Redundant multipath PQC key exchange using Shamir's Secret Sharing
Ronny Döring, Marc Geitz · 2024
This paper proposes and evaluates multiple imple-mentations designed to fortify the security and resilience of a key exchange platform. Leveraging Shamir's Secret Sharing tech-nique, the system generates N sub-messages transmitted through disjoint network paths, preventing classical and quantum-enabled adversaries from reconstructing the original message without access to the requisite K sub-messages. Additionally, the inte-gration of Post-Quantum Cryptography, both before and after applying Shamir's Secret Sharing, employing Key Encapsulation Mechanisms for message encryption and signature algorithms for authentication, bolsters the platform's resilience against attacks on multiple networks. Successful attacks on either the Post-Quantum Cryptography or Shamir's Secret Sharing components in our implementation would not compromise the overall system security due to the two-factor approach. Experimental results demonstrate the effectiveness of the implemented system, achieving proficient key exchange rates under typical network traffic loads.