We propose a theoretical framework to quantitatively describe physical unclonable functions (PUFs), including extensions to quantum protocols, so-called quantum readout PUFs (QR-PUFs). (QR-) PUFs are physical systems with challenge-response behavior intended to be hard to clone or simulate. Their use has been proposed in several cryptographic protocols, with particular emphasis on authentication. Here, we provide theoretical assumptions and definitions behind the intuitive ideas of (QR-) PUFs. This allows us to quantitatively characterize the security of such devices in cryptographic protocols. First, by generalizing previous ideas, we design a general authentication scheme which is applicable to different physical implementations of both classical PUFs and (QR-) PUFs. Then, we define the robustness and the unclonability, which allows us to derive security thresholds for (QR-) PUF authentication and paves the way to develop further new authentication protocols.
Abstract Quantum secret sharing (QSS) plays a crucial role in quantum cryptography as a privacy preserving scheme. Designing an efficient QSS protocol requires addressing three key challenges: 1) dynamic agent membership (handling agents joining or leaving during execution), 2) adversarial resilience (ensuring robustness against dishonest agents), and 3) practical optimization (improving computational and communication efficiency while minimizing implementation cost). In this paper, a verifiable dynamic threshold QSS (VDQSS) protocol with authentication capability is proposed. The protocol employs single particles for both authentication and share distribution, combining homogeneous linear recursion (HLR) with mutually unbiased bases (MUBs) to reconstruct multiple secrets. This approach significantly enhances security while reducing protocol complexity. The correctness and practicality of the protocol are validated through experimental simulations. Analytical results demonstrate its robustness against common attacks, providing reliable security guarantees for quantum communications. Compared to existing QSS protocols, the protocol offers enhanced simplicity and practical applicability.
The authentication process in fifth-generation networks between the user equipment and the network relies on secure communication protocols, with the 5G authentication and key agreement (5G-AKA) being a prominent one. However, this protocol still has shortcomings, as identified in the 3rd Generation Partnership Project (3GPP)release, which poses vulnerabilities. Notably, a primary concern is the insufficient protection of user privacy. This deficiency allows attackers to potentially exploit weaknesses in encryption, signing, and update mechanisms, leading to the tracking of a user's identity, location, and activities. Furthermore, the
5G-AKA protocol is vulnerable to man-in-the-middle attacks, in which malicious actors can assume the identity of service providers or networks, leading to the interruption of communication between users and servers. Additionally, the protocol lacks robustness in guaranteeing mutual authentication, enabling attackers to forge authentication messages and manipulate user data. In this paper, we propose a key generation method based on the concept of post-quantum cryptography to provide robust resistance to attacks. Furthermore, we propose a key exchange method that authenticates the user's equipment and home network through the application of Kyber, where both parties possess pre-established static public keys. The proposal provides identity protection, non-traceability, mutual authentication, and confidentiality. We implement this protocol to test 5G-AKA's vulnerabilities and analyse its effectiveness against specific attacks. The experiment used Minnet simulation and Ryu controllers to implement 5G-AKA with standard-specified characteristics.