Trust is the core building block of secure systems, and it is enforced via methods to guarantee that a specific system is properly configured and works as expected. In this context, a Root of Trust (RoT) establishes a trusted environment, where both data and code are authenticated via a digital signature, which is based on asymmetric cryptography. Unfortunately, this kind of crypto is vulnerable to the threat posed by Quantum Computers (QCs). Firmware, being the earliest layer of trust, faces unique risks due to its longevity and difficult update. Transitioning firmware protection to Post-Quantum Cryptography (PQC) is urgent, since it lowers the risk derived from exposing all computing and network devices to quantum-based attacks. This paper offers an analysis of the most common trust techniques and their roadmap towards a Post-Quantum (PQ) world, by investigating the current status of PQC and the challenges posed by such algorithms in existing Trusted Computing (TC) solutions from an integration perspective. Furthermore, this paper proposes an architecture for PQ TC techniques based on integrity verification, addressing the imperative for immediate adoption of quantum-resistant algorithms.
Trust is the core building block of secure systems, and it is enforced via methods to guarantee that a specific system is properly configured and works as expected. In this context, a Root of Trust (RoT) establishes a trusted environment, where both data and code are authenticated via a digital signature, which is based on asymmetric cryptography. Unfortunately, this kind of crypto is vulnerable to the threat posed by Quantum Computers (QCs). Firmware, being the earliest layer of trust, faces unique risks due to its longevity and difficult update. Transitioning firmware protection to Post-Quantum Cryptography (PQC) is urgent, since it lowers the risk derived from exposing all computing and network devices to quantum-based attacks. This paper offers an analysis of the most common trust techniques and their roadmap towards a Post-Quantum (PQ) world, by investigating the current status of PQC and the challenges posed by such algorithms in existing Trusted Computing (TC) solutions from an integration perspective. Furthermore, this paper proposes an architecture for PQ TC techniques based on integrity verification, addressing the imperative for immediate adoption of quantum-resistant algorithms.
Trusted Computing (TC), which has long been the cornerstone of hardware-based platform integrity, faces an existential threat from the advent of large-scale quantum computers capable of breaking its underlying classical cryptography. This review systematically analyzes the imperative transition to Post-Quantum Trusted Computing (PQC-TC), synthesizing the leading research and industry-driven efforts to secure this critical paradigm. We present a taxonomy of PQC-TC approaches, including the PQC modernization of existing Trusted Platform Modules (TPMs) for functions like measured boot and remote attestation. Our analysis highlights the dual challenges of adapting to new algorithms with significantly larger key sizes and higher computational overheads, as well as the need for robust migration strategies. We examine the pivotal roles of the NIST PQC Standardization Process and the Trusted Computing Group (TCG) in defining the path to commercial readiness. While PQC modernization is the most viable nearterm solution, we identify open research challenges in formal security modeling, resource optimization for embedded systems, and the long-term potential of hybrid architectures integrating quantum hardware. This paper concludes that the successful evolution of TC hinges on proactive, collaborative efforts to build a secure, resilient, and quantum-ready foundation for future digital systems.
The imminent emergence of quantum computers poses unprecedented challenges to the current cryptographic standards that secure vital digital communications and data worldwide. This paper addresses the vulnerabilities of existing cryptographic systems susceptible to quantum-based attacks and emphasizes a dedicated transition plan to post-quantum cryptography (PQC). We first examine the current state of cryptographic practices, highlight the quantum threat, and present the framework and need for PQC. In addition, a comprehensive strategy is presented that encompasses the identification, protection, detection, response, and recovery phases and integrates PQC into existing security infrastructures, specifically the Cybersecurity Framework Version 2.0 of the National Institute of Standards and Technology (NIST). Methods and technologies discussed include the development of robust PQC algorithms, tools for their large-scale implementation, and hybrid cryptographic systems that combine traditional and quantum-resistant techniques. Practical implementations on various hardware and software platforms are also presented in case studies that provide real-world insight into the challenges and innovations in using PQC. We conclude with a discussion of hybrid approaches, regulatory considerations, and recommendations derived from early adopters to guide future efforts to create a quantum-resilient digital landscape.
Quantum computing poses a significant threat to classical asymmetric cryptography, which is essential for ensuring confidentiality, authentication, and key exchange in contemporary digital infrastructures. Although post-quantum cryptography (PQC) provides mechanisms that resist quantum attacks, its implementation in Internet of Things (IoT) systems is challenged by constrained resources, including limitations in computation, memory, energy, latency, and bandwidth, and the heterogeneity of devices. This paper offers a comprehensive narrative review of PQC approaches applicable to IoT, systematically organizing 30 peer-reviewed studies published between 2022 and 2026 across four layers: device, communication, distributed trust, and application. Additionally, the review examines two cross-cutting dimensions, privacy and side-channel resistance. The analysis indicates a significant prevalence of lattice-based schemes, hybrid strategies, and integrations with blockchain technology, zero-knowledge proofs, federated learning, homomorphic encryption, AI, and Zero Trust architectures. Notably, key gaps remain in side-channel evaluation, migration pathways, deployment costs, and real-world validation—issues that are particularly critical given the long lifecycles of IoT devices and the ongoing threat of “harvest now, decrypt later” attacks.
Quantum computing poses an existential threat to classical public-key cryptography, particularly RSA and elliptic-curve systems, which form the backbone of secure communication, authentication, and digital trust. Once scalable quantum computers emerge, algorithms such as Shor’s will be capable of breaking these schemes, jeopardizing confidentiality and integrity across the internet and enterprise systems. Post-quantum cryptography (PQC) offers a viable defense, providing quantum-resistant algorithms that can be implemented on today’s hardware and protocols. Recent standardization milestones—including NIST’s approval of ML-KEM (Kyber) for key establishment, ML-DSA (Dilithium) and SLH-DSA (SPHINCS+) for signatures, and the selection of HQC as a complementary KEM—mark a turning point for practical adoption. This paper surveys the quantum threat model, algorithm families, performance trade-offs, and integration patterns such as hybrid modes and crypto-agile architectures. It further outlines a phased migration roadmap for enterprises, emphasizing harvest-now-decrypt-later risks and compliance imperatives. By bridging technical, operational, and policy perspectives, the study provides actionable guidance to prepare organizations for a secure and quantum-resilient future.
The convergence of quantum computing capabilities and sophisticated cyberattacks poses unprecedented threats to critical infrastructure communications. Traditional cryptographic defenses and perimeter-based security models are increasingly inadequate against quantum-enabled adversaries and advanced persistent threats targeting operational technology (OT) environments. This paper presents a comprehensive framework for implementing post-quantum cryptography (PQC) within a zero-trust architecture to secure critical infrastructure communications across control centers, substations, hospitals, and ports. Our approach integrates NIST-endorsed quantum-resistant cryptographic suites with identity-first network segmentation, authenticated SCADA protocol encryption, and continuous verification mechanisms. The proposed framework addresses the unique challenges of legacy industrial systems while providing scalable security for hybrid OT/IT environments. Through systematic analysis of current vulnerabilities and implementation strategies, this research demonstrates how a post-quantum zero-trust backbone can prevent catastrophic cyberattacks while maintaining operational continuity in critical infrastructure sectors.
Classical cryptography systems are vulnerable to quantum computing because they depend on computationally tough issues, such as solving discrete logarithms or factoring big integers. Cryptography in the age of quantum computing has new challenges and opportunities. Post-quantum cryptography (PQC) aims to address these issues by developing algorithms that are resistant to quantum computing, including code-based, hash-based, and lattice-based cryptography. The study sheds light on how PQC can tackle future cybersecurity risks by examining their security models, performance, and suitability for real-world implementation. The article also delves into the difficulties of updating the world's cryptographic infrastructure to use algorithms that are immune to quantum attacks, as well as the present status of PQC standardization initiatives. Protecting digital systems from possible breaches and guaranteeing long-term data security will be the deployment of PQC that is most important as quantum computing develops.