[Pqc] FW: The performance of post-quantum TLS1.3

[Mike Ounsworth <[e-mail]>]

Forwarding from the NIST PQC list.

 

---

Mike Ounsworth

 

From: '[e-mail]' via pqc-forum <[e-mail]> 
Sent: Thursday, August 8, 2024 1:32 AM
To: pqc-forum <[e-mail]>
Subject: [EXTERNAL] [pqc-forum] The performance of post-quantum TLS1.3

 

Dear community, we would like to share with you a recent work on benchmarking PQC algorithms in the context of TLS1. 3 [1]. The supported framework is based on openquantumsafe. We have considered legacy, PQC, and hybrid setups, as well as the



Dear community,

we would like to share with you a recent work on benchmarking PQC algorithms in the context of TLS1.3 [1]. The supported framework is based on openquantumsafe <https://urldefense.com/v3/__https:/openquantumsafe.org/__;!!FJ-Y8qCqXTj2!ZjXzU6teiV1d6_DQs4tLxDwfZbfby_m8Nl6OgBEHxkwjn3N_s6Yd6z1hrOqb1CuniE75bAte_ZA5rPmnTYfvCJqWIptt$> . We have considered legacy, PQC, and hybrid setups, as well as the HQC and BIKE algorithms from round 4. We designed an "isolated" testing environment, so that we could exclude the impact of external factors in the measurements. 

We see that the PQ algorithms challenge our state of the art and some DSAs are even faster. Moreover, the hybrid algorithms provided no performance downside on NIST level one. On higher levels, the PQ algorithms become faster than the hybrids (which have the pre-quantum algorithms as bottleneck). 

Note that latency should not always be the main criterion, especially on constrained devices. For example, in case of low-bandwidth or high-delay environments, the data volume can be more important, and our tests showed that in such cases Kyber and Falcon surpassed other PQ algorithms because of their smaller keys.

Overall, we observed no performance drawback from using hybrid algorithms, while on higher NIST security levels, PQC outperformed any algorithm in use today. We hope that you find this work useful in some way and we look forward to your comments.

Best,
-δ


[1] https://dl.acm.org/doi/10.1145/3624354.3630585 <https://urldefense.com/v3/__https:/dl.acm.org/doi/10.1145/3624354.3630585__;!!FJ-Y8qCqXTj2!ZjXzU6teiV1d6_DQs4tLxDwfZbfby_m8Nl6OgBEHxkwjn3N_s6Yd6z1hrOqb1CuniE75bAte_ZA5rPmnTYfvCJRmIdvl$> 

-- 
You received this message because you are subscribed to the Google Groups "pqc-forum" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [e-mail] <mailto:[e-mail]> .
To view this discussion on the web visit https://groups.google.com/a/list.nist.gov/d/msgid/pqc-forum/436c0434-02aa-447d-8479-66bbf92ce15fn%40list.nist.gov <https://urldefense.com/v3/__https:/groups.google.com/a/list.nist.gov/d/msgid/pqc-forum/436c0434-02aa-447d-8479-66bbf92ce15fn*40list.nist.gov?utm_medium=email&utm_source=footer__;JQ!!FJ-Y8qCqXTj2!ZjXzU6teiV1d6_DQs4tLxDwfZbfby_m8Nl6OgBEHxkwjn3N_s6Yd6z1hrOqb1CuniE75bAte_ZA5rPmnTYfvCLemzswR$> .