Quantum-Safe Web Service Architecture Using Time-Based One-Time Passwords
本文探讨了基于后量子密码学的传输层安全管理和HMAC驱动的一次性时间密码，以构建抗量子的安全Web服务架构，并评估了几种哈希算法的计算性能。
0 citationsRead paper
Selected work
Representative Papers
Key Encapsulation Mechanism-Based Integrated Encryption Scheme (KEM-IES)
This work addresses the threat posed by quantum computing to traditional Elliptic Curve Integrated Encryption Scheme (ECIES) by proposing KEM-IES, a novel post-quantum secure integrated encryption scheme. KEM-IES uniquely integrates the NIST 2025-standardized lightweight authenticated encryption algorithm Ascon with a post-quantum key encapsulation mechanism (PQC-KEM), establishing an encryption architecture that achieves both quantum resistance and high efficiency. Built upon the ECIES framework, the scheme is implemented and optimized on the Raspberry Pi 4 embedded platform. Experimental results demonstrate that KEM-IES and its Ascon-based variant significantly outperform conventional ECIES in performance while maintaining strong security guarantees, making them particularly well-suited for resource-constrained environments.
0 citationsRead paper
Comparison of Credential Management Systems Based on the Standards of IEEE, ETSI, and YD/T 3957-2021
This study addresses the interoperability challenges in V2X networks caused by the mutual incompatibility among IEEE, ETSI, and the Chinese national standard YD/T 3957-2021 for certificate management. For the first time, an end-to-end protocol stack implementing all three standards is realized on a unified experimental platform, supporting both international cryptographic algorithms (NIST P-256, SHA-256, AES-128) and Chinese national algorithms (SM2/SM3/SM4). The work systematically compares these standards in terms of certificate format, signature structure, and request procedures, and empirically evaluates the latency and resource overhead of message signing and verification. The results demonstrate the feasibility of deploying SM2/SM3/SM4 in V2X scenarios, providing critical empirical evidence for the development of a secure, multi-standard-compliant certificate management system.
0 citationsRead paper
Implementation Challenges in Quantum Key Distribution
This study addresses the practical challenges of deploying quantum key distribution (QKD) on real quantum hardware by systematically implementing the BB84 and E91 protocols on the IBM Quantum platform. The work introduces an innovative approach using SX gates to efficiently generate uniform superposition states, leveraging quantum entanglement and superposition to ensure key security. Experimental validation is performed through metrics including quantum bit error rate, Shannon entropy, and independent and identically distributed (IID) assumptions, demonstrating the feasibility and eavesdropping resistance of both protocols on current noisy intermediate-scale quantum devices. The results provide empirical support and technical insights for the practical realization of QKD in real-world quantum systems.
0 citationsRead paper
Deterministic Random Bit Generators Based on Ascon for Embedded Systems
Addressing the challenge of balancing security and efficiency in deterministic random bit generators (DRBGs) for resource-constrained embedded systems, this paper proposes—based on the NIST lightweight cryptographic standard Ascon—the first systematic family of Ascon-driven DRBG constructions: Ascon-Hash, Ascon-HMAC, and Ascon-CTR. These designs deeply integrate Ascon’s native structure while fully complying with NIST SP 800-90A requirements, achieving substantial reductions in computational overhead and memory footprint. Experimental evaluation on Raspberry Pi demonstrates that the proposed DRBGs achieve 23–37% higher average throughput and reduce RAM usage by 41–58% compared to state-of-the-art lightweight DRBGs (e.g., ChaCha20-DRBG, AES-CTR-DRBG). This work bridges a critical gap in Ascon’s applicability, establishing a new paradigm for efficient, secure, and standards-compliant random number generation tailored to low-power cryptographic hardware.
0 citationsRead paper
Recent publications
Latest Papers
Quantum-Safe Web Service Architecture Using Time-Based One-Time Passwords
本文探讨了基于后量子密码学的传输层安全管理和HMAC驱动的一次性时间密码，以构建抗量子的安全Web服务架构，并评估了几种哈希算法的计算性能。
0 citationsRead paper
Key Encapsulation Mechanism-Based Integrated Encryption Scheme (KEM-IES)
This work addresses the threat posed by quantum computing to traditional Elliptic Curve Integrated Encryption Scheme (ECIES) by proposing KEM-IES, a novel post-quantum secure integrated encryption scheme. KEM-IES uniquely integrates the NIST 2025-standardized lightweight authenticated encryption algorithm Ascon with a post-quantum key encapsulation mechanism (PQC-KEM), establishing an encryption architecture that achieves both quantum resistance and high efficiency. Built upon the ECIES framework, the scheme is implemented and optimized on the Raspberry Pi 4 embedded platform. Experimental results demonstrate that KEM-IES and its Ascon-based variant significantly outperform conventional ECIES in performance while maintaining strong security guarantees, making them particularly well-suited for resource-constrained environments.
0 citationsRead paper
Comparison of Credential Management Systems Based on the Standards of IEEE, ETSI, and YD/T 3957-2021
This study addresses the interoperability challenges in V2X networks caused by the mutual incompatibility among IEEE, ETSI, and the Chinese national standard YD/T 3957-2021 for certificate management. For the first time, an end-to-end protocol stack implementing all three standards is realized on a unified experimental platform, supporting both international cryptographic algorithms (NIST P-256, SHA-256, AES-128) and Chinese national algorithms (SM2/SM3/SM4). The work systematically compares these standards in terms of certificate format, signature structure, and request procedures, and empirically evaluates the latency and resource overhead of message signing and verification. The results demonstrate the feasibility of deploying SM2/SM3/SM4 in V2X scenarios, providing critical empirical evidence for the development of a secure, multi-standard-compliant certificate management system.
0 citationsRead paper
Implementation Challenges in Quantum Key Distribution
This study addresses the practical challenges of deploying quantum key distribution (QKD) on real quantum hardware by systematically implementing the BB84 and E91 protocols on the IBM Quantum platform. The work introduces an innovative approach using SX gates to efficiently generate uniform superposition states, leveraging quantum entanglement and superposition to ensure key security. Experimental validation is performed through metrics including quantum bit error rate, Shannon entropy, and independent and identically distributed (IID) assumptions, demonstrating the feasibility and eavesdropping resistance of both protocols on current noisy intermediate-scale quantum devices. The results provide empirical support and technical insights for the practical realization of QKD in real-world quantum systems.
0 citationsRead paper
Deterministic Random Bit Generators Based on Ascon for Embedded Systems
Addressing the challenge of balancing security and efficiency in deterministic random bit generators (DRBGs) for resource-constrained embedded systems, this paper proposes—based on the NIST lightweight cryptographic standard Ascon—the first systematic family of Ascon-driven DRBG constructions: Ascon-Hash, Ascon-HMAC, and Ascon-CTR. These designs deeply integrate Ascon’s native structure while fully complying with NIST SP 800-90A requirements, achieving substantial reductions in computational overhead and memory footprint. Experimental evaluation on Raspberry Pi demonstrates that the proposed DRBGs achieve 23–37% higher average throughput and reduce RAM usage by 41–58% compared to state-of-the-art lightweight DRBGs (e.g., ChaCha20-DRBG, AES-CTR-DRBG). This work bridges a critical gap in Ascon’s applicability, establishing a new paradigm for efficient, secure, and standards-compliant random number generation tailored to low-power cryptographic hardware.
0 citationsRead paper