Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

International Conference on Trends in Quantum Computing and Emerging Business Technologies (TQCEBT)

Quantum-Resistant Digital Certificates: A Hybrid PKI Framework Integrating PQC and QKD

Bhavya Anand, Sumit Goswami

Published Apr 1, 2026• 0 citations
Publisher
DOI
10.1109/tqcebt67648.2026.11681460

Related papers

From Classical PKI to Hybrid PQC: A Crypto-Agile Migration Framework for Edge Systems

Abdelrahman Ahmed, Mohamed Hegazy, Mahmoud Saad

Communications in computer and information science•Aug 31, 2026•0 citations

Post-Quantum Public Key Infrastructures: Hybrid Certificates, Cryptographic Combiners, and Migration Strategies

Abdullah Aydeger, Engin Zeydan, Awaneesh Kumar Yadav +1 more

The impending threat posed by quantum-capable adversaries necessitates a secure and practical transition of Public Key Infrastructures (PKIs) to support post-quantum cryptography (PQC). This paper addresses the multifaceted challenges of integrating PQC into existing PKI ecosystems by examining novel cryptographic combiners and hybrid certificate designs that can provide quantum-resistant security. We assess the performance, compatibility, and security of these hybrid certificates across standard communication protocols such as TLS, considering variations in root and intermediate certification paths. In addition, we introduce key management procedures that cover signature generation, validation, and lifecycle considerations under both software and hardware constraints. Beyond X.509, alternative trust models and certificate mechanisms are also analyzed for specialized domains, including IoT, firmware signing, and smart cards.

IEEE Consumer Communications and Networking Conference•Jan 9, 2026•2 citations

Integrating post-quantum cryptography (PQC) with quantum key distribution (QKD): performance, security, and practical challenges

Reza Azarderakhsh, Maryam Sadat Amiri Tehrani Zadeh

SPIE Quantum Information Science, Sensing, and Computation•May 30, 2025•1 citation

Designing a Quantum-Resistant PKI Framework For National ID Systems

Aseel F. Aldaleh, Gandeva Bayu Satrya, Mahamed G. H. Omran

IEEE International Conference on Industry 4.0, Artificial Intelligence, and Communications Technology (IAICT)•Jul 1, 2026•0 citations

Post-Quantum Cryptography :A Framework for Implementing and Consulting on Post-Quantum Cryptography Systems in Enterprise PKI

Felix Peter Maisch

Quantum computing is developing quickly, and that's a big problem for traditional encryption techniques such as RSA and elliptic curve cryptography. Shor's algorithm, a quantum algorithm, specifically calls into question the long-term security that Public Key Infrastructures (PKIs) currently rely on. So, this thesis investigates how new post-quantum cryptography methods can be integrated into the public key infrastructure that businesses already use. This thesis examines the problems, both theoretical and practical, that arise when switching to cryptography resistant to quantum attacks. This thesis specifically examines how the NIST-selected algorithms, Kyber and Dilithium, are used in hybrid X.509 certificates that combine classical and post-quantum signatures.A test PKI environment was set up using OpenSSL-OQS and OpenXPKI to facilitate the testing process. Important PKI processes were examined in this setting, including TLS handshakes, certificate issuance, validation, and revocation. The results show that integrating PQC increases key and certificate sizes and also causes a moderate performance overhead. However, hybrid approaches offer a practical way to switch over. Lattice-based algorithms are particularly advantageous because they provide a strong balance of security, speed, and compatibility with existing systems. Using this information, a method was developed to help organizations gradually transition to a more secure system for managing their digital keys. This thesis connects advanced cryptography research with how businesses actually use it. It offers useful ideas and advice for companies getting ready for an age after quantum computing.

•Jan 1, 2026•0 citations

Experimental Authentication of Quantum Key Distribution with Post-quantum Cryptography

Liujun Wang, Kaiyi Zhang, Jiayong Wang +9 more

Quantum key distribution (QKD) can provide information theoretically secure key exchange even in the era of quantum computer. However, QKD requires the classical channel to be authenticated, and the current method is pre-sharing symmetric keys. For a QKD network of $n$ users, this method requires $C_n^2 = n(n-1)/2$ pairs of symmetric keys to realize pairwise interconnection. In contrast, with the help of mature public key infrastructure (PKI) and post-quantum cryptography (PQC) with quantum resistant security, each user only needs to apply for a digital certificate from certificate authority (CA) to achieve efficient and secure authentication for QKD. We only need to assume the short-term security of the PQC algorithm to achieve the long-term security of the distributed keys. Here, we experimentally verified the feasibility, efficiency and stability of the PQC algorithm in QKD authentication, and demonstrated the advantages when new users join the QKD network. Using PQC authentication we only need to believe the CA is safe, rather than all trusted relays. QKD combined with PQC authentication will greatly promote and extend the application prospects of quantum safe communication.

arXiv:2009.04662•Sep 10, 2020•6 citations
The impending threat posed by quantum-capable adversaries necessitates a secure and practical transition of Public Key Infrastructures (PKIs) to support post-quantum cryptography (PQC). This paper addresses the multifaceted challenges of integrating PQC into existing PKI ecosystems by examining novel cryptographic combiners and hybrid certificate designs that can provide quantum-resistant security. We assess the performance, compatibility, and security of these hybrid certificates across standard communication protocols such as TLS, considering variations in root and intermediate certification paths. In addition, we introduce key management procedures that cover signature generation, validation, and lifecycle considerations under both software and hardware constraints. Beyond X.509, alternative trust models and certificate mechanisms are also analyzed for specialized domains, including IoT, firmware signing, and smart cards.
Quantum computing is developing quickly, and that's a big problem for traditional encryption techniques such as RSA and elliptic curve cryptography. Shor's algorithm, a quantum algorithm, specifically calls into question the long-term security that Public Key Infrastructures (PKIs) currently rely on. So, this thesis investigates how new post-quantum cryptography methods can be integrated into the public key infrastructure that businesses already use. This thesis examines the problems, both theoretical and practical, that arise when switching to cryptography resistant to quantum attacks. This thesis specifically examines how the NIST-selected algorithms, Kyber and Dilithium, are used in hybrid X.509 certificates that combine classical and post-quantum signatures.A test PKI environment was set up using OpenSSL-OQS and OpenXPKI to facilitate the testing process. Important PKI processes were examined in this setting, including TLS handshakes, certificate issuance, validation, and revocation. The results show that integrating PQC increases key and certificate sizes and also causes a moderate performance overhead. However, hybrid approaches offer a practical way to switch over. Lattice-based algorithms are particularly advantageous because they provide a strong balance of security, speed, and compatibility with existing systems. Using this information, a method was developed to help organizations gradually transition to a more secure system for managing their digital keys. This thesis connects advanced cryptography research with how businesses actually use it. It offers useful ideas and advice for companies getting ready for an age after quantum computing.
Quantum key distribution (QKD) can provide information theoretically secure key exchange even in the era of quantum computer. However, QKD requires the classical channel to be authenticated, and the current method is pre-sharing symmetric keys. For a QKD network of nnn users, this method requires Cn2=n(n−1)/2C_n^2 = n(n-1)/2Cn2​=n(n−1)/2 pairs of symmetric keys to realize pairwise interconnection. In contrast, with the help of mature public key infrastructure (PKI) and post-quantum cryptography (PQC) with quantum resistant security, each user only needs to apply for a digital certificate from certificate authority (CA) to achieve efficient and secure authentication for QKD. We only need to assume the short-term security of the PQC algorithm to achieve the long-term security of the distributed keys. Here, we experimentally verified the feasibility, efficiency and stability of the PQC algorithm in QKD authentication, and demonstrated the advantages when new users join the QKD network. Using PQC authentication we only need to believe the CA is safe, rather than all trusted relays. QKD combined with PQC authentication will greatly promote and extend the application prospects of quantum safe communication.