Search papers, labs, and topics across Lattice.
This paper investigates the impact of post-quantum cryptography (PQC) on the performance of encrypted traffic classifiers, revealing that while PQC alters the observable traffic patterns, it does not eliminate learnable website information. Through a controlled benchmark comparing Traditional and Hybrid-PQC traffic, the authors demonstrate that classifiers trained under matched conditions struggle to maintain reliability when faced with PQC-induced protocol drift. The findings highlight the need for improved cross-domain robustness in traffic classification systems, as existing methods falter when confronted with the evolving landscape of encrypted communications.
PQC evolution reshapes encrypted traffic in ways that undermine the reliability of existing classifiers, revealing a critical vulnerability in current evaluation practices.
Encrypted traffic classifiers often achieve high accuracy under matched training and testing conditions, implicitly assuming that deployment traffic follows the training distribution. TLS migration toward post-quantum cryptography (PQC) challenges this assumption because hybrid key establishment can reshape observable traffic without changing application labels. We frame this change as PQC-induced protocol drift and study its effects through closed-world HTTPS website fingerprinting using the deployed TLS~1.3 Hybrid-PQC group \texttt{\detokenize{X25519MLKEM768}}. We build a controlled, PQC-aware benchmark pairing Traditional (Non-PQC) and Hybrid-PQC traffic, then evaluate five representative classifiers and side-channel representations under matched-domain, cross-domain, and deployment-ratio settings. Collectively, the experiments show that PQC evolution does not remove learnable website information. Instead, it changes how that information appears in traffic, causing classifiers and feature combinations that perform well in-domain to lose reliability across cryptographic domains. By exposing the fragility of matched-domain evaluation, we offer strategic guidance, identify cross-domain robustness as a research priority, and recommend protocol-aware practices for dependable real-world encrypted traffic classification. The code is available at http://anonymous.4open.science/r/PQ-WF-Eval.
