Trustworthiness, privacy and resilience are expected to be essential requirements of 6G on top of various other conventional performance requirements such as data rate and latency. Primary authentication is a key procedure for initiating secure communication between User Equipment (UE) and Home Network (HN) in 3rd Generation Partnership Project (3GPP). However, primary authentication mechanisms used in 5G are vulnerable against quantum machines, replay attacks, and rouge base-station. To protect against these threats, we propose beyond 5G and 6G primary authentication methods to adapt hybrid mechanisms which combines Post Quantum Cryptography (PQC) and existing asymmetric algorithm with Perfect Forward Secrecy (PFS) guarantee. We evaluate proposed methods using our in-house developed Simulator “WirelessPQCSim.” Our proposed Hybrid mechanisms provide enhanced security without additional CPU overhead with respect to exiting 5G system. We also achieved up to 6.7x speed-up for PQC-based methods with respect to 5G system and provide low latency which is one of the KPI for 6G system.
Trustworthiness, privacy and resilience are expected to be essential requirements of 6G on top of various other conventional performance requirements such as data rate and latency. Primary authentication is a key procedure for initiating secure communication between User Equipment (UE) and Home Network (HN) in 3rd Generation Partnership Project (3GPP). However, primary authentication mechanisms used in 5G are vulnerable against quantum machines, replay attacks, and rouge base-station. To protect against these threats, we propose beyond 5G and 6G primary authentication methods to adapt hybrid mechanisms which combines Post Quantum Cryptography (PQC) and existing asymmetric algorithm with Perfect Forward Secrecy (PFS) guarantee. We evaluate proposed methods using our in-house developed Simulator “WirelessPQCSim.” Our proposed Hybrid mechanisms provide enhanced security without additional CPU overhead with respect to exiting 5G system. We also achieved up to 6.7x speed-up for PQC-based methods with respect to 5G system and provide low latency which is one of the KPI for 6G system.
5G serves as a catalyst for transformative digital innovation by enabling convergence with various services in our daily lives. The success of this paradigm shift undeniably hinges on robust security measures, with primary authentication— securing access to the 5G network—being paramount. Two protocols, 5G Authentication and Key Agreement (5G-AKA) and the Extensible Authentication Protocol for Authentication and Key Agreement Prime (EAP-AKA’), have been standardized for this purpose, with the former designed for 3rd Generation Partnership Project (3GPP) devices and the latter for non-3GPP devices. However, recent studies have exposed vulnerabilities in the 5G-AKA protocol, rendering it susceptible to security breaches, including linkability attacks. Furthermore, the advent of quantum computing poses significant quantum threats, underscoring the urgent need for the adoption of quantum-resistant cryptographic mechanisms. Although post-quantum cryptography (PQC) is being standardized, the lack of real-world deployment limits its proven robustness. In contrast, conventional cryptographic schemes have demonstrated reliability over decades of practical application. To address this gap, the Internet Engineering Task Force (IETF) has initiated the standardization of hybrid PQC algorithms (HPQC), combining classical and quantum-resistant techniques. Consequently, ensuring forward secrecy and resilience to quantum threats in the 5G-AKA protocol is critical. To address these security challenges, we propose the 5G-AKA-HPQC protocol. Our protocol is designed to maintain compatibility with existing standards while enhancing security by combining keys negotiated via the Elliptic Curve Integrated Encryption Scheme (ECIES) with those derived from a PQC-Key Encapsulation Mechanism (KEM). To rigorously and comprehensively validate the security of 5G-AKA-HPQC, we employ formal verification tools such as SVO Logic and ProVerif. The results confirm the protocol’s security and correctness. Furthermore, performance evaluations highlight the computational and communication overheads inherent to 5G-AKA-HPQC. With only average of 56.5 millisecond(+112.32%) on a total authentication time, proposed protocol provides its advantages. Also, on a environment of multiple UE registration, compared to single UE registration, the difference of increased rate of average authentication time is only 0.01%. The negligible difference 0.01% indicates that the addition of PQC does not lead to increased overhead in multi-UE registration environments, demonstrating its scalability and practical feasibility. In conclusion, our research provides significant insights into the design of secure, quantum-safe authentication protocols and lays the groundwork for the future standardization of secure authentication and key agreement protocols for mobile telecommunications.
The evolution of 6G networks necessitates robust authentication and key agreement (AKA) protocols to counter emerging security challenges, particularly the threat posed by quantum computing. Existing 5G-AKA protocols remain vulnerable to user tracking, replay attacks, and false base station impersonation, while Elliptic Curve Cryptography (ECC) and RSA-based key exchanges face imminent obsolescence due to quantum attacks. This study examines the vulnerabilities of 5G-AKA and explores hybrid post-quantum cryptography (PQC) as a transitional security solution for 6G networks. We evaluate NIST-standardized PQC algorithms, focusing on their computational overhead, key size efficiency, and adaptability to heterogeneous network environments, including IoT and ultra-low latency applications. A comparative analysis of hybrid cryptographic schemes demonstrates that lattice-based (Kyber, Dilithium), hash-based (SPHINCS+), and code-based (BIKE, Classic McEliece) PQC techniques provide varying trade-offs between security, efficiency, and deployment feasibility. Furthermore, we propose a quantum-resistant 6G-AKA framework, integrating hybrid PQC, AI-driven trust mechanisms, and decentralized authentication to ensure scalability and interoperability. Experimental benchmarks highlight potential performance constraints, including latency in PQC-based key exchange and resource limitations in edge computing. Addressing these challenges requires the optimization of lightweight PQC implementations, formal security validation, and global standardization efforts. Our findings provide a roadmap for the secure transition to 6G authentication protocols, ensuring resilience against both classical and quantum threats.
Mobile communication networks are becoming more ubiquitous than ever and are rapidly evolving with increasing adoption beyond traditional services such as voice and data. With 5G and emerging 6G standards, wireless communication networks are expected to play a critical role in various domains including AI-enabled services, robotics, industrial automation, and human critical services. In this context, ensuring the security of mobile networks through a security-first design approach is paramount. Current classical cryptosystems in communication networks rely on asymmetric key cryptography, which is vulnerable to attacks by adversaries equipped with quantum computing capabilities. To address this, solutions such as Post-Quantum Cryptography (PQC) algorithms standardized by National Institute of Standards and Technology (NIST) and hybrid approaches combining traditional and PQC algorithms have been proposed. The integration of these solutions into future communication systems such as advanced 5G and 6G is crucial to safeguard against quantum threats. Let’s explore how such an integrated network architecture can be envisioned, the impact on various 3GPP (3rdGeneration Partnership Project) procedures that currently use asymmetric cryptography, the transition from hybrid to standalone approaches to replace them, and the key challenges and considerations that must be addressed during this adoption process.
The rapid evolution of 5G and emerging 6G telecom networks introduces new security challenges due to the potential threat posed by quantum computing to conventional cryptographic algorithms. This study proposes a post-quantum cryptographic framework for protecting critical 5G and 6G telecom infrastructure against quantum-enabled attacks. The framework investigates quantum-resistant cryptographic mechanisms for secure key establishment, authentication, data confidentiality, and communication integrity. Performance is evaluated using key size, encryption and decryption time, computational overhead, latency, and throughput. The proposed approach aims to achieve a balance between quantum resistance and network efficiency, providing a scalable and resilient security solution for next-generation wireless communication environments.
The emergence of quantum computing is expected to break many conventional cryptographic algorithms currently used for authentication and secure communication. Existing security mechanisms in Next Generation Networks (NGNs), including 5G, IoT, smart healthcare, and cloud-based systems, are increasingly vulnerable to future quantum attacks. This research presents a lightweight and efficient Post-Quantum Cryptography (PQC) based authentication framework specifically designed for next generation network environments. The proposed framework combines quantum-resistant cryptographic techniques with optimized authentication procedures to provide secure identity verification, confidential communication, and attack resistance with minimal computational complexity. The model emphasizes reduced overhead, faster authentication response, and scalability for resource-constrained devices. Security analysis shows that the framework can effectively defend against replay attacks, impersonation attacks, session hijacking, and quantum-based cryptanalytic threats. Experimental evaluation indicates that the proposed approach achieves improved security performance while maintaining low latency and reduced resource consumption, making it suitable for practical deployment in future intelligent communication networks.
The advent of quantum computing threatens the security of classical public-key cryptographic systems, prompting the transition to post-quantum cryptography (PQC). While PQC has been analyzed in theory, its performance in practical wireless communication environments remains underexplored. This paper presents a detailed implementation and performance evaluation of NIST-selected PQC algorithms in user equipment (UE) to UE communications over 5G networks. Using a full 5G emulation stack (Open5GS and UERANSIM) and PQC-enabled TLS 1.3 via BoringSSL and liboqs, we examine key encapsulation mechanisms and digital signature schemes across realistic network conditions. We evaluate performance based on handshake latency, CPU and memory usage, bandwidth, and retransmission rates, under varying cryptographic configurations and client loads. Our findings show that ML-KEM with ML-DSA offers the best efficiency for latency-sensitive applications, while SPHINCS+ and HQC combinations incur higher computational and transmission overheads, making them unsuitable for security-critical but time-sensitive 5G scenarios.