发表机构
nodeQ Limited（nodeQ有限公司）
机构由 AI 辅助整理，请以论文原文为准。AI 中文总结
本文提出一种面向吞吐量的分析模型，为TLS和SSH中后量子安全连接建立速率提供上界，并通过实验验证其准确性，进而支持多端点资源分配优化。
AI 中文摘要
对量子威胁影响经典密码学的认识的不断提高，直接转化为对能够估计量子安全密码在当前系统中集成效应的精确网络仿真工具的需求日益增长。特别是，后量子密码（PQC）的采用对网络端点的性能和传输开销有直接影响。这也影响了广泛采用的安全协议（如TLS和SSH）的可扩展性。在本文中，我们提出了一种面向吞吐量的分析模型，该模型为TLS和SSH中后量子安全连接建立的最大可持续速率提供了严格的上界。该模型同时考虑了端点和网络容量约束，将握手过程分解为主要的密码操作时间和网络传输时间。识别瓶颈使我们能够以每秒握手次数来推导可实现的吞吐量。提供的实验结果表明，该模型与使用NIST标准原语（包括FIPS 203、204和205中的ML-KEM和ML-DSA）的实验测试台获得的数据相比具有准确性。最后，我们将模型集成到网络环境中，并演示如何利用它在多个端点之间实现高效的资源分配，从而在多单播场景中优化PQC流量。
英文摘要
Growing awareness of the impact of quantum threat on classical cryptography directly translates into a growing demand for accurate network simulation tools capable of estimating the integration effects of quantum-safe cryptography in current systems. In particular, the adoption of Post-Quantum Cryptography (PQC) has a direct impact on the performance of network endpoints and transmission overhead. This also affects the scalability of widely adopted security protocols such as TLS and SSH. In this paper, we present a throughput-oriented analytical model that provides a tight upper bound on the maximum sustainable rate of post-quantum secure connection establishment in TLS and SSH. This model takes into account both endpoint and network capacity constraints, decomposing the handshake process into dominant cryptographic operation time and network transmission time. Identifying the bottleneck allows us to derive the achievable throughput in terms of handshakes per second. The experimental results provided show the accuracy of the model against the data obtained from an experimental testbed using, among others, NIST standard primitives from FIPS 203, 204, and 205, including ML-KEM and ML-DSA. Finally, we integrate our model into a network environment and demonstrate how it can be leveraged to enable efficient resource allocation among multiple endpoints, optimizing PQC traffic in multiple-unicast scenarios.
Comments13 pages. 8 figures
