Post-Quantum QUIC Protocol in Cloud Networking

Abstract

Post-quantum ciphers (PQC) secure the digital networking of the current computers against a quantum-computing-equipped adversary. The National Institute of Standards and Technology (NIST) selected post-quantum digital signature algorithms for standardization. To prepare for the transition to PQC, we study the feasibility of integrating the NIST-standardized PQC digital signatures into the existing networking protocols, which include TCP/TLS and the more advanced QUIC. We study the behavior and performances of implementing PQC signatures for HTTP networking built on TCP/TLS and QUIC. Our experiment-based studies use remote cloud servers across the globe to simulate and measure the real-world networking behaviors. Focusing on the post-quantum lattice-based ciphers of Dilithium and Falcon, our results show that QUIC generally outperforms TCP/TLS (by 52% with RSA, 2.5% or greater with Dilithium algorithms, and 32.8 % or greater with Falcon algorithms). Based on the QUIC performances and the protocol handshake duration overhead between the client and the cloud server, we recommend Falcon for the QUIC-based networking applications for quicker handshake and less variance if the devices can afford the hardware for floating-point-based operations.