Post-Quantum Cryptographic Analysis of Message Transformations Across the Network Stack
2026-04-09 • Cryptography and Security
Cryptography and SecurityNetworking and Internet Architecture
AI summaryⓘ
The authors looked at how messages sent over wireless networks get protected by multiple layers, each using its own encryption methods, which may be vulnerable to future quantum computers. They created a way to analyze how these different layers' security risks combine to affect overall safety when quantum attacks become possible. Their work shows that for keeping messages secret, only one layer needs to be quantum-safe, but for verifying message authenticity, all layers must be updated. They tested their framework on common wireless setups and found some unexpected results about which configurations offer better quantum resistance.
post-quantum cryptographywireless network securityencryptionauthenticationprotocol stackWPA2WPA3confidentialitymetadata protectionquantum vulnerability
Authors
Ashish Kundu, Vishal Chakraborty, Ramana Kompella
Abstract
When a user sends a message over a wireless network, the message does not travel as-is. It is encrypted, authenticated, encapsulated, and transformed as it descends the protocol stack from the application layer to the physical medium. Each layer may apply its own cryptographic operations using its own algorithms, and these algorithms differ in their vulnerability to quantum computers. The security of the overall communication depends not on any single layer but on the \emph{composition} of transformations across all layers. We develop a preliminary formal framework for analyzing these cross-layer cryptographic transformations with respect to post-quantum cryptographic (PQC) readiness. We classify every per-layer cryptographic operation into one of four quantum vulnerability categories, define how per-layer PQC statuses compose across the full message transformation chain, and prove that this composition forms a bounded lattice with confidentiality composing via the join (max) operator and authentication via the meet (min). We apply the framework to five communication scenarios spanning Linux and iOS platforms, and identify several research challenges. Among our findings: WPA2-Personal provides strictly better PQC posture than both WPA3-Personal and WPA2-Enterprise; a single post-quantum layer suffices for payload confidentiality but \emph{every} layer must migrate for complete authentication; and metadata protection depends solely on the outermost layer.