The X.509 certificate model underpinning global HTTPS security faces an existential dual threat: the imminent arrival of cryptographically relevant quantum computers capable of breaking current public-key algorithms, and the systemic architectural weaknesses of the certificate lifecycle that persist regardless of algorithm substitution. Certificate expiry failures, revocation infrastructure unreliability, CA compromise, and the operational burden of certificate lifecycle management represent failure modes that post-quantum algorithm substitution alone cannot resolve. This paper presents EPQI (Ephemeral Post-Quantum Identity-Based Key Agreement), a systems architecture for certificate-free TLS that addresses the quantum threat at the architectural level. EPQI replaces the X.509 certificate with an identity-based trust model in which a server's domain name is its cryptographic identity. Session keys are derived ephemerally on demand by a Private Key Generator (PKG) using NIST-standardised post-quantum primitives (ML-KEM, FIPS 203; ML-DSA, FIPS 204), and destroyed immediately after session termination. The certificate lifecycle is eliminated entirely. EPQI introduces a blinded ephemeral PKG construction satisfying identity privacy and session unlinkability, constituting an architectural resolution of the key escrow problem. The required security properties of this construction are formally specified; the formal cryptographic instantiation is identified as an open problem. The architecture is designed for overlay deployment on existing DNS and network infrastructure. Regulatory alignment with DORA, NIS2, NIST IR 8547, and ENISA post-quantum guidance provides a compliance-driven deployment rationale for financial sector operators.
The X.509 certificate model underpinning global HTTPS security faces an existential dual threat: the imminent arrival of cryptographically relevant quantum computers capable of breaking current public-key algorithms, and the systemic architectural weaknesses of the certificate lifecycle that persist regardless of algorithm substitution. Certificate expiry failures, revocation infrastructure unreliability, CA compromise, and the operational burden of certificate lifecycle management represent failure modes that post-quantum algorithm substitution alone cannot resolve. This paper presents EPQI (Ephemeral Post-Quantum Identity-Based Key Agreement), a systems architecture for certificate-free TLS that addresses the quantum threat at the architectural level. EPQI replaces the X.509 certificate with an identity-based trust model in which a server's domain name is its cryptographic identity. Session keys are derived ephemerally on demand by a Private Key Generator (PKG) using NIST-standardised post-quantum primitives (ML-KEM, FIPS 203; ML-DSA, FIPS 204), and destroyed immediately after session termination. The certificate lifecycle is eliminated entirely. EPQI introduces a blinded ephemeral PKG construction satisfying identity privacy and session unlinkability, constituting an architectural resolution of the key escrow problem. The required security properties of this construction are formally specified; the formal cryptographic instantiation is identified as an open problem. The architecture is designed for overlay deployment on existing DNS and network infrastructure. Regulatory alignment with DORA, NIS2, NIST IR 8547, and ENISA post-quantum guidance provides a compliance-driven deployment rationale for financial sector operators.
Cloud-native application platforms and latency-sensitive systems such as 5G Core networks rely heavily on certificate-based Public Key Infrastructure (PKI) and mutual TLS to secure service-to-service communication. While effective, this model introduces significant operational and performance overhead, which is further amplified in the post-quantum setting due to large certificates and expensive signature verification. In this paper, we present a certificate-free authentication framework for private distributed systems based on post-quantum Identity-Based Encryption(IBE). Our design replaces certificate and signature based authentication with identity-derived keys and identity-based key encapsulation, enabling mutually authenticated TLS connections without certificate transmission or validation. We describe an IBE-based replacement for private PKI, including identity lifecycle management, and show how it can be instantiated using a threshold Private Key Generator (T-PKG). We apply this framework to cloud-native application deployments and latency-sensitive 5G Core networks. In particular, we demonstrate how identity-based TLS integrates with the 5G Service-Based Architecture while preserving security semantics and 3GPP requirements, and we show how the same architecture can replace private PKI in Kubernetes, including its control plane, without disrupting existing trust domains or deployment models.
Large-scale quantum computers threaten the public-key cryptographic foundations underpinning today's network security infrastructures. While significant progress has been made in standardizing post-quantum cryptographic (PQC) primitives and adapting individual protocols such as TLS and SSH, far less attention has been paid to the broader architectural consequences of the post-quantum transition for networked systems. In particular, many real-world deployments such as mobile networks, industrial control systems, IoT environments, and regulated infrastructures cannot assume the universal availability, deployability, or desirability of PQ public-key infrastructures. This paper presents the first comprehensive systematization of PQ-resistant network architectures, focusing on key distribution and management as a system-level design problem rather than a protocol-local substitution. We introduce a unified taxonomy spanning cryptographic foundations (symmetric-only, PQ-PKI, hybrid, and information-theoretic multi-path), key-distribution architectures (centralized, hierarchical, replicated, threshold, MPC-backed, and serverless), trust and threat models, key-management lifecycle, and deployment environments. Using this framework, we analyze the security, scalability, and operational trade-offs of a wide range of architectures under realistic PQ adversary assumptions, including harvest-now, decrypt-later attacks and partial infrastructure compromise. Our study highlights fundamental gaps in existing approaches, clarifies when PQ-PKI is necessary or avoidable, and identifies promising research directions for building cryptographically agile, quantum-resilient network infrastructures.
Abstract—The advent of fault-tolerant Cryptanalytically Relevant Quantum Computers (CRQCs) presents an existential threat to modern information security. Shor's polynomial-time quantum algorithm renders widely deployed public-key cryptographic primitives—including RSA, Diffie-Hellman (DH), and Elliptic Curve Cryptography (ECDH/ECDSA)—completely vulnerable to private key derivation. Furthermore, 'Harvest Now, Decrypt Later' (HNDL) adversarial campaigns actively intercept and store encrypted enterprise telemetry today, anticipating future quantum decryption capabilities. In response, the National Institute of Standards and Technology (NIST) finalized its primary Post-Quantum Cryptography (PQC) standards in FIPS 203 (ML-KEM), FIPS 204 (ML-DSA), and FIPS 205 (SLH-DSA). However, transitioning complex enterprise IT ecosystems to quantum-resistant primitives introduces severe architectural and computational disruptions: public key and signature sizes increase by several orders of magnitude, cryptographic handshake latencies escalate, network packets experience Maximum Transmission Unit (MTU) fragmentation, and legacy Hardware Security Modules (HSMs) lack microarchitectural support for lattice-based polynomial arithmetic. This paper provides an exhaustive, mathematically grounded technical survey and architectural roadmap for enterprise PQC migration. We formalize the Module Learning with Errors (M-LWE) and Module Short Integer Solution (M-SIS) hardness foundations, evaluate hybrid classical/post-quantum cryptographic transition models across standard transport protocols (TLS 1.3, IKEv2/IPsec, SSH), and formulate an enterprise Crypto-Agility Maturity Model. Furthermore, we construct an empirical enterprise testbed measuring throughput, connection establishment latency, memory footprints, and packet fragmentation across legacy and quantum-resistant suites. Our results show that while ML-KEM-768 achieves microsecond-level encapsulation, its 1,088-byte ciphertext expands TLS ClientHello payloads into multiple TCP segments under constrained networks. Finally, we establish open research directions in post-quantum identity federations, stateful hash signature tracking, and hardware-accelerated polynomial arithmetic. Index Terms—Post-Quantum Cryptography (PQC), FIPS 203 (ML-KEM), FIPS 204 (ML-DSA), Crypto-Agility, TLS 1.3, Lattice-Based Cryptography, Harvest Now Decrypt Later, Hardware Security Modules (HSM), Enterprise Migration.
Fault-tolerant quantum computing will render RSA and ECC insecure by reducing their underlying mathematical hard problems to polynomial-time computation via Shor's algorithm. The urgency of migrating to NIST post-quantum cryptography (PQC) standards is compounded by Harvest Now, Decrypt Later (HNDL) attacks, in which adversaries archive encrypted traffic today for quantum decryption once capable hardware matures. A uniform substitution of classical primitives with lattice-based alternatives, however, creates deployment friction that existing migration guidance does not fully resolve. ML-KEM-1024 encapsulation keys (1,568 bytes) and ML-DSA signatures (2,420 - 4,627 bytes) can exceed the standard 1,500-byte Ethernet Maximum Transmission Unit (MTU) when combined with protocol framing overhead, and ML-DSA payloads strain the volatile memory of many deployed Hardware Security Modules (HSMs). These constraints impose measurable costs on handshake latency, packet fragmentation risk, and Zero Trust Architecture (ZTA) verification cycles. This paper makes three contributions. First, it characterizes the operational tension between lattice-based PQC primitives and existing cloud network constraints, drawing on FIPS 203, FIPS 204, FIPS 205, and current IETF transport-layer work. Second, it identifies specific failure modes this tension introduces for Zero Trust identity infrastructure. Third, it proposes a Tiered Cryptographic Agility Model: a workload-stratified migration framework that applies dual-wrap hybrid encryption to cold storage, symmetric key ratcheting to latency-sensitive microservices, and PQC-signed software gateway tokens to bridge the hardware adoption gap. The framework is positioned against the NIST SP 800-207 Zero Trust reference architecture and the deployment-security guidance of NIST SP 800-227.
The impending threat posed by quantum-capable adversaries necessitates a secure and practical transition of Public Key Infrastructures (PKIs) to support post-quantum cryptography (PQC). This paper addresses the multifaceted challenges of integrating PQC into existing PKI ecosystems by examining novel cryptographic combiners and hybrid certificate designs that can provide quantum-resistant security. We assess the performance, compatibility, and security of these hybrid certificates across standard communication protocols such as TLS, considering variations in root and intermediate certification paths. In addition, we introduce key management procedures that cover signature generation, validation, and lifecycle considerations under both software and hardware constraints. Beyond X.509, alternative trust models and certificate mechanisms are also analyzed for specialized domains, including IoT, firmware signing, and smart cards.
The rise of quantum computing presents a critical threat to classical public-key cryptographic systems, necessitating a global shift toward post-quantum cryptography (PQC). While algorithmic standardisation has seen substantial progress since the National Institute of Standards and Technology (NIST) initiated its call for PQC proposals in 2017, the integration of these algorithms into certificate-based infrastructures remains fragmented and underexplored. This gap creates uncertainty for secure communication, particularly in transitioning legacy systems into quantum-resilient environments. This systematic literature review (SLR) focuses on PQC certificate architectures studied between 2017 and 2025, encompassing the evolution of the field since NIST's formal standardisation efforts began. The review employs the PRISMA 2020 methodology to identify and analyse six distinct post-quantum certificate models: Pure PQC, Hybrid, Composite, Chameleon, Parallel, and Wrapped. Each model is evaluated across several criteria, including structure, backwards compatibility, tooling support, standardisation status, and production readiness, drawing evidence from scholarly publications, draft standards, and open-source implementations. Findings highlight the Hybrid certificate as the most viable short-term solution due to its high interoperability and maturity in deployment. Composite and Parallel architectures offer enhanced security assurances that are suitable for critical infrastructure, although they come with increased implementation complexity. Pure PQC certificates, while future-proof, are still limited to constrained or greenfield environments. Chameleon and Wrapped models are identified as emerging alternatives for blockchain and legacy scenarios, respectively, with limited but growing support. This review enlightens the design and deployment of quantum-safe public key infrastructures by outlining the trade-offs and maturity levels of each architecture. It also emphasises the need for continued development in standardisation and toolchain support to facilitate scalable and secure PQC adoption.