APQE-CDA: A PUF-Based Post-Quantum End-to-End Cross-Domain Authenticated Key Agreement Protocol for IOD System

To address the issues of high computational overhead, vulnerability to physical capture attacks, and insufficient in offering quantum resistance in traditional blockchain-based cross-domain authentication protocols for collaborative unmanned aerial vehicles (UAVs) missions, we propose APQE-CDA, a PUF-based post-quantum end-to-end cross-domain authentication protocol. The proposed protocol employs a lightweight bucket shifter PUF (BS-PUF) to reduce the computational overhead of UAVs while providing resilience against physical capture attacks. Static Random-Access Memory (SRAM) PUF-enhanced Kyber post-quantum cryptography is utilized to ensure secure quantum resistance. In APQE-CDA, we exploit the reversibility of BS-PUF to facilitate secure Challenge Response Pair (CRP) storage on the blockchain while achieving lightweight identity authentication through commutativity. We integrate SRAM PUF randomness into the Kyber key generation mechanism to eliminate key storage on UAVs while ensuring quantum-resistant security in the authentication interactions. Finally, Burrows Abadi Needham (BAN) logic, Real-or-Random (ROR), and informal security analysis are adopted to demonstrate the security of the proposed scheme. Experiments conducted on the Raspberry Pi 5 and FPGA platforms show superior computational efficiency, lower power consumption, and enhanced quantum-resistant security compared to existing solutions. Furthermore, extensive validation through the NS3 network simulator and Hyperledger Fabric framework substantiates the protocol’s authentication efficiency and practical viability in real environment conditions.