Skip to main content

PQXDH Protocol Overview

The Post-Quantum Extended Diffie-Hellman (PQXDH) protocol is a key agreement protocol that provides post-quantum security for establishing secure communication channels.

What is PQXDH?

PQXDH extends the traditional Extended Diffie-Hellman (X3DH) protocol with post-quantum cryptographic primitives to ensure security against quantum computer attacks.

Key Components

Classical ECDH

  • Uses Curve25519 for backwards compatibility
  • Provides security against classical computers

Post-Quantum KEM

  • Uses Kyber for quantum-resistant key encapsulation
  • Protects against future quantum attacks

Hybrid Approach

The protocol combines both classical and post-quantum methods for maximum security.

Security Properties

  • Forward Secrecy: Past communications remain secure even if long-term keys are compromised
  • Post-Quantum Security: Resistant to attacks by quantum computers
  • Deniability: Participants can deny having participated in conversations
  • Asynchronous: Participants don't need to be online simultaneously

Implementation

The PQXDH implementation in Zoe Relay provides:

  • Secure key generation and exchange
  • Session establishment for encrypted messaging
  • Ephemeral key management for forward secrecy

For detailed API documentation, see the Rust API docs.