A Scalable Framework for Post-Quantum Authentication in Public Key Infrastructures

2025/04/16 by Antonia Tsili, Konstantinos Kordolaimis, Tsili, Antonia +5 · 5 citations
Computer Science · #Quantum Information and Cryptography #Cryptography and Data Security #Quantum Computing Algorithms and Architecture

paper · pdf · doi:10.48550/arxiv.2504.12062

Abstract

This work explores the performance and scalability of a hierarchical certificate authority framework with automated certificate issuance employing post-quantum cryptographic (PQC) signature algorithms. The system is designed for compatibility with both classical and PQC algorithms, promoting crypto-agility while ensuring robust security against quantum-based threats. The proposed framework design expects minimal cryptographic requirements from potential clients, protects certificates of high importance against cross-dependent chains-of-trust and allows for prompt switching between classical and PQC algorithms. Finally, we evaluate SPHINCS⁺, Falcon, and Dilithium variants in various configurations of certificate issuance and verification accommodating a large client base, underlining the trade-offs in balancing performance, scalability, and security.

Citations

• Experimental Authentication of Quantum Key Distribution with Post-quantum Cryptography
• On the importance of cryptographic agility for industrial automation
• Algorithms for quantum computation: discrete logarithms and factoring
• A method for obtaining digital signatures and public-key cryptosystems

Related

• Applied Post Quantum Cryptography: A Practical Approach for Generating Certificates in Industrial Environments
• On Post-Quantum Cryptography Authentication for Quantum Key Distribution
• A Comparative Study of Hybrid Post-Quantum Cryptographic X.509 Certificate Schemes
• Assessing the Impact of Post-Quantum Digital Signature Algorithms on Blockchains
• Time-Based State-Management of Hash-Based Signature CAs for VPN-Authentication