The machinery of industrial environments was connected to the Internet years ago with the scope of increasing their performance. However, this change made such environments vulnerable against cyber-attacks that can compromise their correct functioning resulting in economic or social problems. Moreover, implementing cryptosystems in the communications between operational technology (OT) devices is a more challenging task than for information technology (IT) environments since the OT networks are generally composed of legacy elements, characterized by low-computational capabilities. Consequently, implementing cryptosystems in industrial communication networks faces a tradeoff between the security of the communications and the amortization of the industrial infrastructure. Critical infrastructure (CI) refers to the industries which provide key resources for the daily social and economical development, e.g., electricity. Furthermore, a new threat to cybersecurity has arisen with the theoretical proposal of quantum computers, due to their potential ability of breaking state-of-the-art cryptography protocols, such as RSA or elliptic curve cryptography. Many global agents have become aware that transitioning their secure communications to a quantum secure paradigm is a priority that should be established before the arrival of fault-tolerance. In this article, we aim to describe the problematic of implementing post-quantum cryptography (PQC) to CI environments. For doing so, we describe the requirements for these scenarios and how they differ against IT. We also introduce classical cryptography and how quantum computers pose a threat to such security protocols. Furthermore, we introduce state-of-the-art proposals of PQC protocols and present their characteristics. We conclude by discussing the problematic of integrating PQC in industrial environments.
The machinery of industrial environments was connected to the Internet years ago with the scope of increasing their performance. However, this change made such environments vulnerable against cyber-attacks that can compromise their correct functioning resulting in economic or social problems. Moreover, implementing cryptosystems in the communications between operational technology (OT) devices is a more challenging task than for information technology (IT) environments since the OT networks are generally composed of legacy elements, characterized by low-computational capabilities. Consequently, implementing cryptosystems in industrial communication networks faces a tradeoff between the security of the communications and the amortization of the industrial infrastructure. Critical infrastructure (CI) refers to the industries which provide key resources for the daily social and economical development, e.g., electricity. Furthermore, a new threat to cybersecurity has arisen with the theoretical proposal of quantum computers, due to their potential ability of breaking state-of-the-art cryptography protocols, such as RSA or elliptic curve cryptography. Many global agents have become aware that transitioning their secure communications to a quantum secure paradigm is a priority that should be established before the arrival of fault-tolerance. In this article, we aim to describe the problematic of implementing post-quantum cryptography (PQC) to CI environments. For doing so, we describe the requirements for these scenarios and how they differ against IT. We also introduce classical cryptography and how quantum computers pose a threat to such security protocols. Furthermore, we introduce state-of-the-art proposals of PQC protocols and present their characteristics. We conclude by discussing the problematic of integrating PQC in industrial environments.
The advent of quantum computing poses a significant threat to the cryptographic foundations that secure critical infrastructure information systems, including energy grids, transportation networks, healthcare systems, and financial services. Conventional public-key cryptographic schemes such as RSA and elliptic curve cryptography are vulnerable to quantum attacks, necessitating a paradigm shift toward post-quantum secure design principles. This review paper examines emerging post-quantum cryptographic frameworks and their role in strengthening detection and mitigation mechanisms within critical infrastructure environments. It systematically analyzes post-quantum algorithms, hybrid cryptographic models, and quantum-resilient authentication schemes, emphasizing their integration into intrusion detection systems, anomaly detection frameworks, and secure communication protocols. Additionally, the paper explores quantum-aware threat models, resilience-oriented system architectures, and adaptive mitigation strategies that enhance system survivability against both classical and quantum-enabled cyber threats. Key challenges including computational overhead, legacy system compatibility, scalability, and regulatory compliance are critically discussed, alongside ongoing standardization efforts and implementation case studies. By synthesizing current research and industry practices, this review provides a comprehensive roadmap for designing, deploying, and managing post-quantum secure detection and mitigation frameworks that ensure the long-term resilience, reliability, and trustworthiness of critical infrastructure information systems in the quantum era.
The explosive growth of Industrial Internet of Things (IIoT) technologies has been reshaping manufacturing, energy, transportation and infrastructure with real-time monitoring and automation supported by predictive analytics. The more interconnected machines are, the more vulnerable they become to advanced cyberattacks. RSA and ECC are two of the dominant cryptographic algorithms that 60% of the IIoT communications today. They are still susceptible to quantum computing attacks, especially from Shor, which can easily break public-key encryption. This new risk, and the threat it represents, calls for a monitoring of the quantum situation by adding Post Quantum Cryptography (PQC) to guarantee data privacy and resilient systems. This work studies the quantum-empowered security approach to IIoT environment and considers lattice-based, hash-based and code-based cryptography techniques immune to quantum attacks. This paper investigates the industrial system design demands, identifies some of these weaknesses, and presents a secure communication architecture including post-quantum cryptography for device authentication, secure firmware updates and data encryption. Studies show that due to constraints in resources, triage for IIoT devices is difficult, especially because of limitations of processors, among others; latency and scalability are two issues. The approach proposed showcases a means for industrial cybersecurity to benefit from post-quantum cryptography without losing efficiency.
The advent of quantum computing poses a significant threat to the cryptographic foundations that secure critical infrastructure information systems, including energy grids, transportation networks, healthcare systems, and financial services. Conventional public-key cryptographic schemes such as RSA and elliptic curve cryptography are vulnerable to quantum attacks, necessitating a paradigm shift toward post-quantum secure design principles. This review paper examines emerging post-quantum cryptographic frameworks and their role in strengthening detection and mitigation mechanisms within critical infrastructure environments. It systematically analyzes post-quantum algorithms, hybrid cryptographic models, and quantum-resilient authentication schemes, emphasizing their integration into intrusion detection systems, anomaly detection frameworks, and secure communication protocols. Additionally, the paper explores quantum-aware threat models, resilience-oriented system architectures, and adaptive mitigation strategies that enhance system survivability against both classical and quantum-enabled cyber threats. Key challenges including computational overhead, legacy system compatibility, scalability, and regulatory compliance are critically discussed, alongside ongoing standardization efforts and implementation case studies. By synthesizing current research and industry practices, this review provides a comprehensive roadmap for designing, deploying, and managing post-quantum secure detection and mitigation frameworks that ensure the long-term resilience, reliability, and trustworthiness of critical infrastructure information systems in the quantum era.
The convergence of quantum computing capabilities and sophisticated cyberattacks poses unprecedented threats to critical infrastructure communications. Traditional cryptographic defenses and perimeter-based security models are increasingly inadequate against quantum-enabled adversaries and advanced persistent threats targeting operational technology (OT) environments. This paper presents a comprehensive framework for implementing post-quantum cryptography (PQC) within a zero-trust architecture to secure critical infrastructure communications across control centers, substations, hospitals, and ports. Our approach integrates NIST-endorsed quantum-resistant cryptographic suites with identity-first network segmentation, authenticated SCADA protocol encryption, and continuous verification mechanisms. The proposed framework addresses the unique challenges of legacy industrial systems while providing scalable security for hybrid OT/IT environments. Through systematic analysis of current vulnerabilities and implementation strategies, this research demonstrates how a post-quantum zero-trust backbone can prevent catastrophic cyberattacks while maintaining operational continuity in critical infrastructure sectors.
The development of quantum computers poses a new security threat to network infrastructures and services, as they will be powerful enough to break the most common forms of digital encryption. Existing encryption services based on Rivest–Shamir–Adleman (RSA), Diffie-Hellman (DH), Elliptic Curve Cryptography (ECC) and so on are vulnerable to attacks by quantum computers. Although the gap between today’s quantum computers and the threats they pose to current public-key cryptography is large, the telecommunications landscape should begin planning for the transition to the post-quantum era as early as possible. In this paper, we examine recent advances in Post Quantum Cryptography (PQC) algorithms from the perspective of the networking and telecommunications industries. The efforts are categorized at three levels, namely communication, computation (consisting of design, implementation and Public Key System (PKS)), and network. Some of the existing challenges and future recommendations for securing communication networks in the post-quantum era are also listed at the end of the paper.
The growing interconnection of critical engineering infrastructure through IoT introduces unprecedented exposure to cyber threats. Emerging quantum computing capabilities pose a transformative risk to classical cryptographic primitives such as Rivest–Shamir–Adleman and Elliptic-Curve Cryptography, which underpin secure communication and device authentication in industrial control systems, power grids, transportation networks, and healthcare infrastructure. This paper investigates quantum-resistant encryption, often termed post-quantum cryptography (PQC), as a sustainable security paradigm for IoT communication within critical systems. By analyzing lattice-based, code-based, multivariate, and hash-based schemes, the study evaluates trade-offs between computational cost, memory footprint, and latency constraints intrinsic to resource-limited IoT nodes. A hybrid architectural framework integrating the National Institute of Standards and Technology-standardized algorithms (e.g., Cryptographic Suite for Algebraic Lattices—Kyber, Dilithium) with lightweight symmetric primitives (e.g., Ascon, GIFT block cipher in Combined Feedback mode) is proposed for secure data transmission across heterogeneous IoT layers. Experimental simulations benchmark key-exchange throughput, ciphertext expansion, and resilience against quantum-adversarial models, demonstrating up to 65% reduction in handshake latency compared to baseline lattice implementations under constrained conditions. The paper concludes with policy and engineering recommendations for the adoption of quantum-resistant IoT protocols in energy, transportation, and industrial automation sectors, highlighting alignment with global PQC migration roadmaps and IEC 62443 cybersecurity standards.