Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

Lecture notes in computer science

Post-quantum Key Exchange for the Internet and the Open Quantum Safe Project

Douglas Stebila, Michele Mosca

Published Jan 1, 2017• 230 citations
Publisher
DOI
10.1007/978-3-319-69453-5_2

Related papers

Post-quantum Internet Key Exchange via Authenticated Forward-Secure KEM

Yunlei Zhao, Biming Zhou, Zhixiang Zhao +3 more

Lecture notes in computer science•Jan 1, 2026•0 citations

Post-Quantum Migration for Secure Protocols: Building a Quantum-Safe Internet

Sachin Ware, Shalini Wankhade, Chudaman Devidasrao Sukte +3 more

International Conference on Advancements in Smart, Secure and Intelligent Computing (ASSIC)•Aug 1, 2026•0 citations

A Survey on Post-Quantum Key Exchange

Sitnikov, Konstantin

•Oct 1, 2017•0 citations

KEMEDHOC*: A formally verified quantum-safe key exchange protocol

Cuong Nguyen

The advent of quantum computing poses significant threats to classical public-key cryptographic systems such as RSA and Elliptic Curve Cryptography, necessitating quantum-safe migration paths for Internet of Things (IoT) communication. The Ephemeral Diffie-Hellman Over COSE (EDHOC) protocol provides lightweight authenticated key exchange for resource-constrained IoT devices but lacks quantum-safe security and formally verified implementations. This thesis introduces KEMEDHOC, a KEM-based, signature-free, post-quantum variant of EDHOC that achieves mutual authentication through optimized integration of Key Encapsulation Mechanisms (KEMs). Compared to the direct adaptation, KEMEDHOC reduces noticeably message size (by over \textbf{33\%}) and handshake time (by \textbf{15\%}), while maintaining comparable security levels. Formal verification, at design-level, using ProVerif confirms that KEMEDHOC preserve all core EDHOC security properties, including mutual authentication, confidentiality, and forward secrecy. Verified implementations (EDHOC* and KEMEDHOC*) developed in F* and Low* ensure functional correctness, memory safety, and timing constant-time behavior, down to verified C code through KaRaMel compiler. Overall, this thesis delivers the first end-to-end formally verified post-quantum variant of EDHOC, demonstrating that formal assurance and post-quantum security can be obtained efficiently in lightweight key exchange protocols.

•Oct 30, 2025•0 citations

Post-quantum security of encrypted key exchange protocol

Yang Li, Rui-Rui Zhou

•May 24, 2013•0 citations

Securing IoT communication: a module-LWE key exchange protocol with efficient error reconciliation technique

Alvary Kefas Kwala, Alpna Mishra, Anshu Kumar

The widespread use of Internet of Things devices alongside advances in quantum computing presents urgent challenges for secure communication. RSA and ECC have become inadequate, prompting the need for Post-quantum Cryptography (PQC). This work introduces a novel reconciliation-based Module-LWE key exchange protocol that eliminates the traditional encapsulation-decapsulation structure in schemes like Kyber.KE, thereby reducing computational cycles, communication size, and memory footprint. Unlike Kyber and NewHope, the proposed design employs modular rounding with Peikert reconciliation, optimizing the entire key exchange process without requiring additional randomness or ciphertext transmission. By leveraging Peikert’s error reconciliation technique and modular rounding, the proposed protocol achieves a 15% reduction in computational cycles, a 78-byte reduction in communication size, and a 10% decrease in memory usage. Using Open Quantum Safe (OQS) benchmark data, we evaluate performance across Kyber512, Kyber768, and Kyber1024 levels, demonstrating the protocol’s superior energy efficiency and lightweight design. These improvements position our protocol as a secure, efficient, and scalable solution for post-quantum key exchange in resource-constrained environments such as embedded systems and IoT networks.

Discover Internet of Things•Jul 31, 2025•3 citations
The advent of quantum computing poses significant threats to classical public-key cryptographic systems such as RSA and Elliptic Curve Cryptography, necessitating quantum-safe migration paths for Internet of Things (IoT) communication. The Ephemeral Diffie-Hellman Over COSE (EDHOC) protocol provides lightweight authenticated key exchange for resource-constrained IoT devices but lacks quantum-safe security and formally verified implementations. This thesis introduces KEMEDHOC, a KEM-based, signature-free, post-quantum variant of EDHOC that achieves mutual authentication through optimized integration of Key Encapsulation Mechanisms (KEMs). Compared to the direct adaptation, KEMEDHOC reduces noticeably message size (by over \textbf{33\%}) and handshake time (by \textbf{15\%}), while maintaining comparable security levels. Formal verification, at design-level, using ProVerif confirms that KEMEDHOC preserve all core EDHOC security properties, including mutual authentication, confidentiality, and forward secrecy. Verified implementations (EDHOC* and KEMEDHOC*) developed in F* and Low* ensure functional correctness, memory safety, and timing constant-time behavior, down to verified C code through KaRaMel compiler. Overall, this thesis delivers the first end-to-end formally verified post-quantum variant of EDHOC, demonstrating that formal assurance and post-quantum security can be obtained efficiently in lightweight key exchange protocols.
The widespread use of Internet of Things devices alongside advances in quantum computing presents urgent challenges for secure communication. RSA and ECC have become inadequate, prompting the need for Post-quantum Cryptography (PQC). This work introduces a novel reconciliation-based Module-LWE key exchange protocol that eliminates the traditional encapsulation-decapsulation structure in schemes like Kyber.KE, thereby reducing computational cycles, communication size, and memory footprint. Unlike Kyber and NewHope, the proposed design employs modular rounding with Peikert reconciliation, optimizing the entire key exchange process without requiring additional randomness or ciphertext transmission. By leveraging Peikert’s error reconciliation technique and modular rounding, the proposed protocol achieves a 15% reduction in computational cycles, a 78-byte reduction in communication size, and a 10% decrease in memory usage. Using Open Quantum Safe (OQS) benchmark data, we evaluate performance across Kyber512, Kyber768, and Kyber1024 levels, demonstrating the protocol’s superior energy efficiency and lightweight design. These improvements position our protocol as a secure, efficient, and scalable solution for post-quantum key exchange in resource-constrained environments such as embedded systems and IoT networks.