A Lightweight Post-Quantum Authentication Framework for 5G Base Station Bootstrapping

• URL: http://arxiv.org/abs/2606.30542v1
• Date: Mon, 29 Jun 2026 16:42:16 GMT
• Title: A Lightweight Post-Quantum Authentication Framework for 5G Base Station Bootstrapping
• Abstract summary: EMULSION is a symmetric chained publicly verifiable authentication framework for 5G broadcast authentication.<n>It achieves 33x lower end-to-end delay and 31x less communication overhead than ML-DSA, and 12x lower delay and 5.4x less overhead than FN-DSA.<n>We formally prove the security of EMULSION and open-source its implementation for public testing and adaptation.
• Score: 10.889502556532639
• License: http://creativecommons.org/licenses/by/4.0/
• Abstract: The absence of authenticated bootstrapping between User Equipments (UEs) and Base Stations (BSs) in 5G leaves System Information Block (SIB) broadcasts unprotected, enabling fake BS attacks, man-in-the-middle interception, and spoofed emergency alerts. Prior efforts such as Public Key Infrastructure (PKI)-based certificate chains, token-based schemes, and identity-based signatures either impose overhead exceeding 5G's strict packet-size constraints or lack post-quantum (PQ) security. Direct NIST-PQC integration is infeasible: ML-DSA requires 34 fragmented SIB1 packets and up to 5,282,ms end-to-end delay, and FN-DSA still requires 13 fragments and up to 1,920,ms. We propose $\emulsion$, a symmetric chained publicly verifiable authentication framework for 5G/6G BS broadcast authentication. EMULSION is the first framework to exploit native 5G architectural features: fixed SIB transmission windows, millisecond-level time synchronization, and eSIM/USIM credential management to achieve genuine PQ security at symmetric-key efficiency. It uses a TESLA-style HMAC chain anchored by a compact PQ signature (MAYO) applied once per epoch, fitting authentication within a single packet with no fragmentation and eliminating certificate transmission entirely. Unlike all prior schemes, EMULSION protects the full SIB family (SIB1-SIB21). Evaluated on a real over-the-air 5G testbed, EMULSION achieves 33x lower end-to-end delay and 31x less communication overhead than ML-DSA, and 12x lower delay and 5.4x less overhead than FN-DSA. We formally prove the security of EMULSION and open-source its implementation for public testing and adaptation.

Related papers

• LMSM: LLM Security Framework Inspired by Linux Security Modules [56.93644694627783]
  Large language models (LLMs) are increasingly deployed with layered defenses, yet malicious prompts can still bypass them.<n>We present Language Model Security Modules (LMSM), a security framework that adapts the separation behind Linux Security Modules (LSM) to LLM serving.
  arXiv  Detail & Related papers  (2026-08-26T12:13:05Z)
• Battlefield 5G: Dual-PKI and TPM-Based UE Attestation for Tactical 5G Standalone Networks [2.0344286047762363]
  5G-AKA authenticates a subscriber credential stored on a USIM but does not authenticate the physical device that holds that credential or verify its boot state.<n>We present Battlefield 5G, a pre-authentication framework for 5G standalone networks.<n>We implement these capabilities by extending the Radio Access Network of the Software Radio System.
  arXiv  Detail & Related papers  (2026-08-11T17:22:47Z)
• Practical Post-Quantum Cryptography for Bandwidth Constrained or Non-Terrestrial Networks, and Power Constrained Devices [5.100227795968935]
  Post-quantum (PQ) cryptographic algorithms require larger certificates, signatures, and keys.<n>These costs are especially severe in Non-Terrestrial Networks (NTNs)<n>This paper investigates an alternative cryptographic framework that replaces PQ digital certificates with shared secret keys (SSKs)
  arXiv  Detail & Related papers  (2026-07-25T02:51:15Z)
• TESLA-for-5G: Broadcast Authentication for 5G Networks Using TESLA [13.531588596047229]
  5G base stations broadcast unauthenticated system information (SI) that every user equipment (UE) reads during cell selection.<n>Prior approaches require UEs to authenticate System Information Block 1 (SIB1) using digital signatures.<n>We propose TESLA-for-5G (TF5), a broadcast authentication protocol for 5G SIB1 that combines TESLA with GG09 Schnorr-like identity-based signatures (IBS)
  arXiv  Detail & Related papers  (2026-06-25T02:07:02Z)
• FIDEM: A Standard-Compliant Framework for Secure Binding of MUD Profiles to IoT Devices [90.91375734523943]
  FIDEM is a standard-compliant framework for securing DHCP-based MUD URL issuance.<n>It provides cryptographic binding between IoT devices and their MUD profiles by leveraging Zero-Knowledge-Proof authentication.
  arXiv  Detail & Related papers  (2026-05-28T09:16:50Z)
• Network Impact of Post-Quantum Certificate Chain sizes on Time to First Byte in TLS Deployments [0.256101750765765]
  Post-Quantum Cryptography (PQC) introduces significant deployment challenges in real-world networks.<n>We evaluate the latency cost of transitioning existing internet infrastructure to quantum-safe certificate schemes.<n>We additionally examine how CDN properties such as session resumption, certificate size optimizations, and geographical distribution reduce latency penalties.
  arXiv  Detail & Related papers  (2026-04-27T18:00:23Z)
• Empowering Mobile Networks Security Resilience by using Post-Quantum Cryptography [0.05461938536945721]
  We experimentally integrate NIST-standardized ML-KEM-768 and ML-DSA into an open-source 5G core (free5GC) using a sidecar proxy pattern that preserves network functions (NFs)<n>Results show that sidecar-based PQC insertion enables a non-disruptive and operationally predictable migration path for quantum-resilient 5G signaling.
  arXiv  Detail & Related papers  (2026-03-30T16:09:56Z)
• A Lightweight Defense Mechanism against Next Generation of Phishing Emails using Distilled Attention-Augmented BiLSTM [34.0814379994364]
  The MobileBERT teacher receives fine-tuning before its transformation into a BiLSTM model with multi-head attention.<n>The system demonstrates excellent performance in terms of accuracy and latency while maintaining a compact size.<n>The paper examines system performance under high traffic conditions and security measures for privacy protection and implementation methods for operational deployment.
  arXiv  Detail & Related papers  (2026-02-24T20:06:45Z)
• SALT-V: Lightweight Authentication for 5G V2X Broadcasting [4.791189058605987]
  Vehicle-to-Everything (V2X) communication faces a critical authentication dilemma.<n>Neither meets 5G New Radio (NR)-V2X's stringent requirements for both immediate authentication and computational efficiency.<n>This paper presents SALT-V, a novel hybrid authentication framework.
  arXiv  Detail & Related papers  (2025-11-14T07:32:21Z)
• Authentication Against Insecure Bootstrapping for 5G Networks: Feasibility, Resiliency, and Transitional Solutions in Post-Quantum Era [10.889502556532639]
  5G protocol lacks robust base station authentication mechanism during initial bootstrapping phase.<n>Conventional solutions, including digital signatures based on Public Key Infrastructures (PKIs) and identity-based signatures, are inadequate against quantum-capable adversaries.<n>We propose BORG, a transitional authentication solution based on a Hierarchical Identity-Based Threshold Signature scheme with a Fail-Stop property.
  arXiv  Detail & Related papers  (2025-10-27T15:56:59Z)
• Cross-Service Token: Finding Attacks in 5G Core Networks [58.86003502940164]
  We present FivGeeFuzz, a grammar-based fuzzing framework designed to uncover security flaws in 5G core SBIs.<n>Using FivGeeFuzz, we discovered 8 previously unknown vulnerabilities in free5GC, leading to runtime crashes, improper error handling, and unauthorized access to resources.
  arXiv  Detail & Related papers  (2025-09-10T20:40:33Z)
• AlDBaran: Towards Blazingly Fast State Commitments for Blockchains [52.39305978984572]
  AlDBaran is an authenticated data structure capable of handling state updates efficiently at a network throughput of 50 Gbps.<n>AlDBaran provides support for historical state proofs, which facilitates a wide array of novel applications.<n>On consumer-level portable hardware, it achieves approximately 8 million updates/s in an in-memory setting and 5 million updates/s with snapshots at sub-second intervals.
  arXiv  Detail & Related papers  (2025-08-14T09:52:15Z)
• Quantum Skyshield: Quantum Key Distribution and Post-Quantum Authentication for Low-Altitude Wireless Networks in Adverse Skies [36.14072181405793]
  Low-altitude wireless networks (LAWNs) have emerged as a critical backbone for supporting the low-altitude economy.<n>To meet growing data demands, some LAWN deployments incorporate free-space optical (FSO) links, which offer exceptional bandwidth and beam directivity.<n>Quantum Skyshield is proposed to enable reliable communication between the base transceiver station (BTS) and LAWN.
  arXiv  Detail & Related papers  (2025-07-20T04:43:33Z)
• Tamper-Evident Pairing [55.2480439325792]
  Tamper-Evident Pairing (TEP) is an improvement of the Push-Button configuration (PBC) standard. TEP relies on the Tamper-Evident Announcement (TEA), which guarantees that an adversary can neither tamper a transmitted message without being detected, nor hide the fact that the message has been sent. This paper provides a comprehensive overview of the TEP protocol, including all information needed to understand how it works.
  arXiv  Detail & Related papers  (2023-11-24T18:54:00Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.