Ukrainian Scientific Journal of Information Security

SSL/TLS PROTOCOL ON POST-QUANTUM ALGORITHMS

Stanislav Milevskyi, Natalia Voropay, Olha Korol, Serhii Yevseiev, Iryna Aksonova

Published May 15, 2024• 0 citations

Abstract

The development of mobile technologies and their integration with Internet of Things and smart technologies form both cyber-physical and socio-cyber-physical systems. In such systems, as a rule, wireless communication channels are used, in which SSL/TLS protocols are used to provide security services (confidentiality, integrity and authenticity). However, this protocol is not only vulnerable to "Meeting in the Middle", POODLE, BEAST, CRIME, BREACH attacks, but with the advent of a full-scale quantum computer, it can be broken. The article proposes a protocol based on quantum algorithms – crypto-code constructions, which will ensure not only resistance to current attacks, but also stability in the post-quantum period. To ensure the "hybridity" of services, it is proposed to use McEliece and Niederreiter crypto-code constructions and the improved UMAC algorithm based on McEliece crypto-code design. The use of crypto-code constructions provides not only resistance to attacks, but also simplifies the formation of a connection – the parameters of elliptic curves are used for the transmission of the common key. This approach significantly reduces the time of connecting mobile gadgets and simplifies the procedure of agreement before data transfer.

DOI: 10.18372/2225-5036.30.18616

Related papers

Development of a protocol for a closed mobile internet channel based on post-quantum algorithms

Сергій Євсєєв, Сергій Сергійович Погасій, Vladyslav Khvostenko

The development of computing technologies has made it possible not only to expand the range of mobile communication services, but also to significantly increase computing capabilities. The emergence of mobile Internet, 4G, 5G technologies makes it possible to talk about a fundamentally different approach to ensuring the quality of service to network customers, creating fundamentally new approaches to ensuring the efficiency and reliability of transmitted information flows. However, such a rapid growth of GSM technologies without the introduction of security services leads to active actions of attackers and cyber terrorists, the emergence of new and modification of known threats. Mobile communication channels are used by cybercriminals for selfish purposes of access to database resources not only of the mobile Internet, but also to the databases of information and communication systems and networks. The article proposes a fundamentally new approach to ensuring the closure of the voice channel of the mobile Internet based on post-quantum cryptography algorithms – McEliece and Niederreiter crypto-code constructions on elliptic codes. This approach provides not only the offline mode of closing the voice channel and creating a VPN channel in tunnel mode, but also the required level of cryptographic strength in the face of the emergence of full-scale quantum computers.

Системи обробки інформаціїSep 24, 20214 citations

Development of a method for ensuring confidentiality and authenticity in wireless channels

Serhii Yevseiev, Roman Korolev, Mykhailo Koval +7 more

The object of the research is the development of a method for ensuring the authenticity and integrity of data in wireless channels based on post-quantum cryptosystems. The development of modern digital technologies ensures the transition to smart technologies and the formation of Next Generation Networks. The formation of smart technologies, as a rule, uses wireless communication channel standards IEEE 802.11X, IEEE 802.15.4, IEEE 802.16, which use only authentication protocols and privacy mechanisms, which are formed on symmetric algorithms. In the conditions of the post-quantum period (the advent of a full-scale quantum computer), the stability of such algorithms is questioned. Such systems, as a rule, are formed on the basis of the synthesis of socio-cyber-physical systems and cloud technologies, which simplifies the conduct of Advanced Persistent Threat attacks, both on the internal circuit of execution systems and on external control systems. The creation of multi-circuit information protection systems allows for an objective assessment of the current state of the system as a whole and the formation of preventive measures to counter cyber threats. The proposed method of providing basic security services: confidentiality, integrity and authenticity based on crypto-code constructions takes into account the level of secrecy of information transmitted over wireless channels and/or stored in databases of socio-cyber-physical systems. The use of post-quantum algorithms – McEliece/Niederreiter crypto-code constructions on elliptic/modified elliptic/lossy/Low-density parity-check code provides the necessary level of stability in the post-quantum cryptoperiod (crypto-stability at the level of 1025–1035 group operations), speed and probability of information (Рerr not lower than 10-9–10-12). The proposed method of information exchange using wireless communication channels ensures their practical implementation on resource-limited devices (creating of CCC on the GF field (24–26).

Eastern-European Journal of Enterprise TechnologiesDec 30, 20221 citation

Post-Quantum Secure UE-to-UE Communications

Sanzida Hoque, Abdullah Aydeger, Engin Zeydan

The rapid development of quantum computing poses a significant threat to the security of current cryptographic systems, including those used in User Equipment (UE) for mobile communications. Conventional cryptographic algorithms such as Rivest–Shamir–Adleman (RSA) and Elliptic curve cryptography (ECC) are vulnerable to quantum computing attacks, which could jeopardize the confidentiality, integrity, and availability of sensitive data transmitted by UEs. This demo paper proposes the integration of Post-Quantum Cryptography (PQC) in TLS for UE Communication to mitigate the risks of quantum attacks. We present our setup and explain each of the components used. We also provide the entire workflow of the demo for other researchers to replicate the same setup. By addressing the implementation of PQC within a 5G network to secure UE-to-UE communication, this research aims to pave the way for developing quantum-resistant mobile devices and securing the future of wireless communications.

arXiv:2408.11117International Conference on the Network of the Future (NOF)Oct 2, 202412 citations

265Chapter 11 Post-quantum Cryptography for Enhanced Authentication in Mobile Data Communication: Resilience Against Quantum Attacks

J. Angel Ida Chellam, R. Kowsalya, R Ramya. +1 more

The advent of quantum computing threatens to undermine current encryption methods significantly, especially those employed in mobile data transmission networks. Quantum algorithms can solve the computational challenges behind present public-key encryption methods like RSA (Rivest-Shamir-Adleman) and elliptic curve cryptography at a speedy rate. With mobile communication networks handling more and more sensitive information, the availability of secure authentication methods is increasingly important. This project proposes to investigate how mobile data communication systems can leverage post-quantum cryptographic (PQC) techniques to enhance authentication protocols. The research compares some NIST-standardized post-quantum cryptography candidates, i.e., lattice-based, code-based, hash-based, and multivariate polynomial cryptography, focusing on their usage in mobile environments. We establish a guideline for constructing PQC-improved authentication protocols, focusing on their quantum-resistance, computational cost, and appropriateness for resource-constrained mobile devices. Our analysis proves that the regulations successfully protect information’s secrecy, integrity, and authenticity in the post-quantum era. This has led to the development of future-proof, safe, and resilient mobile communication networks. PQC augmented authentication systems offer good resistance against quantum attacks while supporting acceptable performance on mobile devices, as evidenced by previous research. Mobile communication systems can achieve long-term security through PQC, thus safeguarding user data and critical infrastructure against potential adversaries that might employ quantum computing in the future.

De Gruyter eBooksJul 30, 20250 citations

Quantum-resistant SSL/TLS: Preparing for Post-quantum Cryptography

Robert Tuhaise, Oscar Correia, Joseph Ocaya +2 more

The rise of quantum computing presents a significant threat to current cryptographic protocols, including SSL/TLS, which are fundamental to secure communication over the internet. This paper provides a comprehensive review of quantum-resistant SSL/TLS implementations to address the looming risks posed by quantum attacks. Using the PRISMA methodology, 766 articles were screened, with 27 meeting the inclusion criteria for in-depth analysis. The study evaluates the design, testing, and validation processes of quantum-resistant algorithms such as SPHINCS+, CRYSTALS-Kyber, and Dilithium, emphasising their integration into TLS 1.3. Key findings highlight advancements in algorithmic choices, protocol modifications, and security assurances while addressing challenges like computational overhead and compatibility issues. By offering a thorough assessment of current developments, this paper aims to guide future research and practical deployment of quantum-resistant cryptography to safeguard digital communications in the post-quantum era

East African Journal of Information TechnologyJul 22, 20250 citations

RATIONALE FOR IMPROVING AUTHENTICATION PROTOCOLS IN THE CONDITIONS OF POST-QUANTUM CRYPTOGRAPHY

Alla Havrylova, Iryna Aksonova, Yuliia Khokhlachova +2 more

The paper studies the relevance of the issues of encrypting confidential data for their transmission over unsecured channels of information and communication networks. An analysis of encrypted information exchange on the Internet based on the Google service was carried out in terms of the volume of encrypted web traffic. It is concluded that the difference in traffic volumes between countries is due to the popularity of the types of devices used, the geographic access infrastructure, as well as the availability of software that provides modern types of encryptions. The role of the HTTPS protocol in ensuring the security of working with resources on the Internet is substantiated. The NIST security requirements for modern information and communication systems in the post-quantum period are analyzed. It is determined that within a short period of time the power of computing devices increases exponentially, which entails an increase in the implementation of both already known and new attacks on cryptographic algorithms that ensure the strength of security services in networks. Based on the results of this study, the results of a comparative analysis of the complexity of classical and quantum algorithms were demonstrated. The classification of special attacks was considered according to the signs of influence on computing processes, according to access to systems and means, as well as according to the specifics of the attacks themselves. Solutions submitted for participation in the NIST competition for the definition of security standards through electronic digital signature mechanisms, encryption algorithms and key encapsulation are analyzed. The results of the analysis are presented in the form of a scheme of security and stability of the proposed protocols and algorithms. It is recommended to use TLS protocols to ensure the integrity and authenticity of users when establishing communication sessions with websites. A scheme of the process of authenticated encryption and authentication of an encrypted message transmitted over a TLS connection has been developed. A process scheme has been developed for authentication encryption and decryption of information when establishing a communication session in TLS protocols. A comparative analysis of the characteristics of the TLS 1.3 and TLS 1.2 protocols was carried out.

Ukrainian Scientific Journal of Information SecurityMay 15, 20241 citation