Performance Evaluation of Quantum-Resistant IKEv2 Protocol for Satellite Networking Environments

With the introduction of post-quantum cryptography (PQC) algorithms, there are ongoing efforts to not only standardize the proposed solutions but also consider integrating them into existing network applications and evaluating their performance. This evaluation is especially critical for security-sensitive applications such as satellite communications, where network limitations such as high packet loss and propagation delay pose unique challenges. In this paper, we consider the integration of PQC with one of the widely used security protocols, namely IPSec, by focusing on its key exchange protocol IKEv2. Specifically, we evaluate how PQ key exchange and digital signatures impact the latency compared to existing classical crypto solutions. We demonstrate through simulation how such integration triggers fragmentation that needs to be handled by IKEv2 and quantify the performance overhead due to packet loss or delaying of such fragments when used under satellite networking applications. The results indicate that while higher packet losses pose significant overheads that may hinder the adoption of PQ-based IPSec solutions, this may be subsidized when propagation delays are much higher in satellite networks.