This record contains the full-text survey paper titled “A Survey on Hybrid Cryptographic Frameworks Combining Post-Quantum and Classical Techniques.” The paper systematically reviews hybrid cryptographic frameworks that combine classical public-key techniques with NIST-standardized post-quantum cryptographic primitives such as CRYSTALS-Kyber and Dilithium. It analyzes representative studies across secure communication protocols, blockchain systems, and performance benchmarking to evaluate security, efficiency, and deployment feasibility. The survey highlights hybrid cryptography as a practical migration strategy against the “Harvest Now, Decrypt Later” threat, discusses key trade-offs, and identifies open research challenges for real-world post-quantum adoption.
This record contains the full-text survey paper titled “A Survey on Hybrid Cryptographic Frameworks Combining Post-Quantum and Classical Techniques.” The paper systematically reviews hybrid cryptographic frameworks that combine classical public-key techniques with NIST-standardized post-quantum cryptographic primitives such as CRYSTALS-Kyber and Dilithium. It analyzes representative studies across secure communication protocols, blockchain systems, and performance benchmarking to evaluate security, efficiency, and deployment feasibility. The survey highlights hybrid cryptography as a practical migration strategy against the “Harvest Now, Decrypt Later” threat, discusses key trade-offs, and identifies open research challenges for real-world post-quantum adoption.
As the advent of quantum computing threatens traditional cryptographic protocols, hybrid classical-quantum secure communication infrastructures have emerged as a critical frontier in cybersecurity. This paper explores the integration of post-quantum cryptographic algorithms—specifically CRYSTALS-Kyber for key encapsulation and CRYSTALS-Dilithium for digital signatures—into hybrid communication architectures designed to resist quantum-level attacks. Leveraging lattice-based cryptographic primitives, both algorithms have been selected for standardization by NIST due to their robust security and performance characteristics. This study evaluates their implementation in real-world communication stacks, assesses latency and throughput under hybrid channel configurations, and proposes a layered security architecture combining classical and quantum-resilient mechanisms. Furthermore, it examines key management, digital trust, and infrastructure scalability in a post-quantum context. Simulation results and hardware-based validations are used to determine practical deployment feasibility in critical sectors such as finance, defense, and healthcare. The findings offer a comprehensive framework for securing data in transitional computing eras, ensuring forward secrecy, and maintaining operational integrity against future adversarial quantum threats.
The advent of quantum computing has precipitated an estimated attack resistant cryptography system necessitating quantum attacks. The classical asymmetric algorithms, i.e., RSA and ECC are susceptible to Shor algorithm and a transition should be made to Post-Quantum Cryptography (PQC) anymore. The novelty of this work lies in providing a unified comparative framework that analyzes PQC families through security assumptions, concrete key/ciphertext sizes, and implementation complexity an aspect not addressed collectively in prior surveys. This survey gives a general picture of the status of the design process and general evaluation of PQC accounting its application within the paradigm of the diversified networks including the IoT and 5G/6G and in the cyber-physical environment. Furthermore, this review uniquely synthesizes practical hybrid‑deployment strategies, including protocol layering, coexistence models, and backward‑compatibility mechanisms, offering actionable guidance for real‑world migration. Additionally, the manuscript contributes a prioritized list of open problems across IoT, 5G/6G, blockchain, and cyber‑physical systems, highlighting domains facing the most urgent quantum‑resilience challenges. In this paper, the authors will evaluate the most popular PQC schemes, including schemes based on lattice, code, hash, and isogeny, depending on their performance, scalability, and interoperability (with reference to the recent research). It also examines the problems of integration as implemented with respect to the computational overhead, latency and adoption of hybrid with classical cryptography. This is expounded more to the standardization of PQC by NISTs and with a focus on such algorithms as CRYSTALS-Kyber and Dilithium. The findings suggest that, hybrid PQC protocols are able to control quantum resistance and actual performance in numerous infrastructures in computing systems.
The emergence of quantum computing poses a fundamental threat to current public key cryptographic systems. This threat is necessitating a transition to quantum resistant cryptographic alternatives in all the applications. In this work, we present the implementation of a practical hybrid end-to-end encryption system that combines classical and post-quantum cryptographic primitives to achieve both security and efficiency. Our system employs CRYSTALS-Kyber, a NIST-standardized lattice-based key encapsulation mechanism, for quantum-safe key exchange, coupled with AES-256-GCM for efficient authenticated symmetric encryption and SHA-256 for deterministic key derivation. The architecture follows a zero-trust model where a relay server facilitates communication without accessing plaintext messages or cryptographic keys. All encryption and decryption operations occur exclusively at client endpoints. The system demonstrates that NIST standardized post-quantum cryptography can be effectively integrated into practical messaging systems with acceptable performance characteristics, offering protection against both classical and quantum adversaries. As our focus is on implementation rather than on novelty, we also provide an open-source implementation to facilitate reproducibility and further research in post quantum secure communication systems.
A sufficiently capable quantum computer would break the public-key cryptography that secures the modern internet, and data captured today can be stored until that machine arrives. This harvest-now-decrypt-later threat has pushed standards bodies to act well ahead of the hardware. In 2024 NIST published the first finished post-quantum standards: ML-KEM, derived from CRYSTALS-Kyber, for key establishment, and ML-DSA, derived from CRYSTALS-Dilithium, for digital signatures. This paper examines how these algorithms move into the two protocols that carry most secured traffic, TLS 1.3 and IPsec. We describe the hybrid handshake that runs a classical and a post-quantum key-encapsulation mechanism side by side, we measure the cost of the larger keys and signatures these schemes carry, and we discuss the practical friction points such as oversized certificate chains and fragmented handshake records. Benchmarks reported in the literature show that a hybrid X25519 plus Kyber-768 handshake adds only a small latency penalty on a healthy network, while Dilithium signatures inflate the certificate path enough to matter on constrained links. We close with a staged migration plan built around crypto-agility.
As quantum computing advances, modern cryptographic standards face an existential threat, necessitating a transition to post-quantum cryptography (PQC). The National Institute of Standards and Technology (NIST) has selected CRYSTALS-Kyber and CRYSTALS-Dilithium as standardized PQC algorithms for secure key exchange and digital signatures, respectively. This study conducts a comprehensive performance analysis of these algorithms by benchmarking execution times across cryptographic operations such as key generation, encapsulation, decapsulation, signing, and verification. Additionally, the impact of AVX2 optimizations is evaluated to assess hardware acceleration benefits. Our findings demonstrate that Kyber and Dilithium achieve efficient execution times, outperforming classical cryptographic schemes such as RSA and ECDSA at equivalent security levels. Beyond technical performance, the real-world deployment of PQC introduces challenges in telecommunications networks, where large-scale infrastructure upgrades, interoperability with legacy systems, and regulatory constraints must be addressed. This paper examines the feasibility of PQC adoption in telecom environments, highlighting key transition challenges, security risks, and implementation strategies. Through industry case studies, we illustrate how telecom operators are integrating PQC into 5G authentication, subscriber identity protection, and secure communications. Our analysis provides insights into the computational trade-offs, deployment considerations, and standardization efforts shaping the future of quantum-safe cryptographic infrastructure.