Технічна інженерія (Jun 2024)

Microservices Communication Security: Using Quantum-Resistant Algorithms for JWT Token Signing

  • D.V. Datsiuk,
  • Yu.M. Rossinskyi,
  • V.V. Vorotnikov

DOI
https://doi.org/10.26642/ten-2024-1(93)-147-152
Journal volume & issue
Vol. 1, no. 93
pp. 147 – 152

Abstract

Read online

In today's world, quantum computing is becoming a reality, which places increased demands on the security of communication between services. In this context, the use of quantum-resistant algorithms for signing JWT tokens in microservice architecture is extremely important. The comparison of the performance of lattice-based quantum-resistant algorithms with traditional RSA has the particular interest to determine the optimal token signing methods in terms of performance, security, and resistance to quantum threats. During the research, a series of requests to the service were made and charts were constructed to compare the delays during signing and verification of signatures. In particular, the latencies for each algorithm were measured to determine the average execution time of operations and to understand the impact of their performance on the operation of the microservice architecture. The research results show that the quantum-resistant Dilithium algorithm shows significantly higher performance in signing and verifying JWT tokens compared to RSA. This algorithm is built on lattice cryptography, which provides efficient generation of keys and signatures even with high levels of security. However, increasing the size of keys and signatures leads to increased use of network bandwidth, which should be considered during implementation. The Dilithium algorithm turns out to be a promising option for ensuring high performance and security in microservice systems. Its ability to rapidly generate and verify signatures facilitates efficient and reliable communication between microservices, while remaining resilient to future quantum threats. The use of quantum-resistant algorithms is becoming more and more relevant in light of the growing risks associated with the development of quantum computing.

Keywords