Due to development in quantum computing, we need to create and implement new cryptographic protocols, which are resistant to attacks using a quantum computer, in all practical cases. Last years humans became using messengers to transfer far more important information than earlier, so it is necessary to create new post-quantum secure messaging protocols for peer-to-peer and group communications. In this article, we describe needed security properties, existing ways for the creation of group chats, and our suggestions. We described ways and needed primitives for the creation of a group key establishment scheme based on isogenies of elliptic curves. We describe such protocol as an extended Double Ratchet protocol.
Due to development in quantum computing, we need to create and implement new cryptographic protocols, which are resistant to attacks using a quantum computer, in all practical cases. Last years humans became using messengers to transfer far more important information than earlier, so it is necessary to create new post-quantum secure messaging protocols for peer-to-peer and group communications. In this article, we describe needed security properties, existing ways for the creation of group chats, and our suggestions. We described ways and needed primitives for the creation of a group key establishment scheme based on isogenies of elliptic curves. We describe such protocol as an extended Double Ratchet protocol.
Widely used communication and messaging protocols, e.g., TLS 1.3 and Signal, are insecure against an adversary with a quantum computer. We expect that post-quantum security will become mandatory for a new generation of cryptographic protocols in the nearest 10-15 years. The analysis of existing post-quantum secure cryptographic tools for key exchange, encryption and message authentication based on hard problems in codes, lattices, ring learning with errors and elliptic curve isogenies revealed their advantages and drawbacks. In particular, we conclude, that the main threat to communication and messaging protocols is only pre-quantum security of currently used Diffie-Hellman key exchange protocols. We summarize efficiency and safety results for each class of post-quantum cryptographic schemes and present an experimental implementation of isogeny-based Diffie-Hellman-like key exchange protocol as an illustration of their applicability.
Advances in the development of quantum technologies force to create new methods of secure information transfer over insecure networks and channels. In this article, we analyze some important properties of secure group messaging resilient to quantum computer attacks: message authentication and asynchronous key update. We consider options for ensuring message authentication and detect the difference between the requirements for this property in group communications and point-to-point channels. We define the structure of key information and preshared key packages for the new protocol based on the classic X3DH protocol.
Development in the area of quantum technologies led to the appearance of first quantum computers. The threat of using a quantum computer for cryptanalysis requires wide implementing post-quantum security in computing algorithms and communication protocols. We evaluate the computational power of some existing quantum computers to illustrate the relevance of research in post-quantum security. One of the best ways to test post-quantum protocols is to embed them into some non-critical but widely-used sphere. Secure messaging is an excellent example of such an application. In the paper, we analyze the post-quantum security of well-known messaging specification Signal, which is considered to have high-security properties. The core of Signal specification is the Double Ratchet protocol. We notice and explain why it is not a post-quantum secure scheme. After that, we suggest some possible ways to improve the security features of Signal specification.
The development of quantum computing poses a very real threat to traditional cryptography, especially these, which are number-theoretic like RSA and ECC. With the more and more development of quantum algorithms such as Shor and Grover, there is an immediate necessity to come up with cryptographic protocols that are resistant to quantum attacks. This paper reviews and discusses different quantum-resistant (post-quantum) cryptographic schemes, such as lattice-based, code-based, multivariate, hash-based, and isogeny-based cryptography. It compares these protocols on the assumptions of their security and their efficiency in their computation and the size of their keys as well as their possible integrations into the existing communication infrastructure. Moreover, we also evaluate the standardization process by NIST and the difficulties of moving towards post-quantum security in practical use. This paper proposes a scalable comparison system, which correlates the hypothetical security basis of postquantum cryptography with the ability to effectively operate in the real world. It has emphasized protocol interoperability, migration compatibility and trade-offs in performance that gives a viable roadmap towards quantum-resistant cryptographic protocols implementation into current communication infrastructures whilst also providing scalable and future secure communication systems. This study, by emphasizing the potential and the drawbacks of the existing post-quantum cryptography schemes, helps in a more precise idea of the directions to follow on the way to a secure, future-proof communications scheme.
The development of quantum computing poses a very real threat to traditional cryptography, especially these, which are number-theoretic like RSA and ECC.With the more and more development of quantum algorithms such as Shor and Grover, there is an immediate necessity to come up with cryptographic protocols that are resistant to quantum attacks.This paper reviews and discusses different quantum-resistant (post-quantum) cryptographic schemes, such as latticebased, code-based, multivariate, hash-based, and isogeny-based cryptography.It compares these protocols on the assumptions of their security and their efficiency in their computation and the size of their keys as well as their possible integrations into the existing communication infrastructure.Moreover, we also evaluate the standardization process by NIST and the difficulties of moving towards post-quantum security in practical use.This paper proposes a scalable comparison system, which correlates the hypothetical security basis of post-quantum cryptography with the ability to effectively operate in the real world.It has emphasized protocol interoperability, migration compatibility and trade-offs in performance that gives a viable roadmap towards quantum-resistant cryptographic protocols implementation into current communication infrastructures whilst also providing scalable and future secure communication systems.This study, by emphasizing the potential and the drawbacks of the existing post-quantum cryptography schemes, helps in a more precise idea of the directions to follow on the way to a secure, future-proof communications scheme.
Because of Shor’s method, it is expected that quantum computers will have the capability to decipher current public key encryption methods. Consequently, there is a need to replace existing public key cryptography with quantum-resistant cryptography, also known as post-quantum cryptography (PQC) algorithms. In the last twenty years, significant progress has been made in the field of PQC research, leading to the creation of various algorithms that are proven to be resistant to quantum attacks. Several organizations responsible for standardization have already selected and are in the process of standardizing specific PQC algorithms.In popular instant messaging and voice-over IP applications like Signal, Facebook Messenger, and WhatsApp, the Signal Protocol provides end-to-end encryption (E2EE) and additional security features such as forward secrecy, future secrecy, authentication, asynchronous communication, and deniability. The protocol utilizes the ECDH Curve25519 key exchange and hash-based key derivation algorithms to accomplish this. However, the ECDH key exchange is vulnerable to attacks from quantum computers, which can compromise the security of contemporary cryptographic techniques by obtaining the corresponding public keys. Therefore, there is a need to replace the ECDH key exchange with a quantum-safe key exchange scheme that is resistant to attacks from quantum computers.In this context, the focus is on investigating post-quantum cryptography (PQC) that can provide robust security against quantum computing threats and proposing an end-to-end encryption scheme.