Post-Quantum Authenticated Key Exchange (AKE)
Post-quantum authenticated key exchange (AKE) refers to cryptographic protocols designed to establish a shared secret key between two or more parties while ensuring both the secrecy of the key and the authenticity of the parties involved, even when facing attacks from powerful quantum computers
1.
Key Characteristics and Context
- Purpose: AKE protocols are fundamental cryptographic techniques used for secure communication, allowing parties to agree on a new secure session key 23.
- Post-Quantum Security: The "post-quantum" aspect means these protocols are intended to be secure against attacks from both classical and quantum computers 4. Traditional asymmetric encryption algorithms, such as RSA and ECC, are vulnerable to quantum attacks using algorithms like Shor's, which necessitates the development of quantum-resistant solutions 5.
- Strong Security: Research has focused on realizing practical post-quantum AKE with strong security, specifically CK+ security 1.
- Construction: Post-quantum AKE protocols can be constructed from one-way secure key encapsulation mechanisms (KEMs) 1.
The development of post-quantum AKE is part of the broader field of
Post-Quantum Cryptography (PQC), which utilizes mathematical problems believed to be difficult for both classical and quantum computers to solve
4. PQC includes several categories of algorithms:
- Lattice-based cryptography 4
- Code-based cryptography 4
- Multivariate cryptography 4
- Hash-based cryptography 4
To increase quantum resistance, hybrid cryptographic schemes are also utilized, which combine traditional algorithms with post-quantum algorithms to provide robust security and maintain backward compatibility
4.
Importance of Quantum Resistance
The need for quantum resistance is urgent, particularly in fields like blockchain, where quantum computing could undermine the security of cryptocurrencies
4. Quantum resistance is a proactive approach to ensure the long-term security of networks and preserve the value of digital assets
4.
The migration to PQC is a critical challenge, with organizations like the Post-Quantum Cryptography Coalition (PQCC) working to establish and implement interoperable standards and technology
6. For important infrastructure and business systems in the U.S., the National Institute of Standards and Technology (NIST) has indicated that existing Public Key Infrastructure (PKI) algorithms are slated for replacement between 2028 and 2030
5.