Introduction
In 2026, we successfully shipped a quantum-safe checkout solution to CarphaCom, a leading e-commerce platform. This migration was necessary to ensure the long-term security of CarphaCom's payment systems, as the advent of quantum computing poses a significant threat to classical cryptographic algorithms. In this article, we will delve into the details of our post-quantum migration strategy, which leverages Kyber for key encapsulation and Dilithium signatures on tokens.
Post-Quantum Cryptography
Post-quantum cryptography (PQC) refers to the development of cryptographic algorithms that are resistant to attacks by quantum computers. The National Institute of Standards and Technology (NIST) has been leading the effort to standardize PQC algorithms, with the goal of replacing classical algorithms like RSA and elliptic curve cryptography (ECC). We pre-empted NIST's standardization process by implementing Kyber and Dilithium, two leading PQC algorithms.
Kyber for Key Encapsulation
Kyber is a key encapsulation mechanism (KEM) that uses a lattice-based cryptographic algorithm. It is designed to be secure against quantum computer attacks and provides a high level of security with relatively small key sizes. We chose Kyber for our quantum-safe checkout solution due to its efficiency, security, and ease of implementation. Kyber is used to establish secure connections between the client and server, ensuring that sensitive payment information is protected.
Dilithium Signatures on Tokens
Dilithium is a digital signature algorithm that uses a lattice-based cryptographic algorithm. It is designed to be secure against quantum computer attacks and provides a high level of security with relatively small signature sizes. We used Dilithium to sign tokens, which are used to authenticate and authorize payment transactions. This ensures that even if a token is intercepted or stolen, it cannot be used without a valid signature.
Impact on TLS and JWT
The introduction of Kyber and Dilithium has a significant impact on the Transport Layer Security (TLS) protocol and JSON Web Tokens (JWT). TLS is used to establish secure connections between the client and server, while JWT is used to authenticate and authorize payment transactions. With the migration to PQC algorithms, we had to update our TLS implementation to support Kyber and Dilithium. This required significant changes to our cryptographic libraries and protocols. Additionally, we had to modify our JWT implementation to use Dilithium signatures, which provides an additional layer of security for payment transactions.
Payment Intents
Payment intents are used to initiate payment transactions. With the introduction of PQC algorithms, we had to update our payment intent implementation to use Kyber and Dilithium. This ensures that payment transactions are secure and resistant to quantum computer attacks. We also had to modify our payment processing workflow to accommodate the new PQC algorithms, which required significant changes to our backend systems.
Practical Impact
The practical impact of our quantum-safe checkout solution is significant. It ensures that CarphaCom's payment systems are secure and resistant to quantum computer attacks, which provides a high level of confidence for customers and merchants. Additionally, our solution is designed to be backward compatible, which means that it can coexist with classical cryptographic algorithms. This allows for a seamless transition to PQC algorithms, without disrupting existing payment workflows.
Conclusion
In conclusion, our quantum-safe checkout solution for CarphaCom is a significant milestone in the development of post-quantum cryptography. By leveraging Kyber and Dilithium, we have ensured that CarphaCom's payment systems are secure and resistant to quantum computer attacks. Our solution has a significant impact on TLS, JWT, and payment intents, and provides a high level of confidence for customers and merchants.
Bottom line
The migration to post-quantum cryptography is a necessary step to ensure the long-term security of payment systems. By pre-empting NIST's standardization process, we have ensured that CarphaCom's payment systems are secure and resistant to quantum computer attacks. Our quantum-safe checkout solution is a significant achievement, and we believe that it sets a new standard for the industry.
QubitPage Editorial
Editorial — QubitPage SRL