The evolving potential disaster of quantum computing against the classical cryptographic methods requires the invention of immune post-quantum cryptographic (PQC) systems to cloud based key management system (CKMS). The proposed solution throughout this paper is considering the risk of existing public-key infrastructures when used in a cloud computing setup by incorporating lattice based post-quantum techniques i.e CRYSTALS-Kyber and CRYSTALS-Dilithium into cloud key management system structures. We came up with a prototype and simulated a hybrid CKMS structure encompassing classical and PQC protocols to secure backward contact and forward confidentiality. Benchmarking provides evidence that the PQC-enhanced CKMS registers 98.7 percent decrease of vulnerability to quantum attack vectors; its key generation time credit stays at 1.24 ms, and time to distribute keys at 5.6 ms, which is equivalent to RSA-2048 based systems. Comparative analysis provided an increase in computational efficiency by 34 percent and a decrease of bandwidth overhead by 22 percent using batch key encapsulation optimization. We have found that the given architecture does not only maintain the scalability of cloud environments but also implements long-term cryptographic resilience. The results show the feasibility and the strength of PQC on the integration into the existing cloud key management infrastructures.
The evolving potential disaster of quantum computing against the classical cryptographic methods requires the invention of immune post-quantum cryptographic (PQC) systems to cloud based key management system (CKMS). The proposed solution throughout this paper is considering the risk of existing public-key infrastructures when used in a cloud computing setup by incorporating lattice based post-quantum techniques i.e CRYSTALS-Kyber and CRYSTALS-Dilithium into cloud key management system structures. We came up with a prototype and simulated a hybrid CKMS structure encompassing classical and PQC protocols to secure backward contact and forward confidentiality. Benchmarking provides evidence that the PQC-enhanced CKMS registers 98.7 percent decrease of vulnerability to quantum attack vectors; its key generation time credit stays at 1.24 ms, and time to distribute keys at 5.6 ms, which is equivalent to RSA-2048 based systems. Comparative analysis provided an increase in computational efficiency by 34 percent and a decrease of bandwidth overhead by 22 percent using batch key encapsulation optimization. We have found that the given architecture does not only maintain the scalability of cloud environments but also implements long-term cryptographic resilience. The results show the feasibility and the strength of PQC on the integration into the existing cloud key management infrastructures.
The move toward cloud-provided-software-as-a-service (SaaS) key management systems (KMS) introduces new, pressing security threats of quantum computing.The novelty of this work is to hybrid combine CRYSTALS-Kyber, NIST standardised, and Dilithium algorithm both for key encapsulation and digital signature that offer a scalable quantum-resilient KMS as a SaaS in a pragmatic scenario.Major contributions include a real-world deployment architecture, describing REST API workflows for on-they-fly key generation and validation, carrying out performance comparison with classical KMS benchmarks showing security improvements and future-proofing of data protection.These systems rely primarily on traditional public-key cryptography, which is susceptible to attacks by large quantum computers.This poses an immediate security threat, particularly in the context of long-term data confidentiality, to which "Harvest Now, Decrypt Later" (HNDL) attacks are a prevalent threat.To mitigate this issue, we propose a practical and secure KMS architecture for quantum era that is provided as SaaS.We propose the use of standard post-quantum cryptography (PQC) using the NIST-approved CRYSTALS suite.It uses a hybrid cryptographic approach to deliver optimal performance and security.It generates AES-256 symmetric keys on-the-fly using a secured REST API.Then the keys are encapsulated with CRYSTALS-Kyber for post-quantum secret protection.For guarantees on integrity and authenticity, operations are digitally signed with CRYSTALS-Dilithium.The encapsulated keys and their associated signatures are secure in the cloud -which only you can access -via a unique identifier alongside robust OAuth2-based sign-ins.By integrating these PQC ingredients into an existing SaaS KMS blueprint, this study provides a gentle learning curve to organizations.It preserves simple and scalable use of modern cloud services while making sure that cryptographic key management is sufficiently secure against emerging threats such as those from quantum computing.This method is critically important, a practical means of maintaining long-term trust and protecting data.
The advent of quantum computing poses a significant threat to classical cryptographic algorithms that underpin security in cloud-based financial technologies (Fintech). As quantum computers gain computational superiority, traditional encryption schemes such as RSA and ECC are becoming increasingly vulnerable to quantum attacks, necessitating a paradigm shift toward quantum-resistant cryptography. This study investigates the integration of post-quantum cryptographic (PQC) frameworks within cloud-based Fintech architectures to ensure data confidentiality, transaction integrity, and regulatory compliance in a post-quantum era. The research evaluates lattice-based, hash-based, and multivariate polynomial cryptosystems in terms of performance efficiency, scalability, and interoperability with existing cloud infrastructures. Using simulated Fintech transaction datasets, the study benchmarks cryptographic resilience and latency overheads in multi-cloud environments. The findings highlight that lattice-based schemes, particularly CRYSTALS-Kyber and Dilithium, offer a promising balance between computational feasibility and robust security against quantum adversaries. The paper concludes with recommendations for hybrid encryption deployment strategies and policy-level frameworks to facilitate the transition to quantum-resistant Fintech ecosystems.
Quantum computing poses a critical threat to existing cryptographic primitives, rendering current access control mechanisms in cloud-native infrastructures vulnerable to compromise. This paper introduces a comprehensive quantum-resilient access control framework specifically engineered for distributed, containerized, and zero-trust environments. The proposed system integrates post-quantum cryptographic (PQC) primitives—specifically lattice-based key encapsulation (Kyber) and digital signatures (Dilithium)—with a hybrid key exchange protocol to maintain crypto-agility and backward compatibility. We design a secure token issuance and verification process employing PQC-based authentication, ensuring resistance to both classical and quantum adversaries. A prototype implementation demonstrates that our hybrid PQC approach incurs a moderate computational overhead of approximately 10–30\% while preserving horizontal scalability and interoperability across Kubernetes clusters. Security analysis under the post-quantum adversary model confirms resistance to key compromise, replay, and forgery attacks. The results highlight that quantum-resilient access control protocols can be efficiently integrated into modern cloud infrastructures without sacrificing scalability, performance, or operational flexibility.
Cloud computing systems face serious security risks that are intensified by advances in quantum computing because powerful quantum algorithms such as Shor's algorithm can break widely used public-key schemes which include RSA and ECC. The cloud environment needs Post-Quantum Cryptography (PQC) and Quantum Key Distribution (QKD) as countermeasures but their individual deployment creates problems because scalability and infrastructure requirements become obstacles for multi-tenant systems. This research proposes a hybrid security architecture that uses both hardware-based QKD for symmetric key generation over optical fibers and PQC for authentication through quantum-resistant key encapsulation using CRYSTALS-Kyber and digital signatures with CRYSTALS-Dilithium. The hybrid design uses XOR to combine the QKD-generated secret with the PQC-derived key material which creates the final session key yet security remains intact if either component gets compromised. The system tested on a private cloud testbed with 10 virtual machines and a 50 km commercial QKD link through optical fiber measured performance against Classical TLS 1.3 and PQC-TLS and QKD-only configurations. The results showed that QKD-only achieved the lowest handshake latency of 5.2 ms while the hybrid approach delivered the strongest security through a 19.8 ms overhead which was only 1.7 ms slower than pure PQC. After creating the secure channel all systems achieved similar data throughput of about 942 Mbps which shows that quantum-security mechanisms affect the connection setup phase instead of persistent data transfer.
The high growth rate of cloud storage companies has reshaped the digital management of data among individuals and companies. Nevertheless, the future of quantum computing spells a major danger to classical cryptographic algorithms like the RSA and the ECC which forms the backbone to the current cloud security infrastructures. In order to mitigate this new risk, this paper will present a new Post-Quantum Cryptography (PQC)-based security architecture, customized to cloud storage application. The model combines lattice-based key encapsulation models and hash-based authentication models to provide long-term data confidentiality, integrity, and non-repudiation. The basic uniqueness of the offered model is its hybrid cryptographic implementation, which will have quantum-resilient key exchange, and a hardened hash-based signature verification as a single workflow of cloud security. This assimilation improves resistance to quantum-based attacks and retains viable computational efficiency. The evaluation of performance shows that the framework can be used in large-scale and distributed cloud systems since it has a well-balanced trade-off between high quantum resilience and controllable processing overheads. The suggested PQC scheme will create moderate overhead and high future-proof security, in comparison to the traditional crypto-systems. The paper portrays the strategic value of shifting towards quantum-resistant encryption systems to guarantee long-term data security in the post-quantum future.
The rapid advancement of quantum computing introduces unprecedented security threats to modern cloud and edge computing infrastructures. Classical public-key cryptographic algorithms such as RSA, Diffie–Hellman, and Elliptic Curve Cryptography (ECC) are fundamentally vulnerable to quantum attacks enabled by Shor’s algorithm. As a result, the confidentiality, integrity, and authenticity of data stored and processed in distributed systems are at serious risk.Post-quantum cryptography (PQC) aims to develop cryptographic algorithms that are resistant to both classical and quantum adversaries. This paper presents a comprehensive quantum-resilient cryptographic framework designed specifically for post-quantum cloud and edge computing environments. The framework integrates post-quantum cryptographic primitives, hybrid cryptographic approaches, crypto-agile architectures, and secure key management mechanisms. The proposed framework addresses performance constraints, scalability requirements, and deployment challenges in heterogeneous environments. A detailed discussion of security threats, architectural components, performance considerations, and future research directions is provided. The proposed approach enables longterm security and supports a smooth transition toward quantum-safe distributed computing systems.