A hybrid approach to address the transition to quantum-resistant cryptography in telecommunication environments

The existence of a cryptographically relevant quantum computer threatens the widely used classical cryptosystems such as RSA, DSA, ECDH and ECDSA. In order to communicate securely when those types of quantum computers exist, it is necessary to use quantum-resistant cryptography, which includes quantum and post-quantum cryptography. However, classical cryptography is so embedded in our current technology that the transition to purely quantum-resistant cryptography is a highly complex task. A hybrid approach among classical, quantum and post-quantum cryptography is the safest way to face this challenge. In this paper, we describe our hybrid approach to secure the communications in a telecommunications environment. Concretely, we propose a hybridization module that can be easily integrated in telecommunication architectures. It will provide a symmetric quantum-resistant key to and agent that will establish a quantum-secure IPsec tunnel between endpoints. The security is based on quantum and post-quantum protocols, providing the IPsec tunnel with a double quantum-resistant security shell.