Set up and distribution of post-quantum secure pre-shared keys using extendible authentication protocol

A system comprising:

• one or more processors;
• a non-transitory computer readable medium comprising instructions stored therein, the instructions, when executed by the one or more processors, cause the processors perform operations comprising:
• receiving requests for a COMMON-SEED and a quantum-safe public key from a peer and an extendible authentication protocol (EAP) authenticator;
• encrypting the COMMON-SEED using the quantum-safe public key of the peer and the quantum-safe public key of the EAP authenticator;
• sending the encrypted COMMON-SEED to the peer along with a request for a Postquantum Preshared Keys ID (PPKID) from the peer to complete authentication of the peer;
• receiving the PPK_ID from the peer, wherein the PPK ID is from a key pair obtained from a first Synchronizing Key Server (SKS) server in electrical communication with the peer based upon the encrypted COMMON-SEED;
• sending the encrypted COMMON-SEED and PPK_ID to the EAP authenticator;
• and establishing a quantum-resistant secure channel between the peer and the EAP authenticator, wherein a message of EAP success is delivered from the EAP authenticator to the peer when the peer and the EAP authenticator share the same COMMON-SEED and the same PPK-ID.

A non-transitory computer readable medium comprising instructions, the instructions, when executed by a computing system, cause the computing system to perform operations comprising:

• receiving requests for a COMMON-SEED and a quantum-safe public key from a peer and an extendible authentication protocol (EAP) authenticator;
• encrypting the COMMON-SEED using the quantum-safe public key of the peer and the quantum-safe public key of the EAP authenticator;
• sending the encrypted COMMON-SEED to the peer along with a request for a Postquantum Preshared Keys ID (PPKID) from the peer to complete authentication of the peer;
• receiving the PPK ID from the peer, wherein the PPK ID is from a key pair obtained from a first Synchronizing Key Server (SKS) server in electrical communication with the peer based upon the encrypted COMMON-SEED;
• sending the encrypted COMMON-SEED and PPK ID to the EAP authenticator;
• and
• establishing a quantum-resistant secure channel between the peer and the EAP authenticator, wherein a message of EAP success is delivered from the EAP authenticator to the peer when the peer and the EAP authenticator share the same COMMON-SEED and the same PPK-ID.