Paper 2026/440 Original: eprint.iacr.org/2026/440 ↗

Performance Analysis of a Thread Pool-Based Parallel Execution Model for Hybrid Post-Quantum TLS 1.3 Handshakes

Si-Woo Eum
Min-Ho Song
Hwa-Jeong Seo
Abstract

The transition to post-quantum cryptography (PQC) significantly increases the computational cost of TLS~1.3 handshakes. In particular, hybrid handshakes incur even greater overhead, as they require performing both classical and PQC algorithms for key exchange and authentication. This paper systematically analyzes the performance of hybrid PQC TLS~1.3 handshakes using a POSIX thread pool-based parallel execution model. We evaluate a total of 135 combinations comprising 3 classical KEMs, 3 ML-KEM variants, 3 classical DSAs, and 5 PQC DSAs. Sequential execution times range from 429.2 to 1,907.0~$\mu$s, while parallel execution times range from 356.7 to 1,380.8~$\mu$s, achieving speedups of 1.08$\times$ to 1.40$\times$ across all combinations. The highest speedup is observed in P-384-based configurations, where the overlap between classical and PQC operations is most pronounced. Furthermore, we recommend both throughput-oriented combinations based on FN-DSA and currently standardized ML-DSA combinations for each NIST security level. These results provide practical design guidance for mitigating performance degradation in hybrid PQC TLS deployments.

Metadata
Available format(s)
PDF
Category
Implementation
Publication info
Preprint.
History
2026-03-04: last updated
2026-03-04: published
Short URL
https://ia.cr/2026/440
License
https://creativecommons.org/publicdomain/zero/1.0/

BibTeX

@misc{cryptoeprint:2026/440,
      author = {Si-Woo Eum and Min-Ho Song and Hwa-Jeong Seo},
      title = {Performance Analysis of a Thread Pool-Based Parallel Execution Model for Hybrid Post-Quantum TLS 1.3 Handshakes},
      howpublished = {Cryptology {ePrint} Archive, Paper 2026/440},
      year = {2026},
      url = {https://eprint.iacr.org/2026/440}
}
Note: In order to protect the privacy of readers, this archive does not use cookies or embedded third party content.