МОДЕЛЬ ДИНАМІЧНОГО ВИБОРУ ПОСТКВАНТОВИХ КРИПТОГРАФІЧНИХ АЛГОРИТМІВ В ІНФОРМАЦІЙНО-КОМУНІКАЦІЙНИХ СИСТЕМАХ НА ОСНОВІ ІНТЕГРАЛЬНОЇ ОЦІНКИ РИЗИКУ ТА ЕФЕКТИВНОСТІ
Павло Миколайович Складанний, Юлія Володимирівна Костюк, Володимир Юрійович Соколов, Галина Андріївна Кучаковська
The article investigates the problem of ensuring cryptographic stability of information and communication systems in the conditions of increasing intensity of cyber threats and development of quantum computing, which reduces the efficiency of classical cryptographic algorithms. An analysis of modern approaches to the application of post-quantum cryptographic algorithms was conducted, which showed their predominantly static nature of use without taking into account the dynamics of changes in the operating environment, risk level and attack parameters. The need to develop adaptive mechanisms for selecting cryptographic algorithms capable of providing an appropriate level of protection in conditions of changing threats was substantiated. A model for dynamic selection of post-quantum cryptographic algorithms based on an integral assessment of efficiency and risk is proposed, which allows taking into account both the technical characteristics of the algorithms (speed, cryptographic stability, resource intensity) and the current state of system security. An integral efficiency indicator and a risk function are introduced within the model, which are formed taking into account the level of vulnerabilities, threat intensity and criticality of information resources. An adaptation mechanism is implemented, which provides automatic review and selection of the optimal algorithm depending on the change in risk in real time. The results of the study indicate that the use of the proposed model creates the prerequisites for increasing the level of cryptographic protection, provides a formalized basis for adaptive management of the system's functioning, and allows for reasonable optimization of the use of computing resources. The results obtained confirm the scientific novelty and practical feasibility of implementing adaptive approaches to cryptographic protection of information and communication systems. Keywords: post-quantum cryptography, information and communication systems, cryptographic protection, integral risk assessment, adaptive model, dynamic algorithm selection, cybersecurity
The article investigates the problem of ensuring cryptographic stability of information and communication systems in the conditions of increasing intensity of cyber threats and development of quantum computing, which reduces the efficiency of classical cryptographic algorithms. An analysis of modern approaches to the application of post-quantum cryptographic algorithms was conducted, which showed their predominantly static nature of use without taking into account the dynamics of changes in the operating environment, risk level and attack parameters. The need to develop adaptive mechanisms for selecting cryptographic algorithms capable of providing an appropriate level of protection in conditions of changing threats was substantiated. A model for dynamic selection of post-quantum cryptographic algorithms based on an integral assessment of efficiency and risk is proposed, which allows taking into account both the technical characteristics of the algorithms (speed, cryptographic stability, resource intensity) and the current state of system security. An integral efficiency indicator and a risk function are introduced within the model, which are formed taking into account the level of vulnerabilities, threat intensity and criticality of information resources. An adaptation mechanism is implemented, which provides automatic review and selection of the optimal algorithm depending on the change in risk in real time. The results of the study indicate that the use of the proposed model creates the prerequisites for increasing the level of cryptographic protection, provides a formalized basis for adaptive management of the system's functioning, and allows for reasonable optimization of the use of computing resources. The results obtained confirm the scientific novelty and practical feasibility of implementing adaptive approaches to cryptographic protection of information and communication systems. Keywords: post-quantum cryptography, information and communication systems, cryptographic protection, integral risk assessment, adaptive model, dynamic algorithm selection, cybersecurity
The article investigates the problem of ensuring cryptographic stability of information and communication systems in the conditions of increasing intensity of cyber threats and development of quantum computing, which reduces the efficiency of classical cryptographic algorithms. An analysis of modern approaches to the application of post-quantum cryptographic algorithms was conducted, which showed their predominantly static nature of use without taking into account the dynamics of changes in the operating environment, risk level and attack parameters. The need to develop adaptive mechanisms for selecting cryptographic algorithms capable of providing an appropriate level of protection in conditions of changing threats was substantiated. A model for dynamic selection of post-quantum cryptographic algorithms based on an integral assessment of efficiency and risk is proposed, which allows taking into account both the technical characteristics of the algorithms (speed, cryptographic stability, resource intensity) and the current state of system security. An integral efficiency indicator and a risk function are introduced within the model, which are formed taking into account the level of vulnerabilities, threat intensity and criticality of information resources. An adaptation mechanism is implemented, which provides automatic review and selection of the optimal algorithm depending on the change in risk in real time. The results of the study indicate that the use of the proposed model creates the prerequisites for increasing the level of cryptographic protection, provides a formalized basis for adaptive management of the system's functioning, and allows for reasonable optimization of the use of computing resources. The results obtained confirm the scientific novelty and practical feasibility of implementing adaptive approaches to cryptographic protection of information and communication systems. Keywords: post-quantum cryptography, information and communication systems, cryptographic protection, integral risk assessment, adaptive model, dynamic algorithm selection, cybersecurity
The development of quantum computers is one of the most significant technological developments of our time, opening new horizons in computing capabilities. However, it also poses serious threats to existing cryptographic algorithms, which are the basis of the security of modern information systems. The paper presents the results of research on post-quantum cryptography and its role in ensuring information security in the context of the development of quantum computers. The purpose of this paper is to compare modern post-quantum, i.e., quantum-stable cryptographic algorithms, assess their applicability for different classes of tasks, and predict the development paths of cryptographic methods for information protection. To achieve this goal, methods of comparative analysis and mathematical modeling are used, which allow for assessing the effectiveness and security of algorithms in different conditions. The study results show that post-quantum algorithms provide reliable information protection in the context of potential quantum attacks while maintaining a high-efficiency level. The conclusions emphasize the need to adapt existing cryptographic systems to new security requirements, particularly through integrating post-quantum algorithms into cloud services and blockchain technologies. The research results can be used to improve data protection mechanisms in information systems and to develop new cryptographic standards in the era of quantum computing. Therefore, plans for future research are outlined, namely: the effectiveness of implementing post-quantum algorithms in various industries, including finance, medicine, and government, will be analyzed; methods for optimizing cryptographic systems will be developed to ensure a balance between security and performance; new mathematical approaches will be studied that can be used to create quantum-resistant algorithms.
The article develops a comprehensive threat model for hybrid quantum-secured communication channels of corporate networks operating under conditions of multi-vector cyberattacks and highly dynamic threat scenarios.An analysis of the vulnerabilities of the electronic communication infrastructure is conducted, taking into account the synergistic interaction of classical cryptographic protocols, post-quantum cryptographic protection algorithms, and quantum key distribution technologies.Special attention is paid to the investigation of attack vectors aimed at compromising the processes of key information management, authentication, and the establishment of secure connections in hybrid network environments.A multi-level classification of threats is proposed, covering the physical, data link, network, transport, and application layers of the OSI model, as well as a separate category of threats caused by the use of quantum computing resources by a potential attacker.Specific attack scenarios are considered, including quantum-enhanced cryptanalytic methods, attacks on the hardware implementation of quantum protocols, the compromise of trusted nodes, and the impact on key distribution channels.The paper analyzes software and hardware mechanisms for ensuring the cryptographic strength and fault tolerance of hybrid communication channels, in particular, mechanisms for dynamic key information management, the integration of quantum key distribution protocols into corporate telecommunication environments, and the application of post-quantum cryptographic primitives to protect control and user data.Architectural solutions are proposed for the orchestration of cryptographic services, security status monitoring, and adaptive reconfiguration of security mechanisms in real time.Based on the obtained results, a generalized protection model for hybrid quantum-secured communication channels is formed, aimed at increasing the level of information security, cyber resilience, and the continuity of corporate networks functioning under the conditions of complex combined attacks and the transition to the quantum computing era.
Recent advances in quantum technology and the potential that practical quantum computers may become a reality in the future have led to renewed interest in developing cryptographic technologies that are secure against conventional and quantum attacks. Currently, virtually all asymmetric cryptographic schemes in use are threatened by the potential development of powerful quantum computers. Post-quantum cryptography is one of main the ways to combat this threat. Its security is based on the complexity of mathematical problems that are currently considered unsolvable efficiently, even with the help of quantum computers. The security of information systems is ensured through protection against various threats that use system vulnerabilities. Security protocols are the building blocks of secure communication. They implement security mechanisms to provide security services. Security protocols are considered abstract when analyzed, but may have additional vulnerabilities in implementation. This work contains a holistic study of security protocols. Basics of security protocols, taxonomy of attacks on security protocols and their implementation are considered, as well as various methods and models of protocol security analysis. In particular, the differences between information-theoretic and computational security, computational and symbolic models are specified. In addition, an overview of the computational security models for Authenticated Key Exchange (AKE) and Password Authentication Key Exchange (PAKE) protocols is provided. The most important security models for the AKE and PAKE protocols were also described. With the emergence of new technologies that may have different security requirements, as well as with increased opportunities for competition, there is always a need to develop new protocols. Thus, the purpose of this article is to review, classify, analyze, and research the vulnerabilities of information systems from classical, quantum, and special attacks, performed taking into account the forecast regarding the possibilities of attacks on post-quantum cryptographic transformations; studying security assessment models for existing cryptographic protocols, as well as reviewing and benchmarking security models and providing suggestions for protection against existing potential attacks.
We established the need for comparative analysis and evaluation of the possibility to use asymmetric post-quantum cryptographic mechanisms. In order to compare, a procedure for evaluation was selected based on integral assessments of unconditional and conditional criteria. An analysis was conducted among the algorithms that fulfilled general unconditional criteria. As conditional criteria, we chose numerical characteristics of algorithms. In addition, additional unconditional criteria were put forward that differed depending on the conditions of use. The relevance of present research is associated with the emergence of a quantum computer. Previous studies have already proved that the existing cryptographic algorithms are vulnerable to the methods of quantum cryptanalysis. That is why, at present, leading organizations in the standardization of crypto algorithms conduct research and comparisons for selecting the post-quantum standard of cryptography.As a result of present research, we found a lack of a universal post-quantum cryptographic algorithm. In addition, not all algorithms can be employed under different conditions. It is proposed to separate three variants in the application of post-quantum algorithms: for lightweight cryptography, for the use by standard automated systems and use in a cloud-based environment. For all conditions of use, a separate evaluation of benefits in the cryptographic algorithms was carried out. We detected shortcomings in the leading candidate in that it may possible have a reduced resistance for the specialized quantum attack. That is why the recommendations were given to employ these algorithms as the basic ones in the transition period. And, if the suspicion is confirmed, then we proposed alternatives for each variant of application. Results of present research allow us to understand current state in the development of post-quantum crypto algorithms and to predict their possible further development.This forecast is important in that the post-quantum cryptographic mechanisms represent a new stage in the development and use of cryptography. In addition, the practical value of the research consists in obtaining the evaluation for post-quantum algorithms, depending on the conditions of their application.
The object of the research is the development of a method for ensuring the authenticity and integrity of data in wireless channels based on post-quantum cryptosystems. The development of modern digital technologies ensures the transition to smart technologies and the formation of Next Generation Networks. The formation of smart technologies, as a rule, uses wireless communication channel standards IEEE 802.11X, IEEE 802.15.4, IEEE 802.16, which use only authentication protocols and privacy mechanisms, which are formed on symmetric algorithms. In the conditions of the post-quantum period (the advent of a full-scale quantum computer), the stability of such algorithms is questioned. Such systems, as a rule, are formed on the basis of the synthesis of socio-cyber-physical systems and cloud technologies, which simplifies the conduct of Advanced Persistent Threat attacks, both on the internal circuit of execution systems and on external control systems. The creation of multi-circuit information protection systems allows for an objective assessment of the current state of the system as a whole and the formation of preventive measures to counter cyber threats. The proposed method of providing basic security services: confidentiality, integrity and authenticity based on crypto-code constructions takes into account the level of secrecy of information transmitted over wireless channels and/or stored in databases of socio-cyber-physical systems. The use of post-quantum algorithms – McEliece/Niederreiter crypto-code constructions on elliptic/modified elliptic/lossy/Low-density parity-check code provides the necessary level of stability in the post-quantum cryptoperiod (crypto-stability at the level of 1025–1035 group operations), speed and probability of information (Рerr not lower than 10-9–10-12). The proposed method of information exchange using wireless communication channels ensures their practical implementation on resource-limited devices (creating of CCC on the GF field (24–26).