arXiv:2411.15936

Assessing the Viability of Quantum-Resistant IKEv2 over Constrained and Internet-Scale Networks

Geoff Twardokus, William Joslin, Hanif Rahbari, William Layton

Published Oct 13, 2025• 1 citation

Abstract

Within 1–2 decades, quantum computers may become powerful enough to break current public-key cryptography, prompting authorities such as the IETF and NIST to push for adopting quantum-resistant cryptography (QRC) in ecosystems like Internet Protocol Security (IPsec). Yet, IPsec struggles to adopt QRC, primarily because Internet Key Exchange Protocol Version 2 (IKEv2), which sets up IPsec sessions, cannot easily tolerate the large public keys and digital signatures of QRC. Many IETF RFCs have been proposed to integrate QRC into IKEv2, but their performance and interplay remain largely untested in practice. In this paper, we measure the performance of these RFCs over constrained links by developing a flexible, reproducible measurement testbed for IPsec with quantum-resistant IKEv2 proposals. Deploying our testbed in lossy wireless links and on the internationally distributed FABRIC testbed for Internet scenarios, we reveal that bottlenecks arise with quantum-resistant IKEv2 under high round-trip times, non-trivial packet loss, or other constraints. Our results, including the revelation of a 400–1000-fold increase in data overhead over high-loss wireless links, expose the shortcomings of today’s RFCs and call for further work in this vital area of post-quantum network security.

DOI: 10.1145/3733825.3765281

Related papers

Analysis of Network-level Key Exchange Protocols in the Post-Quantum Era

Andrea Pazienza, Eufemia Lella, Pietro Noviello +1 more

A Virtual Private Network (VPN) ensures the confidentiality and integrity of data transferred between two endpoints, even if the means of transport are insecure. One popular protocol is Internet Protocol Security (IPSec) which operates at OSI layer 3 and protects all protocols at higher layers. Cryptographic keys in IPSec are negotiated using the Internet Key Exchange (IKE) protocol. IKE negotiates security parameters for IPSec sessions. In particular, the IKEv2 protocol uses the Elliptic Curve Diffie-Hellman (ECDH) algorithm to establish a secret key shared between two nodes on a network. Although solving such a problem remains difficult with current computing power, it is believed that generic quantum computers will be able to solve this problem, which implies that the security of IKEv2 is compromised. There are, however, several cryptographic systems that are trusted to be resistant to attacks by quantum computers. This family of cryptosystems is known as quantum-resistant cryptography (QRC). In this paper, after highlighting the requirements for a secure key exchange protocol, we briefly review the QRC solutions that have been proposed in the recent literature.

IEEE Workshop on Low Temperature Electronics (WOLTE)Jun 6, 20228 citations

Performance Evaluation of Quantum-Resistant IKEv2 Protocol for Satellite Networking Environments

Ahmet Mutlugun, Yacoub Hanna, Kemal Akkaya

With the introduction of post-quantum cryptography (PQC) algorithms, there are ongoing efforts to not only standardize the proposed solutions but also consider integrating them into existing network applications and evaluating their performance. This evaluation is especially critical for security-sensitive applications such as satellite communications, where network limitations such as high packet loss and propagation delay pose unique challenges. In this paper, we consider the integration of PQC with one of the widely used security protocols, namely IPSec, by focusing on its key exchange protocol IKEv2. Specifically, we evaluate how PQ key exchange and digital signatures impact the latency compared to existing classical crypto solutions. We demonstrate through simulation how such integration triggers fragmentation that needs to be handled by IKEv2 and quantify the performance overhead due to packet loss or delaying of such fragments when used under satellite networking applications. The results indicate that while higher packet losses pose significant overheads that may hinder the adoption of PQ-based IPSec solutions, this may be subsidized when propagation delays are much higher in satellite networks.

IEEE Virtual Conference on Communications (VCC)Dec 3, 20247 citations

Real-World Quantum-Resistant IPsec

Daniel Herzinger, Stefan-Lukas Gazdag, Daniel Loebenberger

The recent advances in the development of quantum computers pose a threat to the cryptography used today. While symmetric algorithms can adapt to those challenges, no prevalent key exchange method can protect against quantum computer based attacks. There already exist several new, quantum-resistant approaches. Yet, all of them either lack in confidence regarding their security or require large data to be transmitted. Due to the lack of confidence in these algorithms, researchers tend towards hybrid key exchange methods which combine at least two different algorithms. As long as one of them prevails, the shared secret remains secure. Yet, these hybrid key exchanges together with algorithms which transmit large payloads require significant changes to the design of security protocols. IKEv2 is willing to introduce radical changes in order to support as many different algorithms as possible. This was expected to impact the protocol's operational feasibility, but remained to be tested due to the lack of a working reference implementation of the newly proposed internet drafts. To address this issue, we implemented these drafts using a modified version of the OpenIKED as basis that already comprised the first steps towards the concept's integration. During the implementation we found that several design choices severely hinder a clean and maintainable structure. With the resulting implementation, we tested the adjusted protocol under real-world conditions. The results show that the result generally works but struggles to cope with slow, lossy networks. Based on these insights, we drafted an improved protocol design which also supports the full range of quantum-resistant key exchange methods. In contrast to the current drafts, it promises a cheaper and more maintainable implementation.

International Conference on Security of Information and Networks (SIN)Dec 15, 202112 citations

PQC Migration of IPsec: Reliable Composite Key Sharing Mechanisms in IKEv2

Rahul, Manjesh K. Hanawal, Sameer G. Kulkarni +1 more

The threat of quantum computers breaking classical cryptographic is accelerating the adoption of quantum- resistant cryptographic algorithms. Several government agencies have set a tight time-line for upgradation of all system to support post quantum cryptographs. We study post-quantum migration of IPSec protocols and their impact on network performance. The large key lengths in Post-Quantum Cryptography (PQC) cannot fit in a single IP packet leading to IP fragmentation. This can cause failure of security associations and degrade performance of IKEv2 under poor network conditions. To tackle this problem, we study a new key- sharing mechanism for IKEv2 and evaluate its performance. Unlike current hybrid key-sharing approaches, which send the classical and quantum keys sequentially over UDP or TCP (as in RFC 9370), the new approach concatenates them into a single composite key and transport them over TCP to ensure a reliable handshake. We implement and benchmark the new composite key-sharing handshake mechanism against existing hybrid algorithms that use either UDP or TCP. Extensive experiments under various network conditions demonstrate that the new approach significantly improves handshake time and energy consumption by avoiding the severe retransmission penalties of the Hybrid handshake mechanism. At 1% packet loss, the handshake time of composite key sharing mechanism is better by atleast 20% than hybrid mechanisms, and the improve- ment get better with higher packet loss reaching 30% at 10% packet loss. Energy consumption follows the same pattern achieving reduction of 29% at 10% packet loss

arXiv:2610.25799Oct 19, 20260 citations

Quantum Resilient Cryptographic Protocols in Modern Networks

Shanthi Makka

The development of quantum computers will provide modern cryptographic systems with a practical computing infrastructure, yet the number-theoretic assumptions these systems are built on poses an acute security risk at this juncture, especially when Shor and Grover’s algorithms are considered. In this article, we present QRC-Stack (Quantum Resilient Cryptographic Stack): A modular architecture for post quantum about cyber resilient communication in current and next generation infrastructures of the internet. QRC-Stack combines lattice-based and hash-based schemes with transport layers and key management to guarantee data integrity, confidentiality, and authenticity within classical networks as well as software-defined networks. The architecture of QRC-Stack is enhanced by incorporating hybrid key exchange models that integrate classical (e.g., ECDH) and post-quantum (PQ) cryptography; Kyber and Dilithium from NIST PQC finalists to sustain legacy interoperability while advancing resilience to future threats in quantum networked environments The newly proposed QRC-Stack model includes three interrelated parts that together improve the security and flexibility of cryptographic communication within a quantum-threat context. Starting with the key management layer for quantum-aware systems (QKML), it incorporates a session key distribution system that the quantum cryptography foe cannot breach. Furthermore, the Adaptive Cipher Suite Negotiation (ACSN) injects a more node centric, risk-adaptive model in whereby selection of a cryptographic suite from a pool of available options is done dynamically where the suit best optimizes contextual threat. In addition, Q-Protect Transport Module enables seamless alignment with pre-existing transport protocols such as TLS/IPSec and QUIC or SD-WAN tunnels with limited overhead footprint. Emulation testing on SDN testbeds and active WAN environments showed that QRC-Stack sustained enterprise-class encryption throughput while adding latency overhead less than eight percent. Moreover, this hybrid architecture gives forward secrecy and stronger resistance to quantum-enhanced man-in-the-mid solar attacks with faster key refresh rates. QRC-Stack also outperformed classical TLS 1.3 alongside other variants of Transition Post Quantum Cryptography’, claiming steadfast post-compromised security while surpassing baseline models in adaptability, resilience, and versatility making it ideal for next-generation network backbone design. This information reconfirms QRC-Stack's supurb strength as an extensible multi layered blanced framework solution for communication systems in layers form situated in scenarios involving surveillance from powerful post-quantum adversaries. It helps to control the move toward safely moving quantum national, enterprise, and IoT networks from cryptographic systems built for surveillance heavy environments with minimal changes to current infrastructure.

Journal of Internet Services and Information SecurityAug 30, 20250 citations

Hybrid Post-Quantum IKEv2 on Embedded Automotive Platforms: Design, Implementation, and Evaluation

Ahmed Ayman Bahaa-Eldin, Mohamed Watheq El-Kharashi, Bassem A. Abdullah

The Internet Key Exchange Protocol Version 2 (IKEv2) underpins Internet Protocol Security (IPsec) by establishing secure associations and negotiating cryptographic keys. Its reliance on classical public-key primitives such as Elliptic Curve Diffie–Hellman (ECDH) renders it vulnerable to quantum attacks, as Shor’s algorithm can break these schemes once large-scale quantum computers become available. To address this challenge, we integrate post-quantum cryptography into IKEv2 using a hybrid key exchange combining ECDH over P-384 with the ML-KEM-768 parameter set of the Module-Lattice-Based Key-Encapsulation Mechanism (ML-KEM), following Request for Comments (RFC) 9370 and RFC 9242. We present a Fragmentation Boundary Model that identifies when post-quantum payloads approach or exceed the non-fragmenting IKE_SA_INIT payload budget across ML-KEM parameter sets, Internet Protocol (IP) versions, and effective path maximum transmission units (PMTUs). We implemented the hybrid design on a Texas Instruments TM4C1294 microcontroller running FreeRTOS and CycloneTCP, and measured its execution time, memory footprint, and network overhead. Across 150 successful handshakes per configuration, mean Security Association establishment time increased from 3390.4 to 3488.6 ms, an overhead of 98.2 ms (2.9%). Flash use increased by 8%, random-access memory (RAM) use by 5%, and total IKEv2 traffic size by 42%, while no IP fragmentation was observed under the evaluated Internet Protocol version 4 (IPv4) conditions. These findings establish the feasibility of the evaluated hybrid configuration on the TM4C1294 platform and provide a platform-specific baseline for further evaluation of quantum-resilient IPsec on embedded automotive architectures.

ElectronicsJul 28, 20261 citation