Post-quantum cryptography (PQC) introduces significant computational and communication overhead, which poses challenges for resource-constrained computer systems, Internet of Things (IoT), and Industrial IoT (IIoT) devices. This paper presents an experimental evaluation of the Quantum Encryption Resilience Score (QERS) applied to MQTT, HTTP, and HTTPS communication protocols operating under PQC. Using an ESP32-C6 client and an ARM-based Raspberry Pi CM4 server, latency, CPU utilization, RSSI, energy consumption, key size, and TLS handshake overhead are measured under realistic operating conditions. QERS integrates these heterogeneous metrics into normalized Basic, Tuned, and Fusion scores, enabling systematic comparison of protocol efficiency and security resilience. Experimental results show that MQTT provides the highest efficiency under PQC constraints, while HTTPS achieves the highest security-weighted resilience at the cost of increased latency and resource consumption. The proposed framework supports informed protocol selection and migration planning for PQC-enabled IoT and IIoT deployments.
Post-quantum cryptography (PQC) introduces significant computational and communication overhead, which poses challenges for resource-constrained computer systems, Internet of Things (IoT), and Industrial IoT (IIoT) devices. This paper presents an experimental evaluation of the Quantum Encryption Resilience Score (QERS) applied to MQTT, HTTP, and HTTPS communication protocols operating under PQC. Using an ESP32-C6 client and an ARM-based Raspberry Pi CM4 server, latency, CPU utilization, RSSI, energy consumption, key size, and TLS handshake overhead are measured under realistic operating conditions. QERS integrates these heterogeneous metrics into normalized Basic, Tuned, and Fusion scores, enabling systematic comparison of protocol efficiency and security resilience. Experimental results show that MQTT provides the highest efficiency under PQC constraints, while HTTPS achieves the highest security-weighted resilience at the cost of increased latency and resource consumption. The proposed framework supports informed protocol selection and migration planning for PQC-enabled IoT and IIoT deployments.
Post-quantum cryptography (PQC) is becoming essential for securing Internet of Things (IoT) and Industrial IoT (IIoT) systems against quantum-enabled adversaries. However, existing evaluation approaches primarily focus on isolated performance metrics, offering limited support for holistic security and deployment decisions. This paper introduces QERS (Quantum Encryption Resilience Score), a universal measurement framework that integrates cryptographic performance, system constraints, and multi-criteria decision analysis to assess PQC readiness in computer, IoT, and IIoT environments. QERS combines normalized metrics, weighted aggregation, and machine learning-assisted analysis to produce interpretable resilience scores across heterogeneous devices and communication protocols. Experimental results demonstrate how the framework enables comparative evaluation of post-quantum schemes under realistic resource constraints, supporting informed security design and migration planning. This work is presented as a preprint, with extended statistical validation planned as part of ongoing graduate research.
Public-key cryptographic algorithms such as RSA and Elliptic Curve Cryptography (ECC) may become vulnerable once large-scale quantum computersand quantum chips become practical for real-world infrastructure and commercial deployment. To address this risk, Post-Quantum Cryptography (PQC)introduces cryptographic methods designed to resist quantum-based attacks.However, these mechanisms often require more processing power, bandwidth,and energy, which creates challenges for constrained IoT and Industrial IoT(IIoT) devices.This thesis introduces the Quantum Encryption Resilience Score (QERS), asystem-level evaluation framework designed to quantify the operational impactof post-quantum cryptographic deployment across embedded systems and networked environments. Instead of concentrating only on cryptographic accuracy,QERS integrates multiple performance dimensions, including latency, CPUutilization, energy consumption, signal strength (RSSI), and cryptographicoverhead into a unified and normalized score. A Design Science Research methodology is employed to design, implement, and evaluate the QERS frameworkusing four heterogeneous ESP-based microcontroller platforms. Experimentalevaluation is conducted using HTTP and HTTPS communication over Wi-Fi,incorporating post-quantum cryptographic configurations based on Kyber andML-DSA.The results demonstrate that post-quantum cryptographic mechanisms introduce measurable latency amplification and variability across devices, with cleardifferences in performance and stability depending on hardware capability.QERS enables systematic, cross device comparison of these effects, revealingcritical trade-offs between cryptographic strength and operational performance.The findings confirm that latency is the dominant factor influencing systemresilience, while CPU and energy contribute secondary effects. By integratingcryptographic, system, and network-level metrics into a single evaluative construct, this work provides a structured and reproducible approach for assessingresilience in post-quantum secure embedded and IoT infrastructures.
The transition to post-quantum cryptography (PQC) presents significant challenges for modern computing environments due to increased computational overhead, communication latency, and implementation complexity. Existing evaluation methods typically focus on isolated cryptographic performance metrics and do not provide a unified framework for assessing the overall resilience of PQC deployments across heterogeneous systems. This paper introduces the Quantum Encryption Resilience Score (QERS), a novel system-level evaluation framework designed to quantify the resilience of post-quantum cryptographic implementations by integrating computational, network, and operational performance metrics into a single composite score. QERS provides a standardized methodology for comparing PQC algorithms across diverse deployment scenarios. In this study, the framework is experimentally evaluated using a heterogeneous ESP32-based embedded and IoT testbed with gateway-assisted post-quantum cryptographic processing. The proposed framework is validated through experimental implementations of the NIST-standardized ML-KEM key encapsulation mechanism and the ML-DSA digital signature algorithm under multiple communication protocols and heterogeneous hardware configurations. Experimental results demonstrate that QERS effectively distinguishes the trade-offs between security, computational efficiency, resource utilization, and communication performance, providing a practical decision-support framework for selecting appropriate PQC implementations. The proposed framework contributes a reproducible and extensible methodology for the system-level evaluation of post-quantum cryptography and establishes a foundation for future research into standardized resilience and trust assessment of quantum-resistant systems.
The proliferation of Internet of Things (IoT) devices that use the Message Queuing Telemetry Transport (MQTT) protocol poses significant security challenges in the emerging quantum computing era. Current Transport Layer Security (TLS) implementations rely on classical cryptographic algorithms vulnerable to Shor's algorithm. This paper proposes PQ-MQTT, a hybrid post-quantum secure communication protocol that integrates ML-KEM-768 with X25519 for key encapsulation and a lightweight session-key derivation mechanism optimized for resource-constrained IoT publishers. We present a formal security analysis under the Quantum Random Oracle Model (QROM), demonstrating resilience against store-now-decryptlater attacks. Experimental evaluation on the Raspberry Pi 4, ESP32, and Arduino Nano 33 platforms shows that PQ-MQTT achieves handshake latencies of127.3ms,412.7ms, and1,847.2ms, respectively, with 18.2 KB of additional memory overhead. A comparative analysis of pure post-quantum and classical TLS implementations shows energy reductions of23.5%−40.5%relative to pure PQC, achieved through our hybrid optimization approach, while maintaining 94.2 % throughput efficiency.
The rapid advancement of quantum computing poses a critical threat to classical cryptographic algorithms such as RSA and ECC, particularly in Internet of Things (IoT) devices, where secure communication is essential but often constrained by limited computational resources. This paper investigates the feasibility of deploying post-quantum cryptography (PQC) algorithms on resource-constrained devices. In particular, we implement three PQC algorithms -- BIKE, CRYSTALS-Kyber, and HQC -- on a lightweight IoT platform built with Raspberry Pi devices. Leveraging the Open Quantum Safe (\texttt{liboqs}) library in conjunction with \texttt{mbedTLS}, we develop quantum-secure key exchange protocols, and evaluate their performance in terms of computational overhead, memory usage, and energy consumption for quantum secure communication. Experimental results demonstrate that the integration of PQC algorithms on constrained hardware is practical, reinforcing the urgent need for quantum-resilient cryptographic frameworks in next-generation IoT devices. The implementation of this paper is available at https://iqsec-lab.github.io/PQC-IoT/.
The rapid advancement of quantum computing poses a critical threat to classical cryptographic algorithms such as RSA and ECC, particularly in Internet of Things (IoT) devices, where secure communication is essential but often constrained by limited computational resources. This paper investigates the feasibility of deploying post-quantum cryptography (PQC) algorithms on resource-constrained devices. In particular, we implement three PQC algorithms - BIKE, CRYSTALS-Kyber, and HQC - on a lightweight IoT platform built with Raspberry Pi devices. Leveraging the Open Quantum Safe (liboqs) library in conjunction with mbedTLS, we develop quantumsecure key exchange protocols, and evaluate their performance in terms of computational overhead, memory usage, and energy consumption for quantum secure communication. Experimental results demonstrate that the integration of PQC algorithms on constrained hardware is practical, reinforcing the urgent need for quantum-resilient cryptographic frameworks in next-generation IoT devices. The implementation of this paper is available at https://iqsec-lab.github.io/PQC-IoT/.