Subscription concealed identifier (SUCI) supporting post-quantum cryptography

A mobile device comprising:

• (a) one or more processors;
• and
• (b) one or more non-transitory computer-readable media operatively connected to the one or more processors and having stored thereon instructions that, when executed by the one or more processors, cause the mobile device to perform:
• 1) before authenticating with a wireless network, storing, in nonvolatile memory, data comprising (i) a plurality of user identities, (ii) cryptographic algorithms, (iii) a plurality of network static public keys, (iv) a plurality of pre-shared secret keys, and (v) a corresponding identifier for each of the plurality of pre-shared secret keys, wherein the wireless network stores (i) a pre-shared secret key from the plurality of pre-shared secret keys and corresponding identifier of the pre-shared secret key, and (ii) a user identity from the plurality of user identities;
• 2) receiving a broadcast message from the wireless network specifying (i) supported parameters for the cryptographic algorithms, and (ii) an identity for the network static public key;
• 3) selecting, from the data, (i) the pre-shared secret key, the corresponding identifier for the pre-shared secret key, and the user identity based on the received parameters, and (ii) a network static public key from the plurality of network static public keys using the received identity for the network static public key;
• 4) generating an asymmetric ciphertext for post-quantum cryptography and a key K using a key encapsulation mechanism (KEM) with the selected network static public key and the parameters;
• 5) generating a symmetric ciphering key from the key K;
• 6) encrypting the user identity and the corresponding identifier for the pre-shared secret key with the key K in order to generate a symmetric ciphertext;
• 7) transmitting, to the wireless network, a message comprising (i) the asymmetric ciphertext and (ii) the symmetric ciphertext;
• and
• 8) conducting an authentication and key agreement (AKA) with the wireless network using the selected pre-shared secret key for the corresponding identifier of the pre-shared secret key.