Quantum computing is reshaping the security landscape of modern telecommunications. The cryptographic foundations that secure todays 5G systems, including RSA, Elliptic Curve Cryptography (ECC), and Diffie-Hellman (DH), are all susceptible to attacks enabled by Shors algorithm. Protecting 5G networks against future quantum adversaries has therefore become an urgent engineering and research priority. In this paper we introduce QORE, a quantum-secure 5G and Beyond 5G (B5G) Core framework that provides a clear pathway for transitioning both the 5G Core Network Functions and User Equipment (UE) to Post-Quantum Cryptography (PQC). The framework uses the NIST-standardized lattice-based algorithms Module-Lattice Key Encapsulation Mechanism (ML-KEM) and Module-Lattice Digital Signature Algorithm (ML-DSA) and applies them across the 5G Service-Based Architecture (SBA). A Hybrid PQC (HPQC) configuration is also proposed, combining classical and quantum-safe primitives to maintain interoperability during migration. Experimental validation shows that ML-KEM achieves quantum security with minor performance overhead, meeting the low-latency and high-throughput requirements of carrier-grade 5G systems. The proposed roadmap aligns with ongoing 3GPP SA3 and SA5 study activities on the security and management of post-quantum networks as well as with NIST PQC standardization efforts, providing practical guidance for mitigating quantum-era risks while safeguarding long-term confidentiality and integrity of network data.
翻译:量子计算正在重塑现代电信的安全格局。当前保护5G系统的密码学基础,包括RSA、椭圆曲线密码学(ECC)和Diffie-Hellman(DH),均易受Shor算法所启发的攻击。因此,保护5G网络抵御未来的量子攻击已成为一项紧迫的工程与研究重点。本文提出QORE,一个量子安全的5G及超5G(B5G)核心网框架,为5G核心网功能与用户设备(UE)向抗量子密码(PQC)的过渡提供了清晰的路径。该框架采用NIST标准化的基于格的算法——模块格密钥封装机制(ML-KEM)与模块格数字签名算法(ML-DSA),并将其应用于5G服务化架构(SBA)中。同时提出了一种混合PQC(HPQC)配置,结合经典密码原语与量子安全原语,以在迁移期间保持互操作性。实验验证表明,ML-KEM能以轻微的性能开销实现量子安全性,满足电信级5G系统的低延迟与高吞吐量要求。所提出的路线图与当前3GPP SA3和SA5关于抗量子网络安全与管理的研究活动以及NIST PQC标准化工作保持一致,为缓解量子时代风险、保障网络数据的长期机密性与完整性提供了实用指导。