This paper introduces a hybrid encryption framework combining classical cryptography (EdDSA, ECDH), post-quantum cryptography (ML-DSA-6x5, ML-KEM-768), and Quantum Key Distribution (QKD) via Guardian to counter quantum computing threats. Our prototype implements this integration, using a key derivation function to generate secure symmetric and HMAC keys, and evaluates its performance across execution time and network metrics. The approach improves data protection by merging classical efficiency with PQC's quantum resilience and QKD's key security, offering a practical transition path for cryptographic systems. This research lays the foundation for future adoption of PQC in securing digital communication.
This paper introduces a hybrid encryption framework combining classical cryptography (EdDSA, ECDH), post-quantum cryptography (ML-DSA-6x5, ML-KEM-768), and Quantum Key Distribution (QKD) via Guardian to counter quantum computing threats. Our prototype implements this integration, using a key derivation function to generate secure symmetric and HMAC keys, and evaluates its performance across execution time and network metrics. The approach improves data protection by merging classical efficiency with PQC's quantum resilience and QKD's key security, offering a practical transition path for cryptographic systems. This research lays the foundation for future adoption of PQC in securing digital communication.
The emergence of large-scale quantum computers poses a significant threat to current cryptographic protocols, particularly Transport Layer Security (TLS), which relies on RSA and elliptic curve cryptography vulnerable to Shor's algorithm. This paper presents a hybrid framework for quantum-resistant TLS handshakes that integrates post-quantum cryptography (PQC), quantum key distribution (QKD) and classical cryptography to provide comprehensive protection against both classical and quantum attacks. The approach employs three QKD protocols; BB84, E91, and Measurement-Device-Independent QKD (MDI-QKD) alongside NIST-standardized PQC algorithms as well as alternative candidates such as HQC and BIKE. A key innovation is the QKD key management module, which addresses performance bottlenecks through periodic key generation and secure reuse within predefined retention periods, significantly reducing QKD overhead in TLS handshakes. The experimental implementation using the quantum network simulator evaluated 144 distinct cryptographic protocol combinations. Results demonstrate that ML-KEM combined with ML-DSA provides optimal PQC performance, while QKD protocol selection is distance-dependent: BB84 for short-range and MDI-QKD for long-distance communication. The framework includes various attack mitigation mechanisms and ensure security as long as at least one cryptographic method remains uncompromised. Consistent with current global quantum network usage, the proposed TLS approach is designed primarily for MAN and WAN environments rather than the Internet, providing a balanced solution that combines theoretical security guarantees with computational efficiency.
Quantum computing is posing a serious risk to classical cryptographic tools such as RSA and ECC as sophisticated quantum algorithms are able to crack their mathematical foundation in a time bound that is a a polynomial in the number of repetitions. In this paper, we will describe the process of integrating Post-Quantum Cryptography (PQC) and Quantum Key Distribution (QKD) into a hybrid approach to secure communications in the post-quantum world. The suggested methodology is a combination of the computational efficiency and scalability of PQC and the information-theoretic security and eavesdropping detection abilities of QKD. Simulation observations indicate that PQC-only systems are both faster in generating keys and scalable, but do not have a strong eavesdropping detection. On the other hand, non-conditional security is only a feature of systems based on QKD, but it is also highly overhead and slows down key rate. The hybrid PQC-Q KD model provides a balanced performance, high resilience, high authentication, high confidentiality, and realistic deployability. On balance, this discussion demonstrates that the hybrid approach is better than standalone methods and can provide a strong solution to protect against new quantum threats. The large-scale network protocol can be optimized, resources and further integration with other emerging technologies, such as 5G/6G, IoT or cloud computing, can be directed in future research.
As quantum computing technology progresses rapidly, conventional cryptographic methods like ECDH and RSA are increasingly at risk of being compromised by future quantum attacks. To tackle this issue, our study investigates a hybrid key exchange method that merges classical and postquantum cryptographic techniques, providing robust long-term data protection. The research encompasses two separate systems: one that uses DH in combination with Kyber and another that integrates ECDH with Kyber. These systems were created using socket programming and the FastAPI framework, respectively, and were evaluated in virtual environments to mimic actual communication scenarios. Performance analysis was carried out with Wireshark along with practical metrics such as encryption and decryption durations. The findings indicate that this hybrid method not only strengthens defenses against quantum threats but also sustains practical efficiency, highlighting its promise as a secure key exchange solution for future versions of TLS 1.3 and beyond.
The Hybrid approach in Quantum Cryptography creates adaptable security model which provides the safest Communication in the emerging quantum era. The development of quantum computing raise questions about the long-term security. Traditional algorithms, such as RSA, ECC, and Diffie-Hellman, which is seemed computationally secure but it can be effectively solved by quantum algorithms such as Shor's and Grover's. This problem leads to the origination of two key trends in current studies, namely Post-Quantum Cryptography (PQC), designing mathematical approaches to encryption resistant to quantum attacks; Quantum Key Distribution (QKD) using the principles of quantum mechanics to assure security in communications. Accordingly, this research proposes a hybrid security framework including reliable data encryption and authentication using PQC, combined with the safe key- exchange method of QKD. The model is implemented in Python, Qiskit, and PQClean's Kyber and Dilithium algorithms to show how these two paradigms can cooperate toward quantum- resilient communication. To present the system performance, key exchange efficiency, computational overhead, and security strength have been considered. According to the results, this hybrid approach gives superior defense against quantum threats while maintaining practical effectiveness for real-world applications such as cloud security, 6G networks, and the Internet of Things.
The advent of quantum computing poses a significant threat to classical cryptographic systems, necessitating the development of quantum-resistant alternatives. This thesis explores a hybrid key exchange framework combining Quantum Key Distribution (QKD) with Post-Quantum Cryptography (PQC) to secure classical post-processing steps such as information reconciliation and privacy amplification. Specifically, CRYSTALS-Kyber is used for key encapsulation, while CRYSTALS-Dilithium and SPHINCS+ provide digital signatures for authentication. While the mathematical security foundations of these algorithms are assumed, their integration is evaluated through performance benchmarking and system-level analysis. The results show that incorporating PQC-based authentication into QKD post-processing significantly improves resilience against quantum adversaries, while introducing only a reasonable computational and bandwidth overhead. This work contributes to the development of robust hybrid cryptographic systems capable of with standing both classical and quantum-era threats.
The rapid development of quantum computing presents a substantial threat to traditional cryptographic algorithms, particularly those relying on mathematical problems such as integer factorization and elliptic curve operations. As a response, the cryptographic community has accelerated the design of post-quantum cryptographic schemes that can withstand attacks from both classical and quantum computers. However, many of these new schemes exhibit inherent trade-offs between performance, key sizes, and implementation complexity. To address this, we propose a novel hybrid cryptographic framework tailored for secure and efficient data transmission in future quantum-aware environments. The proposed system combines three algorithmic paradigms: a lattice-based encryption method for fast and lightweight data protection, a hash-based signature mechanism for authenticity, and a code-based key exchange method to ensure session confidentiality. This layered integration is designed to capitalize on each algorithm’s strengths while mitigating individual limitations. The system is implemented using modular components in a testbed simulating real-world deployments, and its performance is benchmarked across multiple metrics including encryption latency, signature generation time, key sizes, and throughput. Comparative results indicate that the hybrid approach outperforms monolithic schemes in critical areas such as execution time and cryptographic strength under quantum adversary models. The findings support the practicality of using multiple post-quantum primitives in tandem to build robust communication systems. This research contributes a realistic implementation and evaluation of post-quantum security models and highlights key directions for future research and standardization efforts as the global transition to quantum-safe infrastructure begins.