Abstract: This study investigates how secure computation can remain trustworthy during the post-quantum transition, in which large-scale quantum computation threatens the public-key primitives used for key exchange, authentication, and software trust. The analysis treats quantum readiness as a systems property rather than a cryptographic substitution exercise. In practical deployments, cryptographic migrations change protocol sizes and performance characteristics, while cloud execution substrates introduce privileged attack surfaces that can expose data despite formally strong cryptography. A unified architecture is proposed that couples standardised post-quantum cryptography (PQC) for key establishment and digital signatures with confidential cloud execution (hardware-backed isolation and remote attestation) and with policy-grade auditability implemented via policy-as-code plus cryptographic provenance. The evaluation uses real, published parameter sizes from standardised PQC algorithms and real published performance measurements for trusted execution environments to quantify bandwidth overhead, handshake expansion, and the capacity impact of protected execution. The results show that PQC adoption can introduce substantial protocol-layer size expansion, with digital signature payloads frequently dominating bandwidth budgets relative to key encapsulation. Hybrid deployment profiles increase overhead further because classical and post-quantum materials are transmitted together, supporting staged rollouts with explicit deprecation timelines. Confidential computing reduces exposure to compromised hypervisors but imposes workload-sensitive overheads, motivating selective isolation of high-value computations combined with continuous, evidence-centric governance. Keywords post-quantum cryptography; confidential computing; trusted execution environments; policy-as-code; auditability; attestation; cryptographic agility; compliance; secure computation; zero trust.
Abstract: This study investigates how secure computation can remain trustworthy during the post-quantum transition, in which large-scale quantum computation threatens the public-key primitives used for key exchange, authentication, and software trust. The analysis treats quantum readiness as a systems property rather than a cryptographic substitution exercise. In practical deployments, cryptographic migrations change protocol sizes and performance characteristics, while cloud execution substrates introduce privileged attack surfaces that can expose data despite formally strong cryptography. A unified architecture is proposed that couples standardised post-quantum cryptography (PQC) for key establishment and digital signatures with confidential cloud execution (hardware-backed isolation and remote attestation) and with policy-grade auditability implemented via policy-as-code plus cryptographic provenance. The evaluation uses real, published parameter sizes from standardised PQC algorithms and real published performance measurements for trusted execution environments to quantify bandwidth overhead, handshake expansion, and the capacity impact of protected execution. The results show that PQC adoption can introduce substantial protocol-layer size expansion, with digital signature payloads frequently dominating bandwidth budgets relative to key encapsulation. Hybrid deployment profiles increase overhead further because classical and post-quantum materials are transmitted together, supporting staged rollouts with explicit deprecation timelines. Confidential computing reduces exposure to compromised hypervisors but imposes workload-sensitive overheads, motivating selective isolation of high-value computations combined with continuous, evidence-centric governance. Keywords post-quantum cryptography; confidential computing; trusted execution environments; policy-as-code; auditability; attestation; cryptographic agility; compliance; secure computation; zero trust.
The emergence of quantum computing poses a significant threat to the cryptographic foundations that secure modern cloud infrastructures. Existing deployments of Zero Trust Architecture (ZTA) are largely built on classical cryptographic techniques such as the RSA algorithm and elliptic curve cryptography, which are vulnerable to future quantum attacks. Moreover, current studies offer limited guidance on how PQC can be integrated into cloud-native Zero Trust environments while guaranteeing operational efficiency and addressing adaptive security needs. The present study introduces an Adaptive Post Quantum Zero Trust (Adaptive PQC-ZT) Framework by combining the NIST recommended post quantum cryptographic algorithms with a policy based Crypto-Agility Engine for algorithm dynamic selection based upon Security Sensitivity, Algorithm Characteristics, and Latency. The framework was evaluated using a publicly available PQC benchmark dataset containing 37,004 key encapsulation mechanism (KEM) records and 71,456 digital signature records. The analysis examined latency, communication overhead, security levels, and workload suitability for ML-KEM and ML-DSA algorithm families across representative cloud deployment scenarios. The results demonstrate that ML-KEM algorithms provide quantum-resistant key establishment with sub-millisecond latency, while ML-DSA algorithms significantly outperform SPHINCS+ variants in execution efficiency and communication overhead. The proposed Crypto-Agility Engine helps match cryptographic configuration with the needs of different workloads. This allows web applications to run with low latency, while also giving stronger protection to high-security systems such as financial databases. The proposed framework contributes a unified cloud-native security model that blends Zero Trust principles, post-quantum cryptography, benchmark-driven evaluation, and adaptive crypto-agility. This shows practical migration to quantum-safe cloud infrastructures can be done with manageable performance hits. Organizations get a solid path to boost their long-term defense against future quantum threats.
The rapid advancement of quantum computing threatens the security foundations of classical public-key cryptographic systems such as RSA and Elliptic Curve Cryptography (ECC), which underpin cloud and edge infrastructures. With scalable quantum algorithms capable of breaking widely deployed cryptographic primitives, organizations must transition toward quantum-resilient security models. This paper proposes a comprehensive Quantum-Resilient Cryptographic Architecture (QRCA) designed specifically for cloud and edge computing environments. The framework integrates post-quantum cryptographic (PQC) algorithms, hybrid key exchange protocols, zero-trust principles, and hardware-assisted secure enclaves. We present a layered security model that balances computational overhead, latency constraints, and scalability requirements in distributed systems. Experimental simulations evaluate performance metrics including encryption latency, key exchange overhead, and throughput across cloud data centres and edge nodes. Results indicate that hybrid PQC deployments achieve strong quantum resilience with manageable performance trade-offs. The proposed architecture offers a practical migration pathway for organizations seeking future-proof cryptographic security in distributed computing ecosystems.
The emergence of quantum computing is a serious threat to traditional cryptographic algorithms, making it critical to transition to post-quantum cryptography (PQC). This work proposes a holistic conceptual and analytical framework for deploying PQC in multi-cloud environments where the complexity of different infrastructure, workloads and key management schemes pose significant security and efficiency problems. The proposed framework for crypto-agility follows a layered approach, with a cryptographic abstraction layer, a policy-based orchestration engine, a centralized hardware security module (HSM) management plane, and an ongoing monitoring module to facilitate a smooth transition from classical to hybrid and fully quantum-resistant cryptographic systems. He researches identifies and critically analyzes major challenges in deploying PQC technologies in multi-cloud environments, such as inter-cloud interoperability, computational complexity, latency, key management, and regulatory and compliance considerations. The framework tackles these challenges by incorporating hybrid cryptographic protocols that blend classic cryptographic algorithms with NIST-approved PQC algorithms, namely ML-KEM (FIPS 203) and ML-DSA (FIPS 204), to maintain backward compatibility and increase security against quantum-powered adversaries. Moreover, the framework proposes dynamic policy-driven algorithm selection to implement context-sensitive cryptographic enforcement based on sensitivity labels, security threats, and regulatory considerations. An experimental framework is proposed to assess the efficiency and scalability of PQC algorithms deployed in a multi-cloud environment, including metrics such as CPU usage, memory usage, latency and throughput with different workloads. Although this research is conceptual, it draws on previous benchmarking to discuss the securityperformance trade-offs associated with PQC. The results highlight the need for centralized trust anchors, crypto-agility and hybrid deployment models to address risks from cryptographic diversity and ensure the sustainability of security operations. This study advances the research on quantum-safe cloud security by offering a systematic, scalable and policy-oriented framework for PQC deployment. It provides practical guidance for businesses, cloud architects, and security professionals on how to safeguard against quantum vulnerabilities and ensure efficient operations in distributed systems by implementing quantum-safe cryptographic infrastructures.
Introduction The rapid advancement of quantum computing presents an existential threat to the mathematical foundations of modern internet security. Fault-tolerant quantum computers are projected to reach the logical qubit scale necessary to execute Shor's algorithm by 2030–2035, threatening currently deployed public-key cryptography infrastructures. Methods We evaluate the performance metrics of integrating post-quantum cryptography (PQC), specifically the newly finalized NIST standards (FIPS 203, 204, and 205), with quantum key distribution (QKD) across communication networks. Results Our analysis demonstrates that while hybrid PQC-QKD models reduce long-term key compromise probabilities to near 0%, they introduce a 15% to 40% increase in bandwidth overhead during initial cryptographic handshakes. Discussion Given that enterprise-wide cryptographic migrations historically require 7–10 years, organizations face an immediate vulnerability window against “harvest now, decrypt later” adversaries. Ultimately, we propose a phased, cryptographically agile framework to achieve a Zero-Trust, Quantum-Safe network architecture within a 5-year implementation timeline.
The advent of quantum computing poses an existential threat to contemporary cryptographic standards, particularly those securing decentralized blockchain networks and cloud infrastructures.Classical public-key cryptosystems such as RSA, ECC, and DH, which rely on factorization and discrete logarithm problems, are rendered obsolete by Shor's algorithm, necessitating the transition toward post-quantum cryptographic (PQC) solutions.This study explores the integration of PQC algorithms, including lattice-based, hash-based, code-based, multivariate, and isogeny-based cryptographic mechanisms, within blockchain-ledger technologies and cloud architectures to ensure long-term security against quantum adversaries.A comparative analysis is conducted to evaluate computational efficiency, key size implications, communication overhead, and security resilience under quantum attack models.The research highlights the adaptation of PQC within blockchain consensus mechanisms, smart contract execution, and cryptographic primitives such as digital signatures, zero-knowledge proofs, and secure multi-party computation (MPC).Additionally, it examines the impact of PQC on cloud security, addressing challenges in quantum-safe key exchange protocols, homomorphic encryption for secure computations, and cross-platform interoperability within hybrid quantum-classical cloud ecosystems.Real-world implementations and benchmarking data provide insights into the feasibility of large-scale adoption, shedding light on standardization efforts by NIST and industry consortia.The study concludes with future directions, emphasizing the need for efficient PQC algorithm optimization, lightweight cryptographic frameworks for IoT-driven blockchain applications, and scalable post-quantum identity management systems.By establishing quantum-resistant security frameworks, this research underscores the imperative need for early adoption to mitigate cryptographic vulnerabilities in the impending post-quantum era.
Public key cryptography plays a pivotal role in maintaining digital security and privacy, with its foundations built on the hardness of certain mathematical problems. However, the emergence of quantum computing threatens the security of current cryptographic systems, making the adoption of post-quantum cryptography (PQC) an urgent necessity. Digital signature schemes are essential components in secure communications, providing authentication, non-repudiation, and data integrity. This paper examines the state of post-quantum digital signature schemes across various cryptographic approaches, including lattice-based, code-based, multivariate polynomial-based, hash-based, symmetric-key-based, and isogeny-based systems, alongside advancements in Multi-Party Computation in the Head (MPC-in-the-head) schemes. The paper then explores application-specific signatures such as blind, undeniable, threshold, chameleon, aggregate, and ring signatures, explaining their main use cases and the existing post-quantum cryptographic classifications that support these constructions individually. Software implementations of selected prominent PQC digital signature schemes were carried out, and their performance was systematically analysed using metrics such as bandwidth consumption, latency, and computational efficiency. These results provide key observations regarding the suitability of different schemes for both resource-constrained and high-performance environments. Subsequently, a detailed literature review of implementations on embedded and hardware platforms is presented, focusing on ARM-based devices and FPGA accelerators to evaluate deployment feasibility beyond general-purpose processors. Based on the software and implementation-level findings, a comparative analysis across software, embedded, and hardware platforms is conducted to highlight architectural influences on performance, scalability, and practicality. Furthermore the cryptanalytic attacks on post-quantum digital signature schemes across various PQC classifications are examined in this paper, taking into account both classical and quantum adversarial models. To evaluate realistic security constraints, implementation-oriented vulnerabilities such as side-channel and fault-based attacks are also examined. In addition, the applicability of post-quantum digital signature schemes within TLS, IoT, and related practical deployment scenarios is analysed. The study also discusses possible directions for further investigation, focusing on the requirement for effective and expandable PQC systems that can satisfy changing cybersecurity requirements. In order to protect sensitive data in the digital era, this study emphasizes the need for implementing quantum-secure systems by fusing theoretical understandings with real-world applications.