🤖 AI Summary
This work addresses the vulnerability of traditional Noise protocols to quantum attacks by integrating NIST-standardized ML-KEM with classical ECDH within the Noise framework. It presents the first unified implementation supporting all 57 classical, 13 post-quantum, and every hybrid handshake pattern defined in the specification. Implemented in C++23, the resulting protocol stack achieves forward secrecy and high configurability while imposing minimal overhead under normal network conditions and maintaining robustness in adverse environments. The design significantly enhances resistance to quantum threats and demonstrates the practicality and deployability of post-quantum cryptography in hybrid Noise handshakes.
📝 Abstract
The threat of quantum computers to classical public-key cryptography has created an urgent need to evolve secure communication protocols with post-quantum cryptographic (PQC) primitives. The Noise Protocol Framework, widely used in systems such as WireGuard and WhatsApp, traditionally relies on the Elliptic Curve Diffie-Hellman (ECDH) public-key exchange scheme, which is vulnerable to quantum threats. In this paper, we present NoisePQC++, a unified C++23 implementation of the Noise Protocol framework augmented with post-quantum Key Encapsulation Mechanisms and Hybrid Forward Secrecy. Our design integrates the National Institute of Standards and Technology (NIST) standardized ML-KEM algorithm alongside classical ECDH, enabling full PQC, hybrid ECDH+PQC handshakes, and unified support for all 57 classical Noise handshake pattern variants, 13 post-quantum Noise handshakes, and their hybrid variants. Compared with prior work, NoisePQC++ offers broader protocol coverage, more complete implementation support, and greater flexibility. Our evaluation shows minimal overhead under normal network conditions and acceptable overhead in adverse cases, while significantly improving resistance against quantum adversaries. These results indicate that NIST-standardized post-quantum and hybrid Noise handshakes are practical and provide a credible basis for future deployment.