Public cloud computing provides a variety of services to consumers via high-speed internet. The consumer can access these services anytime and anywhere on a balanced service cost. Many traditional authentication protocols are proposed to secure public cloud computing. However, the rapid development of high-speed internet and organizations’ race to develop quantum computers is a nightmare for existing authentication schemes. These traditional authentication protocols are based on factorization or discrete logarithm problems. As a result, traditional authentication protocols are vulnerable in the quantum computing era. Therefore, in this article, we have proposed an authentication protocol based on the lattice technique for public cloud computing to resist quantum attacks and prevent all known traditional security attacks. The proposed lattice-based authentication protocol is provably secure under the Real-Or-Random (ROR) model. At the same time, the result obtained during the experiments proved that our protocol is lightweight compared to the existing lattice-based authentication protocols, as listed in the performance analysis section. The comparative analysis shows that the protocol is suitable for practical implementation in a quantum-based environment.
Public cloud computing provides a variety of services to consumers via high-speed internet. The consumer can access these services anytime and anywhere on a balanced service cost. Many traditional authentication protocols are proposed to secure public cloud computing. However, the rapid development of high-speed internet and organizations’ race to develop quantum computers is a nightmare for existing authentication schemes. These traditional authentication protocols are based on factorization or discrete logarithm problems. As a result, traditional authentication protocols are vulnerable in the quantum computing era. Therefore, in this article, we have proposed an authentication protocol based on the lattice technique for public cloud computing to resist quantum attacks and prevent all known traditional security attacks. The proposed lattice-based authentication protocol is provably secure under the Real-Or-Random (ROR) model. At the same time, the result obtained during the experiments proved that our protocol is lightweight compared to the existing lattice-based authentication protocols, as listed in the performance analysis section. The comparative analysis shows that the protocol is suitable for practical implementation in a quantum-based environment.
In emerging environments such as cloud computing and the Internet of Things (IoT), secure authentication and key negotiation play a crucial role in protecting data transmitted over public networks. However, many existing authentication protocols are still designed based on classical public-key cryptography primitives, and quantum computing may threaten their security. To address this challenge, we propose a post-quantum authentication and key agreement protocol that uses the lattice-based Kyber key encapsulation mechanism (KEM). Our proposed protocol integrates cryptographic authentication, smart card protection, and post-quantum key encapsulation mechanisms, enabling mutual authentication between users and servers and securely establishing session keys. The security of the protocol is formally analyzed in the Real-or-Random (ROR) model under the random oracle assumption and the IND-CCA security of the underlying KEM scheme. Furthermore, through informal security analysis, we have further demonstrated that the protocol possesses important security properties, including anonymity, untraceability, perfect forward confidentiality, and resistance to known attacks. In addition, the computational cost and communication overhead of the proposed scheme are evaluated and compared with several representative authentication protocols. The results show that the proposed protocol can provide strong security while maintaining low computational cost and communication overhead.
The rapid proliferation of IoT technology has brought billions of devices into play that need to operate in a variety of diverse, resource-constrained environments. Secure authentication among these devices is a critical challenge, as traditional certificate-based public key infrastructures incur heavy computation and management overhead. Moreover, recent breakthroughs in quantum computing put at risk the security of classical cryptographic algorithms commonly used in IoT systems. This paper proposes a post-quantum certificateless authentication framework designed to address the efficiency-long-term security requirements of IoT environments. The proposed framework uses lattice-based cryptography to resist quantum-enabled adversaries while eliminating the need for digital certificates. The certificateless approach evades the problem of key escrow of identity-based cryptography and simplifies the key management process. A lightweight authentication protocol, which is suitable for constrained IoT devices, is developed. Security analyses prove that our proposed framework resists common attacks such as impersonation, replay, and man-in-the-middle attacks. The performance evaluation shows that our proposed framework reduces the communication and computational overheads compared with the traditional certificatebased authentication schemes. In this way, it is appropriate for large-scale and futureproof deployments of IoT systems.
Edge computing has emerged as a distributed computing technology to mitigate the cloud computing overload caused by the rapid increase in connected devices. However, because communications between devices and edge servers are conducted over public channels, authentication and secure session key establishment are imperative to protect against various security attacks. In this paper, we show that Kenioua et al.’s authentication scheme for edge computing is vulnerable to several attacks such as impersonation, offline password guessing, and stolen verifier attacks, and also lacking quantum resistance against the emerging threat posed by quantum computing. To overcome these limitations, we propose a quantum-resistant authentication scheme by adopting module lattice-based key encapsulation mechanism (ML-KEM). We demonstrate the robustness of the proposed scheme through “the Burrows–Abadi–Needham (BAN) logic”, “Quantum Random Oracle Model (QROM)”, “Automated Validation of Internet Security Protocols and Application (AVISPA) tool”, and “Scyther tool”, and show that the proposed scheme achieves security with efficient communication and computation costs by comparing it with related studies.
The rise of cloud computing has transformed data storage and processing but introduced new vulnerabilities, especially with the impending threat of quantum computing. Traditional cryptographic methods, though currently effective, are at risk of being compromised by quantum attacks. This research aims to develop a quantum-resistant security framework for cloud environments, combining lattice-based cryptography with Quantum Key Distribution (QKD) protocols, particularly the E91 protocol, for secure key management. The framework also incorporates quantum authentication protocols to enhance user identity verification, protecting against unauthorized access and tampering. The proposed solution balances robust security with practical implementation, ensuring scalability and efficiency in real-world cloud environments. Performance evaluations indicate an encryption time of approximately 30 milliseconds, outperforming existing methods such as RSA and DES. This research contributes to the development of future-proof cryptographic standards, addressing both current security challenges and emerging quantum computing threats. By leveraging quantum mechanics, the framework strengthens cloud-based data protection, providing a resilient solution against evolving cyber risks. The results hold significant promise for advancing cloud security, laying the groundwork for next-generation encryption techniques that can withstand the threats posed by quantum computing.
The integration of Internet of Things (IoT) technology into transportation systems to enable real-time data collection and analysis helps to achieve increased efficiency and enhanced user experience. However, the IoT network faces significant cybersecurity challenges, especially with the advent of quantum computing, which poses a serious threat to classical security schemes. This paper proposes an authentication protocol for IoT-based transportation systems using CRYSTALS-Kyber, a lattice-based Post-Quantum Key Encapsulation Mechanism (PQKEM), and Quantum Random Number Generators (QRNGs) together with lightweight cryptographic operations. In contrast to the existing literature, the proposed protocol is lightweight and provides protection against conventional and quantum attacks while adhering to standards and ensuring interoperability with future systems. We provide a formal security proof of the proposed protocol using the Real-Or-Random (RoR) model and analyze its security under the Canetti-Krawczyk (CK) adversary model. The performance analysis shows that the protocol offers strong security and scalability with minimal computational overhead compared to existing schemes. Additionally, we assess the performance of the proposed protocol through simulations conducted with the NS3 simulator.
The proliferation of Unmanned Aerial Vehicle (UAV) networks and their numerous benefits in critical scenarios, UAV become crucial for Internet of Drones (IoD) operations. However, due to their communication methods, such as the micro-air-vehicle communication (MAVlink) protocol, wireless connections, and potentially insecure Internet channels, UAV networks are highly vulnerable to potentially lethal attacks. To overcome such issues, public key cryptographic techniques relying on integer factorization problem (IFP) and discrete logarithm problems (DLP) have been used form decades. However, with the significant advancements in quantum computing and adaptation of Shor's algorithm such cryptographic techniques based on IFP and DLP become insecure today and vulnerable to quantum attacks, which demand new ways of thinking about security. In this paper, we propose a quantum-secure access control protocol for UAV-based IoD applications, and its primary focus is on preserving user anonymity. A comprehensive security analysis validates the accuracy, security, and resilience against various active and passive attacks in both classical and quantum scenarios. A thorough formal security verification using the Scyther automated software validation tool to showcases the robustness of the proposed scheme. Furthermore, a real-time testbed experiment on Raspberry Pi 4 devices to assess the computational overhead of various cryptographic primitives demonstrates its practicality. Lastly, a detailed comparative performance evaluation, including authentication accuracy, performance under unknown attacks with existing related schemes illustrates its scalability and efficiency in real-world applications.