As mobile networks evolve toward future disaggregated architectures and 6G systems, quantum computing poses an existential threat to the current cryptographic foundations underpinning Service-Based Architecture (SBA) deployments. This paper presents a standards-driven analysis of integrating Post-Quantum Cryptography (PQC) into future mobile core networks, directly informing ongoing NIST, IETF, and 3GPP standardization efforts. We examine current security specifications and identify critical vulnerabilities in SBA interfaces that are susceptible to “harvest-now, decrypt-later” attacks. Our framework maps PQC algorithm recommendations to existing standards clauses, proposing concrete specification updates for future release adoption. We assess the impact of standardization by validating the performance of NIST-standardized post-quantum algorithms across representative SBA interfaces, demonstrating that quantum-safe migrations can meet operational requirements for future mobile cores. Experimental results indicate that selected post-quantum configurations deliver acceptable performance for control-plane functions, supporting edge-cloud continuum deployments. We present a standards migration roadmap that addresses PKI lifecycle management, inter-operator security protocols, and coordination requirements between standards bodies.
As mobile networks evolve toward future disaggregated architectures and 6G systems, quantum computing poses an existential threat to the current cryptographic foundations underpinning Service-Based Architecture (SBA) deployments. This paper presents a standards-driven analysis of integrating Post-Quantum Cryptography (PQC) into future mobile core networks, directly informing ongoing NIST, IETF, and 3GPP standardization efforts. We examine current security specifications and identify critical vulnerabilities in SBA interfaces that are susceptible to “harvest-now, decrypt-later” attacks. Our framework maps PQC algorithm recommendations to existing standards clauses, proposing concrete specification updates for future release adoption. We assess the impact of standardization by validating the performance of NIST-standardized post-quantum algorithms across representative SBA interfaces, demonstrating that quantum-safe migrations can meet operational requirements for future mobile cores. Experimental results indicate that selected post-quantum configurations deliver acceptable performance for control-plane functions, supporting edge-cloud continuum deployments. We present a standards migration roadmap that addresses PKI lifecycle management, inter-operator security protocols, and coordination requirements between standards bodies.
Introduction The rapid advancement of quantum computing presents an existential threat to the mathematical foundations of modern internet security. Fault-tolerant quantum computers are projected to reach the logical qubit scale necessary to execute Shor's algorithm by 2030–2035, threatening currently deployed public-key cryptography infrastructures. Methods We evaluate the performance metrics of integrating post-quantum cryptography (PQC), specifically the newly finalized NIST standards (FIPS 203, 204, and 205), with quantum key distribution (QKD) across communication networks. Results Our analysis demonstrates that while hybrid PQC-QKD models reduce long-term key compromise probabilities to near 0%, they introduce a 15% to 40% increase in bandwidth overhead during initial cryptographic handshakes. Discussion Given that enterprise-wide cryptographic migrations historically require 7–10 years, organizations face an immediate vulnerability window against “harvest now, decrypt later” adversaries. Ultimately, we propose a phased, cryptographically agile framework to achieve a Zero-Trust, Quantum-Safe network architecture within a 5-year implementation timeline.
The transition to a cloud-native 5G Service-Based Architecture (SBA) improves scalability but exposes control-plane signaling to emerging quantum threats, including Harvest-Now, Decrypt-Later (HNDL) attacks. While NIST has standardized post-quantum cryptography (PQC), practical, deployable integration in operational 5G cores remains underexplored. This work experimentally integrates NIST-standardized ML-KEM-768 and ML-DSA into an open-source 5G core (free5GC) using a sidecar proxy pattern that preserves unmodified network functions (NFs). Implemented on free5GC, we compare three deployments: (i) native HTTPS/TLS, (ii) TLS sidecar, and (iii) PQC-enabled sidecar. Measurements at the HTTP/2 request-response boundary over repeated independent runs show that PQC increases end-to-end Service-Based Interface (SBI) latency to approximately 54 ms, adding a deterministic 48-49 ms overhead relative to the classical baseline, while maintaining tightly bounded variance (IQR <= 0.2 ms, CV < 0.4%). We also quantify the impact of Certification Authority (CA) security levels, identifying certificate validation as a tunable contributor to overall delay. Overall, the results demonstrate that sidecar-based PQC insertion enables a non-disruptive and operationally predictable migration path for quantum-resilient 5G signaling.
Mobile communication networks are becoming more ubiquitous than ever and are rapidly evolving with increasing adoption beyond traditional services such as voice and data. With 5G and emerging 6G standards, wireless communication networks are expected to play a critical role in various domains including AI-enabled services, robotics, industrial automation, and human critical services. In this context, ensuring the security of mobile networks through a security-first design approach is paramount. Current classical cryptosystems in communication networks rely on asymmetric key cryptography, which is vulnerable to attacks by adversaries equipped with quantum computing capabilities. To address this, solutions such as Post-Quantum Cryptography (PQC) algorithms standardized by National Institute of Standards and Technology (NIST) and hybrid approaches combining traditional and PQC algorithms have been proposed. The integration of these solutions into future communication systems such as advanced 5G and 6G is crucial to safeguard against quantum threats. Let’s explore how such an integrated network architecture can be envisioned, the impact on various 3GPP (3rdGeneration Partnership Project) procedures that currently use asymmetric cryptography, the transition from hybrid to standalone approaches to replace them, and the key challenges and considerations that must be addressed during this adoption process.
The accelerating development of quantum computing represents one of the most significant paradigm shifts in the history of information security. Cryptographic systems that currently underpin global digital infrastructure—including RSA, Diffie–Hellman, and Elliptic Curve Cryptography—rely on mathematical assumptions that collapse under quantum algorithms such as Shor’s and Grover’s. Post-Quantum Cryptography (PQC) emerges as the most viable and immediate solution to secure communications in the quantum era, offering cryptographic primitives that can be deployed on today’s classical hardware while resisting both classical and quantum attacks. This review provides a comprehensive, detailed examination of PQC, analyzing its mathematical foundations, algorithmic families, standardization progress, and deployment challenges. Special emphasis is placed on the NIST PQC standardization process, the risk posed by “harvest-now-decrypt-later” adversaries, the complexities of global cryptographic migration, and the implications for critical digital infrastructures such as cloud computing, blockchain systems, long-lifespan data archives, IoT ecosystems, and national cybersecurity. Through standalone equations, tables, and figures—including a conceptual visual provided by the user—this paper offers a complete, cohesive, and rigorous synthesis. The findings underscore that the transition to PQC is not optional but imperative, requiring coordinated scientific, governmental, and industrial effort to safeguard the digital future.
Quantum computing offers major computational advances but threatens modern public-key cryptography. Classical algorithms such as RSA, Diffie–Hellman (DH), and Elliptic Curve Cryptography (ECC) are vulnerable to quantum attacks, particularly Shor’s algorithm. As large-scale quantum capabilities emerge, post-quantum cryptography (PQC) has become essential to ensure future data confidentiality, integrity, and authentication. This paper discusses the need to replace classical cryptography, explores quantum-safe solutions, and examines challenges in large-scale migration. PQC is critical across government, critical infrastructure, finance, healthcare, telecommunications, IoT, autonomous vehicles, and 6G networks. A key concern is “harvest-now, decrypt-later” attacks, where encrypted data is stored today for future quantum decryption. The study analyzes classical cryptographic vulnerabilities and reviews major PQC families: lattice-based, hash-based, code-based, multivariate-based, and isogeny-based schemes, highlighting the ongoing NIST standardization efforts. It proposes a migration framework including quantum-readiness assessment, algorithm selection, hybrid implementation, and performance evaluation. Results show that although PQC introduces higher computational complexity, optimized implementations can support real-time applications with reasonable overhead. Among PQC approaches, lattice-based schemes appear most mature and balanced in terms of security and key size. The paper concludes that quantum-safe cryptography is a necessary evolution requiring continuous monitoring, adaptable systems, and alignment with emerging standards.
Quantum computing poses an existential threat to classical public-key cryptography, particularly RSA and elliptic-curve systems, which form the backbone of secure communication, authentication, and digital trust. Once scalable quantum computers emerge, algorithms such as Shor’s will be capable of breaking these schemes, jeopardizing confidentiality and integrity across the internet and enterprise systems. Post-quantum cryptography (PQC) offers a viable defense, providing quantum-resistant algorithms that can be implemented on today’s hardware and protocols. Recent standardization milestones—including NIST’s approval of ML-KEM (Kyber) for key establishment, ML-DSA (Dilithium) and SLH-DSA (SPHINCS+) for signatures, and the selection of HQC as a complementary KEM—mark a turning point for practical adoption. This paper surveys the quantum threat model, algorithm families, performance trade-offs, and integration patterns such as hybrid modes and crypto-agile architectures. It further outlines a phased migration roadmap for enterprises, emphasizing harvest-now-decrypt-later risks and compliance imperatives. By bridging technical, operational, and policy perspectives, the study provides actionable guidance to prepare organizations for a secure and quantum-resilient future.