{"id":"https://openalex.org/W7214033261","doi":"https://doi.org/10.5281/zenodo.22898171","title":"Hardware Acceleration, Handshake Latency, and Memory Overhead of Post-Quantum Cryptography (PQC) in TLS 1.3: An Empirical Benchmark of NIST FIPS 203 (ML-KEM / Kyber) and FIPS 204 (ML-DSA / Dilithium) Across x86 AVX-512, ARM NEON, and RISC-V Architectures","display_name":"Hardware Acceleration, Handshake Latency, and Memory Overhead of Post-Quantum Cryptography (PQC) in TLS 1.3: An Empirical Benchmark of NIST FIPS 203 (ML-KEM / Kyber) and FIPS 204 (ML-DSA / Dilithium) Across x86 AVX-512, ARM NEON, and RISC-V Architectures","publication_year":2026,"publication_date":"2026-09-22","ids":{"openalex":"https://openalex.org/W7214033261","doi":"https://doi.org/10.5281/zenodo.22898171"},"language":"en","primary_location":{"id":"doi:10.5281/zenodo.22898171","doi":"https://doi.org/10.5281/zenodo.22898171","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.22898171","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article-journal"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.5281/zenodo.22898171","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5152330739","display_name":"Kartik Kothalkar","orcid":"https://orcid.org/0009-0001-7378-5000","observed_orcids":["https://orcid.org/0009-0001-7378-5000"]},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Kothalkar, Kartik","raw_affiliation_strings":["Independent Cryptographic Engineering & Computer Systems Researcher, Maharashtra, India"],"raw_orcid":"https://orcid.org/0009-0001-7378-5000","affiliations":[{"raw_affiliation_string":"Independent Cryptographic Engineering & Computer Systems Researcher, Maharashtra, India","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":["https://openalex.org/A5152330739"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.66833629,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11693","display_name":"Cryptography and Residue Arithmetic","score":0.5547000169754028,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11693","display_name":"Cryptography and Residue Arithmetic","score":0.5547000169754028,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.20149999856948853,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.16699999570846558,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/post-quantum-cryptography","display_name":"post-quantum cryptography","score":0.996999979019165},{"id":"https://openalex.org/keywords/tls-1-3","display_name":"TLS 1.3","score":0.9639999866485596},{"id":"https://openalex.org/keywords/ml-kem","display_name":"ML-KEM","score":0.6460000276565552},{"id":"https://openalex.org/keywords/kyber","display_name":"Kyber","score":0.7400000095367432},{"id":"https://openalex.org/keywords/ml-dsa","display_name":"ML-DSA","score":0.9490000009536743},{"id":"https://openalex.org/keywords/dilithium","display_name":"Dilithium","score":0.9980000257492065},{"id":"https://openalex.org/keywords/handshake-latency","display_name":"handshake latency","score":0.7689999938011169},{"id":"https://openalex.org/keywords/hardware-acceleration","display_name":"hardware acceleration","score":0.6809999942779541},{"id":"https://openalex.org/keywords/simd-vectorization","display_name":"SIMD vectorization","score":0.9480000138282776},{"id":"https://openalex.org/keywords/number-theoretic-transform","display_name":"number theoretic transform","score":0.8299999833106995},{"id":"https://openalex.org/keywords/barrett-reduction","display_name":"Barrett reduction","score":0.6919999718666077},{"id":"https://openalex.org/keywords/packet-loss","display_name":"packet loss","score":0.40700000524520874},{"id":"https://openalex.org/keywords/arm-neon","display_name":"ARM NEON","score":0.9879999756813049}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8069999814033508},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.5358999967575073},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.4472000002861023},{"id":"https://openalex.org/C167615521","wikidata":"https://www.wikidata.org/wiki/Q1048911","display_name":"Elliptic curve cryptography","level":4,"score":0.4381999969482422},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.42820000648498535},{"id":"https://openalex.org/C6295992","wikidata":"https://www.wikidata.org/wiki/Q976521","display_name":"Cryptosystem","level":3,"score":0.4269999861717224},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.42640000581741333},{"id":"https://openalex.org/C94520183","wikidata":"https://www.wikidata.org/wiki/Q190746","display_name":"Advanced Encryption Standard","level":3,"score":0.41290000081062317},{"id":"https://openalex.org/C148176105","wikidata":"https://www.wikidata.org/wiki/Q206494","display_name":"Transport Layer Security","level":3,"score":0.41179999709129333},{"id":"https://openalex.org/C197966572","wikidata":"https://www.wikidata.org/wiki/Q915079","display_name":"Elliptic Curve Digital Signature Algorithm","level":5,"score":0.4002000093460083},{"id":"https://openalex.org/C150552126","wikidata":"https://www.wikidata.org/wiki/Q339387","display_name":"SIMD","level":2,"score":0.3878999948501587},{"id":"https://openalex.org/C203062551","wikidata":"https://www.wikidata.org/wiki/Q201339","display_name":"Public-key cryptography","level":3,"score":0.3783999979496002},{"id":"https://openalex.org/C2781198647","wikidata":"https://www.wikidata.org/wiki/Q1633673","display_name":"Datapath","level":2,"score":0.37779998779296875},{"id":"https://openalex.org/C65302260","wikidata":"https://www.wikidata.org/wiki/Q327675","display_name":"Symmetric-key algorithm","level":4,"score":0.37389999628067017},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.35989999771118164},{"id":"https://openalex.org/C86111242","wikidata":"https://www.wikidata.org/wiki/Q859595","display_name":"Coprocessor","level":2,"score":0.3598000109195709},{"id":"https://openalex.org/C99138194","wikidata":"https://www.wikidata.org/wiki/Q183427","display_name":"Hash function","level":2,"score":0.3264999985694885},{"id":"https://openalex.org/C2780221543","wikidata":"https://www.wikidata.org/wiki/Q4681865","display_name":"Cipher","level":3,"score":0.3221000134944916},{"id":"https://openalex.org/C109154458","wikidata":"https://www.wikidata.org/wiki/Q846955","display_name":"RC4","level":4,"score":0.3192000091075897},{"id":"https://openalex.org/C99674996","wikidata":"https://www.wikidata.org/wiki/Q1414155","display_name":"Key exchange","level":4,"score":0.3118000030517578},{"id":"https://openalex.org/C170723468","wikidata":"https://www.wikidata.org/wiki/Q182933","display_name":"x86","level":3,"score":0.3100000023841858},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.3082999885082245},{"id":"https://openalex.org/C2778000800","wikidata":"https://www.wikidata.org/wiki/Q830043","display_name":"Handshake","level":3,"score":0.3061000108718872},{"id":"https://openalex.org/C93974786","wikidata":"https://www.wikidata.org/wiki/Q1589480","display_name":"Ciphertext","level":3,"score":0.30070000886917114},{"id":"https://openalex.org/C118463975","wikidata":"https://www.wikidata.org/wiki/Q220849","display_name":"Digital signature","level":3,"score":0.2962999939918518},{"id":"https://openalex.org/C144240696","wikidata":"https://www.wikidata.org/wiki/Q367204","display_name":"Address space","level":2,"score":0.2962000072002411},{"id":"https://openalex.org/C9390403","wikidata":"https://www.wikidata.org/wiki/Q3966","display_name":"Computer hardware","level":1,"score":0.29339998960494995},{"id":"https://openalex.org/C74366991","wikidata":"https://www.wikidata.org/wiki/Q2755335","display_name":"Network processor","level":3,"score":0.28519999980926514},{"id":"https://openalex.org/C202491316","wikidata":"https://www.wikidata.org/wiki/Q272683","display_name":"Instruction set","level":2,"score":0.28119999170303345},{"id":"https://openalex.org/C142962650","wikidata":"https://www.wikidata.org/wiki/Q240838","display_name":"Reconfigurable computing","level":3,"score":0.2793999910354614},{"id":"https://openalex.org/C181149355","wikidata":"https://www.wikidata.org/wiki/Q897511","display_name":"Cryptanalysis","level":3,"score":0.26339998841285706},{"id":"https://openalex.org/C28420585","wikidata":"https://www.wikidata.org/wiki/Q2665075","display_name":"Timing attack","level":4,"score":0.2605000138282776},{"id":"https://openalex.org/C92717368","wikidata":"https://www.wikidata.org/wiki/Q1162538","display_name":"Plaintext","level":3,"score":0.2587999999523163},{"id":"https://openalex.org/C204679922","wikidata":"https://www.wikidata.org/wiki/Q734252","display_name":"Deep packet inspection","level":3,"score":0.25699999928474426},{"id":"https://openalex.org/C33884865","wikidata":"https://www.wikidata.org/wiki/Q1254335","display_name":"Cryptographic protocol","level":3,"score":0.25589999556541443}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.5281/zenodo.22898171","doi":"https://doi.org/10.5281/zenodo.22898171","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.22898171","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article-journal"},{"id":"doi:10.5281/zenodo.22898172","doi":"https://doi.org/10.5281/zenodo.22898172","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.22898172","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article-journal"}],"best_oa_location":{"id":"doi:10.5281/zenodo.22898171","doi":"https://doi.org/10.5281/zenodo.22898171","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.22898171","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article-journal"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W7108475244","https://openalex.org/W4389109055","https://openalex.org/W4308067407","https://openalex.org/W7153131256","https://openalex.org/W4416505916","https://openalex.org/W7223147673","https://openalex.org/W4402278462","https://openalex.org/W4312840416","https://openalex.org/W3108806794","https://openalex.org/W4361194061"],"abstract_inverted_index":{"The":[0,293,325],"impending":[1],"realization":[2],"of":[3,14,81,176,211,303,329],"cryptanalytically":[4],"relevant":[5],"quantum":[6,68],"computers":[7],"(CRQCs)":[8],"threatens":[9],"the":[10,78,212,334],"foundational":[11],"security":[12],"architecture":[13],"global":[15,441],"digital":[16],"communications.":[17],"Shor's":[18],"algorithm":[19],"provides":[20],"a":[21,168,253,260,267,407],"polynomial-time":[22],"mechanism":[23],"to":[24,62,73,117,274,283,364,436,443],"solve":[25],"prime":[26],"factorization":[27],"and":[28,40,83,103,141,147,172,178,201,227,237,266,336,418,434,439],"discrete":[29],"logarithms,":[30],"rendering":[31],"classical":[32],"public-key":[33],"cryptography\u2014specifically":[34],"RSA,":[35],"Elliptic":[36],"Curve":[37],"Diffie-Hellman":[38],"(ECDH),":[39],"ECDSA\u2014completely":[41],"vulnerable.":[42],"Furthermore,":[43],"adversarial":[44],"\"Store":[45],"Now,":[46],"Decrypt":[47],"Later\"":[48],"(SNDL)":[49],"espionage":[50],"campaigns":[51],"are":[52],"actively":[53],"archiving":[54],"encrypted":[55],"Transport":[56],"Layer":[57],"Security":[58],"(TLS)":[59],"network":[60,149,173],"traffic":[61],"decrypt":[63],"it":[64],"retrospectively":[65],"once":[66],"fault-tolerant":[67],"hardware":[69],"matures.":[70],"In":[71],"response":[72],"this":[74,165,352],"urgent":[75],"existential":[76],"risk,":[77],"National":[79],"Institute":[80],"Standards":[82],"Technology":[84],"(NIST)":[85],"finalized":[86],"its":[87],"principal":[88],"post-quantum":[89,118,444],"cryptographic":[90,304],"standards":[91],"in":[92,410],"August":[93],"2024:":[94],"FIPS":[95,104],"203":[96],"(ML-KEM":[97],"/":[98,107],"Module-Lattice":[99,108],"Key":[100],"Encapsulation":[101],"Mechanism)":[102],"204":[105],"(ML-DSA":[106],"Digital":[109],"Signature":[110],"Algorithm).":[111],"However,":[112],"transitioning":[113],"production":[114],"internet":[115,445],"services":[116],"TLS":[119,182,289],"1.3":[120,183,290],"introduces":[121],"severe":[122],"engineering":[123],"bottlenecks":[124],"governed":[125],"by":[126,359],"polynomial":[127],"arithmetic":[128],"overhead":[129],"over":[130],"high-degree":[131],"rings":[132],"R_q":[133],"=":[134],"Z_q[X]/(X^256":[135],"+":[136],"1),":[137],"substantial":[138],"public":[139],"key":[140,281,296],"signature":[142,327],"sizes,":[143],"L1/L2":[144],"cache":[145],"thrashing,":[146],"wide-area":[148],"(WAN)":[150],"packet":[151,230,238,350],"fragmentation":[152,231],"across":[153,185,339,379],"standard":[154,294],"Ethernet":[155,341],"Maximum":[156],"Transmission":[157],"Units":[158],"(MTUs).":[159],"To":[160],"resolve":[161],"these":[162],"architectural":[163],"uncertainties,":[164],"paper":[166],"presents":[167],"comprehensive,":[169],"empirical":[170,242],"microarchitectural":[171],"benchmarking":[174],"evaluation":[175],"ML-KEM-768":[177,280],"ML-DSA-65":[179,330],"integrated":[180],"within":[181,312],"handshakes":[184],"three":[186],"heterogeneous":[187],"processor":[188],"instruction":[189],"set":[190],"architectures":[191],"(ISAs):":[192],"Intel":[193],"x86-64":[194],"Xeon":[195],"(AVX-512),":[196],"ARMv8/v9":[197],"Neoverse":[198],"V2":[199],"(NEON),":[200],"SiFive":[202],"RISC-V":[203,271],"(RVV":[204],"1.0).":[205],"We":[206],"systematically":[207],"profile":[208],"SIMD":[209,247],"vectorization":[210,251],"Number":[213],"Theoretic":[214],"Transform":[215],"(NTT),":[216],"Montgomery/Barrett":[217],"modular":[218],"reductions,":[219],"constant-time":[220],"side-channel":[221],"resistance":[222],"under":[223,232],"Welch's":[224],"t-test":[225],"(DudeCT),":[226],"network-layer":[228],"TCP":[229,345,415],"varying":[233],"round-trip":[234],"times":[235],"(RTT)":[236],"loss":[239],"rates.":[240],"Our":[241],"findings":[243],"establish":[244],"that:":[245],"\u2022":[246,287,318,367,395],"Microarchitectural":[248],"Acceleration:":[249],"Dedicated":[250],"yields":[252],"6.2x":[254],"throughput":[255],"speedup":[256,262,269],"on":[257,263,270,307],"x86":[258],"AVX-512,":[259],"4.1x":[261],"ARM":[264],"NEON,":[265],"3.6x":[268],"Vector":[272],"compared":[273],"unvectorized":[275],"C":[276],"reference":[277,429],"implementations,":[278],"reducing":[279],"encapsulation":[282],"41,200":[284],"CPU":[285],"cycles.":[286],"Production":[288],"Handshake":[291],"Feasibility:":[292],"hybrid":[295],"exchange":[297],"X25519MLKEM768":[298],"adds":[299],"merely":[300],"0.38":[301],"ms":[302,363],"compute":[305],"latency":[306,358],"modern":[308],"servers,":[309],"operating":[310],"well":[311],"real-world":[313],"web":[314],"application":[315],"performance":[316],"budgets.":[317],"Network":[319],"Packet":[320],"Fragmentation":[321],"&":[322,370],"Tail":[323],"Latency:":[324],"large":[326],"footprint":[328],"(3,293":[331],"bytes)":[332],"forces":[333],"ServerHello":[335],"certificate":[337,403,411],"chain":[338,412],"multiple":[340],"MTU":[342],"boundaries":[343],"(3":[344],"segments).":[346],"Under":[347],"1%":[348],"WAN":[349],"loss,":[351],"multiplies":[353],"99th-percentile":[354],"(P99)":[355],"connection":[356,421],"establishment":[357],"4.5x":[360],"(from":[361],"18.4":[362],"82.6":[365],"ms).":[366],"Side-Channel":[368],"Immunity":[369],"Formal":[371],"Verification:":[372],"Zero":[373],"secret-dependent":[374],"execution":[375],"paths":[376],"were":[377],"detected":[378],"100":[380],"million":[381],"DudeCT":[382],"statistical":[383],"traces":[384],"(|t|":[385],"<":[386],"1.28":[387],"<<":[388],"4.5),":[389],"confirming":[390],"robust":[391],"timing":[392],"attack":[393],"resistance.":[394],"Mitigation":[396],"via":[397],"RFC":[398,401],"8879:":[399],"Implementing":[400],"8879":[402],"compression":[404],"(Brotli/Zstandard)":[405],"achieves":[406],"58.4%":[408],"reduction":[409],"size,":[413],"preventing":[414],"window":[416],"exhaustion":[417],"restoring":[419],"single-RTT":[420],"establishment.":[422],"Finally,":[423],"we":[424],"present":[425],"an":[426],"open-source,":[427],"production-ready":[428],"configuration":[430],"for":[431],"OpenSSL":[432],"3.4":[433],"BoringSSL":[435],"facilitate":[437],"secure":[438],"performant":[440],"migration":[442],"infrastructure.":[446]},"counts_by_year":[],"updated_date":"2026-10-07T09:51:55.459714","created_date":"2026-09-23T00:00:00"}