🤖 AI Summary
This study addresses the quantum computing threats facing SDN southbound APIs by developing a prototype system supporting post-quantum TLS and conducting the first systematic performance evaluation in both pure and hybrid modes. By quantifying the latency and CPU overhead of various post-quantum signature and key exchange schemes, this work identifies optimal algorithm combinations for deployment. The research fills a critical empirical gap regarding PQ-TLS implementation within SDN southbound interfaces, establishing essential performance benchmarks and providing a technical foundation for the quantum-resistant migration of software-defined networks. These findings offer actionable guidance for securing next-generation network infrastructures against emerging cryptographic vulnerabilities while maintaining operational efficiency in control plane communications.
📝 Abstract
Software-defined networking (SDN) is a novel networking paradigm that enables network programmability and centralized control for network devices. The southbound application programming interface (API) is used to control and manage the underlying data plane devices. The existing southbound API relies on TLS with legacy cryptographic algorithms such as RSA and ECDSA. In this paper, we explore the performance of the southbound API with postquantum TLS (PQ-TLS) support. We present a proof-of-concept of using PQ-TLS in SDN's southbound API. We study the performance of pure and hybrid PQ-TLS modes across different security levels and compare them with legacy TLS in terms of latency and CPU utilization. We also compare the performance of different post-quantum signature and key establishment schemes.