QUIC的量子：以后量子视角剖析密码学
A Quantum of QUIC: Dissecting Cryptography with Post-Quantum Insights
AI总结：
本文评估密码学对QUIC性能的影响，通过NOOP AEAD隔离开销，并集成Kyber等后量子算法验证其在QUIC中部署的可行性。
摘要：
QUIC是一项于2021年标准化的新型网络协议。它被设计用于替代TCP/TLS协议栈，并基于UDP。最新的Web标准HTTP/3专门设计为使用QUIC作为传输协议。QUIC声称可提供安全、快速的传输，具备低延迟连接建立、流量与拥塞控制、可靠交付以及流多路复用等特性。为实现安全目标，QUIC强制使用TLS 1.3。它采用带附加数据的认证加密（AEAD）算法，不仅保护载荷，还保护部分首部。握手依赖非对称密码学，而随着强大量子计算机的出现，这种密码学将被攻破，因此后量子密码学的使用不可避免。本文详细评估了密码学对QUIC性能的影响。研究从不同方面评估了高性能QUIC实现LSQUIC、quiche和MsQuic。我们将对称密码学分解为不同的安全特性。为了隔离密码学的影响，我们实现了一种NOOP AEAD算法，该算法不会改变明文。结果表明，移除数据包保护后，QUIC性能提升10%至20%。首部保护对性能的影响可以忽略不计，尤其是对于AES密码。我们将后量子密码算法集成到QUIC中，通过使用实现后量子算法的TLS库，证明无需对QUIC库进行重大修改即可实现这一点。Kyber、Dilithium和FALCON是后量子安全QUIC的有前景候选方案，因为它们对手持持续时间的影响较小。而SPHINCS+等具有较大密钥尺寸或更复杂计算的算法会显著影响握手持续时间，并在我们的测量中引发额外问题。
英文摘要：
QUIC is a new network protocol standardized in 2021. It was designed to replace the TCP/TLS stack and is based on UDP. The most current web standard HTTP/3 is specifically designed to use QUIC as transport protocol. QUIC claims to provide secure and fast transport with low-latency connection establishment, flow and congestion control, reliable delivery, and stream multiplexing. To achieve the security goals, QUIC enforces the usage of TLS 1.3. It uses authenticated encryption with additional data (AEAD) algorithms to not only protect the payload but also parts of the header. The handshake relies on asymmetric cryptography, which will be broken with the introduction of powerful quantum computers, making the use of post-quantum cryptography inevitable. This paper presents a detailed evaluation of the impact of cryptography on QUIC performance. The high-performance QUIC implementations LSQUIC, quiche, and MsQuic are evaluated under different aspects. We break symmetric cryptography down to the different security features. To be able to isolate the impact of cryptography, we implemented a NOOP AEAD algorithm which leaves plaintext unaltered. We show that QUIC performance increases by 10 to 20% when removing packet protection. The header protection has negligible impact on performance, especially for AES ciphers. We integrate post-quantum cryptographic algorithms into QUIC, demonstrating its feasibility without major changes to the QUIC libraries by using a TLS library that implements post-quantum algorithms. Kyber, Dilithium, and FALCON are promising candidates for post-quantum secure QUIC, as they have a low impact on the handshake duration. Algorithms like SPHINCS+ with larger key sizes or more complex calculations significantly impact the handshake duration and cause additional issues in our measurements.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
