Abstract
The demand on MACsec in Ethernet is increasing substantially since MACsec fits well for industrial applications which require strong security as well as efficiency. To provide a long-term security, the MACsec protocol should be resistant to future attacks including quantum attacks. In this paper, MACsec is analysed under a quantum attack scenario. To achieve 128-bit quantum security, AES (Advanced Encryption Standard) algorithms defined in MACsec should mandate to use 256-bit keys. On the other hand, classical public-key cryptosystems in MKA are not secure at all against quantum attacks so that they need to be replaced by post-quantum crypto schemes in a quantum world. We propose an authenticated post-quantum key establishment protocol which is suitable for long-term secure MACsec. The proposed protocol is used in the hybrid mode, an ephemeral key exchange, and an end-to-end encryption. We verified by experiments that the proposed protocol can be deployed in existing a MACsec-enabled Ethernet network.
Subject
Computer Networks and Communications,Hardware and Architecture
Cited by
5 articles.
订阅此论文施引文献
订阅此论文施引文献，注册后可以免费订阅5篇论文的施引文献，订阅后可以查看论文全部施引文献
1. Leveraging Quantum Key Distribution for Securing MACsec Communications;Proceedings of the 1st Workshop on Quantum Networks and Distributed Quantum Computing;2023-09-10
2. Performance Evaluation of Quantum-Resistant Open Fronthaul Communications in 5G;IEEE INFOCOM 2023 - IEEE Conference on Computer Communications Workshops (INFOCOM WKSHPS);2023-05-20
3. Post Quantum Design in SPDM for Device Authentication and Key Establishment;Cryptography;2022-09-21
4. Modern Trends in Quantum Key Distribution Networks;Quantum Key Distribution Networks;2022
5. Secure Open Fronthaul Interface for 5G Networks;The 16th International Conference on Availability, Reliability and Security;2021-08-17