papers/hanzo-pq-crypto/sections/08-key-size-and-storage-impact.tex

\section{Key Size and Storage Impact}

\label{sec:storage}
% ============================================================================

Post-quantum key sizes significantly exceed classical equivalents. Impact on
Hanzo systems:
\begin{itemize}[leftmargin=1.1em]
    \item \textbf{KMS}: Each ML-KEM-768 public key stored alongside the
    classical X25519 key adds 1,184 bytes per secret. For 12,000 secrets:
    14MB additional storage (negligible).
    \item \textbf{IAM JWKS endpoint}: ML-DSA-65 public keys in the JWKS
    response increase payload from 200 bytes to 2.2KB. Cached by verifiers.
    \item \textbf{JWT tokens}: Dual-signed tokens (Ed25519 + ML-DSA-65) grow
    from $\sim$500 bytes to $\sim$4.3KB. Within HTTP header limits.
    \item \textbf{Agent credential chains}: 3-level ML-DSA-65 chains total
    $\sim$16KB (3 signatures + 3 public keys). Cached per agent session.
\end{itemize}

% ============================================================================