arXiv:2607.23007

Practical Post-Quantum Cryptography for Bandwidth Constrained or Non-Terrestrial Networks, and Power Constrained Devices

Elliot G. Eichen, Sylvia Llosa, Yueqi Chen, Sangtae Ha

Published Jul 25, 2026• 0 citations

Abstract

Post-quantum (PQ) cryptographic algorithms, particularly for authentication, are more complex than classical algorithms and require larger certificates, signatures, and keys. Establishing a PQ-secure network connection increases bandwidth, memory, computation time, and energy consumption. These costs are especially severe in Non-Terrestrial Networks (NTNs), where long propagation delays, intermittent connectivity, constrained link budgets, satellite handovers, limited terminal resources, and bandwidth-constrained satellite-to-ground links amplify the overhead of certificate-based PQ authentication. Consequently, applications such as key rotation and key management may be unable to achieve acceptable handshake reliability or support NIST PQ Security Categories above Category 1. Similar limitations affect low-power IoT devices and bandwidth- or energy-constrained terrestrial networks, where PQ authentication may restrict devices to Category 1 security or prevent ambient-powered endpoints from supporting PQ authentication altogether. This paper investigates an alternative cryptographic framework that replaces PQ digital certificates with shared secret keys (SSKs). The framework leverages shared-secret ecosystems that do not rely on asymmetric key distribution, such as 5G/6G, and combines a Key Distribution Center (KDC) (e.g., Kerberos) with a preshared-key PQ handshake (e.g., DTLS-PSK) and ephemeral PQ key establishment (e.g., ML-KEM). Compared with certificate-based PQ authentication (e.g., ML-DSA), the proposed approach reduces handshake bandwidth, endpoint RAM, computation time, and energy use while preserving PQ-secure AEAD, including forward secrecy and replay resistance. Applications include NTN-based key rotation and management, uncrewed aerial vehicle (UAV) command-and-control systems, embedded medical sensors, and supply-chain monitoring and asset-tracking platforms.

DOI: 10.48550/arxiv.2607.23007

Related papers

POST-QUANTUM CRYPTOGRAPHY FOR SECURE 5G AND IOT: LATTICE-BASED ENCRYPTION SCHEMES

M Poomani, Bikash Chandra Saha

The impending advent of cryptographically relevant quantum computers threatens classical public-key primitives that underpin 5G and IoT security, including key exchange, authentication, and device onboarding. Ultra-dense networks, constrained endpoints, and long device lifetimes heighten exposure to “harvest-now, decrypt-later” risks. Mobile operators and IoT platform providers need migration ready cryptography that fits radio-access latency budgets, scales to billions of low-power nodes, and integrates cleanly with 3GPP and IETF protocols without degrading quality of service. Many post quantum options impose prohibitive bandwidth and compute costs or lack deployment guidance tuned to network slices and massive machine-type communications. We propose a lattice-based encryption and key-encapsulation framework grounded in Module-LWE/LWR assumptions. The design pairs an IND-CCA-secure KEM for control plane bootstrapping with lightweight AEAD for user-plane data, delivered through a hybrid handshake combining classical ECDH with a post-quantum KEM to ensure continuity during transition. Parameter tiers align with eMBB, URLLC, and mMTC device classes. Implementation emphasizes constant-time polynomial arithmetic, NTT-accelerated convolution, centered-binomial noise sampling, public-key compression, and stateless hash-based signatures for attestation. A gNB-assisted enrollment workflow and session-key rotation via 5G NAS/RRC are specified. Analytical modeling and prototype measurements indicate sub-millisecond encapsulation on ARM Cortex-M33 microcontrollers and ~1.5 ms on RAN baseband paths, while handshake message growth remains within existing NAS and RRC budgets. In ns-3 simulations of dense mMTC topologies, the hybrid handshake achieves >99.99% success under 1% packet loss, and energy profiling shows <5% battery impact for weekly rekeying. Security analysis demonstrates resistance to known lattice attacks at NIST Levels 3–5, forward secrecy via ephemeral KEMs, downgrade resistance through authenticated algorithm negotiation, and post compromise security with frequent rekeying.

ICTACT Journal on Communication TechnologySep 1, 20250 citations

Lightweight Post-Quantum Cryptography for Resource-Constrained Edge Devices

Thakur Sai Kumari, Ramya Perumal, K. Rajkumar +3 more

Quantum computing is also posing a serious challenge to the classical cryptographic algorithms like RSA and ECC as they have vulnerability to quantum algorithms such as Shor and Grover. This is a serious problem to Internet of Things (IoT) and edge computing systems, where billions of devices work with strict resource constraints in processing power, memory and energy. To resolve this, we are introducing a minimal postquantum cryptography model to be used in edge platforms with constraints on their resources. This framework combines fierce encapsulation of key (Kyber512) on a lattice with traditional ECDH in a hybrid system of key establishment, along with the Ascon AEAD encryption algorithm to provide effective data hiding and integrity provision. Furthermore, rekeying and forward secrecy on a lightweight basis is possible to reconfigure a layer with negligible overhead on a secure transmission with forward secrecy. The experimental data with ARM Cortex-M and RISC-V architectures and 128-bit post-quantum security has shown that the proposed system can reduce the latency by up to 30 percent and the energy usage by up to 35 percent and considerably better throughput than PQC-only implementations. These findings validate the fact that hybrid PQC solutions have the potential to provide high-resistance quantum with minimal overhead and thus are best suited to IoT and edge applications. The paper offers a viable and extensible security design in conformance with the NIST PQC and IETF migration policies, which can support secure communication in the post-quantum era.

IEEE International Conference on ICT in Business Industry & Government (ICTBIG)Dec 12, 20250 citations

Post-Quantum SIM-Less Authentication: Scalable and Secure Solutions for FutureG IoT Networks

Abhisek Kumar Jha, SeyedMohammad Kashani, Sang Wu Kim +2 more

Current cellular authentication mechanisms rely primarily on SIM-based Authentication and Key Agreement (AKA), which have scaled successfully worldwide but face challenges as the Internet of Things (IoT) grows to billions of devices. SIM provisioning and lifecycle management become increasingly costly, while reliance on long-term symmetric keys limits revocation flexibility and cross-operator support. To address these issues, we propose a SIM-less, certificate-based authentication framework that integrates Public Key Infrastructure (PKI) with post-quantum cryptography (PQC). Specifically, the framework employs Kyber for key encapsulation and Dilithium for digital signatures, providing quantum-resistant protection for future networks. A key challenge is the computational overhead of PQC on constrained IoT devices; we address this by offloading cryptographic operations to trusted edge servers, whose integrity is validated using attestation mechanisms such as Trusted Platform Modules (TPMs) or secure enclaves. We implement and evaluate the framework in a simulated FutureG environment, comparing IoT-only execution against edge-assisted configurations. Results show that edge offloading reduces TLS handshake latency by up to 96% while maintaining minimal resource usage on devices. These findings demonstrate that PQC-enabled PKI, combined with edge-assisted execution, offers a scalable and practical complement to SIM/AKA for secure and quantum-resilient authentication in FutureG IoT deployments.

IEEE Military Communications Conference (MILCOM)Oct 6, 20251 citation

Toward Quantum-Safe 6G: Experimental Evaluation of Post-Quantum Cryptography Techniques

Ananya Kudaloor, Adnan Aijaz

6G networks will require quantum-secure cryptography deployed across core infrastructure, edge nodes, resource-constrained IoT devices. Although post-quantum cryptographic (PQC) algorithms have been standardized by NIST, their practical deployability in bandwidth and latency limited wireless systems remains unclear. This paper presents a practical evaluation of NIST selected PQC schemes, including ML-KEM (Kyber), ML-DSA (Dilithium), and Falcon. Benchmarks conducted with OpenSSL and the OQS provider on heterogeneous platforms show that while computational performance is acceptable, ciphertext and signature size expansion significantly impact handshake reliability and bandwidth efficiency, particularly at the network edge. The results highlight key system-level trade-offs and motivate the need for PQC optimization and deployment-aware design for future quantum-secure 6G networks.

arXiv:2605.06881May 7, 20260 citations

Quantum-Resistant Cryptography for Secure IoT Communication Systems

Aakash S, Kalish S, Nivetha S

The rapid expansion of Internet of Things (IoT) ecosystems has increased the need for communication mechanisms that can remain secure against emerging computational threats. Conventional asymmetric cryptographic schemes, including RSA and Elliptic Curve Cryptography (ECC), are vulnerable to advances in quantum computing due to the ability of Shor's algorithm to undermine their underlying mathematical assumptions. To address these challenges, this paper presents PQ-IoT SecureCom, a quantum-resistant communication framework built using NIST-standardized post-quantum cryptographic primitives. The proposed framework employs ML-KEM (derived from Kyber) for secure key encapsulation and ML-DSA (derived from Dilithium) for digital authentication, combined with AESGCM to ensure data confidentiality and integrity. Additional security mechanisms, including PQC-based device certification, periodic session key updates, and nonce-based timestamp validation, are incorporated to mitigate replay and impersonation attacks. The framework also supports a hybrid operational mode that enables performance comparison between classical and postquantum cryptographic schemes. System behavior is monitored using a real-time dashboard that records cryptographic overhead, communication metrics, and detected security events. Experimental evaluation shows that ML-KEM and ML-DSA significantly enhance security while introducing computational overhead that remains acceptable for contemporary IoT devices. Through automated attack simulations and detailed event logging, PQ-IoT SecureCom demonstrates the practical feasibility of deploying scalable post-quantum security in IoT communication systems.

International Conference on Air Defense and Security (ICADS)Feb 12, 20261 citation

Post-Quantum Cryptography Based Authentication Framework for Next Generation Networks

Gauri Agarwal, Dr Gaurav Agarwal

The emergence of quantum computing is expected to break many conventional cryptographic algorithms currently used for authentication and secure communication. Existing security mechanisms in Next Generation Networks (NGNs), including 5G, IoT, smart healthcare, and cloud-based systems, are increasingly vulnerable to future quantum attacks. This research presents a lightweight and efficient Post-Quantum Cryptography (PQC) based authentication framework specifically designed for next generation network environments. The proposed framework combines quantum-resistant cryptographic techniques with optimized authentication procedures to provide secure identity verification, confidential communication, and attack resistance with minimal computational complexity. The model emphasizes reduced overhead, faster authentication response, and scalability for resource-constrained devices. Security analysis shows that the framework can effectively defend against replay attacks, impersonation attacks, session hijacking, and quantum-based cryptanalytic threats. Experimental evaluation indicates that the proposed approach achieves improved security performance while maintaining low latency and reduced resource consumption, making it suitable for practical deployment in future intelligent communication networks.

Iconic Research and Engineering JournalsJun 9, 20260 citations