Hybrid Post-Quantum Cryptography in Network Protocols

• Alexandre Augusto Giron UTFPR / UFSC
• Ricardo Custódio UFSC

DOI: https://doi.org/10.5753/sbseg_estendido.2024.241384

Resumo

The advent of quantum computing presents a significant threat to the security of modern communication systems that depend on public-key cryptography. This work provides a comprehensive overview of a thesis that explores the integration of Post-Quantum Cryptography (PQC) within the Transport Layer Security (TLS) protocol and the Automatic Certificate Management Environment (ACME). We assess the feasibility and performance implications of PQC in various network environments, focusing on the hybrid mode approach as a strategic pathway for PQC adoption. Our research aims to develop practical solutions to mitigate the quantum threat while ensuring the integrity and reliability of critical internet protocols.

Referências

Barnes, R., Hoffman-Andrews, J., McCarney, D., and Kasten, J. (2019). Automatic certificate management environment (acme). RFC 8555, RFC Editor.

Bernstein, D. J. and Lange, T. (2017). Post-quantum cryptography. Nature, 549(7671):188–194.

Giron, A. and Custódio, R. (2020). An entropy source based on the bluetooth received signal strength indicator. In Anais do XX Simpósio Brasileiro em Segurança da Informação e de Sistemas Computacionais, pages 106–118, Porto Alegre, RS, Brasil. SBC.

Giron, A., Schardong, F., and Custódio, R. (2022). Tls 1.3 handshake analyzer. In Anais Estendidos do XXII Simpósio Brasileiro em Segurança da Informação e de Sistemas Computacionais, pages 63–70, Porto Alegre, RS, Brasil. SBC.

Giron, A. A. (2021). Encouraging the adoption of post-quantum hybrid key exchange in network security. In Garcia-Alfaro, J., Li, S., Poovendran, R., Debar, H., and Yung, M., editors, Security and Privacy in Communication Networks, pages 363–371, Cham. Springer International Publishing.

Giron, A. A. (2023). Migrating applications to post-quantum cryptography: Beyond algorithm replacement. Cryptology ePrint Archive, Paper 2023/709. [link].

Giron, A. A., Custódio, R., and Rodríguez-Henríquez, F. (2023a). Post-quantum hybrid key exchange: a systematic mapping study. Journal of Cryptographic Engineering, 13(1):71–88.

Giron, A. A., do Nascimento, J. P. A., Custódio, R., Perin, L. P., and Mateu, V. (2023b). Post-quantum hybrid kemtls performance in simulated and real network environments. In Aly, A. and Tibouchi, M., editors, Progress in Cryptology – LATINCRYPT 2023, pages 293–312, Cham. Springer Nature Switzerland.

Giron, A. A., Martina, J. E., and Custódio, R. (2020). Bitcoin blockchain steganographic analysis. In Zhou, J., Conti, M., Ahmed, C. M., Au, M. H., Batina, L., Li, Z., Lin, J., Losiouk, E., Luo, B., Majumdar, S., Meng, W., Ochoa, M., Picek, S., Portokalidis, G., Wang, C., and Zhang, K., editors, Applied Cryptography and Network Security Workshops, pages 41–57, Cham. Springer International Publishing.

Giron, A. A., Martina, J. E., and Custódio, R. (2021). Steganographic analysis of blockchains. Sensors, 21(12).

Giron, A. A., Schardong, F., Perin, L. P., Custódio, R., Valle, V., and Mateu, V. (2024). Automated issuance of post-quantum certificates: A new challenge. In Pöpper, C. and Batina, L., editors, Applied Cryptography and Network Security, pages 3–23, Cham. Springer Nature Switzerland.

Marchiori, D., Giron, A., Nascimento, J. P., and Custódio, R. (2021). Timing analysis of algorithm substitution attacks in a post-quantum tls protocol. In Anais do XXI Simpósio Brasileiro em Segurança da Informação e de Sistemas Computacionais, pages 127–140, Porto Alegre, Brazil. SBC.

NIST (2024). Post-quantum cryptography. National Institute of Standards and Technology. Accessed: 2024-08-13.

Paquin, C., Stebila, D., and Tamvada, G. (2020). Benchmarking post-quantum cryptography in tls. In Ding, J. and Tillich, J.-P., editors, Post-Quantum Cryptography, pages 72–91, Cham. Springer International Publishing.

Petersen, K., Vakkalanka, S., and Kuzniarz, L. (2015). Guidelines for conducting systematic mapping studies in software engineering: An update. Information and Software Technology, 64:1–18.

Rescorla, E. (2018). The transport layer security (tls) protocol version 1.3. RFC 8446, RFC Editor.

Schardong, F., Giron, A. A., Müller, F. L., and Custódio, R. (2022). Post-quantum electronic identity: Adapting openid connect and oauth 2.0 to the post-quantum era. In Beresford, A. R., Patra, A., and Bellini, E., editors, Cryptology and Network Security, pages 371–390, Cham. Springer International Publishing.

Schwabe, P., Stebila, D., and Wiggers, T. (2020). Post-quantum tls without handshake signatures. In Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security, CCS ’20, page 1461–1480, New York, NY, USA. ACM.

Shor, P. W. (1994). Algorithms for quantum computation: discrete logarithms and factoring. In Proceedings 35th annual symposium on foundations of computer science, pages 124–134. Ieee.