Cloud-Aware Cryptographic CodeConstruction (CAC³) method, comprise of lattice-based routines designed for containerized execution environments is proposed, which provides a unified approach to securing cloud-native infrastructures in the quantum era.
Abstract
Cloud-native infrastructures now form the backbone of modern digital systems, offeringscalability and flexible deployment, But they introduce new security challenges beyondtraditional cryptographic methods. The rise of quantum computing further threatens widelyused algorithms like RSA and ECC, which remain vulnerable to quantum attacks. Most postquantumsolutions focus narrowly on standalone primitives, overlooking the distributednature of cloud-native systems. To address this, Cloud-Aware Cryptographic CodeConstruction (CAC³) method, comprise of lattice-based routines designed for containerizedexecution environments is proposed. CAC³ ensures confidentiality and integrity underconcurrent workloads while supporting distributed key generation, context-aware parameterallocation, and orchestration compatibility. CAC³ integrates post-quantum primitives directlyinto the cloud-native execution context, facilitating scalable quantum-safe cloud services. Theworking prototype was developed locally and tested remotely on the cloud server of i2k2.com,simulating multi-tenant cryptography and communication among microservices. Tenant datais encrypted and verified at the destination via orchestrated channels. Performance ismeasured in terms of key generation, encryption, decryption, signing and verification timealong with distributed key generation latency under simulated multi-tenant workloads. Thiswork forms the core cryptographic layer for future expansion with composability, adaptiveauthentication and in-transit performance evaluation over orchestrated channels. The paperprovides a unified approach to securing cloud-native infrastructures in the quantum era.
To meet the performance and scalability demands of current cloud systems, cryptographic systems should be resistant to both quantum and classical adversaries, especially considering the future potential provided by quantum computing. The presented manuscript provides an integrated, quantum-resistant, cloud-based encryp...
V. H.· Journal of Intelligent Decis...· 0 citations
A 4-tier security framework tailored for Quantumas-a-Service (QaaS) deployments, focusing on securing data-in-transit, demonstrates the viability of modern latticebased cryptography for live environments and provides a structured 3-phase transition roadmap for cloud service providers (CSPs) to achieve quantum-resilienc...
Akshay Joseph, R. Delhibabu· Frontiers of Computer Scienc...· 0 citations
The advent of quantum computing poses a critical threat to conventional cryptographic systems, potentially rendering many widely used algorithms obsolete. To address this challenge, this study proposes the quantum adaptive security algorithm for key management systems (QASA-KMS), a hybrid security framework that integr...
Neethi Narayanan, S. C. Vigila· International Journal of Adv...· 0 citations
A non-invasive PQC proxy, requiring no device, firmware, or vendor-cloud changes, performing ML-KEM-768 encapsulation and ML-DSA-65 authentication (NIST FIPS 203/204) with AES-256-GCM session keys via HKDF, implemented with Open Quantum Safe liboqs on a Raspberry Pi 4B gateway.
Mahedee Zaman Moon, Kaysarul Anas Apurba, Mahamudul Hasan et al.· 0 citations
This study benchmarks seven Key Encapsulation Mechanisms and lattice-based schemes, particularly ML-KEM and Kyber, emerged as the most practical PQC solutions for resource-constrained IoT environments and demonstrates the usefulness of virtualized benchmarking for deployment planning.
Yahaya Salisu, Sandeep Kumar, Surajo Nuhu Umar et al.· International Journal of Inn...· 0 citations
The finalization of NIST post-quantum cryptography (PQC) standards necessitates the immediate migration of security-critical ecosystems to quantum-resistant algorithms. Despite OCaml powering high-assurance security infrastructure such as MirageOS unikernels, the Tezos blockchain, and NetHSM hardware security modules,...
Y. Kotukh, M. Korobchynskyi, Myhailo Rudenko et al.· Automation, Control, and Inf...· 0 citations
We use cookies to run the site and, with your consent, for analytics and to show ads.
See our Cookie Policy.