Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

arXiv:2606.22340

A Post-Quantum Secure Lattice-Based Forward-Secure Identity Based Encryption with Applications to Internet of Things Architecture

Abhishek Kumar, Vikas Srivastava, Sumit Kumar Debnath, Pantelimon Stănică

Published Jun 21, 2026• 0 citations
arXivHTMLPDF

Abstract

The rapid expansion of the Internet of Things (IoT) has led to an unprecedented scale of data exchange across heterogeneous and resource-constrained devices. Ensuring confidentiality and secure key management in such environments is challenging. Traditional public-key infrastructures require heavy certificate-handling overhead. Identity-Based Encryption (IBE) offers a lightweight alternative by deriving public keys directly from device identities, making it attractive for IoT deployments. However, IoT devices are highly vulnerable to side-channel and key-extraction attacks, motivating the need for Forward-Secure IBE(FS-IBE), where the compromise of a current secret key does not threaten past communications. Existing FS-IBE constructions based on classical hardness assumptions are not secure in the era of post-quantum, while the lattice-based (LWE-based) forward-secure scheme suffer from large key and ciphertext sizes, limiting their suitability for constrained IoT systems. Here, we propose a new lattice-based fs-IBE scheme in the ring setting, relying on the RLWE assumption to achieve post-quantum security and significant efficiency gains. Our design uses trapdoor delegation with a minimal-cover mechanism over a binary tree. It results in compact public parameters and efficient per-epoch key updates. Compared to prior LWE-based constructions, our scheme reduces public key, secret key, and ciphertext sizes, and thus, making it better suited for practical IoT environments.

DOI
10.48550/arxiv.2606.22340

Related papers

Post-Quantum Identity-Based Linkable Ring Signcryption for Edge IoT Devices

Divyanshu Sinha, Sachin Kumar Gupta, Isha Das +6 more

With the rapid expansion of consumer electronics and the Internet of Things (IoT) ecosystem, ensuring secure communication in resource-constrained edge devices has become a critical challenge, especially under the threat of quantum attacks. Although lattice-based cryptographic schemes provide post-quantum security, they often suffer from large key storage and high computational overhead, limiting their applicability in edge environments. To address these challenges, we propose an identity-based linkable ring signcryption scheme constructed on the post quantum Lattice cryptography, tailored for edge-enabled IoT systems. The scheme employs a trapdoor generation algorithm to establish the master keys, utilizes compact Gaussian sampling to derive private keys for ring members, and integrates rejection sampling to generate user signatures with strong anonymity. Furthermore, a key encapsulation mechanism ensures identity protection during encryption. Security analysis under the Random Oracle Model (ROM) demonstrates the scheme's resistance to forgery and its linkability property. Performance evaluation shows that the proposed approach achieves smaller public keys, reduced encryption/decryption costs, and enhanced efficiency, making it well-suited for lightweight IoT and consumer electronics applications in the post-quantum era.

IEEE Transactions on Consumer Electronics•Jan 19, 2026•3 citations

Post-Quantum Secure Identity-Based Encryption Scheme using Random Integer Lattices for IoT-enabled AI Applications

Dharminder Dharminder, Ashok Kumar Das, Sourav Saha +2 more

Identity-based encryption is an important cryptographic system that is employed to ensure confidentiality of a message in communication. This article presents a provably secure identity based encryption based on post quantum security assumption. The security of the proposed encryption is based on the hard problem, namely Learning with Errors on integer lattices. This construction is anonymous and produces pseudo random ciphers. Both public-key size and ciphertext-size have been reduced in the proposed encryption as compared to those for other relevant schemes without compromising the security. Next, we incorporate the constructed identity based encryption (IBE) for Internet of Things (IoT) applications, where the IoT smart devices send securely the sensing data to their nearby gateway nodes(s) with the help of IBE and the gateway node(s) secure aggregate the data from the smart devices by decrypting the messages using the proposed IBE decryption. Later, the gateway nodes will securely send the aggregated data to the cloud server(s) and the Big data analytics is performed on the authenticated data using the Artificial Intelligence (AI)/Machine Learning (ML) algorithms for accurate and better predictions.

Security and Communication Networks•Jul 6, 2022•13 citations

Post-Quantum Verifiable Decryption Scheme for Internet of Thing-Based Consumer Electronic Edge Device

Ruihang Huang, Ashutosh Sharma

The Edge-computing era presents opportunities for the rapid development of the Internet of Things (IoT), where identity authentication is fundamental to ensuring IoT security. However, under post-quantum attacks, traditional identity authentication schemes that rely on signcryption to generate node keys face challenges due to the high number of IoT nodes. These schemes consume significant resources, making it difficult to meet the low-cost requirements of IoT. Against the backdrop of the rapid development of new media and the increasingly growing security demands for resource-constrained consumer electronic edge devices, a lightweight group signcryption authentication scheme based on lattice cryptography is proposed. During the key generation phase, an improved trapdoor diagonal matrix is designed, optimizing the preimage sampling algorithm required for key generation and reducing the total time needed to generate multiple keys. In the identity authentication phase, based on the leftover hash lemma and the properties of signcryption, the scheme allows for simultaneous signing and encryption of messages in a single logical step. A low-interaction protocol combining dot products and hash operations is proposed, enabling group leaders to perform access authentication on behalf of group members. Simulation results show that the scheme reduces the number of interactions required for IoT device access, lowers computational costs during identity authentication, and reduces the total cost of signcryption and un-signcryption by at least 7% compared to existing schemes. Additionally, it is demonstrated that this scheme can resist post-quantum attacks in IoT environments.

IEEE Transactions on Consumer Electronics•May 1, 2025•6 citations

Quantum-Resistant Certificateless Lattice-Based Signature Scheme for IoT Security

Gurram Sunitha, Basi Reddy.A, K J Abinava Jashwanth +3 more

The rapid proliferation of IoT technology has brought billions of devices into play that need to operate in a variety of diverse, resource-constrained environments. Secure authentication among these devices is a critical challenge, as traditional certificate-based public key infrastructures incur heavy computation and management overhead. Moreover, recent breakthroughs in quantum computing put at risk the security of classical cryptographic algorithms commonly used in IoT systems. This paper proposes a post-quantum certificateless authentication framework designed to address the efficiency-long-term security requirements of IoT environments. The proposed framework uses lattice-based cryptography to resist quantum-enabled adversaries while eliminating the need for digital certificates. The certificateless approach evades the problem of key escrow of identity-based cryptography and simplifies the key management process. A lightweight authentication protocol, which is suitable for constrained IoT devices, is developed. Security analyses prove that our proposed framework resists common attacks such as impersonation, replay, and man-in-the-middle attacks. The performance evaluation shows that our proposed framework reduces the communication and computational overheads compared with the traditional certificatebased authentication schemes. In this way, it is appropriate for large-scale and futureproof deployments of IoT systems.

International Conference Trends Material Science and Inventive Materials•Apr 8, 2026•0 citations

Lattice-based ABE-IBE Proxy Re-Encryption for IoT Systems

Muhammad Nauman Khan, Asha Rao, Seyit Ahmet Camtepe +1 more

The recent expansion of the Internet of things (IoT) and its applications continues to dramatically change the IT services supporting manufacturing, energy management, intelligent transportation, smart cities, etc. These IT services often interconnect Internet-based Cloud systems with IoT or intelligent smart devices held by organisations. As IoT devices are resource-limited, the security of their communication is provided by lightweight cryptography that could consequently lead to the devices being insecure against a quantum adversary. On the other hand, Internet Cloud systems are resource-rich and could easily support post-quantum cryptography. This paper presents a proxy re-encryption scheme that translates ciphertexts of a classical lightweight encryption algorithm into their post quantum equivalent and vice versa. More precisely, we propose a lattice-based ABE-IBE (L ABE-IBE) proxy re-encryption scheme that transforms a classical lightweight ciphertext into a lattice based ciphertext. We compare our proposed L ABE-IBE proxy re-encryption scheme with classical proxy re-encryption (ABEIBE) schemes. We discuss the security and efficiency of our construction.

•Mar 15, 2022•0 citations

Lattice-based ABE-IBE Proxy Re-Encryption for IoT Systems

Muhammad Nauman Khan, Asha Rao, Seyit Ahmet Camtepe +1 more

The recent expansion of the Internet of things (IoT) and its applications continues to dramatically change the IT services supporting manufacturing, energy management, intelligent transportation, smart cities, etc. These IT services often interconnect Internet-based Cloud systems with IoT or intelligent smart devices held by organisations. As IoT devices are resource-limited, the security of their communication is provided by lightweight cryptography that could consequently lead to the devices being insecure against a quantum adversary. On the other hand, Internet Cloud systems are resource-rich and could easily support post-quantum cryptography. This paper presents a proxy re-encryption scheme that translates ciphertexts of a classical lightweight encryption algorithm into their post quantum equivalent and vice versa. More precisely, we propose a lattice-based ABE-IBE (L ABE-IBE) proxy re-encryption scheme that transforms a classical lightweight ciphertext into a lattice based ciphertext. We compare our proposed L ABE-IBE proxy re-encryption scheme with classical proxy re-encryption (ABEIBE) schemes. We discuss the security and efficiency of our construction.

•Mar 16, 2022•1 citation
The rapid expansion of the Internet of Things (IoT) has led to an unprecedented scale of data exchange across heterogeneous and resource-constrained devices. Ensuring confidentiality and secure key management in such environments is challenging. Traditional public-key infrastructures require heavy certificate-handling overhead. Identity-Based Encryption (IBE) offers a lightweight alternative by deriving public keys directly from device identities, making it attractive for IoT deployments. However, IoT devices are highly vulnerable to side-channel and key-extraction attacks, motivating the need for Forward-Secure IBE(FS-IBE), where the compromise of a current secret key does not threaten past communications. Existing FS-IBE constructions based on classical hardness assumptions are not secure in the era of post-quantum, while the lattice-based (LWE-based) forward-secure scheme suffer from large key and ciphertext sizes, limiting their suitability for constrained IoT systems. Here, we propose a new lattice-based fs-IBE scheme in the ring setting, relying on the RLWE assumption to achieve post-quantum security and significant efficiency gains. Our design uses trapdoor delegation with a minimal-cover mechanism over a binary tree. It results in compact public parameters and efficient per-epoch key updates. Compared to prior LWE-based constructions, our scheme reduces public key, secret key, and ciphertext sizes, and thus, making it better suited for practical IoT environments.
With the rapid expansion of consumer electronics and the Internet of Things (IoT) ecosystem, ensuring secure communication in resource-constrained edge devices has become a critical challenge, especially under the threat of quantum attacks. Although lattice-based cryptographic schemes provide post-quantum security, they often suffer from large key storage and high computational overhead, limiting their applicability in edge environments. To address these challenges, we propose an identity-based linkable ring signcryption scheme constructed on the post quantum Lattice cryptography, tailored for edge-enabled IoT systems. The scheme employs a trapdoor generation algorithm to establish the master keys, utilizes compact Gaussian sampling to derive private keys for ring members, and integrates rejection sampling to generate user signatures with strong anonymity. Furthermore, a key encapsulation mechanism ensures identity protection during encryption. Security analysis under the Random Oracle Model (ROM) demonstrates the scheme's resistance to forgery and its linkability property. Performance evaluation shows that the proposed approach achieves smaller public keys, reduced encryption/decryption costs, and enhanced efficiency, making it well-suited for lightweight IoT and consumer electronics applications in the post-quantum era.
Identity-based encryption is an important cryptographic system that is employed to ensure confidentiality of a message in communication. This article presents a provably secure identity based encryption based on post quantum security assumption. The security of the proposed encryption is based on the hard problem, namely Learning with Errors on integer lattices. This construction is anonymous and produces pseudo random ciphers. Both public-key size and ciphertext-size have been reduced in the proposed encryption as compared to those for other relevant schemes without compromising the security. Next, we incorporate the constructed identity based encryption (IBE) for Internet of Things (IoT) applications, where the IoT smart devices send securely the sensing data to their nearby gateway nodes(s) with the help of IBE and the gateway node(s) secure aggregate the data from the smart devices by decrypting the messages using the proposed IBE decryption. Later, the gateway nodes will securely send the aggregated data to the cloud server(s) and the Big data analytics is performed on the authenticated data using the Artificial Intelligence (AI)/Machine Learning (ML) algorithms for accurate and better predictions.
The Edge-computing era presents opportunities for the rapid development of the Internet of Things (IoT), where identity authentication is fundamental to ensuring IoT security. However, under post-quantum attacks, traditional identity authentication schemes that rely on signcryption to generate node keys face challenges due to the high number of IoT nodes. These schemes consume significant resources, making it difficult to meet the low-cost requirements of IoT. Against the backdrop of the rapid development of new media and the increasingly growing security demands for resource-constrained consumer electronic edge devices, a lightweight group signcryption authentication scheme based on lattice cryptography is proposed. During the key generation phase, an improved trapdoor diagonal matrix is designed, optimizing the preimage sampling algorithm required for key generation and reducing the total time needed to generate multiple keys. In the identity authentication phase, based on the leftover hash lemma and the properties of signcryption, the scheme allows for simultaneous signing and encryption of messages in a single logical step. A low-interaction protocol combining dot products and hash operations is proposed, enabling group leaders to perform access authentication on behalf of group members. Simulation results show that the scheme reduces the number of interactions required for IoT device access, lowers computational costs during identity authentication, and reduces the total cost of signcryption and un-signcryption by at least 7% compared to existing schemes. Additionally, it is demonstrated that this scheme can resist post-quantum attacks in IoT environments.
The rapid proliferation of IoT technology has brought billions of devices into play that need to operate in a variety of diverse, resource-constrained environments. Secure authentication among these devices is a critical challenge, as traditional certificate-based public key infrastructures incur heavy computation and management overhead. Moreover, recent breakthroughs in quantum computing put at risk the security of classical cryptographic algorithms commonly used in IoT systems. This paper proposes a post-quantum certificateless authentication framework designed to address the efficiency-long-term security requirements of IoT environments. The proposed framework uses lattice-based cryptography to resist quantum-enabled adversaries while eliminating the need for digital certificates. The certificateless approach evades the problem of key escrow of identity-based cryptography and simplifies the key management process. A lightweight authentication protocol, which is suitable for constrained IoT devices, is developed. Security analyses prove that our proposed framework resists common attacks such as impersonation, replay, and man-in-the-middle attacks. The performance evaluation shows that our proposed framework reduces the communication and computational overheads compared with the traditional certificatebased authentication schemes. In this way, it is appropriate for large-scale and futureproof deployments of IoT systems.
The recent expansion of the Internet of things (IoT) and its applications continues to dramatically change the IT services supporting manufacturing, energy management, intelligent transportation, smart cities, etc. These IT services often interconnect Internet-based Cloud systems with IoT or intelligent smart devices held by organisations. As IoT devices are resource-limited, the security of their communication is provided by lightweight cryptography that could consequently lead to the devices being insecure against a quantum adversary. On the other hand, Internet Cloud systems are resource-rich and could easily support post-quantum cryptography. This paper presents a proxy re-encryption scheme that translates ciphertexts of a classical lightweight encryption algorithm into their post quantum equivalent and vice versa. More precisely, we propose a lattice-based ABE-IBE (L ABE-IBE) proxy re-encryption scheme that transforms a classical lightweight ciphertext into a lattice based ciphertext. We compare our proposed L ABE-IBE proxy re-encryption scheme with classical proxy re-encryption (ABEIBE) schemes. We discuss the security and efficiency of our construction.
The recent expansion of the Internet of things (IoT) and its applications continues to dramatically change the IT services supporting manufacturing, energy management, intelligent transportation, smart cities, etc. These IT services often interconnect Internet-based Cloud systems with IoT or intelligent smart devices held by organisations. As IoT devices are resource-limited, the security of their communication is provided by lightweight cryptography that could consequently lead to the devices being insecure against a quantum adversary. On the other hand, Internet Cloud systems are resource-rich and could easily support post-quantum cryptography. This paper presents a proxy re-encryption scheme that translates ciphertexts of a classical lightweight encryption algorithm into their post quantum equivalent and vice versa. More precisely, we propose a lattice-based ABE-IBE (L ABE-IBE) proxy re-encryption scheme that transforms a classical lightweight ciphertext into a lattice based ciphertext. We compare our proposed L ABE-IBE proxy re-encryption scheme with classical proxy re-encryption (ABEIBE) schemes. We discuss the security and efficiency of our construction.