Post-Quantum Cryptography on Constrained Networks: A Comparison of Algorithm Performance at Low Bandwidths

This project investigates IKEv2's post-quantum performance on constrained networks. Using strongSwan Docker containers, network constraints were controlled to analyze IKEv2's post-quantum performance under various network conditions. A performance baseline was gathered using the non-post-quantum algorithm RSA as a control to compare against the CRYSTALS-Kyber, Frodo, Bike, and HQC post-quantum algorithms. Although RSA is not a viable option for ensuring post-quantum security, its performance was used as a control to show the performance difference on constrained networks of a widely-used traditional cryptographic algorithm versus the measured performance of the post-quantum algorithms tested. Data was collected at determined network constraint settings, and this collected data is presented as a basis for further research into the post-quantum performance of IKEv2 on constrained networks.