Efficient and Quantum-safe Internet Key Exchange Protocols for Satellite Communications
This work addresses the need for secure and efficient key exchange in satellite communications, a domain with unique constraints, but the approach is incremental as it adapts existing IKE protocols.
The paper proposes and evaluates quantum-resistant and efficient variants of the Internet Key Exchange (IKE) protocol tailored for satellite communications, addressing resource constraints and long latency. Experimental results demonstrate that the proposed hybrid and post-quantum variants achieve feasible performance for satellite terminals.
This paper studies cryptographic key exchange in satellite communications, which requires specific solutions because the satellite context presents unique challenges, particularly concerning onboard resource constraints and long transmission latency. We address these challenges by considering the Internet Key Exchange (IKE) protocol, which is widely used in terrestrial networks, and studying its applicability in the satellite context. This requires addressing two main issues: i) its efficiency in terms of the resources and bandwidth required to adapt to satellite terminals, and ii) its resistance even to attackers equipped with a quantum computer, in order to resist obsolescence and defend against harvest-now-decrypt-later attacks. We study these aspects from both a design and experimental point of view, defining and assessing some protocol variants characterized by low complexity and quantum resistance. To address the need to manage the transition from classic cryptographic primitives to post-quantum ones, we also consider the possibility of using hybrid cryptographic solutions that combine them both.