Challenges and Strategies for Transitioning TLS to Post-Quantum Cryptography

Christian Paquin, Douglas Stebila, Goutam Tamvada

Abraham Cano Aguilera, Raphael Frantz, Dimosthenis Iliadis-Apostolidis +8 more

New Challenges in Post-Quantum Cryptography presents a system-level perspective on the transition to post-quantum cryptography. Developed within the MSCA DN-ID QUARC consortium, the book examines how quantum computing challenges the security assumptions underlying modern cryptographic systems and explores the implications for communication networks, computing infrastructures, and digital trust frameworks. The book introduces the foundations of classical and post-quantum cryptography, discusses the quantum threat model, and examines migration strategies, hybrid cryptographic approaches, and crypto-agile system design. Particular attention is given to the deployment of post-quantum cryptography in networking environments, including protocols such as TLS, IPsec, and MACsec, as well as issues related to performance, scalability, hardware acceleration, virtualization, and secure communication infrastructures. Combining theoretical foundations with practical deployment considerations, the book explores how quantum-resilient security can be integrated into modern computing and communication infrastructures.

Subhajit Roy

This preprint presents a systems-security and architectural analysis of post-quantum cryptography deployment challenges in modern API ecosystems. The paper examines hybrid TLS 1.3 integration, cryptographic agility, migration strategies, API gateway architectures, certificate management, and operational considerations surrounding quantum-resilient distributed systems. The work focuses on applied cryptographic engineering and migration planning rather than proposing new cryptographic primitives. It synthesizes current standards, adversarial models, implementation constraints, and deployment considerations relevant to practical post-quantum migration for API infrastructure. Keywords: post-quantum cryptography, API security, TLS 1.3, ML-KEM, cryptographic agility, hybrid TLS.

Kunal Das, Arindam Sadhu

Sujata Swain, Saunak Saha, Ritoja Poddar +3 more

Background The advent of quantum computing poses significant challenges to traditional cryptographic methods employed in securing network protocols. Methods This study evaluates the vulnerabilities of Transport Layer Security (TLS), Internet Protocol Security (IPsec), and Domain Name System Security Extensions (DNSSEC) under quantum threat scenarios. Leveraging the STRIDE and PASTA threat modeling frameworks, the research categorizes threats and simulates attack scenarios to provide a comparative analysis of these protocols. Results The findings reveal critical vulnerabilities, particularly in public-key cryptography, and highlight the urgency of transitioning to quantum- resistant cryptographic solutions. Conclusions The study proposes practical mitigation strategies to enhance the resilience of these protocols, contributing to the advancement of post-quantum cryptography and secure digital communications.