Post-Quantum Cryptography for Secure Internet Communications: Emerging Algorithms and Deployment Considerations

Abstract

The rapid evolution of quantum computing presents an existential threat to contemporary cryptographic paradigms safeguarding modern Internet communications. Standard public-key cryptosystems, including RSA, Elliptic Curve Cryptography (ECC), and Diffie-Hellman key exchange, rely on the mathematical hardness of prime factorization and discrete logarithms— problems solvable in polynomial time using Shor’s quantum algorithm. In response to this looming vulnerability, the global cybersecurity community, spearheaded by the National Institute of Standards and Technology (NIST), has initiated a comprehensive paradigm shift toward Post-Quantum Cryptography (PQC). This review paper provides an in-depth, rigorous examination of emerging PQC algorithms and their real-world deployment considerations across transport-layer security (TLS), virtual private networks (VPNs), and enterprise Internet protocols. We evaluate the principal mathematical families standardized by NIST: Module Learning With Errors (MLWE/MLWR) constructs including CRYSTALS-Kyber (ML-KEM) for key encapsulation, CRYSTALS-Dilithium (ML-DSA) and FALCON (FN-DSA) for lattice-based digital signatures, and SPHINCS+ (SLH-DSA) for stateless hash-based signatures. Through a comprehensive synthesis of recent literature, empirical benchmarking, and architectural analyses, we highlight key performance tradeoffs across public key sizes, ciphertext overhead, signature verification latencies, and memory footprints. Furthermore, this paper investigates practical deployment challenges, such as network packet fragmentation, hybrid classical-quantum transition protocols, hardware accelerator constraints, and side-channel vulnerability mitigation. Finally, we map out future research directions necessary to achieve seamless, resilient quantum safety across modern network infrastructures.

KEYWORDS: Post-Quantum Cryptography, CRYSTALS-Kyber, CRYSTALS Dilithium, Lattice-Based Cryptography, Quantum Resistance, TLS 1.3, Key Encapsulation Mechanism, Network Security.