Bundled Authenticated Key Exchange: A Concrete Treatment of Signal's Handshake Protocol and Post-Quantum Security

Keitaro Hashimoto, Shuichi Katsumata, Thom Wiggers

34th USENIX Security Symposium · Day 1

This technical article delves into a significant research paper presented at USENIX Security, titled "Bundled Authenticated Key Exchange: A Concrete Treatment of Signal's Handshake Protocol and Post-Quantum Security." Authored by Keitaro Hashimoto, Shuichi Katsumata, and Thom Wiggers, the work addresses critical challenges in formally analyzing and securing the Signal protocol's handshake mechanisms, particularly in the face of emerging quantum computing threats. The paper introduces a novel cryptographic model called **Bundled Authenticated Key Exchange (BAKE)**, which offers a unified and concrete framework for understanding the security properties of Signal's X3DH and PQXDH protocols, as well as for designing future post-quantum secure handshakes.

AI review

This is the kind of foundational crypto work that actually moves the field. Hashimoto, Katsumata, and Wiggers don't just poke holes in Signal—they build a unified model that explains *why* X3DH and PQXDH have the weaknesses they do, then design a protocol that doesn't. Real contribution, not incremental.