The threat of quantum computers to classical public-key cryptography has created an urgent need to evolve secure communication protocols with post-quantum cryptographic (PQC) primitives. The Noise Protocol Framework, widely used in systems such as WireGuard and WhatsApp, traditionally relies on the Elliptic Curve Diffie-Hellman (ECDH) public-key exchange scheme, which is vulnerable to quantum threats. In this paper, we present NoisePQC++, a unified C++23 implementation of the Noise Protocol framework augmented with post-quantum Key Encapsulation Mechanisms and Hybrid Forward Secrecy. Our design integrates the National Institute of Standards and Technology (NIST) standardized ML-KEM algorithm alongside classical ECDH, enabling full PQC, hybrid ECDH+PQC handshakes, and unified support for all 57 classical Noise handshake pattern variants, 13 post-quantum Noise handshakes, and their hybrid variants. Compared with prior work, NoisePQC++ offers broader protocol coverage, more complete implementation support, and greater flexibility. Our evaluation shows minimal overhead under normal network conditions and acceptable overhead in adverse cases, while significantly improving resistance against quantum adversaries. These results indicate that NIST-standardized post-quantum and hybrid Noise handshakes are practical and provide a credible basis for future deployment.
AI Summary
NoisePQC++ addresses how to implement classical, post-quantum, and hybrid Noise handshakes within one software framework. It provides a C++23 library using Botan for cryptographic primitives, supporting 57 classical handshake variants, 13 published PQNoise patterns, hybrid variants of interactive patterns, X25519/X448, and ML-KEM-512/768/1024. A shared state machine processes ECDH and KEM tokens, mixing their secrets sequentially through Noise’s HKDF-based key schedule. The implementation also includes protocol-string parsing, instrumentation, cross-platform builds, and networking examples.
Correctness evidence consists of more than 200 tests with over 500 assertions, classical Noise test vectors, and deterministic PQ/hybrid cases checking agreement and selected failure conditions. Benchmarks on an Intel i7 MacBook Pro report ML-KEM-768 handshake times of $0.66$–$0.85\times$ the X25519 baseline and hybrid costs of $1.25$–$1.70\times$. Bandwidth increases are larger: pure-PQ handshakes use $28.6$–$46.8\times$ the classical wire overhead; for XX, the reported ratios are $36.1\times$ for PQ and $14.4\times$ for hybrid. TCP-loopback measurements give mean times of 425 microseconds for pqNN and 516 microseconds for classical NN. At ten concurrent clients, pqXX reaches 1,314 handshakes/s, versus 918 for XX and 794 for XXhfs.
The paper reports no cross-library interoperability testing. Evaluation is confined to one machine and loopback networking; broader cross-platform benchmarking and application deployment remain future work. Fallback and negotiation mechanisms, PQNoise’s SEEC mechanism, and post-quantum signature authentication are not implemented. Side-channel resistance relies on Botan rather than a separate implementation-level analysis.
Some signs of AI-generated textIncrementalOverclaimsMissing comparison
Central claim may not hold: The abstract's adverse-network performance claim is unsupported by this paper's local and TCP-loopback experiments.
The displayed XXhfs construction retains X25519-only authentication, so breaking X25519 permits active impersonation without breaking ML-KEM, contrary to the unqualified two-primitive security assertion.
The reported hybrid wire-size ratios of 33.0 for NN and 14.4 for XX are inconsistent with the supplied ML-KEM-768 sizes and standard Noise message accounting.
The approximately 2.3 KB ML-KEM-1024 key-pair claim disagrees with standardized expanded key sizes, and no alternative storage representation is documented to justify it.
Written by gpt-6.1-sol from the paper's full text. Automated: it can be wrong.
Comments
11 pages. Accepted to be presented and published at the 2026 IEEE International Conference on Quantum Computing and Engineering
The threat of quantum computers to classical public-key cryptography has created an urgent need to evolve secure communication protocols with post-quantum cryptographic (PQC) primitives. The Noise Protocol Framework, widely used in systems such as WireGuard and WhatsApp, traditionally relies on the Elliptic Curve Diffie-Hellman (ECDH) public-key exchange scheme, which is vulnerable to quantum threats. In this paper, we present NoisePQC++, a unified C++23 implementation of the Noise Protocol framework augmented with post-quantum Key Encapsulation Mechanisms and Hybrid Forward Secrecy. Our design integrates the National Institute of Standards and Technology (NIST) standardized ML-KEM algorithm alongside classical ECDH, enabling full PQC, hybrid ECDH+PQC handshakes, and unified support for all 57 classical Noise handshake pattern variants, 13 post-quantum Noise handshakes, and their hybrid variants. Compared with prior work, NoisePQC++ offers broader protocol coverage, more complete implementation support, and greater flexibility. Our evaluation shows minimal overhead under normal network conditions and acceptable overhead in adverse cases, while significantly improving resistance against quantum adversaries. These results indicate that NIST-standardized post-quantum and hybrid Noise handshakes are practical and provide a credible basis for future deployment.
NoisePQC++ addresses how to implement classical, post-quantum, and hybrid Noise handshakes within one software framework. It provides a C++23 library using Botan for cryptographic primitives, supporting 57 classical handshake variants, 13 published PQNoise patterns, hybrid variants of interactive patterns, X25519/X448, and ML-KEM-512/768/1024. A shared state machine processes ECDH and KEM tokens, mixing their secrets sequentially through Noise’s HKDF-based key schedule. The implementation also includes protocol-string parsing, instrumentation, cross-platform builds, and networking examples.
Correctness evidence consists of more than 200 tests with over 500 assertions, classical Noise test vectors, and deterministic PQ/hybrid cases checking agreement and selected failure conditions. Benchmarks on an Intel i7 MacBook Pro report ML-KEM-768 handshake times of 0.66–0.85× the X25519 baseline and hybrid costs of 1.25–1.70×. Bandwidth increases are larger: pure-PQ handshakes use 28.6–46.8× the classical wire overhead; for XX, the reported ratios are 36.1× for PQ and 14.4× for hybrid. TCP-loopback measurements give mean times of 425 microseconds for pqNN and 516 microseconds for classical NN. At ten concurrent clients, pqXX reaches 1,314 handshakes/s, versus 918 for XX and 794 for XXhfs.
The paper reports no cross-library interoperability testing. Evaluation is confined to one machine and loopback networking; broader cross-platform benchmarking and application deployment remain future work. Fallback and negotiation mechanisms, PQNoise’s SEEC mechanism, and post-quantum signature authentication are not implemented. Side-channel resistance relies on Botan rather than a separate implementation-level analysis.
The threat of quantum computers to classical public-key cryptography has created an urgent need to evolve secure communication protocols with post-quantum cryptographic (PQC) primitives. The Noise Protocol Framework, widely used in systems such as WireGuard and WhatsApp, traditionally relies on the Elliptic Curve Diffie-Hellman (ECDH) public-key exchange scheme, which is vulnerable to quantum threats. In this paper, we present NoisePQC++, a unified C++23 implementation of the Noise Protocol framework augmented with post-quantum Key Encapsulation Mechanisms and Hybrid Forward Secrecy. Our design integrates the National Institute of Standards and Technology (NIST) standardized ML-KEM algorithm alongside classical ECDH, enabling full PQC, hybrid ECDH+PQC handshakes, and unified support for all 57 classical Noise handshake pattern variants, 13 post-quantum Noise handshakes, and their hybrid variants. Compared with prior work, NoisePQC++ offers broader protocol coverage, more complete implementation support, and greater flexibility. Our evaluation shows minimal overhead under normal network conditions and acceptable overhead in adverse cases, while significantly improving resistance against quantum adversaries. These results indicate that NIST-standardized post-quantum and hybrid Noise handshakes are practical and provide a credible basis for future deployment.
Recent advances in quantum computing indicate that several cryptographic mechanisms widely used today may become unreliable in the foreseeable future. In particular, publickey systems based on RSA, elliptic-curve cryptography, and Diffie-Hellman key exchange rely on mathematical assumptions that are known to be vulnerable to quantum algorithms. Even though practical large-scale quantum computers are not yet available, encrypted data exchanged today can be stored and retrospectively decrypted once such machines become feasible, making early migration toward quantum-resilient solutions necessary. This paper presents PQNoise, a post-quantum secure extension of the Noise Protocol Framework implemented in Java. The proposed framework integrates NIST-standardized latticebased primitives, namely CRYSTALS-Kyber for key establishment and CRYSTALS-Dilithium for authentication, while still supporting widely deployed classical algorithms such as X25519 and Ed25519. The system is designed to operate in three modes: classical, post-quantum, and hybrid. In the hybrid configuration, shared session keys are derived by combining secrets from both classical and post-quantum mechanisms using HKDF, thereby providing protection even if one class of primitives is later weakened. In addition to describing the architectural design and protocol integration strategy, this work reports on a detailed experimental evaluation of the proposed system. The results indicate that, although post-quantum and hybrid handshakes introduce additional computational and bandwidth overhead, the overall performance remains within practical limits for realworld deployment. PQNoise therefore offers a realistic and incremental path toward quantum-resilient secure communication systems.
As the era of quantum computing approaches, the fundamental cryptographic primitives securing global communications face a paradigm shift. With the National Institute of Standards and Technology (NIST) finalizing new standards, the industry must urgently address the vulnerabilities of legacy systems. The imminent advent of CRQCs (Cryptographically Relevant Quantum Computers) poses an existential threat to the Public Key Infrastructure (PKI) underpinning the global digital economy. Classical algorithms such as RSA and ECC (Elliptic Curve Cryptography) are vulnerable to polynomial-time cryptanalysis via Shor’s algorithm. This study investigates the HNDL (Harvest Now, Decrypt Later) threat model and evaluates the resilience of NIST-standardized PQC (Post-Quantum Cryptography) algorithms: ML-KEM and ML-DSA. Utilizing a high-performance Fortinet networking environment, we experimentally validate that "Hybrid Mode" IPsec VPNs can achieve quantum resistance with negligible performance degradation, offering a viable migration path for enterprise infrastructure. Specifically, we benchmark the trade-offs between PQC’s larger key sizes and network latency, demonstrating that the overhead remains within acceptable operational thresholds. Implementing hybrid protocols provides a critical transition mechanism, allowing organizations to secure long-term data confidentiality against retrospective decryption while preserving interoperability with legacy systems.
The threats are existential to the traditional cryptosystems of public keys, including RSA, Diffie-Hellman, and elliptic curve cryptography (ECC), due to the rapid progress in quantum computing. Such algorithms as the Shor and Grover algorithms prove that as soon as large scale quantum computers are achieved, these classical cryptographic protocols will not provide any privacy and integrity to online communication. This has created an emergency to find post-quantum cryptography (PQC), or quantum-safe cryptography, which will resist attacks by both classical and quantum attackers. The paper is a review of the latest research and development in post-quantum cryptographic algorithms and their implementation in current security systems. We organize quantum-safe methods into significant organizations such as lattice-based, hash-based, multivariate polynomial-based and code-based encrypted communications. Each type has been evaluated critically based on computational efficiency, key sizes, speed of encryption/decryption and security proofs. The survey also examines the current standardization activities happening in the world and especially the U.S. National Institute of Standards and Technology (NIST) PQC competition, which lists candidate algorithms that have advanced to standard adoption. Besides this, the paper addresses hybrid cryptographic designs that use both classical and post-quantum bases in ensuring a seamless migration in the transition phase. Internet security protocols like TLS, VPNs and blockchain consensus as applications of PQC are examined in detail. Lastly, we pinpoint open research issues, which include creating lightweight PQC to support resource-constrained IoT devices, balancing performance and strong security assurances, and interoperability between the new PQC algorithms and existing infrastructures. Through detailed survey we inform the future of researchers, practitioners, and policymakers on the preparation of the post-quantum era of secure digital communications.
The emergence of large-scale quantum computing presents an imminent threat to contemporary public-key cryptosystems, with quantum algorithms such as Shor’s algorithm capable of efficiently breaking RSA and elliptic curve cryptography (ECC). This vulnerability has catalyzed accelerated standardization efforts for post-quantum cryptography (PQC) by the U.S. National Institute of Standards and Technology (NIST) and global security stakeholders. While theoretical security analysis of these quantum-resistant algorithms has advanced considerably, comprehensive real-world performance benchmarks spanning diverse computing environments—from high-performance cloud infrastructure to severely resource-constrained IoT devices—remain insufficient for informed deployment planning. This paper presents the most extensive cross-platform empirical evaluation to date of NIST-selected PQC algorithms, including CRYSTALS-Kyber and NTRU for key encapsulation mechanisms (KEMs), alongside BIKE as a code-based alternative, and CRYSTALS-Dilithium and Falcon for digital signatures. Our systematic benchmarking framework measures computational latency, memory utilization, key sizes, and protocol overhead across multiple security levels (NIST Levels 1, 3, and 5) in three distinct hardware environments and various network conditions. Results demonstrate that contemporary server architectures can implement these algorithms with negligible performance impact (<5% additional latency), making immediate adoption feasible for cloud services. In contrast, resource-constrained devices experience more significant overhead, with computational demands varying by up to 12× between algorithms at equivalent security levels, highlighting the importance of algorithm selection for edge deployments. Beyond standalone algorithm performance, we analyze integration challenges within existing security protocols, revealing that naive implementation of PQC in TLS 1.3 can increase handshake size by up to 7× compared to classical approaches. To address this, we propose and evaluate three optimization strategies that reduce bandwidth requirements by 40–60% without compromising security guarantees. Our investigation further encompasses memory-constrained implementation techniques, side-channel resistance measures, and hybrid classical-quantum approaches for transitional deployments. Based on these comprehensive findings, we present a risk-based migration framework and algorithm selection guidelines tailored to specific use cases, including financial transactions, secure firmware updates, vehicle-to-infrastructure communications, and IoT fleet management. This practical roadmap enables organizations to strategically prioritize systems for quantum-resistant upgrades based on data sensitivity, resource constraints, and technical feasibility. Our results conclusively demonstrate that PQC is deployment-ready for most applications, provided that implementations are carefully optimized for the specific performance characteristics and security requirements of target environments. We also identify several remaining research challenges for the community, including further optimization for ultra-constrained devices, standardization of hybrid schemes, and hardware acceleration opportunities.
The emergence of large-scale quantum computers poses a significant threat to current cryptographic protocols, particularly Transport Layer Security (TLS), which relies on RSA and elliptic curve cryptography vulnerable to Shor's algorithm. This paper presents a hybrid framework for quantum-resistant TLS handshakes that integrates post-quantum cryptography (PQC), quantum key distribution (QKD) and classical cryptography to provide comprehensive protection against both classical and quantum attacks. The approach employs three QKD protocols; BB84, E91, and Measurement-Device-Independent QKD (MDI-QKD) alongside NIST-standardized PQC algorithms as well as alternative candidates such as HQC and BIKE. A key innovation is the QKD key management module, which addresses performance bottlenecks through periodic key generation and secure reuse within predefined retention periods, significantly reducing QKD overhead in TLS handshakes. The experimental implementation using the quantum network simulator evaluated 144 distinct cryptographic protocol combinations. Results demonstrate that ML-KEM combined with ML-DSA provides optimal PQC performance, while QKD protocol selection is distance-dependent: BB84 for short-range and MDI-QKD for long-distance communication. The framework includes various attack mitigation mechanisms and ensure security as long as at least one cryptographic method remains uncompromised. Consistent with current global quantum network usage, the proposed TLS approach is designed primarily for MAN and WAN environments rather than the Internet, providing a balanced solution that combines theoretical security guarantees with computational efficiency.