Post-quantum Algorithm Testing and Analysis for the DNS

To empirically investigate the impact of post-quantum algorithms on DNSSEC, SIDN Labs started the project PATAD (Post-quantum Algorithm Testing and Analysis for the DNS). Its goal is to develop a testbed that enables us to protype, evaluate, and benchmark various post-quantum algorithms in DNSSEC, not just for SIDN, but for other organisations as well.

As the project evolves we will continue to publish more information. Meanwhile you can read about our work on post-quantum DNSSEC in the publications listed at the bottom of the page.

Run your own PATAD testbed

We published the components and instructions to run your own PQC testbed on your own computer at https://github.com/SIDN/pqc-testbed.

The following screencast shows a full-stack example of our testbed using SQIsign to sign the root zone, MAYO to sign the .nl zone and Falcon to sign sidnlabs.nl.

Developing PATAD components

The script to build containers for the PATAD testbed are published on GitHub. Currently, we have two PQC-ready components: pqc-resolver-powerdns and pqc-auth-powerdns. Those containers contain a patched version of PowerDNS with support for the Falcon, SQIsign, and MAYO PQC algorithms. We encourage you to use these examples to build you own PATAD components.

Publications

Below is a list of publications about our PQC DNSSEC work. A good chunk of these are in collaboration with people from other organizations.

Other work on PQC in the DNS