Logo
ScienceStack
Table of Contents
Fetching ...
Sign In

The Impact of Quantum-Safe Cryptography (QSC) on Website Response

Ananya Tadepalli

TL;DR

This study aims to evaluate the impact of NIST's Quantum-Resistant Cryptographic Algorithms on website response times, particularly focusing on SSL handshake time and total download time under varying network conditions, and recommends that websites switch to QSC when the standards are ratified.

Abstract

Modern web traffic relies on 2048-bit RSA encryption to secure our data in transit. Rapid advances in Quantum Computing pose a grave challenge by allowing hackers to break this encryption in hours. In August of 2024, the National Institute of Standards and Technology published Quantum-Safe Cryptography (QSC) standards, including CRYSTALS-Kyber for general encryption and CRYSTALS-Dilithium, FALCON, and SPHINCS+ for digital signatures. Despite this proactive approach, the slow adoption of encryption protocols remains a concern, leaving a significant portion of data vulnerable to interception. In this context, this study aims to evaluate the impact of NIST's Quantum-Resistant Cryptographic Algorithms on website response times, particularly focusing on SSL handshake time and total download time under varying network conditions. By assessing the performance of these algorithms, this research seeks to provide empirical evidence and a reusable framework for validating the efficacy of QSC in real-world scenarios. It was found that the QSC algorithms outperformed the classical algorithm under normal and congested network conditions. There was also found to be an improvement in the total download time for larger file sizes, and a better performance by QSC under higher latency and packet loss conditions. Therefore, this study recommends that websites switch to QSC when the standards are ratified. These insights are crucial for accelerating the adoption of QSC and ensuring the security of data in the face of quantum computing threats.

The Impact of Quantum-Safe Cryptography (QSC) on Website Response

TL;DR

This study aims to evaluate the impact of NIST's Quantum-Resistant Cryptographic Algorithms on website response times, particularly focusing on SSL handshake time and total download time under varying network conditions, and recommends that websites switch to QSC when the standards are ratified.

Abstract

Modern web traffic relies on 2048-bit RSA encryption to secure our data in transit. Rapid advances in Quantum Computing pose a grave challenge by allowing hackers to break this encryption in hours. In August of 2024, the National Institute of Standards and Technology published Quantum-Safe Cryptography (QSC) standards, including CRYSTALS-Kyber for general encryption and CRYSTALS-Dilithium, FALCON, and SPHINCS+ for digital signatures. Despite this proactive approach, the slow adoption of encryption protocols remains a concern, leaving a significant portion of data vulnerable to interception. In this context, this study aims to evaluate the impact of NIST's Quantum-Resistant Cryptographic Algorithms on website response times, particularly focusing on SSL handshake time and total download time under varying network conditions. By assessing the performance of these algorithms, this research seeks to provide empirical evidence and a reusable framework for validating the efficacy of QSC in real-world scenarios. It was found that the QSC algorithms outperformed the classical algorithm under normal and congested network conditions. There was also found to be an improvement in the total download time for larger file sizes, and a better performance by QSC under higher latency and packet loss conditions. Therefore, this study recommends that websites switch to QSC when the standards are ratified. These insights are crucial for accelerating the adoption of QSC and ensuring the security of data in the face of quantum computing threats.

Paper Structure

This paper contains 26 sections, 13 figures, 1 table.

Table of Contents

  1. Introduction
  2. Literature Review
  3. Context
  4. QSC Algorithms
  5. CRYSTALS-KYBER
  6. CRYSTALS-Dilithium
  7. FALCON
  8. SPHINCS+
  9. Societal Impact
  10. Q-Day
  11. Transport Layer Security
  12. Gap
  13. Methods
  14. Results
  15. Network Conditions
  16. ...and 11 more sections

Figures (13)

  • Figure 1: Graphical presentation of projected stable qubit availability vs number of stable Qubits required
  • Figure 2: Method Architecture
  • Figure 3: Box Plot of SSL Handshake Time and Total Download Time values for the classical algorithm and three variations of QSC algorithms—kyber/dilithium, kyber/falcon, and kyber/sphincsha—under ideal network conditions.
  • Figure 4: Box Plot of SSL Handshake Time and Total Download Time values for the classical algorithm and three variations of QSC algorithms—kyber/dilithium, kyber/falcon, and kyber/sphincsha—under ideal network conditions.
  • Figure 5: Box Plot of SSL Handshake Time and Total Download Time values for the classical algorithm and three variations of QSC algorithms—kyber/dilithium, kyber/falcon, and kyber/sphincsha—under congested network conditions.
  • ...and 8 more figures