Authors:
Petr Tuma
1
;
Jan Hajny
1
;
Petr Muzikant
2
;
Jan Havlin
1
;
Lukas Malina
1
;
Patrik Dobias
1
and
Jan Willemson
2
Affiliations:
1
Faculty of Electrical Engineering and Communication, Brno University of Technology, Brno, Czech Republic
;
2
Cybernetica, Tartu, Estonia
Keyword(s):
Cryptography, Key Establishment, Post-Quantum Cryptography, Security, Quantum Key Distribution (QKD), Network Encryption.
Abstract:
This article describes an open-source quantum-resistant network traffic encryptor for the Linux platform. Our encryptor uses a combination of quantum and post-quantum key establishment methods to achieve quantum resistance combined with a fast encryption speed of AES to make quantum-resistant encryption readily available to the public. The packet-by-packet encryption architecture ensures that every bit of information is properly authenticated and encrypted. The combination of multiple key sources further increases the encryptor’s security – be it elliptic curve-based (Elliptic Curve Diffie Hellman, ECDH), quantum (Quantum Key Distribution, QKD) or post-quantum (CRYSTALS-Kyber). Without knowing all the keys obtained from different types of key sources, the final hybrid encryption key can only be obtained by brute-force means. Our contribution is very practical as the encryptor has reasonable performance, despite not being part of the Linux kernel.