Systems and methods for post-quantum cryptography communications channels
Systems, apparatuses, methods, and computer program products are disclosed for PQC. An example method includes transmitting a first portion of an electronic communication to a client device over a non-PQC communications channel. The example method further includes transmitting a quantum cryptographic key to the client device over a quantum communications channel and authenticating a session with the client device over the non-PQC communications channel based on the quantum cryptographic key. Subsequently, the example method includes, in response to authentication of the session with the client device, transmitting a second portion of the electronic communication to the client device over a PQC communications channel. In some instances, the first portion of the electronic communication may comprise overhead data, and the second portion of the electronic communication may comprise payload data.
1. A system for post-quantum cryptography (PQC), the system comprising:
classical communications circuitry configured to
transmit a first portion of an electronic communication to a client device over a non-PQC communications channel;
quantum communications circuitry configured to
subsequent to the transmission of the first portion, transmit a quantum cryptographic key to the client device over a quantum communications channel;
cryptographic circuitry configured to
subsequent to the transmission of the quantum cryptographic key, authenticate a session with the client device over the non-PQC communications channel based on the quantum cryptographic key; and
PQC callback circuitry configured to
in response to authentication of the session with the client device, transmit a second portion of the electronic communication to the client device over a PQC communications channel.
2. The system of claim 1 , wherein the PQC communications channel is a PQC back channel.
3. The system of claim 2 , wherein the PQC back channel is a PQC out-of-band communications channel.
4. The system of claim 1 , wherein the first portion of the electronic communication comprises overhead data, and wherein the second portion of the electronic communication comprises payload data.
5. The system of claim 4 , wherein the electronic communication is a Society for Worldwide Interbank Financial Telecommunication (SWIFT) message, wherein the overhead data comprises SWIFT message overhead data, and wherein the payload data comprises SWIFT message payload data.
6. The system of claim 1 , wherein the first portion of the electronic communication comprises a cryptographic data attribute indicative of a symmetric cryptographic technique, and wherein the second portion of the electronic communication comprises a symmetric cryptographic key.
7. The system of claim 6 , wherein the symmetric cryptographic key is an Advanced Encryption Standard (AES) symmetric cryptographic key.
8. The system of claim 1 , wherein the quantum cryptographic key is a quantum key distribution (QKD) cryptographic key.
9. The system of claim 1 , wherein the cryptographic circuitry is configured to:
encrypt a third portion of the electronic communication based on the quantum cryptographic key,
wherein the second portion of the electronic communication is the encrypted third portion of the electronic communication.
10. The system of claim 1 , wherein the first portion of the electronic communication comprises a PQC indicator data structure that indicates that the quantum cryptographic key is to be transmitted over the quantum communications channel.
11. The system of claim 10 , wherein the first portion of the electronic communication comprises a Transport Layer Security (TLS) extension comprising the PQC indicator data structure.
12. The system of claim 10 , wherein the first portion of the electronic communication comprises a quantum flag value indicative of the PQC indicator data structure.
13. The system of claim 10 , wherein the first portion of the electronic communication comprises a link to a quantum electronic agreement comprising the PQC indicator data structure.
14. The system of claim 1 , wherein the first portion of the electronic communication comprises a PQC indicator data structure that indicates that the second portion of the electronic communication is to be transmitted over the PQC communications channel.
15. The system of claim 14 , wherein the PQC indicator data structure comprises a link to the second portion of the electronic communication.
16. The system of claim 14 , wherein the first portion of the electronic communication comprises a Transport Layer Security (TLS) extension comprising the PQC indicator data structure.
17. The system of claim 1 , wherein the PQC callback circuitry is configured to:
generate the PQC communications channel based on a set of data attributes about the electronic communication, a risk profile data structure indicative of a vulnerability of the electronic communication in a PQC data environment, and PQC performance information associated with a set of PQC cryptographic techniques, wherein the PQC performance information comprises a set of PQC performance attributes for each PQC cryptographic technique in the set of PQC cryptographic techniques.
18. The system of claim 17 , wherein the PQC callback circuitry is configured to:
generate the PQC communications channel based on a machine learning technique.
19. A method for post-quantum cryptography (PQC), the method comprising:
transmitting, by classical communications circuitry, a first portion of an electronic communication to a client device over a non-PQC communications channel;
subsequent to the transmission of the first portion, transmitting, by quantum communications circuitry, a quantum cryptographic key to the client device over a quantum communications channel;
subsequent to the transmission of the quantum cryptographic key, authenticating, by cryptographic circuitry, a session with the client device over the non-PQC communications channel based on the quantum cryptographic key; and
in response to authentication of the session with the client device, transmitting, by PQC callback circuitry, a second portion of the electronic communication to the client device over a PQC communications channel.
20. A computer program product for post-quantum cryptography (PQC), the computer program product comprising at least one non-transitory computer-readable storage medium storing program instructions that, when executed, cause a system to:
transmit a first portion of an electronic communication to a client device over a non-PQC communications channel;
subsequent to the transmission of the first portion, transmit a quantum cryptographic key to the client device over a quantum communications channel;
subsequent to the transmission of the quantum cryptographic key, authenticate a session with the client device over the non-PQC communications channel based on the quantum cryptographic key; and
in response to authentication of the session with the client device, transmit a second portion of the electronic communication to the client device over a PQC communications channel.