Recently, NIST released the quantum cryptography standard, which includes three new encryption algorithms capable of effectively resisting attacks from quantum computers. Experts predict that quantum computers with the ability to break current encryption methods may emerge within the next decade. In particular, the advent of Shor’s algorithm [1] has rendered public-key encryption systems based on factoring and discrete logarithm problems vulnerable. Therefore, the release of the PQC (Post-Quantum Cryptography) standard is especially timely and significant. NIST encourages system administrators to begin integrating these standards into their systems immediately to ensure future security.Among these three new encryption algorithms, SLH-DSA (derived from SPHINCS+ [2]) is a stateless hash-based digital signature scheme. This innovative scheme is designed to provide robust security while maintaining efficiency. In the SLH-DSA signature scheme, the One-Time Signature (OTS) serves as its fundamental building block. This means that improving the OTS directly enhances the overall performance of the SLH-DSA scheme.Hash-based signature schemes are generally constructed using OTS schemes. The underlying OTS scheme plays a crucial role in determining the key size and signature size of hash-based signature schemes. We propose a novel signature scheme that allows partial key reuse while maintaining a minimum quantum security level of 128 bits. Compared to the popular Winternitz OTS scheme [3] [4] [5], our proposed signature scheme demonstrates superior performance in terms of key and signature sizes for the same number of signatures, while still preserving post-quantum security.
Recently, NIST released the quantum cryptography standard, which includes three new encryption algorithms capable of effectively resisting attacks from quantum computers. Experts predict that quantum computers with the ability to break current encryption methods may emerge within the next decade. In particular, the advent of Shor’s algorithm [1] has rendered public-key encryption systems based on factoring and discrete logarithm problems vulnerable. Therefore, the release of the PQC (Post-Quantum Cryptography) standard is especially timely and significant. NIST encourages system administrators to begin integrating these standards into their systems immediately to ensure future security.Among these three new encryption algorithms, SLH-DSA (derived from SPHINCS+ [2]) is a stateless hash-based digital signature scheme. This innovative scheme is designed to provide robust security while maintaining efficiency. In the SLH-DSA signature scheme, the One-Time Signature (OTS) serves as its fundamental building block. This means that improving the OTS directly enhances the overall performance of the SLH-DSA scheme.Hash-based signature schemes are generally constructed using OTS schemes. The underlying OTS scheme plays a crucial role in determining the key size and signature size of hash-based signature schemes. We propose a novel signature scheme that allows partial key reuse while maintaining a minimum quantum security level of 128 bits. Compared to the popular Winternitz OTS scheme [3] [4] [5], our proposed signature scheme demonstrates superior performance in terms of key and signature sizes for the same number of signatures, while still preserving post-quantum security.
Modern public-key cryptography relies on the hardness of mathematical problems such as integer factorization and discrete logarithms. However, the development of quantum computing poses an imminent threat to these assumptions. Shor’s algorithm, in particular, can factor large semiprimes exponentially faster than classical algorithms, compromising systems like RSA, DSA, and ECC. This paper explores the mathematical foundations of pre-quantum cryptography, discusses the limitations of classical security models when confronted with quantum capabilities, and then pays attention to post-quantum cryptography (PQC), a field dedicated to developing cryptographic schemes resilient against both classical and quantum attacks. Among the proposed families, this paper focuses specifically on hash function–based cryptography for its simplicity and minimal reliance on algebraic structure. This study focuses in particular on SPHINCS+, a stateless hash-based digital signature scheme currently under consideration by NIST. Through detailed mathematical explanation and a visual example, we analyze its construction using Winternitz One-Time Signatures and Merkle trees. The results highlight SPHINCS+ as a robust candidate for post-quantum security due to its reliance on well-understood hash primitives and its resistance to known quantum algorithms such as Grover’s. Finally, this paper discusses ongoing challenges such as performance trade-offs, standardization, and real-world deployment. This research underscores the urgency of adopting quantum-resistant cryptographic systems before large-scale quantum computers become a reality.
The impressively fast development of quantum computing is a serious threat to classical public-key cryptography, and algorithms such as Shor's and Grover's will render RSA and elliptic curve systems essentially useless as soon as a cryptanalytically relevant quantum computer becomes available. Although it is still some way off before such machines are available, the harvest-now-encrypt-later threat highlights the need for proactive defense. In response, the National Institute of Standards and Technology (NIST) published the first post-quantum cryptography standards in 2024, including ML-KEM (Kyber) for key establishment, ML-DSA (Dilithium) for digital signatures and SLH-DSA (SPHINCS+) as a stateless hash-based alternative. This paper is a summary of the evolving post-quantum landscape, starting with the standards and their underlying security and then moving on to migration policies such as CNSA 2.0 and CISA, NSA and NIST guidance. It also looks at integration patterns for important protocols such as TLS, IPsec, SSH, and code signing. A performance, interoperability and overhead evaluation methodology is presented with results showing that hybrid deployment and crypto-agile architectures make PQC adoption a viable option. The paper concludes by providing a governance-oriented roadmap, where inventory, prioritization and pilot deployments are identified as near-term actions, with open questions remaining on performance optimization, implementation security and algorithm resilience over time.
Since the security of post-quantum cryptography (PQC) algorithms is based on the hardness of mathematical problems, while the security of quantum key distribution (QKD) relies on the fundamental principles of quantum physics, each approach possesses distinct advantages and limitations that can complement one another. Consequently, recent studies have proposed hybrid schemes that combine QKD and PQC to establish a dual-layered security model. In response to this trend, this study proposes hybrid schemes that integrate QKD with the National Institute of Standards and Technology (NIST) standardized PQC algorithms. These hybrid schemes include two core components: a hybrid QKD-PQC key exchange protocol and a hybrid QKD-PQC digital signature scheme. For the hybrid key exchange protocol, this study combines Module-Lattice-based Key Encapsulation Mechanisms (ML-KEM) with QKD protocols, specifically BB84 and E91, to construct a secure key exchange protocol. In the design of the hybrid digital signature scheme, this study utilizes Module-Lattice-based Digital Signature Algorithms (ML-DSA) and Stateless Hash-based Digital Signature Algorithms (SLH-DSA) to generate signature reconstruction values. These values are verified using confirmation codes transmitted via the BB84 and E91 protocols. The proposed hybrid key exchange protocol is evaluated by examining the shared secret key it produces, particularly with respect to entropy and whether the output is independent and identically distributed (IID). Furthermore, the computation time and message lengths of the proposed hybrid schemes are evaluated.
The rapid advancement of quantum computing poses a serious threat to classical digital signature algorithms such as RSA and ECDSA, which rely on mathematical problems vulnerable to quantum attacks. Hash-based digital signatures offer a strong post-quantum alternative due to their reliance on cryptographic hash functions and their resistance to both classical and quantum adversaries. This study evaluates the feasibility of hash-based signatures in lightweight and resource-constrained environments by implementing three representative schemes: Lamport One-Time Signatures (OTS), Winternitz One-Time Signatures (WOTS), and Merkle-WOTS. The analysis focuses on key performance factors relevant to constrained devices, including key size, signature size, signing time, and verification speed. Experimental results show that while Lamport OTS provides conceptual simplicity and WOTS offers improved efficiency, the Merkle-WOTS scheme delivers the most practical balance. It supports multiple signatures under a compact public key while maintaining moderate signature sizes and competitive performance. These findings indicate that Merkle-WOTS is a strong candidate for post-quantum authentication in IoT and other lightweight embedded systems.
Quantum computing represents one of the most disruptive technological advancements of the 21st century, with profound implications for modern cryptographic systems. Traditional digital signature algorithms—such as RSA, DSA, and Elliptic Curve Cryptography (ECC)—derive their security from mathematical problems like integer factorization and discrete logarithms, which are computationally infeasible for classical computers. However, the advent of quantum algorithms, particularly Shor’s and Grover’s algorithms, poses a direct threat to these cryptographic assumptions by drastically reducing the time required to solve such problems. This development renders existing Digital Signature infrastructures potentially obsolete once large-scale quantum computers become operational. To counter this threat, researchers have proposed a range of post-quantum cryptographic (PQC) algorithms, including lattice-based, hash-based, and multivariate polynomial-based signature schemes, which are designed to resist quantum attacks. This paper critically examines the extent of quantum vulnerability in current Digital Signature systems and evaluates the comparative performance, efficiency, and security trade-offs of post-quantum alternatives. The study aims to provide a structured understanding of the ongoing transition toward quantum-resistant digital authentication and to propose a roadmap for secure implementation in future cryptographic environments.
Abstract It is viewed as revolutionary technology, offering incredible potential in terms of computing power within different scientific and industrial sectors. Quantum computers provide remarkable computing power; however, they also present significant security risks to existing public-key cryptography systems used to secure digital communication, online banking systems, government, medical applications, cloud computing systems, and IoT systems. Security of commonly used encryption schemes like RSA, DH, and ECC depends on mathematical problems that are impossible for classical computers to solve but can be easily resolved with the help of powerful enough quantum computers by using Shor’s algorithm. Furthermore, Grover’s algorithm makes exhaustive search attacks much faster, thus effectively lowering the security level of symmetric encryption schemes since it provides the speed-up for brute-force attacks. Post-Quantum Cryptography (PQC) turned out to be an effective and scalable method to protect digital data from attacks using quantum computing. In contrast to quantum cryptography, which requires a special quantum communication channel, PQC uses classical cryptographic algorithms that cannot be broken down by either classical or quantum computer due to certain mathematical problems. This research paper offers an extensive exploration of post-quantum cryptography through the analysis of the development of quantum computing, weaknesses of current cryptographic techniques, and mathematics behind quantum-resistant algorithms. Moreover, this paper explores the major classes of PQC techniques such as lattice-based, code-based, hash-based, multivariate, and isogeny-based cryptography and provides details about their security and application. Moreover, the report gives an overview of the NIST Post-Quantum Cryptography Standardization Project and analyzes recent standardizations of quantum-proof algorithms to be utilized in future digital infrastructures. Keywords: Post-Quantum Encryption, Quantum Security, Quantum-Proof Public-Key Cryptography, Lattice-Based Security Protocols, ML-KEM Key Encapsulation Mechanism, ML-DSA Digital Signature Algorithm, NIST Post-Quantum Cryptography, Contemporary Cybersecurity, Secure Communications, Cryptographic Algorithms.