
|
|
|
|
% ============================================================================
|
|
% ABSTRACT
|
|
% ============================================================================
|
|
\begin{abstract}
|
|
We describe the post-quantum cryptographic migration of Hanzo infrastructure,
|
|
replacing classical algorithms vulnerable to quantum attack with NIST-standardized
|
|
post-quantum alternatives. The migration covers three domains: (i)~ML-KEM
|
|
(Module-Lattice-Based Key Encapsulation Mechanism, formerly Kyber) for key
|
|
exchange in TLS connections between Hanzo services, client API connections, and
|
|
KMS envelope encryption, (ii)~ML-DSA (Module-Lattice-Based Digital Signature
|
|
Algorithm, formerly Dilithium) for API request signing, IAM JWT tokens, and
|
|
agent credential chains, and (iii)~SLH-DSA (Stateless Hash-Based Digital
|
|
Signature Algorithm, formerly SPHINCS+) as a conservative fallback for
|
|
long-lived root certificates. We present the hybrid transition strategy where
|
|
classical and post-quantum algorithms run in parallel during migration, the
|
|
performance impact on Hanzo Gateway request latency (1.2ms increase for ML-KEM
|
|
handshake, 0.8ms for ML-DSA verification), and the key size implications for
|
|
KMS storage and IAM token payloads. Production deployment began in January 2026
|
|
with ML-KEM for inter-service TLS; full migration completes by Q4 2026.
|
|
\end{abstract}
|
|
|
|
% ============================================================================
|
|
|
|
\input{sections/01-introduction}
|
|
\input{sections/02-threat-model}
|
|
\input{sections/03-ml-kem-for-key-exchange}
|
|
\input{sections/04-ml-dsa-for-digital-signatures}
|
|
\input{sections/05-slh-dsa-for-root-certificates}
|
|
\input{sections/06-aci-and-blockchain-migration}
|
|
\input{sections/07-performance-impact}
|
|
\input{sections/08-key-size-and-storage-impact}
|
|
\input{sections/09-related-work}
|
|
\input{sections/99-conclusion}
|
|
|
|
\end{document}
|