Scopus Index Publications

Permanent URI for this communityhttps://rda.sliit.lk/handle/123456789/2162

This collection consists of all Scopus-indexed publications produced by SLIIT researchers. Scopus is recognized worldwide as a leading and reputable academic indexing database.

Browse

Filters

20262

Advanced Search

Filter by

Settings

Author: search.filters.author.Senarathne, ASubject: search.filters.subject.Post-Quantum Cryptography

Search Results

Now showing 1 - 2 of 2
  • Thumbnail Image
    ItemEmbargo
    Secure Enhanced JWT Framework with Post-Quantum Cryptography
    (Institute of Electrical and Electronics Engineers Inc., 2026-05-22) Sunera, A; Ransika, Y; Rasiru, M; Gunawardane, A; Abeywardena, K. Y; Senarathne, A
    JSON Web Tokens (JWTs) are widely used in distributed authentication, but many implementations still rely on classical algorithms such as RSA and provide limited support for key transparency, guarded validation, and secure revocation. These limitations reduce their suitability for future-ready security environments [1], [2], [3]. This research proposes a secure enhanced JWT framework built on four integrated components: a post-quantum signing and verification service, a transparency-driven key distribution service, a guard layer for policy enforcement, and a secure revocation service. The framework introduces ML-DSA-based post-quantum signatures while strengthening key integrity, token validation, and revocation control. A classical RS256-based authentication system was used as the baseline and compared against the integrated post-quantum system. The baseline recorded an average login latency of 77.891 ms, verification latency of 17.078 ms, protected endpoint latency of 14.608 ms, and an average token size of 519 bytes. The integrated post-quantum system achieved an overall average request latency of 67.245 ms, 97.667 ms p95 request latency, zero request failures, and 71.943 requests per second in the scoped live benchmark. The results show that the proposed framework maintains operational stability while delivering stronger security properties than conventional JWT systems, contributing a unified JWT security architecture that integrates post-quantum signatures, transparency-based key distribution, guarded validation, and revocation-aware trust enforcement into a single end-to-end authentication model.
  • Thumbnail Image
    ItemEmbargo
    Post-Quantum Cryptography for Web Authentication Protocols: A Systematic Review of OAuth 2.0, OpenID Connect, and SAML Migration
    (Institute of Electrical and Electronics Engineers Inc., 2026-03-19) Dissanayake, R; Wijesinghe, H; Vindinu, J; Jayasinghe, K; Abeywardena, K; Senarathne, A
    OAuth 2.0, OpenID Connect (OIDC), and SAML rely on classical public-key primitives such as RSA and ECDSA, which are vulnerable to quantum attacks via Shor's algorithm. This systematic review examines migration of these protocols to Post-Quantum Cryptography (PQC) following the 2024 NIST standardization of ML-DSA and ML-KEM. We map cryptographic dependencies across all three protocols, evaluate NIST-standardized algorithms for authentication use cases, and analyze practical migration challenges. Token size explosion, with ML-DSA-65 signatures approximately 52 times larger than ECDSA P-256, represents the dominant implementation barrier, compounded by incomplete JOSE standardization and limited ecosystem maturity. Missing formal security proofs and federation migration frameworks are identified as critical priorities before production deployment.