Post-Quantum Cryptographic Algorithms Performance Evaluation of Secure Networked Systems

Xenia Bogomolec, J. Gerhard

Prathusha Prakash, Naga Deepak Pothuraju

It is also worth noting that the implementation of quantum computing has been a big threat to the classical cryptographic algorithms that are popular in secure networked systems. PostQuantum Cryptography (PQC) has come to play as one of the viable answers to this issue because it has the capacity to resist quantum-enabled attacks. In this paper, the author offers a detailed performance analysis of post-quantum cryptographic algorithms, lattice-based encryption which is based on the Learning with Errors (LWE) principle, and hashbased digital signatures which is based on SPHINCS+. An experimental environment was created that is controlled by using specific performance measures, such as time of key generation, the latency of encryption and decryption, amount of memory, and the size of keys and ciphertext. To determine the suitability of PQC in guaranteeing confidentiality, integrity, and authenticity over insecure channels, secure network communication was emulated. Through experimental findings, it has been shown that the lattice-based generation of keys has greater overhead in terms of computation and memory, but the encryption, decryption and signature processes have feasible limits. The results validate the practicability of the post-quantum cryptography mechanisms implementation in the practical secure network systems and the trade-off between the increased quantum resistance and the resource consumption.

Guntaka Prabhakara Reddy, A. Prashanthi, V.S.N. Murthy +3 more

Quantum computing brings a severe threat to classical cryptographic systems which is why the need to construct quantum-safe cryptographic algorithms. This paper discusses QS cryptographic approach as the cornerstone of the secure network of tomorrow that can mitigate future risks in existing systems. We consider lattice, hash, and code-based quantum resistance algorithms and cryptographic techniques. Thus, by evaluating quantum technologies regarding their capabilities to counter quantum threats, the purpose of this study is to reveal effective heuristics to achieve secure communication in the post-quainter world. Other factors that have been considered include the issue of how to implement such ideas, how best to measure organizational performance and how the above ideas can be integrated into the current organizational infrastructure. The findings point towards the need to make a shift towards quantum-safe security in order to facilitate sustainable security within the network.

Bikram Paul, Gaurav Trivedi

Iraklis Tzinos, Konstantinos Limniotis, Nicholas Kolokotronis

Aim: The imminent advent of large-scale quantum computers within the next years is expected to highly affect the security of several cryptosystems that are now considered secure; this mainly holds for classical, long-established, public key cryptographic algorithms such as RSA and elliptic curve cryptography. Apparently, any security protocol that relies on such ciphers, including the transport layer security (TLS) protocol which constitutes a somewhat de facto standard for the security on the web, will not be considered secure in the post-quantum era. To alleviate the security risks stemming from quantum computing, several proposals have been submitted to the relevant procedure initiated by NIST towards evaluating and standardizing one or more quantum-resistant public-key cryptographic algorithms. This paper focuses on embedding post-quantum secure cryptographic algorithms into the TLS protocol to analyze its performance. More precisely, the paper aims to analyze whether this transition to post-quantum secure algorithms will have a significant impact on the user experience due to the possible increase of client--server communication times. Methods: Having as the starting point several important works in the field, several experiments were carried out, using combinations of cloud and local virtual machines per case and considering all the post-quantum cryptographic algorithm finalists for key exchange from the third round of the ongoing NIST process, for various cryptographic as well as network parameters. Results: Our results exhibit that, for key exchange in TLS, the best performance among the post-quantum secure ciphers is achieved by the Saber and CRYSTAL-Kyber variants for all security levels, regardless of the underlying computing power. The performance is comparable to that of the corresponding one achieved by a classical elliptic curve algorithm for key exchange for both RTT and packet loss ratio — i.e., the network parameters seem to have the same effect on post-quantum secure algorithms as in the case of a conventional elliptic curve algorithm. However, the effect of the network parameters on the performance is more crucial than the effect of the underlying chosen ciphers. Conclusion: According to the experiments, we conclude that there exist very promising algorithms that could be utilized in TLS in the near future, which may behave even better than the conventional elliptic curve algorithms for key exchange. It should also be pointed out that NIST announced on 5 July 2022 (i.e., after the completion of our research experiments) that, for general encryption used when we access secure websites, the CRYSTALS-Kyber algorithm has been selected, having as one of its advantages the speed of operation. Hence, the results of our paper are fully in line with the progress of the NIST process. Taking into account that the NIST process is still ongoing (now in its fourth round) with the aim to select more algorithms, as well as that some algorithms may be standardized outside NIST, it becomes evident that our results provide very useful insights on performance aspects of the post-quantum secure algorithms.

Francisco Javier de la Puente Secades, Gonzalo Esteban, Adrián Campazas +3 more