Proceedings of Telecommunication Universities

Decision Support System for Finding an Optimal Postquantum Key Encapsulation Mechanism. Part 2. Prototype Evaluation

Александра Владимировна Власенко, Michael Evsyukov, M. Putyato, Alexander Makaryan

Published Dec 29, 2021• 0 citations

Abstract

This is the final part of the series of articles devoted to the development of a decision support system for choosing the optimal post-quantum key encapsulation mechanism. Efficiency of the methodology proposed for choosing the optimal implementation of the post-quantum cryptographic algorithm is evaluated and substantiated. The economic feasibility of approach is shown and its positive impact on the quality of the cryptographic information protection subsystem is demonstrated. Efficiency comparison of the prototype of the decision support system with existing software products aimed at supporting decision-making in the field of information security is carried out. The consistency of prototype’s recommendations with the conclusions of analytical studies in the field of post-quantum cryptography is checked.

DOI: 10.31854/1813-324x-2021-7-4-78-84

Related papers

Scientific and methodological bases of analysis, evaluation and results of comparison of existing and promising (post-quantum) asymmetric cryptographic primitives of electronic signature, protocols of asymmetric encryption and key encapsulation protocols

Yu.I. Gorbenko, Maryna V. Yesina, Volodymyr Ponomar +2 more

Currently, world civilization is taking significant steps in science and practice related to quantum calculations. Significant steps are being taken to achieve the competitive advantage of countries in the field of quantum information science and the practice of introducing quantum technologies. Scientific and practical research is first aimed at reducing the risks related to quantum computers on cybersecurity, economic and national security. Although the full range of quantum computers is still unknown, it is obvious that further technological and scientific leadership of states will at least partially depend on the country's ability to maintain a competitive advantage in quantum computing and quantum information science. However, along with the potential advantages, quantum calculations are likely to cause significant risks about economic and national security. Specific actions are determined that technologically developed states that begin a long-term process of transferring vulnerable computer systems to quantum-resistant cryptography. An important problem in cryptology is to analyze ways of reducing risks for vulnerable cryptographic systems and the state of their development, adoption and implementation at the international and national levels of post-quantum standards of asymmetric cryptotransformations of electronic signatures (ES), asymmetric ciphers (AC) and key encapsulation protocols (KEP). Therefore, the processes of reducing risks for vulnerable existing standardized cryptographic systems and determining the directions of development of mathematical methods and the study of the prospects for their application in the creation of standardized AC, KEP and ES are significantly significant. They are reduced to justification and definition of mathematical methods and mechanisms that will create promising (post-quantum) standardized AC, KEP and ES. The course of analysis, evaluation and results of comparison of existing and post-quantum asymmetric cryptotransformations of AC, KEP and ES, and standardization at the international and national levels, including for transitional and post-quantum periods, are the main objective of this article.

RadiotekhnikaMar 28, 20230 citations

Resilience Optimization of Post-Quantum Cryptography Key Encapsulation Algorithms

Sana Farooq, Ayesha Altaf, Faiza Iqbal +4 more

Recent developments in quantum computing have shed light on the shortcomings of the conventional public cryptosystem. Even while Shor's algorithm cannot yet be implemented on quantum computers, it indicates that asymmetric key encryption will not be practicable or secure in the near future. The National Institute of Standards and Technology (NIST) has started looking for a post-quantum encryption algorithm that is resistant to the development of future quantum computers as a response to this security concern. The current focus is on standardizing asymmetric cryptography that should be impenetrable by a quantum computer. This has become increasingly important in recent years. Currently, the process of standardizing asymmetric cryptography is coming very close to being finished. This study evaluated the performance of two post-quantum cryptography (PQC) algorithms, both of which were selected as NIST fourth-round finalists. The research assessed the key generation, encapsulation, and decapsulation operations, providing insights into their efficiency and suitability for real-world applications. Further research and standardization efforts are required to enable secure and efficient post-quantum encryption. When selecting appropriate post-quantum encryption algorithms for specific applications, factors such as security levels, performance requirements, key sizes, and platform compatibility should be taken into account. This paper provides helpful insight for post-quantum cryptography researchers and practitioners, assisting in the decision-making process for selecting appropriate algorithms to protect confidential data in the age of quantum computing.

SensorsJun 6, 202333 citations

National and international post-quantum standards for asymmetric transformations

І.Д. Горбенко, Serhii Kandii

The article analyzes the current state and prospects of the standardization of post-quantum algorithms for asymmetric cryptographic transformations at the national and international levels. The main reasons for the transition to post-quantum cryptography are discussed, particularly the potential threats posed by quantum computers to existing cryptographic algorithms (RSA, ECC, etc.). An overview of the NIST competition for selecting standards for post-quantum key encapsulation mechanisms (KEM) and electronic signatures is provided, with detailed descriptions of the algorithms chosen for standardization (CRYSTALS-Kyber, CRYSTALS-Dilithium, FALCON, SPHINCS+, and HQC). Additionally, the article examines the role of ISO/IEC, ETSI, and IETF in developing international standards and recommendations. Special attention is given to Ukrainian national standards and initiatives, particularly the algorithms “Skelya” and “Vershyna,” their features, and their prospects for integration into international standards. The article emphasizes the importance and complexity of transitioning to quantum-resistant algorithms and outlines further steps for the successful implementation of post-quantum cryptography. Keywords: post-quantum cryptography, key encapsulation mechanisms, electronic signatures, standardization.

Kibernetyka ta Systemnyi AnalizJan 1, 20250 citations

Exploring Post-Quantum Cryptography: Evaluating Algorithm Resilience against Global Quantum Threats

Tara Nawzad Ahmad Al Attar, Mohammed Anwar Mohammed, Rebaz Nawzad Mohammed

Cryptographic algorithms perform a vital part in protecting information in general and safeguarding digital platforms. Nevertheless, improvements in quantum computing pose important concerns to traditional cryptographic approaches, demanding the development of quantum-resistant explanations. This study offers an inclusive investigation of post-quantum cryptographic algorithms, assessing their flexibility, competence, and practicality in justifying quantum risks. Through an equivalent approach, the research identifies optimistic applicants for upcoming cryptographic standards. Moreover, the study highlights the international essential for embracing these algorithms to ensure secure communication and data protection in the quantum era. These conclusions aim to notify the progress of strong cryptographic systems that address the appearing objections of quantum technologies.

UHD Journal of Science and TechnologyJan 25, 20254 citations

Post-Quantum Cryptography Standards for Future Proof IoT Security: A Literature Review

Norman Nelufule

The advent of quantum computing technology has transformed computing technologies into a machine with higher computing power. However, this has also introduced vulnerability challenges, as traditional cryptographic systems are prone to vulnerability to cyber threats, particularly in the context of the IoT. This paper presents a systematic literature survey of the landscape of postquantum cryptographic systems and their impact on the security of connected systems. The paper has explored various key encapsulation mechanisms that are resistant to quantum attacks, existing post-quantum standards, and assessed their applicability in the IoT environments and implementation challenges. The paper highlighted some of the limitations for adopting post-quantum cryptography due to limited existing standards which can be used to enforce the confidentiality, integrity, security, and privacy of data transmitted particularly by IoT connected devices.

International Conference on Intelligent Digitization of Systems and Services (IDSS)Aug 18, 20252 citations

POST-QUANTUM CRYPTOGRAPHY: CURRENT STATE AND PROSPECTS

Г. С. Єлісєєва

Post-quantum cryptography is one of the key areas of development of modern means of information protection inconnection with the active progress of quantum technologies. Classical cryptographic algorithms, such as RSA and ECC,become vulnerable due to the Shor algorithm, which threatens the long-term security of information systems. The articleprovides an in-depth review of the current state of post-quantum cryptographic algorithms based on the results of the NationalInstitute of Standards and Technology (NIST) selection, and also analyzes the approaches proposed in recent scientificpublications. The characteristics of the Kyber, Dilithium, Falcon, and SPHINCS+ algorithms are considered in detail - theirsecurity parameters, performance, cryptographic strength, requirements for hardware resources, and possibilities of applicationin practical systems. Special attention is paid to the issues of integrating post-quantum algorithms into existing cryptographicprotocols, in particular, into public-key systems, public-key infrastructure, and secure communication channels. The keyproblems of implementing post-quantum cryptography in information infrastructures are considered, including: increased keysizes and cryptographic parameters, computational delays, compatibility with existing software and hardware solutions, and theneed to revise key management policies. The prospects for implementing post-quantum solutions in Ukraine are separatelyanalyzed, and practical recommendations are offered for a phased migration to such algorithms for state and corporate systems,taking into account the requirements for long-term data confidentiality and protection of critical information infrastructure.Keywords: post-quantum cryptography, quantum attacks, NIST PQC, Kyber, Dilithium, Falcon, SPHINCS+,cryptoresistance. References1. NIST. (n.d.). Post-Quantum Cryptography Standardization Project. https://csrc.nist.gov/projects/postquantum-cryptography.2. NIST. (2024). NIST releases first 3 finalized post-quantum encryption standards. https://www.nist.gov/newsevents.3. Dam, D. T., Mavroeidis, V., & Vishi, K. (2023). A survey of post-quantum cryptography: Start of a newquantum era. Cryptography, 7(3). https://doi.org/10.3390/cryptography7030040.4. Kokare, Priyanka & Vora, Deepali & Patil, Shruti & Kotecha, Ketan & Khairnar, Vaishali & Choudhury,Tanupriya & Kulkarni, Ambarish. (2024). Post Quantum Cryptography: A survey of Past and Future.https://www.researchgate.net/publication/382398375_Post_Quantum_Cryptography_A_survey_of_Past_and_Future.5. Chen, L., Jordan, S., Liu, Y.-K., Moody, D., Peralta, R., Perlner, R., Smith-Tone, D. (2016). Report on PostQuantum Cryptography. NIST IR 8105. https://doi.org/10.6028/NIST.IR.8105.6. Bos, J. W., et al. (2017). CRYSTALS-Kyber: A CCA-Secure Module-Lattice-Based KEM. https://pqcrystals.org/kyber/data/kyber-specification-round3.pdf.7. Ducas, L., et al. (2018). CRYSTALS-Dilithium: Digital Signatures from Module Lattices. https://pqcrystals.org/dilithium/data/dilithium-specification-round3.pdf.8. Pöppelmann, T., Oder, T., & Güneysu, T. (2015). High-Speed Ideal Lattice-Based Cryptography on 8-bit AVRMicrocontrollers. IACR Cryptology ePrint Archive, Report 2015/382. https://eprint.iacr.org/2015/382.pdf.9. Cloudflare. (2023). Post-Quantum Cryptography Support in TLS and Web Infrastructure.https://blog.cloudflare.com/tag/post-quantum-cryptography/.10. ETSI. (2020). Quantum-Safe Cryptography – An Overview. https://www.etsi.org/technologies/quantum-safecryptography.11. NCSC UK. (2020). Preparing for Quantum-Safe Cryptography. https://www.ncsc.gov.uk/whitepaper/preparing-for-quantum-safe-cryptography.12. Keyfactor & Ponemon Institute. (2023). State of Machine Identity Management Report. Keyfactor, Inc.https://www.keyfactor.com.13. Shor, P. (1994). Algorithms for quantum computation: Discrete logarithms and factoring. Proceedings of the35th Annual Symposium on Foundations of Computer Science.14. Bernstein, D., & Lange, T. (2017). Post-Quantum Cryptography. Springer. https://doi.org/10.1007/978-3-540-88702-7.15. Grover, L. (1996). A fast quantum mechanical algorithm for database search. STOC '96.https://doi.org/10.1145/237814.237866.16. Mosca, M. (2018). Cybersecurity in an era with quantum computers: Will we be ready? IEEE Security &Privacy, 16(5), 38–41. https://doi.org/10.1109/MSP.2018.3761723.17. Prest, T. (2020). Efficient implementation issues in Falcon. https://falcon-sign.info.18. SPHINCS+ Team. (n.d.). SPHINCS+ Specification. https://sphincs.org/data/sphincs+-specification.pdf.

Modern information securityMar 30, 20260 citations