In this paper, we present a laboratory study focused on the impact of post-quantum cryptography (PQC) algorithms on multiple layers of stateful HTTP over TLS transactions: the TCP handshake, the intermediate TCP-TLS layer, the TLS handshake, the intermediate TLS layer, and the HTTP application layer. To this end, we propose a laboratory architecture that emulates a real-world setup in which a load test of up to 100 transactions per second is sent to a load balancer, which in turn forwards them to a backend server that returns the responses. Each set of tests is executed using the TLS 1.3 key exchange groups as follows: traditional (or non-PQC), hybrid PQC and pure PQC. Each set of tests also varied the backend response size. Across more than thirty experiments, we performed data reduction and statistical analysis for each layer, to determine the specific impact of each algorithm (PQC and traditional) at every stage of the HTTP-over-TLS transaction.

翻译：本文提出了一项实验室研究，重点探讨后量子密码学（PQC）算法对基于 TLS 的有状态 HTTP 事务多个层面的影响：TCP 握手、TCP-TLS 中间层、TLS 握手、TLS 中间层以及 HTTP 应用层。为此，我们设计了一种实验室架构，模拟真实环境下的设置：将每秒高达 100 次事务的负载测试发送至负载均衡器，再由其转发至后端服务器并返回响应。每组测试均使用以下 TLS 1.3 密钥交换群组执行：传统（非 PQC）、混合 PQC 与纯 PQC。每组测试还改变了后端响应数据的大小。通过三十余组实验，我们对每个层面进行了数据约简与统计分析，以确定每种算法（PQC 与传统算法）在 HTTP-over-TLS 事务各阶段的具体影响。