Attribute-based encryption is a valuable technique for ensuring data privacy and confidentiality in the realm of cloud computing. Using this cryptographic primitive, the data owner can securely store and share data within the cloud environment. On the other hand, in recent years, extensive advances have been made in quantum processors, which have raised hopes of solving certain mathematical problems includes factoring integers and computing discrete logarithms of large numbers. The advent of quantum computers has posed a significant security threat to existing cryptographic protocols. The existing post-quantum attribute-based encryption schemes have not satisfied the essential features such as verifiability, user privacy and user revocability, simultaneously. In this paper, we present the first secure, practical and post-quantum attribute-based encryption scheme based on rank metric codes. Our scheme enjoys all mentioned features due to utilization of low rank parity check codes. The proposed scheme provides security against chosen plaintext attacks in the standard model, as well as resistance against reaction attacks as a kind of chosen ciphertext attacks. Moreover, at the 256-bit security level, the key size is about 16.5 KB, with an execution time of around 31.2 ms on a desktop. Our implementation results confirm that the proposed scheme is more efficient than the existing post-quantum and classical schemes.
Attribute-based encryption is a valuable technique for ensuring data privacy and confidentiality in the realm of cloud computing. Using this cryptographic primitive, the data owner can securely store and share data within the cloud environment. On the other hand, in recent years, extensive advances have been made in quantum processors, which have raised hopes of solving certain mathematical problems includes factoring integers and computing discrete logarithms of large numbers. The advent of quantum computers has posed a significant security threat to existing cryptographic protocols. The existing post-quantum attribute-based encryption schemes have not satisfied the essential features such as verifiability, user privacy and user revocability, simultaneously. In this paper, we present the first secure, practical and post-quantum attribute-based encryption scheme based on rank metric codes. Our scheme enjoys all mentioned features due to utilization of low rank parity check codes. The proposed scheme provides security against chosen plaintext attacks in the standard model, as well as resistance against reaction attacks as a kind of chosen ciphertext attacks. Moreover, at the 256-bit security level, the key size is about 16.5 KB, with an execution time of around 31.2 ms on a desktop. Our implementation results confirm that the proposed scheme is more efficient than the existing post-quantum and classical schemes.
Attribute-based encryption (ABE) cryptography is widely known for its potential to solve the scalability issue of recent public key infrastructure (PKI). It provides a fine-grained access control system with high flexibility and efficiency by labeling the secret key and ciphertext with distinctive attributes. Due to its fine-grained features, the ABE scheme is a protection layer in securing users’ data and privacy in big data processing and analytics. However, quantum computing, new technology on the horizon that will transform the security and privacy environment, has begun to appear. Like the conventional ABE schemes, present cryptography is not excluded from the impacts of quantum technology as they are not made to be quantum-resistant. While most recent surveys generally touched on the generic features of attribute-based encryption schemes such as user revocation, scalability, flexibility, data confidentiality, and scope in pairing-based ABE schemes, this survey investigated quantum-resistant ABE schemes in securing big data. This survey reviews the challenges faced by the recent ABE cryptography in the post-quantum era and highlights its differences from the conventional pairing-based ABE schemes. Subsequently, we defined the criteria of an ideal quantum-resistant ABE scheme. Additionally, existing works on quantum-resistant ABE schemes are reviewed based on their algorithms design, security and functionalities. Lastly, we summarized quantum-resistant ABE schemes’ ongoing challenges and future works.
Abstract Code-based public key encryption (PKE) is a popular choice to achieve post-quantum security, partly due to its capability to achieve fast encryption/decryption. However, code-based PKE has larger ciphertext and public key sizes in comparison to conventional PKE schemes (e.g., those based on RSA). In 2018, Lau and Tan proposed a new rank metric code-based PKE scheme, which has smaller public key and ciphertext sizes compared to other code-based PKE schemes. They also proved that their scheme achieves IND-CPA security, assuming the intractability of the decisional rank syndrome decoding problem. It is known that IND-CCA2 security is the strongest and most popular security assurance for PKE schemes. Therefore, in this paper, we obtain a new code-based PKE scheme from Lau and Tan’s scheme, in order to inherit the underlying small public key and ciphertext sizes. However, our new scheme is shown to achieve IND-CCA2 security, instead of the weaker IND-CPA security. Specifically, the respective public key size and ciphertext size in our new scheme are 15.06 KB and 1.37 KB under 141-bit security level, and 16.76 KB and 1.76 KB under 154-bit security level. We then present a use case for the proposed scheme, that is for secure cloud storage.
The advent of quantum computing poses an existential threat to contemporary cryptographic standards, particularly those securing decentralized blockchain networks and cloud infrastructures.Classical public-key cryptosystems such as RSA, ECC, and DH, which rely on factorization and discrete logarithm problems, are rendered obsolete by Shor's algorithm, necessitating the transition toward post-quantum cryptographic (PQC) solutions.This study explores the integration of PQC algorithms, including lattice-based, hash-based, code-based, multivariate, and isogeny-based cryptographic mechanisms, within blockchain-ledger technologies and cloud architectures to ensure long-term security against quantum adversaries.A comparative analysis is conducted to evaluate computational efficiency, key size implications, communication overhead, and security resilience under quantum attack models.The research highlights the adaptation of PQC within blockchain consensus mechanisms, smart contract execution, and cryptographic primitives such as digital signatures, zero-knowledge proofs, and secure multi-party computation (MPC).Additionally, it examines the impact of PQC on cloud security, addressing challenges in quantum-safe key exchange protocols, homomorphic encryption for secure computations, and cross-platform interoperability within hybrid quantum-classical cloud ecosystems.Real-world implementations and benchmarking data provide insights into the feasibility of large-scale adoption, shedding light on standardization efforts by NIST and industry consortia.The study concludes with future directions, emphasizing the need for efficient PQC algorithm optimization, lightweight cryptographic frameworks for IoT-driven blockchain applications, and scalable post-quantum identity management systems.By establishing quantum-resistant security frameworks, this research underscores the imperative need for early adoption to mitigate cryptographic vulnerabilities in the impending post-quantum era.
As the internet becomes prevalent, plenty of sensitive data is being transferred in open networks environment. It is worth concerning how to achieve efficient data transfer in a privacy-preserving manner. Although attribute-based encryption (ABE) can achieve fine-grained access control over encrypted data, it still could not work for restricting unauthorised user to access. In this paper, we introduce a new cryptographic primitive called attribute-based encryption supporting data filtration (ABE-SDF), and formalise the security mode by incorporating the advantages into previous ABE. Finally, we present an efficient construction of the scheme over post-quantum assumptions our scheme is believed to be quantum-resistant owing to the special property of lattices. Based on the LWE assumption, we prove that the proposed scheme has the indistinguishability against selective chosen plaintext attacks and the authentication information security.
The rapid development of quantum computing presents a substantial threat to traditional cryptographic algorithms, particularly those relying on mathematical problems such as integer factorization and elliptic curve operations. As a response, the cryptographic community has accelerated the design of post-quantum cryptographic schemes that can withstand attacks from both classical and quantum computers. However, many of these new schemes exhibit inherent trade-offs between performance, key sizes, and implementation complexity. To address this, we propose a novel hybrid cryptographic framework tailored for secure and efficient data transmission in future quantum-aware environments. The proposed system combines three algorithmic paradigms: a lattice-based encryption method for fast and lightweight data protection, a hash-based signature mechanism for authenticity, and a code-based key exchange method to ensure session confidentiality. This layered integration is designed to capitalize on each algorithm’s strengths while mitigating individual limitations. The system is implemented using modular components in a testbed simulating real-world deployments, and its performance is benchmarked across multiple metrics including encryption latency, signature generation time, key sizes, and throughput. Comparative results indicate that the hybrid approach outperforms monolithic schemes in critical areas such as execution time and cryptographic strength under quantum adversary models. The findings support the practicality of using multiple post-quantum primitives in tandem to build robust communication systems. This research contributes a realistic implementation and evaluation of post-quantum security models and highlights key directions for future research and standardization efforts as the global transition to quantum-safe infrastructure begins.
Abstract As quantum computing matures, its ability to bypass traditional cryptographic standards such as RSA and ECC poses an existential threat to cloud security infrastructures. This paper provides a comprehensive assessment and comparison of emerging quantum-safe cryptographic protocols, including lattice-based, code-based, and multivariate cryptography, alongside physical-layer solutions like Quantum Key Distribution (QKD). We analyze the shift from classical security models to quantum-resistant frameworks, evaluating the trade-offs between computational efficiency, key management, and implementation scalability in multi-tenant cloud environments. Furthermore, we explore advanced protocols such as Quantum Secure Direct Communication, quantum coin tossing, and oblivious transfer, which offer novel methods for privacy-preserving computation. By addressing the current implementation challenges and the necessity for international standardization, this study outlines a strategic roadmap for integrating quantum-resilient mechanisms to ensure the long-term confidentiality and integrity of cloud-based data against both classical and quantum adversaries. Keywords: Quantum Computing, Post-Quantum Cryptography (PQC), Cloud Security 1.Introduction As quantum threats become more imminent, assessing and comparing quantum-based protocols is essential for strengthening cloud security frameworks. Potential quantum-enabled adversaries leveraging advanced computational capabilities to compromise sensitive information. Therefore, a thorough comparison of existing quantum-safe protocols, including lattice-based, code-based, and multivariate cryptography, is critical for determining the most effective strategies to secure cloud environments. potential quantum attacks by leveraging cryptographic methods that remain secure even in the presence of powerful quantum adversaries. 2.Quantum Computing Foundations Recent advancements in quantum computing have prompted researchers and organizations to reevaluate traditional cryptographic techniques within cloud security infrastructures. Cloud environments are particularly susceptible to attacks such as data breaches, insider threats, and man-in-the-middle intrusions due to their distributed and multi-tenant nature. As a result, integrating quantum-resistant algorithms and protocols is increasingly regarded as a necessary step to mitigate emerging vulnerabilities in cloud-based systems. This heightened vulnerability necessitates the exploration of robust quantum security protocols designed to mitigate risks unique to cloud-based systems. These protocols aim to safeguard data transmission and user authentication against adversaries equipped with quantum computing capabilities. Consequently, the development and adoption of quantum security measures is becoming an essential priority for maintaining the confidentiality and integrity of sensitive information in cloud environments. 3.Cloud Security Concepts and Vulnerabilities In addition to enhancing data confidentiality and authentication, these protocols also support advanced cryptographic operations such as oblivious transfer, paving the way for more secure and privacy-preserving cloud services. Furthermore, quantum security protocols facilitate new methods for secure computation and collaboration among distributed cloud users without exposing sensitive underlying data. As cloud services continue to evolve, integrating quantum security protocols is expected to become a foundational aspect of next-generation cloud infrastructure. 4.Overview of Quantum Security Protocols These advancements are particularly crucial as traditional cryptographic techniques face growing risks from quantum computing breakthroughs, necessitating proactive adaptation in cloud security frameworks. Quantum key distribution (QKD) is among the most prominent quantum security protocols, enabling the establishment of secure encryption keys between cloud entities using fundamental principles of quantum mechanics. This protocol ensures that any eavesdropping attempt can be detected due to the inherent properties of quantum measurements, thereby greatly enhancing cloud communication security. QKD has already seen early-stage experimental deployment in cloud environments, demonstrating potential for secure key exchange between data centers and distributed cloud nodes. As research progresses, QKD is being integrated with existing cloud infrastructure to explore scalable and efficient implementations that can accommodate the dynamic nature of cloud services. These integration efforts aim to address challenges such as network scalability, cost-efficiency, and interoperability with classical cryptographic systems. Additionally, ongoing studies focus on the seamless orchestration of QKD-enabled services with cloud management platforms to facilitate practical adoption. Furthermore, collaboration between academia and industry is accelerating the development of standardized QKD protocols and integration frameworks tailored for multi-tenant cloud environments. 5.Quantum Key Distribution in Cloud Environments Such standardization efforts are expected to promote widespread interoperability and lay the groundwork for commercially viable quantum-secured cloud services. These advancements contribute to a growing ecosystem where quantum-secured communication can become an integral part of mainstream cloud infrastructure. In parallel, research into Quantum Secure Direct Communication, quantum coin tossing, and other advanced quantum protocols is broadening the security landscape for cloud applications. Quantum Secure Direct Communication offers a method for transmitting confidential information directly over quantum channels without relying on shared encryption keys. This emerging technology is being explored for applications ranging from secure message delivery to safeguarding critical cloud operations against quantum attacks. As such, it holds promise for enabling real-time, tamper-resistant communication and may complement or even replace traditional secure key exchange mechanisms in certain cloud scenarios. Ongoing investigations also include quantum coin tossing and oblivious transfer, which aim to enable secure two-party computations and fair decision-making without trusting a single party. These protocols are progressively shaping the future of secure cloud services by addressing novel threats posed by quantum computing capabilities. 6.Quantum Secure Direct Communication This section delves deeper into the principles, implementation methods, and evolving use cases of quantum coin tossing and oblivious transfer within the context of quantum-secure cloud communication. Quantum coin tossing enables two remote parties to generate a random outcome in a way that neither can cheat or bias the result, even in the presence of advanced quantum adversaries. Oblivious transfer, on the other hand, allows a sender to transfer one of potentially many pieces of information to a receiver, where the sender remains oblivious to which piece was chosen, enhancing privacy in quantum-secure protocols. Together, these protocols form foundational building blocks for constructing more complex, privacy-preserving functionalities critical to secure quantum cloud environments. Their integration into cloud environments promises to strengthen the overall resilience of distributed computing architectures against both classical and quantum threats. As advances in quantum algorithms continue to threaten classical cryptographic schemes, there is growing urgency to explore and adopt post-quantum cryptography alternatives for securing cloud-based communications. These advances necessitate ongoing research and collaborative efforts to ensure robust, scalable, and future-proof security measures for cloud platforms in the quantum era. Adopting these novel protocols will require not only technological innovation but also the development of new standards, interoperability frameworks, and policy guidelines tailored to the evolving quantum landscape. Furthermore, educating stakeholders and fostering awareness about post-quantum security implications will play a crucial role in facilitating smooth adoption and compliance across industries. In addition, cross-disciplinary initiatives involving academia, industry, and government will be essential to accelerate the transition toward quantum-resilient cloud infrastructures. Such partnerships can drive the creation of shared testbeds, encourage best practices, and support continuous evaluation of emerging quantum security solutions. The synergy between these sectors is expected to enable more robust integration of quantum-safe mechanisms, ensuring that cloud services remain secure and adaptable as quantum technologies mature. 6.1.Quantum Coin Tossing and Oblivious Transfer Collaborative research efforts will also help identify gaps in current protocols and inspire innovative approaches to integrating quantum-resistant techniques within complex cloud environments. These collaborative initiatives will also facilitate the early adoption of post-quantum cryptographic alternatives, ensuring cloud infrastructures remain resilient against evolving threats. Furthermore, ongoing industry-academic-government collaborations will be crucial for standardizing post-quantum cryptography alternatives, promoting interoperability, and accelerating widespread deployment in the cloud. 7.Post-Quantum Cryptography Alternatives Such alternatives include lattice-based, hash-based, code-based, and multivariate schemes, each offering varying levels of security and implementation complexity suitable for diverse cloud applications. As cloud providers evaluate these schemes, considerations such as computational efficiency, scalability, and ease of integration will play a pivotal role in determining which alternatives are most viable for practical deployment. Additionally, practica