https://github.com/dhcgn/gopqexperiment
My Go PQ Experiment
https://github.com/dhcgn/gopqexperiment
cryptography csidh ed448 go golang hpke post-quantum
Last synced: 7 months ago
JSON representation
My Go PQ Experiment
- Host: GitHub
- URL: https://github.com/dhcgn/gopqexperiment
- Owner: dhcgn
- License: mit
- Created: 2021-04-16T17:11:45.000Z (about 4 years ago)
- Default Branch: main
- Last Pushed: 2023-05-11T20:41:32.000Z (about 2 years ago)
- Last Synced: 2024-06-20T00:33:35.071Z (12 months ago)
- Topics: cryptography, csidh, ed448, go, golang, hpke, post-quantum
- Language: Go
- Homepage:
- Size: 3.01 MB
- Stars: 3
- Watchers: 2
- Forks: 1
- Open Issues: 3
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# Go PQ Experiment
[](https://github.com/dhcgn/gopqexperiment/actions/workflows/go.yml)
[](https://github.com/dhcgn/gopqexperiment/actions/workflows/codeql-analysis.yml)
[](https://goreportcard.com/report/github.com/dhcgn/gopqexperiment)
Just an **experiment** repro to play around to archiv a post-quantum safe system.
Warning from the used modules: We recommend to take caution before using this library in a production application since part of its content is experimental.
In high security context the German Federal Office for Information Security recommend the use of hybrid systems.
## Idea
Use the Hybrid Public Key Encryption (HPKE) with AES and X448 in the mode authentication using both a pre-shared key (PSK) and an Asymmetric Key (mode_auth_psk) where the PSK is derived from a isogeny based drop-in replacement for Diffie–Hellman (cSIDH).
Provided one uses sufficiently large key sizes, the symmetric key cryptographic systems like AES are already resistant to attack by a quantum computer, but X448 would be broken with a sufficiently powerful quantum computer running Shor's algorithm.
With the combination of the proven Advanced Encryption Standard (AES) and the relatively new kind of elliptic-curve cryptography a hybrid system is created which is safe until both specification are broken.
### Relevant used cryptographic primitives and ciphers
1. Symmetric key cryptography
1. Authenticated Encryption with Associated Data (AEAD)
1. AES-256-GCM
2. Public-key cryptography
1. elliptic-curve cryptography (ECC)
1. commutative supersingular isogeny-based Diffie-Hellman key exchange algorithm (CSIDH)
2. X448 with HKDF-SHA512
3. One-way hash function
1. SHA-2
1. SHA-512
4. Key Derivation Functions (KDFs)
1. HKDF-SHA512
### Use Cases
- Trivial use case with HPKE for the purpose of demonstration
[main/cmd/simple_use_case_hpke_csidh](https://github.com/dhcgn/gopqexperiment/tree/main/cmd/simple_use_case_hpke_csidh)
- Trivial use case with HPKE und cSIDH for the purpose of demonstration
[main/cmd/simple_use_case_hpke](https://github.com/dhcgn/gopqexperiment/tree/main/cmd/simple_use_case_hpke)
### Drawback
Huge performance penalty when using hpke with csidh, 402.4 milliseconds vs 2.7 milliseconds overall duration with key generation.
```plain
goos: windows
goarch: amd64
pkg: github.com/dhcgn/gopqexperiment/cmd/simple_use_case_hpke
cpu: AMD Ryzen 7 PRO 4750U with Radeon Graphics
Benchmark_mainInternal-16 408 2708316 ns/op
Benchmark_GenerateKeyPair-16 5000 205432 ns/op
PASS
ok github.com/dhcgn/gopqexperiment/cmd/simple_use_case_hpke 2.584s
goos: windows
goarch: amd64
pkg: github.com/dhcgn/gopqexperiment/cmd/simple_use_case_hpke_csidh
cpu: AMD Ryzen 7 PRO 4750U with Radeon Graphics
Benchmark_mainInternal-16 3 402387067 ns/op
Benchmark_GenerateKeyPair-16 18 66902017 ns/op
PASS
ok github.com/dhcgn/gopqexperiment/cmd/simple_use_case_hpke_csidh 4.112s
```
## TODO
1. AEAD ciphertexts produced by HPKE do not hide the plaintext length to archiv a level of privacy a suitable padding mechanism must be used.
## Questions
1. Must result of `csidh.DeriveSecret` be hashed to avoid weak bytes?
1. Can commutative supersingular isogeny-based Diffie-Hellman key exchange algorithm (CSIDH) be used with static keys?
2. How to use Additional Authenticated Data, the info label and the identifier for the PSK?
## Links
- https://csidh.isogeny.org/
- https://github.com/cloudflare/circl
- https://www.ietf.org/archive/id/draft-irtf-cfrg-hpke-08.html