The 2024 NIST finalisation of post-quantum cryptography (PQC) standards -- CRYSTALS-Kyber (FIPS 203), CRYSTALS-Dilithium (FIPS 204), FALCON (FIPS 205), and SPHINCS+ -- marks the transition from research to deployment-ready quantum-resistant cryptography. This paper proposes the Post-Quantum Cryptography Algorithm Evaluation (PQCAE) framework, a systematic performance and security analysis of five NIST-standardised and candidate PQC algorithms across five deployment dimensions: key/signature size, computational performance, security level, implementation complexity, and hardware acceleration potential. PQCAE evaluates CRYSTALS-Kyber-768, CRYSTALS-Dilithium-3, FALCON-512, SPHINCS+-128s, and BIKE-L1 on three hardware platforms (x86-64 server, ARM Cortex-M4 embedded, and FPGA). CRYSTALS-Kyber achieves the best overall profile for key encapsulation -- fastest operations (KeyGen 0.06 ms, Encaps 0.08 ms, Decaps 0.09 ms on x86-64) with compact keys. FALCON-512 provides the smallest signature sizes (897 bytes) at moderate computational cost. SPHINCS+ offers the strongest conservative security (hash-based, no lattice assumptions) but largest signatures (8 KB). PQCAE provides migration guidance for organisations transitioning from classical to post-quantum cryptography.
The 2024 NIST finalisation of post-quantum cryptography (PQC) standards -- CRYSTALS-Kyber (FIPS 203), CRYSTALS-Dilithium (FIPS 204), FALCON (FIPS 205), and SPHINCS+ -- marks the transition from research to deployment-ready quantum-resistant cryptography. This paper proposes the Post-Quantum Cryptography Algorithm Evaluation (PQCAE) framework, a systematic performance and security analysis of five NIST-standardised and candidate PQC algorithms across five deployment dimensions: key/signature size, computational performance, security level, implementation complexity, and hardware acceleration potential. PQCAE evaluates CRYSTALS-Kyber-768, CRYSTALS-Dilithium-3, FALCON-512, SPHINCS+-128s, and BIKE-L1 on three hardware platforms (x86-64 server, ARM Cortex-M4 embedded, and FPGA). CRYSTALS-Kyber achieves the best overall profile for key encapsulation -- fastest operations (KeyGen 0.06 ms, Encaps 0.08 ms, Decaps 0.09 ms on x86-64) with compact keys. FALCON-512 provides the smallest signature sizes (897 bytes) at moderate computational cost. SPHINCS+ offers the strongest conservative security (hash-based, no lattice assumptions) but largest signatures (8 KB). PQCAE provides migration guidance for organisations transitioning from classical to post-quantum cryptography.
The National Institute of Standards and Technology (NIST) has recently concluded the third round of its Post Quantum Cryptography Standardization Process, selecting four finalist algorithms for standardization: CRYSTALS Kyber, CRYSTALS-Dilithium, FALCON, and SPHINCS+. These algorithms are designed to withstand attacks from both classical and quantum computers, ensuring the long-term security of digital communications. This paper presents a comprehensive comparative analysis of the security margins and practical deployment readiness of these finalist algorithms. CRYSTALS-Kyber, a key encapsulation mechanism based on the hardness of the Module Learning With Errors problem, offers strong security and efficient performance. CRYSTALS-Dilithium, a digital signature algorithm based on module lattices, provides robust security guarantees and relatively straightforward implementation. FALCON, a lattice-based digital signature algorithm utilizing the Fast Fourier Transform, offers compact signatures and fast verification but faces implementation challenges due to its reliance on floating-point arithmetic. SPHINCS+, a hash-based signature scheme, stands out as a conservative choice with security based solely on the well-established security of hash functions. The analysis reveals that while each algorithm has its strengths, they also face unique challenges in terms of side-channel vulnerabilities, formal security proofs, and performance trade-offs. The practical deployment of these algorithms requires careful consideration of specific security requirements, performance needs, and resource constraints. Ongoing research efforts aim to enhance the algorithms' resistance against advanced attacks, optimize their performance across diverse platforms, and develop standardized and secure hybrid cryptographic systems. The transition to post-quantum cryptography will involve challenges such as interoperability with legacy systems, the need for clear standards and regulatory guidance, and the costs associated with software and hardware updates. Continued engagement with the cryptographic community and monitoring of the evolving security landscape will be crucial for ensuring a secure and effective migration to post-quantum cryptography.
The prospect of cryptographically relevant quantum computers threatens public-key primitives underpinning modern digital infrastructure, including RSA, Diffie-Hellman, and elliptic-curve cryptography. Post-quantum cryptography (PQC) responds with algorithms believed to be hard for both classical and quantum adversaries. In August 2024, the U.S. National Institute of Standards and Technology (NIST) finalised the first three PQC standards: FIPS 203 (ML-KEM, based on Kyber), FIPS 204 (ML-DSA, based on Dilithium), and FIPS 205 (SLH-DSA, based on SPHINCS+). This paper surveys the algorithmic families behind these standards, the harvest-now-decrypt-later threat model, hybrid migration strategies, performance trade-offs, and the engineering challenges of transitioning the global cryptographic stack. We examine deployment progress in TLS, SSH, X.509, and constrained devices, and outline open research questions on side-channel security, falcon-style signatures, and the long-term replacement schedule for classical asymmetric cryptography.
As quantum computing advances, modern cryptographic standards face an existential threat, necessitating a transition to post-quantum cryptography (PQC). The National Institute of Standards and Technology (NIST) has selected CRYSTALS-Kyber and CRYSTALS-Dilithium as standardized PQC algorithms for secure key exchange and digital signatures, respectively. This study conducts a comprehensive performance analysis of these algorithms by benchmarking execution times across cryptographic operations such as key generation, encapsulation, decapsulation, signing, and verification. Additionally, the impact of AVX2 optimizations is evaluated to assess hardware acceleration benefits. Our findings demonstrate that Kyber and Dilithium achieve efficient execution times, outperforming classical cryptographic schemes such as RSA and ECDSA at equivalent security levels. Beyond technical performance, the real-world deployment of PQC introduces challenges in telecommunications networks, where large-scale infrastructure upgrades, interoperability with legacy systems, and regulatory constraints must be addressed. This paper examines the feasibility of PQC adoption in telecom environments, highlighting key transition challenges, security risks, and implementation strategies. Through industry case studies, we illustrate how telecom operators are integrating PQC into 5G authentication, subscriber identity protection, and secure communications. Our analysis provides insights into the computational trade-offs, deployment considerations, and standardization efforts shaping the future of quantum-safe cryptographic infrastructure.
Background: The rapid advancement of quantum computing threatens the cryptographic foundations of e-Government infrastructure, particularly classical public-key algorithms susceptible to Shor's algorithm. Post-Quantum Cryptography (PQC) offers a viable pathway for securing digital signature systems against emerging quantum adversaries. Objective: This study conducts a system-level comparative evaluation of three NIST-standardized PQC digital signature schemes CRYSTALS-Dilithium2, Falcon-512, and SPHINCS+-128s to assess their suitability for secure e-Government document signing workflows. Methods: A simulation-based system-level evaluation is employed, wherein timing values are estimated from official NIST PQC parameter specifications and open-source benchmarks (PQClean, OQS), rather than measured from native cryptographic library executions. Experiments were conducted over 100 iterations, reporting mean ± standard deviation for key generation, signing, and verification times, alongside signature sizes and a RESTful API prototype demonstration. Results: Falcon-512 demonstrates the lowest estimated signing latency approximately five to six times faster than Dilithium2 and over fifty times faster than SPHINCS+-128s with the smallest signature size (666 bytes versus 2,420 and 7,856 bytes respectively). Dilithium2 provides a balanced trade-off between computational efficiency and signature robustness, while SPHINCS+-128s, despite its computational overhead, offers the strongest long-term security guarantees through its stateless hash-based construction. The RESTful API prototype confirms successful multi-scheme integration feasibility. Conclusion: This study recommends Falcon-512 for real-time mobile services, Dilithium2 for centralized server-side authentication, and SPHINCS+-128s for long-term archival security, providing evidence-based guidance for PQC adoption in national e-Government systems aligned with SPBE frameworks and NIST standards.
The development of quantum computing technology is progressing very quickly, which poses a great threat to classical cryptographic algorithms like RSA and ECC, as they are based on mathematical problems that can be easily solved using quantum computing technology. To overcome the threat of quantum computing technology, the need for PQC algorithms like CRYSTALS Kyber, CRYSTALS Dilithium, Falcon, and SPHINCS+, which are standardized or recommended by NIST, has become essential in the era of cybersecurity. The feasibility of these algorithms in real time applications is the main focus of this thesis. A mixed approach is adopted for this purpose. Benchmark experiments were performed using the Open Quantum Safe library and PQC enabled OpenSSL for key generation, encryption, decryption, signature generation, signature verification, and TLS handshakes. Simulated environment and cloud environment were used for this purpose. Moreover, case studies were also conducted for cloud computing, financial sector, and IoT applications. Additionally, threat modeling is also performed for assessing the migration risks, i.e., “harvest now decrypt later.” The results indicate that the lattice-based methods, like Kyber and Dilithium, offer a robust trade off in terms of performance and security, albeit with increased key and signature sizes compared to classical methods. Hash based methods, like SPHINCS+, offer robust security, albeit with significant performance and size overheads, indicating that they are best used in specific circumstances. Hybrid approaches, using classical as well as quantum methods, were indicated as viable in the transition from classical to quantum methods, especially in circumstances that require backward compatibility. The paper concludes that NIST standardized PQC algorithms are technically viable for contemporary applications, especially in cloud computing and high-performance computing. However, for large-scale implementation, proper engineering and monitoring of developments in crypt analysis need to be performed. Future research should be directed towards implementation optimization, migration frameworks, and further studies in real-world implementations, especially for resource-constrained IoT and legacy system applications.
The emergence of large-scale quantum computing presents an imminent threat to contemporary public-key cryptosystems, with quantum algorithms such as Shor’s algorithm capable of efficiently breaking RSA and elliptic curve cryptography (ECC). This vulnerability has catalyzed accelerated standardization efforts for post-quantum cryptography (PQC) by the U.S. National Institute of Standards and Technology (NIST) and global security stakeholders. While theoretical security analysis of these quantum-resistant algorithms has advanced considerably, comprehensive real-world performance benchmarks spanning diverse computing environments—from high-performance cloud infrastructure to severely resource-constrained IoT devices—remain insufficient for informed deployment planning. This paper presents the most extensive cross-platform empirical evaluation to date of NIST-selected PQC algorithms, including CRYSTALS-Kyber and NTRU for key encapsulation mechanisms (KEMs), alongside BIKE as a code-based alternative, and CRYSTALS-Dilithium and Falcon for digital signatures. Our systematic benchmarking framework measures computational latency, memory utilization, key sizes, and protocol overhead across multiple security levels (NIST Levels 1, 3, and 5) in three distinct hardware environments and various network conditions. Results demonstrate that contemporary server architectures can implement these algorithms with negligible performance impact (<5% additional latency), making immediate adoption feasible for cloud services. In contrast, resource-constrained devices experience more significant overhead, with computational demands varying by up to 12× between algorithms at equivalent security levels, highlighting the importance of algorithm selection for edge deployments. Beyond standalone algorithm performance, we analyze integration challenges within existing security protocols, revealing that naive implementation of PQC in TLS 1.3 can increase handshake size by up to 7× compared to classical approaches. To address this, we propose and evaluate three optimization strategies that reduce bandwidth requirements by 40–60% without compromising security guarantees. Our investigation further encompasses memory-constrained implementation techniques, side-channel resistance measures, and hybrid classical-quantum approaches for transitional deployments. Based on these comprehensive findings, we present a risk-based migration framework and algorithm selection guidelines tailored to specific use cases, including financial transactions, secure firmware updates, vehicle-to-infrastructure communications, and IoT fleet management. This practical roadmap enables organizations to strategically prioritize systems for quantum-resistant upgrades based on data sensitivity, resource constraints, and technical feasibility. Our results conclusively demonstrate that PQC is deployment-ready for most applications, provided that implementations are carefully optimized for the specific performance characteristics and security requirements of target environments. We also identify several remaining research challenges for the community, including further optimization for ultra-constrained devices, standardization of hybrid schemes, and hardware acceleration opportunities.