Science AI Journal
Computer Science · Research topic

Open research questions in Cryptographic Implementations and Security

25 unresolved questions extracted from the limitations and future-work sections of 230 Cryptographic Implementations and Security papers in our library. Each links back to the study that raised it.

What the literature leaves open

  • weight mechanism. (Reddy and Tschofenig, 2025) adds 10.4 Interaction with PQC signature schemes server cleanly composes authentication—it HQRT doesn’t compete with PQC signature replacement for alongside it. An operator could run HQRT for resumption security while separately adopting hybrid signature schemes for fullauthentication, picking up quantum resistance handshake on both fronts two mechanisms operate independently, with no conflict between them. Table 17 lays out the composability matrix. at once.

    A Hybrid Quantum-Resistant Resumption framework for zero-RTT TLS 1.3 · 2026 · DOI

  • Future work will investigate the applicability of the framework to noisy ciphertexts, multilingual datasets using language- specific statistical models, more complex cryptosystems, and with additional search heuristics. For any cryptanalysis process there is no standard data set is available.

    Coati optimization algorithm to recover the secret key of the classical transposition cryptosystem · 2026 · DOI

  • BSP- As even minor adjustments in one can have an impact on the other, both the design of the encryption With a minimal memory requirement (the S-boxes utilize only 512 bytes), BSP-128 is very easy to Future work may focus on further performance optimization, implementing the algorithm in hardware and embedded systems, and conducting additional security evaluations against advanced cryptanalytic attacks.

    Design and Security Evaluation of BSP-128: A Hybrid Blowfish and Serpent Inspired 128-Bit Block Cipher · 2026 · DOI

  • Existing studies often evaluate lightweight cryptography outside complete FL pipelines or on more powerful hardware, leaving its practical overhead on MCU-class devices insufficiently explored.

    Secure Federated Intrusion Detection for Resource-Constrained IoT Devices Using Lightweight Cryptography: A Hardware-Validated Study · 2026 · DOI

  • While scan-based attacks have been well-established for various ciphers such as AES, research on SM4-the commercial block cipher standard of China-remains largely underexplored.

    Scan-based side channel attack on SM4 · 2026 · DOI

  • Finally, while this paper demonstrates the combination of quantum SITM attacks with mirror slide attacks, future research could explore integrating it with other techniques such as biclique attackp or linear cryptanalysis. 4 Implications and Open Challenges QRAM-Dependent Security: According to our quantum MITM attacks, the QRAM size will affect the conclusion of security analysis.

    Quantum meet-in-the-middle attacks on key-length extension constructions · 2026 · DOI

  • Future research could explore the application of these techniques to other cryptographic primitives, develop more sophisticated models, automate the search for optimal polytope differences, and extend the use of deep learning to classical cryptanalytic attacks, thereby unlocking further opportunities in this domain.

    Improved polytopic differential neural distinguishers for SIMON, SIMECK, and SPECK block ciphers · 2026 · DOI

  • The paper discusses multi-bit fault injection feasibility via hardware Trojans and multi-spot lasers but does not explore whether simultaneous multi-bit faults targeting multiple S-box outputs across different Ascon rounds could reduce the required number of fault injections below the reported 34.

    Statistical fault analysis of Ascon: multiple distinguishers and impossible-state exploitation · 2026 · DOI

  • The comparison in Table 5 shows that SHFA with GF distinguisher achieves 34 fault injections for 99% key recovery, but there is no investigation of how the attack success rate degrades when fault injection success rates fall below 100%, which is critical for real-world applicability.

    Statistical fault analysis of Ascon: multiple distinguishers and impossible-state exploitation · 2026 · DOI

  • The paper proposes a conceptual countermeasure using memory overhead to store intermediate state S12 at the pS layer input, but the design is incomplete (text cuts off at 'invers') and lacks evaluation of its computational overhead, memory cost, and effectiveness against the presented SEFA and SHFA attacks.

    Statistical fault analysis of Ascon: multiple distinguishers and impossible-state exploitation · 2026 · DOI

  • The fault model feasibility discussion acknowledges that implementing high-precision fault injections on constrained devices introduces timing, routing, and power constraints, but does not provide quantitative analysis of how these constraints affect the practical success rate of the proposed SEFA and SHFA distinguisher attacks.

    Statistical fault analysis of Ascon: multiple distinguishers and impossible-state exploitation · 2026 · DOI

  • While the random-AND fault model is shown to be physically plausible through references to AES implementations, direct experimental validation of random-AND-type biased faults specifically on Ascon hardware (clock glitch, electromagnetic, or laser injection) has not been demonstrated in this work.

    Statistical fault analysis of Ascon: multiple distinguishers and impossible-state exploitation · 2026 · DOI

  • The proposed statistical fault analysis methods for Ascon are primarily validated through software simulations; experimental validation on actual Ascon implementations running on constrained devices (microcontrollers, FPGAs) with precise S-box-level fault injection using voltage glitch generators or multi-spot lasers remains absent.

    Statistical fault analysis of Ascon: multiple distinguishers and impossible-state exploitation · 2026 · DOI

  • The modular design of TTEA allows flexibility in selecting PQC algorithms, but formal analysis of security implications and performance trade-offs when substituting Kyber with alternative algorithms in specific deployment scenarios is limited.

    TTEA: designing a quantum-ready and energy-conscious encryption model for secure IoT environments · 2026 · DOI

  • The paper does not discuss the practical challenges and overhead associated with transitioning existing IoT systems from classical cryptography to TTEA-Kyber, including key migration strategies and backward compatibility requirements.

    TTEA: designing a quantum-ready and energy-conscious encryption model for secure IoT environments · 2026 · DOI

  • The scalability analysis defines a Scalability Factor (SF) metric but does not explore how TTEA performs under extreme conditions such as highly dynamic network topologies, variable device availability, or adversarial network conditions.

    TTEA: designing a quantum-ready and energy-conscious encryption model for secure IoT environments · 2026 · DOI

  • The paper focuses primarily on CRYSTALS-Kyber integration but does not provide detailed analysis of TTEA's compatibility and performance with emerging post-quantum cryptographic standards beyond NIST finalists.

    TTEA: designing a quantum-ready and energy-conscious encryption model for secure IoT environments · 2026 · DOI

  • While TTEA demonstrates strong performance on Arduino R3, ESP32, and Raspberry Pi 4, evaluation on additional IoT platforms with varying computational capabilities and resource constraints is not discussed.

    TTEA: designing a quantum-ready and energy-conscious encryption model for secure IoT environments · 2026 · DOI

  • So the open problem appears: should we always perform all four substages what will increasing time of the attack significantly or like it was done stop after finding the first distinct maximum what is faster but generate above fail- ures? The way of omitting that problem is fixing a threshold on the maximum value in the counter.

    The signal to noise ratio in the differential cryptanalysis of 9 rounds of data encryption standard · 2006 · DOI

  • This paper presents a new approach to header compression to be used in combination with the IP security framework. The benefit is a reduction of the overhead caused by IPSec tunnel mode in terms of enlarged datagrams. Furthermore, it can be integrated in common existing operating systems with moderate effort. Currently the header compression is a concept. Future steps are simulations based on network simulator 2 and the implementation in a testing environ- ment.

    A new approach to header compression in secure communications · 2006 · DOI

  • A limitation of this study is that all measurements were obtained on a single hardware platform — an Intel Core i7- 9750H (Coffee Lake, 9th generation) processor.

    High-Performance Implementation of HQC Post-Quantum Cryptography Using AVX2 Optimization on x86-64 Architecture · 2026 · DOI

  • Recent advances in cryptography and security architecture show promise in supporting the design of systems that exhibit resilience against quantum-enabled cryptanalysis, however there is a key gap in the literature around the subject of deriving tolerances for such systems.

    Quantifying quantum risk: a measure of crypto agility · 2026

  • Long-term resistance against quantum attacks is claimed, but no timeline or projections are provided regarding when quantum computers may pose practical threats to the implemented post-quantum algorithms.

    TTEA: designing a quantum-ready and energy-conscious encryption model for secure IoT environments · 2026 · DOI

Most-cited papers in Cryptographic Implementations and Security

Most recent work

Find a gap in your own Cryptographic Implementations and Security sub-topic

This page shows what the Cryptographic Implementations and Security literature already flags as unresolved. To narrow it to your specific question, run the guided finder — it searches the gap library on demand and checks candidates against 250M+ OpenAlex works.

Open the Research Gap Finder →

Related topics in Computer Science

Online Learning and Analytics
363 open questions
AI in Service Interactions
278 open questions
Teaching and Learning Programming
239 open questions
Digital literacy in education
230 open questions
Mobile Learning in Education
183 open questions
Virtual Reality Applications and Impacts
178 open questions
Computational Drug Discovery Methods
126 open questions
Blockchain Technology Applications and Security
121 open questions
25 open questions have been extracted from the limitations and future-work passages of 230 Cryptographic Implementations and Security papers in our library. Each one below links back to the study that raised it, so you can read the original claim in context.

Tools for your next paper

Gaps & Literature SearchFind open questions in any field — 120,000+ open gaps mined from our own library.Pre-CheckIs your paper ready? A Tier 1–5 acceptance probability in seconds.Journal FinderA ranked shortlist of target journals from a 17,500-venue index.Duplicate Publication CheckerCheck prior-publication & salami-slicing risk across 8 sources.Citation GeneratorFreeA DOI or title → APA, MLA, Vancouver, Chicago, BibTeX, RIS. No signup.Graphical Abstract MakerFreeTurn your findings into a colorblind-safe graphical abstract.

Compare the category — Honest roundups of the AI research tools, ours listed alongside the alternatives.

Command palette

Jump anywhere, run any action.