Development of an improved SSL/TLS protocol using post-quantum algorithms

Abstract

The development of Internet technologies together with mobile and computer technologies have formed smart technologies that allow the formation of both cyber-physical and socio-cyber-physical systems. The basis of smart technologies is the integration of wireless channel standards with mobile and computer protocols. 4G/5G technologies are integrated with various web platforms, taking into account the digitalization of services in cyberspace. But the SSL/TLS protocol, based on the hybridization of symmetric encryption algorithms with hashing algorithms (AEAD mode), which is supposed to provide security services, is vulnerable to “Meet in the middle”, POODLE, BEAST, CRIME, BREACH attacks. In addition, with the advent of a full-scale quantum computer, symmetric and asymmetric cryptography algorithms that provide security services can also be hacked. To increase the level of security, an improved protocol based on post-quantum algorithms – crypto-code constructions is proposed, which will ensure not only resistance to current attacks, but also stability in the post-quantum period. To ensure the “hybridity” of services, it is proposed to use the McEliece and Niederreiter crypto-code constructions (confidentiality and integrity are ensured) and the improved UMAC algorithm on the McEliece crypto-code construction. Taking into account the level of “secrecy” of information, it is suggested to use various combinations of crypto-code constructions on different algebraic geometric and/or flawed codes. The use of crypto-code constructions not only provides resistance to attacks, but also simplifies the formation of a connection – the parameters of elliptic curves are used to transmit a common key. This approach significantly reduces the connection time of mobile gadgets and simplifies the procedure of agreement before data transfer

Development of the sociocyberphysical systems` multi-contour security methodology

“…The research hypothesis was as follows. To provide security services in socio-cyberphysical systems (critical infrastructure objects), it is proposed to use post-quantum crypto-algorithms based on McEliece's crypto-code constructions [1][2][3][27][28][29][30][31][32][33]. The use of various noise-resistant codes makes it possible to ensure the required characteristics of both standard channels of information and communication systems and networks, and smart technology channels (wireless channels), as well as the transmission of various contexts (files, video, sound, etc.)…”

“…[34][35][36][37][38][39]. In addition, the research carried out [1][2][3][27][28][29][30][31][32][33][34][35][36][37][38][39] makes it possible to use various algebrogeometric codes, LDPC codes with defective codes, which makes it possible to build hybrid crypto-code constructions and provide the required efficiency and strength of confidential cryptography. The initial data for constructing such structures is the required parameters of durability and efficiency of transmitted information.…”

“…To ensure authenticity, the work proposes to use a modified UMAC algorithm on crypto-code constructions; the block diagram is shown in Fig. 3 [32].…”

“…In addition, it is proposed to use a modified SSL/TLS protocol on post-quantum algorithms. The protocol is proposed to use the synthesis of McEliece crypto-code constructions with the UMAC algorithm, in which the substrate is formed on the basis of the CCC [32]. The block diagram of the modified protocol is shown in Fig.…”