AI 中文总结
该研究提出符合NIST标准的Noise协议后量子及混合PQC统一实现NoisePQC++,可提升抵御量子敌手能力且开销可接受,为相关部署提供基础。
AI 中文摘要
量子计算机对经典公钥密码的威胁,催生了对采用后量子密码(PQC)原语的安全通信协议的迫切需求。广泛应用于WireGuard、WhatsApp等系统的Noise Protocol Framework(Noise协议框架),传统依赖易受量子威胁的椭圆曲线迪菲-赫尔曼密钥交换(ECDH)公钥交换方案。本文提出NoisePQC++,这是采用C++23开发的Noise协议框架统一实现,集成了后量子密钥封装机制与混合前向保密功能。设计中整合了美国国家标准与技术研究院(NIST)标准化的ML-KEM算法及经典ECDH,支持完整的后量子、混合ECDH+PQC握手,统一适配全部57种经典Noise握手模式变体、13种后量子Noise握手及其混合变体。与现有工作相比,NoisePQC++具备更广泛的协议覆盖范围、更完整的实现支持与更高灵活性。评估显示,其在正常网络条件下开销极小,恶劣场景下开销可接受,同时大幅提升了抵御量子敌手的能力。这些结果表明,NIST标准化的后量子及混合Noise握手方案具备实用性,为未来部署提供了可靠基础。
英文摘要
The threat of quantum computers to classical public-key cryptography has created an urgent need to evolve secure communication protocols with post-quantum cryptographic (PQC) primitives. The Noise Protocol Framework, widely used in systems such as WireGuard and WhatsApp, traditionally relies on the Elliptic Curve Diffie-Hellman (ECDH) public-key exchange scheme, which is vulnerable to quantum threats. In this paper, we present NoisePQC++, a unified C++23 implementation of the Noise Protocol framework augmented with post-quantum Key Encapsulation Mechanisms and Hybrid Forward Secrecy. Our design integrates the National Institute of Standards and Technology (NIST) standardized ML-KEM algorithm alongside classical ECDH, enabling full PQC, hybrid ECDH+PQC handshakes, and unified support for all 57 classical Noise handshake pattern variants, 13 post-quantum Noise handshakes, and their hybrid variants. Compared with prior work, NoisePQC++ offers broader protocol coverage, more complete implementation support, and greater flexibility. Our evaluation shows minimal overhead under normal network conditions and acceptable overhead in adverse cases, while significantly improving resistance against quantum adversaries. These results indicate that NIST-standardized post-quantum and hybrid Noise handshakes are practical and provide a credible basis for future deployment.
Comments11 pages. Accepted to be presented and published at the 2026 IEEE International Conference on Quantum Computing and Engineering