Abstract:QUIC is a new network protocol standardized in 2021. It was designed to replace the TCP/TLS stack and is based on UDP. The most current web standard HTTP/3 is specifically designed to use QUIC as transport protocol. QUIC claims to provide secure and fast transport with low-latency connection establishment, flow and congestion control, reliable delivery, and stream multiplexing. To achieve the security goals, QUIC enforces the usage of TLS 1.3. It uses authenticated encryption with additional data (AEAD) algorithms to not only protect the payload but also parts of the header. The handshake relies on asymmetric cryptography, which will be broken with the introduction of powerful quantum computers, making the use of post-quantum cryptography inevitable. This paper presents a detailed evaluation of the impact of cryptography on QUIC performance. The high-performance QUIC implementations LSQUIC, quiche, and MsQuic are evaluated under different aspects. We break symmetric cryptography down to the different security features. To be able to isolate the impact of cryptography, we implemented a NOOP AEAD algorithm which leaves plaintext unaltered. We show that QUIC performance increases by 10 to 20% when removing packet protection. The header protection has negligible impact on performance, especially for AES ciphers. We integrate post-quantum cryptographic algorithms into QUIC, demonstrating its feasibility without major changes to the QUIC libraries by using a TLS library that implements post-quantum algorithms. Kyber, Dilithium, and FALCON are promising candidates for post-quantum secure QUIC, as they have a low impact on the handshake duration. Algorithms like SPHINCS+ with larger key sizes or more complex calculations significantly impact the handshake duration and cause additional issues in our measurements.

Post-quantum Asynchronous Deniable Key Exchange and the Signal Handshake

Quantum-Safe Hybrid Key Exchanges with KEM-Based Authentication

QRKE: Quantum-Resistant Public Key Exchange

A Feasible Hybrid Quantum-Assisted Digital Signature for Arbitrary Message Length

Distributed Symmetric Key Establishment: a Scalable Quantum-Safe Key Distribution Protocol

Quantum direct communication with mutual authentication

Robust Quantum Public-Key Encryption with Applications to Quantum Key Distribution

Signing Information in the Quantum Era

A security framework for quantum key distribution implementations

End-to-end QKD network with non-localized trust

Efficient quantum digital signatures without symmetrization step

Quantum Key Distribution in the Classical Authenticated Key Exchange Framework

Multiparty Quantum Signature Schemes

One-Time Universal Hashing Quantum Digital Signatures without Perfect Keys

Secure and Practical Multiparty Quantum Digital Signatures.

Quantum cryptography beyond key distribution: theory and experiment

A Quantum of QUIC: Dissecting Cryptography with Post-Quantum Insights

Generalized decoding, effective channels, and simplified security proofs in quantum key distribution

Enhancing the Secure Transmission of Data Over Optical Fiber Networks from Source to Destination

The Quantum Cryptography Approach: Unleashing the Potential of Quantum Key Reconciliation Protocol for Secure Communication

Distributed Symmetric Key Establishment: A scalable, quantum-proof key distribution system