Composite IKEv2 key sharing cuts PQC handshake time under packet loss
Original title: PQC Migration of IPsec: Reliable Composite Key Sharing Mechanisms in IKEv2
At 1% packet loss the composite handshake is at least 20% faster than hybrid methods, and 30% faster at 10% loss.
Researchers study post-quantum IPsec migration and find large PQC keys can fragment IP packets, failing IKEv2 security associations and slowing handshakes. Their mechanism concatenates classical and quantum keys into one composite key and sends it over TCP, unlike RFC 9370 hybrid sharing that sends keys sequentially over UDP or TCP. Benchmarks show shorter handshakes and lower energy use as packet loss rises.
- Handshake time is at least 20% better at 1% packet loss.
- The gain reaches 30% at 10% packet loss.
- Energy consumption falls 29% at 10% packet loss.
- The comparison covers hybrid algorithms using UDP or TCP.
From the original article
1 min read at arxiv.orgThe threat of quantum computers breaking classical cryptographic is accelerating the adoption of quantum- resistant cryptographic algorithms. Several government agencies have set a tight time-line for upgradation of all system to support post quantum cryptographs. We study post-quantum migration of IPSec protocols and their impact on network performance.
By Rahul · arxiv.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.