# Ironwood Meta Key Agreement and Authentication Protocol

## TL;DR

The paper introduces Ironwood MKAAP, a quantum-resistant cryptographic protocol combining public-key and shared-key features, suitable for IoT devices, with demonstrated security and improved performance over ECC.

## Contribution

It presents a novel Meta Key Agreement and Authentication Protocol (MKAAP) that is quantum-resistant, practical for IoT, and offers deployment advantages of public-key systems with shared-key security.

## Key findings

- Ironwood MKAAP resists quantum attacks like Shor's and Grover's.
- Implemented on IoT devices, it outperforms ECC in resource efficiency.
- Demonstrates practical security and performance benefits for quantum-resistant cryptography.

## Abstract

Number theoretic public-key solutions, currently used in many applications worldwide, will be subject to various quantum attacks, making them less attractive for longer-term use. Certain group theoretic constructs are now showing promise in providing quantum-resistant cryptographic primitives, and may provide suitable alternatives for those looking to address known quantum attacks. In this paper, we introduce a new protocol called a Meta Key Agreement and Authentication Protocol (MKAAP) that has some characteristics of a public-key solution and some of a shared-key solution. Specifically it has the deployment benefits of a public-key system, allowing two entities that have never met before to authenticate without requiring real-time access to a third-party, but does require secure provisioning of key material from a trusted key distribution system (similar to a symmetric system) prior to deployment. We then describe a specific MKAAP instance, the Ironwood MKAAP, discuss its security, and show how it resists certain quantum attacks such as Shor's algorithm or Grover's quantum search algorithm. We also show Ironwood implemented on several ``internet of things'' (IoT devices), measure its performance, and show how it performs significantly better than ECC using fewer device resources.