• To prepare for a future where powerful quantum computers exist, many systems using classical cryptography will need to migrate to Post-Quantum Cryptography (PQC). • One such system is Domain Name System Security Extensions (DNSSEC). • Because of the larger signature and key sizes associated with PQC algorithms, it might be the case that DNSSEC-related queries more often require the use of TCP instead of UDP. • We have investigated the impact of increased TCP traffic on an authoritative nameserver with the .nl zone file. • Our results indicate that the impact is limited. • We mainly found that an increase in TCP usage increases CPU consumption.

Article Summaries:

  • To prepare for a future where powerful quantum computers exist, many systems using classical cryptography will need to migrate to Post-Quantum Cryptography (PQC). One such system is Domain Name System Security Extensions (DNSSEC). Because of the larger signature and key sizes associated with PQC algorithms, it might be the case that DNSSEC-related queries more often require the use of TCP instead of UDP. We have investigated the impact of increased TCP traffic on an authoritative nameserver with the .nl zone file. Our results indicate that the impact is limited. We mainly found that an increas

Sources: