Research Projects

Realization of a large quantum computer has a constructive effect in many different domains. However, probably its most harmful effect is in the field of digital security. A quantum computer can upend the security assurances of our current most widely used security primitives, especially public-key cryptography (PKC) primitives. Therefore, we have to replace our existing PKC with quantum resistant cryptographic primitives or post-quantum cryptography (PQC). A landmark event in this transition to PQC is the recently A landmark event in this transition from classical to PQC is the recently concluded (with one additional follow-up) PQC standardization process by the National Institute of Standards and Technology (NIST). However, there are many practical issues such as integrating PQC in resource constrained devices, protecting PQC from various potent physical attacks, integrating PQC to existing security protocols, etc., which must be addressed before PQC can be suitable for widespread deployment. In this proposal we will focus on those issues. My work addresses multiple problems across the broad spectrum of design to deployment of PQC. Currently, small devices such as microcontrollers, sensor nodes, IoT devices, etc generate and process a large chunk of our data, and it is expected to grow even more in the future. Due to their very limited resources, it is not trivial to equip these devices with strong security protocols. As it is almost impossible to secure the future digital world without securing these small devices, a major portion of my work will be dedicated towards design and implementation of lightweight PQC suitable for these devices. In a real-world deployment of any cryptographic protocol, the physical security is the device is very crucial. Depending on the attack surfaces, assumptions, and methodology physical attacks can be categorized into three ways i)Side-channel, ii)Fault-injection, and iii) Micro-architectural, attacks. In this work, I will focus on micro-architectural attack based physical attacks as those have been largely ignored in the context of PQC. I will also develop combined countermeasure techniques that are effective against different physical attacks such as side-channel, fault-injection, and micro-architectural attacks. It is important to integrate PQC primitives into existing security protocols for a seamless transition. Therefore, I will also work towards designing hybrid cryptographic primitives (classical+PQC) and integrating PQC primitives in real-world security protocols such as transport layer security which is the backbone of security of our current internet. PQC is crucial for securing our digital future. Many aspects of PQC are still unknown. This research will be able to answer many questions related to it and quell the skepticisms about its security and real-world usefulness. Overall, this project will contribute towards the maturity of PQC and bring it closer to reality.