QORE : Quantum Secure 5G/B5G Core

TL;DR

This paper addresses the urgent need to quantum-proof the 5G core by migrating from classical PKC to post-quantum cryptography. It introduces QORE, a practical framework that deploys lattice-based ML-KEM for key encapsulation and ML-DSA for digital signatures across TLS, DTLS, mTLS, OAuth, and IPsec, with a Hybrid PQC model to preserve interoperability during migration. The work provides detailed protocol adaptations (PQ-TLS, PQ-IPsec, PQ-mTLS, PQ-OAUTH, PQ-SUCI), a comprehensive security infrastructure stack, and a phased deployment plan aligned with 3GPP SA3/SA5 and NIST PQC standards. Performance evaluations on modern hardware show that ML-KEM/ML-DSA meet carrier-grade requirements with manageable handshake overhead and scalable throughput, validating the practicality of quantum-resilient 5G cores. The framework is demonstrated on open-source 5G Core platforms, offering a reproducible blueprint for operators and researchers to adopt quantum-secure migrations while maintaining service continuity and security across the 5G ecosystem.

Abstract

Quantum computing is reshaping the security landscape of modern telecommunications. The cryptographic foundations that secure todays 5G systems, including RSA, Elliptic Curve Cryptography (ECC), and Diffie-Hellman (DH), are all susceptible to attacks enabled by Shors algorithm. Protecting 5G networks against future quantum adversaries has therefore become an urgent engineering and research priority. In this paper we introduce QORE, a quantum-secure 5G and Beyond 5G (B5G) Core framework that provides a clear pathway for transitioning both the 5G Core Network Functions and User Equipment (UE) to Post-Quantum Cryptography (PQC). The framework uses the NIST-standardized lattice-based algorithms Module-Lattice Key Encapsulation Mechanism (ML-KEM) and Module-Lattice Digital Signature Algorithm (ML-DSA) and applies them across the 5G Service-Based Architecture (SBA). A Hybrid PQC (HPQC) configuration is also proposed, combining classical and quantum-safe primitives to maintain interoperability during migration. Experimental validation shows that ML-KEM achieves quantum security with minor performance overhead, meeting the low-latency and high-throughput requirements of carrier-grade 5G systems. The proposed roadmap aligns with ongoing 3GPP SA3 and SA5 study activities on the security and management of post-quantum networks as well as with NIST PQC standardization efforts, providing practical guidance for mitigating quantum-era risks while safeguarding long-term confidentiality and integrity of network data.

Figures (15)

• Figure 1: Security Threats to 5G Infrastructure from Quantum Computers. This diagram illustrates multiple quantum-enabled attack vectors affecting different components of the 5G architecture, including threats to UE authentication, token-based authorization, subscriber identity protection, and inter-NF secure communications.
• Figure 2: Structure of a hybrid post-quantum X.509 certificate with classical and post-quantum signatures.
• Figure 3: Overview of X25519MLKEM768 hybrid key exchange: private, public, ciphertext, and shared secret contributions.
• Figure 4: PQ-TLS 1.3 PCAP
• Figure 5: PQ-DTLS PCAP