A Quantum-Resistant Secure Communication and Key Lifecycle Framework

Abstract

Quantum computing poses a threat to modern encryption algorithms such as Rivest-Shamir-Adleman (RSA) and Elliptic Curve Cryptography (ECC) with the Shor’s algorithm, cutting cracking time from millions of years to just days. Attackers commonly use an attack known as “Store Now, Decrypt Later”. This form of attack banks on the future of quantum computing. Many post-quantum algorithms have been created to counteract the imminent attack should data leak. CRYSTALS-Kyber is one of the most secure post quantum algorithms that has been approved by the NIST. Using the CRYSTALS-Kyber as a base for a cryptographic scheme, a security framework can be developed with encryption and sessions in mind. Keeping virtual sessions as limited as possible reduces the number of openings an attacker may have to attempt to steal data. Despite the quantum threat, it is likely that a robust system is designed to prevent an attack from the present and a future threat. The system proposed will integrate session key managers along with strong encryption to ensure attackers cannot easily store the data now, nor will the data that they steal be easily cracked.