Analisis Performa dan Keamanan Implementasi Post-Quantum Cryptography ML-Kem Kyber pada Aplikasi Mobile untuk Data BPJS Kesehatan

Ferry Ardhia Rahman; Muhamad Azwar; Lalu Zazuli Azhar Mardedi

doi:10.59061/jentik.v4i3.1608

Authors

Ferry Ardhia Rahman Universitas Bumigora
Muhamad Azwar Universitas Bumigora
Lalu Zazuli Azhar Mardedi Universitas Bumigora

DOI:

https://doi.org/10.59061/jentik.v4i3.1608

Keywords:

BPJS Kesehatan, Data Security, Kyber, ML-KEM-768, Post-Quantum Cryptography

Abstract

The advancement of quantum computing poses a potential threat to the security of conventional cryptographic algorithms, such as RSA, which remain widely used to protect sensitive data. This threat is a significant concern regarding the protection of BPJS Kesehatan data, which is confidential and requires long-term security. This study aims to analyze the performance and security of a Post-Quantum Cryptography (PQC) implementation using the ML-KEM-768 algorithm within a mobile application to enhance BPJS Kesehatan data protection. A comparative study method was employed, contrasting the baseline combination of RSA-2048 and AES-256-GCM with ML-KEM-768 (utilizing the Bouncy Castle PQC provider) within the native Android application "BPJS Secure." Testing involved analyzing security aspects, the ability to mitigate "Harvest Now, Decrypt Later" (HNDL) threats, and application performance based on parameters such as latency, CPU usage, memory allocation, cryptographic data size, and device readiness. The results indicate that ML-KEM-768 provides protection against quantum computing threats and is suitable for implementation in BPJS Kesehatan data transmission. Although the implementation results in an increased computational load compared to conventional algorithms, modern Android devices are capable of efficiently executing the cryptographic processes. Based on these findings, ML-KEM-768 is considered a viable strategy for migrating to post-quantum cryptography—aligned with the FIPS 203 standard—to support future health data protection.

References

M. Abbas, "Unraveling Database Choices in Android Studio: A Comparative Analysis of SQLite andRoom Persistence Library," Contemporary Journal of Social Science, vol. 14, pp. 12–28, 2025.

T. L. Astrizi et al., "Seamless Transition to Post-Quantum TLS 1.3: A Hybrid Approach Using IdentityBased Encryption," Sensors, vol. 24, no. 22, p. 7300, 2024.

S. Chatterjee et al., "Benchmarking and Integration of NIST Post-Quantum Cryptography in AndroidDevices," IEEE Transactions on Mobile Computing, vol. 25, no. 2, pp. 110–122, 2026.

Y. Cheng et al., "Optimized Design and Implementation of CRYSTALS-KYBER Based on MLWE,"Security and Communication Networks, vol. 2025, Art. no. 7884158, 2025.

S. H. Chou et al., "High-Throughput Post-Quantum Cryptographic System: CRYSTALS-Kyber withComputational Scheduling and Architecture Optimization," Electronics, vol. 14, no. 15, p. 2969, 2025.

J. P. da Silva Lima et al., "Evaluating Kyber Post-Quantum KEM in a Mobile Application," in Third PQC Standardization Conference, NIST, 2021, pp. 1–15.

F. Kagai, "A Temporal Cybersecurity Risk in the Quantum Transition: Modeling Harvest-NowDecrypt-Later as a Time-Dependent Threat," Telecom, vol. 6, no. 4, pp. 100–118, 2025.

Q. Khan et al., "Post-Quantum Key Exchange and Subscriber Identity Security in Mobile Networks,"Information, vol. 16, no. 7, p. 617, 2025.

M. A. Mighri et al., "Performance Evaluation and Benchmarking of PQC Algorithms on EmbeddedResource-Constrained Devices," IEEE Access, vol. 12, pp. 45120–45132, 2024.

NIST, "FIPS 203: Module-Lattice-based Key-Encapsulation Mechanism Standard," National Institute of Standards and Technology, Gaithersburg, MD, USA, Tech. Rep. FIPS 203, Aug. 2024.

A. Olushola et al., "Design and Implementation of an Authenticated Post-Quantum Session ProtocolUsing ML-KEM (Kyber), ML-DSA (Dilithium), and AES-256-GCM," Frontiers in Physics, vol. 13, Art. no. 1723966, 2025.

Republik Indonesia, "Undang-Undang Nomor 27 Tahun 2022 tentang Pelindungan Data Pribadi,"Lembaran Negara Republik Indonesia Tahun 2022 Nomor 196, Jakarta, 2022.

M. SaberiKamarposhti et al., "Post-Quantum Healthcare: A Roadmap for Cybersecurity Resilience inMedical Data," Heliyon, vol. 10, no. 6, p. e31406, 2024.

A. Sardorbek et al., "Comparative Analysis of Native and Cross-Platform Mobile ApplicationDevelopment," Journal of Software Engineering Researchand Development, vol. 13, no. 1, pp. 45– 62, 2025.

W. Stallings and L. Brown, Computer Security: Principles and Practice, 5th ed. London, U.K.: Pearson Education, 2024.