Stateless Cloud-Native Architecture for Quantum-Safe Security Platforms: Design, Implementation, and Evaluation of QCrypton

Fuente: Zenodo
Saved in:
Bibliographic Details
Main Author: Jain, Gunjan
Format: Recurso digital
Published: Zenodo 2026
Subjects:
Online Access:
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866901932652625920
author Jain, Gunjan
author_facet Jain, Gunjan
contents <p class="p1">Quantum-safe security platforms must operate at cloud scale to protect modern distributed systems, yet existing quantum cryptography tools are designed as standalone utilities with no consideration for horizontal scaling, multi-tenancy, or container orchestration. We present the architecture of <strong>QCrypton</strong>, a stateless cloud-native quantum security platform that combines AI threat detection, post-quantum cryptography, and cryptographic code auditing in a fully database-backed, horizontally-scalable design. Key contributions include: (1) a stateless authentication architecture combining JWT sessions with API key fallback and distributed token revocation via hash-based blocklists; (2) domain-verified multi-tenant provisioning with wildcard email matching and per-user permission overrides computed at request time using set algebra; (3) idempotent bootstrap enabling safe replica restart without coordination or distributed locks; and (4) Kubernetes-native deployment with defense-in-depth security across application and infrastructure layers. The platform supports three deployment modes (CLI, SDK, Server) from a single codebase with consistent security guarantees. We evaluate the architecture under horizontal scaling scenarios, demonstrating linear throughput scaling to 10 replicas with 96% efficiency, sub-4ms authentication latency, and 99.97% availability over a 30-day production evaluation with zero dropped requests during rolling updates.</p>
format Recurso digital
id zenodo_https___doi_org_10_5281_zenodo_19697856
institution Zenodo
language
publishDate 2026
publisher Zenodo
record_format zenodo
spellingShingle Stateless Cloud-Native Architecture for Quantum-Safe Security Platforms: Design, Implementation, and Evaluation of QCrypton
Jain, Gunjan
cloud-native security
stateless architecture
post-quantum cryptography
multi-tenancy
Kubernetes
horizontal scaling
RBAC
token revocation
<p class="p1">Quantum-safe security platforms must operate at cloud scale to protect modern distributed systems, yet existing quantum cryptography tools are designed as standalone utilities with no consideration for horizontal scaling, multi-tenancy, or container orchestration. We present the architecture of <strong>QCrypton</strong>, a stateless cloud-native quantum security platform that combines AI threat detection, post-quantum cryptography, and cryptographic code auditing in a fully database-backed, horizontally-scalable design. Key contributions include: (1) a stateless authentication architecture combining JWT sessions with API key fallback and distributed token revocation via hash-based blocklists; (2) domain-verified multi-tenant provisioning with wildcard email matching and per-user permission overrides computed at request time using set algebra; (3) idempotent bootstrap enabling safe replica restart without coordination or distributed locks; and (4) Kubernetes-native deployment with defense-in-depth security across application and infrastructure layers. The platform supports three deployment modes (CLI, SDK, Server) from a single codebase with consistent security guarantees. We evaluate the architecture under horizontal scaling scenarios, demonstrating linear throughput scaling to 10 replicas with 96% efficiency, sub-4ms authentication latency, and 99.97% availability over a 30-day production evaluation with zero dropped requests during rolling updates.</p>
title Stateless Cloud-Native Architecture for Quantum-Safe Security Platforms: Design, Implementation, and Evaluation of QCrypton
topic cloud-native security
stateless architecture
post-quantum cryptography
multi-tenancy
Kubernetes
horizontal scaling
RBAC
token revocation
url https://doi.org/10.5281/zenodo.19697856