Post-Quantum Single Sign-On Solution
M.H.F.M Mahadi Hassan, Ravindu Nimsara, Rashmi Dharmawardhane, Vishwa Basnagoda, Kavinga Yapa Abeywardena, Deemantha Siriwardana · 2024
Quantum computers pose a significant threat to widely used public-key cryptosystems, endangering current authentication and authorization systems. This paper presents a post-quantum Single Sign-On (SSO) solution that integrates Post-Quantum Cryptography (PQC) algorithms, specifically ML-DSA and ML-KEM, for authentication and authorization. The proposed system demonstrates a 90% improvement in token generation speed post-migration from traditional cryptosystems and a 331% increase in key-storage speed when storing PQC keys using a novel vector database mechanism. Additionally, an enhanced risk-based authentication model is developed, achieving a 98% accuracy in detecting risky logins, surpassing existing models. These contributions offer a comprehensive, efficient, and secure SSO system resistant to quantum attacks, addressing the limitations of current systems that do not fully integrate PQC algorithms or optimized key storage solutions.