Virtual Private Networks in the Quantum Era: A Security in Depth Approach

David Schatz, Friedrich Altheide, Hedwig Koerfgen, Michael Rossberg, Guenter Schaefer

2023

Abstract

Conventional asymmetric cryptography is threatened by the ongoing development of quantum computers. A mandatory countermeasure in the context of virtual private networks (VPNs) is to use post-quantum cryptography (PQC) as a drop-in replacement for the authenticated key exchange in the Internet Key Exchange (IKE) protocol. However, the results of the ongoing cryptanalysis of PQC cannot be predicted. Consequently, this article discusses orthogonal methods for quantum-resistant key exchanges, like quantum key distribution (QKD) and multipath key reinforcement (MKR). As each method has limitations when used on its own, we conclude that it is best to maximize security by combining all available sources of symmetric key material to protect traffic inside a VPN. As one possible realization, we propose a lightweight proxy concept that uses available symmetric keys, like QKD and MKR keys, to implement a transparent cryptographic tunnel for all IKE packets, and consequently for PQC key exchanges. In contrast to combining PQC and symmetric key material within the IKE protocol, our approach provides security in depth: If secure symmetric keys are available, attacks on IKE and hence on PQC algorithms are infeasible. But even otherwise, the security properties of IKE and thus PQC are not weakened, so the overall security of the VPN is guaranteed to increase.

Paper Citation

in Harvard Style

Schatz D., Altheide F., Koerfgen H., Rossberg M. and Schaefer G. (2023). Virtual Private Networks in the Quantum Era: A Security in Depth Approach. In Proceedings of the 20th International Conference on Security and Cryptography - Volume 1: SECRYPT; ISBN 978-989-758-666-8, SciTePress, pages 486-494. DOI: 10.5220/0012121800003555

in Bibtex Style

@conference{secrypt23,
author={David Schatz and Friedrich Altheide and Hedwig Koerfgen and Michael Rossberg and Guenter Schaefer},
title={Virtual Private Networks in the Quantum Era: A Security in Depth Approach},
booktitle={Proceedings of the 20th International Conference on Security and Cryptography - Volume 1: SECRYPT},
year={2023},
pages={486-494},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0012121800003555},
isbn={978-989-758-666-8},
}

in EndNote Style

TY - CONF

JO - Proceedings of the 20th International Conference on Security and Cryptography - Volume 1: SECRYPT
TI - Virtual Private Networks in the Quantum Era: A Security in Depth Approach
SN - 978-989-758-666-8
AU - Schatz D.
AU - Altheide F.
AU - Koerfgen H.
AU - Rossberg M.
AU - Schaefer G.
PY - 2023
SP - 486
EP - 494
DO - 10.5220/0012121800003555
PB - SciTePress