Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

Intelligent Methods, Systems, and Applications (IMSA)

A Crypto-Agile Proxy Architecture for Hybrid Classical and Post-Quantum Secure Communication

Shahd Tamer, Shahd Salah, Hebatallah Abdelwahab, Hana Tamer, Lamia Hegazi, Rawan Ahmed, Youssef Hawana, Ahmed Younes, Sameh Zaghloul, Samir A. Elsagheer Mohamed

Published Jul 1, 2026• 0 citations
Publisher
DOI
10.1109/imsa70415.2026.11700374

Related papers

Post-Quantum Cryptography Benchmarking and Crypto-Agile Migration for Quantum-Resilient Network Security

Saoud AlAbdulla, Mustafa Al Samara, Okba Ben Atia +2 more

International Wireless Communications and Mobile Computing Conference (IWCMC)•Jun 1, 2026•0 citations

A Hybrid Secure Communication Architecture Using Quantum Key Distribution and Post Quantum Cryptography

Cheshta Khurana, Raghav Tayal, Divya Agarwal

IEEE International Conference on Computing, Power and Communication Technologies (IC2PCT)•May 15, 2026•0 citations

A Crypto-Agile Post-Quantum Architecture for Banking Systems

Josephat Kasile, Isaac Shaban, Dominick Joseph +10 more

Post-quantum cryptography is usually evaluated one algorithm at a time: can ML-KEM encrypt a session, can ML-DSA sign a transaction. A bank is not one application, though, but an ecosystem of customer channels, ATMs, point-of-sale terminals, USSD services, core banking systems, internal PKI and hardware security modules, and interbank messaging, each with different constraints and each currently secured by classical public-key cryptography that a cryptographically relevant quantum computer would break. This paper asks a narrower and more concrete question than whether post-quantum cryptography works: where, specifically, it belongs inside that ecosystem, and how it should be built in so the answer does not depend permanently on whichever algorithms are standardized today. It proposes a three-layer security model (communication, transaction, and long-term cryptographic infrastructure) built around a crypto-agile cryptographic-service abstraction rather than direct application-level dependence on any single algorithm, evaluates representative post-quantum mechanisms from different mathematical families (ML-KEM and HQC for key establishment; ML-DSA, SLH-DSA, and FN-DSA for signatures) against their documented security, performance, and size characteristics for different banking components, and develops a conceptual, component-differentiated migration path from classical through hybrid to crypto-agile post-quantum infrastructure. The design is literature-based and conceptual, so the paper does not build a complete banking system; it draws on finalized and draft standards, published benchmarks, and existing banking-security and crypto-agility research, and states explicitly what it does not claim. It is a companion to, and assumes without re-arguing, the case this research team's earlier paper made for why African financial institutions need to prepare for post-quantum migration now.

•Oct 21, 2026•0 citations

Quantum-secure Software Network Environments for Telco Operators

Rubén B. Méndez, Mattin Antartiko Elorza Forcada, Andrés Ruiz-Chamorro +8 more

The transition towards quantum-safe secure communications requires current network infrastructures to support the coexistence of multiple cryptographic technologies. In this context, crypto-agility becomes a key requirement, enabling the coordinated use of Quantum Key Distribution (QKD), Post-Quantum Cryptography (PQC), and classical cryptographic mechanisms during a progressive migration process. This paper presents a general, standards-based architecture for crypto-agile IPsec service provisioning in Software-Defined Networking (SDN) environments. The proposal combines modular functional blocks that support the integration of QKD-, PQC-,and classical-derived key material under a common operational framework. The architecture builds on existing specifications, including RFC 9061 and ETSI GS QKD 004. Rather than focusing on implementation details or performance evaluation, this work describes the needs addressed by the architecture, its main components, and the operational workflows supporting secure tunnel establishment, rekeying, and attestation-related actions.

•Aug 28, 2026•0 citations

Hybrid Post-Quantum Cryptographic Approaches for Secure Communication

Eaman Raza Rizvi,Shahzada Khurram

•Dec 10, 2025•0 citations

Crypto-Agile migration to Hybrid Post-Quantum Cryptography in Enterprise TLS PKI VPN and Cloud-Native Systems and services

Stanley Nwakamma, John Ojukwu, Serif Oyindamola Oyesiji

The transition to post-quantum cryptography presents enterprises with a complex systems-engineering challenge extending beyond algorithm replacement. Transport Layer Security, public key infrastructure, virtual private networks, cloud-native platforms, identity services, and machine-to-machine communications depend on interconnected cryptographic libraries, certificates, protocols, hardware modules, policies, and vendor products. This review examines crypto-agile migration to hybrid post-quantum cryptography, where classical and quantum-resistant mechanisms are combined to preserve established assurance while emerging algorithms and implementations mature. It develops a migration-oriented taxonomy covering cryptographic discovery, dependency mapping, hybrid key establishment, composite authentication, certificate lifecycle management, protocol negotiation, performance optimization, interoperability testing, and operational governance. Particular attention is given to larger keys, ciphertexts, and signatures; handshake fragmentation; certificate-chain expansion; hardware acceleration; legacy compatibility; downgrade resistance; and observability across distributed environments. The review compares migration requirements in enterprise TLS, PKI, remote-access and site-to-site VPNs, service meshes, API gateways, container platforms, serverless services, secrets systems, and multicloud infrastructures. It also analyzes staged deployment patterns, including inventory-first modernization, proxy-based termination, dual certificates, hybrid tunnels, algorithm-policy abstraction, and controlled fallback. Evaluation criteria integrate security, interoperability, latency, throughput, bandwidth, memory, certificate issuance, operational resilience, and rollback readiness. The findings indicate that successful migration depends on treating cryptography as a continuously governed enterprise capability rather than a fixed protocol configuration. The paper concludes by identifying gaps in standardization, automated discovery, cross-vendor testing, cryptographic telemetry, constrained-device support, and lifecycle evidence, providing organizations with a structured foundation for prioritized, reversible, and verifiable post-quantum transformation across heterogeneous digital services. Keywords: Crypto-Agility, Hybrid Cryptography, Post-Quantum Cryptography, Public Key Infrastructure, Quantum-Safe Migration, Transport Layer Security.

Gulf Journal of Computer Sciences•Aug 2, 2026•0 citations
Post-quantum cryptography is usually evaluated one algorithm at a time: can ML-KEM encrypt a session, can ML-DSA sign a transaction. A bank is not one application, though, but an ecosystem of customer channels, ATMs, point-of-sale terminals, USSD services, core banking systems, internal PKI and hardware security modules, and interbank messaging, each with different constraints and each currently secured by classical public-key cryptography that a cryptographically relevant quantum computer would break. This paper asks a narrower and more concrete question than whether post-quantum cryptography works: where, specifically, it belongs inside that ecosystem, and how it should be built in so the answer does not depend permanently on whichever algorithms are standardized today. It proposes a three-layer security model (communication, transaction, and long-term cryptographic infrastructure) built around a crypto-agile cryptographic-service abstraction rather than direct application-level dependence on any single algorithm, evaluates representative post-quantum mechanisms from different mathematical families (ML-KEM and HQC for key establishment; ML-DSA, SLH-DSA, and FN-DSA for signatures) against their documented security, performance, and size characteristics for different banking components, and develops a conceptual, component-differentiated migration path from classical through hybrid to crypto-agile post-quantum infrastructure. The design is literature-based and conceptual, so the paper does not build a complete banking system; it draws on finalized and draft standards, published benchmarks, and existing banking-security and crypto-agility research, and states explicitly what it does not claim. It is a companion to, and assumes without re-arguing, the case this research team's earlier paper made for why African financial institutions need to prepare for post-quantum migration now.
The transition towards quantum-safe secure communications requires current network infrastructures to support the coexistence of multiple cryptographic technologies. In this context, crypto-agility becomes a key requirement, enabling the coordinated use of Quantum Key Distribution (QKD), Post-Quantum Cryptography (PQC), and classical cryptographic mechanisms during a progressive migration process. This paper presents a general, standards-based architecture for crypto-agile IPsec service provisioning in Software-Defined Networking (SDN) environments. The proposal combines modular functional blocks that support the integration of QKD-, PQC-,and classical-derived key material under a common operational framework. The architecture builds on existing specifications, including RFC 9061 and ETSI GS QKD 004. Rather than focusing on implementation details or performance evaluation, this work describes the needs addressed by the architecture, its main components, and the operational workflows supporting secure tunnel establishment, rekeying, and attestation-related actions.
The transition to post-quantum cryptography presents enterprises with a complex systems-engineering challenge extending beyond algorithm replacement. Transport Layer Security, public key infrastructure, virtual private networks, cloud-native platforms, identity services, and machine-to-machine communications depend on interconnected cryptographic libraries, certificates, protocols, hardware modules, policies, and vendor products. This review examines crypto-agile migration to hybrid post-quantum cryptography, where classical and quantum-resistant mechanisms are combined to preserve established assurance while emerging algorithms and implementations mature. It develops a migration-oriented taxonomy covering cryptographic discovery, dependency mapping, hybrid key establishment, composite authentication, certificate lifecycle management, protocol negotiation, performance optimization, interoperability testing, and operational governance. Particular attention is given to larger keys, ciphertexts, and signatures; handshake fragmentation; certificate-chain expansion; hardware acceleration; legacy compatibility; downgrade resistance; and observability across distributed environments. The review compares migration requirements in enterprise TLS, PKI, remote-access and site-to-site VPNs, service meshes, API gateways, container platforms, serverless services, secrets systems, and multicloud infrastructures. It also analyzes staged deployment patterns, including inventory-first modernization, proxy-based termination, dual certificates, hybrid tunnels, algorithm-policy abstraction, and controlled fallback. Evaluation criteria integrate security, interoperability, latency, throughput, bandwidth, memory, certificate issuance, operational resilience, and rollback readiness. The findings indicate that successful migration depends on treating cryptography as a continuously governed enterprise capability rather than a fixed protocol configuration. The paper concludes by identifying gaps in standardization, automated discovery, cross-vendor testing, cryptographic telemetry, constrained-device support, and lifecycle evidence, providing organizations with a structured foundation for prioritized, reversible, and verifiable post-quantum transformation across heterogeneous digital services. Keywords: Crypto-Agility, Hybrid Cryptography, Post-Quantum Cryptography, Public Key Infrastructure, Quantum-Safe Migration, Transport Layer Security.