Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

International Journal of Information and Communication Technology

Integration of a quantum scheme for key distribution and authentication within EAP-TLS protocol

Aymen Ghilen, Mostafa Azizi

Published Jan 1, 2019• 2 citations
Publisher

Abstract

The extensive deployment of wireless networks has led to a significant progress in security approaches that aim to protect confidentiality. The current method for exchanging a secret key within 'extensible authentication protocol-transport layer security' (EAP-TLS) protocol is based on public key infrastructure (PKI). Although this technique remains one of the most widely implemented solution to authenticate users and to ensure secure data transmission, its security is only computational. In other words, by the emergence of the quantum computer, the existing cryptosystems will become completely insecure. Improving the contemporary cryptographic schemes by integrating quantum cryptography becomes a much more attractive prospect since its technology does not rely on difficult mathematical problems such as factoring large integers or computing discrete logarithms. Thus, we propose a quantum extension of EAP-TLS that allows exchanging a cryptographic key and authenticating a remote client with unconditional security, ensured by the laws of quantum physics. PRISM tool is applied as a probabilistic model checker to verify specific security properties for the new scheme.

DOI
10.1504/ijict.2019.099112

Related papers

Integration of a quantum authenticated key distribution scheme in the EAP-TLS protocol

Aymen Ghilen, Mostafa Azizi, Ridha Bouallègue

The expanded use of wireless networks has led to significant improvement in security approaches that aim to protect information. Providing secure communication for wireless local area network (WLAN) has become one of the prime concerns. The current standard for exchanging a secret key to authenticate users and ensure secure data transmission within EAP-TLS protocol relies on Public Key Infrastructure. This technique remains secure only in case of limited computational power of eavesdroppers. Thus, we propose a quantum extension of EAP-TLS which allows exchanging a cryptographic key and authenticating a remote client peer with absolute security, ensured by the laws of quantum laws.

IEEE/ACS International Conference on Computer Systems and Applications (AICCSA)•Nov 1, 2015•2 citations

Improving TLS Security By Quantum Cryptography

Mohamed Elboukhari, Mostafa Azizi, Abdelmalek Azizi

Quantum Cryptography or Quantum Key Distribution (QKD) solves the key distribution problem by allowing the exchange of a cryptographic key between two remote parties with absolute security, guaranteed by the laws of quantum physics.Extensive studies have been undertaken on QKD since it was noted that quantum computers could break public key cryptosystems based on number theory.Actually, the progress of research in this field allows the implementation of QKD outside of laboratories.Efforts are made to exploit this technology in the existing communication networks and to improve the performance and reliability of the implemented technologies.Some research is in progress for the integration of QKD with the protocols in different layers of OSI model.The examples of such research effort are the integration of QKD in point-to-point protocol (PPP) OSI layer 2 and the integration of QKD with IPSEC at OSI layer-3.All these works are moving towards the utilization of QKD technology for enhancing the security of modern computing applications on the internet.In this paper, we present a novel extension of the TLS protocol based on QKD.We introduce a scheme for integrating Quantum Cryptography in this protocol.Our approach improves the security of the process of authentication and data encryption.Also, we describe an example to illustrate the feasibility of our scheme's implementation.

International Journal of Network Security & Its Applications•Jul 9, 2010•7 citations

Integration of quantum key distribution in EAP-TLS protocol used for wireless LAN authentication

Mohamed Elboukhari, Abdelmalek Azizi, Mostafa Azizi

Extensive studies have been undertaken on quantum cryptography, which offers unconditionally secure communication based on quantum mechanics, since it was noted that quantum computers could break public key cryptosystems based on number theory. Now there is a strong need of research to exploit this technology in the existing communication networks. While the use of quantum cryptography in fiber optical networks gets significant advances, research on the application of quantum cryptography in mobile wireless network is still premature. There are a large variety of kinds of mobile wireless networks, Wi-Fi, based on the IEEE 802.11 standard, is wireless local area network and due to the limited coverage area, this environment potentially offers a chance to let quantum key distribution (QKD) play a role in the wireless communication. In this paper, we propose a technique of integrating quantum cryptography in 802.11 to provide a secure service of authentication. It is based on integrating QKD in the EAP-TLS conversation to enhance the security of the authentication process.

International Symposium on I/V Communications and Mobile Network (ISIVC)•Sep 1, 2010•3 citations

Integration of a quantum protocol for mutual authentication and secret key distribution within 802.11i standard

Aymen Ghilen, Mostafa Azizi, Ridha Bouallègue

By relying upon the laws of quantum physics, quantum cryptography is reaching an extremely high level of security guarantee. It allows establishing a secret and perfectly random key material between two network nodes. It improves the contemporary cryptographic methods based only on computational security by integrating a quantum cryptographic solution. Since quantum technology becomes an attractive prospect, our overriding objective is to provide a quantum key agreement scheme that properly authenticates users in 802.11i networks. In this paper, we introduce a quantum scheme, for mutual authentication and key establishment for the integration within IEEE 802.11 networks towards absolute communication security. The key issued from the quantum algorithm authenticates the two endpoints and will be used for building the pairwise key and the group key hierarchies. To analyze the security of our approach, a formal verification of some security properties is performed using PRISM as a model checker tool.

IEEE/ACS International Conference on Computer Systems and Applications (AICCSA)•Nov 1, 2015•6 citations

Integration and formal security analysis of a quantum key distribution scheme within CHAP protocol

Aymen Ghilen, Mostafa Azizi, Ridha Bouallègue

In a security context, to render a cryptosystem more resistant against man-in-the-middle and impersonation attacks, an authentication mechanism has to be considered. CHAP protocol (Challenge Handshake Authentication Protocol) is among the most widely spread authentication technique used within Local Area Networks. To offer greater robustness and privacy, we intend through our present paper to introduce a new quantum extension of CHAP that integrates quantum cryptography and takes advantage of its benefits such as eavesdropping detection, random secret key generation and unconditional security. A new scheme using a previously shared entangled qubits pairs with quantum unitary operators to ensure key agreement and mutual authentication is performed. To analyze the security of the proposed protocol, we use the PRISM tool as a model checker. We particularly focus on the security property of minimizing the quantity of information about the key that an enemy can obtain from applying a “man in the middle” attack. If we act on the parameters of the channel and the eavesdropper, we prove that this security property is affected by varying the efficiency of the channel as well as the power of the enemy. More interestingly, we show that the enemy could never be able to retrieve the value of the key.

IEEE/ACS International Conference on Computer Systems and Applications (AICCSA)•Nov 1, 2015•2 citations

Quantum cryptography for the benefit of API keys safety

Aymen Ghilen, Amel Mohamed essaket Zahou, Wiem Abedelmonem Ben Khalifa

To cope with the unauthorized access to the cloud treasure of resources and services, several cloud service providers implement the API-based access control approach and grant thus a full authentication of any client application. Once called, each cloud API (Application Programming Interface) is required to authenticate through a secret access key, commonly termed API key. A plethora of security risks is associated with these keys whether during their generation, storage, or utilization. The hardware secure element-based proposal aims for an end-to-end security between a cloud service provider and a client application. To ensure a reliable and secure API key exchange, the concerned entities rely on Public Key Infrastructure (PKI). As soon as an adversary acquires an unbounded computing power, it would be easy to intercept the keys and then unlock the gate behind the valuables over the cloud. In this paper, we propose a revised scheme that discards the PKI and installs a quantum mechanism to mutually authenticate the secure element and the cloud service provider by establishing a set of shared keys. A pioneering absolute security of the presented approach is warranted by the principles of quantum physics. To analyze the security of the quantum technology, we establish a formal verification based on PRISM model checking tool. We outstandingly focus on satisfying two prominent properties: (i) both the parties engaged in the quantum protocol are able to detect any disallowed eavesdropping and (ii) the valid amount of information caught by an adversary on the installed key must be negligible.

International Conference on Sciences of Electronics, Technologies of Information and Telecommunications•May 28, 2022•3 citations
The extensive deployment of wireless networks has led to a significant progress in security approaches that aim to protect confidentiality. The current method for exchanging a secret key within 'extensible authentication protocol-transport layer security' (EAP-TLS) protocol is based on public key infrastructure (PKI). Although this technique remains one of the most widely implemented solution to authenticate users and to ensure secure data transmission, its security is only computational. In other words, by the emergence of the quantum computer, the existing cryptosystems will become completely insecure. Improving the contemporary cryptographic schemes by integrating quantum cryptography becomes a much more attractive prospect since its technology does not rely on difficult mathematical problems such as factoring large integers or computing discrete logarithms. Thus, we propose a quantum extension of EAP-TLS that allows exchanging a cryptographic key and authenticating a remote client with unconditional security, ensured by the laws of quantum physics. PRISM tool is applied as a probabilistic model checker to verify specific security properties for the new scheme.
The expanded use of wireless networks has led to significant improvement in security approaches that aim to protect information. Providing secure communication for wireless local area network (WLAN) has become one of the prime concerns. The current standard for exchanging a secret key to authenticate users and ensure secure data transmission within EAP-TLS protocol relies on Public Key Infrastructure. This technique remains secure only in case of limited computational power of eavesdroppers. Thus, we propose a quantum extension of EAP-TLS which allows exchanging a cryptographic key and authenticating a remote client peer with absolute security, ensured by the laws of quantum laws.
Quantum Cryptography or Quantum Key Distribution (QKD) solves the key distribution problem by allowing the exchange of a cryptographic key between two remote parties with absolute security, guaranteed by the laws of quantum physics.Extensive studies have been undertaken on QKD since it was noted that quantum computers could break public key cryptosystems based on number theory.Actually, the progress of research in this field allows the implementation of QKD outside of laboratories.Efforts are made to exploit this technology in the existing communication networks and to improve the performance and reliability of the implemented technologies.Some research is in progress for the integration of QKD with the protocols in different layers of OSI model.The examples of such research effort are the integration of QKD in point-to-point protocol (PPP) OSI layer 2 and the integration of QKD with IPSEC at OSI layer-3.All these works are moving towards the utilization of QKD technology for enhancing the security of modern computing applications on the internet.In this paper, we present a novel extension of the TLS protocol based on QKD.We introduce a scheme for integrating Quantum Cryptography in this protocol.Our approach improves the security of the process of authentication and data encryption.Also, we describe an example to illustrate the feasibility of our scheme's implementation.
Extensive studies have been undertaken on quantum cryptography, which offers unconditionally secure communication based on quantum mechanics, since it was noted that quantum computers could break public key cryptosystems based on number theory. Now there is a strong need of research to exploit this technology in the existing communication networks. While the use of quantum cryptography in fiber optical networks gets significant advances, research on the application of quantum cryptography in mobile wireless network is still premature. There are a large variety of kinds of mobile wireless networks, Wi-Fi, based on the IEEE 802.11 standard, is wireless local area network and due to the limited coverage area, this environment potentially offers a chance to let quantum key distribution (QKD) play a role in the wireless communication. In this paper, we propose a technique of integrating quantum cryptography in 802.11 to provide a secure service of authentication. It is based on integrating QKD in the EAP-TLS conversation to enhance the security of the authentication process.
By relying upon the laws of quantum physics, quantum cryptography is reaching an extremely high level of security guarantee. It allows establishing a secret and perfectly random key material between two network nodes. It improves the contemporary cryptographic methods based only on computational security by integrating a quantum cryptographic solution. Since quantum technology becomes an attractive prospect, our overriding objective is to provide a quantum key agreement scheme that properly authenticates users in 802.11i networks. In this paper, we introduce a quantum scheme, for mutual authentication and key establishment for the integration within IEEE 802.11 networks towards absolute communication security. The key issued from the quantum algorithm authenticates the two endpoints and will be used for building the pairwise key and the group key hierarchies. To analyze the security of our approach, a formal verification of some security properties is performed using PRISM as a model checker tool.
In a security context, to render a cryptosystem more resistant against man-in-the-middle and impersonation attacks, an authentication mechanism has to be considered. CHAP protocol (Challenge Handshake Authentication Protocol) is among the most widely spread authentication technique used within Local Area Networks. To offer greater robustness and privacy, we intend through our present paper to introduce a new quantum extension of CHAP that integrates quantum cryptography and takes advantage of its benefits such as eavesdropping detection, random secret key generation and unconditional security. A new scheme using a previously shared entangled qubits pairs with quantum unitary operators to ensure key agreement and mutual authentication is performed. To analyze the security of the proposed protocol, we use the PRISM tool as a model checker. We particularly focus on the security property of minimizing the quantity of information about the key that an enemy can obtain from applying a “man in the middle” attack. If we act on the parameters of the channel and the eavesdropper, we prove that this security property is affected by varying the efficiency of the channel as well as the power of the enemy. More interestingly, we show that the enemy could never be able to retrieve the value of the key.
To cope with the unauthorized access to the cloud treasure of resources and services, several cloud service providers implement the API-based access control approach and grant thus a full authentication of any client application. Once called, each cloud API (Application Programming Interface) is required to authenticate through a secret access key, commonly termed API key. A plethora of security risks is associated with these keys whether during their generation, storage, or utilization. The hardware secure element-based proposal aims for an end-to-end security between a cloud service provider and a client application. To ensure a reliable and secure API key exchange, the concerned entities rely on Public Key Infrastructure (PKI). As soon as an adversary acquires an unbounded computing power, it would be easy to intercept the keys and then unlock the gate behind the valuables over the cloud. In this paper, we propose a revised scheme that discards the PKI and installs a quantum mechanism to mutually authenticate the secure element and the cloud service provider by establishing a set of shared keys. A pioneering absolute security of the presented approach is warranted by the principles of quantum physics. To analyze the security of the quantum technology, we establish a formal verification based on PRISM model checking tool. We outstandingly focus on satisfying two prominent properties: (i) both the parties engaged in the quantum protocol are able to detect any disallowed eavesdropping and (ii) the valid amount of information caught by an adversary on the installed key must be negligible.